Hallo ihr lieben,
durch runterladen des neuen Youtube convertersvon chip, hab ich mir diesen Positive finds (virus) eingefangen. Ich hab es schon mit einigen sachen probiert aber ich werd dieses Ding nicht los und bin mittlerweile echt am verzweifeln.
Das Problem ist, das ich wie der Name schon sagt echt planlos bin und mich mit pcs nicht auskenne, man braucht also ein wenig geduld mit mir.
Ich hoffe ihr könnt mir trotzdem weiterhelfen.

Vielen Dank

Mrs. Planlos

Hi,

mein Name ist Heiko, ich werde dir helfen.

bitte das Tool als Admin ausführen...

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo Heiko, vielen Dank das du dich uns (meinem Laptop und mir) annimmst...

Ich hoffe ich hab das richtig gemacht...

Als erstes der FRST.txt ...
FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2015 01
Ran by Janine (administrator) on ADOLF on 05-02-2015 11:05:07
Running from C:\Users\Janine\Downloads
Loaded Profiles: Janine (Available profiles: Janine)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Egis Technology Inc.) C:\Program Files\Common Files\EgisTec CommonModule\eLock\eLockServ.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\livecomm.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe
() C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Egis Technology Inc. ) C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe
(Egis Technology Inc. ) C:\Program Files\Acer ProShield\EgisTSR.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-11-20] (ELAN Microelectronics Corp.)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [RadioController] => C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-11-11] (Dritek System Inc.)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] ()
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-02-02] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-12-18] (Oracle Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [133248 2013-05-31] ( (Atheros Communications))
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23308256 2015-01-15] (Google)
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\Run: [BrowserChoice] => C:\Windows\BrowserChoice\browserchoice.exe [86816 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\MountPoints2: {07ba5957-3445-11e4-be93-201a06772066} - "E:\HTC_Sync_Manager_PC.exe" 
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\MountPoints2: {63de9131-5c65-11e4-be9f-a4db30b42180} - "E:\HTC_Sync_Manager_PC.exe" 
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\MountPoints2: {63de9138-5c65-11e4-be9f-a4db30b42180} - "E:\HTC_Sync_Manager_PC.exe" 
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\MountPoints2: {eb5d780e-1055-11e4-be89-201a06772066} - "E:\HTC_Sync_Manager_PC.exe" 
Startup: C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1789101941-3076438747-526121426-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1789101941-3076438747-526121426-1001 -> {9FBD334C-1B8B-4470-ABBC-3698B9D550B6} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B014DE662D20140624&p={SearchTerms}
SearchScopes: HKU\S-1-5-21-1789101941-3076438747-526121426-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: EgisPBIE Sign-in Helper -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files\Acer ProShield\x86\EgisPBIE.dll (Egis Technology Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.76.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.76.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1789101941-3076438747-526121426-1001: sony.com/MediaGoDetector -> C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll (Sony Network Entertainment International LLC)
FF SearchPlugin: C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\searchplugins\webde-suche.xml
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-02-01]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-09-13]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-09-18]
FF HKLM-x32\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files\Acer ProShield\FFExt
FF Extension:  Online Accounts Extension  - C:\Program Files\Acer ProShield\FFExt [2013-11-11]
FF HKLM-x32\...\Firefox\Extensions: [{d4da7309-b89a-45ec-8ebb-cfb2ae13618b}] - C:\Program Files\Acer ProShield\FFExt20
FF Extension:  Online Accounts Extension  - C:\Program Files\Acer ProShield\FFExt20 [2013-11-11]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-02-02]
FF Extension: No Name - C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\extensions\toolbar@web.de [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome: 
=======
CHR HomePage: Default -> hxxp://google.de/
CHR StartupUrls: Default -> "hxxp://www.google.de/", "hxxp://google.de/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-05]
CHR Extension: (YouTube) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-03]
CHR Extension: (Google Tabellen) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-02]
CHR Extension: (SiteAdvisor) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-02-02]
CHR Extension: (Avast Online Security) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-02-02]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-02-02]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-01-13]
CHR HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Janine\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2015-02-03]
CHR HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - No Path
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-02-02]
CHR HKLM-x32\...\Chrome\Extension: [ihenkjeihefokohmemphikjnjbmegdik] - "C:\Program Files (x86)\Sony\Media Go\MediaGoDetector.crx" [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [ladimmjldcgbeamniagencjbodhnmgen] - C:\Program Files\Acer ProShield\ChromeEx\EgisPBChromeExt.crx [2013-04-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2015-01-19] (Adobe Systems) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [310912 2013-05-31] (Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-02-02] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2015-02-02] (Avast Software)
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-20] (Broadcom Corp.) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated)
R3 EgisTec Ticket Service; C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe [222184 2013-04-23] (Egis Technology Inc. )
R3 eLockServ; C:\Program Files\Common Files\EgisTec CommonModule\eLock\eLockServ.exe [24552 2013-04-23] (Egis Technology Inc.)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [154320 2014-12-03] (McAfee, Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-11-11] (Dritek System INC.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 A2DDA; C:\EEK\BIN\a2ddax64.sys [26176 2014-10-09] (Emsisoft GmbH)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-02-02] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [87912 2015-02-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-02-02] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-02-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-02-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-02-02] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-02-02] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-02-02] ()
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-05-31] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
S3 cleanhlp; C:\EEK\bin\cleanhlp64.sys [57024 2014-10-09] (Emsisoft GmbH)
R1 eLock2BurnerLockDriver; C:\Windows\system32\DRIVERS\eLock2BurnerLockDriver.sys [20072 2013-11-11] (Egis Technology Inc.)
R2 eLock2FSCTLDriver; C:\Windows\System32\DRIVERS\eLock2FSCTLDriver.sys [26264 2013-11-11] (Egis Technology Inc.)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-03] (Malwarebytes Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-11-11] (Dritek System Inc.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2015-02-02] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-05 11:05 - 2015-02-05 11:06 - 00024364 _____ () C:\Users\Janine\Downloads\FRST.txt
2015-02-05 11:04 - 2015-02-05 11:05 - 00000000 ____D () C:\FRST
2015-02-05 11:03 - 2015-02-05 11:03 - 02131968 _____ (Farbar) C:\Users\Janine\Downloads\FRST64.exe
2015-02-05 11:03 - 2015-02-05 11:03 - 02131968 _____ (Farbar) C:\Users\Janine\Downloads\FRST64 (1).exe
2015-02-05 10:23 - 2015-02-05 10:23 - 00000197 _____ () C:\WINDOWS\system32\2015-02-05-09-23-52.048-AvastVBoxSVC.exe-2692.log
2015-02-04 18:26 - 2015-02-05 10:28 - 00003272 _____ () C:\WINDOWS\System32\Tasks\avastBCLRestartS-1-5-21-1789101941-3076438747-526121426-1001
2015-02-04 08:36 - 2015-02-04 08:36 - 00000197 _____ () C:\WINDOWS\system32\2015-02-04-07-36-27.084-AvastVBoxSVC.exe-2424.log
2015-02-03 21:42 - 2015-02-03 21:43 - 00000197 _____ () C:\WINDOWS\system32\2015-02-03-20-42-50.035-AvastVBoxSVC.exe-2852.log
2015-02-03 21:40 - 2015-02-03 21:40 - 00013828 _____ () C:\EamClean.log
2015-02-03 19:49 - 2015-02-03 19:49 - 00002166 _____ () C:\Users\Janine\Desktop\Emsisoft Emergency Kit - CHIP Downloader.lnk
2015-02-03 19:47 - 2015-02-03 19:50 - 00000000 ____D () C:\EEK
2015-02-03 19:47 - 2015-02-03 19:47 - 00000759 _____ () C:\Users\Janine\Desktop\Start Emsisoft Emergency Kit.lnk
2015-02-03 19:41 - 2015-02-03 19:41 - 00000000 ____D () C:\Users\Janine\AppData\Roaming\DesktopIconAmazon
2015-02-03 19:27 - 2015-02-03 19:27 - 00001051 _____ () C:\Users\Janine\Desktop\JRT.txt
2015-02-03 19:22 - 2015-02-03 19:22 - 01388274 _____ (Thisisu) C:\Users\Janine\Downloads\JRT42.exe
2015-02-03 18:27 - 2015-02-03 18:29 - 00000197 _____ () C:\WINDOWS\system32\2015-02-03-17-27-09.075-AvastVBoxSVC.exe-3148.log
2015-02-03 18:18 - 2015-02-03 18:23 - 00000000 ____D () C:\AdwCleaner
2015-02-03 18:17 - 2015-02-03 18:18 - 02194432 _____ () C:\Users\Janine\Downloads\AdwCleaner09.exe
2015-02-03 18:17 - 2015-02-03 18:18 - 02194432 _____ () C:\Users\Janine\Downloads\AdwCleaner09 (1).exe
2015-02-03 18:07 - 2015-02-03 18:09 - 00000197 _____ () C:\WINDOWS\system32\2015-02-03-17-07-52.060-AvastVBoxSVC.exe-3580.log
2015-02-03 18:04 - 2015-02-03 18:04 - 00022512 _____ () C:\WINDOWS\system32\Drivers\SPPD.sys
2015-02-03 17:12 - 2015-02-03 17:12 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Janine\Downloads\mbam-setup-2.0.4.1028.exe
2015-02-03 16:50 - 2015-02-03 16:51 - 00000197 _____ () C:\WINDOWS\system32\2015-02-03-15-50-24.042-AvastVBoxSVC.exe-2824.log
2015-02-03 15:49 - 2015-02-03 15:51 - 00000197 _____ () C:\WINDOWS\system32\2015-02-03-14-49-14.052-AvastVBoxSVC.exe-4428.log
2015-02-02 21:32 - 2015-02-02 21:32 - 00000247 _____ () C:\WINDOWS\system32\2015-02-02-20-32-10.056-aswFe.exe-4232.log
2015-02-02 21:27 - 2015-02-02 21:32 - 00000247 _____ () C:\WINDOWS\system32\2015-02-02-20-27-43.010-aswFe.exe-1632.log
2015-02-02 21:27 - 2015-02-02 21:27 - 00000197 _____ () C:\WINDOWS\system32\2015-02-02-20-27-40.036-AvastVBoxSVC.exe-3612.log
2015-02-02 21:24 - 2015-02-02 21:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-02-02 21:24 - 2015-02-02 21:23 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2015-02-02 21:24 - 2015-02-02 21:23 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2015-02-02 21:24 - 2015-02-02 21:23 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2015-02-02 21:24 - 2015-02-02 21:23 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-02-02 21:23 - 2015-02-02 21:23 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-02 21:08 - 2015-02-02 21:08 - 00000000 ____D () C:\Users\Janine\AppData\Roaming\AVAST Software
2015-02-02 21:07 - 2015-02-02 21:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox
2015-02-02 21:07 - 2015-02-02 21:07 - 00000000 ____D () C:\WINDOWS\system32\vbox
2015-02-02 21:05 - 2015-02-02 21:05 - 00001984 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-02-02 21:05 - 2015-02-02 21:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-02-02 21:04 - 2015-02-04 18:22 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-02-02 21:04 - 2015-02-02 21:05 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2015-02-02 21:04 - 2015-02-02 21:05 - 00087912 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-02-02 21:04 - 2015-02-02 21:04 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-02-02 21:04 - 2015-02-02 21:04 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-02-02 21:03 - 2015-02-02 21:03 - 00000000 ____D () C:\Program Files\AVAST Software
2015-02-02 21:01 - 2015-02-02 21:03 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-02-02 20:55 - 2015-02-02 20:59 - 132469808 _____ (AVAST Software) C:\Users\Janine\Downloads\avast_free_antivirus_setup_10.2208.712.exe
2015-02-01 23:02 - 2015-02-03 18:02 - 00000000 ____D () C:\Users\Janine\AppData\Local\avaxvavya
2015-02-01 23:02 - 2015-02-01 23:02 - 00003456 _____ () C:\WINDOWS\System32\Tasks\avaxvavya
2015-02-01 23:02 - 2015-02-01 23:02 - 00001552 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-02-01 23:01 - 2015-02-01 23:02 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-02-01 23:00 - 2015-02-01 23:01 - 34792128 _____ (DVDVideoSoft Ltd. ) C:\Users\Janine\Downloads\FreeYouTubeToMP354Converter (1).exe
2015-01-20 00:05 - 2015-01-20 00:05 - 00000000 ____D () C:\Users\Janine\Documents\AdobeStockPhotos
2015-01-19 23:59 - 2015-01-20 00:07 - 00000000 ____D () C:\Users\Janine\AppData\Local\Adobe
2015-01-19 23:44 - 2015-01-19 23:44 - 00002105 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk
2015-01-19 23:41 - 2015-01-19 23:41 - 00002087 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk
2015-01-19 23:41 - 2015-01-19 23:41 - 00002065 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk
2015-01-19 23:41 - 2015-01-19 23:41 - 00002062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk
2015-01-19 23:41 - 2015-01-19 23:41 - 00000000 ____D () C:\Users\Public\Documents\Adobe PDF
2015-01-19 23:41 - 2015-01-19 23:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-01-19 23:40 - 2015-01-19 23:40 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-19 23:39 - 2015-01-19 23:44 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-19 23:20 - 2015-01-19 23:20 - 00000000 ____D () C:\PS_CS2_Gr_NonRet
2015-01-19 22:40 - 2015-01-19 22:59 - 375232764 _____ (Adobe Systems Inc. ) C:\Users\Janine\Downloads\PS_CS2_Gr_NonRet (1).exe
2015-01-19 22:40 - 2015-01-19 22:52 - 375232764 _____ (Adobe Systems Inc. ) C:\Users\Janine\Downloads\PS_CS2_Gr_NonRet.exe
2015-01-14 13:25 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-14 13:25 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-14 13:25 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-14 13:25 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-14 13:25 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-01-14 13:25 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-14 13:25 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-14 13:25 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-14 13:25 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-14 13:25 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-14 13:25 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-14 13:25 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-14 13:25 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-14 13:25 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-14 13:25 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-01-14 13:25 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-01-14 13:25 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-01-14 13:25 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-01-14 13:25 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-01-14 13:25 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-14 13:25 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-01-14 13:25 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-14 13:25 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-14 13:25 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2015-01-12 19:34 - 2015-01-12 19:34 - 00000267 _____ () C:\Users\Janine\Downloads\default.html

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-05 11:06 - 2014-07-07 15:02 - 00000000 ____D () C:\Users\Janine\AppData\Roaming\Skype
2015-02-05 11:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-05 10:45 - 2014-09-22 17:53 - 01303447 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-05 10:31 - 2014-08-01 17:09 - 00001130 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-05 10:31 - 2014-08-01 17:09 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-05 10:29 - 2014-06-24 17:18 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1789101941-3076438747-526121426-1001
2015-02-05 10:27 - 2014-09-23 18:17 - 00003922 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{24868DBB-2FFB-47E7-A226-E14D585BEA20}
2015-02-05 10:26 - 2014-09-22 18:26 - 00000000 ___DO () C:\Users\Janine\OneDrive
2015-02-05 10:26 - 2014-08-01 17:09 - 00004102 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-05 10:26 - 2014-08-01 17:09 - 00003866 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-05 10:26 - 2014-06-24 18:10 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-05 10:24 - 2014-08-01 17:12 - 00000000 ___RD () C:\Users\Janine\Google Drive
2015-02-05 10:21 - 2013-08-22 15:46 - 00611252 _____ () C:\WINDOWS\setupact.log
2015-02-05 10:21 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-05 02:13 - 2013-08-22 14:25 - 01048576 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-05 01:13 - 2014-11-17 15:25 - 00000000 ____D () C:\Users\Janine\AppData\Roaming\XBMC
2015-02-04 23:26 - 2014-06-24 18:10 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-02-04 18:25 - 2014-09-22 17:38 - 00000000 ____D () C:\Users\Janine
2015-02-03 18:24 - 2014-03-18 02:50 - 00373834 _____ () C:\WINDOWS\PFRO.log
2015-02-03 18:11 - 2014-10-03 01:52 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-02-03 18:05 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2015-02-03 17:15 - 2014-10-03 01:50 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-03 17:15 - 2014-10-03 01:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-02-03 17:15 - 2014-10-03 01:49 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-02-02 21:08 - 2014-06-26 06:15 - 00000000 ____D () C:\Users\Janine\AppData\Roaming\DVDVideoSoft
2015-02-02 17:49 - 2014-06-24 20:37 - 00000000 ____D () C:\Users\Janine\Documents\Schule
2015-02-01 23:22 - 2014-09-24 15:09 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-02-01 23:04 - 2014-06-26 06:19 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2015-02-01 23:02 - 2014-09-24 15:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-01-27 23:39 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-01-26 21:26 - 2014-08-01 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-01-24 21:20 - 2014-11-15 16:25 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-01-24 21:20 - 2014-11-15 16:25 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-20 22:35 - 2014-06-24 17:11 - 00000000 ____D () C:\Users\Janine\AppData\Roaming\Adobe
2015-01-20 07:04 - 2013-08-22 15:44 - 00365096 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-01-14 14:32 - 2014-06-26 15:40 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-14 14:25 - 2014-06-26 15:40 - 113365784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-01-14 13:17 - 2013-09-18 09:19 - 00000000 ____D () C:\Program Files (x86)\McAfee

==================== Files in the root of some directories =======

2014-09-18 17:02 - 2014-12-04 19:48 - 0005632 _____ () C:\Users\Janine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-07 17:36 - 2014-11-07 17:36 - 0007667 _____ () C:\Users\Janine\AppData\Local\Resmon.ResmonCfg

Some content of TEMP:
====================
C:\Users\Janine\AppData\Local\Temp\ao25mx6t.dll
C:\Users\Janine\AppData\Local\Temp\avgnt.exe
C:\Users\Janine\AppData\Local\Temp\jcnsizob.dll
C:\Users\Janine\AppData\Local\Temp\mlpef7p7.dll
C:\Users\Janine\AppData\Local\Temp\qoi8xoz-.dll
C:\Users\Janine\AppData\Local\Temp\Quarantine.exe
C:\Users\Janine\AppData\Local\Temp\sqlite3.dll
C:\Users\Janine\AppData\Local\Temp\wcxzko2m.dll
C:\Users\Janine\AppData\Local\Temp\xougitex.dll
C:\Users\Janine\AppData\Local\Temp\zy7kq38m.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-04 01:51

==================== End Of Log ============================
         

--- --- ---

--- --- ---







und jetzt die Addition.txt


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2015 01
Ran by Janine at 2015-02-05 11:07:06
Running from C:\Users\Janine\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3011 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated)
Acer Registration (HKLM\...\{64E785C9-B1F9-4889-B199-5FFC69224C60}) (Version: 2.00.3006 - Acer Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
AMP WinOFF 5.0.1 (HKLM-x32\...\AMP WinOFF) (Version: 5.0.1 - Alberto Martinez Perez)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Broadcom Card Reader Driver Installer (HKLM\...\{F0A7DF2F-0BE0-470F-B137-D7A19F977189}) (Version: 15.4.7.1 - Broadcom Corporation)
Brother MFL-Pro Suite DCP-195C (HKLM-x32\...\{6BF66AED-3EA4-4106-B240-5CE96C9B76B0}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.8.0.141 - Corel Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Desktopicon amazon.de (HKLM\...\DesktopIconAmazon) (Version: 1.0.1 - )
Dritek Radio Controller (HKLM-x32\...\RadioController) (Version: 2.02.2001.0803 - Dritek System Inc.)
ETDWare PS/2-X64 11.6.16.003_WHQL (HKLM\...\Elantech) (Version: 11.6.16.003 - ELAN Microelectronic Corp.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free M4a to MP3 Converter 8.1 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com)
Free YouTube Download version 3.2.44.922 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.44.922 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.94 - Google Inc.)
Google Drive (HKLM-x32\...\{65EACBB4-B0B8-4A5B-AE46-22DBE15C70B5}) (Version: 1.19.8406.6504 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Java 7 Update 76 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217076FF}) (Version: 7.0.760 - Oracle)
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.10 - Acer Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3006 - Acer Incorporated)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
McAfee SiteAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 3.7.156 - McAfee, Inc.)
Media Go (HKLM-x32\...\{AF06B8FA-B916-4001-AE51-6645488DEF09}) (Version: 2.8.303 - Sony)
Media Go Network Downloader (HKLM-x32\...\{5562F05F-908C-4F15-9B3C-98D5FD32DCAB}) (Version: 1.5.19.0 - Sony)
Media Go Video Playback Engine 2.12.112.07010 (HKLM-x32\...\{2AC62059-C1F3-3332-14F7-BD4F8231FED9}) (Version: 2.12.112.07010 - Sony)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.2.3.51r - Symantec Corporation)
Norton Online Backup ARA (x32 Version: 4.1.0.14 - Symantec Corporation) Hidden
NWZ-E380 WALKMAN Guide (HKLM-x32\...\{D98ED583-338D-4425-B2EF-A4C7FB93CE88}) (Version: 2.2.0.05230 - Sony Corporation)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
PaperPort Image Printer 64-bit (HKLM\...\{ABA4FAF1-6389-45F9-92CE-3914A4E5C471}) (Version: 1.00.0000 - Nuance Communications, Inc.)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
ProShield (HKLM-x32\...\InstallShield_{08CCD7B4-9EED-4926-805D-C4FFF869989A}) (Version: 1.4.1.10 - Egis Technology Inc.)
ProShield (Version: 1.4.1.10 - Egis Technology Inc.) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.228 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.57 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
XBMC (HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\XBMC) (Version: - Team XBMC)
Yahoo Community Smartbar Engine (HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\{b848c6fe-3d84-4045-b131-0ed7c84e2e4e}) (Version: 11.112.66.19229 - Linkury Inc.) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1789101941-3076438747-526121426-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points =========================

19-01-2015 23:39:53 Adobe Photoshop CS2 wird installiert
23-01-2015 13:46:20 Windows Update
27-01-2015 23:38:23 Windows Update
02-02-2015 21:02:38 avast! antivirus system restore point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {001FCB03-4D3E-4FA1-9298-DC44773F3B79} - System32\Tasks\avastBCLRestartS-1-5-21-1789101941-3076438747-526121426-1001 => Chrome.exe
Task: {0F0F94AA-DE47-4F13-86E6-593C81DA4822} - System32\Tasks\GREGTask => C:\Program Files\Acer\Acer Registration\GREGLauncher.exe [2013-01-12] ()
Task: {111C3A65-EF96-4600-91DA-F2D94FDC604B} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-09-13] (Egis Technology Inc.)
Task: {1F7C3BFD-0079-44C5-B81A-831A7C9DB8EB} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-11-06] ()
Task: {20B9B718-1C2F-4C6C-B3F4-A41893237281} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-01] (Google Inc.)
Task: {2F9E27A5-B9D8-47D6-A245-36609BAD492B} - System32\Tasks\avaxvavya => C:\Users\Janine\AppData\Local\avaxvavya\avaxvavya.exe
Task: {488B778A-74F6-44C1-B3A5-569B8645D35E} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-09-13] (Egis Technology Inc.)
Task: {57CB64CD-FD66-45D4-9CD6-C65B3E58A631} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-02-02] (AVAST Software)
Task: {79A80989-B53B-4A86-B444-FF41899069D7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
Task: {B0106DAF-A842-49C0-9367-CD9AF84457C5} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-01-14] (Microsoft Corporation)
Task: {BAF19EE9-7163-41EB-A893-B6009A3EF1A5} - System32\Tasks\EgisTSR => C:\Program Files\Acer ProShield\EgisTSR.exe [2013-04-23] (Egis Technology Inc. )
Task: {BCA76164-E52C-4395-A0B5-4DD386CC69CF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-01] (Google Inc.)
Task: {EB5D5969-5838-44A2-BCFB-22B26CDDE3E2} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-21] ()
Task: {FF591B51-B919-498B-A3AE-9A802BF44640} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-02 21:04 - 2015-02-02 21:04 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2015-02-02 21:04 - 2015-02-02 21:04 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2013-05-31 01:23 - 2013-05-31 01:23 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-05-31 01:19 - 2013-05-31 01:19 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-05-31 01:53 - 2013-05-31 01:53 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-07-10 19:26 - 2012-09-25 10:26 - 01163264 ____N () C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
2013-04-23 15:41 - 2013-04-23 15:41 - 01407976 _____ () C:\Program Files\Acer ProShield\LIBEAY32.dll
2015-02-05 01:16 - 2015-02-05 01:16 - 02913280 _____ () C:\Program Files\AVAST Software\Avast\defs\15020401\algo.dll
2015-02-02 21:04 - 2015-02-02 21:04 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2013-11-11 11:34 - 2012-06-25 18:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-02-05 10:24 - 2015-02-05 10:24 - 00098816 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32api.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00110080 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\pywintypes27.dll
2015-02-05 10:24 - 2015-02-05 10:24 - 00364544 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\pythoncom27.dll
2015-02-05 10:24 - 2015-02-05 10:24 - 00045568 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\_socket.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 01160704 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\_ssl.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00320512 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32com.shell.shell.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00713216 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\_hashlib.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 01175040 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\wx._core_.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00805888 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\wx._gdi_.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00811008 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\wx._windows_.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 01062400 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\wx._controls_.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00735232 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\wx._misc_.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00557056 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\pysqlite2._sqlite.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00128512 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\_elementtree.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00127488 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\pyexpat.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00087552 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\_ctypes.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00119808 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32file.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00108544 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32security.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00007168 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\hashobjs_ext.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00167936 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32gui.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00018432 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32event.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00038912 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32inet.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00011264 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32crypt.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00070656 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\wx._html2.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00027136 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\_multiprocessing.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00035840 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32process.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00686080 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\unicodedata.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00122368 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\wx._wizard.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00024064 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32pipe.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00025600 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32pdh.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00525640 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\windows._lib_cacheinvalidation.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00010240 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\select.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00017408 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32profile.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00022528 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\win32ts.pyd
2015-02-05 10:24 - 2015-02-05 10:24 - 00078336 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI44643\wx._animate.pyd
2014-07-10 19:26 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-02-02 21:04 - 2015-02-02 21:04 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-02-02 16:48 - 2015-01-27 04:44 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.94\libglesv2.dll
2015-02-02 16:48 - 2015-01-27 04:44 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.94\libegl.dll
2015-02-02 16:48 - 2015-01-27 04:44 - 09171272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.94\pdf.dll
2015-02-02 16:48 - 2015-01-27 04:44 - 14913864 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.94\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Janine\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Registry Areas =====================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1789101941-3076438747-526121426-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Janine\AppData\Roaming\Microsoft\Windows Live Photo Gallery\Fotogalerie-Hintergrundbild.jpg

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "Norton Online Backup"
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\StartupApproved\Run: => "BrowserChoice"

==================== Accounts: =============================

Administrator (S-1-5-21-1789101941-3076438747-526121426-500 - Administrator - Disabled)
Gast (S-1-5-21-1789101941-3076438747-526121426-501 - Limited - Disabled)
Janine (S-1-5-21-1789101941-3076438747-526121426-1001 - Administrator - Enabled) => C:\Users\Janine

==================== Faulty Device Manager Devices =============

Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (02/03/2015 09:32:55 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:31:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „winstore_cw5n1h2txyewy!Windows.Store“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:31:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:25:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:24:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:24:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:22:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:21:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:21:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:21:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


System errors:
=============
Error: (02/03/2015 09:11:26 PM) (Source: DCOM) (EventID: 10010) (User: ADOLF)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (02/03/2015 09:10:56 PM) (Source: DCOM) (EventID: 10010) (User: ADOLF)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (02/03/2015 09:10:26 PM) (Source: DCOM) (EventID: 10010) (User: ADOLF)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (02/03/2015 09:09:56 PM) (Source: DCOM) (EventID: 10010) (User: ADOLF)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (02/03/2015 09:09:26 PM) (Source: DCOM) (EventID: 10010) (User: ADOLF)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (02/03/2015 09:08:56 PM) (Source: DCOM) (EventID: 10010) (User: ADOLF)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (02/03/2015 09:08:26 PM) (Source: DCOM) (EventID: 10010) (User: ADOLF)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (02/03/2015 09:07:56 PM) (Source: DCOM) (EventID: 10010) (User: ADOLF)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (02/03/2015 09:07:25 PM) (Source: DCOM) (EventID: 10010) (User: ADOLF)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (02/03/2015 09:06:55 PM) (Source: DCOM) (EventID: 10010) (User: ADOLF)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}


Microsoft Office Sessions:
=========================
Error: (02/03/2015 09:32:55 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:31:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: winstore_cw5n1h2txyewy!Windows.Store-2144927151

Error: (02/03/2015 09:31:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:25:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:24:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:24:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:22:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:21:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:21:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:21:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) CPU 2020M @ 2.40GHz
Percentage of memory in use: 59%
Total physical RAM: 3985.27 MB
Available physical RAM: 1610.11 MB
Total Pagefile: 9105.27 MB
Available Pagefile: 6258.84 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:451.75 GB) (Free:376.11 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 8E3385E2)

Partition: GPT Partition Type.

==================== End Of Log ============================




(das mit dem # hab ich noch nicht verstanden)

bitte wunder dich nicht, das mein pc Adolf heißt, ich hab nen seltsamen Humor...

Hallo

ja passt alles soweit ...


Schritt1:
Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

• Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
• Klicke auf Optionen und wähle als Sprache Deutsch.
• Suche im Uninstallerfeld nach den Programmen:
  
  Yahoo Community Smartbar Engine
  
  
• Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
• Wähle anschließend den Modus "Moderat" aus.
  
• Reste löschen:
  Klicke auf dann auf und dann auf .

 

Schritt2:
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Task: {2F9E27A5-B9D8-47D6-A245-36609BAD492B} - System32\Tasks\avaxvavya => C:\Users\Janine\AppData\Local\avaxvavya\avaxvavya.exe
C:\Users\Janine\AppData\Local\avaxvavya\
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Schritt3:
Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt4:

erstelle ein neues FRST logfile und poste es hier

hier die Fixlog.txt

#
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-02-2015 01
Ran by Janine at 2015-02-05 11:55:51 Run:1
Running from C:\Users\Janine\Desktop
Loaded Profiles: Janine (Available profiles: Janine)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Task: {2F9E27A5-B9D8-47D6-A245-36609BAD492B} - System32\Tasks\avaxvavya => C:\Users\Janine\AppData\Local\avaxvavya\avaxvavya.exe
C:\Users\Janine\AppData\Local\avaxvavya\
*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2F9E27A5-B9D8-47D6-A245-36609BAD492B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2F9E27A5-B9D8-47D6-A245-36609BAD492B}" => Key deleted successfully.
C:\Windows\System32\Tasks\avaxvavya => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\avaxvavya" => Key deleted successfully.
C:\Users\Janine\AppData\Local\avaxvavya => Moved successfully.

==== End of Fixlog 11:55:52 ====

#AdwCleaner Logfile:

# AdwCleaner v4.109 - Bericht erstellt am 05/02/2015 um 12:03:28
# Aktualisiert 24/01/2015 von Xplode
# Database : 2015-02-04.1 [Live]
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Janine - ADOLF
# Gestartet von : C:\Users\Janine\Desktop\AdwCleaner09.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl
Datei Gelöscht : C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_allin1convert.dl.tb.ask.com_0.localstorage
Datei Gelöscht : C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_allin1convert.dl.tb.ask.com_0.localstorage-journal

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v


-\\ Google Chrome v40.0.2214.94

[C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.default-search.net/search?sid=476&aid=122&itype=a&ver=13337&tm=401&src=ds&p={searchTerms}
[C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3322288&octid=EB_ORIGINAL_CTID&ISID=M17638C70-AB84-4BB2-8AB7-3661CF7CD39B&SearchSource=58&CUI=&UM=8&UP=SPE5E78295-F39A-4522-B900-930340289D2C&q={searchTerms}&SSPV=

*************************

AdwCleaner[R0].txt - [9173 octets] - [03/02/2015 18:18:30]
AdwCleaner[R1].txt - [2565 octets] - [05/02/2015 12:00:33]
AdwCleaner[S0].txt - [8662 octets] - [03/02/2015 18:23:36]
AdwCleaner[S1].txt - [2545 octets] - [05/02/2015 12:03:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2605 octets] ##########
         

--- --- ---

#
FRST Logfile:

FRST Logfile:
[CODE]Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2015 01
Ran by Janine (administrator) on ADOLF on 05-02-2015 12:09:44
Running from C:\Users\Janine\Desktop
Loaded Profiles: Janine (Available profiles: Janine)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Egis Technology Inc.) C:\Program Files\Common Files\EgisTec CommonModule\eLock\eLockServ.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\livecomm.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Egis Technology Inc. ) C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe
() C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Egis Technology Inc. ) C:\Program Files\Acer ProShield\EgisTSR.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_fa2b7d3b9b36c7b4\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-11-20] (ELAN Microelectronics Corp.)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [RadioController] => C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-11-11] (Dritek System Inc.)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] ()
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-02-02] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-12-18] (Oracle Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [133248 2013-05-31] ( (Atheros Communications))
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23308256 2015-01-15] (Google)
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\Run: [BrowserChoice] => C:\Windows\BrowserChoice\browserchoice.exe [86816 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\MountPoints2: {07ba5957-3445-11e4-be93-201a06772066} - "E:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\MountPoints2: {63de9131-5c65-11e4-be9f-a4db30b42180} - "E:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\MountPoints2: {63de9138-5c65-11e4-be9f-a4db30b42180} - "E:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\MountPoints2: {eb5d780e-1055-11e4-be89-201a06772066} - "E:\HTC_Sync_Manager_PC.exe"
Startup: C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1789101941-3076438747-526121426-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1789101941-3076438747-526121426-1001 -> {9FBD334C-1B8B-4470-ABBC-3698B9D550B6} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B014DE662D20140624&p={SearchTerms}
SearchScopes: HKU\S-1-5-21-1789101941-3076438747-526121426-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: EgisPBIE Sign-in Helper -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files\Acer ProShield\x86\EgisPBIE.dll (Egis Technology Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.76.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.76.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1789101941-3076438747-526121426-1001: sony.com/MediaGoDetector -> C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll (Sony Network Entertainment International LLC)
FF SearchPlugin: C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\searchplugins\webde-suche.xml
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-02-01]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-09-13]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-09-18]
FF HKLM-x32\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files\Acer ProShield\FFExt
FF Extension: Online Accounts Extension - C:\Program Files\Acer ProShield\FFExt [2013-11-11]
FF HKLM-x32\...\Firefox\Extensions: [{d4da7309-b89a-45ec-8ebb-cfb2ae13618b}] - C:\Program Files\Acer ProShield\FFExt20
FF Extension: Online Accounts Extension - C:\Program Files\Acer ProShield\FFExt20 [2013-11-11]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-02-02]
FF Extension: No Name - C:\Users\Janine\AppData\Roaming\Mozilla\Firefox\Profiles\ixkzbm3v.default\extensions\toolbar@web.de [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome:
=======
CHR HomePage: Default -> hxxp://google.de/
CHR StartupUrls: Default -> "hxxp://www.google.de/", "hxxp://google.de/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google :inputType}{google:cursorPosition}{google:currentPageUrl}{googleageClassification}{google:searchVersion}{google:sessionToken}{googlerefetchQuery}s ugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-05]
CHR Extension: (YouTube) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-03]
CHR Extension: (Google Tabellen) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-02]
CHR Extension: (SiteAdvisor) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-02-02]
CHR Extension: (Avast Online Security) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-02-02]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-02-02]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-01-13]
CHR HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Janine\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2015-02-03]
CHR HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - No Path
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-02-02]
CHR HKLM-x32\...\Chrome\Extension: [ihenkjeihefokohmemphikjnjbmegdik] - "C:\Program Files (x86)\Sony\Media Go\MediaGoDetector.crx" [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [ladimmjldcgbeamniagencjbodhnmgen] - C:\Program Files\Acer ProShield\ChromeEx\EgisPBChromeExt.crx [2013-04-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2015-01-19] (Adobe Systems) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [310912 2013-05-31] (Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-02-02] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2015-02-02] (Avast Software)
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-20] (Broadcom Corp.) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated)
R3 EgisTec Ticket Service; C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe [222184 2013-04-23] (Egis Technology Inc. )
R3 eLockServ; C:\Program Files\Common Files\EgisTec CommonModule\eLock\eLockServ.exe [24552 2013-04-23] (Egis Technology Inc.)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [154320 2014-12-03] (McAfee, Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-11-11] (Dritek System INC.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 A2DDA; C:\EEK\BIN\a2ddax64.sys [26176 2014-10-09] (Emsisoft GmbH)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-02-02] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [87912 2015-02-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-02-02] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-02-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-02-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-02-02] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-02-02] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-02-02] ()
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-05-31] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
S3 cleanhlp; C:\EEK\bin\cleanhlp64.sys [57024 2014-10-09] (Emsisoft GmbH)
R1 eLock2BurnerLockDriver; C:\Windows\system32\DRIVERS\eLock2BurnerLockDriver.sys [20072 2013-11-11] (Egis Technology Inc.)
R2 eLock2FSCTLDriver; C:\Windows\System32\DRIVERS\eLock2FSCTLDriver.sys [26264 2013-11-11] (Egis Technology Inc.)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-03] (Malwarebytes Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-11-11] (Dritek System Inc.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2015-02-02] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-05 12:07 - 2015-02-05 12:09 - 00000197 _____ () C:\WINDOWS\system32\2015-02-05-11-07-31.074-AvastVBoxSVC.exe-3032.log
2015-02-05 11:54 - 2015-02-05 11:54 - 00001160 _____ () C:\Users\Janine\Desktop\FRST64.exe - Verknüpfung.lnk
2015-02-05 11:41 - 2015-02-05 11:41 - 00000748 _____ () C:\Users\Janine\Desktop\Revo Uninstaller.lnk
2015-02-05 11:39 - 2015-02-05 11:39 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Janine\Downloads\revosetup95.exe
2015-02-05 11:07 - 2015-02-05 11:07 - 00030073 _____ () C:\Users\Janine\Downloads\Addition.txt
2015-02-05 11:05 - 2015-02-05 12:09 - 00024250 _____ () C:\Users\Janine\Desktop\FRST.txt
2015-02-05 11:04 - 2015-02-05 12:09 - 00000000 ____D () C:\FRST
2015-02-05 11:03 - 2015-02-05 11:03 - 02131968 _____ (Farbar) C:\Users\Janine\Desktop\FRST64.exe
2015-02-05 11:03 - 2015-02-05 11:03 - 02131968 _____ (Farbar) C:\Users\Janine\Desktop\FRST64 (1).exe
2015-02-05 10:23 - 2015-02-05 10:23 - 00000197 _____ () C:\WINDOWS\system32\2015-02-05-09-23-52.048-AvastVBoxSVC.exe-2692.log
2015-02-04 18:26 - 2015-02-05 10:28 - 00003272 _____ () C:\WINDOWS\System32\Tasks\avastBCLRestartS-1-5-21-1789101941-3076438747-526121426-1001
2015-02-04 08:36 - 2015-02-04 08:36 - 00000197 _____ () C:\WINDOWS\system32\2015-02-04-07-36-27.084-AvastVBoxSVC.exe-2424.log
2015-02-03 21:42 - 2015-02-03 21:43 - 00000197 _____ () C:\WINDOWS\system32\2015-02-03-20-42-50.035-AvastVBoxSVC.exe-2852.log
2015-02-03 21:40 - 2015-02-03 21:40 - 00013828 _____ () C:\EamClean.log
2015-02-03 19:49 - 2015-02-03 19:49 - 00002166 _____ () C:\Users\Janine\Desktop\Emsisoft Emergency Kit - CHIP Downloader.lnk
2015-02-03 19:47 - 2015-02-03 19:50 - 00000000 ____D () C:\EEK
2015-02-03 19:47 - 2015-02-03 19:47 - 00000759 _____ () C:\Users\Janine\Desktop\Start Emsisoft Emergency Kit.lnk
2015-02-03 19:41 - 2015-02-03 19:41 - 00000000 ____D () C:\Users\Janine\AppData\Roaming\DesktopIconAmazon
2015-02-03 19:27 - 2015-02-03 19:27 - 00001051 _____ () C:\Users\Janine\Desktop\JRT.txt
2015-02-03 19:22 - 2015-02-03 19:22 - 01388274 _____ (Thisisu) C:\Users\Janine\Downloads\JRT42.exe
2015-02-03 18:27 - 2015-02-03 18:29 - 00000197 _____ () C:\WINDOWS\system32\2015-02-03-17-27-09.075-AvastVBoxSVC.exe-3148.log
2015-02-03 18:18 - 2015-02-05 12:03 - 00000000 ____D () C:\AdwCleaner
2015-02-03 18:17 - 2015-02-03 18:18 - 02194432 _____ () C:\Users\Janine\Downloads\AdwCleaner09 (1).exe
2015-02-03 18:17 - 2015-02-03 18:18 - 02194432 _____ () C:\Users\Janine\Desktop\AdwCleaner09.exe
2015-02-03 18:07 - 2015-02-03 18:09 - 00000197 _____ () C:\WINDOWS\system32\2015-02-03-17-07-52.060-AvastVBoxSVC.exe-3580.log
2015-02-03 18:04 - 2015-02-03 18:04 - 00022512 _____ () C:\WINDOWS\system32\Drivers\SPPD.sys
2015-02-03 17:12 - 2015-02-03 17:12 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Janine\Downloads\mbam-setup-2.0.4.1028.exe
2015-02-03 16:50 - 2015-02-03 16:51 - 00000197 _____ () C:\WINDOWS\system32\2015-02-03-15-50-24.042-AvastVBoxSVC.exe-2824.log
2015-02-03 15:49 - 2015-02-03 15:51 - 00000197 _____ () C:\WINDOWS\system32\2015-02-03-14-49-14.052-AvastVBoxSVC.exe-4428.log
2015-02-02 21:32 - 2015-02-02 21:32 - 00000247 _____ () C:\WINDOWS\system32\2015-02-02-20-32-10.056-aswFe.exe-4232.log
2015-02-02 21:27 - 2015-02-02 21:32 - 00000247 _____ () C:\WINDOWS\system32\2015-02-02-20-27-43.010-aswFe.exe-1632.log
2015-02-02 21:27 - 2015-02-02 21:27 - 00000197 _____ () C:\WINDOWS\system32\2015-02-02-20-27-40.036-AvastVBoxSVC.exe-3612.log
2015-02-02 21:24 - 2015-02-02 21:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-02-02 21:24 - 2015-02-02 21:23 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2015-02-02 21:24 - 2015-02-02 21:23 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2015-02-02 21:24 - 2015-02-02 21:23 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2015-02-02 21:24 - 2015-02-02 21:23 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-02-02 21:23 - 2015-02-02 21:23 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-02 21:08 - 2015-02-02 21:08 - 00000000 ____D () C:\Users\Janine\AppData\Roaming\AVAST Software
2015-02-02 21:07 - 2015-02-02 21:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox
2015-02-02 21:07 - 2015-02-02 21:07 - 00000000 ____D () C:\WINDOWS\system32\vbox
2015-02-02 21:05 - 2015-02-02 21:05 - 00001984 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-02-02 21:05 - 2015-02-02 21:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-02-02 21:04 - 2015-02-04 18:22 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-02-02 21:04 - 2015-02-02 21:05 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2015-02-02 21:04 - 2015-02-02 21:05 - 00087912 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-02-02 21:04 - 2015-02-02 21:04 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-02-02 21:04 - 2015-02-02 21:04 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-02-02 21:04 - 2015-02-02 21:04 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-02-02 21:03 - 2015-02-02 21:03 - 00000000 ____D () C:\Program Files\AVAST Software
2015-02-02 21:01 - 2015-02-02 21:03 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-02-02 20:55 - 2015-02-02 20:59 - 132469808 _____ (AVAST Software) C:\Users\Janine\Downloads\avast_free_antivirus_setup_10.2208.712.exe
2015-02-01 23:02 - 2015-02-01 23:02 - 00001552 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-02-01 23:01 - 2015-02-01 23:02 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-02-01 23:00 - 2015-02-01 23:01 - 34792128 _____ (DVDVideoSoft Ltd. ) C:\Users\Janine\Downloads\FreeYouTubeToMP354Converter (1).exe
2015-01-20 00:05 - 2015-01-20 00:05 - 00000000 ____D () C:\Users\Janine\Documents\AdobeStockPhotos
2015-01-19 23:59 - 2015-01-20 00:07 - 00000000 ____D () C:\Users\Janine\AppData\Local\Adobe
2015-01-19 23:44 - 2015-01-19 23:44 - 00002105 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk
2015-01-19 23:41 - 2015-01-19 23:41 - 00002087 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk
2015-01-19 23:41 - 2015-01-19 23:41 - 00002065 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk
2015-01-19 23:41 - 2015-01-19 23:41 - 00002062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk
2015-01-19 23:41 - 2015-01-19 23:41 - 00000000 ____D () C:\Users\Public\Documents\Adobe PDF
2015-01-19 23:41 - 2015-01-19 23:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-01-19 23:40 - 2015-01-19 23:40 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-19 23:39 - 2015-01-19 23:44 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-19 23:20 - 2015-01-19 23:20 - 00000000 ____D () C:\PS_CS2_Gr_NonRet
2015-01-19 22:40 - 2015-01-19 22:59 - 375232764 _____ (Adobe Systems Inc. ) C:\Users\Janine\Downloads\PS_CS2_Gr_NonRet (1).exe
2015-01-19 22:40 - 2015-01-19 22:52 - 375232764 _____ (Adobe Systems Inc. ) C:\Users\Janine\Downloads\PS_CS2_Gr_NonRet.exe
2015-01-14 13:25 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-14 13:25 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-14 13:25 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-14 13:25 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-14 13:25 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-14 13:25 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-01-14 13:25 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-14 13:25 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-14 13:25 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-14 13:25 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-14 13:25 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-14 13:25 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-14 13:25 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-14 13:25 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-14 13:25 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-14 13:25 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-01-14 13:25 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-01-14 13:25 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-01-14 13:25 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-01-14 13:25 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-01-14 13:25 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-14 13:25 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-01-14 13:25 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-14 13:25 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-14 13:25 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2015-01-12 19:34 - 2015-01-12 19:34 - 00000267 _____ () C:\Users\Janine\Downloads\default.html

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)




und nochmal die Addition.txt

#FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2015 01
Ran by Janine at 2015-02-05 12:11:31
Running from C:\Users\Janine\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3011 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated)
Acer Registration (HKLM\...\{64E785C9-B1F9-4889-B199-5FFC69224C60}) (Version: 2.00.3006 - Acer Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
AMP WinOFF 5.0.1 (HKLM-x32\...\AMP WinOFF) (Version: 5.0.1 - Alberto Martinez Perez)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Broadcom Card Reader Driver Installer (HKLM\...\{F0A7DF2F-0BE0-470F-B137-D7A19F977189}) (Version: 15.4.7.1 - Broadcom Corporation)
Brother MFL-Pro Suite DCP-195C (HKLM-x32\...\{6BF66AED-3EA4-4106-B240-5CE96C9B76B0}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.8.0.141 - Corel Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dritek Radio Controller (HKLM-x32\...\RadioController) (Version: 2.02.2001.0803 - Dritek System Inc.)
ETDWare PS/2-X64 11.6.16.003_WHQL (HKLM\...\Elantech) (Version: 11.6.16.003 - ELAN Microelectronic Corp.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free M4a to MP3 Converter 8.1 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Free YouTube Download version 3.2.44.922 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.44.922 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.94 - Google Inc.)
Google Drive (HKLM-x32\...\{65EACBB4-B0B8-4A5B-AE46-22DBE15C70B5}) (Version: 1.19.8406.6504 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Java 7 Update 76 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217076FF}) (Version: 7.0.760 - Oracle)
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.10 - Acer Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3006 - Acer Incorporated)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
McAfee SiteAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 3.7.156 - McAfee, Inc.)
Media Go (HKLM-x32\...\{AF06B8FA-B916-4001-AE51-6645488DEF09}) (Version: 2.8.303 - Sony)
Media Go Network Downloader (HKLM-x32\...\{5562F05F-908C-4F15-9B3C-98D5FD32DCAB}) (Version: 1.5.19.0 - Sony)
Media Go Video Playback Engine 2.12.112.07010 (HKLM-x32\...\{2AC62059-C1F3-3332-14F7-BD4F8231FED9}) (Version: 2.12.112.07010 - Sony)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.2.3.51r - Symantec Corporation)
Norton Online Backup ARA (x32 Version: 4.1.0.14 - Symantec Corporation) Hidden
NWZ-E380 WALKMAN Guide (HKLM-x32\...\{D98ED583-338D-4425-B2EF-A4C7FB93CE88}) (Version: 2.2.0.05230 - Sony Corporation)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
PaperPort Image Printer 64-bit (HKLM\...\{ABA4FAF1-6389-45F9-92CE-3914A4E5C471}) (Version: 1.00.0000 - Nuance Communications, Inc.)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
ProShield (HKLM-x32\...\InstallShield_{08CCD7B4-9EED-4926-805D-C4FFF869989A}) (Version: 1.4.1.10 - Egis Technology Inc.)
ProShield (Version: 1.4.1.10 - Egis Technology Inc.) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.228 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.57 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
XBMC (HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\XBMC) (Version:  - Team XBMC)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1789101941-3076438747-526121426-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points  =========================

19-01-2015 23:39:53 Adobe Photoshop CS2 wird installiert
23-01-2015 13:46:20 Windows Update
27-01-2015 23:38:23 Windows Update
02-02-2015 21:02:38 avast! antivirus system restore point
05-02-2015 11:43:04 Revo Uninstaller's restore point - Yahoo Community Smartbar Engine

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {001FCB03-4D3E-4FA1-9298-DC44773F3B79} - System32\Tasks\avastBCLRestartS-1-5-21-1789101941-3076438747-526121426-1001 => Chrome.exe 
Task: {0F0F94AA-DE47-4F13-86E6-593C81DA4822} - System32\Tasks\GREGTask => C:\Program Files\Acer\Acer Registration\GREGLauncher.exe [2013-01-12] ()
Task: {111C3A65-EF96-4600-91DA-F2D94FDC604B} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-09-13] (Egis Technology Inc.)
Task: {1F7C3BFD-0079-44C5-B81A-831A7C9DB8EB} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-11-06] ()
Task: {20B9B718-1C2F-4C6C-B3F4-A41893237281} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-01] (Google Inc.)
Task: {488B778A-74F6-44C1-B3A5-569B8645D35E} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-09-13] (Egis Technology Inc.)
Task: {57CB64CD-FD66-45D4-9CD6-C65B3E58A631} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-02-02] (AVAST Software)
Task: {79A80989-B53B-4A86-B444-FF41899069D7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
Task: {B0106DAF-A842-49C0-9367-CD9AF84457C5} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-01-14] (Microsoft Corporation)
Task: {BAF19EE9-7163-41EB-A893-B6009A3EF1A5} - System32\Tasks\EgisTSR => C:\Program Files\Acer ProShield\EgisTSR.exe [2013-04-23] (Egis Technology Inc. )
Task: {BCA76164-E52C-4395-A0B5-4DD386CC69CF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-01] (Google Inc.)
Task: {EB5D5969-5838-44A2-BCFB-22B26CDDE3E2} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-21] ()
Task: {FF591B51-B919-498B-A3AE-9A802BF44640} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-02 21:04 - 2015-02-02 21:04 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2015-02-02 21:04 - 2015-02-02 21:04 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2013-05-31 01:23 - 2013-05-31 01:23 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-05-31 01:19 - 2013-05-31 01:19 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-05-31 01:53 - 2013-05-31 01:53 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-07-10 19:26 - 2012-09-25 10:26 - 01163264 ____N () C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
2013-04-23 15:41 - 2013-04-23 15:41 - 01407976 _____ () C:\Program Files\Acer ProShield\LIBEAY32.dll
2015-02-05 01:16 - 2015-02-05 01:16 - 02913280 _____ () C:\Program Files\AVAST Software\Avast\defs\15020401\algo.dll
2015-02-02 21:04 - 2015-02-02 21:04 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2015-02-05 12:05 - 2015-02-05 12:05 - 00098816 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32api.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00110080 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\pywintypes27.dll
2015-02-05 12:05 - 2015-02-05 12:05 - 00364544 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\pythoncom27.dll
2015-02-05 12:05 - 2015-02-05 12:05 - 00045568 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\_socket.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 01160704 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\_ssl.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00320512 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32com.shell.shell.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00713216 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\_hashlib.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 01175040 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\wx._core_.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00805888 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\wx._gdi_.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00811008 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\wx._windows_.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 01062400 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\wx._controls_.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00735232 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\wx._misc_.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00557056 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\pysqlite2._sqlite.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00128512 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\_elementtree.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00127488 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\pyexpat.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00087552 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\_ctypes.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00119808 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32file.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00108544 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32security.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00007168 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\hashobjs_ext.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00167936 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32gui.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00018432 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32event.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00038912 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32inet.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00011264 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32crypt.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00070656 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\wx._html2.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00027136 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\_multiprocessing.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00035840 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32process.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00686080 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\unicodedata.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00122368 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\wx._wizard.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00024064 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32pipe.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00025600 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32pdh.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00525640 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\windows._lib_cacheinvalidation.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00010240 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\select.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00017408 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32profile.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00022528 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\win32ts.pyd
2015-02-05 12:05 - 2015-02-05 12:05 - 00078336 _____ () C:\Users\Janine\AppData\Local\Temp\_MEI48522\wx._animate.pyd
2014-07-10 19:26 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-02-02 21:04 - 2015-02-02 21:04 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-02-02 16:48 - 2015-01-27 04:44 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.94\libglesv2.dll
2015-02-02 16:48 - 2015-01-27 04:44 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.94\libegl.dll
2013-11-11 11:34 - 2012-06-25 18:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-02-02 16:48 - 2015-01-27 04:44 - 09171272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.94\pdf.dll
2015-02-02 16:48 - 2015-01-27 04:44 - 14913864 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.94\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Janine\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Registry Areas =====================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1789101941-3076438747-526121426-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Janine\AppData\Roaming\Microsoft\Windows Live Photo Gallery\Fotogalerie-Hintergrundbild.jpg

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "Norton Online Backup"
HKU\S-1-5-21-1789101941-3076438747-526121426-1001\...\StartupApproved\Run: => "BrowserChoice"

==================== Accounts: =============================

Administrator (S-1-5-21-1789101941-3076438747-526121426-500 - Administrator - Disabled)
Gast (S-1-5-21-1789101941-3076438747-526121426-501 - Limited - Disabled)
Janine (S-1-5-21-1789101941-3076438747-526121426-1001 - Administrator - Enabled) => C:\Users\Janine

==================== Faulty Device Manager Devices =============

Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (02/05/2015 11:54:05 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.

Error: (02/03/2015 09:32:55 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:31:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „winstore_cw5n1h2txyewy!Windows.Store“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:31:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:25:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:24:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:24:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:22:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:21:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/03/2015 09:21:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


System errors:
=============
Error: (02/05/2015 00:04:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (02/05/2015 00:04:02 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/05/2015 00:03:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/05/2015 00:03:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "EgisTec Ticket Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/05/2015 00:03:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "McAfee SiteAdvisor Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/05/2015 00:03:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Dritek RF Button Command Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 3000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/05/2015 00:03:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "EgisTec eLock Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/05/2015 00:03:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "IviRegMgr" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/05/2015 00:03:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ePower Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/05/2015 00:03:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (02/05/2015 11:54:05 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Janine\Downloads\esetsmartinstaller_deu.exe

Error: (02/03/2015 09:32:55 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:31:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: winstore_cw5n1h2txyewy!Windows.Store-2144927151

Error: (02/03/2015 09:31:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:25:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:24:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:24:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:22:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:21:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151

Error: (02/03/2015 09:21:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADOLF)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel-2144927151


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) CPU 2020M @ 2.40GHz
Percentage of memory in use: 54%
Total physical RAM: 3985.27 MB
Available physical RAM: 1807.08 MB
Total Pagefile: 9105.27 MB
Available Pagefile: 6772.56 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:451.75 GB) (Free:373.5 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 8E3385E2)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

Hi

wird es besser mit dem Positive Finds?

Schritt 1:

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

• Öffne die TFC.exe.
  Vista und Win 7 User mit Rechtsklick "als Administrator starten".
• Schließe alle anderen Programme.
• Drücke auf den Button Start.
• Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Schritt 2:
Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3:

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

also bis jetzt ist es noch da...

aber ich fühl mich gut aufgehoben...

Das sich das TFC seltsam benimmt ist normal?

Also TFC hat jetzt das ausgespuckt:

#
Getting user folders.

Stopping running processes.

Emptying Temp folders.


User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default.migrated

User: Janine
->Temp folder emptied: 4049150047 bytes
->Temporary Internet Files folder emptied: 74614046 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 367319022 bytes
->Google Chrome cache emptied: 391182871 bytes
->Flash cache emptied: 16375 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 25788712 bytes

Emptying RecycleBin. Do not interrupt.

RecycleBin emptied: 367928666 bytes
Process complete!

Total Files Cleaned = 5.032,00 mb

was bedeutet seltsam?

wenn er abstürzt benutz bitte folgendes Tool:

CCleaner - Download - Filepony

bitte hier nur die Funktion zum temp daten löschen nutzen

nee ist nicht abgestürzt, hat nur immer so seltsam geruckelt und der ladebalken hat seltsame faxen gemacht aber irgendwann hat er dann das was ich oben gepostet hab geantwortet.
mach ich jetzt normal mit malewarebytes weiter?

ja mach weiter, TFC hat ja immerhin mal eben über 5GByte an Datenmüll gelöscht

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 05.02.2015
Suchlauf-Zeit: 13:07:49
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.02.03.06
Rootkit Datenbank: v2015.02.03.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Janine

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 360878
Verstrichene Zeit: 21 Min, 58 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 0
(Keine schädliche Elemente erkannt)

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 0
(Keine schädliche Elemente erkannt)

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
         

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=e4cd2c4112d1254f992c540c56180ddf
# engine=22323
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-02-05 01:35:35
# local_time=2015-02-05 02:35:35 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 94 235441 239610 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 253311 13447654 0 0
# scanned=183830
# found=0
# cleaned=0
# scan_time=3141
         

nix gefunden...

Hi, tritt das Problem bei allen Browsern auf?


Bei Mozilla Firefox bitte mal das folgende abarbeiten:

https://support.mozilla.org/de/kb/fi...einfach-loesen

ich hab firefox vor einiger zeit gelöscht, da der irgendwie gesponnen hat,
soll ich mir den nochmal runterladen?

Bei welchem Browser bekommst du die Werbung genau? Tritt sie bei mehreren Browsern auf?

Ja installiere dir mal den aktuellen Firefox und teste es dort

Also im moment nutze ich chrome und bin eigentlich auch sehr zufrieden

firefox läuft einwandfrei, keine nervige Werbung oder Tabs.