Trojaner-Board - Chrome öffnet Fenster und PopUps

Danke

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=46fdbbf41e9ac44e960aa31a50246ddc
# engine=14334
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2013-07-09 10:33:16
# local_time=2013-07-10 12:33:16 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 96 14096 7697558 6874 0
# compatibility_mode=5893 16776573 100 94 13677 125039046 0 0
# scanned=144963
# found=36
# cleaned=33
# scan_time=11390
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="Variante von Win32/Adware.Yontoo.B Anwendung" ac=I fn="C:\Users\All Users\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll"
sh=75DFDC05C5D5F0C3B930B5B6871B6528EC9C22EA ft=1 fh=cff868ace0c06f1a vn="Variante von Win32/Adware.Yontoo.B Anwendung" ac=I fn="C:\Users\All Users\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll"
sh=C15B3B387C5E814ADA95E72EA2D30870651DCC99 ft=1 fh=9892757c2bb97d6a vn="Mehrere Bedrohungen" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[1]"
sh=1F2C0A5D4CB1B47D1DDC86E3516F06B3ECA63A56 ft=1 fh=94049be6457143fb vn="möglicherweise Variante von MSIL/DomaIQ.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files\DomaIQ Uninstaller\DomaIQUninstall.exe"
sh=D1AD9BF875923918BF05F91507446937EA4D40E4 ft=1 fh=4fb200d5a0c74209 vn="Variante von Win32/Toolbar.Perion.C Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="C:\Program Files\Video downloader\ExtensionUpdaterService.exe"
sh=C04E54737991A584DA80AA44CDD33CDA4BE6BB3F ft=1 fh=0d80240d17f35c0b vn="Variante von Win32/Toolbar.Perion.B Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files\Video downloader\InstallerHelper.dll"
sh=3E528BF4BF06F3491D6D62CB756FACD726252E87 ft=1 fh=fdc38ff3be82d55a vn="Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\SearchProtect\bin\ChromeModule.dll"
sh=FD93CCAEBA15517CE2171A1637BC837D393ADE8E ft=1 fh=fe17121cad1ff256 vn="Variante von Win32/Conduit.SearchProtect.B Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\SearchProtect\bin\cltmng.exe"
sh=77448BD92178191EF5A4D6A6A0A7FB1B8B45F3B8 ft=1 fh=270e4b58be3d8987 vn="Win32/Conduit.SearchProtect.A Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe"
sh=6DC7867B24FA6111D0C6F71D4356B2EBC5C2C876 ft=1 fh=6a49d7d1db4b2cc3 vn="Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\SearchProtect\bin\FirefoxModule.dll"
sh=CDB2DB2021C21556EB82F4316978B0382329809A ft=1 fh=0ce4d20c39ddf5b9 vn="Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\SearchProtect\bin\InternetExplorerModule.dll"
sh=76A69E2AF9F1BAC40D8D9FE128364894CA2E9F08 ft=1 fh=004b198f29fb0ef4 vn="möglicherweise Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\SearchProtect\bin\SPHook32.dll"
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="Variante von Win32/Adware.Yontoo.B Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll"
sh=75DFDC05C5D5F0C3B930B5B6871B6528EC9C22EA ft=1 fh=cff868ace0c06f1a vn="Variante von Win32/Adware.Yontoo.B Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll"
sh=23BCA4D6CC914DC3A7E0E458122CA50D9C7DCCED ft=1 fh=d416938800afb31e vn="Variante von Win32/Bundled.Toolbar.Ask Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\AppData\LocalLow\AskToolbar\setup.exe"
sh=3E528BF4BF06F3491D6D62CB756FACD726252E87 ft=1 fh=fdc38ff3be82d55a vn="Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\AppData\Roaming\SearchProtect\bin\ChromeModule.dll"
sh=FD93CCAEBA15517CE2171A1637BC837D393ADE8E ft=1 fh=fe17121cad1ff256 vn="Variante von Win32/Conduit.SearchProtect.B Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\AppData\Roaming\SearchProtect\bin\cltmng.exe"
sh=77448BD92178191EF5A4D6A6A0A7FB1B8B45F3B8 ft=1 fh=270e4b58be3d8987 vn="Win32/Conduit.SearchProtect.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\AppData\Roaming\SearchProtect\bin\CltMngSvc.exe"
sh=6DC7867B24FA6111D0C6F71D4356B2EBC5C2C876 ft=1 fh=6a49d7d1db4b2cc3 vn="Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\AppData\Roaming\SearchProtect\bin\FirefoxModule.dll"
sh=CDB2DB2021C21556EB82F4316978B0382329809A ft=1 fh=0ce4d20c39ddf5b9 vn="Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\AppData\Roaming\SearchProtect\bin\InternetExplorerModule.dll"
sh=76A69E2AF9F1BAC40D8D9FE128364894CA2E9F08 ft=1 fh=004b198f29fb0ef4 vn="möglicherweise Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\AppData\Roaming\SearchProtect\bin\SPHook32.dll"
sh=C5E0829F0443FEC9FAA1FF5DE28BDC8D2B81E5F6 ft=1 fh=f16fed22e902ec25 vn="Win32/Keygen.DK Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\Desktop\cod4\Call_of_Duty_4_Modern_Warfare_1.7_Online\Call of Duty 4 - Modern Warfare\KeyGen\KeyGen.exe"
sh=50BD1DFCA56057AA9A165F3CE46E62F04FCF9948 ft=1 fh=2889fbae6bb05476 vn="Win32/OpenCandy Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\Downloads\DTLite4471-0335.exe"
sh=2E609C8755729F5F00B77F2DE7F3BD7D95ACB832 ft=1 fh=d6b84761a5f2e878 vn="Win32/OpenCandy Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\Downloads\FreeStudio_6.1.0.320.exe"
sh=DEB0393A4C6DEA1080C431B4B2ADA55EC4A21E20 ft=1 fh=aed9254d25d8597e vn="Variante von Win32/SoftonicDownloader.E Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\Downloads\SoftonicDownloader_fuer_windows-live-messenger-2012.exe"
sh=8193F65601B85D34051C4A7378B3681517665488 ft=1 fh=156cd8ecd2fe6ec0 vn="Win32/OpenCandy Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\Downloads\winamp563_full_emusic-7plus_de-de.exe"
sh=3E528BF4BF06F3491D6D62CB756FACD726252E87 ft=1 fh=fdc38ff3be82d55a vn="Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Gast\AppData\Roaming\SearchProtect\bin\ChromeModule.dll"
sh=FD93CCAEBA15517CE2171A1637BC837D393ADE8E ft=1 fh=fe17121cad1ff256 vn="Variante von Win32/Conduit.SearchProtect.B Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Gast\AppData\Roaming\SearchProtect\bin\cltmng.exe"
sh=77448BD92178191EF5A4D6A6A0A7FB1B8B45F3B8 ft=1 fh=270e4b58be3d8987 vn="Win32/Conduit.SearchProtect.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Gast\AppData\Roaming\SearchProtect\bin\CltMngSvc.exe"
sh=6DC7867B24FA6111D0C6F71D4356B2EBC5C2C876 ft=1 fh=6a49d7d1db4b2cc3 vn="Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Gast\AppData\Roaming\SearchProtect\bin\FirefoxModule.dll"
sh=CDB2DB2021C21556EB82F4316978B0382329809A ft=1 fh=0ce4d20c39ddf5b9 vn="Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Gast\AppData\Roaming\SearchProtect\bin\InternetExplorerModule.dll"
sh=76A69E2AF9F1BAC40D8D9FE128364894CA2E9F08 ft=1 fh=004b198f29fb0ef4 vn="möglicherweise Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Gast\AppData\Roaming\SearchProtect\bin\SPHook32.dll"
sh=C15B3B387C5E814ADA95E72EA2D30870651DCC99 ft=1 fh=9892757c2bb97d6a vn="Mehrere Bedrohungen (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[1]"
sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="D:\Programme\Avira\AntiVir Desktop\apnic.dll"
sh=1A3F14C0A66F9AF050D1F34FBACBAADC31751A07 ft=1 fh=2704a03a0f47b728 vn="Variante von Win32/Bundled.Toolbar.Ask Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="D:\Programme\Avira\AntiVir Desktop\apntoolbarinstaller.exe"
sh=4B553651EF610C0614F8393D6C25ABA0A8F09ECA ft=1 fh=92ef1bb072edf568 vn="Variante von Win32/Bundled.Toolbar.Ask.D Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="D:\Programme\Avira\AntiVir Desktop\Offercast_AVIRAV7_.exe"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=46fdbbf41e9ac44e960aa31a50246ddc
# engine=14334
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2013-07-10 07:30:02
# local_time=2013-07-10 09:30:02 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 96 0 7729764 17505 0
# compatibility_mode=5893 16776573 100 94 0 125071252 0 0
# scanned=147098
# found=7
# cleaned=7
# scan_time=10749
sh=D1AD9BF875923918BF05F91507446937EA4D40E4 ft=1 fh=4fb200d5a0c74209 vn="Variante von Win32/Toolbar.Perion.C Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\AppData\Local\Temp\NOD5FDB.tmp"
sh=77448BD92178191EF5A4D6A6A0A7FB1B8B45F3B8 ft=1 fh=270e4b58be3d8987 vn="Win32/Conduit.SearchProtect.A Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\AppData\Local\Temp\NOD66CE.tmp"
sh=3E528BF4BF06F3491D6D62CB756FACD726252E87 ft=1 fh=fdc38ff3be82d55a vn="Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\AppData\Local\Temp\NOD733E.tmp"
sh=76A69E2AF9F1BAC40D8D9FE128364894CA2E9F08 ft=1 fh=004b198f29fb0ef4 vn="möglicherweise Variante von Win32/Conduit.SearchProtect.C Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="C:\Users\Aikigunnar\AppData\Local\Temp\NOD7F7E.tmp"
sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="D:\Programme\Avira\AntiVir Desktop\apnic.dll"
sh=1A3F14C0A66F9AF050D1F34FBACBAADC31751A07 ft=1 fh=2704a03a0f47b728 vn="Variante von Win32/Bundled.Toolbar.Ask Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="D:\Programme\Avira\AntiVir Desktop\apntoolbarinstaller.exe"
sh=4B553651EF610C0614F8393D6C25ABA0A8F09ECA ft=1 fh=92ef1bb072edf568 vn="Variante von Win32/Bundled.Toolbar.Ask.D Anwendung (Gesäubert durch Löschen (nach dem nächsten Neustart) - in Quarantäne kopiert)" ac=C fn="D:\Programme\Avira\AntiVir Desktop\Offercast_AVIRAV7_.exe"

Ende

ADW:AdwCleaner Logfile:

Code:

# AdwCleaner v2.304 - Datei am 10/07/2013 um 22:26:38 erstellt

# Aktualisiert am 03/07/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzer : Aikigunnar - GAMEMONSTER

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Aikigunnar\Downloads\adwcleaner (1).exe

# Option [Löschen]
 
 

**** [Dienste] ****
 

Gestoppt & Gelöscht : Video downloader Updater

Gestoppt & Gelöscht : Yontoo Desktop Updater
 

***** [Dateien / Ordner] *****
 

Datei Gelöscht : C:\Windows\Tasks\AmiUpdXp.job

Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB

Ordner Gelöscht : C:\Program Files (x86)\DVDvideoSoft_2.0

Ordner Gelöscht : C:\Program Files\DomaIQ Uninstaller

Ordner Gelöscht : C:\Program Files\Video Downloader

Ordner Gelöscht : C:\Users\Aikigunnar\AppData\LocalLow\DVDvideoSoft_2.0

Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\AskToolbar

Ordner Gelöscht : C:\Users\Gast\AppData\Roaming\SearchProtect
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DVDvideoSoft_2.0

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{04A8DD1A-4754-48FE-A703-99846646EF04}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{04A8DD1A-4754-48FE-A703-99846646EF04}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{17667902-A1A2-4DC4-8C42-CB1B60BF2202}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\SearchProtect

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}

Schlüssel Gelöscht : HKLM\Software\DVDvideoSoft_2.0

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{17667902-A1A2-4DC4-8C42-CB1B60BF2202}

Schlüssel Gelöscht : HKLM\Software\SearchProtect

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{04A8DD1A-4754-48FE-A703-99846646EF04}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{17667902-A1A2-4DC4-8C42-CB1B60BF2202}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A939776-814B-41D5-817F-7B274462594B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{96FC45F7-DD83-4768-9867-A46BEA489732}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{04A8DD1A-4754-48FE-A703-99846646EF04}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DomaIQ Uninstaller

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DVDvideoSoft_2.0 Toolbar

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{04A8DD1A-4754-48FE-A703-99846646EF04}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{04A8DD1A-4754-48FE-A703-99846646EF04}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{04A8DD1A-4754-48FE-A703-99846646EF04}]

Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{04A8DD1A-4754-48FE-A703-99846646EF04}]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v10.0.9200.16635
 

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com/?ctid=CT3279453&octid=CT3279453&SearchSource=61&CUI=UN11040021708045292&UM=2&UP=SP1CAF8F90-D16D-473E-B8CD-EF074B7CCA1C --> hxxp://www.google.com
 

-\\ Google Chrome v27.0.1453.116
 

Datei : C:\Users\Aikigunnar\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

[OK] Die Datei ist sauber.
 

Datei : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

[OK] Die Datei ist sauber.
 

*************************
 

AdwCleaner[R1].txt - [9998 octets] - [10/07/2013 22:23:12]

AdwCleaner[S1].txt - [10005 octets] - [10/07/2013 22:26:38]
 

########## EOF - C:\AdwCleaner[S1].txt - [10066 octets] ##########

--- --- ---
FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-07-2013 03

Ran by Aikigunnar (administrator) on 10-07-2013 22:35:26

Running from C:\Users\Aikigunnar\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Avira Operations GmbH & Co. KG) D:\Programme\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) D:\Programme\Avira\AntiVir Desktop\avshadow.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) D:\Programme\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) D:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Safer-Networking Ltd.) D:\Programme\Spybot\Spybot - Search & Destroy 2\SDFSSvc.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

(Safer-Networking Ltd.) D:\Programme\Spybot\Spybot - Search & Destroy 2\SDUpdSvc.exe

(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe

(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe

(Safer-Networking Ltd.) D:\Programme\Spybot\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Authentec) C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe

(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

() C:\Program Files (x86)\Hotkey\Hotkey.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\swriter.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe

(Avira Operations GmbH & Co. KG) D:\Programme\Avira\AntiVir Desktop\avgnt.exe

(Safer-Networking Ltd.) D:\Programme\Spybot\Spybot - Search & Destroy 2\SDTray.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12452456 2012-02-21] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2905912 2012-06-28] (Synaptics Incorporated)

HKLM\...\Run: [KeepSafe] - "C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe" /startup [38728 2011-10-21] (Authentec)

HKLM\...\Run: [] -  [x]

HKLM\...\Run: [BLEServicesCtrl] - C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [178960 2012-03-15] (Intel Corporation)

HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [11407120 2012-03-27] (Intel Corporation)

HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64 [25600 2010-09-14] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry [17920 2009-02-26] (Creative Technology Ltd.)

HKLM\...\Run: [ProfilerU] - C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek)

HKLM\...\Run: [SaiMfd] - C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2013-04-16] (Saitek)

HKCU\...\Run: [GoogleChromeAutoLaunch_69DB9BC9E04788BF789C93433E690B12] - "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window [825808 2013-06-15] (Google Inc.)

HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-21] (Microsoft Corporation)

HKCU\...\Run: [DAEMON Tools Lite] - "D:\Programme\DAEMON Tools Lite\DTLite.exe" -autorun [x]

HKCU\...\Run: [Spybot-S&D Cleaning] - "D:\Programme\Spybot\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean [x]

HKCU\...\Policies\system: [DisableRegistryTools] 0

HKCU\...\Policies\system: [DisableTaskMgr] 0

MountPoints2: {25a11c2e-e7d2-11e2-bdab-d7fb8c8cd97c} - G:\setup\rsrc\Autorun.exe

HKLM-x32\...\Run: [USB3MON] - "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291648 2012-05-20] (Intel Corporation)

HKLM-x32\...\Run: [] -  [x]

HKLM-x32\...\Run: [THX Audio Control Panel] - "C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe" /r [1517056 2011-08-29] (Creative Technology Ltd)

HKLM-x32\...\Run: [VolPanel] - "C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe" /r [241789 2010-02-18] (Creative Technology Ltd)

HKLM-x32\...\Run: [avgnt] - "D:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min [x]

HKLM-x32\...\Run: [SDTray] - "D:\Programme\Spybot\Spybot - Search & Destroy 2\SDTray.exe" [x]

HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)

HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)

HKU\Gast\...\Run: [SearchProtect] - C:\Users\Gast\AppData\Roaming\SearchProtect\bin\cltmng.exe [x]

HKU\UpdatusUser\...\Run: [Yontoo Desktop] - "C:\Users\Aikigunnar\AppData\Roaming\Yontoo\YontooDesktop.exe" [x]

HKU\UpdatusUser\...\Run: [Auto] - E:\autorun.exe [x]

HKU\UpdatusUser\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)

Startup: C:\Users\Aikigunnar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk

ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

Startup: C:\ProgramData\Start Menu\Programs\Startup\Hotkey.lnk

ShortcutTarget: Hotkey.lnk -> C:\Program Files (x86)\Hotkey\Hotkey.exe ()

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: localhost:21320

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Dell Official Site - The Power To Do More | Dell

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Programme\bin\ssv.dll No File

BHO: Video downloader - {77BEC163-D389-42c1-91A4-C758846296A5} - C:\Program Files\Video downloader\Extension64.dll No File

BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\IEBHO.dll (AuthenTec Inc.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Programme\bin\jp2ssv.dll No File

BHO-x32: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

BHO-x32: Video downloader - {77BEC163-D389-42c1-91A4-C758846296A5} - C:\Program Files\Video downloader\Extension32.dll No File

BHO-x32: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\x86\IEBHO.dll (AuthenTec Inc.)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Winsock: Catalog9 01 D:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 02 D:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 03 D:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 04 D:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 05 D:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 06 D:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 07 D:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 08 D:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 20 D:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 01 D:\Programme\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 02 D:\Programme\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 03 D:\Programme\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 04 D:\Programme\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 05 D:\Programme\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 06 D:\Programme\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 07 D:\Programme\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 08 D:\Programme\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 20 D:\Programme\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
 

Chrome: 

=======

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)

CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

CHR Plugin: (VLC Web Plugin) - D:\Programme\VLC\npvlc.dll (VideoLAN)

CHR Extension: (Website Logon) - C:\Users\AIKIGU~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\eioaimhbaiomogmbefipmnbpjmefhhoc\1.0_0

CHR Extension: (DVDvideoSoft 2.0) - C:\Users\AIKIGU~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolkekjjhnaeaahibbnfebmogackofpf\10.15.0.62_0
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; D:\Programme\Avira\AntiVir Desktop\sched.exe [84024 2013-07-03] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; D:\Programme\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-03] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; D:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-03] (Avira Operations GmbH & Co. KG)

R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [299848 2011-11-03] (AuthenTec, Inc)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165144 2012-05-15] (Intel Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272688 2012-06-25] ()

R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-04-08] ()

R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [35328 2012-05-22] ()

R2 SDScannerService; D:\Programme\Spybot\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)

R2 SDUpdateService; D:\Programme\Spybot\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)

R2 SDWSCService; D:\Programme\Spybot\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3325232 2012-06-25] (Intel® Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-04-11] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-04-11] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-04-11] (Avira Operations GmbH & Co. KG)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-07-08] (Disc Soft Ltd)

R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw00.sys [11499008 2012-06-03] (Intel Corporation)

R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)

R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-07-10 22:35 - 2013-07-10 22:35 - 00000000 ____D C:\FRST

2013-07-10 22:33 - 2013-07-10 22:33 - 00010120 ____A C:\Users\Aikigunnar\Desktop\AdwCleaner[S1].txt

2013-07-10 22:26 - 2013-07-10 22:27 - 00010120 ____A C:\AdwCleaner[S1].txt

2013-07-10 22:23 - 2013-07-10 22:23 - 00009998 ____A C:\AdwCleaner[R1].txt

2013-07-10 22:17 - 2013-07-10 22:17 - 00006741 ____A C:\Users\Aikigunnar\Desktop\JRT.txt

2013-07-10 22:13 - 2013-07-10 22:13 - 00000000 ____D C:\Windows\ERUNT

2013-07-10 22:12 - 2013-07-10 22:12 - 01776951 ____A (Farbar) C:\Users\Aikigunnar\Downloads\FRST64.exe

2013-07-10 22:12 - 2013-07-10 22:12 - 00650027 ____A C:\Users\Aikigunnar\Downloads\adwcleaner (1).exe

2013-07-10 22:12 - 2013-07-10 22:12 - 00552874 ____A (Oleg N. Scherbakov) C:\Users\Aikigunnar\Downloads\JRT.exe

2013-07-10 20:50 - 2013-07-10 20:50 - 00000121 ____A C:\Windows\wininit.ini

2013-07-10 17:32 - 2013-07-10 22:29 - 00000112 ____A C:\Windows\setupact.log

2013-07-10 17:32 - 2013-07-10 17:32 - 00000000 ____A C:\Windows\setuperr.log

2013-07-10 17:31 - 2013-07-10 22:29 - 00002532 ____A C:\Windows\PFRO.log

2013-07-10 06:35 - 2013-06-12 01:43 - 14329856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-07-10 06:35 - 2013-06-12 01:43 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-07-10 06:35 - 2013-06-12 01:43 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-07-10 06:35 - 2013-06-12 01:43 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-07-10 06:35 - 2013-06-12 01:43 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-07-10 06:35 - 2013-06-12 01:43 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-07-10 06:35 - 2013-06-12 01:43 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-07-10 06:35 - 2013-06-12 01:42 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-07-10 06:35 - 2013-06-12 01:42 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-07-10 06:35 - 2013-06-12 01:42 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-07-10 06:35 - 2013-06-12 01:42 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-07-10 06:35 - 2013-06-12 01:42 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-07-10 06:35 - 2013-06-12 01:42 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-07-10 06:35 - 2013-06-12 01:26 - 02241024 ____A (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-07-10 06:35 - 2013-06-12 01:26 - 01365504 ____A (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-07-10 06:35 - 2013-06-12 01:26 - 00051712 ____A (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-07-10 06:35 - 2013-06-12 01:25 - 19238912 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-07-10 06:35 - 2013-06-12 01:25 - 15404032 ____A (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-07-10 06:35 - 2013-06-12 01:25 - 03958784 ____A (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-07-10 06:35 - 2013-06-12 01:25 - 02648576 ____A (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-07-10 06:35 - 2013-06-12 01:25 - 00855552 ____A (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-07-10 06:35 - 2013-06-12 01:25 - 00603136 ____A (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-07-10 06:35 - 2013-06-12 01:25 - 00526336 ____A (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-07-10 06:35 - 2013-06-12 01:25 - 00136704 ____A (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-07-10 06:35 - 2013-06-12 01:25 - 00067072 ____A (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-07-10 06:35 - 2013-06-12 01:25 - 00053248 ____A (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-07-10 06:35 - 2013-06-12 01:25 - 00039936 ____A (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-07-10 06:35 - 2013-06-12 00:51 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-07-10 06:35 - 2013-06-12 00:50 - 00089600 ____A (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-07-10 06:35 - 2013-06-07 05:22 - 02706432 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-07-10 06:35 - 2013-06-07 04:37 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-07-10 03:30 - 2013-06-04 08:00 - 00624128 ____A (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-07-10 03:30 - 2013-06-04 06:53 - 00509440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2013-07-10 03:30 - 2013-05-06 08:03 - 01887744 ____A (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-07-10 03:30 - 2013-05-06 06:56 - 01620480 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2013-07-10 03:29 - 2013-06-05 05:34 - 03153920 ____A (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-07-10 03:29 - 2013-04-10 01:34 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2013-07-10 03:29 - 2013-04-03 00:51 - 01643520 ____A (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-07-09 21:30 - 2013-07-09 21:30 - 00726464 ____A (Enigma Software Group USA, LLC.) C:\Users\Aikigunnar\Downloads\SpyHunter-Installer.exe

2013-07-09 21:18 - 2013-07-09 21:18 - 02347384 ____A (ESET) C:\Users\Aikigunnar\Downloads\esetsmartinstaller_deu.exe

2013-07-09 21:14 - 2013-07-09 21:14 - 00650027 ____A C:\Users\Aikigunnar\Downloads\adwcleaner.exe

2013-07-08 21:20 - 2013-07-08 21:20 - 00014492 ____A C:\Users\Aikigunnar\Desktop\cc_20130708_211913.reg

2013-07-08 21:19 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts.20130708-211917.backup

2013-07-08 21:04 - 2013-07-08 21:15 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2013-07-08 21:04 - 2013-07-08 21:04 - 00001095 ____A C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2013-07-08 21:04 - 2013-07-08 21:04 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking

2013-07-08 21:04 - 2009-01-25 13:14 - 00017272 ____A (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe

2013-07-08 21:00 - 2013-07-08 21:00 - 00002782 ____A C:\Windows\System32\Tasks\CCleanerSkipUAC

2013-07-08 21:00 - 2013-07-08 21:00 - 00000822 ____A C:\Users\Public\Desktop\CCleaner.lnk

2013-07-08 21:00 - 2013-07-08 21:00 - 00000000 ____D C:\Program Files\CCleaner

2013-07-08 20:58 - 2013-07-08 21:01 - 36271144 ____A (Safer-Networking Ltd.                                       ) C:\Users\Aikigunnar\Downloads\spybot-2.1.exe

2013-07-08 20:58 - 2013-07-08 20:59 - 03357912 ____A (Piriform Ltd) C:\Users\Aikigunnar\Downloads\ccsetup403_slim.exe

2013-07-08 17:17 - 2013-07-08 17:17 - 00000553 ____A C:\Users\Public\Desktop\Call of Duty(R) 4 - Modern Warfare(TM) - Mehrspieler.lnk

2013-07-08 17:17 - 2013-07-08 17:17 - 00000553 ____A C:\Users\Public\Desktop\Call of Duty(R) 4 - Modern Warfare(TM) - Einzelspieler.lnk

2013-07-08 16:52 - 2013-07-08 17:11 - 00000289 ____A C:\Windows\game.ini

2013-07-08 16:36 - 2013-07-08 21:17 - 00000000 ____D C:\Users\Aikigunnar\AppData\Roaming\DAEMON Tools Lite

2013-07-08 16:36 - 2013-07-08 16:36 - 00283064 ____A (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys

2013-07-08 16:34 - 2013-07-08 16:39 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-07-08 16:28 - 2013-07-08 16:28 - 00000000 ____D C:\Users\Aikigunnar\Desktop\cod4

2013-07-08 15:39 - 2013-07-08 15:40 - 01283592 ____A (Avira Operations GmbH & Co. KG) C:\Users\Aikigunnar\Downloads\AviraDNSRepairDE.exe

2013-07-08 15:39 - 2013-07-08 15:39 - 03313664 ____A (Avira GmbH) C:\Users\Aikigunnar\Downloads\bootwizard.exe

2013-07-08 15:38 - 2013-07-08 15:38 - 00227096 ____A C:\Users\Aikigunnar\Downloads\avira_registry_cleaner_de.exe

2013-07-08 03:07 - 2013-07-08 03:07 - 00858893 ____A C:\Users\Aikigunnar\AppData\Local\census.cache

2013-07-08 03:06 - 2013-07-08 03:06 - 00122266 ____A C:\Users\Aikigunnar\AppData\Local\ars.cache

2013-07-08 02:58 - 2013-07-10 22:01 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-07-08 02:58 - 2013-07-08 02:58 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-07-08 02:58 - 2013-07-08 02:58 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-07-08 02:58 - 2013-07-08 02:58 - 00003822 ____A C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-07-08 02:58 - 2013-07-08 02:58 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2013-07-08 02:58 - 2013-07-08 02:58 - 00000000 ____D C:\Windows\system32\Macromed

2013-07-08 02:53 - 2013-07-08 02:53 - 00000036 ____A C:\Users\Aikigunnar\AppData\Local\housecall.guid.cache

2013-06-30 00:49 - 2013-06-30 00:49 - 00000000 ____D C:\Users\Aikigunnar\AppData\Local\Microsoft Games

2013-06-15 14:11 - 2013-06-15 14:16 - 57761792 ____A C:\Users\Aikigunnar\Downloads\calibre-64bit-0.9.35.msi

2013-06-12 19:59 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

2013-06-12 19:59 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll

2013-06-12 19:59 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-06-12 19:59 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2013-06-12 19:59 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-06-12 19:59 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2013-06-12 19:59 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2013-06-12 19:58 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-06-12 19:58 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-06-12 19:58 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-06-12 19:58 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\system32\certenc.dll

2013-06-12 19:58 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-06-12 19:58 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-06-12 19:58 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-06-12 19:58 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\system32\certutil.exe

2013-06-12 19:58 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-06-12 19:58 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-06-12 19:58 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2013-06-12 19:58 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2013-06-11 20:11 - 2013-06-11 20:23 - 57647104 ____A C:\Users\Aikigunnar\Downloads\calibre-64bit-0.9.34.msi
 

==================== One Month Modified Files and Folders =======
 

2013-07-10 22:35 - 2013-07-10 22:35 - 00000000 ____D C:\FRST

2013-07-10 22:34 - 2013-03-29 12:31 - 00654166 ____A C:\Windows\system32\perfh007.dat

2013-07-10 22:34 - 2013-03-29 12:31 - 00130006 ____A C:\Windows\system32\perfc007.dat

2013-07-10 22:34 - 2009-07-14 07:13 - 01498506 ____A C:\Windows\system32\PerfStringBackup.INI

2013-07-10 22:33 - 2013-07-10 22:33 - 00010120 ____A C:\Users\Aikigunnar\Desktop\AdwCleaner[S1].txt

2013-07-10 22:30 - 2013-03-28 23:58 - 00001118 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-07-10 22:30 - 2013-03-28 23:58 - 00001114 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-07-10 22:29 - 2013-07-10 17:32 - 00000112 ____A C:\Windows\setupact.log

2013-07-10 22:29 - 2013-07-10 17:31 - 00002532 ____A C:\Windows\PFRO.log

2013-07-10 22:29 - 2013-03-28 21:15 - 00000000 ____D C:\ProgramData\NVIDIA

2013-07-10 22:29 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-07-10 22:28 - 2013-03-29 03:36 - 01182470 ____A C:\Windows\WindowsUpdate.log

2013-07-10 22:27 - 2013-07-10 22:26 - 00010120 ____A C:\AdwCleaner[S1].txt

2013-07-10 22:23 - 2013-07-10 22:23 - 00009998 ____A C:\AdwCleaner[R1].txt

2013-07-10 22:17 - 2013-07-10 22:17 - 00006741 ____A C:\Users\Aikigunnar\Desktop\JRT.txt

2013-07-10 22:13 - 2013-07-10 22:13 - 00000000 ____D C:\Windows\ERUNT

2013-07-10 22:12 - 2013-07-10 22:12 - 01776951 ____A (Farbar) C:\Users\Aikigunnar\Downloads\FRST64.exe

2013-07-10 22:12 - 2013-07-10 22:12 - 00650027 ____A C:\Users\Aikigunnar\Downloads\adwcleaner (1).exe

2013-07-10 22:12 - 2013-07-10 22:12 - 00552874 ____A (Oleg N. Scherbakov) C:\Users\Aikigunnar\Downloads\JRT.exe

2013-07-10 22:01 - 2013-07-08 02:58 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-07-10 21:17 - 2013-05-28 21:37 - 00003962 ____A C:\Windows\System32\Tasks\User_Feed_Synchronization-{2B920A6E-2182-47B6-8744-629079671822}

2013-07-10 20:50 - 2013-07-10 20:50 - 00000121 ____A C:\Windows\wininit.ini

2013-07-10 17:40 - 2009-07-14 06:45 - 00025840 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-07-10 17:40 - 2009-07-14 06:45 - 00025840 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-07-10 17:32 - 2013-07-10 17:32 - 00000000 ____A C:\Windows\setuperr.log

2013-07-10 17:32 - 2013-03-29 12:32 - 00000000 ____D C:\Windows\Panther

2013-07-10 17:32 - 2009-07-14 06:45 - 00294184 ____A C:\Windows\system32\FNTCACHE.DAT

2013-07-10 17:30 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal

2013-07-10 17:30 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender

2013-07-10 06:36 - 2013-04-01 14:02 - 78185248 ____A (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-07-09 21:30 - 2013-07-09 21:30 - 00726464 ____A (Enigma Software Group USA, LLC.) C:\Users\Aikigunnar\Downloads\SpyHunter-Installer.exe

2013-07-09 21:18 - 2013-07-09 21:18 - 02347384 ____A (ESET) C:\Users\Aikigunnar\Downloads\esetsmartinstaller_deu.exe

2013-07-09 21:14 - 2013-07-09 21:14 - 00650027 ____A C:\Users\Aikigunnar\Downloads\adwcleaner.exe

2013-07-09 20:37 - 2013-03-28 22:00 - 00000000 ____D C:\Users\Aikigunnar\AppData\Local\DoNotTrackPlus

2013-07-08 21:20 - 2013-07-08 21:20 - 00014492 ____A C:\Users\Aikigunnar\Desktop\cc_20130708_211913.reg

2013-07-08 21:17 - 2013-07-08 16:36 - 00000000 ____D C:\Users\Aikigunnar\AppData\Roaming\DAEMON Tools Lite

2013-07-08 21:17 - 2013-04-03 17:46 - 00000000 ____D C:\Users\Aikigunnar\AppData\Roaming\Winamp

2013-07-08 21:15 - 2013-07-08 21:04 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2013-07-08 21:04 - 2013-07-08 21:04 - 00001095 ____A C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2013-07-08 21:04 - 2013-07-08 21:04 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking

2013-07-08 21:01 - 2013-07-08 20:58 - 36271144 ____A (Safer-Networking Ltd.                                       ) C:\Users\Aikigunnar\Downloads\spybot-2.1.exe

2013-07-08 21:00 - 2013-07-08 21:00 - 00002782 ____A C:\Windows\System32\Tasks\CCleanerSkipUAC

2013-07-08 21:00 - 2013-07-08 21:00 - 00000822 ____A C:\Users\Public\Desktop\CCleaner.lnk

2013-07-08 21:00 - 2013-07-08 21:00 - 00000000 ____D C:\Program Files\CCleaner

2013-07-08 20:59 - 2013-07-08 20:58 - 03357912 ____A (Piriform Ltd) C:\Users\Aikigunnar\Downloads\ccsetup403_slim.exe

2013-07-08 17:17 - 2013-07-08 17:17 - 00000553 ____A C:\Users\Public\Desktop\Call of Duty(R) 4 - Modern Warfare(TM) - Mehrspieler.lnk

2013-07-08 17:17 - 2013-07-08 17:17 - 00000553 ____A C:\Users\Public\Desktop\Call of Duty(R) 4 - Modern Warfare(TM) - Einzelspieler.lnk

2013-07-08 17:11 - 2013-07-08 16:52 - 00000289 ____A C:\Windows\game.ini

2013-07-08 16:39 - 2013-07-08 16:34 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-07-08 16:36 - 2013-07-08 16:36 - 00283064 ____A (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys

2013-07-08 16:28 - 2013-07-08 16:28 - 00000000 ____D C:\Users\Aikigunnar\Desktop\cod4

2013-07-08 15:40 - 2013-07-08 15:39 - 01283592 ____A (Avira Operations GmbH & Co. KG) C:\Users\Aikigunnar\Downloads\AviraDNSRepairDE.exe

2013-07-08 15:39 - 2013-07-08 15:39 - 03313664 ____A (Avira GmbH) C:\Users\Aikigunnar\Downloads\bootwizard.exe

2013-07-08 15:38 - 2013-07-08 15:38 - 00227096 ____A C:\Users\Aikigunnar\Downloads\avira_registry_cleaner_de.exe

2013-07-08 03:14 - 2013-03-28 21:54 - 00003834 ____A C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar

2013-07-08 03:07 - 2013-07-08 03:07 - 00858893 ____A C:\Users\Aikigunnar\AppData\Local\census.cache

2013-07-08 03:06 - 2013-07-08 03:06 - 00122266 ____A C:\Users\Aikigunnar\AppData\Local\ars.cache

2013-07-08 02:58 - 2013-07-08 02:58 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-07-08 02:58 - 2013-07-08 02:58 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-07-08 02:58 - 2013-07-08 02:58 - 00003822 ____A C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-07-08 02:58 - 2013-07-08 02:58 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2013-07-08 02:58 - 2013-07-08 02:58 - 00000000 ____D C:\Windows\system32\Macromed

2013-07-08 02:53 - 2013-07-08 02:53 - 00000036 ____A C:\Users\Aikigunnar\AppData\Local\housecall.guid.cache

2013-07-07 08:22 - 2013-03-28 23:58 - 00004114 ____A C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-07-07 08:22 - 2013-03-28 23:58 - 00003862 ____A C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-07-04 22:35 - 2013-04-08 10:13 - 00000000 ____D C:\Users\Aikigunnar\AppData\Roaming\Skype

2013-07-03 22:13 - 2013-05-06 13:16 - 00083672 ____A (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-06-30 00:49 - 2013-06-30 00:49 - 00000000 ____D C:\Users\Aikigunnar\AppData\Local\Microsoft Games

2013-06-15 14:22 - 2013-04-08 02:17 - 00000930 ____A C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk

2013-06-15 14:22 - 2013-04-08 02:17 - 00000000 ____D C:\Program Files\Calibre2

2013-06-15 14:16 - 2013-06-15 14:11 - 57761792 ____A C:\Users\Aikigunnar\Downloads\calibre-64bit-0.9.35.msi

2013-06-13 20:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-06-12 01:43 - 2013-07-10 06:35 - 14329856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-06-12 01:43 - 2013-07-10 06:35 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-06-12 01:43 - 2013-07-10 06:35 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-06-12 01:43 - 2013-07-10 06:35 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-06-12 01:43 - 2013-07-10 06:35 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-06-12 01:43 - 2013-07-10 06:35 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-06-12 01:43 - 2013-07-10 06:35 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-06-12 01:42 - 2013-07-10 06:35 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-06-12 01:42 - 2013-07-10 06:35 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-06-12 01:42 - 2013-07-10 06:35 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-06-12 01:42 - 2013-07-10 06:35 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-06-12 01:42 - 2013-07-10 06:35 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-06-12 01:42 - 2013-07-10 06:35 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-06-12 01:26 - 2013-07-10 06:35 - 02241024 ____A (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-06-12 01:26 - 2013-07-10 06:35 - 01365504 ____A (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-06-12 01:26 - 2013-07-10 06:35 - 00051712 ____A (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-06-12 01:25 - 2013-07-10 06:35 - 19238912 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-06-12 01:25 - 2013-07-10 06:35 - 15404032 ____A (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-06-12 01:25 - 2013-07-10 06:35 - 03958784 ____A (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-06-12 01:25 - 2013-07-10 06:35 - 02648576 ____A (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-06-12 01:25 - 2013-07-10 06:35 - 00855552 ____A (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-06-12 01:25 - 2013-07-10 06:35 - 00603136 ____A (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-06-12 01:25 - 2013-07-10 06:35 - 00526336 ____A (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-06-12 01:25 - 2013-07-10 06:35 - 00136704 ____A (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-06-12 01:25 - 2013-07-10 06:35 - 00067072 ____A (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-06-12 01:25 - 2013-07-10 06:35 - 00053248 ____A (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-06-12 01:25 - 2013-07-10 06:35 - 00039936 ____A (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-06-12 00:51 - 2013-07-10 06:35 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-06-12 00:50 - 2013-07-10 06:35 - 00089600 ____A (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-06-11 20:23 - 2013-06-11 20:11 - 57647104 ____A C:\Users\Aikigunnar\Downloads\calibre-64bit-0.9.34.msi

2013-06-11 20:07 - 2013-06-02 01:19 - 00000000 ____D C:\Users\Aikigunnar\AppData\Roaming\vlc

2013-06-11 20:02 - 2013-04-03 18:57 - 00000000 ____D C:\Users\Aikigunnar\AppData\Roaming\DVDVideoSoft

2013-06-11 19:21 - 2013-04-08 10:12 - 00000000 ____D C:\ProgramData\Skype
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-07-10 00:58
 

==================== End Of Log ============================

--- --- ---
FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-07-2013 03

Ran by Aikigunnar at 2013-07-10 22:36:08

Running from C:\Users\Aikigunnar\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

   

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)

Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)

Adobe Reader 8.1.2 (x32 Version: 8.1.2)

Assassin's Creed Brotherhood (x32 Version: 1.03)

Assassin's Creed II (x32 Version: 1.01)

Assassin's Creed Revelations 1.03 (x32 Version: 1.03)

AuthenTec TrueSuite (Version: 5.2.0.642)

Avira Free Antivirus (x32 Version: 13.0.0.3737)

BisonCam (x32 Version: )

calibre 64bit (Version: 0.9.35)

Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000)

Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.7)

Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (x32 Version: 1.4)

Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (x32)

Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch (x32)

Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Patch (x32 Version: 1.5)

Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: 1.6)

Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32)

Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: 1.7)

Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32)

DAEMON Tools Lite (x32 Version: 4.47.1.0335)

Diablo II (x32)

eaner (Version: 4.03)

ESET Online Scanner v3 (x32)

Free Studio version 2013 (x32 Version: 6.1.0.320)

Ghost Recon (x32)

Google Chrome (x32 Version: 27.0.1453.116)

Google Update Helper (x32 Version: 1.3.21.149)

Hotkey 6.0058 (x32 Version: 6.0058)

Intel PROSet Wireless

Intel(R) Management Engine Components (x32 Version: 8.0.12.1498)

Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.2.0.0284)

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.1.1.0153)

Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.5.235)

Intel® PROSet/Wireless WiFi-Software (Version: 15.02.0000.1258)

Intel® Trusted Connect Service Client (Version: 1.24.388.1)

Java 7 Update 17 (64-bit) (Version: 7.0.170)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Mozilla Maintenance Service (x32 Version: 17.0.7)

Mozilla Thunderbird 17.0.7 (x86 de) (x32 Version: 17.0.7)

NVIDIA 3D Vision Treiber 314.22 (Version: 314.22)

NVIDIA Grafiktreiber 314.22 (Version: 314.22)

NVIDIA HD-Audiotreiber 1.3.23.1 (Version: 1.3.23.1)

NVIDIA Install Application (Version: 2.1002.115.743)

NVIDIA PhysX (x32 Version: 9.12.1031)

NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1422)

NVIDIA Systemsteuerung 314.22 (Version: 314.22)

NVIDIA Update 1.12.12 (Version: 1.12.12)

NVIDIA Update Components (Version: 1.12.12)

OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)

PunkBuster Services (x32 Version: 0.990)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6581)

Realtek PCIE Card Reader (x32 Version: 6.2.8400.27024)

Sid Meier's Civilization V (x32)

Skype™ 6.5 (x32 Version: 6.5.158)

Smart Technology Programming Software 7.0.27.13 (Version: 7.0.27.13)

Sound Blaster X-Fi MB 2 (x32 Version: 1.04.00)

Spybot - Search & Destroy (x32 Version: 2.1.19)

Steam (x32 Version: 1.0.0.0)

Synaptics Pointing Device Driver (Version: 16.2.4.0)

Ubisoft Game Launcher (x32 Version: 1.0.0.0)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Video downloader 2.0.0.432 (Version: 2.0.0.432)

VLC media player 2.0.5 (x32 Version: 2.0.5)

WebCam Installer (x32 Version: 4.04)

Winamp (x32 Version: 5.63 )

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
 

==================== Restore Points  =========================
 

10-07-2013 17:05:55 Geplanter Prüfpunkt
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0088719B-DD45-479D-AE63-826EDA94CA8B} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe No File

Task: {0B4D612D-6941-434F-8726-B698B5B4416A} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)

Task: {16C8D941-F0AA-43EF-A4AC-CCE5A5C47B86} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-08] (Adobe Systems Incorporated)

Task: {50F51B5B-B16B-4D1E-A50B-B3C71DFC46A2} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Programme\Spybot\Spybot - Search &amp; Destroy 2\SDUpdate.exe No File

Task: {5A5A83AA-92A1-4B3F-9EF1-ED0AE9A62E65} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Programme\Spybot\Spybot - Search &amp; Destroy 2\SDImmunize.exe No File

Task: {5B266E10-19D2-4410-B852-7416FE23485F} - System32\Tasks\Games\UpdateCheck_S-1-5-21-258546526-3460438922-237754320-1000

Task: {61347F49-2269-4646-8DCD-8CE810946810} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Programme\Spybot\Spybot - Search &amp; Destroy 2\SDScan.exe No File

Task: {655E9E0E-84FB-4A1C-B847-9860F231E7A8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-28] (Google Inc.)

Task: {7160D52A-5397-47B2-8A94-77A03ED845EB} - System32\Tasks\User_Feed_Synchronization-{2B920A6E-2182-47B6-8744-629079671822} => C:\Windows\system32\msfeedssync.exe [2013-05-25] (Microsoft Corporation)

Task: {B6D3D0A5-0B83-4022-8D2D-54BFAEB6FAFD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-28] (Google Inc.)

Task: {CC0411AA-0BB9-447C-AA9E-CE5579086232} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd)

Task: {DEDA12DE-3C3D-4650-A053-04EBB9ADB588} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Faulty Device Manager Devices =============
 

Name: Ethernet-Controller

Description: Ethernet-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (07/10/2013 10:30:20 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (07/10/2013 10:32:27 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (07/10/2013 10:32:27 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 
 

Microsoft Office Sessions:

=========================

Error: (07/10/2013 10:30:20 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 48%

Total physical RAM: 4056.3 MB

Available physical RAM: 2085.4 MB

Total Pagefile: 8110.79 MB

Available Pagefile: 5774.77 MB

Total Virtual: 8192 MB

Available Virtual: 8191.81 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:58.5 GB) (Free:18.72 GB) NTFS (Disk=0 Partition=2)

Drive d: () (Fixed) (Total:117.19 GB) (Free:50.25 GB) NTFS (Disk=0 Partition=3)

Drive g: (COD4MW) (CDROM) (Total:6.35 GB) (Free:0 GB) UDF
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 9F3096AE)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=58 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=117 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---