Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Firefox funktioniert nicht mehr richtig (https://www.trojaner-board.de/152392-firefox-funktioniert-mehr-richtig.html)

opinion 12.04.2014 10:56
Firefox funktioniert nicht mehr richtig
 
Hallo Spezialisten

Beim benutzen des Firefox habe ich ein Problen.
Wenn ich meine Mails gecheckt habe und zur Startseite zurück will (Button Web Startseite zurück) funktioniert es nicht mehr.
Es wird eine komische Adresse eingeblendet und ich vermute, dass ich einen Schädling eingefangen haben.
Folgendes kann ich sehen: adclient.uimserv.net/c/.....

Kennt oder weis jemand von euch, was da passiert ist? Vorallem, kennt jemand die Lösung zur Eliminierung des Schädlings.

Gruss opinion

cosinus 12.04.2014 14:10
Zitat:
Folgendes kann ich sehen: adclient.uimserv.net/c/.....
Bist bestimmt bei GMX oder web.de
Das ist ne Werbedomain vom Betreiber United Internet

Zitat:
Kennt oder weis jemand von euch, was da passiert ist? Vorallem, kennt jemand die Lösung zur Eliminierung des Schädlings.
Was hat das mit Schädling zu tun? Du bekommst Werbung von deinem Anbieter aufs Auge gedrückt.

Ruf deine Mails nicht über Webmail ab, sondern richte dir einen Mailclient wie Mozilla Thunderbird ein, mit denen du deine Mails abrufen und versenden kannst

opinion 13.04.2014 11:36
Zitat:
Zitat von cosinus (Beitrag 1283528)
Bist bestimmt bei GMX oder web.de
Das ist ne Werbedomain vom Betreiber United Internet

Richtig: Ich bin bei Gmx und Web.

Was hat das mit Schädling zu tun? Du bekommst Werbung von deinem Anbieter aufs Auge gedrückt.

Das ich Werbung bekomme, das ist mir bekannt.
Trotzdem kann ich es mir nicht erklären, warum ich nicht auf die Startseite zurückkomme, wie es früher ohne Probleme möglich war. Oder auch, dass ich den neuen Firefox 28 nicht herunterladen kann. Es funktioniert immer bis zu 97%, dann geht das Hrunterladen nicht mehr weiter. Übrigens, es geht auch nicht, wenn ich den Internet Explorer nehme.
Darum bin ich darauf gekommen, dass es evtl. ein Schädling sein kann, der sich bei meinem Computer breitmacht.

Ruf deine Mails nicht über Webmail ab, sondern richte dir einen Mailclient wie Mozilla Thunderbird ein, mit denen du deine Mails abrufen und versenden kannst
Thunderbird kenne ich nicht. Werde mich gerne mal schlau machen.

cosinus 13.04.2014 12:37
Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

opinion 13.04.2014 13:59
Hallo Cosinus

Vielen Dank für Deine Bemühungen. Hoffentlich ist es das, was Du von mir erwartet hast.
Gruss marcel


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-04-2014 01
Ran by mg (administrator) on MG-PC on 13-04-2014 14:55:07
Running from D:\Downloads
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\AVAST Software\Avast\AvastSvc.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files\Jotzey\updateJotzey.exe
(WiseCleaner.com) C:\Wise\Wise Care 365\WiseTray.exe
(AVAST Software) C:\AVAST Software\Avast\AvastUI.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Apple Inc.) C:\Apple\iTunes\iTunesHelper.exe
(APN LLC.) C:\Users\mg\AppData\Local\VNT\vntldr.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\IncMail.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
() C:\Program Files\Jotzey\bin\utilJotzey.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\ImApp.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
() C:\Program Files\Jotzey\bin\FilterApp_C.exe
() C:\Program Files\Jotzey\bin\Jotzey.BrowserAdapter.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(Microsoft Corporation) C:\Microsoft Office 2007\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\MSACCESS.EXE
(Mozilla Corporation) C:\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] - C:\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-10] (AVAST Software)
HKLM\...\Run: [ApnTBMon] - C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1801168 2014-03-19] (APN)
HKLM\...\Run: [VNT] - C:\Program Files\VNT\vntldr.exe [196048 2014-03-19] (APN LLC.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Apple\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\Update\realsched.exe [295512 2014-03-21] (RealNetworks, Inc.)
HKU\S-1-5-21-2282301582-224385206-936070459-1000\...\Run: [IncrediMail] - C:\Program Files\IncrediMail\bin\IncMail.exe [440744 2013-05-07] (IncrediMail, Ltd.)
HKU\S-1-5-21-2282301582-224385206-936070459-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2282301582-224385206-936070459-1000\...\Policies\Explorer: [DisallowRun] 1
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
Startup: C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
HKLM\...\AppCertDlls: [x64] -> c:\program files\settings manager\systemk\x64\sysapcrt.dll

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bluewin.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ch.msn.com/default.aspx?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x24EF38FB1F4BCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-ch
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390658337&from=smt&uid=WDCXWD20EARS-00MVWB0_WD-WMAZA467898578985&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390658337&from=smt&uid=WDCXWD20EARS-00MVWB0_WD-WMAZA467898578985&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1390658337&from=smt&uid=WDCXWD20EARS-00MVWB0_WD-WMAZA467898578985
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390658337&from=smt&uid=WDCXWD20EARS-00MVWB0_WD-WMAZA467898578985&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390658337&from=smt&uid=WDCXWD20EARS-00MVWB0_WD-WMAZA467898578985&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=146&itype=n&ver=12302&tm=314&src=ds&p={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=146&itype=n&ver=12302&tm=314&src=ds&p={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 62.2.24.158 62.2.17.60 62.2.24.162 62.2.17.61

FireFox:
========
FF ProfilePath: C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default
FF user.js: detected! => C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\user.js
FF DefaultSearchEngine: default-search.net
FF SearchEngineOrder.1: default-search.net
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.bluewin.ch/
FF Keyword.URL: hxxp://www.default-search.net/search?sid=476&aid=146&itype=n&ver=12302&tm=314&src=ds&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Apple\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\mg\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF SearchPlugin: C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\searchplugins\default-search.xml
FF Extension: DownloadHelper - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-12]
FF Extension: Youtube Downloader - Media Downloader - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\paulsaintuzb@gmail.com.xpi [2014-04-12]
FF Extension: www.Tran - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\trident@trident.com.ua.xpi [2014-04-12]
FF Extension: Adblock Plus - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-12]
FF Extension: DownThemAll! - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-04-12]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\AVAST Software\Avast\WebRep\FF [2013-05-07]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-03-21]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF StartMenuInternet: FIREFOX.EXE - C:\Mozilla Firefox\firefox.exe

Chrome:
=======
CHR HomePage: hxxp://www.bluewin.ch/
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.104) - C:\Users\mg\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
CHR Plugin: (VLC Web Plugin) - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (Google Docs) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-11]
CHR Extension: (Google Drive) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-11]
CHR Extension: (YouTube) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-11]
CHR Extension: (Google-Suche) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-11]
CHR Extension: (RealDownloader) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-08-11]
CHR Extension: (Google Wallet) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-03]
CHR Extension: (Google Mail) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-11]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-10]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\mg\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-07-26]
CHR HKLM\...\Chrome\Extension: [opjebaomffhbebmkanbennmagkdjkclo] - C:\ProgramData\AskPartnerNetwork\Toolbar\OVO2V7C\CRX\ToolbarCR.crx [2014-04-01]

========================== Services (Whitelisted) =================

R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-03-19] (APN LLC.)
R2 avast! Antivirus; C:\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-10] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1520824 2014-03-30] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2011-12-15] (Logitech Inc.)
R2 Update Jotzey; C:\Program Files\Jotzey\updateJotzey.exe [350488 2014-04-12] ()
R2 Util Jotzey; C:\Program Files\Jotzey\bin\utilJotzey.exe [350488 2014-04-12] ()
S2 WiseBootAssistant; C:\Wise\Wise Care 365\BootTime.exe [580232 2013-05-13] (WiseCleaner.com)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-04-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-04-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-04-10] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [776976 2014-04-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411552 2014-04-10] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [67264 2014-04-10] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180760 2014-04-10] ()
R3 debutfilter; C:\Windows\System32\DRIVERS\debutfilterx86.sys [43344 2014-03-23] ()
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-14] (Ralink Technology Corp.)
R1 wStLib; C:\Windows\System32\drivers\wStLib.sys [52920 2014-03-22] (StdLib)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-13 14:31 - 2014-04-13 14:31 - 00000000 ____D () C:\Device
2014-04-12 14:52 - 2014-04-12 14:52 - 00002811 _____ () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wie Du ein Wordpress update richtig durchführst - YouTube.lnk
2014-04-12 14:38 - 2014-04-12 14:38 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-12 12:05 - 2014-04-13 14:55 - 00000000 ____D () C:\FRST
2014-04-11 18:21 - 2014-04-11 18:21 - 00000725 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-11 18:21 - 2014-04-11 18:21 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-11 16:31 - 2014-04-11 17:12 - 06000640 _____ () C:\Program Files\GUT7A10.tmp
2014-04-11 16:31 - 2014-04-11 17:12 - 00000000 ____D () C:\Program Files\GUM79FF.tmp
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieUserList
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieSiteList
2014-04-11 16:10 - 2014-04-12 12:27 - 00007152 _____ () C:\Windows\PFRO.log
2014-04-11 16:06 - 2014-04-13 12:28 - 00000784 _____ () C:\Windows\setupact.log
2014-04-11 16:06 - 2014-04-11 16:06 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-11 14:01 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-04-11 14:00 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-04-11 13:40 - 2014-04-11 13:40 - 00000020 _____ () C:\Windows\”ôZ
2014-04-11 13:22 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-04-11 13:22 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-04-11 13:22 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-04-11 13:22 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-04-11 13:01 - 2014-04-12 09:49 - 00000000 ____D () C:\Users\mg\AppData\Local\Windows Live
2014-04-11 13:00 - 2014-04-11 13:00 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-04-11 10:19 - 2014-04-13 12:29 - 00170829 _____ () C:\Windows\WindowsUpdate.log
2014-04-10 15:58 - 2014-04-10 15:58 - 00067264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-10 15:58 - 2014-04-10 15:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-09 09:16 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 09:16 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 09:16 - 2014-03-06 10:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-09 09:16 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-09 09:16 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-09 09:16 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-09 09:16 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-09 09:16 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-09 09:16 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-09 09:16 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-09 09:16 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-09 09:16 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-09 09:16 - 2014-03-06 09:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-09 09:16 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-09 09:16 - 2014-03-06 09:28 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-09 09:16 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-09 09:16 - 2014-03-06 09:18 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-09 09:16 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-09 09:16 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-09 09:16 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-09 09:16 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-09 09:16 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-09 09:16 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-09 09:16 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-09 09:16 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-09 09:16 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-09 09:03 - 2014-03-04 11:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 09:03 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 09:03 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 09:03 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 09:03 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 09:03 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-03-27 14:06 - 2014-03-27 14:06 - 00000000 ____D () C:\ProgramData\SmartTools
2014-03-23 16:51 - 2014-03-23 16:51 - 00000000 ____D () C:\Users\mg\AppData\Roaming\TechSmith
2014-03-23 16:03 - 2014-03-23 16:24 - 00000000 ____D () C:\ProgramData\NCH Software
2014-03-23 16:02 - 2014-03-23 16:32 - 00000000 ____D () C:\Users\mg\AppData\Roaming\NCH Software
2014-03-23 16:02 - 2014-03-23 16:32 - 00000000 ____D () C:\Program Files\NCH Software
2014-03-23 16:02 - 2014-03-23 16:02 - 00043344 _____ () C:\Windows\system32\Drivers\debutfilterx86.sys
2014-03-23 15:45 - 2014-03-23 15:45 - 00000096 _____ () C:\Users\mg\AppData\Roaming\version2.xml
2014-03-22 12:47 - 2014-03-22 12:47 - 00052920 _____ (StdLib) C:\Windows\system32\Drivers\wStLib.sys
2014-03-21 16:29 - 2014-03-21 16:29 - 00001241 _____ () C:\Users\Public\Desktop\RealPlayer.lnk
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\ProgramData\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\Common Files\xing shared
2014-03-21 16:28 - 2014-03-30 17:12 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Real
2014-03-21 16:28 - 2014-03-21 16:28 - 00272896 _____ (Progressive Networks) C:\Windows\system32\pncrt.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\system32\rmoc3260.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5016.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5032.dll

==================== One Month Modified Files and Folders =======

2014-04-13 14:55 - 2014-04-12 12:05 - 00000000 ____D () C:\FRST
2014-04-13 14:31 - 2014-04-13 14:31 - 00000000 ____D () C:\Device
2014-04-13 14:27 - 2013-05-07 15:34 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-13 14:19 - 2013-08-11 14:37 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-13 13:37 - 2013-10-17 10:02 - 00000000 ____D () C:\Users\mg\AppData\Roaming\vlc
2014-04-13 13:00 - 2013-05-19 13:42 - 00000316 _____ () C:\Windows\Tasks\Wise Turbo Checker.job
2014-04-13 12:29 - 2014-04-11 10:19 - 00170829 _____ () C:\Windows\WindowsUpdate.log
2014-04-13 12:28 - 2014-04-11 16:06 - 00000784 _____ () C:\Windows\setupact.log
2014-04-13 10:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-04-13 09:51 - 2009-07-14 06:34 - 00015360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-13 09:51 - 2009-07-14 06:34 - 00015360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-13 09:44 - 2013-08-11 14:37 - 00001086 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-13 09:44 - 2013-05-19 13:42 - 00000336 _____ () C:\Windows\Tasks\Wise Care 365.job
2014-04-13 09:44 - 2013-05-19 13:41 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Wise Care 365
2014-04-13 09:44 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-13 09:44 - 2009-07-14 04:04 - 00000530 _____ () C:\Windows\win.ini
2014-04-12 14:52 - 2014-04-12 14:52 - 00002811 _____ () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wie Du ein Wordpress update richtig durchführst - YouTube.lnk
2014-04-12 14:38 - 2014-04-12 14:38 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-12 13:29 - 2013-08-11 14:38 - 00002200 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-12 12:33 - 2014-02-15 13:44 - 00000000 ____D () C:\Mozilla Firefox
2014-04-12 12:27 - 2014-04-11 16:10 - 00007152 _____ () C:\Windows\PFRO.log
2014-04-12 11:18 - 2014-01-13 13:01 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-04-12 09:49 - 2014-04-11 13:01 - 00000000 ____D () C:\Users\mg\AppData\Local\Windows Live
2014-04-12 09:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-04-11 18:36 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-04-11 18:21 - 2014-04-11 18:21 - 00000725 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-11 18:21 - 2014-04-11 18:21 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-11 18:06 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-11 17:12 - 2014-04-11 16:31 - 06000640 _____ () C:\Program Files\GUT7A10.tmp
2014-04-11 17:12 - 2014-04-11 16:31 - 00000000 ____D () C:\Program Files\GUM79FF.tmp
2014-04-11 16:24 - 2013-05-07 15:14 - 00000000 ____D () C:\Users\mg\AppData\Local\Google
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieUserList
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieSiteList
2014-04-11 16:06 - 2014-04-11 16:06 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-11 16:04 - 2009-07-14 04:03 - 63176704 _____ () C:\Windows\system32\config\software.bak
2014-04-11 16:04 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\default.bak
2014-04-11 16:04 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\security.bak
2014-04-11 16:04 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\sam.bak
2014-04-11 13:40 - 2014-04-11 13:40 - 00000020 _____ () C:\Windows\”ôZ
2014-04-11 13:00 - 2014-04-11 13:00 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-04-11 11:06 - 2013-05-07 19:19 - 00106925 _____ () C:\Users\mg\Documents\Readiris.DUS
2014-04-11 01:09 - 2013-10-20 15:53 - 00000000 ____D () C:\Windows\Minidump
2014-04-10 23:26 - 2013-05-07 14:39 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-10 15:58 - 2014-04-10 15:58 - 00067264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-10 15:58 - 2014-04-10 15:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-10 15:58 - 2013-05-07 17:45 - 00776976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-10 15:58 - 2013-05-07 17:45 - 00411552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-04-10 15:58 - 2013-05-07 17:45 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-10 15:58 - 2013-05-07 17:45 - 00001739 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-10 15:58 - 2013-05-07 17:44 - 00180760 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-10 15:58 - 2013-05-07 17:44 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-10 15:58 - 2013-05-07 17:44 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-10 15:58 - 2013-05-07 15:44 - 00271264 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-10 10:52 - 2014-02-28 01:10 - 00000000 ____D () C:\Users\mg\AppData\Roaming\ActivePresenter
2014-04-10 10:08 - 2013-05-07 15:34 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-04-10 10:08 - 2013-05-07 15:34 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-04-09 16:36 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-04-09 09:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-04-09 09:07 - 2013-07-19 11:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 09:07 - 2013-05-07 18:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-09 09:05 - 2013-05-07 15:07 - 88028728 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-02 13:12 - 2013-11-13 15:28 - 00000000 ____D () C:\Users\mg\AppData\Local\VNT
2014-04-02 13:12 - 2013-11-13 15:28 - 00000000 ____D () C:\Program Files\VNT
2014-03-30 17:12 - 2014-03-21 16:28 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Real
2014-03-28 20:43 - 2013-05-22 16:02 - 00000408 _____ () C:\Users\mg\AppData\Roaming\CamShapes.ini
2014-03-28 20:43 - 2013-05-22 16:02 - 00000408 _____ () C:\Users\mg\AppData\Roaming\CamLayout.ini
2014-03-28 20:43 - 2013-05-22 16:02 - 00000115 _____ () C:\Users\mg\AppData\Roaming\Camdata.ini
2014-03-28 20:42 - 2013-05-22 16:02 - 00004534 _____ () C:\Users\mg\AppData\Roaming\CamStudio.cfg
2014-03-28 19:03 - 2013-10-17 10:02 - 00000672 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-03-27 14:06 - 2014-03-27 14:06 - 00000000 ____D () C:\ProgramData\SmartTools
2014-03-27 14:06 - 2013-06-04 12:12 - 00000000 ____D () C:\SmartTools
2014-03-27 14:06 - 2013-05-15 15:49 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTools
2014-03-27 14:03 - 2013-05-15 15:44 - 00000000 ____D () C:\Users\mg\AppData\Roaming\SmartTools
2014-03-23 17:15 - 2013-05-07 14:37 - 00000000 ____D () C:\Users\mg
2014-03-23 16:52 - 2013-10-28 12:35 - 00000000 ____D () C:\Users\mg\AppData\Local\TechSmith
2014-03-23 16:51 - 2014-03-23 16:51 - 00000000 ____D () C:\Users\mg\AppData\Roaming\TechSmith
2014-03-23 16:32 - 2014-03-23 16:02 - 00000000 ____D () C:\Users\mg\AppData\Roaming\NCH Software
2014-03-23 16:32 - 2014-03-23 16:02 - 00000000 ____D () C:\Program Files\NCH Software
2014-03-23 16:24 - 2014-03-23 16:03 - 00000000 ____D () C:\ProgramData\NCH Software
2014-03-23 16:02 - 2014-03-23 16:02 - 00043344 _____ () C:\Windows\system32\Drivers\debutfilterx86.sys
2014-03-23 15:45 - 2014-03-23 15:45 - 00000096 _____ () C:\Users\mg\AppData\Roaming\version2.xml
2014-03-22 12:47 - 2014-03-22 12:47 - 00052920 _____ (StdLib) C:\Windows\system32\Drivers\wStLib.sys
2014-03-22 12:47 - 2014-03-06 11:31 - 00000000 ____D () C:\Program Files\Jotzey
2014-03-21 16:29 - 2014-03-21 16:29 - 00001241 _____ () C:\Users\Public\Desktop\RealPlayer.lnk
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\ProgramData\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\Common Files\xing shared
2014-03-21 16:29 - 2014-03-06 10:36 - 00000000 ____D () C:\Users\mg\AppData\Roaming\RealNetworks
2014-03-21 16:29 - 2014-02-26 09:58 - 00000000 ____D () C:\Users\mg\AppData\Roaming\OpenCandy
2014-03-21 16:29 - 2013-05-08 07:29 - 00000000 ____D () C:\Program Files\Real
2014-03-21 16:29 - 2013-05-08 07:28 - 00000000 ____D () C:\ProgramData\Real
2014-03-21 16:28 - 2014-03-21 16:28 - 00272896 _____ (Progressive Networks) C:\Windows\system32\pncrt.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\system32\rmoc3260.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5016.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5032.dll
2014-03-21 12:07 - 2013-06-03 07:59 - 00000000 ____D () C:\Users\mg\AppData\Roaming\TeamViewer

Files to move or delete:
====================
C:\Users\mg\AppData\Roaming\CamLayout.ini
C:\Users\mg\AppData\Roaming\CamShapes.ini


Some content of TEMP:
====================
C:\Users\mg\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkw9lxg.dll
C:\Users\mg\AppData\Local\Temp\Quarantine.exe
C:\Users\mg\AppData\Local\Temp\SettingsManagerSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-09 16:28

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-04-2014 01
Ran by mg at 2014-04-13 14:55:28
Running from D:\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

ActivePresenter (HKLM\...\{A2A40277-D807-4754-95A3-2F294C2C51D3}_is1) (Version: 3.9.0 - Atomi Systems, Inc.)
Adobe Flash Player 13 ActiveX (HKLM\...\{8F9B1C8E-F50E-4139-8701-45016021E102}) (Version: 13.0.0.182 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\{28ADCCAD-3C23-44A1-A93F-47AA176F7AD7}) (Version: 13.0.0.182 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Apple Application Support (HKLM\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo ClipFinder HD v.2.3.6 (HKLM\...\{0A11EA01-36EF-0070-F54C-E06E25BC1924}_is1) (Version: 2.3.6 - Ashampoo GmbH & Co. KG)
avast! Free Antivirus (HKLM\...\avast) (Version: 9.0.2016 - Avast Software)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite DCP-9010CN (HKLM\...\{A1BBEE16-49B1-42F2-95B8-54C8C6A1C0C3}) (Version: 2.0.1.0 - Brother Industries, Ltd.)
CameraHelperMsi (Version: 13.40.836.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4214 - CDBurnerXP)
ConvertHelper 2.2 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
Das Planetarium 1900 - 2100 (HKLM\...\Das Planetarium 1900 - 2100) (Version: 13 - www.astroexcel.de)
DMG Extractor (HKCU\...\DMG Extractor) (Version: 1.3.2.0 - Reincubate Ltd)
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FastStone Capture 5.3 (HKLM\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
FileZilla Client 3.7.3 (HKLM\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
Folderico 4.0 RC12 (HKLM\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org ))
FreeMind (HKLM\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 0.9.0 - )
Google Chrome (HKLM\...\Google Chrome) (Version: 34.0.1847.116 - Google Inc.)
Google Update Helper (Version: 1.3.23.9 - Google Inc.) Hidden
GoToMeeting 5.5.0.1133 (HKCU\...\GoToMeeting) (Version: 5.5.0.1133 - CitrixOnline)
IncrediMail (Version: 6.6.0.5259 - IncrediMail) Hidden
IncrediMail 2.5 (HKLM\...\IncrediMail) (Version: 6.6.0.5259 - IncrediMail Ltd.)
iTunes (HKLM\...\{2F21564D-DE05-4C6D-B21E-08B9D313FAB3}) (Version: 11.1.5.5 - Apple Inc.)
Jing (HKLM\...\{22800204-9E53-45C7-B6F3-5BB0F1C1A147}) (Version: 2.8.13007.1 - TechSmith Corporation)
Jotzey (HKLM\...\Jotzey) (Version: 2014.02.26.051729 - Jotzey)
LibreOffice 4.1.0.4 (HKLM\...\{F8478020-D98E-49FB-BA14-07A534AED99C}) (Version: 4.1.0.4 - The Document Foundation)
Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.40 - Logitech Inc.)
Logitech Z-series Software 1.04 (HKLM\...\{A157AC1C-DF44-481A-81E7-17AE00239818}) (Version: 1.04.153 - Logitech)
LWS Facebook (Version: 13.31.1038.0 - Logitech) Hidden
LWS Gallery (Version: 13.40.835.0 - Logitech) Hidden
LWS Help_main (Version: 13.40.845.0 - Logitech) Hidden
LWS Launcher (Version: 13.40.836.0 - Logitech) Hidden
LWS Motion Detection (Version: 13.40.844.0 - Logitech) Hidden
LWS Pictures And Video (Version: 13.40.844.0 - Logitech) Hidden
LWS Twitter (Version: 13.30.1346.0 - Logitech) Hidden
LWS Video Mask Maker (Version: 13.30.1379.0 - Logitech) Hidden
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
LWS Webcam Software (Version: 13.31.1038.0 - Logitech) Hidden
LWS WLM Plugin (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (Version: 13.31.1038.0 - Logitech) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4605.1003 - Microsoft Corporation)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Publisher 97 (HKLM\...\MSPUB4) (Version:  - )
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MozBackup 1.5.1 (HKLM\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 21.0 (x86 de) (HKLM\...\Mozilla Firefox 21.0 (x86 de)) (Version: 21.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 21.0 - Mozilla)
MPC-HC 1.7.0 (HKLM\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
ooVoo (HKLM\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 3.6.1008 - ooVoo LLC.)
Oovoo Toolbar (HKLM\...\{4F564F32-5637-4300-76A7-A758B70C0A06}) (Version: 12.10.6.5033 - APN, LLC)
Photo Notifier and Animation Creator (HKLM\...\Photo Notifier and Animation Creator) (Version: 1.0.0.1009 - IncrediMail Ltd.)
Photo Notifier and Animation Creator (Version: 1.0.0.1009 - Ihr Firmenname) Hidden
Python 3.3.3 (HKLM\...\{39b6eb84-331c-3657-ad2e-837537ddf04f}) (Version: 3.3.3150 - Python Software Foundation)
QuickTime 7 (HKLM\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Readiris Pro 11 (HKLM\...\{7C2B745A-E7F1-41F1-B9BB-3DDB8D52E4CE}) (Version: 11.00.5062 - I.R.I.S.)
RealDownloader (Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Revo Uninstaller 1.94 (HKLM\...\Revo Uninstaller) (Version: 1.94 - VS Revo Group)
Scribus 1.4.3 (HKLM\...\Scribus 1.4.3) (Version: 1.4.3 - The Scribus Team)
Shark007 Advanced Codecs (HKLM\...\{8C0CAA7A-3272-4991-A808-2C7559DE3409}) (Version: 4.1.5 - Shark007)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
SmartTools Publishing • Excel CellSpot (HKLM\...\SmartToolsCellSpotv3.00) (Version: v3.00 - SmartTools Publishing)
SmartTools Publishing • Excel Finanzplan 2013 (HKLM\...\SmartToolsFinanzplan 2013v4.00) (Version: v4.00 - SmartTools Publishing)
SmartTools Publishing • Excel Formel-Tools (HKLM\...\SmartToolsFormel-Toolsv5.00) (Version: v5.00 - SmartTools Publishing)
SmartTools Publishing • Excel Inhaltsverzeichnis (HKLM\...\SmartToolsInhaltsverzeichnisv5.00) (Version: v5.00 - SmartTools Publishing)
SmartTools Publishing • Excel Jahreskalender 2014 (HKLM\...\SmartToolsJahreskalender 2014v6.00) (Version: v6.00 - SmartTools Publishing)
SmartTools Publishing • Excel Markierungs-Assistent (HKLM\...\SmartToolsMarkierungs-Assistentv3.00) (Version: v3.00 - SmartTools Publishing)
SmartTools Publishing • Excel Monatskalender 2014 (HKLM\...\SmartToolsMonatskalender 2014v2.00) (Version: v2.00 - SmartTools Publishing)
SmartTools Publishing • Excel Titelleisten-Manager (HKLM\...\SmartToolsTitelleisten-Managerv2.50) (Version: v2.50 - SmartTools Publishing)
SmartTools Publishing • Outlook Bildervorschau (HKCU\...\SmartToolsOutlookBildervorschau) (Version: 3.00 - SmartTools Publishing)
StreamTransport version: 1.1.1.1 (HKLM\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version:  - )
TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.26038 - TeamViewer)
Textbausteinverwaltung Deluxe (HKLM\...\{FBFCE6BF-1879-484C-9406-B8961FEF1C7A}) (Version: 1.0.15.520 - JBSoftware)
Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: 8.01 - Ghisler Software GmbH)
Ulead PhotoImpact 12 (HKLM\...\{11AFE21E-B193-430D-B57A-DFF7815BB962}) (Version: 12.0 - Ulead System)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WinHTTrack Website Copier 3.47-14 (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.47.14 - HTTrack)
WinRAR 5.00 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
Wise Care 365 version 2.45 (HKLM\...\{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1) (Version: 2.45 - WiseCleaner.com, Inc.)
Wise Registry Cleaner 7.94 (HKLM\...\Wise Registry Cleaner_is1) (Version: 7.94 - WiseCleaner.com, Inc.)
XMind 2012 (v3.3.1) (HKLM\...\XMind_is1) (Version: 3.3.1.201212250029 - XMind Ltd.)
XnView 2.04 (HKLM\...\XnView_is1) (Version: 2.04 - Gougelet Pierre-e)

==================== Restore Points  =========================

04-04-2014 13:25:59 Windows Update
07-04-2014 06:11:06 Windows-Sicherung
09-04-2014 07:03:39 Windows Update
09-04-2014 07:15:40 Windows Update
10-04-2014 08:07:30 Installed Adobe Flash Player 13 Plugin.
10-04-2014 08:08:37 Installed Adobe Flash Player 13 ActiveX.
10-04-2014 13:55:16 avast! antivirus system restore point
11-04-2014 11:01:12 Windows Live Essentials
11-04-2014 11:10:30 Windows Live Essentials
11-04-2014 11:22:17 DirectX wurde installiert
11-04-2014 11:23:26 WLSetup
11-04-2014 11:54:54 Windows Live Essentials
11-04-2014 12:00:46 DirectX wurde installiert
11-04-2014 12:01:13 DirectX wurde installiert
11-04-2014 12:01:35 DirectX wurde installiert
11-04-2014 12:02:13 WLSetup
11-04-2014 12:14:23 Windows Live Essentials
11-04-2014 12:14:43 DirectX wurde installiert
11-04-2014 12:15:04 DirectX wurde installiert
11-04-2014 12:15:25 DirectX wurde installiert
11-04-2014 12:15:40 WLSetup
12-04-2014 07:47:31 Windows Live Essentials
12-04-2014 07:47:47 WLSetup

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {10D98D18-AF9C-4548-A454-0F70A2EB28B7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-11] (Google Inc.)
Task: {19D34D98-EE60-4839-8812-95D3AD7861F6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX86\OfficeC2RClient.exe [2014-03-30] (Microsoft Corporation)
Task: {401371ED-19CB-4BF1-A89C-BBB4AEA050E2} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {4D380163-48E2-4BF3-93AF-2A7E936DEBA8} - System32\Tasks\{7826D83B-DF63-4D00-9958-03C64CC7B1A0} => D:\Downloads\Firefox_Setup_de28.0.exe
Task: {7B74A791-AE80-47C6-AB22-58CE23E2D6CE} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9A86603D-BE27-43C8-8C67-FE02C8526CD0} - System32\Tasks\avast! Emergency Update => C:\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-10] (AVAST Software)
Task: {A38F5CA6-52D1-44CB-AF84-B69A6052894C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-10] (Adobe Systems Incorporated)
Task: {A6E2B26B-6FA6-4DFD-9029-A2A502B938AC} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {A745FD01-61D1-42CF-85A0-CD5D8A838F86} - System32\Tasks\Wise Turbo Checker => C:\Wise\Wise Care 365\WiseTurbo.exe [2013-05-13] (WiseCleaner.COM)
Task: {AFC9AAA5-5695-49EB-8248-C8DAF639DF1F} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {B605CFB6-DDD9-4601-A639-1828439C597B} - System32\Tasks\Wise Care 365 => C:\Wise\Wise Care 365\WiseTray.exe [2013-05-13] (WiseCleaner.com)
Task: {C1007386-87D6-4917-B2EF-E3C8D41F8549} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-11] (Google Inc.)
Task: {C8D2ACA8-1435-4150-980A-63348EC3C8E0} - System32\Tasks\{4A1EB6D2-0AE1-48DA-AC4B-A5942BBC8FE4} => D:\Downloads\Firefox_Setup_de28.0.exe
Task: {CDE315E5-4472-4A3B-8EFE-73564A83C702} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {E2062FF8-15BD-48FD-9E06-07A6B4ABB1D0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: {E502E062-CE9A-4D01-938B-E0E45A913209} - System32\Tasks\CCleanerSkipUAC => C:\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {E7292A6F-9275-4428-96AD-64B597CFE8F4} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {E8EE2DA5-2C5A-446E-8E6D-E6B662FCD853} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-04-12] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Wise Care 365.job => C:\Wise\Wise Care 365\WiseTray.exe
Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Wise\Wise Care 365\WiseTurbo.exe

==================== Loaded Modules (whitelisted) =============

2014-04-12 09:40 - 2014-04-12 09:40 - 02210304 _____ () C:\AVAST Software\Avast\defs\14041101\algo.dll
2014-04-13 09:49 - 2014-04-13 09:49 - 02210304 _____ () C:\AVAST Software\Avast\defs\14041300\algo.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-29 12:13 - 2013-10-31 18:14 - 00077992 _____ () C:\Program Files\Microsoft Office 15\ClientX86\ApiClient.dll
2014-01-13 13:01 - 2014-03-25 07:08 - 00420008 _____ () C:\Program Files\Microsoft Office 15\ClientX86\StreamServer.dll
2013-08-14 16:19 - 2013-08-14 16:19 - 00039056 _____ () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
2013-05-07 16:10 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2014-02-26 07:20 - 2014-04-12 10:23 - 00350488 _____ () C:\Program Files\Jotzey\updateJotzey.exe
2013-08-07 21:25 - 2013-08-07 21:25 - 00093696 _____ () C:\FileZilla FTP Client\fzshellext.dll
2013-05-29 23:27 - 2012-12-18 10:49 - 01703936 _____ () C:\XnView\ShellEx\XnViewShellExt.dll
2013-10-16 09:26 - 2013-10-16 09:26 - 19336120 _____ () C:\AVAST Software\Avast\libcef.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00033128 _____ () C:\Program Files\IncrediMail\Bin\IMHttpComm.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00072104 _____ () C:\Program Files\IncrediMail\Bin\wlessfp1.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00272808 _____ () C:\Program Files\IncrediMail\Bin\ImLookExU.dll
2013-01-23 13:55 - 2013-01-23 13:55 - 00108888 _____ () C:\Program Files\IncrediMail\Bin\pmc.dll
2014-04-12 10:37 - 2014-04-12 10:37 - 00316584 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2014-03-06 12:32 - 2014-04-12 09:42 - 00350488 _____ () C:\Program Files\Jotzey\bin\utilJotzey.exe
2013-05-07 15:36 - 2013-05-07 15:36 - 00080296 _____ () C:\Program Files\IncrediMail\bin\ImAppRU.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00133544 _____ () C:\Program Files\IncrediMail\Bin\ImComUtlU.dll
2014-03-22 12:47 - 2014-03-22 12:47 - 00238872 _____ () C:\Program Files\Jotzey\bin\FilterApp_C.exe
2014-04-10 08:42 - 2014-04-08 00:07 - 00095512 _____ () C:\Program Files\Jotzey\bin\Jotzey.BrowserAdapter.exe
2013-07-10 18:07 - 2013-07-10 18:07 - 00756888 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2014-04-11 18:21 - 2013-05-12 00:26 - 03128728 _____ () C:\Mozilla Firefox\mozjs.dll
2014-04-10 10:07 - 2014-04-10 10:07 - 16351920 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_182.dll
2014-04-11 15:24 - 2014-04-02 03:57 - 00065352 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.116\chrome_elf.dll
2014-04-11 15:24 - 2014-04-02 03:57 - 00674632 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.116\libglesv2.dll
2014-04-11 15:24 - 2014-04-02 03:57 - 00093000 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.116\libegl.dll
2014-04-11 15:24 - 2014-04-02 03:57 - 04081480 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.116\pdf.dll
2014-04-11 15:24 - 2014-04-02 03:58 - 00390472 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll
2014-04-11 15:24 - 2014-04-02 03:57 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.116\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/13/2014 02:55:47 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 14:55:47.456]: [00000368]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 02:55:12 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 14:55:12.142]: [00000368]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 02:54:37 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 14:54:37.032]: [00000368]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 02:54:01 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 14:54:01.894]: [00000368]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 02:53:26 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 14:53:26.786]: [00000368]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 02:52:51 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 14:52:51.551]: [00000368]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 02:52:16 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 14:52:16.167]: [00000368]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 02:51:40 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 14:51:40.995]: [00000368]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 02:51:05 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 14:51:05.867]: [00000368]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 02:50:30 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 14:50:30.761]: [00000368]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error


System errors:
=============
Error: (04/13/2014 00:28:33 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (04/13/2014 09:43:39 AM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (04/13/2014 09:43:39 AM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (04/12/2014 03:22:38 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (04/12/2014 02:35:01 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (04/12/2014 00:27:44 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (04/12/2014 00:27:44 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (04/12/2014 09:52:26 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update Jotzey" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (04/12/2014 09:52:26 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Update Jotzey erreicht.

Error: (04/12/2014 09:51:38 AM) (Source: atikmdag) (User: )
Description: Display is not active


Microsoft Office Sessions:
=========================
Error: (06/14/2013 10:00:39 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7898 seconds with 3960 seconds of active time.  This session ended with a crash.


==================== Memory info ===========================

Percentage of memory in use: 55%
Total physical RAM: 3327.05 MB
Available physical RAM: 1493.37 MB
Total Pagefile: 6652.4 MB
Available Pagefile: 4348.44 MB
Total Virtual: 2047.88 MB
Available Virtual: 1912.08 MB

==================== Drives ================================

Drive c: (Drive_C) (Fixed) (Total:593.39 GB) (Free:554 GB) NTFS
Drive d: (Drive_D) (Fixed) (Total:781.25 GB) (Free:724.72 GB) NTFS
Drive e: (Drive_E) (Fixed) (Total:488.28 GB) (Free:276.15 GB) NTFS
Drive h: (Drive_H) (Fixed) (Total:465.76 GB) (Free:361.32 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 1E6F95B9)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 2119A196)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=781 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=488 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=593 GB) - (Type=07 NTFS)

==================== End Of Log ============================

cosinus 13.04.2014 14:02
Adware/Junkware/Toolbars entfernen

1. Schritt: Malwarebytes

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




2. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).



3. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




4. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


opinion 13.04.2014 18:04
Guete Abig (Guten Abend) Cosinus

Habe alles erledigen können. Und das notabene als Laie. Das was nur möglich, weil Du die Erklärung so datailiert abgefasst hast. Vielen herzlichen Dank dafür und vergelts Gott!
Ich habe das Gefühl, dass jetzt der Firefox-Browser wieder richtig funktioniert. Die lästigen Werbebanner kommen nicht mehr. Und oben der gelbe Balken: "Addons verändern die Seite" kommt auch nicht mehr. Wunderbar, wie die Programme die Schädlinge eliminiert haben.
Noch testen muss ich, ob nun die Firefox-Version 28 heruntergeladen wird, wenn ich ...
So nun zu den Protokollen:

Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-04-2014
Ran by mg at 2014-04-13 18:49:12
Running from D:\
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

ActivePresenter (HKLM\...\{A2A40277-D807-4754-95A3-2F294C2C51D3}_is1) (Version: 3.9.0 - Atomi Systems, Inc.)
Adobe Flash Player 13 ActiveX (HKLM\...\{8F9B1C8E-F50E-4139-8701-45016021E102}) (Version: 13.0.0.182 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\{28ADCCAD-3C23-44A1-A93F-47AA176F7AD7}) (Version: 13.0.0.182 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Apple Application Support (HKLM\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo ClipFinder HD v.2.3.6 (HKLM\...\{0A11EA01-36EF-0070-F54C-E06E25BC1924}_is1) (Version: 2.3.6 - Ashampoo GmbH & Co. KG)
avast! Free Antivirus (HKLM\...\avast) (Version: 9.0.2016 - Avast Software)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite DCP-9010CN (HKLM\...\{A1BBEE16-49B1-42F2-95B8-54C8C6A1C0C3}) (Version: 2.0.1.0 - Brother Industries, Ltd.)
CameraHelperMsi (Version: 13.40.836.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4214 - CDBurnerXP)
ConvertHelper 2.2 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
Das Planetarium 1900 - 2100 (HKLM\...\Das Planetarium 1900 - 2100) (Version: 13 - www.astroexcel.de)
DMG Extractor (HKCU\...\DMG Extractor) (Version: 1.3.2.0 - Reincubate Ltd)
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FastStone Capture 5.3 (HKLM\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
FileZilla Client 3.7.3 (HKLM\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
Folderico 4.0 RC12 (HKLM\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org ))
FreeMind (HKLM\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 0.9.0 - )
Google Chrome (HKLM\...\Google Chrome) (Version: 34.0.1847.116 - Google Inc.)
Google Update Helper (Version: 1.3.23.9 - Google Inc.) Hidden
GoToMeeting 5.5.0.1133 (HKCU\...\GoToMeeting) (Version: 5.5.0.1133 - CitrixOnline)
IncrediMail (Version: 6.6.0.5259 - IncrediMail) Hidden
IncrediMail 2.5 (HKLM\...\IncrediMail) (Version: 6.6.0.5259 - IncrediMail Ltd.)
iTunes (HKLM\...\{2F21564D-DE05-4C6D-B21E-08B9D313FAB3}) (Version: 11.1.5.5 - Apple Inc.)
Jing (HKLM\...\{22800204-9E53-45C7-B6F3-5BB0F1C1A147}) (Version: 2.8.13007.1 - TechSmith Corporation)
LibreOffice 4.1.0.4 (HKLM\...\{F8478020-D98E-49FB-BA14-07A534AED99C}) (Version: 4.1.0.4 - The Document Foundation)
Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.40 - Logitech Inc.)
Logitech Z-series Software 1.04 (HKLM\...\{A157AC1C-DF44-481A-81E7-17AE00239818}) (Version: 1.04.153 - Logitech)
LWS Facebook (Version: 13.31.1038.0 - Logitech) Hidden
LWS Gallery (Version: 13.40.835.0 - Logitech) Hidden
LWS Help_main (Version: 13.40.845.0 - Logitech) Hidden
LWS Launcher (Version: 13.40.836.0 - Logitech) Hidden
LWS Motion Detection (Version: 13.40.844.0 - Logitech) Hidden
LWS Pictures And Video (Version: 13.40.844.0 - Logitech) Hidden
LWS Twitter (Version: 13.30.1346.0 - Logitech) Hidden
LWS Video Mask Maker (Version: 13.30.1379.0 - Logitech) Hidden
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
LWS Webcam Software (Version: 13.31.1038.0 - Logitech) Hidden
LWS WLM Plugin (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (Version: 13.31.1038.0 - Logitech) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4605.1003 - Microsoft Corporation)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Publisher 97 (HKLM\...\MSPUB4) (Version:  - )
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MozBackup 1.5.1 (HKLM\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 21.0 (x86 de) (HKLM\...\Mozilla Firefox 21.0 (x86 de)) (Version: 21.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 21.0 - Mozilla)
MPC-HC 1.7.0 (HKLM\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
ooVoo (HKLM\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 3.6.1008 - ooVoo LLC.)
Oovoo Toolbar (HKLM\...\{4F564F32-5637-4300-76A7-A758B70C0A06}) (Version: 12.10.6.5033 - APN, LLC)
Photo Notifier and Animation Creator (HKLM\...\Photo Notifier and Animation Creator) (Version: 1.0.0.1009 - IncrediMail Ltd.)
Photo Notifier and Animation Creator (Version: 1.0.0.1009 - Ihr Firmenname) Hidden
Python 3.3.3 (HKLM\...\{39b6eb84-331c-3657-ad2e-837537ddf04f}) (Version: 3.3.3150 - Python Software Foundation)
QuickTime 7 (HKLM\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Readiris Pro 11 (HKLM\...\{7C2B745A-E7F1-41F1-B9BB-3DDB8D52E4CE}) (Version: 11.00.5062 - I.R.I.S.)
RealDownloader (Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Revo Uninstaller 1.94 (HKLM\...\Revo Uninstaller) (Version: 1.94 - VS Revo Group)
Scribus 1.4.3 (HKLM\...\Scribus 1.4.3) (Version: 1.4.3 - The Scribus Team)
Shark007 Advanced Codecs (HKLM\...\{8C0CAA7A-3272-4991-A808-2C7559DE3409}) (Version: 4.1.5 - Shark007)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
SmartTools Publishing • Excel CellSpot (HKLM\...\SmartToolsCellSpotv3.00) (Version: v3.00 - SmartTools Publishing)
SmartTools Publishing • Excel Finanzplan 2013 (HKLM\...\SmartToolsFinanzplan 2013v4.00) (Version: v4.00 - SmartTools Publishing)
SmartTools Publishing • Excel Formel-Tools (HKLM\...\SmartToolsFormel-Toolsv5.00) (Version: v5.00 - SmartTools Publishing)
SmartTools Publishing • Excel Inhaltsverzeichnis (HKLM\...\SmartToolsInhaltsverzeichnisv5.00) (Version: v5.00 - SmartTools Publishing)
SmartTools Publishing • Excel Jahreskalender 2014 (HKLM\...\SmartToolsJahreskalender 2014v6.00) (Version: v6.00 - SmartTools Publishing)
SmartTools Publishing • Excel Markierungs-Assistent (HKLM\...\SmartToolsMarkierungs-Assistentv3.00) (Version: v3.00 - SmartTools Publishing)
SmartTools Publishing • Excel Monatskalender 2014 (HKLM\...\SmartToolsMonatskalender 2014v2.00) (Version: v2.00 - SmartTools Publishing)
SmartTools Publishing • Excel Titelleisten-Manager (HKLM\...\SmartToolsTitelleisten-Managerv2.50) (Version: v2.50 - SmartTools Publishing)
SmartTools Publishing • Outlook Bildervorschau (HKCU\...\SmartToolsOutlookBildervorschau) (Version: 3.00 - SmartTools Publishing)
StreamTransport version: 1.1.1.1 (HKLM\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version:  - )
TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.26038 - TeamViewer)
Textbausteinverwaltung Deluxe (HKLM\...\{FBFCE6BF-1879-484C-9406-B8961FEF1C7A}) (Version: 1.0.15.520 - JBSoftware)
Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: 8.01 - Ghisler Software GmbH)
Ulead PhotoImpact 12 (HKLM\...\{11AFE21E-B193-430D-B57A-DFF7815BB962}) (Version: 12.0 - Ulead System)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WinHTTrack Website Copier 3.47-14 (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.47.14 - HTTrack)
WinRAR 5.00 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
Wise Care 365 version 2.45 (HKLM\...\{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1) (Version: 2.45 - WiseCleaner.com, Inc.)
Wise Registry Cleaner 7.94 (HKLM\...\Wise Registry Cleaner_is1) (Version: 7.94 - WiseCleaner.com, Inc.)
XMind 2012 (v3.3.1) (HKLM\...\XMind_is1) (Version: 3.3.1.201212250029 - XMind Ltd.)
XnView 2.04 (HKLM\...\XnView_is1) (Version: 2.04 - Gougelet Pierre-e)

==================== Restore Points  =========================

04-04-2014 13:25:59 Windows Update
07-04-2014 06:11:06 Windows-Sicherung
09-04-2014 07:03:39 Windows Update
09-04-2014 07:15:40 Windows Update
10-04-2014 08:07:30 Installed Adobe Flash Player 13 Plugin.
10-04-2014 08:08:37 Installed Adobe Flash Player 13 ActiveX.
10-04-2014 13:55:16 avast! antivirus system restore point
11-04-2014 11:01:12 Windows Live Essentials
11-04-2014 11:10:30 Windows Live Essentials
11-04-2014 11:22:17 DirectX wurde installiert
11-04-2014 11:23:26 WLSetup
11-04-2014 11:54:54 Windows Live Essentials
11-04-2014 12:00:46 DirectX wurde installiert
11-04-2014 12:01:13 DirectX wurde installiert
11-04-2014 12:01:35 DirectX wurde installiert
11-04-2014 12:02:13 WLSetup
11-04-2014 12:14:23 Windows Live Essentials
11-04-2014 12:14:43 DirectX wurde installiert
11-04-2014 12:15:04 DirectX wurde installiert
11-04-2014 12:15:25 DirectX wurde installiert
11-04-2014 12:15:40 WLSetup
12-04-2014 07:47:31 Windows Live Essentials
12-04-2014 07:47:47 WLSetup

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {10D98D18-AF9C-4548-A454-0F70A2EB28B7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-11] (Google Inc.)
Task: {19D34D98-EE60-4839-8812-95D3AD7861F6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX86\OfficeC2RClient.exe [2014-03-30] (Microsoft Corporation)
Task: {3A4AAABA-F7F3-41AD-B713-3C68ECEEAA47} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {4D380163-48E2-4BF3-93AF-2A7E936DEBA8} - System32\Tasks\{7826D83B-DF63-4D00-9958-03C64CC7B1A0} => D:\Downloads\Firefox_Setup_de28.0.exe
Task: {72CC79F4-8A53-475C-8101-746A75952146} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {7B74A791-AE80-47C6-AB22-58CE23E2D6CE} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9A86603D-BE27-43C8-8C67-FE02C8526CD0} - System32\Tasks\avast! Emergency Update => C:\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-10] (AVAST Software)
Task: {A38F5CA6-52D1-44CB-AF84-B69A6052894C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-10] (Adobe Systems Incorporated)
Task: {A745FD01-61D1-42CF-85A0-CD5D8A838F86} - System32\Tasks\Wise Turbo Checker => C:\Wise\Wise Care 365\WiseTurbo.exe [2013-05-13] (WiseCleaner.COM)
Task: {AFC9AAA5-5695-49EB-8248-C8DAF639DF1F} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {C1007386-87D6-4917-B2EF-E3C8D41F8549} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-11] (Google Inc.)
Task: {C8D2ACA8-1435-4150-980A-63348EC3C8E0} - System32\Tasks\{4A1EB6D2-0AE1-48DA-AC4B-A5942BBC8FE4} => D:\Downloads\Firefox_Setup_de28.0.exe
Task: {CDE315E5-4472-4A3B-8EFE-73564A83C702} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {E2062FF8-15BD-48FD-9E06-07A6B4ABB1D0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: {E502E062-CE9A-4D01-938B-E0E45A913209} - System32\Tasks\CCleanerSkipUAC => C:\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {E7292A6F-9275-4428-96AD-64B597CFE8F4} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {E8EE2DA5-2C5A-446E-8E6D-E6B662FCD853} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-04-12] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Wise\Wise Care 365\WiseTurbo.exe

==================== Loaded Modules (whitelisted) =============

2014-04-13 09:49 - 2014-04-13 09:49 - 02210304 _____ () C:\AVAST Software\Avast\defs\14041300\algo.dll
2013-10-16 09:26 - 2013-10-16 09:26 - 19336120 _____ () C:\AVAST Software\Avast\libcef.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00033128 _____ () C:\Program Files\IncrediMail\Bin\IMHttpComm.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00072104 _____ () C:\Program Files\IncrediMail\Bin\wlessfp1.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00272808 _____ () C:\Program Files\IncrediMail\Bin\ImLookExU.dll
2013-01-23 13:55 - 2013-01-23 13:55 - 00108888 _____ () C:\Program Files\IncrediMail\Bin\pmc.dll
2014-04-12 10:37 - 2014-04-12 10:37 - 00316584 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2014-03-29 12:13 - 2013-10-31 18:14 - 00077992 _____ () C:\Program Files\Microsoft Office 15\ClientX86\ApiClient.dll
2014-01-13 13:01 - 2014-03-25 07:08 - 00420008 _____ () C:\Program Files\Microsoft Office 15\ClientX86\StreamServer.dll
2013-08-14 16:19 - 2013-08-14 16:19 - 00039056 _____ () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
2013-05-07 16:10 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00080296 _____ () C:\Program Files\IncrediMail\bin\ImAppRU.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00133544 _____ () C:\Program Files\IncrediMail\Bin\ImComUtlU.dll
2013-08-07 21:25 - 2013-08-07 21:25 - 00093696 _____ () C:\FileZilla FTP Client\fzshellext.dll
2014-04-11 18:21 - 2013-05-12 00:26 - 03128728 _____ () C:\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/13/2014 06:49:30 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 18:49:30.562]: [00002656]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 06:48:55 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 18:48:55.320]: [00002656]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 06:48:20 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 18:48:20.107]: [00002656]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 06:47:44 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 18:47:44.882]: [00002656]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 06:47:09 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 18:47:09.671]: [00002656]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/13/2014 06:46:34 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/13 18:46:34.448]: [00002656]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (06/14/2013 10:00:39 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7898 seconds with 3960 seconds of active time.  This session ended with a crash.


==================== Memory info ===========================

Percentage of memory in use: 41%
Total physical RAM: 3327.05 MB
Available physical RAM: 1950.3 MB
Total Pagefile: 6652.4 MB
Available Pagefile: 5169.99 MB
Total Virtual: 2047.88 MB
Available Virtual: 1910.08 MB

==================== Drives ================================

Drive c: (Drive_C) (Fixed) (Total:593.39 GB) (Free:553.92 GB) NTFS
Drive d: (Drive_D) (Fixed) (Total:781.25 GB) (Free:724.61 GB) NTFS
Drive e: (Drive_E) (Fixed) (Total:488.28 GB) (Free:276.15 GB) NTFS
Drive h: (Drive_H) (Fixed) (Total:465.76 GB) (Free:361.33 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 1E6F95B9)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 2119A196)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=781 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=488 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=593 GB) - (Type=07 NTFS)

==================== End Of Log ============================
Code:
# AdwCleaner v3.023 - Bericht erstellt am 13/04/2014 um 18:12:48
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : mg - MG-PC
# Gestartet von : C:\Users\mg\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : APNMCP

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\AskPartnerNetwork
Ordner Gelöscht : C:\ProgramData\IePluginService
Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\Program Files\AskPartnerNetwork
Ordner Gelöscht : C:\Program Files\Mobogenie
Ordner Gelöscht : C:\Program Files\Optimizer Pro
Ordner Gelöscht : C:\Program Files\SupTab
Ordner Gelöscht : C:\Users\mg\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\mg\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\mg\AppData\Local\Temp\apn
Ordner Gelöscht : C:\Users\mg\AppData\Roaming\awesomehp
Ordner Gelöscht : C:\Users\mg\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\mg\Documents\Mobogenie
Ordner Gelöscht : C:\Users\mg\Documents\Optimizer Pro
Datei Gelöscht : C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\invalidprefs.js
Datei Gelöscht : C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\user.js

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Wert Gelöscht : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Wert Gelöscht : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Schlüssel Gelöscht : HKCU\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKLM\Software\Speedchecker Limited
Schlüssel Gelöscht : HKLM\Software\supTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\systweak

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v21.0 (de)

[ Datei : C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\prefs.js ]

Zeile gelöscht : user_pref("accessibility.lightning.homepage", "hxxp://www.awesomehp.com/?type=hp&ts=1390658337&from=smt&uid=WDCXWD20EARS-00MVWB0_WD-WMAZA467898578985");
Zeile gelöscht : user_pref("extensions.OVO2V7C.domain", "\"www.search.ask.com\"");
Zeile gelöscht : user_pref("extensions.wajam.affiliate_id", "8752");
Zeile gelöscht : user_pref("extensions.wajam.firstrun", "false");
Zeile gelöscht : user_pref("extensions.wajam.log_send_info", "false");
Zeile gelöscht : user_pref("extensions.wajam.mappingListJsonString", "{\"version\":\"0.21087\",\"update_interval\":1303,\"base_url\":\"hxxp:\\/\\/www.wajam.com\\/\",\"update_url\":\"hxxp:\\/\\/www.wajam.com\\/addon\\/[...]
Zeile gelöscht : user_pref("extensions.wajam.no_trace", "false");
Zeile gelöscht : user_pref("extensions.wajam.server_current_mapping_version", "0.21087");
Zeile gelöscht : user_pref("extensions.wajam.trace_log", "");
Zeile gelöscht : user_pref("extensions.wajam.unique_id", "82B0D20CD915DEB5B586E4DF270EA800");
Zeile gelöscht : user_pref("extensions.wajam.user_current_mapping_version", "0");
Zeile gelöscht : user_pref("extensions.wajam.version", "1.26");

-\\ Google Chrome v34.0.1847.116

[ Datei : C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [4146 octets] - [26/08/2013 16:01:19]
AdwCleaner[R1].txt - [1135 octets] - [26/08/2013 16:09:41]
AdwCleaner[R2].txt - [1107 octets] - [26/08/2013 16:16:14]
AdwCleaner[R3].txt - [6047 octets] - [13/04/2014 18:11:23]
AdwCleaner[S0].txt - [3051 octets] - [26/08/2013 16:02:29]
AdwCleaner[S1].txt - [1201 octets] - [26/08/2013 16:10:55]
AdwCleaner[S2].txt - [1169 octets] - [26/08/2013 16:16:38]
AdwCleaner[S3].txt - [5521 octets] - [13/04/2014 18:12:48]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [5581 octets] ##########

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-04-2014
Ran by mg (administrator) on MG-PC on 13-04-2014 18:48:52
Running from D:\
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\AVAST Software\Avast\AvastUI.exe
(APN LLC.) C:\Users\mg\AppData\Local\VNT\vntldr.exe
(Apple Inc.) C:\Apple\iTunes\iTunesHelper.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\IncMail.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe
(Malwarebytes Corporation) C:\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Malwarebytes Anti-Malware\mbamservice.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(Malwarebytes Corporation) C:\Malwarebytes Anti-Malware\mbam.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\ImApp.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(Thisisu) D:\Downloads\JRT.exe
(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Mozilla Corporation) C:\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-10] (AVAST Software)
HKLM\...\Run: [VNT] => C:\Program Files\VNT\vntldr.exe [196048 2014-03-19] (APN LLC.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Apple\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\Update\realsched.exe [295512 2014-03-21] (RealNetworks, Inc.)
HKU\S-1-5-19\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\Sidebar.exe [1174016 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\Sidebar.exe [1174016 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-2282301582-224385206-936070459-1000\...\Run: [IncrediMail] => C:\Program Files\IncrediMail\bin\IncMail.exe [440744 2013-05-07] (IncrediMail, Ltd.)
HKU\S-1-5-21-2282301582-224385206-936070459-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2282301582-224385206-936070459-1000\...\Policies\Explorer: [DisallowRun] 1
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
Startup: C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bluewin.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ch.msn.com/default.aspx?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x24EF38FB1F4BCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-ch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=146&itype=n&ver=12302&tm=314&src=ds&p={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=146&itype=n&ver=12302&tm=314&src=ds&p={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 62.2.24.158 62.2.17.60 62.2.24.162 62.2.17.61

FireFox:
========
FF ProfilePath: C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default
FF DefaultSearchEngine: default-search.net
FF SearchEngineOrder.1: default-search.net
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.bluewin.ch/
FF Keyword.URL: hxxp://www.default-search.net/search?sid=476&aid=146&itype=n&ver=12302&tm=314&src=ds&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Apple\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\mg\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Extension: DownloadHelper - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-12]
FF Extension: Youtube Downloader - Media Downloader - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\paulsaintuzb@gmail.com.xpi [2014-04-12]
FF Extension: www.Tran - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\trident@trident.com.ua.xpi [2014-04-12]
FF Extension: Adblock Plus - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-12]
FF Extension: DownThemAll! - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-04-12]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\AVAST Software\Avast\WebRep\FF [2013-05-07]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-03-21]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF StartMenuInternet: FIREFOX.EXE - C:\Mozilla Firefox\firefox.exe

Chrome:
=======
CHR HomePage: hxxp://www.bluewin.ch/
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.104) - C:\Users\mg\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
CHR Plugin: (VLC Web Plugin) - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (Google Docs) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-11]
CHR Extension: (Google Drive) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-11]
CHR Extension: (YouTube) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-11]
CHR Extension: (Google-Suche) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-11]
CHR Extension: (RealDownloader) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-08-11]
CHR Extension: (Google Wallet) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-03]
CHR Extension: (Google Mail) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-11]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-10]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\mg\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-07-26]
CHR HKLM\...\Chrome\Extension: [opjebaomffhbebmkanbennmagkdjkclo] - C:\ProgramData\AskPartnerNetwork\Toolbar\OVO2V7C\CRX\ToolbarCR.crx [2013-07-26]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-10] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1520824 2014-03-30] (Microsoft Corporation)
R2 MBAMScheduler; C:\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2011-12-15] (Logitech Inc.)
S2 WiseBootAssistant; C:\Wise\Wise Care 365\BootTime.exe [580232 2013-05-13] (WiseCleaner.com)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-04-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-04-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-04-10] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [776976 2014-04-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411552 2014-04-10] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [67264 2014-04-10] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180760 2014-04-10] ()
R3 debutfilter; C:\Windows\System32\DRIVERS\debutfilterx86.sys [43344 2014-03-23] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [107736 2014-04-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51416 2014-04-03] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-14] (Ralink Technology Corp.)
R1 wStLib; C:\Windows\System32\drivers\wStLib.sys [52920 2014-03-22] (StdLib)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-13 18:46 - 2014-04-13 18:46 - 00001064 _____ () C:\Users\mg\Desktop\JRT.txt
2014-04-13 18:35 - 2014-04-13 18:35 - 00000000 ____D () C:\Windows\ERUNT
2014-04-13 18:20 - 2014-04-13 18:39 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-13 18:20 - 2014-04-13 18:20 - 00000708 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-13 18:20 - 2014-04-13 18:20 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-13 18:20 - 2014-04-13 18:20 - 00000000 ____D () C:\Malwarebytes Anti-Malware
2014-04-13 18:20 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-13 18:20 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-13 18:20 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-13 14:31 - 2014-04-13 14:31 - 00000000 ____D () C:\Device
2014-04-12 14:52 - 2014-04-12 14:52 - 00002811 _____ () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wie Du ein Wordpress update richtig durchführst - YouTube.lnk
2014-04-12 14:38 - 2014-04-12 14:38 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-12 12:05 - 2014-04-13 18:48 - 00000000 ____D () C:\FRST
2014-04-11 18:21 - 2014-04-11 18:21 - 00000725 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-11 18:21 - 2014-04-11 18:21 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-11 16:31 - 2014-04-11 17:12 - 06000640 _____ () C:\Program Files\GUT7A10.tmp
2014-04-11 16:31 - 2014-04-11 17:12 - 00000000 ____D () C:\Program Files\GUM79FF.tmp
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieUserList
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieSiteList
2014-04-11 16:10 - 2014-04-13 18:27 - 00013270 _____ () C:\Windows\PFRO.log
2014-04-11 16:06 - 2014-04-13 18:37 - 00000952 _____ () C:\Windows\setupact.log
2014-04-11 16:06 - 2014-04-11 16:06 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-11 14:01 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-04-11 14:00 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-04-11 13:40 - 2014-04-11 13:40 - 00000020 _____ () C:\Windows\”ôZ
2014-04-11 13:22 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-04-11 13:22 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-04-11 13:22 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-04-11 13:22 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-04-11 13:01 - 2014-04-12 09:49 - 00000000 ____D () C:\Users\mg\AppData\Local\Windows Live
2014-04-11 13:00 - 2014-04-11 13:00 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-04-11 10:19 - 2014-04-13 18:41 - 00189687 _____ () C:\Windows\WindowsUpdate.log
2014-04-10 15:58 - 2014-04-10 15:58 - 00067264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-10 15:58 - 2014-04-10 15:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-09 09:16 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 09:16 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 09:16 - 2014-03-06 10:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-09 09:16 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-09 09:16 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-09 09:16 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-09 09:16 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-09 09:16 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-09 09:16 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-09 09:16 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-09 09:16 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-09 09:16 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-09 09:16 - 2014-03-06 09:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-09 09:16 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-09 09:16 - 2014-03-06 09:28 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-09 09:16 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-09 09:16 - 2014-03-06 09:18 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-09 09:16 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-09 09:16 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-09 09:16 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-09 09:16 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-09 09:16 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-09 09:16 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-09 09:16 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-09 09:16 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-09 09:16 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-09 09:03 - 2014-03-04 11:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 09:03 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 09:03 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 09:03 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 09:03 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 09:03 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-03-27 14:06 - 2014-03-27 14:06 - 00000000 ____D () C:\ProgramData\SmartTools
2014-03-23 16:51 - 2014-03-23 16:51 - 00000000 ____D () C:\Users\mg\AppData\Roaming\TechSmith
2014-03-23 16:03 - 2014-03-23 16:24 - 00000000 ____D () C:\ProgramData\NCH Software
2014-03-23 16:02 - 2014-03-23 16:32 - 00000000 ____D () C:\Users\mg\AppData\Roaming\NCH Software
2014-03-23 16:02 - 2014-03-23 16:32 - 00000000 ____D () C:\Program Files\NCH Software
2014-03-23 16:02 - 2014-03-23 16:02 - 00043344 _____ () C:\Windows\system32\Drivers\debutfilterx86.sys
2014-03-23 15:45 - 2014-03-23 15:45 - 00000096 _____ () C:\Users\mg\AppData\Roaming\version2.xml
2014-03-22 12:47 - 2014-03-22 12:47 - 00052920 _____ (StdLib) C:\Windows\system32\Drivers\wStLib.sys
2014-03-21 16:29 - 2014-03-21 16:29 - 00001241 _____ () C:\Users\Public\Desktop\RealPlayer.lnk
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\ProgramData\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\Common Files\xing shared
2014-03-21 16:28 - 2014-04-13 17:53 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Real
2014-03-21 16:28 - 2014-03-21 16:28 - 00272896 _____ (Progressive Networks) C:\Windows\system32\pncrt.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\system32\rmoc3260.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5016.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5032.dll

==================== One Month Modified Files and Folders =======

2014-04-13 18:48 - 2014-04-12 12:05 - 00000000 ____D () C:\FRST
2014-04-13 18:47 - 2014-02-15 13:44 - 00000000 ____D () C:\Mozilla Firefox
2014-04-13 18:46 - 2014-04-13 18:46 - 00001064 _____ () C:\Users\mg\Desktop\JRT.txt
2014-04-13 18:45 - 2009-07-14 06:34 - 00015360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-13 18:45 - 2009-07-14 06:34 - 00015360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-13 18:41 - 2014-04-11 10:19 - 00189687 _____ () C:\Windows\WindowsUpdate.log
2014-04-13 18:39 - 2014-04-13 18:20 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-13 18:38 - 2013-08-11 14:37 - 00001086 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-13 18:38 - 2013-05-19 13:41 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Wise Care 365
2014-04-13 18:37 - 2014-04-11 16:06 - 00000952 _____ () C:\Windows\setupact.log
2014-04-13 18:37 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-13 18:35 - 2014-04-13 18:35 - 00000000 ____D () C:\Windows\ERUNT
2014-04-13 18:27 - 2014-04-11 16:10 - 00013270 _____ () C:\Windows\PFRO.log
2014-04-13 18:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help
2014-04-13 18:25 - 2009-07-14 04:04 - 00000530 _____ () C:\Windows\win.ini
2014-04-13 18:20 - 2014-04-13 18:20 - 00000708 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-13 18:20 - 2014-04-13 18:20 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-13 18:20 - 2014-04-13 18:20 - 00000000 ____D () C:\Malwarebytes Anti-Malware
2014-04-13 18:19 - 2013-08-11 14:37 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-13 18:12 - 2013-08-26 16:01 - 00000000 ____D () C:\AdwCleaner
2014-04-13 17:53 - 2014-03-21 16:28 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Real
2014-04-13 17:27 - 2013-05-07 15:34 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-13 16:53 - 2013-10-17 10:02 - 00000000 ____D () C:\Users\mg\AppData\Roaming\vlc
2014-04-13 14:31 - 2014-04-13 14:31 - 00000000 ____D () C:\Device
2014-04-13 13:00 - 2013-05-19 13:42 - 00000316 _____ () C:\Windows\Tasks\Wise Turbo Checker.job
2014-04-13 10:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-04-12 14:52 - 2014-04-12 14:52 - 00002811 _____ () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wie Du ein Wordpress update richtig durchführst - YouTube.lnk
2014-04-12 14:38 - 2014-04-12 14:38 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-12 13:29 - 2013-08-11 14:38 - 00002200 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-12 11:18 - 2014-01-13 13:01 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-04-12 09:49 - 2014-04-11 13:01 - 00000000 ____D () C:\Users\mg\AppData\Local\Windows Live
2014-04-12 09:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-04-11 18:36 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-04-11 18:21 - 2014-04-11 18:21 - 00000725 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-11 18:21 - 2014-04-11 18:21 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-11 18:06 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-11 17:12 - 2014-04-11 16:31 - 06000640 _____ () C:\Program Files\GUT7A10.tmp
2014-04-11 17:12 - 2014-04-11 16:31 - 00000000 ____D () C:\Program Files\GUM79FF.tmp
2014-04-11 16:24 - 2013-05-07 15:14 - 00000000 ____D () C:\Users\mg\AppData\Local\Google
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieUserList
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieSiteList
2014-04-11 16:06 - 2014-04-11 16:06 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-11 16:04 - 2009-07-14 04:03 - 63176704 _____ () C:\Windows\system32\config\software.bak
2014-04-11 16:04 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\default.bak
2014-04-11 16:04 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\security.bak
2014-04-11 16:04 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\sam.bak
2014-04-11 13:40 - 2014-04-11 13:40 - 00000020 _____ () C:\Windows\”ôZ
2014-04-11 13:00 - 2014-04-11 13:00 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-04-11 11:06 - 2013-05-07 19:19 - 00106925 _____ () C:\Users\mg\Documents\Readiris.DUS
2014-04-11 01:09 - 2013-10-20 15:53 - 00000000 ____D () C:\Windows\Minidump
2014-04-10 23:26 - 2013-05-07 14:39 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-10 15:58 - 2014-04-10 15:58 - 00067264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-10 15:58 - 2014-04-10 15:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-10 15:58 - 2013-05-07 17:45 - 00776976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-10 15:58 - 2013-05-07 17:45 - 00411552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-04-10 15:58 - 2013-05-07 17:45 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-10 15:58 - 2013-05-07 17:45 - 00001739 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-10 15:58 - 2013-05-07 17:44 - 00180760 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-10 15:58 - 2013-05-07 17:44 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-10 15:58 - 2013-05-07 17:44 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-10 15:58 - 2013-05-07 15:44 - 00271264 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-10 10:52 - 2014-02-28 01:10 - 00000000 ____D () C:\Users\mg\AppData\Roaming\ActivePresenter
2014-04-10 10:08 - 2013-05-07 15:34 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-04-10 10:08 - 2013-05-07 15:34 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-04-09 16:36 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-04-09 09:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-04-09 09:07 - 2013-07-19 11:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 09:07 - 2013-05-07 18:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-09 09:05 - 2013-05-07 15:07 - 88028728 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-03 09:51 - 2014-04-13 18:20 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-13 18:20 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-13 18:20 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-02 13:12 - 2013-11-13 15:28 - 00000000 ____D () C:\Users\mg\AppData\Local\VNT
2014-04-02 13:12 - 2013-11-13 15:28 - 00000000 ____D () C:\Program Files\VNT
2014-03-28 20:43 - 2013-05-22 16:02 - 00000408 _____ () C:\Users\mg\AppData\Roaming\CamShapes.ini
2014-03-28 20:43 - 2013-05-22 16:02 - 00000408 _____ () C:\Users\mg\AppData\Roaming\CamLayout.ini
2014-03-28 20:43 - 2013-05-22 16:02 - 00000115 _____ () C:\Users\mg\AppData\Roaming\Camdata.ini
2014-03-28 20:42 - 2013-05-22 16:02 - 00004534 _____ () C:\Users\mg\AppData\Roaming\CamStudio.cfg
2014-03-28 19:03 - 2013-10-17 10:02 - 00000672 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-03-27 14:06 - 2014-03-27 14:06 - 00000000 ____D () C:\ProgramData\SmartTools
2014-03-27 14:06 - 2013-06-04 12:12 - 00000000 ____D () C:\SmartTools
2014-03-27 14:06 - 2013-05-15 15:49 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTools
2014-03-27 14:03 - 2013-05-15 15:44 - 00000000 ____D () C:\Users\mg\AppData\Roaming\SmartTools
2014-03-23 17:15 - 2013-05-07 14:37 - 00000000 ____D () C:\Users\mg
2014-03-23 16:52 - 2013-10-28 12:35 - 00000000 ____D () C:\Users\mg\AppData\Local\TechSmith
2014-03-23 16:51 - 2014-03-23 16:51 - 00000000 ____D () C:\Users\mg\AppData\Roaming\TechSmith
2014-03-23 16:32 - 2014-03-23 16:02 - 00000000 ____D () C:\Users\mg\AppData\Roaming\NCH Software
2014-03-23 16:32 - 2014-03-23 16:02 - 00000000 ____D () C:\Program Files\NCH Software
2014-03-23 16:24 - 2014-03-23 16:03 - 00000000 ____D () C:\ProgramData\NCH Software
2014-03-23 16:02 - 2014-03-23 16:02 - 00043344 _____ () C:\Windows\system32\Drivers\debutfilterx86.sys
2014-03-23 15:45 - 2014-03-23 15:45 - 00000096 _____ () C:\Users\mg\AppData\Roaming\version2.xml
2014-03-22 12:47 - 2014-03-22 12:47 - 00052920 _____ (StdLib) C:\Windows\system32\Drivers\wStLib.sys
2014-03-21 16:29 - 2014-03-21 16:29 - 00001241 _____ () C:\Users\Public\Desktop\RealPlayer.lnk
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\ProgramData\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\Common Files\xing shared
2014-03-21 16:29 - 2014-03-06 10:36 - 00000000 ____D () C:\Users\mg\AppData\Roaming\RealNetworks
2014-03-21 16:29 - 2013-05-08 07:29 - 00000000 ____D () C:\Program Files\Real
2014-03-21 16:29 - 2013-05-08 07:28 - 00000000 ____D () C:\ProgramData\Real
2014-03-21 16:28 - 2014-03-21 16:28 - 00272896 _____ (Progressive Networks) C:\Windows\system32\pncrt.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\system32\rmoc3260.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5016.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5032.dll
2014-03-21 12:07 - 2013-06-03 07:59 - 00000000 ____D () C:\Users\mg\AppData\Roaming\TeamViewer

Files to move or delete:
====================
C:\Users\mg\AppData\Roaming\CamLayout.ini
C:\Users\mg\AppData\Roaming\CamShapes.ini


Some content of TEMP:
====================
C:\Users\mg\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkw9lxg.dll
C:\Users\mg\AppData\Local\Temp\Quarantine.exe
C:\Users\mg\AppData\Local\Temp\SettingsManagerSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-09 16:28

==================== End Of Log ============================
--- --- ---


Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x86
Ran by mg on 13.04.2014 at 18:42:17.49
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\backupstack_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\backupstack_rasmancs



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\mg\AppData\Roaming\mozilla\firefox\profiles\m4ok0723.default\minidumps [39 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 13.04.2014 at 18:46:31.03
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org


Protection, 13.04.2014 18:20:24, SYSTEM, MG-PC, Protection, Malware Protection, Starting,
Protection, 13.04.2014 18:20:24, SYSTEM, MG-PC, Protection, Malware Protection, Started,
Protection, 13.04.2014 18:20:24, SYSTEM, MG-PC, Protection, Malicious Website Protection, Starting,
Protection, 13.04.2014 18:20:33, SYSTEM, MG-PC, Protection, Malicious Website Protection, Started,
Update, 13.04.2014 18:20:46, SYSTEM, MG-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.3.27.1,
Update, 13.04.2014 18:20:48, SYSTEM, MG-PC, Manual, Malware Database, 2014.3.4.9, 2014.4.13.5,
Protection, 13.04.2014 18:20:49, SYSTEM, MG-PC, Protection, Refresh, Starting,
Protection, 13.04.2014 18:20:49, SYSTEM, MG-PC, Protection, Malicious Website Protection, Stopping,
Protection, 13.04.2014 18:20:49, SYSTEM, MG-PC, Protection, Malicious Website Protection, Stopped,
Protection, 13.04.2014 18:20:53, SYSTEM, MG-PC, Protection, Refresh, Success,
Protection, 13.04.2014 18:20:53, SYSTEM, MG-PC, Protection, Malicious Website Protection, Starting,
Protection, 13.04.2014 18:20:54, SYSTEM, MG-PC, Protection, Malicious Website Protection, Started,
Protection, 13.04.2014 18:27:39, SYSTEM, MG-PC, Protection, Malware Protection, Starting,
Protection, 13.04.2014 18:27:39, SYSTEM, MG-PC, Protection, Malware Protection, Started,
Protection, 13.04.2014 18:27:39, SYSTEM, MG-PC, Protection, Malicious Website Protection, Starting,
Protection, 13.04.2014 18:28:27, SYSTEM, MG-PC, Protection, Malicious Website Protection, Started,

(end)
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 13.04.2014
Suchlauf-Zeit: 18:25:28
Logdatei: Suchlauf.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.04.13.05
Rootkit Datenbank: v2014.03.27.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: mg

Suchlauf-Art: Hyper-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 190310
Verstrichene Zeit: 4 Min, 21 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Deaktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 3
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\updateJotzey.exe, 3432, Löschen bei Neustart, [489186a3f289171f72e789ccdd2417e9]
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\utilJotzey.exe, 3464, Löschen bei Neustart, [16c3a4853a41ec4adc7d3025ce3311ef]
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\Jotzey.BrowserAdapter.exe, 5208, Löschen bei Neustart, [35a441e8463557dfe9e9f67bbf430df3]

Module: 1
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\JotzeyBA.dll, Löschen bei Neustart, [35a441e8463557dfe9e9f67bbf430df3],

Registrierungsschlüssel: 16
PUP.Optional.Jotzey.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Jotzey, In Quarantäne, [489186a3f289171f72e789ccdd2417e9],
PUP.Optional.Jotzey.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util Jotzey, In Quarantäne, [16c3a4853a41ec4adc7d3025ce3311ef],
PUP.Optional.Jotzey.A, HKLM\SOFTWARE\CLASSES\CLSID\{63a20a19-b1e6-4355-ab4c-28553af40ca2}, In Quarantäne, [a9307cad0f6c360053054a0b70914eb2],
PUP.Optional.Jotzey.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{4e1ca9b1-c816-4b8a-bd4c-546fbc5008de}, In Quarantäne, [a9307cad0f6c360053054a0b70914eb2],
PUP.Optional.Jotzey.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{682E055E-0863-4334-918C-29CD4F3F4D96}, In Quarantäne, [a9307cad0f6c360053054a0b70914eb2],
PUP.Optional.Jotzey.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{63A20A19-B1E6-4355-AB4C-28553AF40CA2}, In Quarantäne, [a9307cad0f6c360053054a0b70914eb2],
PUP.Optional.Jotzey.A, HKLM\SOFTWARE\CLASSES\CLSID\{63A20A19-B1E6-4355-AB4C-28553AF40CA2}\INPROCSERVER32, In Quarantäne, [a9307cad0f6c360053054a0b70914eb2],
PUP.Optional.Jotzey.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Jotzey, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, HKLM\SOFTWARE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\awesomehpSoftware, In Quarantäne, [5f7a9495c1ba5adc1f9dcba9b052bb45],
PUP.Optional.Jotzey.A, HKLM\SOFTWARE\Jotzey, In Quarantäne, [efea2ffa6d0e0135755f5d1418ea6e92],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\SYSTEMK\General, In Quarantäne, [0ecba9806c0f6bcbdf32204a6f9340c0],
PUP.Optional.Jotzey.A, HKU\S-1-5-21-2282301582-224385206-936070459-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Jotzey, In Quarantäne, [88510e1b3a41c175755e68096d955aa6],

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 4
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey, Löschen bei Neustart, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin, Löschen bei Neustart, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\plugins, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\TEMP, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],

Dateien: 24
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\updateJotzey.exe, Löschen bei Neustart, [489186a3f289171f72e789ccdd2417e9],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\utilJotzey.exe, Löschen bei Neustart, [16c3a4853a41ec4adc7d3025ce3311ef],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\JotzeyBHO.dll, In Quarantäne, [a9307cad0f6c360053054a0b70914eb2],
PUP.Optional.DefaultSearch.A, C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\searchplugins\default-search.xml, In Quarantäne, [e3f6e445423933039a6c0a60f012f709],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\Jotzey.ico, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\0, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\JotzeyUninstall.exe, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\updateJotzey.InstallState, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\7za.exe, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\BrowserAdapterS.7z, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\FilterApp_C.exe, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\Jotzey.BrowserAdapter.exe, Löschen bei Neustart, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\JotzeyBA.dll, Löschen bei Neustart, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\JotzeyBAApp.dll, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\sqlite3.dll, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\utilJotzey.InstallState, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\plugins\Jotzey.Bromon.dll, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\plugins\Jotzey.BrowserAdapterS.dll, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\plugins\Jotzey.CompatibilityChecker.dll, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\plugins\Jotzey.FFUpdate.dll, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\plugins\Jotzey.IEUpdate.dll, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.Jotzey.A, C:\Program Files\Jotzey\bin\plugins\Jotzey.PurBrowse.dll, In Quarantäne, [35a441e8463557dfe9e9f67bbf430df3],
PUP.Optional.DefaultSearch.A, C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\preferences, Gut: (), Schlecht: (      "startup_urls": [ "hxxp://www.google.com", "hxxp://www.default-search.net?sid=476&aid=146&itype=n&ver=12302&tm=314&src=hmp" ],), Ersetzt,[cf0ac465fe7d14222abfe46613f1a15f]
PUP.Optional.DefaultSearch.A, C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "hxxp://www.default-search.net/search?sid=476&aid=146&itype=n&ver=12302&tm=314&src=ds&p=");), Ersetzt,[50891b0e6b101e18e85be8632ed643bd]

Physische Sektoren: 0
(No malicious items detected)


(end)
Ich denke, ich habe alle Protokolle geladen.

Liebe Grüsse und nochmals vielen herzlichen Dank! Du bist der Grösste für mich!!!! marcel

cosinus 13.04.2014 23:17
Zitat:
Suchlauf-Art: Hyper-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 190310
Verstrichene Zeit: 4 Min, 21 Sek
Den Scan mit Malwarebytes hast du falsch gemacht. Bitte richtig nochmal machen.

opinion 14.04.2014 12:17
Grüezi Cosinus

Ich bin wohl doch ein Dummerle. Ein Laie halt ...
Also hier der zweite Anlauf:
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 14.04.2014
Suchlauf-Zeit: 13:14:01
Logdatei: Anti-Malware-Logdatei.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.04.14.03
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: mg

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 236684
Verstrichene Zeit: 7 Min, 44 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 2
PUP.Optional.DefaultSearch.A, C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: (      "startup_urls": [ "hxxp://www.google.com", "hxxp://www.default-search.net?sid=476&aid=146&itype=n&ver=12302&tm=314&src=hmp" ],), Ersetzt,[728e54ac49b78c7406a3e86354b0d927]
PUP.Optional.DefaultSearch.A, C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "hxxp://www.default-search.net/search?sid=476&aid=146&itype=n&ver=12302&tm=314&src=ds&p=");), Ersetzt,[bc448e729f6146bae61d99b38e761be5]

Physische Sektoren: 0
(No malicious items detected)


(end)
Ich hoffe, dass es jetzt wenigstens die richtigen Daten sind.
Es wurden mir 2 Fehlerhafte Dateien angezeigt, welche ich in den Quarantäne-Ordner vierschiebt habe.

Gruss marcel

cosinus 14.04.2014 14:30
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
FF DefaultSearchEngine: default-search.net
FF SearchEngineOrder.1: default-search.net
C:\Windows\Tasks\Wise Turbo Checker.job
C:\Users\mg\AppData\Roaming\CamLayout.ini
C:\Users\mg\AppData\Roaming\CamShapes.ini
C:\Users\mg\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkw9lxg.dll
C:\Users\mg\AppData\Local\Temp\Quarantine.exe
C:\Users\mg\AppData\Local\Temp\SettingsManagerSetup.exe

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


opinion 14.04.2014 17:04
Hallo Cosinus

Ich habe das Programm FRST neu herunter geladen und gestartet. Den Fix-Button habe ich auch gedrückt. Dann kommt aber eine Fehlermeldung.

No fixlist.txt found.
The fixlist.txt should be in the same folder/directory the tools is located.

Wenn ich den Text richtig interpretieren, dann muss das Fixlog.txt in dem gleichen Verzeichnis sein wie das Programm. Das ist es bei mir (Downloads)
Was läuft schief?

Muss ich warten mit dem Drücken des Fix-Buttons bis der Scan durchgeführt wurde?

Gruss marcel

cosinus 15.04.2014 08:53
Zitat:
Was läuft schief?
Das Lesen und Umsetzen der Anleitungen von dir läuft schief :D
Denn in unseren Anleitungen steht immer, dass du die Tools auf den Desktop und nicht woanders ablegen sollst.

opinion 16.04.2014 10:32
Grüezi Cosinus

Sorry! Ich habe den Vermerk übersehen, dass alles auf den Desktop muss.

Also, jetzt habe ich die Daten nochmals aufbereitet. Diese sehen so aus:

Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 14-04-2014
Ran by mg at 2014-04-16 10:04:37 Run:1
Running from C:\Users\mg\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
FF DefaultSearchEngine: default-search.net
FF SearchEngineOrder.1: default-search.net
C:\Windows\Tasks\Wise Turbo Checker.job
C:\Users\mg\AppData\Roaming\CamLayout.ini
C:\Users\mg\AppData\Roaming\CamShapes.ini
C:\Users\mg\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkw9lxg.dll
C:\Users\mg\AppData\Local\Temp\Quarantine.exe
C:\Users\mg\AppData\Local\Temp\SettingsManagerSetup.exe
       
*****************

HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\jumpflip => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\volaro => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\vonteera => Key deleted successfully.
Firefox DefaultSearchEngine deleted successfully.
Firefox SearchEngineOrder.1 deleted successfully.
C:\Windows\Tasks\Wise Turbo Checker.job => Moved successfully.
C:\Users\mg\AppData\Roaming\CamLayout.ini => Moved successfully.
C:\Users\mg\AppData\Roaming\CamShapes.ini => Moved successfully.
C:\Users\mg\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkw9lxg.dll => Moved successfully.
C:\Users\mg\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\mg\AppData\Local\Temp\SettingsManagerSetup.exe => Moved successfully.

==== End of Fixlog ====
Gruss marcel

cosinus 16.04.2014 10:47
Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Scan klicken

http://saved.im/mtg0mjy4yjlu/2014-04...ryscantool.png

opinion 16.04.2014 18:46
Guten Abend Cosinus

Hier die neuen Listings:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-04-2014 01
Ran by mg at 2014-04-16 19:43:04
Running from C:\Users\mg\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

ActivePresenter (HKLM\...\{A2A40277-D807-4754-95A3-2F294C2C51D3}_is1) (Version: 3.9.0 - Atomi Systems, Inc.)
Adobe Flash Player 13 ActiveX (HKLM\...\{8F9B1C8E-F50E-4139-8701-45016021E102}) (Version: 13.0.0.182 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\{28ADCCAD-3C23-44A1-A93F-47AA176F7AD7}) (Version: 13.0.0.182 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Apple Application Support (HKLM\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo ClipFinder HD v.2.3.6 (HKLM\...\{0A11EA01-36EF-0070-F54C-E06E25BC1924}_is1) (Version: 2.3.6 - Ashampoo GmbH & Co. KG)
avast! Free Antivirus (HKLM\...\avast) (Version: 9.0.2016 - Avast Software)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite DCP-9010CN (HKLM\...\{A1BBEE16-49B1-42F2-95B8-54C8C6A1C0C3}) (Version: 2.0.1.0 - Brother Industries, Ltd.)
CameraHelperMsi (Version: 13.40.836.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4214 - CDBurnerXP)
ConvertHelper 2.2 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version: - DownloadHelper)
Das Planetarium 1900 - 2100 (HKLM\...\Das Planetarium 1900 - 2100) (Version: 13 - www.astroexcel.de)
DMG Extractor (HKCU\...\DMG Extractor) (Version: 1.3.2.0 - Reincubate Ltd)
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FastStone Capture 5.3 (HKLM\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
FileZilla Client 3.7.3 (HKLM\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
Folderico 4.0 RC12 (HKLM\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org ))
FreeMind (HKLM\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 0.9.0 - )
Google Chrome (HKLM\...\Google Chrome) (Version: 34.0.1847.116 - Google Inc.)
Google Update Helper (Version: 1.3.23.9 - Google Inc.) Hidden
GoToMeeting 5.5.0.1133 (HKCU\...\GoToMeeting) (Version: 5.5.0.1133 - CitrixOnline)
IncrediMail (Version: 6.6.0.5259 - IncrediMail) Hidden
IncrediMail 2.5 (HKLM\...\IncrediMail) (Version: 6.6.0.5259 - IncrediMail Ltd.)
iTunes (HKLM\...\{2F21564D-DE05-4C6D-B21E-08B9D313FAB3}) (Version: 11.1.5.5 - Apple Inc.)
Jing (HKLM\...\{22800204-9E53-45C7-B6F3-5BB0F1C1A147}) (Version: 2.8.13007.1 - TechSmith Corporation)
LibreOffice 4.1.0.4 (HKLM\...\{F8478020-D98E-49FB-BA14-07A534AED99C}) (Version: 4.1.0.4 - The Document Foundation)
Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.40 - Logitech Inc.)
Logitech Z-series Software 1.04 (HKLM\...\{A157AC1C-DF44-481A-81E7-17AE00239818}) (Version: 1.04.153 - Logitech)
LWS Facebook (Version: 13.31.1038.0 - Logitech) Hidden
LWS Gallery (Version: 13.40.835.0 - Logitech) Hidden
LWS Help_main (Version: 13.40.845.0 - Logitech) Hidden
LWS Launcher (Version: 13.40.836.0 - Logitech) Hidden
LWS Motion Detection (Version: 13.40.844.0 - Logitech) Hidden
LWS Pictures And Video (Version: 13.40.844.0 - Logitech) Hidden
LWS Twitter (Version: 13.30.1346.0 - Logitech) Hidden
LWS Video Mask Maker (Version: 13.30.1379.0 - Logitech) Hidden
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
LWS Webcam Software (Version: 13.31.1038.0 - Logitech) Hidden
LWS WLM Plugin (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (Version: 13.31.1038.0 - Logitech) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4605.1003 - Microsoft Corporation)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Publisher 97 (HKLM\...\MSPUB4) (Version: - )
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MozBackup 1.5.1 (HKLM\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MPC-HC 1.7.0 (HKLM\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
ooVoo (HKLM\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 3.6.1008 - ooVoo LLC.)
Oovoo Toolbar (HKLM\...\{4F564F32-5637-4300-76A7-A758B70C0A06}) (Version: 12.10.6.5033 - APN, LLC)
Photo Notifier and Animation Creator (HKLM\...\Photo Notifier and Animation Creator) (Version: 1.0.0.1009 - IncrediMail Ltd.)
Photo Notifier and Animation Creator (Version: 1.0.0.1009 - Ihr Firmenname) Hidden
Python 3.3.3 (HKLM\...\{39b6eb84-331c-3657-ad2e-837537ddf04f}) (Version: 3.3.3150 - Python Software Foundation)
QuickTime 7 (HKLM\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Readiris Pro 11 (HKLM\...\{7C2B745A-E7F1-41F1-B9BB-3DDB8D52E4CE}) (Version: 11.00.5062 - I.R.I.S.)
RealDownloader (Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Revo Uninstaller 1.94 (HKLM\...\Revo Uninstaller) (Version: 1.94 - VS Revo Group)
Scribus 1.4.3 (HKLM\...\Scribus 1.4.3) (Version: 1.4.3 - The Scribus Team)
Shark007 Advanced Codecs (HKLM\...\{8C0CAA7A-3272-4991-A808-2C7559DE3409}) (Version: 4.1.5 - Shark007)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
SmartTools Publishing • Excel CellSpot (HKLM\...\SmartToolsCellSpotv3.00) (Version: v3.00 - SmartTools Publishing)
SmartTools Publishing • Excel Finanzplan 2013 (HKLM\...\SmartToolsFinanzplan 2013v4.00) (Version: v4.00 - SmartTools Publishing)
SmartTools Publishing • Excel Formel-Tools (HKLM\...\SmartToolsFormel-Toolsv5.00) (Version: v5.00 - SmartTools Publishing)
SmartTools Publishing • Excel Inhaltsverzeichnis (HKLM\...\SmartToolsInhaltsverzeichnisv5.00) (Version: v5.00 - SmartTools Publishing)
SmartTools Publishing • Excel Jahreskalender 2014 (HKLM\...\SmartToolsJahreskalender 2014v6.00) (Version: v6.00 - SmartTools Publishing)
SmartTools Publishing • Excel Markierungs-Assistent (HKLM\...\SmartToolsMarkierungs-Assistentv3.00) (Version: v3.00 - SmartTools Publishing)
SmartTools Publishing • Excel Monatskalender 2014 (HKLM\...\SmartToolsMonatskalender 2014v2.00) (Version: v2.00 - SmartTools Publishing)
SmartTools Publishing • Excel Titelleisten-Manager (HKLM\...\SmartToolsTitelleisten-Managerv2.50) (Version: v2.50 - SmartTools Publishing)
SmartTools Publishing • Outlook Bildervorschau (HKCU\...\SmartToolsOutlookBildervorschau) (Version: 3.00 - SmartTools Publishing)
StreamTransport version: 1.1.1.1 (HKLM\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version: - )
TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.26038 - TeamViewer)
Textbausteinverwaltung Deluxe (HKLM\...\{FBFCE6BF-1879-484C-9406-B8961FEF1C7A}) (Version: 1.0.15.520 - JBSoftware)
Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: 8.01 - Ghisler Software GmbH)
Ulead PhotoImpact 12 (HKLM\...\{11AFE21E-B193-430D-B57A-DFF7815BB962}) (Version: 12.0 - Ulead System)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WinHTTrack Website Copier 3.47-14 (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.47.14 - HTTrack)
WinRAR 5.00 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
Wise Care 365 version 2.45 (HKLM\...\{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1) (Version: 2.45 - WiseCleaner.com, Inc.)
Wise Registry Cleaner 7.94 (HKLM\...\Wise Registry Cleaner_is1) (Version: 7.94 - WiseCleaner.com, Inc.)
XMind 2012 (v3.3.1) (HKLM\...\XMind_is1) (Version: 3.3.1.201212250029 - XMind Ltd.)
XnView 2.04 (HKLM\...\XnView_is1) (Version: 2.04 - Gougelet Pierre-e)

==================== Restore Points =========================

10-04-2014 08:07:30 Installed Adobe Flash Player 13 Plugin.
10-04-2014 08:08:37 Installed Adobe Flash Player 13 ActiveX.
10-04-2014 13:55:16 avast! antivirus system restore point
11-04-2014 11:01:12 Windows Live Essentials
11-04-2014 11:10:30 Windows Live Essentials
11-04-2014 11:22:17 DirectX wurde installiert
11-04-2014 11:23:26 WLSetup
11-04-2014 11:54:54 Windows Live Essentials
11-04-2014 12:00:46 DirectX wurde installiert
11-04-2014 12:01:13 DirectX wurde installiert
11-04-2014 12:01:35 DirectX wurde installiert
11-04-2014 12:02:13 WLSetup
11-04-2014 12:14:23 Windows Live Essentials
11-04-2014 12:14:43 DirectX wurde installiert
11-04-2014 12:15:04 DirectX wurde installiert
11-04-2014 12:15:25 DirectX wurde installiert
11-04-2014 12:15:40 WLSetup
12-04-2014 07:47:31 Windows Live Essentials
12-04-2014 07:47:47 WLSetup
13-04-2014 17:00:16 Windows-Sicherung
15-04-2014 05:09:36 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {10D98D18-AF9C-4548-A454-0F70A2EB28B7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-11] (Google Inc.)
Task: {19D34D98-EE60-4839-8812-95D3AD7861F6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX86\OfficeC2RClient.exe [2014-03-30] (Microsoft Corporation)
Task: {4D380163-48E2-4BF3-93AF-2A7E936DEBA8} - System32\Tasks\{7826D83B-DF63-4D00-9958-03C64CC7B1A0} => D:\Downloads\Firefox_Setup_de28.0.exe
Task: {7385F501-2963-4287-A637-3D028D915225} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {7B74A791-AE80-47C6-AB22-58CE23E2D6CE} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9A86603D-BE27-43C8-8C67-FE02C8526CD0} - System32\Tasks\avast! Emergency Update => C:\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-10] (AVAST Software)
Task: {A38F5CA6-52D1-44CB-AF84-B69A6052894C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-10] (Adobe Systems Incorporated)
Task: {A745FD01-61D1-42CF-85A0-CD5D8A838F86} - System32\Tasks\Wise Turbo Checker => C:\Wise\Wise Care 365\WiseTurbo.exe [2013-05-13] (WiseCleaner.COM)
Task: {C1007386-87D6-4917-B2EF-E3C8D41F8549} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-11] (Google Inc.)
Task: {C8D2ACA8-1435-4150-980A-63348EC3C8E0} - System32\Tasks\{4A1EB6D2-0AE1-48DA-AC4B-A5942BBC8FE4} => D:\Downloads\Firefox_Setup_de28.0.exe
Task: {C9F7C0CD-EF65-4FC2-A82A-7F8605312B33} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {DA3A50B3-F03E-4BF9-94C9-40BB2586D02F} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {E2062FF8-15BD-48FD-9E06-07A6B4ABB1D0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: {E502E062-CE9A-4D01-938B-E0E45A913209} - System32\Tasks\CCleanerSkipUAC => C:\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {E7292A6F-9275-4428-96AD-64B597CFE8F4} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {E8EE2DA5-2C5A-446E-8E6D-E6B662FCD853} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-04-12] (Microsoft Corporation)
Task: {EBD5B980-45E4-410C-A00F-3F4285D71E54} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2282301582-224385206-936070459-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-04-16 07:30 - 2014-04-16 07:30 - 02212352 _____ () C:\AVAST Software\Avast\defs\14041501\algo.dll
2014-04-16 19:04 - 2014-04-16 19:04 - 02215424 _____ () C:\AVAST Software\Avast\defs\14041601\algo.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-29 12:13 - 2013-10-31 18:14 - 00077992 _____ () C:\Program Files\Microsoft Office 15\ClientX86\ApiClient.dll
2014-01-13 13:01 - 2014-03-25 07:08 - 00420008 _____ () C:\Program Files\Microsoft Office 15\ClientX86\StreamServer.dll
2013-08-14 16:19 - 2013-08-14 16:19 - 00039056 _____ () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
2013-05-07 16:10 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2013-08-07 21:25 - 2013-08-07 21:25 - 00093696 _____ () C:\FileZilla FTP Client\fzshellext.dll
2013-05-29 23:27 - 2012-12-18 10:49 - 01703936 _____ () C:\XnView\ShellEx\XnViewShellExt.dll
2013-10-16 09:26 - 2013-10-16 09:26 - 19336120 _____ () C:\AVAST Software\Avast\libcef.dll
2014-04-12 10:37 - 2014-04-12 10:37 - 00316584 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00033128 _____ () C:\Program Files\IncrediMail\Bin\IMHttpComm.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00072104 _____ () C:\Program Files\IncrediMail\Bin\wlessfp1.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00272808 _____ () C:\Program Files\IncrediMail\Bin\ImLookExU.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00080296 _____ () C:\Program Files\IncrediMail\bin\ImAppRU.dll
2013-05-07 15:36 - 2013-05-07 15:36 - 00133544 _____ () C:\Program Files\IncrediMail\Bin\ImComUtlU.dll
2013-07-10 18:07 - 2013-07-10 18:07 - 00756888 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2007-02-12 21:51 - 2007-02-12 21:51 - 01111552 _____ () C:\FastStone Capture\FSCapture.exe
2014-04-13 19:32 - 2014-04-13 19:32 - 03642480 _____ () C:\Mozilla Firefox\mozjs.dll
2013-01-23 13:55 - 2013-01-23 13:55 - 00108888 _____ () C:\Program Files\IncrediMail\Bin\pmc.dll
2014-04-10 10:07 - 2014-04-10 10:07 - 16351920 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_182.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/16/2014 07:43:19 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/16 19:43:19.404]: [00000364]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/16/2014 07:42:44 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/16 19:42:44.298]: [00000364]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/16/2014 07:42:39 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/16 19:42:39.148]: [00000364]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.0.13]

Error: (04/16/2014 07:42:06 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/16 19:42:06.402]: [00000364]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/16/2014 07:41:31 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/16 19:41:31.299]: [00000364]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/16/2014 07:41:26 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/16 19:41:26.149]: [00000364]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.0.13]

Error: (04/16/2014 07:40:53 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/16 19:40:53.421]: [00000364]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/16/2014 07:40:18 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/16 19:40:18.316]: [00000364]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error

Error: (04/16/2014 07:40:13 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/16 19:40:13.153]: [00000364]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.0.13]

Error: (04/16/2014 07:39:40 PM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/04/16 19:39:40.446]: [00000364]: GetDeviceIpAddress: GetAddressByName [BRN001BA928EF40] Error


System errors:
=============
Error: (04/16/2014 07:04:31 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (04/16/2014 08:38:19 AM) (Source: Microsoft-Windows-Application-Experience) (User: NT-AUTORITÄT)
Description: Der Dienst "Programmkompatibilitäts-Assistent" konnte Phase 2 nicht initialisieren.

Error: (04/16/2014 08:37:46 AM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (04/16/2014 08:37:46 AM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (04/16/2014 07:29:39 AM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (04/16/2014 07:29:39 AM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (04/15/2014 08:39:02 AM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (04/15/2014 08:03:40 AM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (04/15/2014 07:05:20 AM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (04/15/2014 07:05:20 AM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter


Microsoft Office Sessions:
=========================
Error: (06/14/2013 10:00:39 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7898 seconds with 3960 seconds of active time. This session ended with a crash.


==================== Memory info ===========================

Percentage of memory in use: 35%
Total physical RAM: 3327.05 MB
Available physical RAM: 2139.88 MB
Total Pagefile: 6652.4 MB
Available Pagefile: 4878.75 MB
Total Virtual: 2047.88 MB
Available Virtual: 1912.18 MB

==================== Drives ================================

Drive c: (Drive_C) (Fixed) (Total:593.39 GB) (Free:552.92 GB) NTFS
Drive d: (Drive_D) (Fixed) (Total:781.25 GB) (Free:724.25 GB) NTFS
Drive e: (Drive_E) (Fixed) (Total:488.28 GB) (Free:275.48 GB) NTFS
Drive h: (Drive_H) (Fixed) (Total:465.76 GB) (Free:361.33 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 1E6F95B9)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 2119A196)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=781 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=488 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=593 GB) - (Type=07 NTFS)

==================== End Of Log ============================


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-04-2014 01
Ran by mg (administrator) on MG-PC on 16-04-2014 19:42:46
Running from C:\Users\mg\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AVAST Software) C:\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(AVAST Software) C:\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Apple\iTunes\iTunesHelper.exe
(APN LLC.) C:\Users\mg\AppData\Local\VNT\vntldr.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\ImApp.exe
(Microsoft Corporation) C:\Microsoft Office 2007\Office12\WINWORD.EXE
() C:\FastStone Capture\FSCapture.exe
(Mozilla Corporation) C:\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\IncMail.exe
(Mozilla Corporation) C:\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-10] (AVAST Software)
HKLM\...\Run: [VNT] => C:\Program Files\VNT\vntldr.exe [196048 2014-03-19] (APN LLC.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Apple\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\Update\realsched.exe [295512 2014-03-21] (RealNetworks, Inc.)
HKU\S-1-5-21-2282301582-224385206-936070459-1000\...\Run: [IncrediMail] => C:\Program Files\IncrediMail\bin\IncMail.exe [440744 2013-05-07] (IncrediMail, Ltd.)
HKU\S-1-5-21-2282301582-224385206-936070459-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2282301582-224385206-936070459-1000\...\Policies\Explorer: [DisallowRun] 1
Startup: C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bluewin.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ch.msn.com/default.aspx?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x24EF38FB1F4BCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-ch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=146&itype=n&ver=12302&tm=314&src=ds&p={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=146&itype=n&ver=12302&tm=314&src=ds&p={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 62.2.24.158 62.2.17.60 62.2.24.162 62.2.17.61

FireFox:
========
FF ProfilePath: C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.bluewin.ch/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Apple\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\mg\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Extension: DownloadHelper - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-12]
FF Extension: LEOs Dictionaries - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\contextMenuExtension@leo.org.xpi [2014-04-14]
FF Extension: Youtube Downloader - Media Downloader - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\paulsaintuzb@gmail.com.xpi [2014-04-12]
FF Extension: www.Tran - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\trident@trident.com.ua.xpi [2014-04-16]
FF Extension: Adblock Plus - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-12]
FF Extension: DownThemAll! - C:\Users\mg\AppData\Roaming\Mozilla\Firefox\Profiles\m4ok0723.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-04-12]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\AVAST Software\Avast\WebRep\FF [2013-05-07]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-03-21]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF StartMenuInternet: FIREFOX.EXE - C:\Mozilla Firefox\firefox.exe

Chrome:
=======
CHR HomePage: hxxp://www.bluewin.ch/
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.104) - C:\Users\mg\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
CHR Plugin: (VLC Web Plugin) - C:\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (Google Docs) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-11]
CHR Extension: (Google Drive) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-11]
CHR Extension: (YouTube) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-11]
CHR Extension: (Google-Suche) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-11]
CHR Extension: (RealDownloader) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-08-11]
CHR Extension: (Google Wallet) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-03]
CHR Extension: (Google Mail) - C:\Users\mg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-11]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-10]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\mg\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-07-26]
CHR HKLM\...\Chrome\Extension: [opjebaomffhbebmkanbennmagkdjkclo] - C:\ProgramData\AskPartnerNetwork\Toolbar\OVO2V7C\CRX\ToolbarCR.crx [2013-07-26]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-10] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1520824 2014-03-30] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2011-12-15] (Logitech Inc.)
S2 WiseBootAssistant; C:\Wise\Wise Care 365\BootTime.exe [580232 2013-05-13] (WiseCleaner.com)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-04-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-04-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-04-10] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [776976 2014-04-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411552 2014-04-10] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [67264 2014-04-10] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180760 2014-04-10] ()
R3 debutfilter; C:\Windows\System32\DRIVERS\debutfilterx86.sys [43344 2014-03-23] ()
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-14] (Ralink Technology Corp.)
R1 wStLib; C:\Windows\System32\drivers\wStLib.sys [52920 2014-03-22] (StdLib)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-16 19:42 - 2014-04-16 19:42 - 00016787 _____ () C:\Users\mg\Desktop\FRST.txt
2014-04-16 19:42 - 2014-04-16 19:42 - 00000000 ____D () C:\Users\mg\Desktop\FRST-OlderVersion
2014-04-16 09:35 - 2014-04-16 19:42 - 01146368 _____ (Farbar) C:\Users\mg\Desktop\FRST.exe
2014-04-14 12:47 - 2014-04-14 12:47 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\mg\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-13 19:32 - 2014-04-13 19:32 - 00000000 ____D () C:\Mozilla Firefox
2014-04-13 18:35 - 2014-04-13 18:35 - 00000000 ____D () C:\Windows\ERUNT
2014-04-13 18:20 - 2014-04-14 13:05 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-13 18:20 - 2014-04-14 12:48 - 00000708 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-13 18:20 - 2014-04-14 12:48 - 00000000 ____D () C:\Malwarebytes Anti-Malware
2014-04-13 18:20 - 2014-04-13 18:20 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-13 18:20 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-13 18:20 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-13 18:20 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-13 14:31 - 2014-04-13 14:31 - 00000000 ____D () C:\Device
2014-04-12 14:52 - 2014-04-12 14:52 - 00002811 _____ () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wie Du ein Wordpress update richtig durchführst - YouTube.lnk
2014-04-12 14:38 - 2014-04-12 14:38 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-12 12:05 - 2014-04-16 19:42 - 00000000 ____D () C:\FRST
2014-04-11 18:21 - 2014-04-14 07:04 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-11 18:21 - 2014-04-11 18:21 - 00000725 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-11 16:31 - 2014-04-11 17:12 - 06000640 _____ () C:\Program Files\GUT7A10.tmp
2014-04-11 16:31 - 2014-04-11 17:12 - 00000000 ____D () C:\Program Files\GUM79FF.tmp
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieUserList
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieSiteList
2014-04-11 16:10 - 2014-04-13 18:27 - 00013270 _____ () C:\Windows\PFRO.log
2014-04-11 16:06 - 2014-04-16 19:04 - 00001904 _____ () C:\Windows\setupact.log
2014-04-11 16:06 - 2014-04-11 16:06 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-11 14:01 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-04-11 14:00 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-04-11 13:40 - 2014-04-11 13:40 - 00000020 _____ () C:\Windows\”ôZ
2014-04-11 13:22 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-04-11 13:22 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-04-11 13:22 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-04-11 13:22 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-04-11 13:01 - 2014-04-12 09:49 - 00000000 ____D () C:\Users\mg\AppData\Local\Windows Live
2014-04-11 13:00 - 2014-04-11 13:00 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-04-11 10:19 - 2014-04-16 19:04 - 00269703 _____ () C:\Windows\WindowsUpdate.log
2014-04-10 15:58 - 2014-04-10 15:58 - 00067264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-10 15:58 - 2014-04-10 15:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-09 09:16 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 09:16 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 09:16 - 2014-03-06 10:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-09 09:16 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-09 09:16 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-09 09:16 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-09 09:16 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-09 09:16 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-09 09:16 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-09 09:16 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-09 09:16 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-09 09:16 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-09 09:16 - 2014-03-06 09:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-09 09:16 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-09 09:16 - 2014-03-06 09:28 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-09 09:16 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-09 09:16 - 2014-03-06 09:18 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-09 09:16 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-09 09:16 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-09 09:16 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-09 09:16 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-09 09:16 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-09 09:16 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-09 09:16 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-09 09:16 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-09 09:16 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-09 09:03 - 2014-03-04 11:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 09:03 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 09:03 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 09:03 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 09:03 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 09:03 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-03-27 14:06 - 2014-03-27 14:06 - 00000000 ____D () C:\ProgramData\SmartTools
2014-03-23 16:51 - 2014-03-23 16:51 - 00000000 ____D () C:\Users\mg\AppData\Roaming\TechSmith
2014-03-23 16:03 - 2014-03-23 16:24 - 00000000 ____D () C:\ProgramData\NCH Software
2014-03-23 16:02 - 2014-03-23 16:32 - 00000000 ____D () C:\Users\mg\AppData\Roaming\NCH Software
2014-03-23 16:02 - 2014-03-23 16:32 - 00000000 ____D () C:\Program Files\NCH Software
2014-03-23 16:02 - 2014-03-23 16:02 - 00043344 _____ () C:\Windows\system32\Drivers\debutfilterx86.sys
2014-03-23 15:45 - 2014-03-23 15:45 - 00000096 _____ () C:\Users\mg\AppData\Roaming\version2.xml
2014-03-22 12:47 - 2014-03-22 12:47 - 00052920 _____ (StdLib) C:\Windows\system32\Drivers\wStLib.sys
2014-03-21 16:29 - 2014-03-21 16:29 - 00001241 _____ () C:\Users\Public\Desktop\RealPlayer.lnk
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\ProgramData\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\Common Files\xing shared
2014-03-21 16:28 - 2014-04-13 17:53 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Real
2014-03-21 16:28 - 2014-03-21 16:28 - 00272896 _____ (Progressive Networks) C:\Windows\system32\pncrt.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\system32\rmoc3260.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5016.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5032.dll

==================== One Month Modified Files and Folders =======

2014-04-16 19:42 - 2014-04-16 19:42 - 00016787 _____ () C:\Users\mg\Desktop\FRST.txt
2014-04-16 19:42 - 2014-04-16 19:42 - 00000000 ____D () C:\Users\mg\Desktop\FRST-OlderVersion
2014-04-16 19:42 - 2014-04-16 09:35 - 01146368 _____ (Farbar) C:\Users\mg\Desktop\FRST.exe
2014-04-16 19:42 - 2014-04-12 12:05 - 00000000 ____D () C:\FRST
2014-04-16 19:27 - 2013-05-07 15:34 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-16 19:19 - 2013-08-11 14:37 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-16 19:16 - 2013-08-11 14:37 - 00001086 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-16 19:04 - 2014-04-11 16:06 - 00001904 _____ () C:\Windows\setupact.log
2014-04-16 19:04 - 2014-04-11 10:19 - 00269703 _____ () C:\Windows\WindowsUpdate.log
2014-04-16 10:48 - 2013-10-17 10:02 - 00000000 ____D () C:\Users\mg\AppData\Roaming\vlc
2014-04-16 08:45 - 2009-07-14 06:34 - 00015360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-16 08:45 - 2009-07-14 06:34 - 00015360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-16 08:38 - 2013-05-19 13:41 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Wise Care 365
2014-04-16 08:37 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-14 13:05 - 2014-04-13 18:20 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-14 12:48 - 2014-04-13 18:20 - 00000708 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-14 12:48 - 2014-04-13 18:20 - 00000000 ____D () C:\Malwarebytes Anti-Malware
2014-04-14 12:47 - 2014-04-14 12:47 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\mg\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-14 07:04 - 2014-04-11 18:21 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-13 19:32 - 2014-04-13 19:32 - 00000000 ____D () C:\Mozilla Firefox
2014-04-13 18:35 - 2014-04-13 18:35 - 00000000 ____D () C:\Windows\ERUNT
2014-04-13 18:27 - 2014-04-11 16:10 - 00013270 _____ () C:\Windows\PFRO.log
2014-04-13 18:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help
2014-04-13 18:25 - 2009-07-14 04:04 - 00000530 _____ () C:\Windows\win.ini
2014-04-13 18:20 - 2014-04-13 18:20 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-13 18:12 - 2013-08-26 16:01 - 00000000 ____D () C:\AdwCleaner
2014-04-13 17:53 - 2014-03-21 16:28 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Real
2014-04-13 14:31 - 2014-04-13 14:31 - 00000000 ____D () C:\Device
2014-04-13 10:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-04-12 14:52 - 2014-04-12 14:52 - 00002811 _____ () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wie Du ein Wordpress update richtig durchführst - YouTube.lnk
2014-04-12 14:38 - 2014-04-12 14:38 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-12 13:29 - 2013-08-11 14:38 - 00002200 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-12 11:18 - 2014-01-13 13:01 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-04-12 09:49 - 2014-04-11 13:01 - 00000000 ____D () C:\Users\mg\AppData\Local\Windows Live
2014-04-12 09:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-04-11 18:36 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-04-11 18:21 - 2014-04-11 18:21 - 00000725 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-11 18:06 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-11 17:12 - 2014-04-11 16:31 - 06000640 _____ () C:\Program Files\GUT7A10.tmp
2014-04-11 17:12 - 2014-04-11 16:31 - 00000000 ____D () C:\Program Files\GUM79FF.tmp
2014-04-11 16:24 - 2013-05-07 15:14 - 00000000 ____D () C:\Users\mg\AppData\Local\Google
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieUserList
2014-04-11 16:13 - 2014-04-11 16:13 - 00000000 __SHD () C:\Users\mg\AppData\Local\EmieSiteList
2014-04-11 16:06 - 2014-04-11 16:06 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-11 16:04 - 2009-07-14 04:03 - 63176704 _____ () C:\Windows\system32\config\software.bak
2014-04-11 16:04 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\default.bak
2014-04-11 16:04 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\security.bak
2014-04-11 16:04 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\sam.bak
2014-04-11 13:40 - 2014-04-11 13:40 - 00000020 _____ () C:\Windows\”ôZ
2014-04-11 13:00 - 2014-04-11 13:00 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-04-11 11:06 - 2013-05-07 19:19 - 00106925 _____ () C:\Users\mg\Documents\Readiris.DUS
2014-04-11 01:09 - 2013-10-20 15:53 - 00000000 ____D () C:\Windows\Minidump
2014-04-10 23:26 - 2013-05-07 14:39 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-10 15:58 - 2014-04-10 15:58 - 00067264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-10 15:58 - 2014-04-10 15:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-10 15:58 - 2013-05-07 17:45 - 00776976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-10 15:58 - 2013-05-07 17:45 - 00411552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-04-10 15:58 - 2013-05-07 17:45 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-10 15:58 - 2013-05-07 17:45 - 00001739 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-10 15:58 - 2013-05-07 17:44 - 00180760 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-10 15:58 - 2013-05-07 17:44 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-10 15:58 - 2013-05-07 17:44 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-10 15:58 - 2013-05-07 15:44 - 00271264 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-10 10:52 - 2014-02-28 01:10 - 00000000 ____D () C:\Users\mg\AppData\Roaming\ActivePresenter
2014-04-10 10:08 - 2013-05-07 15:34 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-04-10 10:08 - 2013-05-07 15:34 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-04-09 16:36 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-04-09 09:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-04-09 09:07 - 2013-07-19 11:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 09:07 - 2013-05-07 18:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-09 09:05 - 2013-05-07 15:07 - 88028728 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-03 09:51 - 2014-04-13 18:20 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-13 18:20 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-13 18:20 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-02 13:12 - 2013-11-13 15:28 - 00000000 ____D () C:\Users\mg\AppData\Local\VNT
2014-04-02 13:12 - 2013-11-13 15:28 - 00000000 ____D () C:\Program Files\VNT
2014-03-28 20:43 - 2013-05-22 16:02 - 00000115 _____ () C:\Users\mg\AppData\Roaming\Camdata.ini
2014-03-28 20:42 - 2013-05-22 16:02 - 00004534 _____ () C:\Users\mg\AppData\Roaming\CamStudio.cfg
2014-03-28 19:03 - 2013-10-17 10:02 - 00000672 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-03-27 14:06 - 2014-03-27 14:06 - 00000000 ____D () C:\ProgramData\SmartTools
2014-03-27 14:06 - 2013-06-04 12:12 - 00000000 ____D () C:\SmartTools
2014-03-27 14:06 - 2013-05-15 15:49 - 00000000 ____D () C:\Users\mg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTools
2014-03-27 14:03 - 2013-05-15 15:44 - 00000000 ____D () C:\Users\mg\AppData\Roaming\SmartTools
2014-03-23 17:15 - 2013-05-07 14:37 - 00000000 ____D () C:\Users\mg
2014-03-23 16:52 - 2013-10-28 12:35 - 00000000 ____D () C:\Users\mg\AppData\Local\TechSmith
2014-03-23 16:51 - 2014-03-23 16:51 - 00000000 ____D () C:\Users\mg\AppData\Roaming\TechSmith
2014-03-23 16:32 - 2014-03-23 16:02 - 00000000 ____D () C:\Users\mg\AppData\Roaming\NCH Software
2014-03-23 16:32 - 2014-03-23 16:02 - 00000000 ____D () C:\Program Files\NCH Software
2014-03-23 16:24 - 2014-03-23 16:03 - 00000000 ____D () C:\ProgramData\NCH Software
2014-03-23 16:02 - 2014-03-23 16:02 - 00043344 _____ () C:\Windows\system32\Drivers\debutfilterx86.sys
2014-03-23 15:45 - 2014-03-23 15:45 - 00000096 _____ () C:\Users\mg\AppData\Roaming\version2.xml
2014-03-22 12:47 - 2014-03-22 12:47 - 00052920 _____ (StdLib) C:\Windows\system32\Drivers\wStLib.sys
2014-03-21 16:29 - 2014-03-21 16:29 - 00001241 _____ () C:\Users\Public\Desktop\RealPlayer.lnk
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\ProgramData\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\RealNetworks
2014-03-21 16:29 - 2014-03-21 16:29 - 00000000 ____D () C:\Program Files\Common Files\xing shared
2014-03-21 16:29 - 2014-03-06 10:36 - 00000000 ____D () C:\Users\mg\AppData\Roaming\RealNetworks
2014-03-21 16:29 - 2013-05-08 07:29 - 00000000 ____D () C:\Program Files\Real
2014-03-21 16:29 - 2013-05-08 07:28 - 00000000 ____D () C:\ProgramData\Real
2014-03-21 16:28 - 2014-03-21 16:28 - 00272896 _____ (Progressive Networks) C:\Windows\system32\pncrt.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\system32\rmoc3260.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5016.dll
2014-03-21 16:28 - 2014-03-21 16:28 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5032.dll
2014-03-21 12:07 - 2013-06-03 07:59 - 00000000 ____D () C:\Users\mg\AppData\Roaming\TeamViewer

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-09 16:28

==================== End Of Log ============================
--- --- ---


Gruss marcel


Alle Zeitangaben in WEZ +1. Es ist jetzt 13:38 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55