Trojaner-Board
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Internetverbindung bricht dauernd ab an meinem PC, Wlan funktioniert aber an anderen PC´s (https://www.trojaner-board.de/138179-internetverbindung-bricht-dauernd-ab-meinem-pc-wlan-funktioniert-anderen-pc-s.html)

schrauber 17.07.2013 08:24
Normal nicht. Deinstalliere bitte Quicken.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
Startup: C:\ProgramData\Start Menu\Programs\Startup\Quicken 2011 Zahlungserinnerung.lnk
ShortcutTarget: Quicken 2011 Zahlungserinnerung.lnk -> C:\Program Files (x86)\Lexware\Quicken\2011\billmind.exe (Haufe-Lexware GmbH & Co. KG

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Quicken wieder installieren, frisches FRST log bitte.

Billpc 17.07.2013 15:04
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-07-2013
Ran by Schmitz at 2013-07-17 15:58:05 Run:2
Running from C:\Users\Schmitz\Downloads
Boot Mode: Normal
==============================================

C:\ProgramData\Start Menu\Programs\Startup\Quicken 2011 Zahlungserinnerung.lnk => Moved successfully.
ShortcutTarget: Quicken 2011 Zahlungserinnerung.lnk -> C:\Program Files (x86)\Lexware\Quicken\2011\billmind.exe (Haufe-Lexware GmbH & Co. KG not found.

==== End of Fixlog ====

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-07-2013
Ran by Schmitz (administrator) on 17-07-2013 16:04:04
Running from C:\Users\Schmitz\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\windows\System32\WScript.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\qimlsrv.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWlan.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcmon.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\dsrviml.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\windows\system32\msiexec.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
(Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12445288 2012-01-16] (Realtek Semiconductor)
HKLM\...\Run: [MSC] - "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [1281512 2013-01-27] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [35736 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [843712 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IMSS] - "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [133400 2011-12-16] (Intel Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-01-05] (Intel Corporation)
HKLM-x32\...\Run: [LexwareInfoService] - C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe /autostart [339240 2008-11-03] (Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [SSBkgdUpdate] - "C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - "C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe" [29984 2008-07-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [IndexSearch] - "C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe" [46368 2008-07-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PPort11reminder] - "C:\Program Files (x86)\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini" [328992 2007-08-31] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-07-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Java\jre1.6.0_02\bin\jusched.exe" [132496 2007-07-12] (Sun Microsystems, Inc.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\IML.lnk
ShortcutTarget: IML.lnk -> C:\Windows\System32\iml.vbs ()
Startup: C:\ProgramData\Start Menu\Programs\Startup\IML64.lnk
ShortcutTarget: IML64.lnk -> C:\Windows\SysWOW64\iml.vbs ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ig
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
HKCU SearchScopes: DefaultScope {1EEB3645-59ED-4974-8ACC-BC090BCB053D} URL =
SearchScopes: HKCU - {1EEB3645-59ED-4974-8ACC-BC090BCB053D} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Schmitz\AppData\Roaming\Mozilla\Firefox\Profiles\k7im7vp2.default
FF Homepage: www.hw-store.net
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.11.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Schmitz\Music\Amazon MP3\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

Chrome:
=======
CHR DefaultSearchURL: (Ask) - hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10261&locale=de_DE&apn_uid=8126aa6c-89a3-480b-a8ce-982f41bd29f2&apn_ptnrs=%5EAGS&apn_sauid=07B65A62-6BF7-4089-A258-913C76FA46C2&apn_dtid=%5EYYYYYY%5EYY%5EDE&q={searchTerms}
CHR DefaultSuggestURL: (Ask) - hxxp://ss.websearch.ask.com/query?qsrc=2922&li=ff&sstype=prefix&q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Users\Schmitz\Music\Amazon MP3\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.110.21) - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
R2 Realtek11nCU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)
R2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)

==================== Drivers (Whitelisted) ====================

S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2011-09-06] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [35840 2011-09-06] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93184 2011-09-16] (LG Electronics Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-29] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-29] (Avira Operations GmbH & Co. KG)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2011-12-19] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] ()
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [791144 2011-06-10] (Realtek Semiconductor Corporation                          )
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-17 15:43 - 2013-07-17 15:43 - 00002130 _____ C:\Users\Public\Desktop\Bank.lnk
2013-07-17 15:43 - 2013-07-17 15:43 - 00000000 ____D C:\Users\Public\Documents\Lexware
2013-07-17 15:29 - 2013-07-17 15:29 - 00005265 _____ C:\windows\SysWOW64\jupdate-1.6.0_02-b06.log
2013-07-17 15:29 - 2007-07-12 02:22 - 00139264 _____ (Sun Microsystems, Inc.) C:\windows\SysWOW64\javaws.exe
2013-07-17 15:29 - 2007-07-12 02:22 - 00069632 _____ (Sun Microsystems, Inc.) C:\windows\SysWOW64\javacpl.cpl
2013-07-17 15:29 - 2007-07-12 01:22 - 00135168 _____ (Sun Microsystems, Inc.) C:\windows\SysWOW64\javaw.exe
2013-07-17 15:29 - 2007-07-12 01:22 - 00135168 _____ (Sun Microsystems, Inc.) C:\windows\SysWOW64\java.exe
2013-07-17 12:50 - 2013-07-17 12:50 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{93DC858D-5A90-4E26-9524-E462CCF5B95C}
2013-07-16 21:20 - 2013-07-16 21:20 - 00003105 _____ C:\Users\Schmitz\Documents\16.07.13.axp
2013-07-16 18:36 - 2013-07-16 18:36 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{69BF8AB9-4037-47C2-881A-F3F80C51755C}
2013-07-16 11:54 - 2013-07-16 11:54 - 00448512 _____ (OldTimer Tools) C:\Users\Schmitz\Desktop\TFC.exe
2013-07-16 06:36 - 2013-07-16 06:36 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{EA22CDB5-EE65-4C9A-B223-1C38AA0BA47A}
2013-07-15 19:45 - 2013-07-15 19:45 - 00891022 _____ C:\Users\Schmitz\Downloads\SecurityCheck.exe
2013-07-15 19:43 - 2013-07-15 19:43 - 00000810 _____ C:\Users\Schmitz\Downloads\found.txt
2013-07-15 17:11 - 2013-07-15 17:11 - 02347384 _____ (ESET) C:\Users\Schmitz\Downloads\esetsmartinstaller_enu.exe
2013-07-15 06:44 - 2013-07-15 06:44 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{2E418975-1066-4AE3-A33F-3B853CEB23B1}
2013-07-14 21:48 - 2013-07-14 21:48 - 00059009 _____ C:\Users\Schmitz\Desktop\JRT.txt
2013-07-14 21:45 - 2013-07-14 21:45 - 00000000 ____D C:\windows\ERUNT
2013-07-14 21:44 - 2013-07-14 21:44 - 00559441 _____ (Oleg N. Scherbakov) C:\Users\Schmitz\Downloads\JRT.exe
2013-07-14 21:39 - 2013-07-14 21:40 - 00008659 _____ C:\AdwCleaner[S1].txt
2013-07-14 21:39 - 2013-07-14 21:39 - 00662345 _____ C:\Users\Schmitz\Downloads\adwcleaner.exe
2013-07-14 21:34 - 2013-07-14 21:34 - 00031192 _____ C:\Users\Schmitz\Desktop\comb.txt
2013-07-14 21:33 - 2013-07-14 21:33 - 00031192 _____ C:\ComboFix.txt
2013-07-14 21:05 - 2013-07-14 21:05 - 05088557 ____R (Swearware) C:\Users\Schmitz\Desktop\ComboFix.exe
2013-07-14 15:56 - 2011-06-26 08:45 - 00256000 _____ C:\windows\PEV.exe
2013-07-14 15:56 - 2010-11-07 19:20 - 00208896 _____ C:\windows\MBR.exe
2013-07-14 15:56 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-07-14 15:56 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-07-14 15:56 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-07-14 15:56 - 2000-08-31 02:00 - 00098816 _____ C:\windows\sed.exe
2013-07-14 15:56 - 2000-08-31 02:00 - 00080412 _____ C:\windows\grep.exe
2013-07-14 15:56 - 2000-08-31 02:00 - 00068096 _____ C:\windows\zip.exe
2013-07-14 15:55 - 2013-07-14 21:33 - 00000000 ____D C:\Qoobox
2013-07-14 15:55 - 2013-07-14 21:26 - 00000000 ____D C:\windows\erdnt
2013-07-14 09:10 - 2013-07-14 09:11 - 00021316 _____ C:\Users\Schmitz\Downloads\Addition.txt
2013-07-14 09:10 - 2013-07-14 09:10 - 00000000 ____D C:\FRST
2013-07-14 09:09 - 2013-07-14 09:09 - 01777839 _____ (Farbar) C:\Users\Schmitz\Downloads\FRST64 (1).exe
2013-07-14 09:07 - 2013-07-14 09:07 - 01777839 _____ (Farbar) C:\Users\Schmitz\Downloads\FRST64.exe
2013-07-14 08:45 - 2013-07-14 08:45 - 00002089 _____ C:\Users\Schmitz\Documents\Gmer.txt
2013-07-14 08:44 - 2013-07-14 08:44 - 00377856 _____ C:\Users\Schmitz\Downloads\gmer_2.1.19163.exe
2013-07-14 08:42 - 2013-07-14 08:42 - 00000005 _____ C:\Users\Schmitz\AppData\Roaming\WBPU-TTL.DAT
2013-07-14 08:40 - 2013-07-14 08:40 - 00117858 _____ C:\Users\Schmitz\Downloads\OTL.Txt
2013-07-14 08:40 - 2013-07-14 08:40 - 00057726 _____ C:\Users\Schmitz\Downloads\Extras.Txt
2013-07-14 08:35 - 2013-07-14 08:35 - 00602112 _____ (OldTimer Tools) C:\Users\Schmitz\Downloads\OTL.exe
2013-07-14 08:34 - 2013-07-14 08:34 - 00000476 _____ C:\Users\Schmitz\Documents\defogger_disable.log
2013-07-14 07:58 - 2013-07-14 07:58 - 00001120 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\Users\Schmitz\AppData\Roaming\Malwarebytes
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-14 07:58 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-07-13 21:39 - 2013-07-13 21:39 - 00000000 _____ C:\Users\Schmitz\defogger_reenable
2013-07-10 14:53 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-07-10 14:53 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-07-10 14:53 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-07-10 14:53 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-07-10 14:53 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-07-10 14:53 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-10 14:53 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-07-10 14:53 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-07-10 14:53 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-07-10 13:12 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2013-07-10 13:12 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2013-07-10 13:12 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-07-10 13:12 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-07-10 13:12 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2013-07-10 13:12 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2013-07-10 13:09 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-06-17 16:34 - 2013-06-17 16:34 - 00000000 ___HD C:\windows\AxInstSV

==================== One Month Modified Files and Folders =======

2013-07-17 15:54 - 2012-07-18 17:24 - 00001112 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-17 15:45 - 2012-07-18 17:47 - 00000000 ____D C:\Users\Schmitz\AppData\Local\Lexware
2013-07-17 15:45 - 2012-07-14 11:32 - 00113992 _____ C:\Users\Schmitz\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-17 15:43 - 2013-07-17 15:43 - 00002130 _____ C:\Users\Public\Desktop\Bank.lnk
2013-07-17 15:43 - 2013-07-17 15:43 - 00000000 ____D C:\Users\Public\Documents\Lexware
2013-07-17 15:42 - 2012-07-18 17:58 - 00000000 ____D C:\Program Files (x86)\Lexware
2013-07-17 15:39 - 2012-07-19 17:20 - 00001071 _____ C:\windows\Brpfx04a.ini
2013-07-17 15:39 - 2012-07-19 17:10 - 00000000 ___RD C:\Users\Schmitz\Desktop\Aktenkoffer
2013-07-17 15:29 - 2013-07-17 15:29 - 00005265 _____ C:\windows\SysWOW64\jupdate-1.6.0_02-b06.log
2013-07-17 15:29 - 2012-07-17 13:21 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-17 15:15 - 2012-10-17 14:06 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-07-17 15:05 - 2009-07-14 06:45 - 00016752 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-17 15:05 - 2009-07-14 06:45 - 00016752 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-17 15:01 - 2012-05-14 19:56 - 01058469 _____ C:\windows\WindowsUpdate.log
2013-07-17 14:57 - 2012-07-18 17:24 - 00001108 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-17 14:57 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-07-17 14:57 - 2009-07-14 06:51 - 00093795 _____ C:\windows\setupact.log
2013-07-17 14:56 - 2009-07-14 06:45 - 00428560 _____ C:\windows\system32\FNTCACHE.DAT
2013-07-17 12:50 - 2013-07-17 12:50 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{93DC858D-5A90-4E26-9524-E462CCF5B95C}
2013-07-16 21:20 - 2013-07-16 21:20 - 00003105 _____ C:\Users\Schmitz\Documents\16.07.13.axp
2013-07-16 20:43 - 2012-07-17 13:20 - 00000000 ____D C:\Users\Schmitz\AppData\Roaming\vlc
2013-07-16 20:16 - 2012-07-17 18:26 - 00003946 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{1169BC01-178A-450F-9711-5C5BE46FECA2}
2013-07-16 18:36 - 2013-07-16 18:36 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{69BF8AB9-4037-47C2-881A-F3F80C51755C}
2013-07-16 15:20 - 2010-11-21 05:47 - 00889548 _____ C:\windows\PFRO.log
2013-07-16 11:54 - 2013-07-16 11:54 - 00448512 _____ (OldTimer Tools) C:\Users\Schmitz\Desktop\TFC.exe
2013-07-16 11:49 - 2012-07-18 17:24 - 00004108 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-16 11:49 - 2012-07-18 17:24 - 00003856 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-16 06:36 - 2013-07-16 06:36 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{EA22CDB5-EE65-4C9A-B223-1C38AA0BA47A}
2013-07-15 19:45 - 2013-07-15 19:45 - 00891022 _____ C:\Users\Schmitz\Downloads\SecurityCheck.exe
2013-07-15 19:43 - 2013-07-15 19:43 - 00000810 _____ C:\Users\Schmitz\Downloads\found.txt
2013-07-15 17:11 - 2013-07-15 17:11 - 02347384 _____ (ESET) C:\Users\Schmitz\Downloads\esetsmartinstaller_enu.exe
2013-07-15 06:44 - 2013-07-15 06:44 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{2E418975-1066-4AE3-A33F-3B853CEB23B1}
2013-07-14 21:48 - 2013-07-14 21:48 - 00059009 _____ C:\Users\Schmitz\Desktop\JRT.txt
2013-07-14 21:45 - 2013-07-14 21:45 - 00000000 ____D C:\windows\ERUNT
2013-07-14 21:44 - 2013-07-14 21:44 - 00559441 _____ (Oleg N. Scherbakov) C:\Users\Schmitz\Downloads\JRT.exe
2013-07-14 21:40 - 2013-07-14 21:39 - 00008659 _____ C:\AdwCleaner[S1].txt
2013-07-14 21:39 - 2013-07-14 21:39 - 00662345 _____ C:\Users\Schmitz\Downloads\adwcleaner.exe
2013-07-14 21:34 - 2013-07-14 21:34 - 00031192 _____ C:\Users\Schmitz\Desktop\comb.txt
2013-07-14 21:33 - 2013-07-14 21:33 - 00031192 _____ C:\ComboFix.txt
2013-07-14 21:33 - 2013-07-14 15:55 - 00000000 ____D C:\Qoobox
2013-07-14 21:29 - 2009-07-14 04:34 - 00000215 _____ C:\windows\system.ini
2013-07-14 21:26 - 2013-07-14 15:55 - 00000000 ____D C:\windows\erdnt
2013-07-14 21:05 - 2013-07-14 21:05 - 05088557 ____R (Swearware) C:\Users\Schmitz\Desktop\ComboFix.exe
2013-07-14 09:11 - 2013-07-14 09:10 - 00021316 _____ C:\Users\Schmitz\Downloads\Addition.txt
2013-07-14 09:10 - 2013-07-14 09:10 - 00000000 ____D C:\FRST
2013-07-14 09:09 - 2013-07-14 09:09 - 01777839 _____ (Farbar) C:\Users\Schmitz\Downloads\FRST64 (1).exe
2013-07-14 09:07 - 2013-07-14 09:07 - 01777839 _____ (Farbar) C:\Users\Schmitz\Downloads\FRST64.exe
2013-07-14 08:45 - 2013-07-14 08:45 - 00002089 _____ C:\Users\Schmitz\Documents\Gmer.txt
2013-07-14 08:44 - 2013-07-14 08:44 - 00377856 _____ C:\Users\Schmitz\Downloads\gmer_2.1.19163.exe
2013-07-14 08:42 - 2013-07-14 08:42 - 00000005 _____ C:\Users\Schmitz\AppData\Roaming\WBPU-TTL.DAT
2013-07-14 08:40 - 2013-07-14 08:40 - 00117858 _____ C:\Users\Schmitz\Downloads\OTL.Txt
2013-07-14 08:40 - 2013-07-14 08:40 - 00057726 _____ C:\Users\Schmitz\Downloads\Extras.Txt
2013-07-14 08:35 - 2013-07-14 08:35 - 00602112 _____ (OldTimer Tools) C:\Users\Schmitz\Downloads\OTL.exe
2013-07-14 08:34 - 2013-07-14 08:34 - 00000476 _____ C:\Users\Schmitz\Documents\defogger_disable.log
2013-07-14 07:58 - 2013-07-14 07:58 - 00001120 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\Users\Schmitz\AppData\Roaming\Malwarebytes
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-13 21:39 - 2013-07-13 21:39 - 00000000 _____ C:\Users\Schmitz\defogger_reenable
2013-07-13 21:39 - 2012-07-14 11:32 - 00000000 ____D C:\Users\Schmitz
2013-07-13 21:24 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2013-07-10 16:04 - 2013-03-14 07:52 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-10 16:04 - 2013-03-14 07:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-10 16:04 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-10 16:04 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-10 16:04 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-10 14:56 - 2012-07-14 13:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 14:55 - 2011-04-12 09:43 - 00653982 _____ C:\windows\system32\perfh007.dat
2013-07-10 14:55 - 2011-04-12 09:43 - 00129854 _____ C:\windows\system32\perfc007.dat
2013-07-10 14:55 - 2009-07-14 07:13 - 01519118 _____ C:\windows\system32\PerfStringBackup.INI
2013-07-10 14:53 - 2012-03-19 11:06 - 78185248 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-07-05 15:55 - 2012-07-14 13:07 - 00000000 ____D C:\Users\Schmitz\AppData\Local\Microsoft Help
2013-07-01 18:41 - 2012-07-17 18:09 - 00000000 ___RD C:\Users\Schmitz\Desktop\Rechnungen
2013-07-01 18:07 - 2013-05-06 14:14 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-06-27 21:26 - 2013-05-23 06:42 - 00010356 _____ C:\windows\IE10_main.log
2013-06-19 20:01 - 2012-07-17 13:20 - 00000000 ____D C:\Users\Schmitz\AppData\Local\Paint.NET
2013-06-17 16:34 - 2013-06-17 16:34 - 00000000 ___HD C:\windows\AxInstSV

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2012-07-14 12:03

==================== End Of Log ============================
--- --- ---

--- --- ---

schrauber 18.07.2013 07:12
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
Startup: C:\ProgramData\Start Menu\Programs\Startup\IML.lnk
ShortcutTarget: IML.lnk -> C:\Windows\System32\iml.vbs ()
Startup: C:\ProgramData\Start Menu\Programs\Startup\IML64.lnk
ShortcutTarget: IML64.lnk -> C:\Windows\SysWOW64\iml.vbs ()

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Noch Probleme? :)

Billpc 18.07.2013 15:29
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-07-2013
Ran by Schmitz at 2013-07-18 16:27:03 Run:3
Running from C:\Users\Schmitz\Downloads
Boot Mode: Normal
==============================================

C:\ProgramData\Start Menu\Programs\Startup\IML.lnk => Moved successfully.
ShortcutTarget: IML.lnk -> C:\Windows\System32\iml.vbs () not found.
C:\ProgramData\Start Menu\Programs\Startup\IML64.lnk => Moved successfully.
ShortcutTarget: IML64.lnk -> C:\Windows\SysWOW64\iml.vbs () not found.

==== End of Fixlog ====
[CODE
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-07-2013
Ran by Schmitz (administrator) on 18-07-2013 16:27:47
Running from C:\Users\Schmitz\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWlan.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\windows\System32\WScript.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Java\jre1.6.0_02\bin\jusched.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcmon.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\qimlsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Comvigo, Inc.) C:\Windows\SysWOW64\dsrviml.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12445288 2012-01-16] (Realtek Semiconductor)
HKLM\...\Run: [MSC] - "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [1281512 2013-01-27] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [35736 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [843712 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IMSS] - "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [133400 2011-12-16] (Intel Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-01-05] (Intel Corporation)
HKLM-x32\...\Run: [LexwareInfoService] - C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe /autostart [339240 2008-11-03] (Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [SSBkgdUpdate] - "C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - "C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe" [29984 2008-07-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [IndexSearch] - "C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe" [46368 2008-07-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PPort11reminder] - "C:\Program Files (x86)\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini" [328992 2007-08-31] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-07-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Java\jre1.6.0_02\bin\jusched.exe" [132496 2007-07-12] (Sun Microsystems, Inc.)
Startup: C:\Users\Schmitz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk
ShortcutTarget: IML.lnk -> C:\Windows\System32\iml.vbs ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ig
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
HKCU SearchScopes: DefaultScope {1EEB3645-59ED-4974-8ACC-BC090BCB053D} URL =
SearchScopes: HKCU - {1EEB3645-59ED-4974-8ACC-BC090BCB053D} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Schmitz\AppData\Roaming\Mozilla\Firefox\Profiles\k7im7vp2.default
FF Homepage: www.hw-store.net
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.11.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Schmitz\Music\Amazon MP3\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

Chrome:
=======
CHR DefaultSearchURL: (Ask) - hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10261&locale=de_DE&apn_uid=8126aa6c-89a3-480b-a8ce-982f41bd29f2&apn_ptnrs=%5EAGS&apn_sauid=07B65A62-6BF7-4089-A258-913C76FA46C2&apn_dtid=%5EYYYYYY%5EYY%5EDE&q={searchTerms}
CHR DefaultSuggestURL: (Ask) - hxxp://ss.websearch.ask.com/query?qsrc=2922&li=ff&sstype=prefix&q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Users\Schmitz\Music\Amazon MP3\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.110.21) - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
R2 Realtek11nCU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)
R2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)

==================== Drivers (Whitelisted) ====================

S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2011-09-06] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [35840 2011-09-06] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93184 2011-09-16] (LG Electronics Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-29] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-29] (Avira Operations GmbH & Co. KG)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2011-12-19] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] ()
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [791144 2011-06-10] (Realtek Semiconductor Corporation                          )
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-18 16:12 - 2013-07-18 16:12 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{5FC92988-3E91-44F4-B658-4AF3F2078460}
2013-07-17 15:43 - 2013-07-17 15:43 - 00002130 _____ C:\Users\Public\Desktop\Bank.lnk
2013-07-17 15:43 - 2013-07-17 15:43 - 00000000 ____D C:\Users\Public\Documents\Lexware
2013-07-17 15:29 - 2013-07-17 15:29 - 00005265 _____ C:\windows\SysWOW64\jupdate-1.6.0_02-b06.log
2013-07-17 15:29 - 2007-07-12 02:22 - 00139264 _____ (Sun Microsystems, Inc.) C:\windows\SysWOW64\javaws.exe
2013-07-17 15:29 - 2007-07-12 02:22 - 00069632 _____ (Sun Microsystems, Inc.) C:\windows\SysWOW64\javacpl.cpl
2013-07-17 15:29 - 2007-07-12 01:22 - 00135168 _____ (Sun Microsystems, Inc.) C:\windows\SysWOW64\javaw.exe
2013-07-17 15:29 - 2007-07-12 01:22 - 00135168 _____ (Sun Microsystems, Inc.) C:\windows\SysWOW64\java.exe
2013-07-17 12:50 - 2013-07-17 12:50 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{93DC858D-5A90-4E26-9524-E462CCF5B95C}
2013-07-16 21:20 - 2013-07-16 21:20 - 00003105 _____ C:\Users\Schmitz\Documents\16.07.13.axp
2013-07-16 18:36 - 2013-07-16 18:36 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{69BF8AB9-4037-47C2-881A-F3F80C51755C}
2013-07-16 11:54 - 2013-07-16 11:54 - 00448512 _____ (OldTimer Tools) C:\Users\Schmitz\Desktop\TFC.exe
2013-07-16 06:36 - 2013-07-16 06:36 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{EA22CDB5-EE65-4C9A-B223-1C38AA0BA47A}
2013-07-15 19:45 - 2013-07-15 19:45 - 00891022 _____ C:\Users\Schmitz\Downloads\SecurityCheck.exe
2013-07-15 19:43 - 2013-07-15 19:43 - 00000810 _____ C:\Users\Schmitz\Downloads\found.txt
2013-07-15 17:11 - 2013-07-15 17:11 - 02347384 _____ (ESET) C:\Users\Schmitz\Downloads\esetsmartinstaller_enu.exe
2013-07-15 06:44 - 2013-07-15 06:44 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{2E418975-1066-4AE3-A33F-3B853CEB23B1}
2013-07-14 21:48 - 2013-07-14 21:48 - 00059009 _____ C:\Users\Schmitz\Desktop\JRT.txt
2013-07-14 21:45 - 2013-07-14 21:45 - 00000000 ____D C:\windows\ERUNT
2013-07-14 21:44 - 2013-07-14 21:44 - 00559441 _____ (Oleg N. Scherbakov) C:\Users\Schmitz\Downloads\JRT.exe
2013-07-14 21:39 - 2013-07-14 21:40 - 00008659 _____ C:\AdwCleaner[S1].txt
2013-07-14 21:39 - 2013-07-14 21:39 - 00662345 _____ C:\Users\Schmitz\Downloads\adwcleaner.exe
2013-07-14 21:34 - 2013-07-14 21:34 - 00031192 _____ C:\Users\Schmitz\Desktop\comb.txt
2013-07-14 21:33 - 2013-07-14 21:33 - 00031192 _____ C:\ComboFix.txt
2013-07-14 21:05 - 2013-07-14 21:05 - 05088557 ____R (Swearware) C:\Users\Schmitz\Desktop\ComboFix.exe
2013-07-14 15:56 - 2011-06-26 08:45 - 00256000 _____ C:\windows\PEV.exe
2013-07-14 15:56 - 2010-11-07 19:20 - 00208896 _____ C:\windows\MBR.exe
2013-07-14 15:56 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-07-14 15:56 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-07-14 15:56 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-07-14 15:56 - 2000-08-31 02:00 - 00098816 _____ C:\windows\sed.exe
2013-07-14 15:56 - 2000-08-31 02:00 - 00080412 _____ C:\windows\grep.exe
2013-07-14 15:56 - 2000-08-31 02:00 - 00068096 _____ C:\windows\zip.exe
2013-07-14 15:55 - 2013-07-14 21:33 - 00000000 ____D C:\Qoobox
2013-07-14 15:55 - 2013-07-14 21:26 - 00000000 ____D C:\windows\erdnt
2013-07-14 09:10 - 2013-07-14 09:11 - 00021316 _____ C:\Users\Schmitz\Downloads\Addition.txt
2013-07-14 09:10 - 2013-07-14 09:10 - 00000000 ____D C:\FRST
2013-07-14 09:09 - 2013-07-14 09:09 - 01777839 _____ (Farbar) C:\Users\Schmitz\Downloads\FRST64 (1).exe
2013-07-14 09:07 - 2013-07-14 09:07 - 01777839 _____ (Farbar) C:\Users\Schmitz\Downloads\FRST64.exe
2013-07-14 08:45 - 2013-07-14 08:45 - 00002089 _____ C:\Users\Schmitz\Documents\Gmer.txt
2013-07-14 08:44 - 2013-07-14 08:44 - 00377856 _____ C:\Users\Schmitz\Downloads\gmer_2.1.19163.exe
2013-07-14 08:42 - 2013-07-14 08:42 - 00000005 _____ C:\Users\Schmitz\AppData\Roaming\WBPU-TTL.DAT
2013-07-14 08:40 - 2013-07-14 08:40 - 00117858 _____ C:\Users\Schmitz\Downloads\OTL.Txt
2013-07-14 08:40 - 2013-07-14 08:40 - 00057726 _____ C:\Users\Schmitz\Downloads\Extras.Txt
2013-07-14 08:35 - 2013-07-14 08:35 - 00602112 _____ (OldTimer Tools) C:\Users\Schmitz\Downloads\OTL.exe
2013-07-14 08:34 - 2013-07-14 08:34 - 00000476 _____ C:\Users\Schmitz\Documents\defogger_disable.log
2013-07-14 07:58 - 2013-07-14 07:58 - 00001120 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\Users\Schmitz\AppData\Roaming\Malwarebytes
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-14 07:58 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-07-13 21:39 - 2013-07-13 21:39 - 00000000 _____ C:\Users\Schmitz\defogger_reenable
2013-07-10 14:53 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-07-10 14:53 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-07-10 14:53 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-07-10 14:53 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-07-10 14:53 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-07-10 14:53 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-07-10 14:53 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-07-10 14:53 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-07-10 14:53 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-10 14:53 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-07-10 14:53 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-07-10 14:53 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-07-10 13:12 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2013-07-10 13:12 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2013-07-10 13:12 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-07-10 13:12 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-07-10 13:12 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2013-07-10 13:12 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2013-07-10 13:09 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2013-07-18 16:27 - 2012-07-14 12:44 - 00000000 ___RD C:\Users\Schmitz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-18 16:18 - 2012-07-17 18:26 - 00003946 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{1169BC01-178A-450F-9711-5C5BE46FECA2}
2013-07-18 16:18 - 2009-07-14 06:45 - 00016752 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-18 16:18 - 2009-07-14 06:45 - 00016752 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-18 16:15 - 2012-10-17 14:06 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-07-18 16:12 - 2013-07-18 16:12 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{5FC92988-3E91-44F4-B658-4AF3F2078460}
2013-07-18 16:10 - 2012-07-18 17:24 - 00001108 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-18 16:10 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-07-18 16:10 - 2009-07-14 06:51 - 00093907 _____ C:\windows\setupact.log
2013-07-18 06:32 - 2012-05-14 19:56 - 01176040 _____ C:\windows\WindowsUpdate.log
2013-07-18 06:15 - 2012-07-19 17:10 - 00000000 ___RD C:\Users\Schmitz\Desktop\Aktenkoffer
2013-07-18 06:11 - 2009-07-14 06:45 - 00421480 _____ C:\windows\system32\FNTCACHE.DAT
2013-07-17 20:07 - 2012-07-18 17:24 - 00001112 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-17 15:45 - 2012-07-18 17:47 - 00000000 ____D C:\Users\Schmitz\AppData\Local\Lexware
2013-07-17 15:45 - 2012-07-14 11:32 - 00113992 _____ C:\Users\Schmitz\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-17 15:43 - 2013-07-17 15:43 - 00002130 _____ C:\Users\Public\Desktop\Bank.lnk
2013-07-17 15:43 - 2013-07-17 15:43 - 00000000 ____D C:\Users\Public\Documents\Lexware
2013-07-17 15:42 - 2012-07-18 17:58 - 00000000 ____D C:\Program Files (x86)\Lexware
2013-07-17 15:39 - 2012-07-19 17:20 - 00001071 _____ C:\windows\Brpfx04a.ini
2013-07-17 15:29 - 2013-07-17 15:29 - 00005265 _____ C:\windows\SysWOW64\jupdate-1.6.0_02-b06.log
2013-07-17 15:29 - 2012-07-17 13:21 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-17 12:50 - 2013-07-17 12:50 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{93DC858D-5A90-4E26-9524-E462CCF5B95C}
2013-07-16 21:20 - 2013-07-16 21:20 - 00003105 _____ C:\Users\Schmitz\Documents\16.07.13.axp
2013-07-16 20:43 - 2012-07-17 13:20 - 00000000 ____D C:\Users\Schmitz\AppData\Roaming\vlc
2013-07-16 18:36 - 2013-07-16 18:36 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{69BF8AB9-4037-47C2-881A-F3F80C51755C}
2013-07-16 15:20 - 2010-11-21 05:47 - 00889548 _____ C:\windows\PFRO.log
2013-07-16 11:54 - 2013-07-16 11:54 - 00448512 _____ (OldTimer Tools) C:\Users\Schmitz\Desktop\TFC.exe
2013-07-16 11:49 - 2012-07-18 17:24 - 00004108 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-16 11:49 - 2012-07-18 17:24 - 00003856 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-16 06:36 - 2013-07-16 06:36 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{EA22CDB5-EE65-4C9A-B223-1C38AA0BA47A}
2013-07-15 19:45 - 2013-07-15 19:45 - 00891022 _____ C:\Users\Schmitz\Downloads\SecurityCheck.exe
2013-07-15 19:43 - 2013-07-15 19:43 - 00000810 _____ C:\Users\Schmitz\Downloads\found.txt
2013-07-15 17:11 - 2013-07-15 17:11 - 02347384 _____ (ESET) C:\Users\Schmitz\Downloads\esetsmartinstaller_enu.exe
2013-07-15 06:44 - 2013-07-15 06:44 - 00000000 ____D C:\Users\Schmitz\AppData\Local\{2E418975-1066-4AE3-A33F-3B853CEB23B1}
2013-07-14 21:48 - 2013-07-14 21:48 - 00059009 _____ C:\Users\Schmitz\Desktop\JRT.txt
2013-07-14 21:45 - 2013-07-14 21:45 - 00000000 ____D C:\windows\ERUNT
2013-07-14 21:44 - 2013-07-14 21:44 - 00559441 _____ (Oleg N. Scherbakov) C:\Users\Schmitz\Downloads\JRT.exe
2013-07-14 21:40 - 2013-07-14 21:39 - 00008659 _____ C:\AdwCleaner[S1].txt
2013-07-14 21:39 - 2013-07-14 21:39 - 00662345 _____ C:\Users\Schmitz\Downloads\adwcleaner.exe
2013-07-14 21:34 - 2013-07-14 21:34 - 00031192 _____ C:\Users\Schmitz\Desktop\comb.txt
2013-07-14 21:33 - 2013-07-14 21:33 - 00031192 _____ C:\ComboFix.txt
2013-07-14 21:33 - 2013-07-14 15:55 - 00000000 ____D C:\Qoobox
2013-07-14 21:29 - 2009-07-14 04:34 - 00000215 _____ C:\windows\system.ini
2013-07-14 21:26 - 2013-07-14 15:55 - 00000000 ____D C:\windows\erdnt
2013-07-14 21:05 - 2013-07-14 21:05 - 05088557 ____R (Swearware) C:\Users\Schmitz\Desktop\ComboFix.exe
2013-07-14 09:11 - 2013-07-14 09:10 - 00021316 _____ C:\Users\Schmitz\Downloads\Addition.txt
2013-07-14 09:10 - 2013-07-14 09:10 - 00000000 ____D C:\FRST
2013-07-14 09:09 - 2013-07-14 09:09 - 01777839 _____ (Farbar) C:\Users\Schmitz\Downloads\FRST64 (1).exe
2013-07-14 09:07 - 2013-07-14 09:07 - 01777839 _____ (Farbar) C:\Users\Schmitz\Downloads\FRST64.exe
2013-07-14 08:45 - 2013-07-14 08:45 - 00002089 _____ C:\Users\Schmitz\Documents\Gmer.txt
2013-07-14 08:44 - 2013-07-14 08:44 - 00377856 _____ C:\Users\Schmitz\Downloads\gmer_2.1.19163.exe
2013-07-14 08:42 - 2013-07-14 08:42 - 00000005 _____ C:\Users\Schmitz\AppData\Roaming\WBPU-TTL.DAT
2013-07-14 08:40 - 2013-07-14 08:40 - 00117858 _____ C:\Users\Schmitz\Downloads\OTL.Txt
2013-07-14 08:40 - 2013-07-14 08:40 - 00057726 _____ C:\Users\Schmitz\Downloads\Extras.Txt
2013-07-14 08:35 - 2013-07-14 08:35 - 00602112 _____ (OldTimer Tools) C:\Users\Schmitz\Downloads\OTL.exe
2013-07-14 08:34 - 2013-07-14 08:34 - 00000476 _____ C:\Users\Schmitz\Documents\defogger_disable.log
2013-07-14 07:58 - 2013-07-14 07:58 - 00001120 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\Users\Schmitz\AppData\Roaming\Malwarebytes
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-14 07:58 - 2013-07-14 07:58 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-13 21:39 - 2013-07-13 21:39 - 00000000 _____ C:\Users\Schmitz\defogger_reenable
2013-07-13 21:39 - 2012-07-14 11:32 - 00000000 ____D C:\Users\Schmitz
2013-07-13 21:24 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2013-07-10 16:04 - 2013-03-14 07:52 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-10 16:04 - 2013-03-14 07:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-10 16:04 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-10 16:04 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-10 16:04 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-10 14:56 - 2012-07-14 13:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 14:55 - 2011-04-12 09:43 - 00653982 _____ C:\windows\system32\perfh007.dat
2013-07-10 14:55 - 2011-04-12 09:43 - 00129854 _____ C:\windows\system32\perfc007.dat
2013-07-10 14:55 - 2009-07-14 07:13 - 01519118 _____ C:\windows\system32\PerfStringBackup.INI
2013-07-10 14:53 - 2012-03-19 11:06 - 78185248 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-07-05 15:55 - 2012-07-14 13:07 - 00000000 ____D C:\Users\Schmitz\AppData\Local\Microsoft Help
2013-07-01 18:41 - 2012-07-17 18:09 - 00000000 ___RD C:\Users\Schmitz\Desktop\Rechnungen
2013-07-01 18:07 - 2013-05-06 14:14 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-06-27 21:26 - 2013-05-23 06:42 - 00010356 _____ C:\windows\IE10_main.log
2013-06-19 20:01 - 2012-07-17 13:20 - 00000000 ____D C:\Users\Schmitz\AppData\Local\Paint.NET

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2012-07-14 12:03

==================== End Of Log ============================
--- --- ---

--- --- ---
][/CODE]

schrauber 18.07.2013 16:36
Fertig :)

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Billpc 18.07.2013 20:00
Super!

Vielen vielen Dank, gut daß es solch ein Forum für Laien wie mich gibt. Sollte ich nochmal Probleme haben komme ich gerne wieder

Werde Euch und Dich im Besonderen weiter empfehlen

Alles Gute! Gruß der Bill

schrauber 19.07.2013 09:21
Gern geschehen :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 23:30 Uhr.
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131