Avira findet ständig TR/Patched.Ren.Gen' [trojan]

Virussammlen · 11.06.2014, 17:48

Hallo liebe Community

ich habe jetzt schon seit längerer Zeit das Problem das Avira diesen Virus findet. TR/Patched.Ren.Gen' [trojan]. Im Internet habe ich herausgefunden das dieser Gefährlich ist. Wie bekomme ich den nun los?

Ich habe mäßig Ahnung von Computern. Leichtere probleme kann ich schon lösen. Aber hierbei bin ich überfordert.

Es wäre super nett wenn Ihr mir helfen könnten.

cosinus · 11.06.2014, 18:58

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Virussammlen · 11.06.2014, 19:19

Code:

ATTFilter

Exportierte Ereignisse:

11.06.2014 17:52 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

11.06.2014 17:46 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

11.06.2014 16:05 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

10.06.2014 18:38 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

10.06.2014 17:55 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

10.06.2014 17:47 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

10.06.2014 17:47 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

10.06.2014 17:47 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

10.06.2014 17:47 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

09.06.2014 17:47 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

09.06.2014 17:40 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

09.06.2014 17:39 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 18:25 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 17:16 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 17:14 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 05:54 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 04:33 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 04:15 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 04:04 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 03:53 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 03:43 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 03:23 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 03:13 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 02:24 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 02:16 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 02:13 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 02:04 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 02:03 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 01:54 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 01:53 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 00:53 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 00:43 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

08.06.2014 00:33 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 23:46 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 23:43 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 23:14 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 22:53 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 22:43 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 22:24 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 22:23 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 22:03 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 21:14 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 21:03 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 20:53 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 20:03 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 19:13 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 18:53 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 18:35 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 18:13 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 17:53 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 17:20 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 17:19 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

07.06.2014 13:32 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

06.06.2014 19:16 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

06.06.2014 19:16 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

05.06.2014 17:50 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

05.06.2014 17:49 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

05.06.2014 17:49 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

05.06.2014 17:49 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

04.06.2014 21:50 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

04.06.2014 19:27 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

04.06.2014 19:27 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

03.06.2014 17:11 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

03.06.2014 17:08 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

03.06.2014 17:08 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

02.06.2014 18:23 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

02.06.2014 18:22 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

02.06.2014 18:22 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

01.06.2014 22:58 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

01.06.2014 18:25 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

01.06.2014 18:24 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

01.06.2014 12:44 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

31.05.2014 17:14 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

30.05.2014 16:46 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

30.05.2014 16:35 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp00011f37'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

26.05.2014 18:35 [System-Scanner] Malware gefunden
      Die Datei 'C:\Windows\Temp\7d636c21\settingsmanagersetup.exe'
      enthielt einen Virus oder unerwünschtes Programm 'Adware/Kraddare.P.11' 
      [adware].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '54adff96.qua' 
      verschoben!

26.05.2014 15:52 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Windows\Temp\7d636c21\settingsmanagersetup.exe'
      wurde ein Virus oder unerwünschtes Programm 'ADWARE/Kraddare.P.11' [adware] 
      gefunden.
      Ausgeführte Aktion: Übergeben an Scanner

26.05.2014 15:51 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Windows\Temp\7d636c21\settingsmanagersetup.exe'
      wurde ein Virus oder unerwünschtes Programm 'ADWARE/Kraddare.P.11' [adware] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

22.05.2014 17:01 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\Windows\Temp\bc08daac-e87c-4573-8255-f0e4e742282e\tmp00005633\tmp0000d242'
      wurde ein Virus oder unerwünschtes Programm 'TR/Patched.Ren.Gen' [trojan] 
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

cosinus · 11.06.2014, 20:04

Ok und weiter? Wo sind die anderen Logs von FRST?

Virussammlen · 12.06.2014, 19:22

Code:

ATTFilter

==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe AIR (Version: 1.5.3.9130 - Adobe Systems Inc.) Hidden
Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 11 (HKLM\...\Adobe Shockwave Player) (Version: 11 - Adobe Systems, Inc.)
Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audials (HKLM\...\{942EDCE4-79EE-409E-9E7C-6EC236C037AC}) (Version: 10.3.34300.0 - Audials AG)
AVG SafeGuard toolbar (HKLM\...\AVG SafeGuard toolbar) (Version: 18.1.7.598 - AVG Technologies)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Avira SearchFree Toolbar plus Web Protection Updater (HKCU\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.4.37268 - Ask.com) <==== ATTENTION
Battlefield 3™ (HKLM\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM\...\Battlelog Web Plugins) (Version: 2.1.7 - EA Digital Illusions CE AB)
Bonjour (HKLM\...\{2A981294-F14C-4F0F-9627-D793270922F8}) (Version: 2.0.4.0 - Apple Inc.)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Corel MediaOne (HKLM\...\{A062A15F-9CAC-4B88-98DF-87628A0BD721}) (Version: 2.00.0000 - Corel Corporation)
CorelDRAW Essential Edition 3 (HKLM\...\_{ADDBE07D-95B8-4789-9C76-187FFF9624B4}) (Version:  - Corel Corporation)
CorelDRAW Essential Edition 3 (Version: 3.0 - Corel Corporation) Hidden
CyberLink MediaShow (HKLM\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 4.1.2019 - CyberLink Corp.)
CyberLink MediaShow (Version: 4.1.2019 - CyberLink Corp.) Hidden
CyberLink PhotoNow (HKLM\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.5203 - CyberLink Corp.)
CyberLink PhotoNow (Version: 1.1.5203 - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.2209a - CyberLink Corp.)
CyberLink PowerDirector (Version: 7.0.2209a - CyberLink Corp.) Hidden
CyberLink PowerDVD (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 7.0.3118.0 - PowerDVDCorp.)
CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.1013 - CyberLink Corp.)
CyberLink PowerProducer (Version: 5.1013 - CyberLink Corp.) Hidden
CyberLink TV Enhance (HKLM\...\{E4C891D6-6844-41B8-86E8-633CACCC644F}) (Version: 2.0.5814 - CyberLink Corp.)
DE (Version: 3.0 - Corel Corporation) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version:  - Microsoft)
DJ Control Instinct (HKLM\...\{931FD350-D575-47FE-A741-9517C4DDDA10}) (Version: 1.00.0000 - Guillemot)
DJUCED 18° (HKLM\...\{34F730A3-77BA-4741-A02A-D40762FEF274}) (Version: 1.0.91 - Guillemot)
ESN Sonar (HKLM\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
F1 2012 (HKLM\...\Steam App 208500) (Version:  - Codemasters Birmingham)
Fraps (remove only) (HKLM\...\Fraps) (Version:  - )
Free YouTube Download version 3.2.35.514 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.35.514 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.11.32.918 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.32.918 - DVDVideoSoft Ltd.)
GIANTS Editor 5.0.1 (HKLM\...\giants_editor_5.0.1_is1) (Version: 5.0.1 - GIANTS Software GmbH)
Google Chrome (HKLM\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Desktop (HKLM\...\Google Desktop) (Version: 5.8.0809.23506 - Google)
Google Drive (HKLM\...\{418BAAD1-754D-48B4-B078-46EF4F25AF42}) (Version: 1.15.6556.8063 - Google, Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden
Hercules DJ Products Series drivers (HKLM\...\{33999F1F-EA46-4E55-A239-1BA803235396}) (Version: 2.HDJS.2013 - Hercules)
ICQ7.7 (HKLM\...\{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}) (Version: 7.7 - ICQ)
Intel(R) Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - )
Intel(R) Network Connections 13.2.8.0 (HKLM\...\PROSetDX) (Version: 13.2.8.0 - Intel)
Intel(R) Network Connections 13.2.8.0 (Version: 13.2.8.0 - Intel) Hidden
Java(TM) 6 Update 7 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160070}) (Version: 1.6.0.70 - Sun Microsystems, Inc.)
Landwirtschafts Simulator 2013 (HKLM\...\FarmingSimulator2013DE_is1) (Version: 1.0 - GIANTS Software)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
MCE Software Encoder 1.1 (HKLM\...\{7655E113-C306-11D9-A373-0050BAE317E1}) (Version: 1.1.0.1918 - CyberLink Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 Design Tools DEU (HKLM\...\{E32260E7-0B10-43C7-9B77-AB9F4184676D}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 DEU (HKLM\...\{159098AF-4EB8-4C10-B0C6-24CDA32B45F9}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft Visual Basic 2008 Express Edition - DEU (HKLM\...\Microsoft Visual Basic 2008 Express Edition - DEU) (Version:  - Microsoft Corporation)
Microsoft Visual Basic 2008 Express Edition - DEU (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework (HKLM\...\{C07B8BC4-AFD9-3AA4-BDF5-330A07591FDE}) (Version: 3.5.21022 - Microsoft)
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 (HKLM\...\{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}) (Version: 6.1.5288.17011 - Microsoft Corporation)
Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 29.0.1 (x86 de) (HKLM\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 8 Essentials (HKLM\...\{47948554-90C6-4AAC-8CFA-D23CE11C1031}) (Version: 8.3.124 - Nero AG)
neroxml (Version: 1.0.0 - Nero AG) Hidden
Norton Internet Security (HKLM\...\NIS) (Version: 21.3.0.12 - Symantec Corporation)
Notepad++ (HKLM\...\Notepad++) (Version: 5.7 - )
NVIDIA 3D Vision Controller-Treiber 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 301.42 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Grafiktreiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.12.0213 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.0213 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0213 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
OpenAL (HKLM\...\OpenAL) (Version:  - )
Origin (HKLM\...\Origin) (Version: 8.5.0.4550 - Electronic Arts, Inc.)
Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.3.3.6 - Pando Networks Inc.)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Ralink RT2870 Wireless LAN Card (HKLM\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.0.4.0 - Ralink)
Rapture3D 2.4.4 Game (HKLM\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version:  - Blue Ripple Sound)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM\...\{08B3869E-D282-424C-9AFC-870E04A4BA14}) (Version: 1.00.0000 - Rockstar Games)
Rockstar Games Social Club (HKLM\...\Rockstar Games Social Club) (Version: 1.0.6.1 - Rockstar Games)
SanDiskSecureAccess_Manager.exe (HKCU\...\@@__UNKNOWN__@@SanDiskSecureAccess_Manager.exe) (Version: 1.1.19755 - Gemalto N.V.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab CYRI (HKLM\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.11 - TeamSpeak Systems GmbH)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: 2.6.1f3_31223 - Unity Technologies ApS)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Update Manager (Version: 4.60 - Corel Corporation) Hidden
VC Runtimes MSI (Version: 9.0.21022 - Microsoft) Hidden
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
VirtualDJ Home FREE (HKLM\...\{A6AC699F-8315-40CA-8F70-E917494978AB}) (Version: 7.4 - Atomix Productions)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VO Package (HKLM\...\VOPackage) (Version: 1.0.0.0 - ) <==== ATTENTION
Winamp (HKLM\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live Fotogalerie (HKLM\...\{A1D08B90-AE1A-4885-AC29-731496FD397E}) (Version: 12.0.1347.0718 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live installer (HKLM\...\{7A7B0BF3-2F00-4F03-8A9B-6ABCC07B90C6}) (Version: 12.0.1471.1025 - Microsoft Corporation)
Windows Live Mail (HKLM\...\{82F2B38B-1426-443D-874C-AC25675E7BEB}) (Version: 12.0.1606.1023 - Microsoft Corporation)
Windows Live Messenger (HKLM\...\{2B091530-69AA-442E-AB09-39ED06B58220}) (Version: 8.5.1302.1018 - Microsoft Corporation)
Windows Live Writer (HKLM\...\{B8D42C3A-3CFF-4A8A-A7DA-4F44474D12C5}) (Version: 12.0.1370.0325 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
X10 Hardware(TM) (HKLM\...\X10Hardware) (Version:  - )

==================== Restore Points  =========================

19-05-2014 15:35:19 Geplanter Prüfpunkt
20-05-2014 13:35:36 Geplanter Prüfpunkt
21-05-2014 13:09:51 Geplanter Prüfpunkt
22-05-2014 13:37:24 Geplanter Prüfpunkt
23-05-2014 15:47:55 Geplanter Prüfpunkt
24-05-2014 15:40:54 Geplanter Prüfpunkt
25-05-2014 17:53:38 Geplanter Prüfpunkt
28-05-2014 21:35:05 Uniblue SpeedUpMyPC installation
28-05-2014 21:45:37 Windows Update
28-05-2014 21:50:12 Gerätetreiber-Paketinstallation: Check Point Software Technologies Ltd. Netzwerkdienst
30-05-2014 17:33:13 Geplanter Prüfpunkt
31-05-2014 09:29:43 Geplanter Prüfpunkt
31-05-2014 22:00:06 Geplanter Prüfpunkt
01-06-2014 11:39:44 Geplanter Prüfpunkt
02-06-2014 17:23:00 Geplanter Prüfpunkt
03-06-2014 14:08:15 Geplanter Prüfpunkt
04-06-2014 18:24:08 Geplanter Prüfpunkt
05-06-2014 17:21:37 Geplanter Prüfpunkt
06-06-2014 22:05:19 Geplanter Prüfpunkt
07-06-2014 13:33:24 Geplanter Prüfpunkt
08-06-2014 22:00:06 Geplanter Prüfpunkt
09-06-2014 10:36:12 Geplanter Prüfpunkt
10-06-2014 17:38:22 Geplanter Prüfpunkt
11-06-2014 16:29:37 ICQ Sparberater wird entfernt
11-06-2014 16:36:01 Entfernt L.A. Noire

==================== Hosts content: ==========================

2011-10-11 19:25 - 2011-10-11 19:25 - 00000822 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0DB6773B-7A98-43C7-986F-1DDB597485BC} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {1E41F42F-9D02-40DC-B01F-1235B099AD7A} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files\Norton Identity Safe\Engine\2014.6.0.27\SymErr.exe
Task: {29FD8E40-D724-46E0-9047-61C4A32C6C51} - System32\Tasks\AVG-Secure-Search-Update_0414c_rel => C:\Program Files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe [2014-04-21] ()
Task: {31A4E6B1-EE21-44D4-A3C0-7062ABAD8A41} - System32\Tasks\e5dbc9c0 => C:\Users\Jonas\AppData\Local\Temp\\setup2921986496.exe <==== ATTENTION
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3509F1AF-D69D-4763-A4F7-E974C2E225AA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-13] (Google Inc.)
Task: {38E87678-E0F8-481E-8098-5AF691D47132} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-13] (Google Inc.)
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {5897A6AA-F51E-4EB4-B88C-CA0BAF29F638} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files\Norton Identity Safe\Engine\2014.6.0.27\SymErr.exe
Task: {63B8AFC4-1C8D-4240-86F7-DFAFD06C8732} - System32\Tasks\78b05dc0 => C:\Users\Jonas\AppData\Local\Temp\\setup576504256.exe <==== ATTENTION
Task: {6A8E06AD-F060-43EE-BD48-6E5D55F255E4} - System32\Tasks\422891c0 => C:\Users\Jonas\AppData\Local\Temp\\setup222275008.exe <==== ATTENTION
Task: {7905D61F-4B20-4470-88A6-82C9A2B7BCD4} - System32\Tasks\9b421c0 => C:\Users\Jonas\AppData\Local\Temp\\setup3616807360.exe <==== ATTENTION
Task: {8C447A04-7DB0-491F-83A0-F63C2FF3D779} - System32\Tasks\304279c0 => C:\Users\Jonas\AppData\Local\Temp\\setup4216950208.exe <==== ATTENTION
Task: {95CF5A84-D231-47E0-BED2-AE15D0D3E4E8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {B1F8338F-D0ED-4613-953F-FD5A8F4CA66D} - System32\Tasks\51faa1c0 => C:\Users\Jonas\AppData\Local\Temp\\setup581139904.exe <==== ATTENTION
Task: {B630FFC3-DFBA-47C5-97F0-780EA2D8CF67} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: {D690736B-6FB6-4590-BD28-0E5600F83C39} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {E1000793-99EA-42A1-9089-3830995BF55F} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {E70F0140-9436-49C8-8E34-1B86E53EAD10} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Internet Security\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation)
Task: {F8D7E2FC-CE11-4E58-8071-93EB4B5643C6} - System32\Tasks\AVG-Secure-Search-Update_0414c_rmv => C:\Program Files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe [2014-04-21] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rel.job => C:\Program Files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rmv.job => C:\Program Files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job => C:\Windows\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2013-08-31 15:04 - 2013-08-31 16:09 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe
2007-06-05 13:20 - 2007-06-05 13:20 - 00177704 _____ () C:\Windows\system32\PSIService.exe
2008-10-17 17:14 - 2008-10-14 02:53 - 00241734 _____ () C:\Program Files\Cyberlink\Shared files\RichVideo.exe
2008-10-17 17:15 - 2008-10-14 02:52 - 00376937 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVECapSvc.exe
2008-10-17 17:15 - 2008-10-14 02:52 - 00094208 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\CLSchRecordMonitor.dll
2008-10-17 17:15 - 2008-10-14 02:52 - 00299118 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\CLCapEngine.dll
2008-10-17 17:15 - 2008-10-14 02:52 - 00032768 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\CLCapSvcps.dll
2014-06-02 17:21 - 2014-06-02 17:21 - 00159768 _____ () C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\loggingserver.exe
2014-06-02 17:21 - 2014-06-02 17:21 - 00519704 _____ () C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\log4cplusU.dll
2008-10-17 17:15 - 2008-10-14 02:52 - 00184423 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVESched.exe
2008-10-17 17:15 - 2008-10-14 02:52 - 00127080 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\CLSchMgr.dll
2008-10-17 17:15 - 2008-10-14 02:52 - 00339968 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\CLTinyDB.dll
2014-04-21 00:34 - 2014-04-21 00:34 - 02725912 _____ () C:\Program Files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe
2010-04-07 15:35 - 2010-04-07 15:35 - 00034816 _____ () C:\Program Files\Google\Google Desktop Search\gzlib.dll
2014-04-04 21:27 - 2014-06-02 17:21 - 02567192 _____ () C:\Program Files\AVG SafeGuard toolbar\vprot.exe
2011-04-27 21:26 - 2011-04-27 21:26 - 02937528 _____ () C:\Program Files\Pando Networks\Media Booster\PMB.exe
2012-07-05 17:03 - 2014-05-15 13:52 - 36966968 _____ () C:\Users\Jonas\AppData\Roaming\Spotify\Data\libcef.dll
2013-05-22 20:50 - 2013-05-22 20:50 - 00400704 _____ () C:\Users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
2013-10-07 10:01 - 2013-10-07 10:01 - 00529160 _____ () C:\Program Files\Audials\Audials 10\AudialsNotifier.exe
2014-02-13 16:49 - 2014-02-13 16:49 - 00585216 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\ManagedInterfaces\95bf1ed8678b7a4d9178eca038345ce6\ManagedInterfaces.ni.dll
2014-05-15 15:45 - 2014-05-15 15:45 - 02529792 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\AudialsComponents\045f3d8250652f7245b40486b049eac4\AudialsComponents.ni.dll
2014-02-13 16:49 - 2014-02-13 16:49 - 00043008 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\jData\287287d952549367bb70eb1a84833a7a\jData.ni.dll
2014-02-13 16:50 - 2014-02-13 16:50 - 00267264 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\Utils\54bc188966142bb4dde657534af05941\Utils.ni.dll
2014-05-15 15:45 - 2014-05-15 15:45 - 00223744 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\SmartThreadPool\98743fa48607d78efd56f2b404723182\SmartThreadPool.ni.dll
2014-02-13 16:50 - 2014-02-13 16:50 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\fastJSON\eea3147eff3539772d1f2708433d22b4\fastJSON.ni.dll
2014-02-13 16:50 - 2014-02-13 16:50 - 00480256 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\RSControls\b9ad33601268671c242639b8ac8074f1\RSControls.ni.dll
2014-02-13 16:50 - 2014-02-13 16:50 - 00073216 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\CrashHandlerNET\ec5bd9f5d46235b0f0f823afdb1269d5\CrashHandlerNET.ni.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00046080 _____ () C:\Program Files\Audials\Audials 10\boost_thread-vc90-mt-1_39.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00045056 _____ () C:\Program Files\Audials\Audials 10\boost_date_time-vc90-mt-1_39.dll
2013-10-07 10:02 - 2013-10-07 10:02 - 00545032 _____ () C:\Program Files\Audials\Audials 10\StreamingClient.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00012800 _____ () C:\Program Files\Audials\Audials 10\boost_system-vc90-mt-1_39.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00068360 _____ () C:\Program Files\Audials\Audials 10\CrashRpt.dll
2013-10-07 10:02 - 2013-10-07 10:02 - 00409352 _____ () C:\Program Files\Audials\Audials 10\SQLite3.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00614912 _____ () C:\Program Files\Audials\Audials 10\boost_regex-vc90-mt-1_39.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00249096 _____ () C:\Program Files\Audials\Audials 10\de-DE\AudialsNotifier.resources.dll
2012-02-15 01:05 - 2012-02-15 01:37 - 11796096 _____ () C:\Users\Jonas\AppData\Roaming\SanDisk\My Vaults\dmBackup.dll
2013-09-24 15:24 - 2014-05-15 13:52 - 00598072 _____ () C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2013-09-24 15:24 - 2014-05-15 13:52 - 00886840 _____ () C:\Users\Jonas\AppData\Roaming\Spotify\Data\libglesv2.dll
2013-09-24 15:24 - 2014-05-15 13:52 - 00108600 _____ () C:\Users\Jonas\AppData\Roaming\Spotify\Data\libegl.dll
2014-05-14 17:36 - 2014-05-14 17:36 - 16361136 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll
2013-10-22 22:37 - 2014-05-10 09:12 - 03839088 _____ () C:\program files\mozilla firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============

Name: DCP-150C        
Description: DCP-150C        
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Brother 
Service: WUDFRd
Problem: : Windows cannot initialize the device driver for this hardware. (Code 37)
Resolution: The driver returned failure from its DriverEntry routine. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.

Name: Flash HS-CF
Description: Flash HS-CF
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows cannot initialize the device driver for this hardware. (Code 37)
Resolution: The driver returned failure from its DriverEntry routine. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.

Name: Flash HS-MS/SD
Description: Flash HS-MS/SD
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows cannot initialize the device driver for this hardware. (Code 37)
Resolution: The driver returned failure from its DriverEntry routine. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.

Name: Flash HS-SM
Description: Flash HS-SM
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows cannot initialize the device driver for this hardware. (Code 37)
Resolution: The driver returned failure from its DriverEntry routine. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/12/2014 07:37:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/12/2014 07:35:52 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (06/11/2014 06:24:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/11/2014 06:23:04 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (06/11/2014 06:17:03 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (06/11/2014 06:17:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/11/2014 06:16:45 PM) (Source: EventSystem) (EventID: 4609) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (06/11/2014 03:39:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/11/2014 03:38:08 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (06/11/2014 03:35:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (06/12/2014 07:43:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Avira Browser-Schutz101Neustart des Diensts

Error: (06/12/2014 07:38:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: NVIDIA Update Service Daemon%%1069

Error: (06/12/2014 07:38:38 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: nvUpdatusService.\UpdatusUser%%1330

Error: (06/12/2014 07:37:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: ZoneAlarm Privacy Service%%3

Error: (06/12/2014 07:37:07 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Funktionssuche-Ressourcenveröffentlichung%%2147942593

Error: (06/12/2014 07:37:07 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Windows Driver Foundation - Benutzermodus-Treiberframework%%193

Error: (06/11/2014 09:12:30 PM) (Source: Bulk) (EventID: 23) (User: )
Description: Device  failed cont reader callback, status:status:c0000001, usbsStatus:0.

Error: (06/11/2014 06:27:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: NVIDIA Update Service Daemon%%1069

Error: (06/11/2014 06:27:55 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: nvUpdatusService.\UpdatusUser%%1330

Error: (06/11/2014 06:24:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: ZoneAlarm Privacy Service%%3


Microsoft Office Sessions:
=========================
Error: (06/12/2014 07:37:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/12/2014 07:35:52 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Program Files\HomeCinema\MediaShow4\MediaShow.exe.ManifestC:\Program Files\HomeCinema\MediaShow4\MediaShow.exe.Manifest0

Error: (06/11/2014 06:24:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/11/2014 06:23:04 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Program Files\HomeCinema\MediaShow4\MediaShow.exe.ManifestC:\Program Files\HomeCinema\MediaShow4\MediaShow.exe.Manifest0

Error: (06/11/2014 06:17:03 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Program Files\HomeCinema\MediaShow4\MediaShow.exe.ManifestC:\Program Files\HomeCinema\MediaShow4\MediaShow.exe.Manifest0

Error: (06/11/2014 06:17:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/11/2014 06:16:45 PM) (Source: EventSystem) (EventID: 4609) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (06/11/2014 03:39:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/11/2014 03:38:08 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Program Files\HomeCinema\MediaShow4\MediaShow.exe.ManifestC:\Program Files\HomeCinema\MediaShow4\MediaShow.exe.Manifest0

Error: (06/11/2014 03:35:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2014-06-12 20:02:37.923
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-12 20:02:37.584
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-12 20:02:37.245
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-12 20:02:36.902
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-12 20:02:16.616
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-12 20:02:16.234
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-12 20:02:15.844
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-12 20:02:15.395
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-12 20:01:48.065
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140606.001\BHDrvx86.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 62%
Total physical RAM: 3325.27 MB
Available physical RAM: 1249.98 MB
Total Pagefile: 6852.52 MB
Available Pagefile: 4430.84 MB
Total Virtual: 2047.88 MB
Available Virtual: 1911.22 MB

==================== Drives ================================

Drive c: (BOOT) (Fixed) (Total:911.51 GB) (Free:620.22 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:19.99 GB) (Free:7.78 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: D658CF8B)
Partition 1: (Active) - (Size=912 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)

==================== End Of Log ============================

Code:

ATTFilter

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hercules®) C:\Program Files\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\21.3.0.12\nis.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
() C:\Windows\System32\PnkBstrA.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo.exe
() C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVECapSvc.exe
(AVG Secure Search) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\ToolbarUpdater.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\loggingserver.exe
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
() C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVESched.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\21.3.0.12\nis.exe
() C:\Program Files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(CyberLink Corp.) C:\Program Files\HomeCinema\TV Enhance\TVEService.exe
(Google) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hercules®) C:\Program Files\Guillemot\HDJTray\HDJSeries2TrayBar.exe
() C:\Program Files\AVG SafeGuard toolbar\vprot.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
() C:\Program Files\Pando Networks\Media Booster\PMB.exe
(ICQ, LLC.) C:\Program Files\ICQ7.7\ICQ.exe
(Spotify Ltd) C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Jonas\AppData\Roaming\Spotify\spotify.exe
() C:\Users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
() C:\Program Files\Audials\Audials 10\AudialsNotifier.exe
(Gemalto N.V.) C:\Users\Jonas\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Hercules®) C:\Program Files\Hercules\Audio\DJ Console Series\HDJSeriesCPL.exe
(Hercules®) C:\Program Files\Hercules\Audio\DJ Console Series\cpl2\HDJSeries2CPL.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Mozilla Corporation) C:\Program Files\mozilla firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\mozilla firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-10-09] (Intel Corporation)
HKLM\...\Run: [TVEService] => C:\Program Files\HomeCinema\TV Enhance\TVEService.exe [180224 2008-10-14] (CyberLink Corp.)
HKLM\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-04-07] (Google)
HKLM\...\Run: [Google EULA Launcher] => C:\Program Files\Google\Google EULA\GoogleEULALauncher.exe [20480 2008-10-14] (Google)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-09] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [Hercules DJ Series TrayAgent] => C:\Program Files\Guillemot\HDJTray\HDJSeries2TrayBar.exe [2914640 2013-05-10] (Hercules®)
HKLM\...\Run: [vProt] => C:\Program Files\AVG SafeGuard toolbar\vprot.exe [2567192 2014-06-02] ()
HKLM\...\Run: [Windows Mobile-based device management] => C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Corporation)
HKU\.DEFAULT\...\Run: [Picasa Media Detector] => C:\Program Files\Picasa2\PicasaMediaDetector.exe
HKU\.DEFAULT\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [EA Core] => "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Pando Media Booster] => C:\Program Files\Pando Networks\Media Booster\PMB.exe [2937528 2011-04-27] ()
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [ICQ] => C:\Program Files\ICQ7.7\ICQ.exe [127040 2012-01-23] (ICQ, LLC.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Spotify Web Helper] => C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [GoogleChromeAutoLaunch_7F41DE71C33EFD8EC5D292FBB70B0F95] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-05-14] (Google Inc.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Steam] => C:\Program Files\Steam\Steam.exe [1754816 2014-05-29] (Valve Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Spotify] => C:\Users\Jonas\AppData\Roaming\Spotify\Spotify.exe [6170168 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [AudialsNotifier] => C:\Program Files\Audials\Audials 10\AudialsNotifier.exe [529160 2013-10-07] ()
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-04-07] (Google Inc.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [SanDiskSecureAccess_Manager.exe] => C:\Users\Jonas\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2012-02-15] (Gemalto N.V.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-04-07] (Google Inc.)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [EA Core] => "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [Pando Media Booster] => C:\Program Files\Pando Networks\Media Booster\PMB.exe [2937528 2011-04-27] ()
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [msnmsgr] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe [5724184 2007-10-18] (Microsoft Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [ICQ] => C:\Program Files\ICQ7.7\ICQ.exe [127040 2012-01-23] (ICQ, LLC.)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [EADM] => C:\Program Files\Origin\Origin.exe [3561816 2013-10-19] (Electronic Arts)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [Spotify Web Helper] => C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [GoogleChromeAutoLaunch_7F41DE71C33EFD8EC5D292FBB70B0F95] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-05-14] (Google Inc.)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [Steam] => C:\Program Files\Steam\Steam.exe [1754816 2014-05-29] (Valve Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [Spotify] => C:\Users\Jonas\AppData\Roaming\Spotify\Spotify.exe [6170168 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\UpdatusUser\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\Run: [AudialsNotifier] => C:\Program Files\Audials\Audials 11\AudialsNotifier.exe
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\system32\Macromed\Flash\FlashUtil32_11_9_900_117_Plugin.exe -update plugin
HKU\S-1-5-21-131767531-2465167464-222506596-1003\...\MountPoints2: {90ce7946-4eb2-11df-a07a-806e6f6e6963} - E:\cdstart.exe
IFEO: [Debugger] svchost.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1397056383&from=tugs&uid=WDCXWD10EACS-00D6B0_WD-WCAU4299203992039&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1397056383&from=tugs&uid=WDCXWD10EACS-00D6B0_WD-WCAU4299203992039&q={searchTerms}
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} -  No File
URLSearchHook: HKCU - &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll No File
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=122&itype=a&ver=12302&tm=307&src=ds&p={searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=122&itype=a&ver=12302&tm=307&src=ds&p={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP957BA9C9-E84D-4D2F-AE7A-1B1A537850C8&q={searchTerms}&SSPV=T21030_sp_ie
SearchScopes: HKCU - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = hxxp://www.crawler.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=60747
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-02-17&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {7DDDA458-C1B3-45B5-883F-E28C0CCBD7C7} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=6011d5fb00000000000000224311d4e5&r=849
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={702FA598-FCBA-428B-B17A-F83F500E1C6E}&mid=030a75b52d3447d08775d168c3223769-06ce4fc639803a2e3563922518183d8e94088cb9&lang=de&ds=cg011&coid=avgtbdiscg&cmpid=&pr=sa&d=2014-04-04 21:27:57&v=18.0.5.292&pid=safeguard&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=122&itype=a&ver=12302&tm=307&src=ds&p={searchTerms}
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=IDSSNAV&chn=retail&geo=DE&ver=2014&locale=de_DE&gct=sb&qsrc=2869
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - {BB931CA0-9B96-4877-92C7-D0C34E0B0E1B} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&mkt=de-de&FORM=IEFM&src=IE-SearchBox
SearchScopes: HKCU - {DAB8CA57-1A9D-491E-BEDD-3C6F665C0E37} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=1101d0e2-635d-4df6-ba10-768967ac778a&apn_sauid=580DFDB8-7B7E-4F1B-90CA-8E96B3E8947F
BHO: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll No File
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: No Name - {7E853D72-626A-48EC-A868-BA8D5E23E045} -  No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.7.598\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.7.598\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} -  No File
Toolbar: HKCU - &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} -  No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll No File
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.7\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\ngs0vmb4.Standard-Benutzer
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.7\\npsitesafety.dll No File
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/esnlaunch,version=2.1.7 - C:\Program Files\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin - C:\Program Files\Java\jre6\bin\dtplugin\npDeployJava1.dll No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Jonas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npPandoWebInst.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\adawaretb.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-10-22]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-10-22]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-10-22]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.7.598
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.7.598 [2014-06-02]
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2014-05-02]
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []

Chrome: 
=======
CHR StartupUrls: "hxxp://istart.webssearches.com/?type=hp&ts=1397056383&from=tugs&uid=WDCXWD10EACS-00D6B0_WD-WCAU4299203992039"
CHR DefaultSearchKeyword: webssearches
CHR DefaultSearchProvider: webssearches
CHR Extension: (AVG SafeGuard) - C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2014-05-06]
CHR Extension: (DvdVideoSoft Free Youtube Download) - C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2012-12-19]
CHR Extension: (Google Wallet) - C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]
CHR Extension: (ICQ Sparberater) - C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmpllndkedbnmonoomepeeglghdelffo [2012-09-10]
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-24]
CHR HKLM\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - C:\Program Files\Lavasoft\AdAware SecureSearch Toolbar\chrome-newtab-search.crx [2014-05-24]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Jonas\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-09-27]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1039440 2014-06-09] (Avira Operations GmbH & Co. KG)
S3 GoogleDesktopManager-110309-193829; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-04-07] (Google)
R2 HerculesDJControlMP3; C:\Program Files\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE [37376 2013-05-21] (Hercules®) [File not signed]
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NIS; C:\Program Files\Norton Internet Security\Engine\21.3.0.12\NIS.exe [276376 2014-05-11] (Symantec Corporation)
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-08-31] ()
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [241734 2008-10-14] () [File not signed]
R2 TVECapSvc; C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVECapSvc.exe [376937 2008-10-14] () [File not signed]
R2 TVESched; C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVESched.exe [184423 2008-10-14] () [File not signed]
S3 usnjsvc; C:\Program Files\Windows Live\Messenger\usnsvc.exe [98328 2007-10-18] (Microsoft Corporation)
R2 vToolbarUpdater18.1.7; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\ToolbarUpdater.exe [1808408 2014-06-02] (AVG Secure Search)
S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation) [File not signed]
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2001-11-12] (X10) [File not signed]
S2 ZAPrivacyService; "C:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe" [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-06-09] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42784 2014-06-02] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-10] (Avira Operations GmbH & Co. KG)
R1 BHDrvx86; C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140606.001\BHDrvx86.sys [1101616 2014-05-10] (Symantec Corporation)
S3 Bulk; C:\Windows\System32\Drivers\HDJBulk.sys [220464 2013-05-21] (© Guillemot R&D, 2013. All rights reserved.)
R1 ccSet_NIS; C:\Windows\system32\drivers\NIS\1503000.00C\ccSetx86.sys [127064 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [377648 2014-06-11] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [109872 2014-06-11] (Symantec Corporation)
S3 HDJAsioK; C:\Windows\System32\Drivers\HDJAsioK.sys [273712 2013-05-21] (© Guillemot R&D, 2013. All rights reserved.)
R1 IDSVix86; C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140610.001\IDSvix86.sys [395992 2014-04-30] (Symantec Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-06-12] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140611.002\NAVENG.SYS [93272 2014-05-02] (Symantec Corporation)
R3 NAVEX15; C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140611.002\NAVEX15.SYS [1612376 2014-05-02] (Symantec Corporation)
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [645120 2008-08-21] (Ralink Technology Corp.)
R3 NxpCap; C:\Windows\System32\DRIVERS\NxpCap.sys [1332576 2008-09-25] (NXP Semiconductors Germany GmbH)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [22184 2013-10-07] (Audials AG)
R3 SRTSP; C:\Windows\System32\Drivers\NIS\1503000.00C\SRTSP.SYS [664280 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NIS\1503000.00C\SRTSPX.SYS [32344 2013-09-10] (Symantec Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R0 SymDS; C:\Windows\System32\drivers\NIS\1503000.00C\SYMDS.SYS [367704 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NIS\1503000.00C\SYMEFA.SYS [936152 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142936 2014-05-02] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NIS\1503000.00C\Ironx86.SYS [206936 2013-09-27] (Symantec Corporation)
R1 SYMTDIv; C:\Windows\System32\Drivers\NIS\1503000.00C\SYMTDIV.SYS [384728 2014-02-18] (Symantec Corporation)
R3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [39048 2013-06-27] (RapidSolution Software AG)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13976 2006-11-17] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
S3 cpuz135; \??\C:\Users\Jonas\AppData\Local\Temp\cpuz135\cpuz135_x32.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-12 20:01 - 2014-06-12 20:02 - 00034742 _____ () C:\Users\Jonas\Downloads\FRST.txt
2014-06-12 20:01 - 2014-06-12 20:01 - 00000000 ____D () C:\FRST
2014-06-12 19:52 - 2014-06-12 19:53 - 01073152 _____ (Farbar) C:\Users\Jonas\Downloads\FRST.exe
2014-06-11 21:05 - 2014-06-11 21:05 - 00000000 ____D () C:\Users\Jonas\Desktop\CD
2014-06-11 20:04 - 2014-06-11 20:21 - 00048682 _____ () C:\Users\Jonas\Documents\Ereignisse.txt
2014-06-11 17:57 - 2014-06-11 17:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Jonas\Downloads\SpyHunter-Installer.exe
2014-06-08 11:13 - 2014-06-08 11:14 - 12855384 _____ (Nullsoft, Inc.) C:\Users\Jonas\Downloads\winamp5666_full_de-de_b3516.exe
2014-06-02 17:21 - 2014-06-02 17:21 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-05-30 16:53 - 2014-05-30 16:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-30 16:53 - 2014-05-30 16:53 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-05-30 16:53 - 2014-05-12 07:55 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-30 16:53 - 2014-05-12 07:54 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-30 16:53 - 2014-05-12 07:54 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-28 23:46 - 2010-04-05 22:00 - 00221568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-05-28 23:35 - 2014-05-28 23:35 - 00000000 ____D () C:\ProgramData\CheckPoint
2014-05-18 12:52 - 2014-05-18 12:52 - 00000780 _____ () C:\Users\Jonas\Desktop\Winamp.lnk
2014-05-18 12:52 - 2014-05-18 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-18 12:51 - 2014-05-18 13:12 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\Winamp
2014-05-18 12:51 - 2014-05-18 12:55 - 00000000 ____D () C:\Program Files\Winamp
2014-05-15 14:11 - 2014-05-15 14:11 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-05-14 13:19 - 2014-03-25 15:26 - 11587584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 13:18 - 2014-05-05 21:31 - 06021120 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-14 13:18 - 2014-05-05 21:31 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-14 13:18 - 2014-05-05 20:47 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

==================== One Month Modified Files and Folders =======

2014-06-12 20:02 - 2014-06-12 20:01 - 00034742 _____ () C:\Users\Jonas\Downloads\FRST.txt
2014-06-12 20:02 - 2011-04-27 21:26 - 00000000 ____D () C:\Users\Jonas\AppData\Local\PMB Files
2014-06-12 20:02 - 2010-04-07 15:36 - 00000000 ____D () C:\Users\Jonas\AppData\Local\Temp
2014-06-12 20:01 - 2014-06-12 20:01 - 00000000 ____D () C:\FRST
2014-06-12 19:57 - 2010-04-13 13:57 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-12 19:54 - 2010-04-07 15:25 - 01514096 _____ () C:\Windows\WindowsUpdate.log
2014-06-12 19:53 - 2014-06-12 19:52 - 01073152 _____ (Farbar) C:\Users\Jonas\Downloads\FRST.exe
2014-06-12 19:43 - 2012-12-25 15:24 - 00000000 ____D () C:\Program Files\Steam
2014-06-12 19:43 - 2012-05-06 00:37 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\Spotify
2014-06-12 19:41 - 2014-04-10 15:25 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-12 19:37 - 2012-04-02 14:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-12 19:35 - 2014-04-21 00:34 - 00000362 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rmv.job
2014-06-12 19:35 - 2014-04-21 00:34 - 00000362 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rel.job
2014-06-12 19:35 - 2011-10-04 13:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-06-12 19:35 - 2010-04-13 13:57 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-12 19:35 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-12 19:35 - 2006-11-02 14:47 - 00003744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-12 19:35 - 2006-11-02 14:47 - 00003744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-11 21:13 - 2006-11-02 15:01 - 00032628 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-11 21:05 - 2014-06-11 21:05 - 00000000 ____D () C:\Users\Jonas\Desktop\CD
2014-06-11 20:21 - 2014-06-11 20:04 - 00048682 _____ () C:\Users\Jonas\Documents\Ereignisse.txt
2014-06-11 18:38 - 2010-04-17 15:29 - 00000000 ___RD () C:\Users\Jonas\Desktop\Zeug
2014-06-11 18:37 - 2011-12-24 20:28 - 00000000 ____D () C:\Program Files\Origin Games
2014-06-11 18:36 - 2011-07-02 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2014-06-11 18:36 - 2008-10-08 12:51 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-06-11 18:35 - 2010-10-18 11:15 - 00000000 ____D () C:\Program Files\Landwirtschafts Simulator 2011
2014-06-11 18:35 - 2010-04-23 13:09 - 00000000 ____D () C:\Users\Jonas\Documents\My Games
2014-06-11 17:58 - 2014-06-11 17:57 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Jonas\Downloads\SpyHunter-Installer.exe
2014-06-11 15:50 - 2010-04-27 18:20 - 00000000 ____D () C:\Users\Jonas\Desktop\Autobilder
2014-06-11 15:39 - 2011-05-31 15:33 - 00000000 ____D () C:\Users\Jonas\Desktop\Praktikumsmappe
2014-06-10 23:36 - 2008-01-21 09:16 - 01567488 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-10 21:55 - 2013-04-13 11:13 - 00049651 _____ () C:\Windows\setupact.log
2014-06-10 13:53 - 2012-12-25 15:25 - 00000000 ____D () C:\Program Files\Common Files\Steam
2014-06-10 13:49 - 2013-01-03 22:34 - 01208220 _____ () C:\Windows\PFRO.log
2014-06-09 21:31 - 2012-12-21 23:06 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-09 21:31 - 2012-12-21 23:06 - 00093528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-08 11:14 - 2014-06-08 11:13 - 12855384 _____ (Nullsoft, Inc.) C:\Users\Jonas\Downloads\winamp5666_full_de-de_b3516.exe
2014-06-02 21:51 - 2012-01-04 00:20 - 00000000 ____D () C:\Users\Jonas\Desktop\Technick
2014-06-02 21:51 - 2010-11-04 15:38 - 115415612 _____ () C:\Users\Jonas\Desktop\sampleModMap.zip
2014-06-02 21:11 - 2013-01-26 17:01 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-06-02 21:07 - 2012-07-05 17:03 - 00000000 ____D () C:\Users\Jonas\AppData\Local\Spotify
2014-06-02 17:22 - 2014-04-04 21:27 - 00003754 _____ () C:\Program Files\mozilla firefoxsafeguard-secure-search.xml
2014-06-02 17:21 - 2014-06-02 17:21 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-06-02 17:21 - 2014-04-04 21:27 - 00042784 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys
2014-06-02 17:21 - 2014-04-04 21:27 - 00000000 ____D () C:\Program Files\AVG SafeGuard toolbar
2014-05-30 17:21 - 2014-04-09 17:14 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\VOPackage
2014-05-30 16:53 - 2014-05-30 16:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-30 16:53 - 2014-05-30 16:53 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-05-29 08:51 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-28 23:51 - 2010-04-07 15:36 - 00000000 ____D () C:\Users\Jonas
2014-05-28 23:35 - 2014-05-28 23:35 - 00000000 ____D () C:\ProgramData\CheckPoint
2014-05-28 23:34 - 2011-07-24 12:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-28 23:34 - 2011-07-24 12:31 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-05-28 23:33 - 2011-07-24 12:31 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-05-28 23:33 - 2011-07-24 12:18 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\DVDVideoSoft
2014-05-25 00:07 - 2014-05-02 12:01 - 00002217 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-05-25 00:07 - 2014-05-02 12:00 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-05-25 00:07 - 2014-05-02 12:00 - 00000000 ____D () C:\Windows\system32\Drivers\NIS
2014-05-23 13:49 - 2013-12-24 22:05 - 00000000 ____D () C:\Users\Jonas\Documents\DJUCED 18
2014-05-22 14:57 - 2014-04-23 17:05 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\vlc
2014-05-18 13:12 - 2014-05-18 12:51 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\Winamp
2014-05-18 12:55 - 2014-05-18 12:51 - 00000000 ____D () C:\Program Files\Winamp
2014-05-18 12:52 - 2014-05-18 12:52 - 00000780 _____ () C:\Users\Jonas\Desktop\Winamp.lnk
2014-05-18 12:52 - 2014-05-18 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-18 12:51 - 2008-10-15 14:22 - 00000000 ____D () C:\Program Files\Common Files\PX Storage Engine
2014-05-17 15:47 - 2013-07-28 16:49 - 00000000 ____D () C:\Users\Jonas\Documents\VirtualDJ
2014-05-15 14:18 - 2008-10-14 17:49 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 14:11 - 2014-05-15 14:11 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-05-15 14:10 - 2013-08-15 11:37 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 14:06 - 2006-11-02 12:24 - 90547776 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-05-14 17:36 - 2012-04-02 14:16 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-14 17:36 - 2011-05-26 12:40 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Jonas\AppData\Local\Temp\764aab18-4d64-4039-b2a2-afab47333703.exe
C:\Users\Jonas\AppData\Local\Temp\AskSLib.dll
C:\Users\Jonas\AppData\Local\Temp\avgnt.exe
C:\Users\Jonas\AppData\Local\Temp\BackupSetup.exe
C:\Users\Jonas\AppData\Local\Temp\djuced.exe
C:\Users\Jonas\AppData\Local\Temp\FileSystemView.dll
C:\Users\Jonas\AppData\Local\Temp\FoxySecuritySetup.exe
C:\Users\Jonas\AppData\Local\Temp\GoogleSetup.exe
C:\Users\Jonas\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe
C:\Users\Jonas\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Jonas\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Jonas\AppData\Local\Temp\oi_{F4CFB656-DAE1-43A9-AEC0-AAD4BD037904}.exe
C:\Users\Jonas\AppData\Local\Temp\SettingsManagerSetup.exe
C:\Users\Jonas\AppData\Local\Temp\setup.exe
C:\Users\Jonas\AppData\Local\Temp\SHSetup.exe
C:\Users\Jonas\AppData\Local\Temp\sonarinst.exe
C:\Users\Jonas\AppData\Local\Temp\SRLDetectionLibrary5883359231480565763.dll
C:\Users\Jonas\AppData\Local\Temp\{92622AAD-05E8-4459-B256-765CE1E929FB}_NST_990.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-12 19:51

==================== End Of Log ============================

cosinus · 13.06.2014, 11:11

Die Logs sind unvollständig. Logs niemals gekürzt posten.

Zitat:

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}

Ähm sowas geht garnicht. Niemals sowas wie Avira und Norton gleichzeitig verwenden.
Deinstalliere am besten beide, wenn wir hier fertig sind kannst du auf Avast oder Emsisoft umsteigen.

Virussammlen · 16.06.2014, 18:05

Ok dann deinstalliere ich beide.

Hier die Log sind aber noch beide drin.

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:15-06-2014
Ran by Jonas (administrator) on JONAS-PC on 16-06-2014 19:04:28
Running from C:\Users\Jonas\Downloads
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hercules®) C:\Program Files\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
() C:\Windows\System32\PnkBstrA.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo.exe
() C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVECapSvc.exe
(AVG Secure Search) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\ToolbarUpdater.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\loggingserver.exe
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
() C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVESched.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
() C:\Program Files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(CyberLink Corp.) C:\Program Files\HomeCinema\TV Enhance\TVEService.exe
(Google) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\mozilla firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\mozilla firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Hercules®) C:\Program Files\Guillemot\HDJTray\HDJSeries2TrayBar.exe
() C:\Program Files\AVG SafeGuard toolbar\vprot.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
() C:\Program Files\Pando Networks\Media Booster\PMB.exe
(ICQ, LLC.) C:\Program Files\ICQ7.7\ICQ.exe
(Spotify Ltd) C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Jonas\AppData\Roaming\Spotify\spotify.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
() C:\Users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
() C:\Program Files\Audials\Audials 10\AudialsNotifier.exe
(Gemalto N.V.) C:\Users\Jonas\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe
(Hercules®) C:\Program Files\Hercules\Audio\DJ Console Series\HDJSeriesCPL.exe
(Hercules®) C:\Program Files\Hercules\Audio\DJ Console Series\cpl2\HDJSeries2CPL.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Symantec Corporation) C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\NST.exe
(Symantec Corporation) C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\NST.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-10-09] (Intel Corporation)
HKLM\...\Run: [TVEService] => C:\Program Files\HomeCinema\TV Enhance\TVEService.exe [180224 2008-10-14] (CyberLink Corp.)
HKLM\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-04-07] (Google)
HKLM\...\Run: [Google EULA Launcher] => C:\Program Files\Google\Google EULA\GoogleEULALauncher.exe [20480 2008-10-14] (Google)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-09] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [Hercules DJ Series TrayAgent] => C:\Program Files\Guillemot\HDJTray\HDJSeries2TrayBar.exe [2914640 2013-05-10] (Hercules®)
HKLM\...\Run: [vProt] => C:\Program Files\AVG SafeGuard toolbar\vprot.exe [2567192 2014-06-02] ()
HKLM\...\Run: [Windows Mobile-based device management] => C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Corporation)
HKU\.DEFAULT\...\Run: [Picasa Media Detector] => C:\Program Files\Picasa2\PicasaMediaDetector.exe
HKU\.DEFAULT\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [EA Core] => "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Pando Media Booster] => C:\Program Files\Pando Networks\Media Booster\PMB.exe [2937528 2011-04-27] ()
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [ICQ] => C:\Program Files\ICQ7.7\ICQ.exe [127040 2012-01-23] (ICQ, LLC.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Spotify Web Helper] => C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [GoogleChromeAutoLaunch_7F41DE71C33EFD8EC5D292FBB70B0F95] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Steam] => C:\Program Files\Steam\Steam.exe [1754816 2014-05-29] (Valve Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Spotify] => C:\Users\Jonas\AppData\Roaming\Spotify\Spotify.exe [6170168 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [AudialsNotifier] => C:\Program Files\Audials\Audials 10\AudialsNotifier.exe [529160 2013-10-07] ()
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-04-07] (Google Inc.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [SanDiskSecureAccess_Manager.exe] => C:\Users\Jonas\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2012-02-15] (Gemalto N.V.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\system32\Macromed\Flash\FlashUtil32_13_0_0_214_Plugin.exe [847536 2014-05-14] (Adobe Systems Incorporated)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\RunOnce: [IDSS_STARTUP] - C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\coSAStub.exe [440672 2014-05-14] (Symantec Corporation)
IFEO: [Debugger] svchost.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1397056383&from=tugs&uid=WDCXWD10EACS-00D6B0_WD-WCAU4299203992039&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1397056383&from=tugs&uid=WDCXWD10EACS-00D6B0_WD-WCAU4299203992039&q={searchTerms}
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} -  No File
URLSearchHook: HKCU - &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll No File
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=122&itype=a&ver=12302&tm=307&src=ds&p={searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=122&itype=a&ver=12302&tm=307&src=ds&p={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP957BA9C9-E84D-4D2F-AE7A-1B1A537850C8&q={searchTerms}&SSPV=T21030_sp_ie
SearchScopes: HKCU - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = hxxp://www.crawler.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=60747
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-02-17&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {7DDDA458-C1B3-45B5-883F-E28C0CCBD7C7} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=6011d5fb00000000000000224311d4e5&r=849
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={702FA598-FCBA-428B-B17A-F83F500E1C6E}&mid=030a75b52d3447d08775d168c3223769-06ce4fc639803a2e3563922518183d8e94088cb9&lang=de&ds=cg011&coid=avgtbdiscg&cmpid=&pr=sa&d=2014-04-04 21:27:57&v=18.0.5.292&pid=safeguard&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=122&itype=a&ver=12302&tm=307&src=ds&p={searchTerms}
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=IDSSNAV&chn=retail&geo=DE&ver=2014&locale=de_DE&gct=sb&qsrc=2869
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - {BB931CA0-9B96-4877-92C7-D0C34E0B0E1B} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&mkt=de-de&FORM=IEFM&src=IE-SearchBox
SearchScopes: HKCU - {DAB8CA57-1A9D-491E-BEDD-3C6F665C0E37} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=1101d0e2-635d-4df6-ba10-768967ac778a&apn_sauid=580DFDB8-7B7E-4F1B-90CA-8E96B3E8947F
BHO: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: No Name - {7E853D72-626A-48EC-A868-BA8D5E23E045} -  No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.7.598\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.7.598\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} -  No File
Toolbar: HKCU - &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - Norton Identity Safe Toolbar - {A13C2648-91D4-4BF3-BC6D-0079707C4389} - C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll No File
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.7\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\ngs0vmb4.Standard-Benutzer
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.7\\npsitesafety.dll No File
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/esnlaunch,version=2.1.7 - C:\Program Files\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin - C:\Program Files\Java\jre6\bin\dtplugin\npDeployJava1.dll No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Jonas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npPandoWebInst.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\adawaretb.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-10-22]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-10-22]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-10-22]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.7.598
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.7.598 [2014-06-02]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{F04D2D30-776C-4d02-8627-8E4385ECA58D}] - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.7.0.47\coFFPlgn\

Chrome: 
=======
CHR StartupUrls: "hxxp://istart.webssearches.com/?type=hp&ts=1397056383&from=tugs&uid=WDCXWD10EACS-00D6B0_WD-WCAU4299203992039"
CHR DefaultSearchKeyword: webssearches
CHR DefaultSearchProvider: webssearches
CHR Extension: (AVG SafeGuard) - C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2014-05-06]
CHR Extension: (DvdVideoSoft Free Youtube Download) - C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2012-12-19]
CHR Extension: (Google Wallet) - C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]
CHR Extension: (ICQ Sparberater) - C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmpllndkedbnmonoomepeeglghdelffo [2012-09-10]
CHR HKLM\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] -  [2012-09-10]
CHR HKLM\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - C:\Program Files\Lavasoft\AdAware SecureSearch Toolbar\chrome-newtab-search.crx [2012-09-10]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Jonas\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-09-27]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1039440 2014-06-09] (Avira Operations GmbH & Co. KG)
S3 GoogleDesktopManager-110309-193829; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-04-07] (Google)
R2 HerculesDJControlMP3; C:\Program Files\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE [37376 2013-05-21] (Hercules®) [File not signed]
R2 NCO; C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\NST.exe [130104 2014-05-14] (Symantec Corporation)
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-08-31] ()
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [241734 2008-10-14] () [File not signed]
R2 TVECapSvc; C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVECapSvc.exe [376937 2008-10-14] () [File not signed]
R2 TVESched; C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVESched.exe [184423 2008-10-14] () [File not signed]
S3 usnjsvc; C:\Program Files\Windows Live\Messenger\usnsvc.exe [98328 2007-10-18] (Microsoft Corporation)
R2 vToolbarUpdater18.1.7; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\ToolbarUpdater.exe [1808408 2014-06-02] (AVG Secure Search)
S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation) [File not signed]
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2001-11-12] (X10) [File not signed]
S2 ZAPrivacyService; "C:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe" [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-06-09] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42784 2014-06-02] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-10] (Avira Operations GmbH & Co. KG)
S3 Bulk; C:\Windows\System32\Drivers\HDJBulk.sys [220464 2013-05-21] (© Guillemot R&D, 2013. All rights reserved.)
R1 ccSet_NST; C:\Windows\system32\drivers\NST\7DE07000.02F\ccSetx86.sys [127064 2014-02-21] (Symantec Corporation)
S3 HDJAsioK; C:\Windows\System32\Drivers\HDJAsioK.sys [273712 2013-05-21] (© Guillemot R&D, 2013. All rights reserved.)
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [645120 2008-08-21] (Ralink Technology Corp.)
R3 NxpCap; C:\Windows\System32\DRIVERS\NxpCap.sys [1332576 2008-09-25] (NXP Semiconductors Germany GmbH)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [22184 2013-10-07] (Audials AG)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [39048 2013-06-27] (RapidSolution Software AG)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13976 2006-11-17] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
R4 ccSet_NIS; \SystemRoot\system32\drivers\NIS\1503000.00C\ccSetx86.sys [X]
S3 cpuz135; \??\C:\Users\Jonas\AppData\Local\Temp\cpuz135\cpuz135_x32.sys [X]
R4 IDSVix86; \??\C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140613.001\IDSvix86.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
R4 SRTSPX; \SystemRoot\system32\drivers\NIS\1503000.00C\SRTSPX.SYS [X]
R4 SymDS; system32\drivers\NIS\1503000.00C\SYMDS.SYS [X]
R4 SymEFA; system32\drivers\NIS\1503000.00C\SYMEFA.SYS [X]
R4 SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-16 19:03 - 2014-06-16 19:04 - 01072640 _____ (Farbar) C:\Users\Jonas\Downloads\FRST.exe
2014-06-16 18:58 - 2014-06-16 18:58 - 00002201 _____ () C:\Users\Public\Desktop\Norton Identity Safe.LNK
2014-06-16 18:57 - 2014-06-16 18:58 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Identity Safe
2014-06-16 18:57 - 2014-06-16 18:57 - 00000000 ____D () C:\Windows\system32\Drivers\NST
2014-06-16 18:57 - 2014-06-16 18:57 - 00000000 ____D () C:\Program Files\Norton Identity Safe
2014-06-16 18:44 - 2014-06-16 18:44 - 00000000 ____D () C:\Users\Jonas\Downloads\FRST-OlderVersion
2014-06-13 15:32 - 2014-06-13 15:32 - 00000000 ____D () C:\170fb40c1244885abd07451e32c60b6f
2014-06-12 20:01 - 2014-06-16 19:04 - 00028902 _____ () C:\Users\Jonas\Downloads\FRST.txt
2014-06-12 20:01 - 2014-06-16 19:04 - 00000000 ____D () C:\FRST
2014-06-12 19:54 - 2014-05-28 03:17 - 11082240 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 06021632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 02005504 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 19:54 - 2014-05-28 03:17 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00916992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2014-06-12 19:54 - 2014-05-28 01:24 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-06-12 19:54 - 2014-05-28 01:17 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 19:54 - 2014-05-28 01:17 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 19:54 - 2014-05-28 01:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 19:54 - 2014-05-28 01:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-06-12 19:54 - 2014-04-26 18:01 - 00502784 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 19:54 - 2014-04-05 05:23 - 00915392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 19:54 - 2014-04-05 03:49 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-06-12 19:54 - 2014-03-10 03:22 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 19:54 - 2014-03-10 03:22 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 21:05 - 2014-06-11 21:05 - 00000000 ____D () C:\Users\Jonas\Desktop\CD
2014-06-11 20:04 - 2014-06-11 20:21 - 00048682 _____ () C:\Users\Jonas\Documents\Ereignisse.txt
2014-06-11 17:57 - 2014-06-11 17:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Jonas\Downloads\SpyHunter-Installer.exe
2014-06-08 11:13 - 2014-06-08 11:14 - 12855384 _____ (Nullsoft, Inc.) C:\Users\Jonas\Downloads\winamp5666_full_de-de_b3516.exe
2014-06-02 17:21 - 2014-06-02 17:21 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-05-30 16:53 - 2014-05-30 16:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-30 16:53 - 2014-05-30 16:53 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-05-30 16:53 - 2014-05-12 07:55 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-30 16:53 - 2014-05-12 07:54 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-30 16:53 - 2014-05-12 07:54 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-28 23:46 - 2010-04-05 22:00 - 00221568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-05-28 23:35 - 2014-05-28 23:35 - 00000000 ____D () C:\ProgramData\CheckPoint
2014-05-18 12:52 - 2014-05-18 12:52 - 00000780 _____ () C:\Users\Jonas\Desktop\Winamp.lnk
2014-05-18 12:52 - 2014-05-18 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-18 12:51 - 2014-05-18 13:12 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\Winamp
2014-05-18 12:51 - 2014-05-18 12:55 - 00000000 ____D () C:\Program Files\Winamp

==================== One Month Modified Files and Folders =======

2014-06-16 19:05 - 2011-04-27 21:26 - 00000000 ____D () C:\Users\Jonas\AppData\Local\PMB Files
2014-06-16 19:04 - 2014-06-16 19:03 - 01072640 _____ (Farbar) C:\Users\Jonas\Downloads\FRST.exe
2014-06-16 19:04 - 2014-06-12 20:01 - 00028902 _____ () C:\Users\Jonas\Downloads\FRST.txt
2014-06-16 19:04 - 2014-06-12 20:01 - 00000000 ____D () C:\FRST
2014-06-16 19:04 - 2010-04-07 15:36 - 00000000 ____D () C:\Users\Jonas\AppData\Local\Temp
2014-06-16 19:03 - 2014-05-02 12:01 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-06-16 19:03 - 2014-05-02 12:00 - 00000000 ____D () C:\Program Files\Norton Internet Security
2014-06-16 18:58 - 2014-06-16 18:58 - 00002201 _____ () C:\Users\Public\Desktop\Norton Identity Safe.LNK
2014-06-16 18:58 - 2014-06-16 18:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Identity Safe
2014-06-16 18:57 - 2014-06-16 18:57 - 00000000 ____D () C:\Windows\system32\Drivers\NST
2014-06-16 18:57 - 2014-06-16 18:57 - 00000000 ____D () C:\Program Files\Norton Identity Safe
2014-06-16 18:57 - 2013-10-19 15:04 - 00000000 ____D () C:\ProgramData\Norton
2014-06-16 18:57 - 2010-04-13 13:57 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-16 18:45 - 2012-12-25 15:24 - 00000000 ____D () C:\Program Files\Steam
2014-06-16 18:44 - 2014-06-16 18:44 - 00000000 ____D () C:\Users\Jonas\Downloads\FRST-OlderVersion
2014-06-16 18:42 - 2012-05-06 00:37 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\Spotify
2014-06-16 18:41 - 2012-07-05 17:03 - 00000000 ____D () C:\Users\Jonas\AppData\Local\Spotify
2014-06-16 18:36 - 2012-04-02 14:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-16 18:33 - 2014-04-21 00:34 - 00000362 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rmv.job
2014-06-16 18:33 - 2010-04-13 13:57 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-16 18:32 - 2014-04-21 00:34 - 00000362 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rel.job
2014-06-16 17:22 - 2010-04-07 15:25 - 01625187 _____ () C:\Windows\WindowsUpdate.log
2014-06-16 17:17 - 2011-10-04 13:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-06-16 17:17 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-16 17:17 - 2006-11-02 14:47 - 00003744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-16 17:17 - 2006-11-02 14:47 - 00003744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-16 01:10 - 2006-11-02 15:01 - 00032628 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-13 16:15 - 2011-05-31 15:33 - 00000000 ____D () C:\Users\Jonas\Desktop\Praktikumsmappe
2014-06-13 15:55 - 2014-04-10 15:25 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-13 15:51 - 2008-10-14 17:49 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-13 15:32 - 2014-06-13 15:32 - 00000000 ____D () C:\170fb40c1244885abd07451e32c60b6f
2014-06-13 15:32 - 2013-08-15 11:37 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-13 15:32 - 2012-01-04 00:20 - 00000000 ____D () C:\Users\Jonas\Desktop\Technick
2014-06-13 15:32 - 2006-11-02 12:24 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-06-12 21:15 - 2010-04-13 12:42 - 00007916 _____ () C:\Users\Jonas\AppData\Local\d3d9caps.dat
2014-06-11 21:05 - 2014-06-11 21:05 - 00000000 ____D () C:\Users\Jonas\Desktop\CD
2014-06-11 20:21 - 2014-06-11 20:04 - 00048682 _____ () C:\Users\Jonas\Documents\Ereignisse.txt
2014-06-11 18:38 - 2010-04-17 15:29 - 00000000 ___RD () C:\Users\Jonas\Desktop\Zeug
2014-06-11 18:37 - 2011-12-24 20:28 - 00000000 ____D () C:\Program Files\Origin Games
2014-06-11 18:36 - 2011-07-02 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2014-06-11 18:36 - 2008-10-08 12:51 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-06-11 18:35 - 2010-10-18 11:15 - 00000000 ____D () C:\Program Files\Landwirtschafts Simulator 2011
2014-06-11 18:35 - 2010-04-23 13:09 - 00000000 ____D () C:\Users\Jonas\Documents\My Games
2014-06-11 17:58 - 2014-06-11 17:57 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Jonas\Downloads\SpyHunter-Installer.exe
2014-06-11 15:50 - 2010-04-27 18:20 - 00000000 ____D () C:\Users\Jonas\Desktop\Autobilder
2014-06-10 23:36 - 2008-01-21 09:16 - 01567488 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-10 21:55 - 2013-04-13 11:13 - 00049651 _____ () C:\Windows\setupact.log
2014-06-10 13:53 - 2012-12-25 15:25 - 00000000 ____D () C:\Program Files\Common Files\Steam
2014-06-10 13:49 - 2013-01-03 22:34 - 01208220 _____ () C:\Windows\PFRO.log
2014-06-09 21:31 - 2012-12-21 23:06 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-09 21:31 - 2012-12-21 23:06 - 00093528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-08 11:14 - 2014-06-08 11:13 - 12855384 _____ (Nullsoft, Inc.) C:\Users\Jonas\Downloads\winamp5666_full_de-de_b3516.exe
2014-06-02 21:51 - 2010-11-04 15:38 - 115415612 _____ () C:\Users\Jonas\Desktop\sampleModMap.zip
2014-06-02 21:11 - 2013-01-26 17:01 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-06-02 17:22 - 2014-04-04 21:27 - 00003754 _____ () C:\Program Files\mozilla firefoxsafeguard-secure-search.xml
2014-06-02 17:21 - 2014-06-02 17:21 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-06-02 17:21 - 2014-04-04 21:27 - 00042784 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys
2014-06-02 17:21 - 2014-04-04 21:27 - 00000000 ____D () C:\Program Files\AVG SafeGuard toolbar
2014-05-30 17:21 - 2014-04-09 17:14 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\VOPackage
2014-05-30 16:53 - 2014-05-30 16:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-30 16:53 - 2014-05-30 16:53 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-05-29 08:51 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-28 23:51 - 2010-04-07 15:36 - 00000000 ____D () C:\Users\Jonas
2014-05-28 23:35 - 2014-05-28 23:35 - 00000000 ____D () C:\ProgramData\CheckPoint
2014-05-28 23:34 - 2011-07-24 12:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-28 23:34 - 2011-07-24 12:31 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-05-28 23:33 - 2011-07-24 12:31 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-05-28 23:33 - 2011-07-24 12:18 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\DVDVideoSoft
2014-05-28 03:17 - 2014-06-12 19:54 - 11082240 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 06021632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 02005504 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-28 03:17 - 2014-06-12 19:54 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00916992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2014-05-28 01:24 - 2014-06-12 19:54 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-05-28 01:17 - 2014-06-12 19:54 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-28 01:17 - 2014-06-12 19:54 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-28 01:17 - 2014-06-12 19:54 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-28 01:17 - 2014-06-12 19:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-05-23 13:49 - 2013-12-24 22:05 - 00000000 ____D () C:\Users\Jonas\Documents\DJUCED 18
2014-05-22 14:57 - 2014-04-23 17:05 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\vlc
2014-05-18 13:12 - 2014-05-18 12:51 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\Winamp
2014-05-18 12:55 - 2014-05-18 12:51 - 00000000 ____D () C:\Program Files\Winamp
2014-05-18 12:52 - 2014-05-18 12:52 - 00000780 _____ () C:\Users\Jonas\Desktop\Winamp.lnk
2014-05-18 12:52 - 2014-05-18 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-18 12:51 - 2008-10-15 14:22 - 00000000 ____D () C:\Program Files\Common Files\PX Storage Engine
2014-05-17 15:47 - 2013-07-28 16:49 - 00000000 ____D () C:\Users\Jonas\Documents\VirtualDJ

Some content of TEMP:
====================
C:\Users\Jonas\AppData\Local\Temp\764aab18-4d64-4039-b2a2-afab47333703.exe
C:\Users\Jonas\AppData\Local\Temp\AskSLib.dll
C:\Users\Jonas\AppData\Local\Temp\avgnt.exe
C:\Users\Jonas\AppData\Local\Temp\BackupSetup.exe
C:\Users\Jonas\AppData\Local\Temp\djuced.exe
C:\Users\Jonas\AppData\Local\Temp\FileSystemView.dll
C:\Users\Jonas\AppData\Local\Temp\FoxySecuritySetup.exe
C:\Users\Jonas\AppData\Local\Temp\GoogleSetup.exe
C:\Users\Jonas\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe
C:\Users\Jonas\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Jonas\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Jonas\AppData\Local\Temp\oi_{F4CFB656-DAE1-43A9-AEC0-AAD4BD037904}.exe
C:\Users\Jonas\AppData\Local\Temp\SettingsManagerSetup.exe
C:\Users\Jonas\AppData\Local\Temp\setup.exe
C:\Users\Jonas\AppData\Local\Temp\SEVINST.EXE
C:\Users\Jonas\AppData\Local\Temp\SHSetup.exe
C:\Users\Jonas\AppData\Local\Temp\sonarinst.exe
C:\Users\Jonas\AppData\Local\Temp\SRLDetectionLibrary5883359231480565763.dll
C:\Users\Jonas\AppData\Local\Temp\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}_NIS_13580.exe
C:\Users\Jonas\AppData\Local\Temp\{92622AAD-05E8-4459-B256-765CE1E929FB}_NST_990.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-16 17:32

==================== End Of Log ============================

--- --- ---

cosinus · 16.06.2014, 22:51

Dann bitte jetzt Combofix ausführen:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Virussammlen · 17.06.2014, 15:23

Code:

ATTFilter

ComboFix 14-06-16.01 - Jonas 17.06.2014  16:03:47.1.4 - x86
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.3325.2014 [GMT 2:00]
ausgeführt von:: c:\users\Jonas\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\ANTIGEN.dll
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\ANTIGEN.exe
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\cb.drv
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\cid.dll
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\CLSV.dll
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\delfile.sys
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\eb.drv
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\energy.drv
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\energy.exe
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\exec.sys
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\fan.dll
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\fan.sys
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\fix.exe
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\FW.exe
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\hymt.dll
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\hymt.tmp
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\kernel32.exe
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\pal.tmp
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\PE.dll
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\PE.exe
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\ppal.exe
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\runddl.dll
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\SICKBOY.dll
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\SICKBOY.exe
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\SICKBOY.tmp
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\sld.dll
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\sld.tmp
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\SM.dll
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\snl2w.tmp
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\std.exe
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\tjd.dll
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\tjd.drv
c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Recent\tjd.exe
c:\windows\Fonts\upcli.ttf
c:\windows\system32\tmp3B89.tmp
c:\windows\system32\tmp3BF7.tmp
c:\windows\system32\tmp5D83.tmp
c:\windows\system32\tmp99F6.tmp
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-05-17 bis 2014-06-17  ))))))))))))))))))))))))))))))
.
.
2014-06-17 14:16 . 2014-06-17 14:16	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2014-06-17 14:16 . 2014-06-17 14:16	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-06-16 17:26 . 2014-04-30 23:37	8073384	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{B9F0C5D6-43DB-403E-B069-9F7D22A4A489}\mpengine.dll	ERROR(0x00000005)
2014-06-16 16:57 . 2014-06-16 16:57	--------	d-----w-	c:\windows\system32\drivers\NST
2014-06-16 16:57 . 2014-06-16 16:57	--------	d-----w-	c:\program files\Norton Identity Safe
2014-06-13 13:32 . 2014-06-13 13:32	--------	d-----w-	C:\170fb40c1244885abd07451e32c60b6f
2014-06-12 18:01 . 2014-06-16 17:05	--------	d-----w-	C:\FRST
2014-05-28 21:46 . 2010-04-05 20:00	221568	----a-w-	c:\windows\system32\drivers\netio.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-06-02 15:21 . 2014-04-04 19:27	42784	----a-w-	c:\windows\system32\drivers\avgtpx86.sys
2014-05-14 15:36 . 2012-04-02 12:16	692400	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2014-05-14 15:36 . 2011-05-26 10:40	70832	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2014-04-17 03:32 . 2008-10-08 09:57	8050496	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll	ERROR(0x00000005)
2014-04-15 00:34 . 2014-04-15 00:34	1070232	----a-w-	c:\windows\system32\MSCOMCTL.OCX
2014-03-31 07:35 . 2010-04-13 10:56	231584	------w-	c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2014-06-02 15:21	3594264	----a-w-	c:\program files\AVG SafeGuard toolbar\18.1.7.598\AVG SafeGuard toolbar_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files\AVG SafeGuard toolbar\18.1.7.598\AVG SafeGuard toolbar_toolbar.dll" [2014-06-02 3594264]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG SafeGuard toolbar.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG SafeGuard toolbar.PugiObj]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2014-04-25 08:03	579400	----a-w-	c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-04-25 08:03	579400	----a-w-	c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-04-25 08:03	579400	----a-w-	c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2014-04-25 08:03	579400	----a-w-	c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2014-04-25 08:03	579400	----a-w-	c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2014-04-25 08:03	579400	----a-w-	c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-11 218032]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2011-04-27 2937528]
"ICQ"="c:\program files\ICQ7.7\ICQ.exe" [2012-01-23 127040]
"Spotify Web Helper"="c:\users\Jonas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-05-15 1176632]
"GoogleChromeAutoLaunch_7F41DE71C33EFD8EC5D292FBB70B0F95"="c:\program files\Google\Chrome\Application\chrome.exe" [2014-06-05 860488]
"Steam"="c:\program files\Steam\Steam.exe" [2014-05-29 1754816]
"Spotify"="c:\users\Jonas\AppData\Roaming\Spotify\Spotify.exe" [2014-05-15 6170168]
"AmazonMP3DownloaderHelper"="c:\users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe" [2013-05-22 400704]
"AudialsNotifier"="c:\program files\Audials\Audials 10\AudialsNotifier.exe" [2013-10-07 529160]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-04-07 39408]
"SanDiskSecureAccess_Manager.exe"="c:\users\Jonas\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe" [2012-02-14 30705792]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-10-08 178712]
"TVEService"="c:\program files\HomeCinema\TV Enhance\TVEService.exe" [2008-10-14 180224]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-04-07 30192]
"Google EULA Launcher"="c:\program files\Google\Google EULA\GoogleEULALauncher.exe" [2008-10-14 20480]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2013-10-24 12017368]
"Hercules DJ Series TrayAgent"="c:\program files\Guillemot\HDJTray\HDJSeries2TrayBar.exe" [2013-05-10 2914640]
"vProt"="c:\program files\AVG SafeGuard toolbar\vprot.exe" [2014-06-02 2567192]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2008-01-21 215552]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 2 (0x2)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache
WindowsMobile	REG_MULTI_SZ   	wcescomm rapimgr
LocalServiceRestricted	REG_MULTI_SZ   	WcesComm RapiMgr
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-06-13 23:57	1091912	----a-w-	c:\program files\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-06-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 15:36]
.
2014-06-17 c:\windows\Tasks\AVG-Secure-Search-Update_0414c_rel.job
- c:\program files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe [2014-04-20 22:34]
.
2014-06-17 c:\windows\Tasks\AVG-Secure-Search-Update_0414c_rmv.job
- c:\program files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe [2014-04-20 22:34]
.
2014-06-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-13 11:57]
.
2014-06-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-13 11:57]
.
2008-10-20 c:\windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job
- c:\windows\system32\msfeedssync.exe [2014-06-12 23:17]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = www.google.com
uDefault_Search_URL = www.google.com
mStart Page = www.google.com
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: An OneNote s&enden - c:\progra~1\MICROS~4\Office14\ONBttnIE.dll/105
IE: Crawler Search - tbr:iemenu
IE: Free YouTube to MP3 Converter - c:\users\Jonas\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~4\Office14\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
IE: {{0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files\ICQ7.7\ICQ.exe
TCP: DhcpNameServer = 192.168.2.1
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - 
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.7\ViProtocol.dll
FF - ProfilePath - c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\ngs0vmb4.Standard-Benutzer\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-10 - (no file)
WebBrowser-{872B5B88-9DB5-4310-BDD0-AC189557E5F5} - (no file)
HKCU-Run-EA Core - c:\program files\Electronic Arts\EADM\Core.exe
HKU-Default-Run-Picasa Media Detector - c:\program files\Picasa2\PicasaMediaDetector.exe
SafeBoot-WudfPf
SafeBoot-WudfRd
AddRemove-Fraps - c:\users\Jonas\Documents\My Games\FarmingSimulator2009\mods\snapshot\uninstall.exe
AddRemove-Free YouTube to MP3 Converter_is1 - c:\program files\Common Files\DVDVideoSoft\Uninstall.exe
AddRemove-_{ADDBE07D-95B8-4789-9C76-187FFF9624B4} - c:\program files\Corel\CorelDRAW Essential Edition 3\Programs\MSILauncher {ADDBE07D-95B8-4789-9C76-187FFF9624B4}
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2014-06-17 16:16
Windows 6.0.6002 Service Pack 2 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
.
c:\users\Jonas\AppData\Local\Temp\catchme.dll 53248 bytes executable
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 1
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NCO]
"ImagePath"="\"c:\program files\Norton Identity Safe\Engine\2014.7.0.47\NST.exe\" /s \"NCO\" /m \"c:\program files\Norton Identity Safe\Engine\2014.7.0.47\diMaster.dll\" /prefetch:1"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-131767531-2465167464-222506596-1000\Software\SecuROM\License information*]
"datasecu"=hex:13,ec,a7,38,98,69,f9,00,c5,18,e5,60,86,15,9a,99,82,bb,c2,a7,09,
   2a,b8,85,f4,6b,e1,15,e6,ed,38,6a,e3,61,f8,ed,29,e7,10,0e,10,ac,c0,2f,00,8c,\
"rkeysecu"=hex:bf,3c,58,bb,21,34,5b,35,67,7f,61,b0,92,6d,88,a0
.
Zeit der Fertigstellung: 2014-06-17  16:19:10
ComboFix-quarantined-files.txt  2014-06-17 14:18
.
Vor Suchlauf: 8 Verzeichnis(se), 664.120.160.256 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 721.121.419.264 Bytes frei
.
- - End Of File - - 173F3824A5471571F8B0D0C2798B7548
671B81004FDD1588FA9ED1331C9CECA9

cosinus · 17.06.2014, 15:39

Adware/Junkware/Toolbars entfernen

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Virussammlen · 17.06.2014, 17:56

AdwCleaner

Code:

ATTFilter

# AdwCleaner v3.212 - Bericht erstellt am 17/06/2014 um 17:06:05
# Aktualisiert 05/06/2014 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzername : Jonas - JONAS-PC
# Gestartet von : C:\Users\Jonas\Downloads\adwcleaner_3.212.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

[!] Ordner Gelöscht : C:\Users\Jonas\AppData\Local\AVG SafeGuard toolbar
Ordner Gelöscht : C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Ordner Gelöscht : C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\Jonas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser (2).lnk
Verknüpfung Desinfiziert : C:\Users\Jonas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser (3).lnk
Verknüpfung Desinfiziert : C:\Users\Jonas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser (4).lnk
Verknüpfung Desinfiziert : C:\Users\Jonas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\Jonas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk

***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\oejkcgajlodefenbbjdnaiahmbnnoole
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Crawler Search
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Conduit.Engine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ctbcommon.Buttons
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ctbr.R404Pro
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CToolbar.TB4Client
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CToolbar.TB4Script
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CToolbar.TB4Server
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\tbr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\Crawler
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{183643C8-EE67-4574-9A38-927852E34163}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1DDA201E-5B42-4352-933E-21A92B297E3B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4D25FB7A-8902-4291-960E-9ADA051CFBBF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{54ECA872-DB2A-4C6B-BBB2-F3777C6786CC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8736C681-37A0-40C6-A0F0-4C083409151C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DBDB6FAA-1F5F-4A18-B60B-7A905C7FF83F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{01C78433-6FDF-4E5A-A82D-B535C32E03DF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{41349826-5C7F-4BF0-8279-5DAF1DE6E9AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{604EA016-1EDE-41E6-A23E-76CF8F2A4808}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B3BA5582-79A9-464D-A7FA-711C5888C6E9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E9BBD270-4B87-4EE2-912F-6635674986C0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{04006843-5199-4CE4-B3CD-8092CC91706E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{506F578A-91E1-46CE-830F-E2F4268E9966}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E79BB61D-7F1A-41DF-8AD0-402795E3B566}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7459F1D0-9FB6-4D71-AA7B-9DECB34EB704}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBF1B8D2-9A06-4174-A8B5-E38606DDB92B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\AVG SafeGuard toolbar
Schlüssel Gelöscht : HKCU\Software\Ciuvo
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\CToolbar
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\Linkey
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Optimizer Pro
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\SystemK
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKLM\Software\AVG SafeGuard toolbar
Schlüssel Gelöscht : HKLM\Software\AVG Security Toolbar
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\CToolbar
Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar
Schlüssel Gelöscht : HKLM\Software\installedbrowserextensions
Schlüssel Gelöscht : HKLM\Software\PIP
Schlüssel Gelöscht : HKLM\Software\Speedchecker Limited
Schlüssel Gelöscht : HKLM\Software\SupTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\SweetIM
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\Wpm
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG SafeGuard toolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Linkey
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MediaPlayerplus
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Settings Manager
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\VOPackage
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\webssearches uninstaller
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wpm
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browser ] *****

-\\ Internet Explorer v8.0.6001.19539

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

-\\ Mozilla Firefox v29.0.1 (de)

[ Datei : C:\Users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\hpmjpxgo.default\prefs.js ]


[ Datei : C:\Users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\ngs0vmb4.Standard-Benutzer\prefs.js ]


-\\ Google Chrome v35.0.1916.153

*************************

AdwCleaner[R0].txt - [21610 octets] - [17/06/2014 16:45:28]
AdwCleaner[R1].txt - [19492 octets] - [17/06/2014 16:48:33]
AdwCleaner[R2].txt - [17991 octets] - [17/06/2014 17:05:38]
AdwCleaner[S0].txt - [1112 octets] - [17/06/2014 16:46:36]
AdwCleaner[S1].txt - [2069 octets] - [17/06/2014 16:48:59]
AdwCleaner[S2].txt - [16874 octets] - [17/06/2014 17:06:05]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [16935 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows Vista (TM) Home Premium x86
Ran by Jonas on 17.06.2014 at 18:50:50,77
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7DDDA458-C1B3-45B5-883F-E28C0CCBD7C7}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{BB931CA0-9B96-4877-92C7-D0C34E0B0E1B}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{DAB8CA57-1A9D-491E-BEDD-3C6F665C0E37}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{BB931CA0-9B96-4877-92C7-D0C34E0B0E1B}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Windows\system32\ai_recyclebin"



~~~ FireFox

Emptied folder: C:\Users\Jonas\AppData\Roaming\mozilla\firefox\profiles\ngs0vmb4.Standard-Benutzer\minidumps [5 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17.06.2014 at 18:53:29,60
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:15-06-2014
Ran by Jonas (administrator) on JONAS-PC on 17-06-2014 18:55:02
Running from C:\Users\Jonas\Downloads
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hercules®) C:\Program Files\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Symantec Corporation) C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\NST.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
() C:\Windows\System32\PnkBstrA.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo.exe
() C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVECapSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
() C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVESched.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Symantec Corporation) C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\NST.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(CyberLink Corp.) C:\Program Files\HomeCinema\TV Enhance\TVEService.exe
(Google) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Hercules®) C:\Program Files\Guillemot\HDJTray\HDJSeries2TrayBar.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
() C:\Program Files\Pando Networks\Media Booster\PMB.exe
(ICQ, LLC.) C:\Program Files\ICQ7.7\ICQ.exe
(Spotify Ltd) C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Jonas\AppData\Roaming\Spotify\spotify.exe
() C:\Users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
() C:\Program Files\Audials\Audials 10\AudialsNotifier.exe
(Gemalto N.V.) C:\Users\Jonas\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hercules®) C:\Program Files\Hercules\Audio\DJ Console Series\HDJSeriesCPL.exe
(Hercules®) C:\Program Files\Hercules\Audio\DJ Console Series\cpl2\HDJSeries2CPL.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\mozilla firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\mozilla firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-10-09] (Intel Corporation)
HKLM\...\Run: [TVEService] => C:\Program Files\HomeCinema\TV Enhance\TVEService.exe [180224 2008-10-14] (CyberLink Corp.)
HKLM\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-04-07] (Google)
HKLM\...\Run: [Google EULA Launcher] => C:\Program Files\Google\Google EULA\GoogleEULALauncher.exe [20480 2008-10-14] (Google)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [Hercules DJ Series TrayAgent] => C:\Program Files\Guillemot\HDJTray\HDJSeries2TrayBar.exe [2914640 2013-05-10] (Hercules®)
HKLM\...\Run: [Windows Mobile-based device management] => C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Corporation)
HKU\.DEFAULT\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Pando Media Booster] => C:\Program Files\Pando Networks\Media Booster\PMB.exe [2937528 2011-04-27] ()
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [ICQ] => C:\Program Files\ICQ7.7\ICQ.exe [127040 2012-01-23] (ICQ, LLC.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Spotify Web Helper] => C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [GoogleChromeAutoLaunch_7F41DE71C33EFD8EC5D292FBB70B0F95] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Steam] => C:\Program Files\Steam\Steam.exe [1754816 2014-05-29] (Valve Corporation)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [Spotify] => C:\Users\Jonas\AppData\Roaming\Spotify\Spotify.exe [6170168 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [AudialsNotifier] => C:\Program Files\Audials\Audials 10\AudialsNotifier.exe [529160 2013-10-07] ()
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-04-07] (Google Inc.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [SanDiskSecureAccess_Manager.exe] => C:\Users\Jonas\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2012-02-15] (Gemalto N.V.)
HKU\S-1-5-21-131767531-2465167464-222506596-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: No Name - {7E853D72-626A-48EC-A868-BA8D5E23E045} -  No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Norton Identity Protection - {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} - C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\coIEPlg.dll (Symantec Corporation)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Norton Identity Safe Toolbar - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Norton Identity Safe Toolbar - {A13C2648-91D4-4BF3-BC6D-0079707C4389} - C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\coIEPlg.dll (Symantec Corporation)
DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\ngs0vmb4.Standard-Benutzer
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/esnlaunch,version=2.1.7 - C:\Program Files\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin - C:\Program Files\Java\jre6\bin\dtplugin\npDeployJava1.dll No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Jonas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npPandoWebInst.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-10-22]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-10-22]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-10-22]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{F04D2D30-776C-4d02-8627-8E4385ECA58D}] - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.7.0.47\coFFPlgn\
FF Extension: Norton Identity Safe Toolbar - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.7.0.47\coFFPlgn\ []

Chrome: 
=======
CHR Extension: (Google Wallet) - C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]
CHR Extension: (ICQ Sparberater) - C:\Users\Jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmpllndkedbnmonoomepeeglghdelffo [2012-09-10]
CHR HKLM\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\Exts\Chrome.crx [2014-06-16]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

S3 GoogleDesktopManager-110309-193829; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-04-07] (Google)
R2 HerculesDJControlMP3; C:\Program Files\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE [37376 2013-05-21] (Hercules®) [File not signed]
R2 NCO; C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\NST.exe [130104 2014-05-14] (Symantec Corporation)
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-08-31] ()
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [241734 2008-10-14] () [File not signed]
R2 TVECapSvc; C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVECapSvc.exe [376937 2008-10-14] () [File not signed]
R2 TVESched; C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVESched.exe [184423 2008-10-14] () [File not signed]
S3 usnjsvc; C:\Program Files\Windows Live\Messenger\usnsvc.exe [98328 2007-10-18] (Microsoft Corporation)
S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation) [File not signed]
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2001-11-12] (X10) [File not signed]
S2 AntiVirWebService; "C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE" [X]
S2 vToolbarUpdater18.1.7; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\ToolbarUpdater.exe [X]
S2 ZAPrivacyService; "C:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe" [X]

==================== Drivers (Whitelisted) ====================

R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42784 2014-06-02] (AVG Technologies)
S3 Bulk; C:\Windows\System32\Drivers\HDJBulk.sys [220464 2013-05-21] (© Guillemot R&D, 2013. All rights reserved.)
R1 ccSet_NST; C:\Windows\system32\drivers\NST\7DE07000.02F\ccSetx86.sys [127064 2014-02-21] (Symantec Corporation)
S3 HDJAsioK; C:\Windows\System32\Drivers\HDJAsioK.sys [273712 2013-05-21] (© Guillemot R&D, 2013. All rights reserved.)
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [645120 2008-08-21] (Ralink Technology Corp.)
R3 NxpCap; C:\Windows\System32\DRIVERS\NxpCap.sys [1332576 2008-09-25] (NXP Semiconductors Germany GmbH)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [22184 2013-10-07] (Audials AG)
R3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [39048 2013-06-27] (RapidSolution Software AG)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13976 2006-11-17] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Jonas\AppData\Local\Temp\catchme.sys [X]
S3 cpuz135; \??\C:\Users\Jonas\AppData\Local\Temp\cpuz135\cpuz135_x32.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-17 18:53 - 2014-06-17 18:53 - 00001428 _____ () C:\Users\Jonas\Desktop\JRT.txt
2014-06-17 18:50 - 2014-06-17 18:50 - 01016261 _____ (Thisisu) C:\Users\Jonas\Downloads\JRT.exe
2014-06-17 18:50 - 2014-06-17 18:50 - 00000000 ____D () C:\Windows\ERUNT
2014-06-17 16:45 - 2014-06-17 17:11 - 00000000 ____D () C:\AdwCleaner
2014-06-17 16:45 - 2014-06-17 16:45 - 01333465 _____ () C:\Users\Jonas\Downloads\adwcleaner_3.212.exe
2014-06-17 16:45 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-06-17 16:19 - 2014-06-17 16:19 - 00015227 _____ () C:\ComboFix.txt
2014-06-17 16:19 - 2014-06-17 16:19 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\temp
2014-06-17 16:19 - 2014-06-17 16:19 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-17 16:19 - 2014-06-17 16:19 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-17 16:19 - 2014-06-17 16:19 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-17 15:58 - 2014-06-17 16:19 - 00000000 ____D () C:\Qoobox
2014-06-17 15:58 - 2014-06-17 16:19 - 00000000 ____D () C:\ComboFix
2014-06-17 15:58 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-06-17 15:58 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-06-17 15:58 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-06-17 15:58 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-06-17 15:58 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-06-17 15:58 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-06-17 15:58 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-06-17 15:58 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-06-17 15:57 - 2014-06-17 16:17 - 00000000 ____D () C:\Windows\erdnt
2014-06-17 15:48 - 2014-06-17 15:48 - 05206841 ____R (Swearware) C:\Users\Jonas\Downloads\ComboFix.exe
2014-06-16 19:03 - 2014-06-16 19:04 - 01072640 _____ (Farbar) C:\Users\Jonas\Downloads\FRST.exe
2014-06-16 18:58 - 2014-06-16 18:58 - 00002201 _____ () C:\Users\Public\Desktop\Norton Identity Safe.LNK
2014-06-16 18:57 - 2014-06-16 18:58 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Identity Safe
2014-06-16 18:57 - 2014-06-16 18:57 - 00000000 ____D () C:\Windows\system32\Drivers\NST
2014-06-16 18:57 - 2014-06-16 18:57 - 00000000 ____D () C:\Program Files\Norton Identity Safe
2014-06-16 18:44 - 2014-06-16 18:44 - 00000000 ____D () C:\Users\Jonas\Downloads\FRST-OlderVersion
2014-06-13 15:32 - 2014-06-13 15:32 - 00000000 ____D () C:\170fb40c1244885abd07451e32c60b6f
2014-06-12 20:01 - 2014-06-17 18:55 - 00019371 _____ () C:\Users\Jonas\Downloads\FRST.txt
2014-06-12 20:01 - 2014-06-17 18:55 - 00000000 ____D () C:\FRST
2014-06-12 19:54 - 2014-05-28 03:17 - 11082240 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 06021632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 02005504 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 19:54 - 2014-05-28 03:17 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00916992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 19:54 - 2014-05-28 03:17 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2014-06-12 19:54 - 2014-05-28 01:24 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-06-12 19:54 - 2014-05-28 01:17 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 19:54 - 2014-05-28 01:17 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 19:54 - 2014-05-28 01:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 19:54 - 2014-05-28 01:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-06-12 19:54 - 2014-04-26 18:01 - 00502784 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 19:54 - 2014-04-05 05:23 - 00915392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 19:54 - 2014-04-05 03:49 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-06-12 19:54 - 2014-03-10 03:22 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 19:54 - 2014-03-10 03:22 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 21:05 - 2014-06-17 18:54 - 00000000 ____D () C:\Users\Jonas\Desktop\CD
2014-06-11 20:04 - 2014-06-11 20:21 - 00048682 _____ () C:\Users\Jonas\Documents\Ereignisse.txt
2014-06-11 17:57 - 2014-06-11 17:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Jonas\Downloads\SpyHunter-Installer.exe
2014-06-08 11:13 - 2014-06-08 11:14 - 12855384 _____ (Nullsoft, Inc.) C:\Users\Jonas\Downloads\winamp5666_full_de-de_b3516.exe
2014-05-28 23:46 - 2010-04-05 22:00 - 00221568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-05-28 23:35 - 2014-05-28 23:35 - 00000000 ____D () C:\ProgramData\CheckPoint
2014-05-18 12:52 - 2014-05-18 12:52 - 00000780 _____ () C:\Users\Jonas\Desktop\Winamp.lnk
2014-05-18 12:52 - 2014-05-18 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-18 12:51 - 2014-05-18 13:12 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\Winamp
2014-05-18 12:51 - 2014-05-18 12:55 - 00000000 ____D () C:\Program Files\Winamp

==================== One Month Modified Files and Folders =======

2014-06-17 18:55 - 2014-06-12 20:01 - 00019371 _____ () C:\Users\Jonas\Downloads\FRST.txt
2014-06-17 18:55 - 2014-06-12 20:01 - 00000000 ____D () C:\FRST
2014-06-17 18:55 - 2011-04-27 21:26 - 00000000 ____D () C:\Users\Jonas\AppData\Local\PMB Files
2014-06-17 18:55 - 2010-04-07 15:36 - 00000000 ____D () C:\Users\Jonas\AppData\Local\Temp
2014-06-17 18:54 - 2014-06-11 21:05 - 00000000 ____D () C:\Users\Jonas\Desktop\CD
2014-06-17 18:53 - 2014-06-17 18:53 - 00001428 _____ () C:\Users\Jonas\Desktop\JRT.txt
2014-06-17 18:50 - 2014-06-17 18:50 - 01016261 _____ (Thisisu) C:\Users\Jonas\Downloads\JRT.exe
2014-06-17 18:50 - 2014-06-17 18:50 - 00000000 ____D () C:\Windows\ERUNT
2014-06-17 18:48 - 2014-04-21 00:34 - 00000362 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rmv.job
2014-06-17 18:48 - 2014-04-21 00:34 - 00000362 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rel.job
2014-06-17 18:48 - 2012-12-25 15:24 - 00000000 ____D () C:\Program Files\Steam
2014-06-17 18:48 - 2012-07-05 17:03 - 00000000 ____D () C:\Users\Jonas\AppData\Local\Spotify
2014-06-17 18:48 - 2012-05-06 00:37 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\Spotify
2014-06-17 18:48 - 2010-04-13 13:57 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-17 18:48 - 2010-04-13 12:42 - 00007916 _____ () C:\Users\Jonas\AppData\Local\d3d9caps.dat
2014-06-17 18:46 - 2010-04-07 15:25 - 01684224 _____ () C:\Windows\WindowsUpdate.log
2014-06-17 18:42 - 2013-01-03 22:34 - 02034222 _____ () C:\Windows\PFRO.log
2014-06-17 18:42 - 2011-10-04 13:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-06-17 18:42 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-17 18:42 - 2006-11-02 14:47 - 00003744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-17 18:42 - 2006-11-02 14:47 - 00003744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-17 18:41 - 2006-11-02 15:01 - 00032628 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-17 18:35 - 2012-04-02 14:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-17 17:57 - 2010-04-13 13:57 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-17 17:11 - 2014-06-17 16:45 - 00000000 ____D () C:\AdwCleaner
2014-06-17 17:11 - 2012-12-27 21:20 - 00000862 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-17 17:11 - 2010-09-11 23:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-17 17:11 - 2010-04-07 15:36 - 00000979 _____ () C:\Users\Jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-17 16:59 - 2012-12-27 21:20 - 00000850 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-17 16:46 - 2011-07-24 12:31 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-06-17 16:46 - 2010-04-27 19:09 - 00000000 ____D () C:\ProgramData\ICQ
2014-06-17 16:45 - 2014-06-17 16:45 - 01333465 _____ () C:\Users\Jonas\Downloads\adwcleaner_3.212.exe
2014-06-17 16:32 - 2014-04-23 17:05 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\vlc
2014-06-17 16:19 - 2014-06-17 16:19 - 00015227 _____ () C:\ComboFix.txt
2014-06-17 16:19 - 2014-06-17 16:19 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\temp
2014-06-17 16:19 - 2014-06-17 16:19 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-17 16:19 - 2014-06-17 16:19 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-17 16:19 - 2014-06-17 16:19 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-17 16:19 - 2014-06-17 15:58 - 00000000 ____D () C:\Qoobox
2014-06-17 16:19 - 2014-06-17 15:58 - 00000000 ____D () C:\ComboFix
2014-06-17 16:19 - 2006-11-02 13:18 - 00000000 __RHD () C:\Users\Default
2014-06-17 16:19 - 2006-11-02 13:18 - 00000000 ___RD () C:\Users\Public
2014-06-17 16:17 - 2014-06-17 15:57 - 00000000 ____D () C:\Windows\erdnt
2014-06-17 16:16 - 2006-11-02 12:23 - 00000215 _____ () C:\Windows\system.ini
2014-06-17 15:48 - 2014-06-17 15:48 - 05206841 ____R (Swearware) C:\Users\Jonas\Downloads\ComboFix.exe
2014-06-17 15:40 - 2013-10-19 15:04 - 00000000 ____D () C:\ProgramData\Norton
2014-06-16 19:04 - 2014-06-16 19:03 - 01072640 _____ (Farbar) C:\Users\Jonas\Downloads\FRST.exe
2014-06-16 18:58 - 2014-06-16 18:58 - 00002201 _____ () C:\Users\Public\Desktop\Norton Identity Safe.LNK
2014-06-16 18:58 - 2014-06-16 18:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Identity Safe
2014-06-16 18:57 - 2014-06-16 18:57 - 00000000 ____D () C:\Windows\system32\Drivers\NST
2014-06-16 18:57 - 2014-06-16 18:57 - 00000000 ____D () C:\Program Files\Norton Identity Safe
2014-06-16 18:44 - 2014-06-16 18:44 - 00000000 ____D () C:\Users\Jonas\Downloads\FRST-OlderVersion
2014-06-13 16:15 - 2011-05-31 15:33 - 00000000 ____D () C:\Users\Jonas\Desktop\Praktikumsmappe
2014-06-13 15:51 - 2008-10-14 17:49 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-13 15:32 - 2014-06-13 15:32 - 00000000 ____D () C:\170fb40c1244885abd07451e32c60b6f
2014-06-13 15:32 - 2013-08-15 11:37 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-13 15:32 - 2012-01-04 00:20 - 00000000 ____D () C:\Users\Jonas\Desktop\Technick
2014-06-13 15:32 - 2006-11-02 12:24 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-06-11 20:21 - 2014-06-11 20:04 - 00048682 _____ () C:\Users\Jonas\Documents\Ereignisse.txt
2014-06-11 18:38 - 2010-04-17 15:29 - 00000000 ___RD () C:\Users\Jonas\Desktop\Zeug
2014-06-11 18:37 - 2011-12-24 20:28 - 00000000 ____D () C:\Program Files\Origin Games
2014-06-11 18:36 - 2011-07-02 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2014-06-11 18:36 - 2008-10-08 12:51 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-06-11 18:35 - 2010-10-18 11:15 - 00000000 ____D () C:\Program Files\Landwirtschafts Simulator 2011
2014-06-11 18:35 - 2010-04-23 13:09 - 00000000 ____D () C:\Users\Jonas\Documents\My Games
2014-06-11 17:58 - 2014-06-11 17:57 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Jonas\Downloads\SpyHunter-Installer.exe
2014-06-11 15:50 - 2010-04-27 18:20 - 00000000 ____D () C:\Users\Jonas\Desktop\Autobilder
2014-06-10 23:36 - 2008-01-21 09:16 - 01567488 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-10 21:55 - 2013-04-13 11:13 - 00049651 _____ () C:\Windows\setupact.log
2014-06-10 13:53 - 2012-12-25 15:25 - 00000000 ____D () C:\Program Files\Common Files\Steam
2014-06-08 11:14 - 2014-06-08 11:13 - 12855384 _____ (Nullsoft, Inc.) C:\Users\Jonas\Downloads\winamp5666_full_de-de_b3516.exe
2014-06-02 21:51 - 2010-11-04 15:38 - 115415612 _____ () C:\Users\Jonas\Desktop\sampleModMap.zip
2014-06-02 21:11 - 2013-01-26 17:01 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-06-02 17:22 - 2014-04-04 21:27 - 00003754 _____ () C:\Program Files\mozilla firefoxsafeguard-secure-search.xml
2014-06-02 17:21 - 2014-04-04 21:27 - 00042784 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys
2014-05-29 08:51 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-28 23:51 - 2010-04-07 15:36 - 00000000 ____D () C:\Users\Jonas
2014-05-28 23:35 - 2014-05-28 23:35 - 00000000 ____D () C:\ProgramData\CheckPoint
2014-05-28 23:34 - 2011-07-24 12:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-28 23:34 - 2011-07-24 12:31 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-05-28 23:33 - 2011-07-24 12:18 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\DVDVideoSoft
2014-05-28 03:17 - 2014-06-12 19:54 - 11082240 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 06021632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 02005504 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-28 03:17 - 2014-06-12 19:54 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00916992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-28 03:17 - 2014-06-12 19:54 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2014-05-28 01:24 - 2014-06-12 19:54 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-05-28 01:17 - 2014-06-12 19:54 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-28 01:17 - 2014-06-12 19:54 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-28 01:17 - 2014-06-12 19:54 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-28 01:17 - 2014-06-12 19:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-05-23 13:49 - 2013-12-24 22:05 - 00000000 ____D () C:\Users\Jonas\Documents\DJUCED 18
2014-05-18 13:12 - 2014-05-18 12:51 - 00000000 ____D () C:\Users\Jonas\AppData\Roaming\Winamp
2014-05-18 12:55 - 2014-05-18 12:51 - 00000000 ____D () C:\Program Files\Winamp
2014-05-18 12:52 - 2014-05-18 12:52 - 00000780 _____ () C:\Users\Jonas\Desktop\Winamp.lnk
2014-05-18 12:52 - 2014-05-18 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-18 12:51 - 2008-10-15 14:22 - 00000000 ____D () C:\Program Files\Common Files\PX Storage Engine

Some content of TEMP:
====================
C:\Users\Jonas\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-17 18:55

==================== End Of Log ============================

--- --- ---

--- --- ---

cosinus · 17.06.2014, 21:01

Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Scan klicken.

Virussammlen · 17.06.2014, 21:12

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version:15-06-2014
Ran by Jonas at 2014-06-17 22:11:19
Running from C:\Users\Jonas\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe AIR (Version: 1.5.3.9130 - Adobe Systems Inc.) Hidden
Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 11 (HKLM\...\Adobe Shockwave Player) (Version: 11 - Adobe Systems, Inc.)
Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audials (HKLM\...\{942EDCE4-79EE-409E-9E7C-6EC236C037AC}) (Version: 10.3.34300.0 - Audials AG)
Battlefield 3™ (HKLM\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM\...\Battlelog Web Plugins) (Version: 2.1.7 - EA Digital Illusions CE AB)
Bonjour (HKLM\...\{2A981294-F14C-4F0F-9627-D793270922F8}) (Version: 2.0.4.0 - Apple Inc.)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Corel MediaOne (HKLM\...\{A062A15F-9CAC-4B88-98DF-87628A0BD721}) (Version: 2.00.0000 - Corel Corporation)
CorelDRAW Essential Edition 3 (Version: 3.0 - Corel Corporation) Hidden
CyberLink MediaShow (HKLM\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 4.1.2019 - CyberLink Corp.)
CyberLink MediaShow (Version: 4.1.2019 - CyberLink Corp.) Hidden
CyberLink PhotoNow (HKLM\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.5203 - CyberLink Corp.)
CyberLink PhotoNow (Version: 1.1.5203 - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.2209a - CyberLink Corp.)
CyberLink PowerDirector (Version: 7.0.2209a - CyberLink Corp.) Hidden
CyberLink PowerDVD (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 7.0.3118.0 - PowerDVDCorp.)
CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.1013 - CyberLink Corp.)
CyberLink PowerProducer (Version: 5.1013 - CyberLink Corp.) Hidden
CyberLink TV Enhance (HKLM\...\{E4C891D6-6844-41B8-86E8-633CACCC644F}) (Version: 2.0.5814 - CyberLink Corp.)
DE (Version: 3.0 - Corel Corporation) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{CA75CBF9-B078-47CB-ABA3-74EFD4FC9A43}) (Version:  - Microsoft)
DJ Control Instinct (HKLM\...\{931FD350-D575-47FE-A741-9517C4DDDA10}) (Version: 1.00.0000 - Guillemot)
DJUCED 18° (HKLM\...\{34F730A3-77BA-4741-A02A-D40762FEF274}) (Version: 1.0.91 - Guillemot)
ESN Sonar (HKLM\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
F1 2012 (HKLM\...\Steam App 208500) (Version:  - Codemasters Birmingham)
Free YouTube Download version 3.2.35.514 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.35.514 - DVDVideoSoft Ltd.)
GIANTS Editor 5.0.1 (HKLM\...\giants_editor_5.0.1_is1) (Version: 5.0.1 - GIANTS Software GmbH)
Google Chrome (HKLM\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Desktop (HKLM\...\Google Desktop) (Version: 5.8.0809.23506 - Google)
Google Drive (HKLM\...\{418BAAD1-754D-48B4-B078-46EF4F25AF42}) (Version: 1.15.6556.8063 - Google, Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden
Hercules DJ Products Series drivers (HKLM\...\{33999F1F-EA46-4E55-A239-1BA803235396}) (Version: 2.HDJS.2013 - Hercules)
ICQ7.7 (HKLM\...\{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}) (Version: 7.7 - ICQ)
Intel(R) Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - )
Intel(R) Network Connections 13.2.8.0 (HKLM\...\PROSetDX) (Version: 13.2.8.0 - Intel)
Intel(R) Network Connections 13.2.8.0 (Version: 13.2.8.0 - Intel) Hidden
Java(TM) 6 Update 7 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160070}) (Version: 1.6.0.70 - Sun Microsystems, Inc.)
Landwirtschafts Simulator 2013 (HKLM\...\FarmingSimulator2013DE_is1) (Version: 1.0 - GIANTS Software)
MCE Software Encoder 1.1 (HKLM\...\{7655E113-C306-11D9-A373-0050BAE317E1}) (Version: 1.1.0.1918 - CyberLink Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 Design Tools DEU (HKLM\...\{E32260E7-0B10-43C7-9B77-AB9F4184676D}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 DEU (HKLM\...\{159098AF-4EB8-4C10-B0C6-24CDA32B45F9}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft Visual Basic 2008 Express Edition - DEU (HKLM\...\Microsoft Visual Basic 2008 Express Edition - DEU) (Version:  - Microsoft Corporation)
Microsoft Visual Basic 2008 Express Edition - DEU (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework (HKLM\...\{C07B8BC4-AFD9-3AA4-BDF5-330A07591FDE}) (Version: 3.5.21022 - Microsoft)
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 (HKLM\...\{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}) (Version: 6.1.5288.17011 - Microsoft Corporation)
Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 29.0.1 (x86 de) (HKLM\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 8 Essentials (HKLM\...\{47948554-90C6-4AAC-8CFA-D23CE11C1031}) (Version: 8.3.124 - Nero AG)
neroxml (Version: 1.0.0 - Nero AG) Hidden
Norton Identity Safe (HKLM\...\NST) (Version: 2014.7.0.47 - Symantec Corporation)
Notepad++ (HKLM\...\Notepad++) (Version: 5.7 - )
NVIDIA 3D Vision Controller-Treiber 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 301.42 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Grafiktreiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.12.0213 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.0213 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0213 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
OpenAL (HKLM\...\OpenAL) (Version:  - )
Origin (HKLM\...\Origin) (Version: 8.5.0.4550 - Electronic Arts, Inc.)
Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.3.3.6 - Pando Networks Inc.)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Ralink RT2870 Wireless LAN Card (HKLM\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.0.4.0 - Ralink)
Rapture3D 2.4.4 Game (HKLM\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version:  - Blue Ripple Sound)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM\...\{08B3869E-D282-424C-9AFC-870E04A4BA14}) (Version: 1.00.0000 - Rockstar Games)
Rockstar Games Social Club (HKLM\...\Rockstar Games Social Club) (Version: 1.0.6.1 - Rockstar Games)
SanDiskSecureAccess_Manager.exe (HKCU\...\@@__UNKNOWN__@@SanDiskSecureAccess_Manager.exe) (Version: 1.1.19755 - Gemalto N.V.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab CYRI (HKLM\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.11 - TeamSpeak Systems GmbH)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: 2.6.1f3_31223 - Unity Technologies ApS)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version:  - Microsoft)
Update Manager (Version: 4.60 - Corel Corporation) Hidden
VC Runtimes MSI (Version: 9.0.21022 - Microsoft) Hidden
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
VirtualDJ Home FREE (HKLM\...\{A6AC699F-8315-40CA-8F70-E917494978AB}) (Version: 7.4 - Atomix Productions)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live Fotogalerie (HKLM\...\{A1D08B90-AE1A-4885-AC29-731496FD397E}) (Version: 12.0.1347.0718 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live installer (HKLM\...\{7A7B0BF3-2F00-4F03-8A9B-6ABCC07B90C6}) (Version: 12.0.1471.1025 - Microsoft Corporation)
Windows Live Mail (HKLM\...\{82F2B38B-1426-443D-874C-AC25675E7BEB}) (Version: 12.0.1606.1023 - Microsoft Corporation)
Windows Live Messenger (HKLM\...\{2B091530-69AA-442E-AB09-39ED06B58220}) (Version: 8.5.1302.1018 - Microsoft Corporation)
Windows Live Writer (HKLM\...\{B8D42C3A-3CFF-4A8A-A7DA-4F44474D12C5}) (Version: 12.0.1370.0325 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
X10 Hardware(TM) (HKLM\...\X10Hardware) (Version:  - )

==================== Restore Points  =========================

31-05-2014 09:29:43 Geplanter Prüfpunkt
31-05-2014 22:00:06 Geplanter Prüfpunkt
01-06-2014 11:39:44 Geplanter Prüfpunkt
02-06-2014 17:23:00 Geplanter Prüfpunkt
03-06-2014 14:08:15 Geplanter Prüfpunkt
04-06-2014 18:24:08 Geplanter Prüfpunkt
05-06-2014 17:21:37 Geplanter Prüfpunkt
06-06-2014 22:05:19 Geplanter Prüfpunkt
07-06-2014 13:33:24 Geplanter Prüfpunkt
08-06-2014 22:00:06 Geplanter Prüfpunkt
09-06-2014 10:36:12 Geplanter Prüfpunkt
10-06-2014 17:38:22 Geplanter Prüfpunkt
11-06-2014 16:29:37 ICQ Sparberater wird entfernt
11-06-2014 16:36:01 Entfernt L.A. Noire
13-06-2014 13:26:35 Windows Update
13-06-2014 13:47:27 Windows Update
15-06-2014 21:12:01 Geplanter Prüfpunkt
16-06-2014 17:23:59 Windows Update
17-06-2014 16:07:53 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2011-10-11 19:25 - 2014-06-17 16:16 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {29FD8E40-D724-46E0-9047-61C4A32C6C51} - System32\Tasks\AVG-Secure-Search-Update_0414c_rel => C:\Program Files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe
Task: {31A4E6B1-EE21-44D4-A3C0-7062ABAD8A41} - System32\Tasks\e5dbc9c0 => C:\Users\Jonas\AppData\Local\Temp\\setup2921986496.exe <==== ATTENTION
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3509F1AF-D69D-4763-A4F7-E974C2E225AA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-13] (Google Inc.)
Task: {38E87678-E0F8-481E-8098-5AF691D47132} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-13] (Google Inc.)
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {63B8AFC4-1C8D-4240-86F7-DFAFD06C8732} - System32\Tasks\78b05dc0 => C:\Users\Jonas\AppData\Local\Temp\\setup576504256.exe <==== ATTENTION
Task: {6A8E06AD-F060-43EE-BD48-6E5D55F255E4} - System32\Tasks\422891c0 => C:\Users\Jonas\AppData\Local\Temp\\setup222275008.exe <==== ATTENTION
Task: {7905D61F-4B20-4470-88A6-82C9A2B7BCD4} - System32\Tasks\9b421c0 => C:\Users\Jonas\AppData\Local\Temp\\setup3616807360.exe <==== ATTENTION
Task: {839673C7-65FA-41F3-BECB-A2C40029D21B} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {8C447A04-7DB0-491F-83A0-F63C2FF3D779} - System32\Tasks\304279c0 => C:\Users\Jonas\AppData\Local\Temp\\setup4216950208.exe <==== ATTENTION
Task: {926F0F41-0EEA-4F5D-BC8D-5DB8359D22EE} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {95CF5A84-D231-47E0-BED2-AE15D0D3E4E8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {B1F8338F-D0ED-4613-953F-FD5A8F4CA66D} - System32\Tasks\51faa1c0 => C:\Users\Jonas\AppData\Local\Temp\\setup581139904.exe <==== ATTENTION
Task: {B630FFC3-DFBA-47C5-97F0-780EA2D8CF67} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: {D690736B-6FB6-4590-BD28-0E5600F83C39} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {DA39E15F-88C5-49B7-9E19-4A361CE22EA0} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {F8D7E2FC-CE11-4E58-8071-93EB4B5643C6} - System32\Tasks\AVG-Secure-Search-Update_0414c_rmv => C:\Program Files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rel.job => C:\Program Files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rmv.job => C:\Program Files\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0414c.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job => C:\Windows\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2013-08-31 15:04 - 2013-08-31 16:09 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe
2007-06-05 13:20 - 2007-06-05 13:20 - 00177704 _____ () C:\Windows\system32\PSIService.exe
2008-10-17 17:14 - 2008-10-14 02:53 - 00241734 _____ () C:\Program Files\Cyberlink\Shared files\RichVideo.exe
2008-10-17 17:15 - 2008-10-14 02:52 - 00376937 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVECapSvc.exe
2008-10-17 17:15 - 2008-10-14 02:52 - 00094208 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\CLSchRecordMonitor.dll
2008-10-17 17:15 - 2008-10-14 02:52 - 00299118 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\CLCapEngine.dll
2008-10-17 17:15 - 2008-10-14 02:52 - 00032768 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\CLCapSvcps.dll
2008-10-17 17:15 - 2008-10-14 02:52 - 00184423 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVESched.exe
2008-10-17 17:15 - 2008-10-14 02:52 - 00127080 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\CLSchMgr.dll
2008-10-17 17:15 - 2008-10-14 02:52 - 00339968 _____ () C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\CLTinyDB.dll
2010-04-07 15:35 - 2010-04-07 15:35 - 00034816 _____ () C:\Program Files\Google\Google Desktop Search\gzlib.dll
2011-04-27 21:26 - 2011-04-27 21:26 - 02937528 _____ () C:\Program Files\Pando Networks\Media Booster\PMB.exe
2012-07-05 17:03 - 2014-05-15 13:52 - 36966968 _____ () C:\Users\Jonas\AppData\Roaming\Spotify\Data\libcef.dll
2013-05-22 20:50 - 2013-05-22 20:50 - 00400704 _____ () C:\Users\Jonas\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
2013-10-07 10:01 - 2013-10-07 10:01 - 00529160 _____ () C:\Program Files\Audials\Audials 10\AudialsNotifier.exe
2014-02-13 16:49 - 2014-02-13 16:49 - 00585216 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\ManagedInterfaces\95bf1ed8678b7a4d9178eca038345ce6\ManagedInterfaces.ni.dll
2014-05-15 15:45 - 2014-05-15 15:45 - 02529792 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\AudialsComponents\045f3d8250652f7245b40486b049eac4\AudialsComponents.ni.dll
2014-02-13 16:49 - 2014-02-13 16:49 - 00043008 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\jData\287287d952549367bb70eb1a84833a7a\jData.ni.dll
2014-02-13 16:50 - 2014-02-13 16:50 - 00267264 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\Utils\54bc188966142bb4dde657534af05941\Utils.ni.dll
2014-05-15 15:45 - 2014-05-15 15:45 - 00223744 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\SmartThreadPool\98743fa48607d78efd56f2b404723182\SmartThreadPool.ni.dll
2014-02-13 16:50 - 2014-02-13 16:50 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\fastJSON\eea3147eff3539772d1f2708433d22b4\fastJSON.ni.dll
2014-02-13 16:50 - 2014-02-13 16:50 - 00480256 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\RSControls\b9ad33601268671c242639b8ac8074f1\RSControls.ni.dll
2014-02-13 16:50 - 2014-02-13 16:50 - 00073216 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\CrashHandlerNET\ec5bd9f5d46235b0f0f823afdb1269d5\CrashHandlerNET.ni.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00046080 _____ () C:\Program Files\Audials\Audials 10\boost_thread-vc90-mt-1_39.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00045056 _____ () C:\Program Files\Audials\Audials 10\boost_date_time-vc90-mt-1_39.dll
2013-10-07 10:02 - 2013-10-07 10:02 - 00545032 _____ () C:\Program Files\Audials\Audials 10\StreamingClient.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00012800 _____ () C:\Program Files\Audials\Audials 10\boost_system-vc90-mt-1_39.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00068360 _____ () C:\Program Files\Audials\Audials 10\CrashRpt.dll
2013-10-07 10:02 - 2013-10-07 10:02 - 00409352 _____ () C:\Program Files\Audials\Audials 10\SQLite3.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00614912 _____ () C:\Program Files\Audials\Audials 10\boost_regex-vc90-mt-1_39.dll
2013-10-07 10:01 - 2013-10-07 10:01 - 00249096 _____ () C:\Program Files\Audials\Audials 10\de-DE\AudialsNotifier.resources.dll
2012-02-15 01:05 - 2012-02-15 01:37 - 11796096 _____ () C:\Users\Jonas\AppData\Roaming\SanDisk\My Vaults\dmBackup.dll
2013-09-24 15:24 - 2014-05-15 13:52 - 00598072 _____ () C:\Users\Jonas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2013-09-24 15:24 - 2014-05-15 13:52 - 00886840 _____ () C:\Users\Jonas\AppData\Roaming\Spotify\Data\libglesv2.dll
2013-09-24 15:24 - 2014-05-15 13:52 - 00108600 _____ () C:\Users\Jonas\AppData\Roaming\Spotify\Data\libegl.dll
2010-04-27 19:06 - 2008-09-16 20:18 - 00132608 _____ () C:\Program Files\WinRAR\rarext.dll
2014-05-14 17:36 - 2014-05-14 17:36 - 16361136 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll
2013-10-22 22:37 - 2014-05-10 09:12 - 03839088 _____ () C:\program files\mozilla firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============

Name: Flash HS-CF
Description: Flash HS-CF
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows cannot initialize the device driver for this hardware. (Code 37)
Resolution: The driver returned failure from its DriverEntry routine. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.

Name: Flash HS-MS/SD
Description: Flash HS-MS/SD
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows cannot initialize the device driver for this hardware. (Code 37)
Resolution: The driver returned failure from its DriverEntry routine. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.

Name: Flash HS-SM
Description: Flash HS-SM
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows cannot initialize the device driver for this hardware. (Code 37)
Resolution: The driver returned failure from its DriverEntry routine. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-06-16 19:05:19.659
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-16 19:05:19.193
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-16 19:05:18.716
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-16 19:05:18.203
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 56%
Total physical RAM: 3325.27 MB
Available physical RAM: 1439.89 MB
Total Pagefile: 6846.53 MB
Available Pagefile: 4723.96 MB
Total Virtual: 2047.88 MB
Available Virtual: 1918.61 MB

==================== Drives ================================

Drive c: (BOOT) (Fixed) (Total:911.51 GB) (Free:680.96 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:19.99 GB) (Free:7.78 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: D658CF8B)
Partition 1: (Active) - (Size=912 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)

==================== End Of Log ============================

cosinus · 17.06.2014, 21:21

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
Task: {31A4E6B1-EE21-44D4-A3C0-7062ABAD8A41} - System32\Tasks\e5dbc9c0 => C:\Users\Jonas\AppData\Local\Temp\\setup2921986496.exe <==== ATTENTION
Task: {63B8AFC4-1C8D-4240-86F7-DFAFD06C8732} - System32\Tasks\78b05dc0 => C:\Users\Jonas\AppData\Local\Temp\\setup576504256.exe <==== ATTENTION
Task: {6A8E06AD-F060-43EE-BD48-6E5D55F255E4} - System32\Tasks\422891c0 => C:\Users\Jonas\AppData\Local\Temp\\setup222275008.exe <==== ATTENTION
Task: {7905D61F-4B20-4470-88A6-82C9A2B7BCD4} - System32\Tasks\9b421c0 => C:\Users\Jonas\AppData\Local\Temp\\setup3616807360.exe <==== ATTENTION
Task: {8C447A04-7DB0-491F-83A0-F63C2FF3D779} - System32\Tasks\304279c0 => C:\Users\Jonas\AppData\Local\Temp\\setup4216950208.exe <==== ATTENTION
Task: {B1F8338F-D0ED-4613-953F-FD5A8F4CA66D} - System32\Tasks\51faa1c0 => C:\Users\Jonas\AppData\Local\Temp\\setup581139904.exe <==== ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Virussammlen · 18.06.2014, 14:57

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:15-06-2014
Ran by Jonas at 2014-06-18 15:52:55 Run:1
Running from C:\Users\Jonas\Downloads
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
Task: {31A4E6B1-EE21-44D4-A3C0-7062ABAD8A41} - System32\Tasks\e5dbc9c0 => C:\Users\Jonas\AppData\Local\Temp\\setup2921986496.exe <==== ATTENTION
Task: {63B8AFC4-1C8D-4240-86F7-DFAFD06C8732} - System32\Tasks\78b05dc0 => C:\Users\Jonas\AppData\Local\Temp\\setup576504256.exe <==== ATTENTION
Task: {6A8E06AD-F060-43EE-BD48-6E5D55F255E4} - System32\Tasks\422891c0 => C:\Users\Jonas\AppData\Local\Temp\\setup222275008.exe <==== ATTENTION
Task: {7905D61F-4B20-4470-88A6-82C9A2B7BCD4} - System32\Tasks\9b421c0 => C:\Users\Jonas\AppData\Local\Temp\\setup3616807360.exe <==== ATTENTION
Task: {8C447A04-7DB0-491F-83A0-F63C2FF3D779} - System32\Tasks\304279c0 => C:\Users\Jonas\AppData\Local\Temp\\setup4216950208.exe <==== ATTENTION
Task: {B1F8338F-D0ED-4613-953F-FD5A8F4CA66D} - System32\Tasks\51faa1c0 => C:\Users\Jonas\AppData\Local\Temp\\setup581139904.exe <==== ATTENTION
         


*****************

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{31A4E6B1-EE21-44D4-A3C0-7062ABAD8A41}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{31A4E6B1-EE21-44D4-A3C0-7062ABAD8A41}' => Key deleted successfully.
C:\Windows\System32\Tasks\e5dbc9c0 => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\e5dbc9c0' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{63B8AFC4-1C8D-4240-86F7-DFAFD06C8732}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63B8AFC4-1C8D-4240-86F7-DFAFD06C8732}' => Key deleted successfully.
C:\Windows\System32\Tasks\78b05dc0 => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\78b05dc0' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6A8E06AD-F060-43EE-BD48-6E5D55F255E4}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6A8E06AD-F060-43EE-BD48-6E5D55F255E4}' => Key deleted successfully.
C:\Windows\System32\Tasks\422891c0 => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\422891c0' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7905D61F-4B20-4470-88A6-82C9A2B7BCD4}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7905D61F-4B20-4470-88A6-82C9A2B7BCD4}' => Key deleted successfully.
C:\Windows\System32\Tasks\9b421c0 => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\9b421c0' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8C447A04-7DB0-491F-83A0-F63C2FF3D779}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C447A04-7DB0-491F-83A0-F63C2FF3D779}' => Key deleted successfully.
C:\Windows\System32\Tasks\304279c0 => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\304279c0' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B1F8338F-D0ED-4613-953F-FD5A8F4CA66D}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B1F8338F-D0ED-4613-953F-FD5A8F4CA66D}' => Key deleted successfully.
C:\Windows\System32\Tasks\51faa1c0 => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\51faa1c0' => Key deleted successfully.


The system needed a reboot. 

==== End of Fixlog ====

11.06.2014, 20:04	#4
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Avira findet ständig TR/Patched.Ren.Gen' [trojan] Ok und weiter? Wo sind die anderen Logs von FRST? __________________ Logfiles bitte immer in CODE-Tags posten

17.06.2014, 21:01	#12
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Avira findet ständig TR/Patched.Ren.Gen' [trojan] Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Scan klicken. __________________ Logfiles bitte immer in CODE-Tags posten

Avira findet ständig TR/Patched.Ren.Gen' [trojan]

Plagegeister aller Art und deren Bekämpfung: Avira findet ständig TR/Patched.Ren.Gen' [trojan]