Nö, lass einfach laufen und warten wir das Endergebnis ab.

So, Scan ist endlich fertig:

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=9e1c24079a9ee24e8c4b7e07821718b5
# engine=19682
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-08-15 09:35:07
# local_time=2014-08-15 11:35:07 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.0.6001 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 22623 152690685 0 0
# compatibility_mode_1=''
# compatibility_mode=5892 16776574 100 100 14856 245671279 0 0
# scanned=197943
# found=80
# cleaned=0
# scan_time=8560
sh=39727BCF2543BE1E1B7F66A26AD88991B5E87A9E ft=1 fh=411585b0142f5330 vn="Variante von MSIL/Toolbar.Linkury.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\BrowserHelper.exe.vir"
sh=178B194FF8430AEA92A740632C0CAF21D62BC6F0 ft=1 fh=60abfaf896ba0cc6 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Interop.SHDocVw.dll.vir"
sh=22C537EC97EDD0452B9CA913361B93D32D136B2A ft=1 fh=c7ccef8b3e1535b6 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\MACTrackBarLib.dll.vir"
sh=ECD92EE75EB0DBE303A9616919D6BA78532345D7 ft=1 fh=c76944c94b8e8b12 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\NDde.dll.vir"
sh=B1BDCD934E1205D38F86B410E55BF844F6CB2B6E ft=1 fh=6cbfa12425a91bba vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Newtonsoft.Json.dll.vir"
sh=B290F6BFC300317A636DF735DCCE0F5B47F0E06B ft=1 fh=c19b82ebeeb1cdc5 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\sgml.dll.vir"
sh=F35805044835A3E1DE6944BB17DBD16B652177E3 ft=1 fh=1f283a283cbd8560 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\sidb.dll.vir"
sh=82182D5DE08E6AC6C13289261BE653FE4E851702 ft=1 fh=46468c4ac5af0536 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\siem.dll.vir"
sh=32531A43D401E017E6EF63407BBDB1EC4F4FC365 ft=1 fh=e07bd36d680eda20 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\sipb.dll.vir"
sh=6DF917718FE1071EC8BBFC4C92A3FEE4E3A3A7CA ft=1 fh=60b6e7071c52c932 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\sismlp.dll.vir"
sh=4173757B5AD0AE078DDF9FA5EE625388539ECE8C ft=1 fh=b1a7f49b5e1dc8de vn="Variante von Win32/Toolbar.Linkury.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.exe.vir"
sh=421177018DC508910FD25232D75588AAAA6160C0 ft=1 fh=222544237f99f476 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll.vir"
sh=F35452FECE5F75D805DA85D418F56445C7D8AB97 ft=1 fh=ec608d50e1da1f4e vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll.vir"
sh=0C1CCE5A2086396F8B8FEB6D65CF3826BFB22C62 ft=1 fh=c665906c5f48e919 vn="Variante von Win32/Toolbar.Linkury.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll.vir"
sh=FA509CB75784F32961516AF5041553E50FA95099 ft=1 fh=a90ff93b978b0e39 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll.vir"
sh=D827791B1958BC575AFDDF7A17051443AFD16520 ft=1 fh=ac96aebe5cdf07f2 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll.vir"
sh=1FAB1254447A648316ECD5B37ED4F3A8C44A415D ft=1 fh=aead5c34f367dfe2 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll.vir"
sh=A91782F092DAEDEAE6112BEFD2A3BECA4E8A0900 ft=1 fh=a861f7b9c1c3e6d7 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.FireFoxLocalPlugin.dll.vir"
sh=68D88B3FA4D17934683A782746E4193EF4C9A546 ft=1 fh=8d55866a6ceb2390 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll.vir"
sh=B4E92970F1DB77AF8409EB37392A541E1EDB7793 ft=1 fh=ebbc87e2b6c0f8e6 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll.vir"
sh=6F1707B81E212A4A3CAA6407760560C9D1CFCB26 ft=1 fh=835ab5d1fe2341ed vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll.vir"
sh=5D7F1488E6431B4BCDB1ED19085D5D3E16AAE572 ft=1 fh=f0ca28abe7a9bd56 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll.vir"
sh=30920D9A63D5C575259E5479D0935292D4334CB2 ft=1 fh=9996e5bcf9fafe69 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll.vir"
sh=8AD6314A382AC53DF589443B1BFC3AF0595E5CCD ft=1 fh=912365ab03627dd6 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll.vir"
sh=CCC70802F87515492D23F5085A252F223D0C01BE ft=1 fh=8769520ae760c4b6 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll.vir"
sh=748425711102D7B6636D099A675E6500FE5D6E40 ft=1 fh=d644c2cb2e98a284 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\Smartbar.Resources.Translations.dll.vir"
sh=ED2E4711DE0C60F69862EEAA2300400611BDEA31 ft=1 fh=cae2c9b4172869cb vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO.dll.vir"
sh=ED2E4711DE0C60F69862EEAA2300400611BDEA31 ft=1 fh=cae2c9b4172869cb vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO2.dll.vir"
sh=F2C7700FDE071C3EC01BFB8969A1134C7874072A ft=1 fh=bbd2deaf5deda993 vn="Variante von MSIL/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension.dll.vir"
sh=F2C7700FDE071C3EC01BFB8969A1134C7874072A ft=1 fh=bbd2deaf5deda993 vn="Variante von MSIL/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension2.dll.vir"
sh=44E10326ECCAEA9AD009E82120FF034EF8C77F12 ft=1 fh=93946633b3131719 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe.vir"
sh=3CFC911F176C10929E3C7C88B7513A1461F1F5F5 ft=1 fh=d6f0f22ae006d3c1 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\spbe.dll.vir"
sh=C883089E0ABA41D817653DB5EED4D9229AD3A8B3 ft=1 fh=2053d7cbaf8433c2 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\spbl.dll.vir"
sh=72AE44754322D5A535B43163E4ECD1BF7E109E27 ft=1 fh=b29c4c37c0d68050 vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\sppsm.dll.vir"
sh=532EF8421E35C6E269653265516276CC81295245 ft=1 fh=5643b33af54b8c22 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\spsm.dll.vir"
sh=136C16076EA03EAD9C78E08C19B55F61EDA74E19 ft=1 fh=bab1424d43ff780b vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\spusm.dll.vir"
sh=7A13EC73E546D993600EB9F3B6FD87E9384415DD ft=1 fh=92fef06e16fd3c15 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srau.dll.vir"
sh=6A79985AB2F1EC937BEC900AFEF7E0CA4FFACA71 ft=1 fh=ddda115a96222bf8 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srbhu.dll.vir"
sh=D652D132A9A85CC1CFA002FF66935A772A3329C6 ft=1 fh=8d4647e31ce873a6 vn="Variante von MSIL/Toolbar.Linkury.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srbs.dll.vir"
sh=1426CB9C92905EC6E1C5F15A456F2FBB2892BCE9 ft=1 fh=6cbe46cd78372847 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srgu.dll.vir"
sh=18ABC9D2A3168BF03FE01CD47655B3FDF469937A ft=1 fh=1df00fd2d193a4ac vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srns.dll.vir"
sh=8A8BA71C825B3B3D90225AEA26187D994CCCDADB ft=1 fh=f8e9be590da8a9a1 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srpdm.dll.vir"
sh=E5B3BE3A74C512458E1E50DC801450C4C15338BA ft=1 fh=2e41ec69aaa76999 vn="Variante von MSIL/Toolbar.Linkury.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srprl.dll.vir"
sh=2A9EEE08DB86A5282EA2CCA2B29263D2956EF5A3 ft=1 fh=7d32b7fbd64cf212 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srpu.dll.vir"
sh=9340CF96ADC8B14CE05B0D2CB6AACC1289573403 ft=1 fh=dc848053d71a874d vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srsbs.dll.vir"
sh=76A60601FEF95544FECDCD7C6BB2E5F5F292664C ft=1 fh=7cb664700f2fcbdb vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srsbsau.dll.vir"
sh=2C94D0D44301170FA3A2C13E33F969B30B1E1A3F ft=1 fh=a016ca3775f977f3 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srsl.dll.vir"
sh=D07A834F60CB3204DA4FFA4FE97A32BC5DDFE431 ft=1 fh=234665e1bd1d7f33 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\sruhs.dll.vir"
sh=2962DDFC7FEC53BD6415A4B6EB93E8172B5D40DE ft=1 fh=11594c6570341dc1 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srus.dll.vir"
sh=C49DBA6C49DEE0CD679A557D2307E9FE9E71C74C ft=1 fh=c8c7e0272019bbbf vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\srut.dll.vir"
sh=1A63D5D4F7D46FBBC9E6011C2CB03BDC3E5FE331 ft=1 fh=1b3cecf6924a8b70 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll.vir"
sh=C993CF7F4BC36C7C19CCE1BF1D86D91F82B6372C ft=1 fh=517d2939207d7e1d vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\ar\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=9E06E8B8D08B1C853672CC55743238CA4E963E7A ft=1 fh=a2229e8447c2427c vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=B520137D0FC3FD7DD27B34F89C0506C9A79E15B1 ft=1 fh=aaab7aae3301a073 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\es\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=8A88D0B028B11CF4602FA97B2280CDB7B585C903 ft=1 fh=e8a3b21a476355c0 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\fr\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=847AA4FEECD8AD829B6BC9909F5FFD3C449B040F ft=1 fh=4605ab81e68636fb vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\he\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=C7E054C7BA58AE2D703DB29C52346A3ED84FEF57 ft=1 fh=53532950b9749a4f vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_20.dll.vir"
sh=C546BA3CA78F93EB65DCCEA191BC40B9F940E2EA ft=1 fh=6fd80785d353cf5d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_21.dll.vir"
sh=7C15DA5A80F24F0383C992CFB03CF68E95A464B1 ft=1 fh=be427aaf403ae2ff vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_22.dll.vir"
sh=95544372D9D68E8AFAE5E9DA8B07C14CE5406ABB ft=1 fh=dd489ec711c15129 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_23.dll.vir"
sh=BA8871127FB23B24A8963B6A5992DED58259E590 ft=1 fh=65df87dcc97c6ea8 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_24.dll.vir"
sh=6AEDDB65A3AD9C611CE4C7146EFDA4E328063FE8 ft=1 fh=9800be3f58c07b56 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\it\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=89D4CEB9035E109B5DE308DDED95F3027021115C ft=1 fh=aa49b718abecd5d5 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\nl\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=50C22509DAF877DEC72B6A3B4A3FA684CA94AB09 ft=1 fh=e38f9687bbf0fcca vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\pt\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=4777730E7C0D80EC73D29DAED237361F37072F34 ft=1 fh=562c36f4d6d43d36 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\ru\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=B81312E3760DCF165D60DC5CCEBC9F15BA94853E ft=1 fh=0c27864f980eaf85 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Application\tr\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=57B78F03D8CF46E5335DBE56139F3205C706F54B ft=1 fh=685593c0a7537a92 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.DMP.dll.vir"
sh=92E33636D6B7CC58AE96552F2C7237C4FE469A3A ft=1 fh=c3fffdd6ecda1569 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.MessengerPlugin.dll.vir"
sh=8C2B527B23FE522346FD91424ADFF664E7D298CA ft=1 fh=026a1cd1f9e48cf4 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.NotepadPlugin.dll.vir"
sh=E6A71F458899B102A18A3E7F15789936F60FDC0E ft=1 fh=ca834528842c9f9b vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.ScreenCapturePlugin.dll.vir"
sh=0CD4706D601AA5FBCCE9D5D4BDB4592F1E74AE9B ft=1 fh=bbf30ebdcfbdbe18 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WeatherPlugin.dll.vir"
sh=E811F3F39F9E1E1DFC06F050B9B60238D4ECAAC6 ft=1 fh=85499a6d347f9321 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WordPlugin.dll.vir"
sh=86A4E2B12D4B3D5C33ABEA625226F1B1EEF516BE ft=1 fh=88b22f79132772dd vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.YoutubeDownloadPlugin.dll.vir"
sh=8F2A6FA742389FB96C1DB38991164BE1928F837C ft=1 fh=6d2ea6c08c28b012 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Local\Smartbar\Common\ServicesPlugins\spup.dll.vir"
sh=98FCF260C8C676E33DA77173AB222BA6B0142116 ft=1 fh=e0b1efaf129489ac vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Roaming\OpenCandy\29D33B1BBA8049B9A1DA853010FBA063\zafwSetupWeb_131_211_000.exe.vir"
sh=29E42A61A6BE387A24C035693D509D873C02D916 ft=1 fh=b326822ef8b4edbf vn="Win32/SpeedUpMyPC.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Roaming\OpenCandy\74D64134126A45C685E1C9732F30B803\speedupmypcDE.exe.vir"
sh=47E8773722C91DD2792ED05E79910C87DA832874 ft=1 fh=24f1ec3461bda9be vn="Variante von Win32/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wichsis\AppData\Roaming\OpenCandy\CDF933C9E6B74BC8B9D13D983F1C7447\Installer.exe.vir"
sh=ED705943E61D07143E332403421E303B72496029 ft=1 fh=02a6bc1dbd5b0b8e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Kathi\Desktop\FreeYouTubeToMP3Converter_3.11.20.exe"
sh=25467DF975CC3DDEC27DE2E53399DB01CA5F05CE ft=1 fh=859963bf416007ff vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Kathi\Downloads\PrintKey 2000 - CHIP-Downloader.exe"
sh=178B194FF8430AEA92A740632C0CAF21D62BC6F0 ft=1 fh=60abfaf896ba0cc6 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll"
         

Sehr gut...und das Service-Scanner-Log noch bitte....

Farbar Service Scanner Version: 21-07-2014
Ran by Wichsis (administrator) on 15-08-2014 at 23:42:43
Running from "c:\Users\Wichsis\Downloads"
Microsoft® Windows Vista™ Home Basic  Service Pack 1 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Attempt to access Google IP returned error. Google IP is unreachable
Google.com is accessible.
Attempt to access Yahoo.com returned error: Yahoo.com is unreachable


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Disabled Policy: 
========================


Security Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => File is digitally signed
C:\Windows\system32\Drivers\nsiproxy.sys => File is digitally signed
C:\Windows\system32\dhcpcsvc.dll => File is digitally signed
C:\Windows\system32\Drivers\afd.sys => File is digitally signed
C:\Windows\system32\Drivers\tdx.sys => File is digitally signed
C:\Windows\system32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\system32\dnsrslvr.dll => File is digitally signed
C:\Windows\system32\mpssvc.dll => File is digitally signed
C:\Windows\system32\bfe.dll => File is digitally signed
C:\Windows\system32\Drivers\mpsdrv.sys => File is digitally signed
C:\Windows\system32\SDRSVC.dll => File is digitally signed
C:\Windows\system32\vssvc.exe => File is digitally signed
C:\Windows\system32\wscsvc.dll => File is digitally signed
C:\Windows\system32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\system32\wuaueng.dll => File is digitally signed
C:\Windows\system32\qmgr.dll => File is digitally signed
C:\Windows\system32\es.dll => File is digitally signed
C:\Windows\system32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\system32\ipnathlp.dll => File is digitally signed
C:\Windows\system32\iphlpsvc.dll => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed


**** End of log ****
         

Jo, das schaut auch gut aus.
Dann machen wir uns mal an die Updates:

Java 7 Update 7
         

Das bitte mal deinstallieren.


Das installieren:
Download Windows Server 2008 Service Pack 2 und Windows Vista Service Pack 2 - Five Language Standalone (KB948465) from Official Microsoft Download Center

Danach das machen (also alles an Updates saugen was geht)
Windows Vista aktualisieren - Teil 4: Manuelle Updateinstallation

Und wenn alles erledigt hast:

Schritt 1



Bitte starte FRST erneut, markiere auch die checkbox und drücke auf Scan.
Bitte poste mir den Inhalt der beiden Logs die erstellt werden.

Java habe ich deinstalliert.

Die Windows-Service-exe lässt sich leider nicht ausführen.
Es kommt die Fehlermeldung "Windows6.0-KB948465-X86.exe ist keine zulässige Win32-Anwendung.

Schritt 1



Bitte starte FRST erneut, und drücke auf Scan.
Bitte poste mir den Inhalt des Logs.

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:15-08-2014
Ran by Wichsis (administrator) on KATHARINA on 16-08-2014 00:00:17
Running from c:\Users\Wichsis\Desktop
Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Fred's Software) C:\Program Files\PrintKey2000\Printkey2000.exe
(SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
() C:\Program Files\Samsung\Samsung Update Plus\SUPNotifier.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-3121953689-2843351358-1462341086-1000\...\Run: [KiesHelper] => C:\Program Files\Samsung\Kies\KiesHelper.exe [943504 2012-02-03] (Samsung)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Printkey2000.lnk
ShortcutTarget: Printkey2000.lnk -> C:\Program Files\PrintKey2000\Printkey2000.exe (Fred's Software)
Startup: C:\Users\Kathi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=SMSN&bmod=SMSN
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {6E718D87-6909-4FCE-92D4-EDCB2F725727} hxxp://navigram.com/engine/v1026/Navigram.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Wichsis\AppData\Roaming\Mozilla\Firefox\Profiles\an2mua9h.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-10-23]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-12-28]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2012-08-30]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff [2013-11-02]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx []

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1021008 2014-08-15] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [45272 2005-10-14] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [43520 2008-02-28] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53248 2008-02-28] (Hewlett-Packard) [File not signed]
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2008-11-25] ()
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S2 APNMCP; "C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2006-11-14] (SAMSUNG ELECTRONICS CO., LTD.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-08-15] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-05] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Wichsis\AppData\Local\Temp\catchme.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-15 23:53 - 2014-08-15 23:53 - 313822110 _____ () C:\Users\Wichsis\Downloads\Windows6.0-KB948465-X86.exe.part
2014-08-15 23:53 - 2014-08-15 23:53 - 00000000 _____ () C:\Users\Wichsis\Downloads\Windows6.0-KB948465-X86.exe
2014-08-15 23:42 - 2014-08-15 23:42 - 00002701 _____ () C:\Windows\system32\FSS.txt
2014-08-15 23:41 - 2014-08-15 23:41 - 00415232 _____ (Farbar) C:\Users\Wichsis\Downloads\FSS.exe
2014-08-15 21:09 - 2014-08-15 21:09 - 00000000 ____D () C:\Program Files\ESET
2014-08-15 21:08 - 2014-08-15 21:09 - 02347384 _____ (ESET) C:\Users\Wichsis\Downloads\esetsmartinstaller_deu.exe
2014-08-15 20:57 - 2014-08-15 20:57 - 00000000 ____D () C:\Users\Wichsis\AppData\Roaming\Avira
2014-08-15 20:54 - 2014-08-16 00:00 - 00012715 _____ () C:\Users\Wichsis\Desktop\FRST.txt
2014-08-15 20:00 - 2014-08-15 23:43 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-15 19:59 - 2014-08-15 19:59 - 00000899 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-15 19:59 - 2014-08-15 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-15 19:59 - 2014-08-15 19:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-15 19:59 - 2014-08-15 19:59 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-15 19:59 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-15 19:59 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-15 19:59 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-15 19:58 - 2014-08-15 19:58 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Kathi\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-15 19:46 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-08-15 19:44 - 2014-08-15 19:46 - 00000000 ____D () C:\AdwCleaner
2014-08-15 19:42 - 2014-08-15 19:42 - 01356107 _____ () C:\Users\Kathi\Downloads\adwcleaner_3.305.exe
2014-08-15 19:23 - 2014-08-15 19:23 - 00017045 _____ () C:\ComboFix.txt
2014-08-15 19:11 - 2014-08-15 19:23 - 00000000 ____D () C:\ComboFix
2014-08-15 19:11 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-15 19:11 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-15 19:11 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-15 19:11 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-15 19:11 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-15 19:11 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-15 19:11 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-15 19:11 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-15 19:10 - 2014-08-15 19:23 - 00000000 ____D () C:\Qoobox
2014-08-15 19:10 - 2014-08-15 19:21 - 00000000 ____D () C:\Windows\erdnt
2014-08-15 19:07 - 2014-08-15 19:07 - 05571320 ____R (Swearware) C:\Users\Kathi\Desktop\ComboFix.exe
2014-08-15 17:40 - 2014-08-15 17:40 - 00025127 _____ () C:\Users\Kathi\Desktop\FRST.txt
2014-08-15 17:40 - 2014-08-15 17:40 - 00022313 _____ () C:\Users\Kathi\Desktop\Addition.txt
2014-08-15 17:39 - 2014-08-15 20:30 - 00026282 _____ () C:\Users\Kathi\Downloads\FRST.txt
2014-08-15 17:39 - 2014-08-15 17:39 - 00022313 _____ () C:\Users\Kathi\Downloads\Addition.txt
2014-08-15 17:38 - 2014-08-16 00:00 - 00000000 ____D () C:\FRST
2014-08-15 17:37 - 2014-08-15 17:37 - 01092096 _____ (Farbar) C:\Users\Wichsis\Desktop\FRST.exe
2014-08-12 20:43 - 2014-08-12 20:50 - 151513264 _____ () C:\Users\Kathi\Downloads\avira_free_antivirus06_de(1).exe
2014-08-12 20:42 - 2014-08-12 20:49 - 151513264 _____ () C:\Users\Kathi\Downloads\avira_free_antivirus06_de.exe
2014-08-04 21:09 - 2014-08-04 21:09 - 00000000 ____D () C:\Users\Kathi\AppData\Roaming\dll-files.com
2014-07-30 20:35 - 2014-07-30 20:35 - 00000000 ____D () C:\Program Files\Mozilla Firefox(23)

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-16 00:00 - 2014-08-15 20:54 - 00012715 _____ () C:\Users\Wichsis\Desktop\FRST.txt
2014-08-16 00:00 - 2014-08-15 17:38 - 00000000 ____D () C:\FRST
2014-08-15 23:58 - 2009-08-11 21:16 - 00000422 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{7030CE83-CC54-445E-964F-73E63606DF74}.job
2014-08-15 23:53 - 2014-08-15 23:53 - 313822110 _____ () C:\Users\Wichsis\Downloads\Windows6.0-KB948465-X86.exe.part
2014-08-15 23:53 - 2014-08-15 23:53 - 00000000 _____ () C:\Users\Wichsis\Downloads\Windows6.0-KB948465-X86.exe
2014-08-15 23:46 - 2012-08-18 23:35 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-15 23:43 - 2014-08-15 20:00 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-15 23:42 - 2014-08-15 23:42 - 00002701 _____ () C:\Windows\system32\FSS.txt
2014-08-15 23:41 - 2014-08-15 23:41 - 00415232 _____ (Farbar) C:\Users\Wichsis\Downloads\FSS.exe
2014-08-15 23:38 - 2012-09-18 20:12 - 00001963 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-15 22:48 - 2006-11-02 14:45 - 00004784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-15 22:48 - 2006-11-02 14:45 - 00004784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-15 21:09 - 2014-08-15 21:09 - 00000000 ____D () C:\Program Files\ESET
2014-08-15 21:09 - 2014-08-15 21:08 - 02347384 _____ (ESET) C:\Users\Wichsis\Downloads\esetsmartinstaller_deu.exe
2014-08-15 20:57 - 2014-08-15 20:57 - 00000000 ____D () C:\Users\Wichsis\AppData\Roaming\Avira
2014-08-15 20:53 - 2009-07-21 20:26 - 01294441 _____ () C:\Windows\WindowsUpdate.log
2014-08-15 20:51 - 2012-08-18 23:35 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-15 20:51 - 2009-08-11 02:35 - 00000000 ____D () C:\Users\Wichsis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2014-08-15 20:49 - 2011-12-28 18:30 - 00000000 ____D () C:\Users\Kathi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2014-08-15 20:48 - 2008-01-21 05:02 - 00745920 _____ () C:\Windows\PFRO.log
2014-08-15 20:48 - 2006-11-02 14:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-15 20:47 - 2006-11-02 14:58 - 00032514 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-15 20:30 - 2014-08-15 17:39 - 00026282 _____ () C:\Users\Kathi\Downloads\FRST.txt
2014-08-15 20:19 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Speech
2014-08-15 19:59 - 2014-08-15 19:59 - 00000899 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-15 19:59 - 2014-08-15 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-15 19:59 - 2014-08-15 19:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-15 19:59 - 2014-08-15 19:59 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-15 19:58 - 2014-08-15 19:58 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Kathi\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-15 19:46 - 2014-08-15 19:44 - 00000000 ____D () C:\AdwCleaner
2014-08-15 19:46 - 2013-11-02 23:21 - 00000846 _____ () C:\Users\Wichsis\Desktop\Search.lnk
2014-08-15 19:42 - 2014-08-15 19:42 - 01356107 _____ () C:\Users\Kathi\Downloads\adwcleaner_3.305.exe
2014-08-15 19:27 - 2014-04-27 21:32 - 00000000 ___RD () C:\Users\Kathi\Dropbox
2014-08-15 19:23 - 2014-08-15 19:23 - 00017045 _____ () C:\ComboFix.txt
2014-08-15 19:23 - 2014-08-15 19:11 - 00000000 ____D () C:\ComboFix
2014-08-15 19:23 - 2014-08-15 19:10 - 00000000 ____D () C:\Qoobox
2014-08-15 19:23 - 2009-08-11 03:13 - 00000000 ____D () C:\Users\Wichsis\AppData\Local\Google
2014-08-15 19:23 - 2006-11-02 13:18 - 00000000 __RHD () C:\Users\Default
2014-08-15 19:23 - 2006-11-02 13:18 - 00000000 ___RD () C:\Users\Public
2014-08-15 19:21 - 2014-08-15 19:10 - 00000000 ____D () C:\Windows\erdnt
2014-08-15 19:21 - 2006-11-02 12:23 - 00000215 _____ () C:\Windows\system.ini
2014-08-15 19:07 - 2014-08-15 19:07 - 05571320 ____R (Swearware) C:\Users\Kathi\Desktop\ComboFix.exe
2014-08-15 18:45 - 2009-08-11 02:42 - 00106960 _____ () C:\Users\Wichsis\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-15 17:40 - 2014-08-15 17:40 - 00025127 _____ () C:\Users\Kathi\Desktop\FRST.txt
2014-08-15 17:40 - 2014-08-15 17:40 - 00022313 _____ () C:\Users\Kathi\Desktop\Addition.txt
2014-08-15 17:39 - 2014-08-15 17:39 - 00022313 _____ () C:\Users\Kathi\Downloads\Addition.txt
2014-08-15 17:37 - 2014-08-15 17:37 - 01092096 _____ (Farbar) C:\Users\Wichsis\Desktop\FRST.exe
2014-08-15 17:34 - 2014-04-27 21:29 - 00000000 ____D () C:\Users\Kathi\AppData\Roaming\Dropbox
2014-08-15 17:08 - 2013-06-30 22:48 - 00000422 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{DC24E08D-D800-4C9D-9DE2-5FF59CBB27E4}.job
2014-08-12 23:00 - 2014-06-16 11:05 - 00015080 _____ () C:\Users\Kathi\Desktop\Hochzeitsgeschenke.xlsx
2014-08-12 20:50 - 2014-08-12 20:43 - 151513264 _____ () C:\Users\Kathi\Downloads\avira_free_antivirus06_de(1).exe
2014-08-12 20:49 - 2014-08-12 20:42 - 151513264 _____ () C:\Users\Kathi\Downloads\avira_free_antivirus06_de.exe
2014-08-11 23:09 - 2014-06-16 23:09 - 00018357 _____ () C:\Users\Kathi\Desktop\malediven.xlsx
2014-08-11 23:06 - 2014-06-15 16:51 - 00000000 ____D () C:\Users\Kathi\Desktop\Hochzeit - Standesamt
2014-08-11 22:08 - 2014-02-16 18:46 - 00000000 ____D () C:\Users\Kathi\Desktop\Hochzeit
2014-08-10 14:08 - 2012-01-02 21:32 - 00000000 ____D () C:\Users\Kathi\Documents\Passwörter
2014-08-04 21:09 - 2014-08-04 21:09 - 00000000 ____D () C:\Users\Kathi\AppData\Roaming\dll-files.com
2014-08-04 21:06 - 2012-05-15 18:16 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-08-03 23:26 - 2011-12-28 18:30 - 00000000 ____D () C:\Users\Kathi
2014-08-03 23:26 - 2009-08-11 02:35 - 00000000 ____D () C:\Users\Wichsis
2014-08-03 23:26 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\spool
2014-08-03 23:26 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-08-03 23:26 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\registration
2014-08-03 23:26 - 2006-11-02 12:22 - 37748736 _____ () C:\Windows\system32\config\software_previous
2014-08-03 23:26 - 2006-11-02 12:22 - 17301504 _____ () C:\Windows\system32\config\system_previous
2014-08-03 23:23 - 2006-11-02 12:22 - 42991616 _____ () C:\Windows\system32\config\components_previous
2014-08-03 23:23 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous
2014-08-03 14:10 - 2012-10-23 18:37 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-03 14:10 - 2012-05-15 18:16 - 00000858 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-03 14:10 - 2012-05-15 18:16 - 00000846 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-03 00:01 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security_previous
2014-08-03 00:01 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\default_previous
2014-07-30 20:35 - 2014-07-30 20:35 - 00000000 ____D () C:\Program Files\Mozilla Firefox(23)
2014-07-23 10:52 - 2011-12-28 16:24 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-07-22 21:04 - 2014-04-27 21:32 - 00000919 _____ () C:\Users\Kathi\Desktop\Dropbox.lnk
2014-07-22 21:04 - 2014-04-27 21:31 - 00000000 ____D () C:\Users\Kathi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-07-18 23:55 - 2006-11-02 12:33 - 01566246 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-18 19:59 - 2006-11-02 14:49 - 00149220 _____ () C:\Windows\setupact.log
2014-07-17 18:58 - 2012-03-23 19:56 - 00000000 ____D () C:\ProgramData\tmp
2014-07-17 18:17 - 2009-08-11 02:37 - 00000000 ____D () C:\Users\Wichsis\AppData\Local\Adobe
2014-07-17 18:16 - 2012-09-18 20:11 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-07-17 18:16 - 2012-02-26 00:06 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Wichsis\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-15 20:56

==================== End Of Log ============================
         

--- --- ---