Hallo,

wenn ich eine 32Bit Java Anwendung starte, kommt nur: Could not create the Java Virtual Machine.

Jedoch funktioniert Java 64bit.

Ich habe Windows 7 Ultimate 64bit.

Kann mir jemand helfen?

Gruß
weoiss

Hi,

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Scan.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hier die FRST.txt

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-06-2013
Ran by User (administrator) on 15-06-2013 15:31:59
Running from C:\Users\User\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Samsung India Software Center) C:\Program Files\Samsung\FrameManager\sam_service.exe
(Samsung Electronics Co. Ltd) C:\Program Files\Samsung\FrameManager\sam_controller.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TeamSpeak Systems GmbH) C:\Program Files (x86)\Teamspeak3 Client\ts3client_win64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12445288 2012-01-16] (Realtek Semiconductor)
Winlogon\Notify\klogon: %SystemRoot%\System32\klogon.dll (Kaspersky Lab ZAO)
HKCU\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [19603048 2013-06-03] (Skype Technologies S.A.)
HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-21] (Microsoft Corporation)
HKCU\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-01-05] (Intel Corporation)
HKLM-x32\...\Run: [RoccatKonePure] "C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.EXE" [569040 2012-11-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe" [202328 2012-08-30] (Kaspersky Lab ZAO)
HKU\Default\...\Run: [Duden Korrektor SysTray] C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Default User\...\Run: [Duden Korrektor SysTray] C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Gast\...\Run: [Start WingMan Profiler] "C:\Program Files (x86)\Logitech\Profiler\lwemon.exe" /noui [77824 2004-04-23] (Logitech Inc.)
HKU\Gast\...\Run: [Duden Korrektor SysTray] C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Gast\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [19603048 2013-06-03] (Skype Technologies S.A.)
HKU\Gast\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd)
HKU\Gast\...\Policies\system: [LogonHoursAction] 2
HKU\Gast\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\UpdatusUser\...\Run: [StartWMDriverWiz] C:\Windows\system32\rundll32.exe C:\PROGRA~2\COMMON~1\Logitech\WmDrivers\wmwizard.dll,WMWizardMain [356352 2004-04-23] (Logitech Inc.)
HKU\UpdatusUser\...\Run: [Duden Korrektor SysTray] C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\UpdatusUser\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [19603048 2013-06-03] (Skype Technologies S.A.)
HKU\UpdatusUser\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd)
HKU\UpdatusUser\...\Policies\system: [LogonHoursAction] 2
HKU\UpdatusUser\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM-x32 - {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://de.search.yahoo.com/search/?p={searchTerms}&fr=vc_trans_de_8197
SearchScopes: HKCU - {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://de.search.yahoo.com/search/?p={searchTerms}&fr=vc_trans_de_8197
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: DNS Error Helper - {9B6B03F1-16CF-4491-BBBB-E872802DD717} - C:\ProgramData\DNSErrorHelper\bho.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\klwtbbho.dll (Kaspersky Lab ZAO)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.0.43.97 217.0.43.113

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\g2d9gli4.defaultextensions.ini
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://google.de/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\pdf.dll ()
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (ProxTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.1.0_0
CHR Extension: (Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.2.733_0
CHR Extension: (Virtual Keyboard) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.2.733_0
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (Anti-Banner) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.2.733_0

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [743992 2009-12-21] (Infowatch)
R4 FrameManager Service; C:\Program Files\Samsung\FrameManager\sam_service.exe [182784 2010-03-03] (Samsung India Software Center)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-04-24] ()
S3 Samsung UPD Service2; C:\Windows\System32\SUPDSvc2.exe [165456 2011-12-02] (Samsung Electronics)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [746392 2013-03-20] (Tunngle.net GmbH)

==================== Drivers (Whitelisted) ====================

R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [85048 2009-12-14] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66104 2009-12-14] (Infowatch)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-02] (DT Soft Ltd)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458032 2011-10-20] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13616 2011-10-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [636760 2013-03-02] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 miniusb; C:\Windows\System32\DRIVERS\sam_miniusb.sys [23480 2010-03-04] (Samsung India Software Center)
R3 SODI; C:\Windows\System32\DRIVERS\sam_miniport.sys [30776 2010-03-04] (Samsung India Software Center)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 vvftav; C:\Windows\System32\drivers\vvftav.sys [300800 2007-02-02] (Vimicro Corporation)
S3 ZSMC0305; C:\Windows\System32\Drivers\usbVM305.sys [1541120 2007-03-08] (Vimicro Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 gdrv; \??\C:\Windows\gdrv.sys [x]
S3 papycpu; No ImagePath
S0x01000000 papycpu2; \SystemRoot\System32\DRIVERS\papycpu2.sys [x]
S0x01000000 papyjoy; \SystemRoot\System32\DRIVERS\papyjoy.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
S3 WinRing0_1_2_0; \??\C:\Users\User\AppData\Local\Temp\tmp624B.tmp [x]
S1 XSpaceWg; \??\C:\Windows\system32\drivers\XSpaceWg.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-15 15:31 - 2013-06-15 15:31 - 00000000 ____D C:\FRST
2013-06-15 15:30 - 2013-06-15 15:30 - 01920398 ____A (Farbar) C:\Users\User\Desktop\FRST64.exe
2013-06-15 14:18 - 2013-06-15 14:18 - 00000000 ____D C:\Users\User\Documents\Minecraft
2013-06-15 13:20 - 2013-06-15 13:20 - 00000000 ____D C:\ProgramData\VS Revo Group
2013-06-15 13:09 - 2013-06-15 13:09 - 00001109 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-15 13:09 - 2013-06-15 13:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-15 13:09 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-06-15 12:56 - 2013-06-15 12:56 - 00001063 ____A C:\AdwCleaner[S3].txt
2013-06-15 12:55 - 2013-06-15 12:55 - 00001001 ____A C:\AdwCleaner[R3].txt
2013-06-13 17:48 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-13 17:48 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-13 17:48 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-13 17:48 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-13 17:48 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-13 17:48 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-13 17:48 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-13 17:48 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-13 17:48 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-13 17:48 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-13 17:48 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-13 17:48 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 17:16 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 17:16 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 17:16 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 17:16 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 17:16 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 17:16 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 16:16 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 16:16 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 16:16 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 16:16 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 16:16 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 16:16 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 16:16 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 16:16 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 16:16 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 16:16 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 16:16 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 16:16 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 16:16 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 16:16 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 16:16 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 16:16 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 16:16 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 16:16 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 16:16 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-08 20:44 - 2013-06-08 20:47 - 00000000 ____D C:\Users\User\AppData\Roaming\.technic - Kopie
2013-06-08 20:44 - 2013-06-08 20:44 - 00000000 ____D C:\Users\User\AppData\Roaming\.techniclauncher - Kopie
2013-06-08 16:15 - 2013-06-08 16:15 - 00108448 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-06-08 16:15 - 2013-06-08 16:14 - 00311200 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-08 16:15 - 2013-06-08 16:14 - 00188832 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-08 16:15 - 2013-06-08 16:14 - 00188320 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-08 16:14 - 2013-06-08 16:14 - 00000000 ____D C:\Program Files\Java
2013-06-08 16:14 - 2013-06-08 16:13 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-08 16:13 - 2013-06-08 16:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-08 16:11 - 2013-06-08 16:11 - 00000810 ____A C:\Windows\System32\cc_20130608_161137.reg
2013-06-08 15:44 - 2013-06-15 13:20 - 00001077 ____A C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-06-08 15:44 - 2013-06-08 15:44 - 00000000 ____D C:\Users\User\AppData\Local\VS Revo Group
2013-06-08 15:44 - 2013-06-08 15:44 - 00000000 ____D C:\Program Files\VS Revo Group
2013-06-08 15:44 - 2009-12-30 11:21 - 00031800 ____A (VS Revo Group) C:\Windows\System32\Drivers\revoflt.sys
2013-06-08 13:56 - 2013-06-08 13:56 - 00056159 ____A C:\Users\User\Desktop\1.5.1 Car mod v3.0.zip
2013-06-08 12:30 - 2013-06-08 12:30 - 00001836 ____A C:\Windows\System32\cc_20130608_123004.reg
2013-06-08 12:27 - 2013-06-08 12:27 - 00002758 ____A C:\Windows\System32\cc_20130608_122715.reg
2013-06-08 12:26 - 2013-06-08 12:26 - 00032032 ____A C:\Windows\System32\cc_20130608_122655.reg
2013-06-08 12:11 - 2013-06-08 12:11 - 00000942 ____A C:\AdwCleaner[R2].txt
2013-06-08 12:05 - 2013-06-08 12:05 - 00001799 ____A C:\AdwCleaner[S2].txt
2013-06-08 12:05 - 2013-06-08 12:05 - 00001737 ____A C:\AdwCleaner[R1].txt
2013-06-08 11:47 - 2013-06-08 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-07 13:44 - 2013-06-08 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-03 16:36 - 2013-06-08 11:43 - 00000000 ____D C:\Program Files (x86)\Aurora
2013-06-03 16:19 - 2013-06-12 16:11 - 02527522 ____A () C:\Users\User\Desktop\TechnicLauncher.exe
2013-06-01 19:10 - 2013-06-01 19:10 - 00000000 ____D C:\ProgramData\Caphyon
2013-06-01 19:09 - 2013-06-01 19:09 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-06-01 19:09 - 2013-06-01 19:09 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-06-01 19:06 - 2013-06-01 19:06 - 00000000 ____D C:\Users\User\AppData\Roaming\TJMM Assemblys
2013-05-31 23:25 - 2013-05-31 23:25 - 00000000 ____D C:\Users\User\AppData\Roaming\.mc3totalconversion
2013-05-31 23:24 - 2013-06-15 12:44 - 00000000 ____D C:\Users\User\AppData\Roaming\.techniclauncher
2013-05-31 23:24 - 2013-05-31 23:24 - 00703117 ____A C:\Users\User\AppData\Roaming\technic-launcher.jar
2013-05-29 22:14 - 2013-05-29 22:14 - 00000000 ____D C:\Program Files\K-Lite Codec Pack x64
2013-05-29 22:14 - 2012-06-25 20:00 - 00092160 ____A C:\Windows\System32\ff_vfw.dll
2013-05-29 22:14 - 2012-06-09 19:21 - 00206336 ____A C:\Windows\System32\unrar.dll
2013-05-29 17:45 - 2013-05-29 17:45 - 00000000 ____D C:\Windows\de
2013-05-29 17:44 - 2013-05-29 17:44 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-05-29 17:43 - 2013-05-29 17:44 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-05-29 17:39 - 2013-05-29 22:04 - 00000000 ____D C:\Users\User\AppData\Local\Windows Live
2013-05-29 16:38 - 2013-05-29 18:42 - 00000000 ____D C:\Users\User\Desktop\bandischeiß
2013-05-29 16:32 - 2013-05-29 16:32 - 00000988 ____A C:\Users\UpdatusUser\Desktop\Bandicam.lnk
2013-05-29 16:32 - 2013-05-29 16:32 - 00000988 ____A C:\Users\Gast\Desktop\Bandicam.lnk
2013-05-29 16:32 - 2013-05-29 16:32 - 00000000 ____D C:\Program Files (x86)\Bandicam
2013-05-29 16:25 - 2013-05-29 16:32 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2013-05-29 16:15 - 2013-05-29 16:17 - 00000000 ____D C:\Fraps
2013-05-29 16:15 - 2013-05-29 16:15 - 00000572 ____A C:\Users\Public\Desktop\Fraps.lnk
2013-05-29 15:33 - 2013-05-29 15:33 - 05366380 ____A C:\Users\User\Desktop\minecraft.jar
2013-05-29 14:30 - 2013-05-29 14:30 - 00001865 ____A C:\Users\UpdatusUser\Desktop\rFactor.lnk
2013-05-29 14:30 - 2013-05-29 14:30 - 00001865 ____A C:\Users\Gast\Desktop\rFactor.lnk
2013-05-29 14:26 - 2013-05-29 17:55 - 00000000 ____D C:\Program Files (x86)\rFactor
2013-05-29 13:43 - 2013-05-29 17:45 - 00001103 ____A C:\Users\Public\Desktop\Craften Terminal.lnk
2013-05-29 13:43 - 2013-05-29 17:45 - 00000000 ____D C:\Program Files (x86)\Craften Terminal
2013-05-29 13:43 - 2013-05-29 13:43 - 00000000 ____D C:\Users\User\AppData\Local\Craften_Dev_Team
2013-05-28 16:30 - 2013-05-29 17:42 - 00000000 ____D C:\Users\User\Downloads\rfactor
2013-05-23 16:19 - 2013-05-31 13:08 - 00000000 ____D C:\Users\User\Desktop\BombermanV096Beta
2013-05-22 16:04 - 2013-05-22 16:11 - 00000000 ____D C:\Users\User\Downloads\gilde2
2013-05-21 21:29 - 2013-05-21 21:29 - 00000044 ____A C:\Users\User\Documents\kaspersky lizenzkey.txt
2013-05-21 16:10 - 2013-05-21 16:10 - 00000000 ____D C:\Program Files (x86)\Convar
2013-05-21 16:10 - 2003-07-18 13:58 - 00516784 ___RA (Xceed Software Inc        (450) 442-2626        support@xceedsoft.com        www.xceedsoft.com) C:\Windows\SysWOW64\XceedCry.dll
2013-05-21 16:10 - 2002-04-12 13:19 - 00028672 ____A C:\Windows\SysWOW64\DartWeb.oca
2013-05-21 16:10 - 2002-02-28 09:46 - 00217088 ____A (Dart Communications) C:\Windows\SysWOW64\DartSock.dll
2013-05-21 16:10 - 2002-02-21 10:12 - 00118784 ____A (Dart Communications) C:\Windows\SysWOW64\DartWeb.dll
2013-05-21 16:10 - 2002-02-04 02:43 - 00044544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml4a.dll
2013-05-21 16:10 - 1998-06-18 00:00 - 00089360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\VB5DB.DLL
2013-05-21 16:10 - 1998-06-13 22:53 - 00044544 ____A () C:\Windows\SysWOW64\Gif89.dll
2013-05-17 21:55 - 2013-05-17 22:01 - 00000000 ____D C:\Program Files (x86)\The Guild 2 - Renaissance
2013-05-17 18:09 - 2013-05-17 18:09 - 00000000 ____D C:\Users\User\Documents\Eden Games
2013-05-17 18:07 - 2013-05-17 18:07 - 00000000 ____D C:\Users\User\AppData\Local\CrashRpt
2013-05-17 17:38 - 2013-05-17 17:38 - 00000000 ____D C:\Program Files (x86)\Atari
2013-05-17 16:21 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-17 16:21 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-17 16:21 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-17 16:21 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-17 16:21 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-17 16:21 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-17 16:21 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-17 16:21 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-17 16:21 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-17 16:21 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-17 16:21 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-05-17 16:20 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-17 16:20 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-05-17 16:20 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll

==================== One Month Modified Files and Folders =======

2013-06-15 15:31 - 2013-06-15 15:31 - 00000000 ____D C:\FRST
2013-06-15 15:31 - 2012-03-17 01:19 - 00000000 ____D C:\Windows\Panther
2013-06-15 15:30 - 2013-06-15 15:30 - 01920398 ____A (Farbar) C:\Users\User\Desktop\FRST64.exe
2013-06-15 15:28 - 2013-03-27 17:19 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-15 15:28 - 2012-07-10 22:37 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-15 15:16 - 2012-06-28 19:31 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2013-06-15 15:10 - 2012-06-30 13:57 - 00000000 ____D C:\Users\User\AppData\Roaming\TS3Client
2013-06-15 15:08 - 2012-12-16 00:07 - 00000000 ___RD C:\Users\User\Dropbox
2013-06-15 15:08 - 2012-12-16 00:04 - 00000000 ____D C:\Users\User\AppData\Roaming\Dropbox
2013-06-15 15:03 - 2013-03-06 17:09 - 00000000 ____D C:\Users\User\AppData\Roaming\.minecraft
2013-06-15 15:00 - 2012-12-23 12:23 - 01681464 ____N C:\Windows\WindowsUpdate.log
2013-06-15 14:58 - 2013-03-02 18:32 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-06-15 14:18 - 2013-06-15 14:18 - 00000000 ____D C:\Users\User\Documents\Minecraft
2013-06-15 14:10 - 2013-04-23 21:49 - 00478584 ____A C:\Users\User\Desktop\MinecraftDev.exe
2013-06-15 13:25 - 2013-01-13 01:48 - 01601946 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-06-15 13:25 - 2011-04-12 09:43 - 00702062 ____A C:\Windows\System32\perfh007.dat
2013-06-15 13:25 - 2011-04-12 09:43 - 00149618 ____A C:\Windows\System32\perfc007.dat
2013-06-15 13:24 - 2009-07-14 07:13 - 01601946 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-15 13:20 - 2013-06-15 13:20 - 00000000 ____D C:\ProgramData\VS Revo Group
2013-06-15 13:20 - 2013-06-08 15:44 - 00001077 ____A C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-06-15 13:19 - 2012-07-03 12:33 - 00000000 ____D C:\Users\User\Desktop\Dienstprogramme
2013-06-15 13:09 - 2013-06-15 13:09 - 00001109 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-15 13:09 - 2013-06-15 13:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-15 13:08 - 2012-09-27 18:18 - 00000000 ____D C:\Users\User\Downloads\setup dienstprogramme
2013-06-15 13:05 - 2009-07-14 06:45 - 00022080 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-15 13:05 - 2009-07-14 06:45 - 00022080 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-15 12:58 - 2012-07-10 22:37 - 00001102 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-15 12:57 - 2012-03-19 20:39 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-15 12:57 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-15 12:56 - 2013-06-15 12:56 - 00001063 ____A C:\AdwCleaner[S3].txt
2013-06-15 12:55 - 2013-06-15 12:55 - 00001001 ____A C:\AdwCleaner[R3].txt
2013-06-15 12:47 - 2013-04-14 12:51 - 00000000 ____D C:\Users\User\AppData\Roaming\Minecraft Version Changer
2013-06-15 12:44 - 2013-05-31 23:24 - 00000000 ____D C:\Users\User\AppData\Roaming\.techniclauncher
2013-06-13 17:41 - 2013-03-13 21:15 - 00000000 ____D C:\Users\User\AppData\Roaming\.spoutcraft
2013-06-13 17:40 - 2012-06-30 12:51 - 00000000 ____D C:\Users\User\Desktop\Spiele
2013-06-12 17:16 - 2012-03-30 22:40 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 16:59 - 2013-03-13 21:45 - 00000000 ____D C:\Users\User\AppData\Roaming\.technic
2013-06-12 16:28 - 2013-02-27 21:10 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 16:28 - 2013-02-27 21:10 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 16:11 - 2013-06-03 16:19 - 02527522 ____A () C:\Users\User\Desktop\TechnicLauncher.exe
2013-06-10 15:22 - 2013-04-14 18:38 - 00282104 ____A C:\Windows\SysWOW64\PnkBstrB.xtr
2013-06-10 15:22 - 2013-04-14 18:28 - 00282104 ____A C:\Windows\SysWOW64\PnkBstrB.exe
2013-06-10 15:22 - 2013-04-14 18:28 - 00234768 ____A C:\Windows\SysWOW64\PnkBstrB.ex0
2013-06-08 20:47 - 2013-06-08 20:44 - 00000000 ____D C:\Users\User\AppData\Roaming\.technic - Kopie
2013-06-08 20:44 - 2013-06-08 20:44 - 00000000 ____D C:\Users\User\AppData\Roaming\.techniclauncher - Kopie
2013-06-08 16:15 - 2013-06-08 16:15 - 00108448 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-06-08 16:14 - 2013-06-08 16:15 - 00311200 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-08 16:14 - 2013-06-08 16:15 - 00188832 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-08 16:14 - 2013-06-08 16:15 - 00188320 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-08 16:14 - 2013-06-08 16:14 - 00000000 ____D C:\Program Files\Java
2013-06-08 16:14 - 2012-03-28 15:36 - 01092512 ____A (Oracle Corporation) C:\Windows\System32\npdeployJava1.dll
2013-06-08 16:14 - 2012-03-28 15:36 - 00971680 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-06-08 16:13 - 2013-06-08 16:14 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-08 16:13 - 2013-06-08 16:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-08 16:13 - 2012-04-30 14:04 - 00866720 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-08 16:13 - 2012-03-28 15:37 - 00788896 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-08 16:11 - 2013-06-08 16:11 - 00000810 ____A C:\Windows\System32\cc_20130608_161137.reg
2013-06-08 16:10 - 2012-09-12 14:35 - 00000000 ____D C:\Program Files (x86)\Steam
2013-06-08 16:10 - 2012-08-13 14:15 - 00000000 ____D C:\Users\User\Documents\Schulunterlagen
2013-06-08 16:10 - 2012-04-17 19:14 - 00000000 ____D C:\Users\User\Documents\Add-in Express
2013-06-08 16:08 - 2013-06-13 17:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-13 17:48 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-13 17:48 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-13 17:48 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-13 17:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 15:44 - 2013-06-08 15:44 - 00000000 ____D C:\Users\User\AppData\Local\VS Revo Group
2013-06-08 15:44 - 2013-06-08 15:44 - 00000000 ____D C:\Program Files\VS Revo Group
2013-06-08 15:44 - 2012-07-26 19:45 - 00000000 ____D C:\Users\User\Downloads\Samsung Photo Frame
2013-06-08 14:28 - 2013-06-13 17:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:56 - 2013-06-08 13:56 - 00056159 ____A C:\Users\User\Desktop\1.5.1 Car mod v3.0.zip
2013-06-08 13:42 - 2013-06-13 17:48 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-13 17:48 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-13 17:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-13 17:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-13 17:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-13 17:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-08 12:30 - 2013-06-08 12:30 - 00001836 ____A C:\Windows\System32\cc_20130608_123004.reg
2013-06-08 12:27 - 2013-06-08 12:27 - 00002758 ____A C:\Windows\System32\cc_20130608_122715.reg
2013-06-08 12:26 - 2013-06-08 12:26 - 00032032 ____A C:\Windows\System32\cc_20130608_122655.reg
2013-06-08 12:26 - 2012-09-21 20:54 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-06-08 12:25 - 2012-07-11 19:28 - 00000000 ____D C:\Program Files\CCleaner
2013-06-08 12:24 - 2012-06-28 19:31 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-08 12:24 - 2012-06-28 19:31 - 00000000 ____D C:\ProgramData\Skype
2013-06-08 12:11 - 2013-06-08 12:11 - 00000942 ____A C:\AdwCleaner[R2].txt
2013-06-08 12:05 - 2013-06-08 12:05 - 00001799 ____A C:\AdwCleaner[S2].txt
2013-06-08 12:05 - 2013-06-08 12:05 - 00001737 ____A C:\AdwCleaner[R1].txt
2013-06-08 11:47 - 2013-06-08 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-08 11:47 - 2013-06-07 13:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-08 11:43 - 2013-06-03 16:36 - 00000000 ____D C:\Program Files (x86)\Aurora
2013-06-03 21:54 - 2013-02-18 18:35 - 00000000 ____D C:\ProgramData\Tunngle
2013-06-03 18:20 - 2013-01-09 17:25 - 00000000 ____D C:\Users\User\AppData\Roaming\Tunngle
2013-06-01 19:10 - 2013-06-01 19:10 - 00000000 ____D C:\ProgramData\Caphyon
2013-06-01 19:09 - 2013-06-01 19:09 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-06-01 19:09 - 2013-06-01 19:09 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-06-01 19:09 - 2012-04-02 13:05 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-06-01 19:06 - 2013-06-01 19:06 - 00000000 ____D C:\Users\User\AppData\Roaming\TJMM Assemblys
2013-06-01 19:06 - 2013-01-24 18:56 - 00000000 ____D C:\Users\User\Downloads\sims3
2013-05-31 23:25 - 2013-05-31 23:25 - 00000000 ____D C:\Users\User\AppData\Roaming\.mc3totalconversion
2013-05-31 23:24 - 2013-05-31 23:24 - 00703117 ____A C:\Users\User\AppData\Roaming\technic-launcher.jar
2013-05-31 22:30 - 2012-04-02 09:59 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2013-05-31 22:30 - 2012-03-17 01:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-05-31 13:08 - 2013-05-23 16:19 - 00000000 ____D C:\Users\User\Desktop\BombermanV096Beta
2013-05-29 22:15 - 2013-05-04 20:33 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc
2013-05-29 22:14 - 2013-05-29 22:14 - 00000000 ____D C:\Program Files\K-Lite Codec Pack x64
2013-05-29 22:04 - 2013-05-29 17:39 - 00000000 ____D C:\Users\User\AppData\Local\Windows Live
2013-05-29 18:42 - 2013-05-29 16:38 - 00000000 ____D C:\Users\User\Desktop\bandischeiß
2013-05-29 17:55 - 2013-05-29 14:26 - 00000000 ____D C:\Program Files (x86)\rFactor
2013-05-29 17:45 - 2013-05-29 17:45 - 00000000 ____D C:\Windows\de
2013-05-29 17:45 - 2013-05-29 13:43 - 00001103 ____A C:\Users\Public\Desktop\Craften Terminal.lnk
2013-05-29 17:45 - 2013-05-29 13:43 - 00000000 ____D C:\Program Files (x86)\Craften Terminal
2013-05-29 17:44 - 2013-05-29 17:44 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-05-29 17:44 - 2013-05-29 17:43 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-05-29 17:44 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-05-29 17:42 - 2013-05-28 16:30 - 00000000 ____D C:\Users\User\Downloads\rfactor
2013-05-29 16:37 - 2012-08-26 17:43 - 00000000 ____D C:\Users\User\Documents\Bandicam
2013-05-29 16:32 - 2013-05-29 16:32 - 00000988 ____A C:\Users\UpdatusUser\Desktop\Bandicam.lnk
2013-05-29 16:32 - 2013-05-29 16:32 - 00000988 ____A C:\Users\Gast\Desktop\Bandicam.lnk
2013-05-29 16:32 - 2013-05-29 16:32 - 00000000 ____D C:\Program Files (x86)\Bandicam
2013-05-29 16:32 - 2013-05-29 16:25 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2013-05-29 16:17 - 2013-05-29 16:15 - 00000000 ____D C:\Fraps
2013-05-29 16:15 - 2013-05-29 16:15 - 00000572 ____A C:\Users\Public\Desktop\Fraps.lnk
2013-05-29 15:33 - 2013-05-29 15:33 - 05366380 ____A C:\Users\User\Desktop\minecraft.jar
2013-05-29 14:30 - 2013-05-29 14:30 - 00001865 ____A C:\Users\UpdatusUser\Desktop\rFactor.lnk
2013-05-29 14:30 - 2013-05-29 14:30 - 00001865 ____A C:\Users\Gast\Desktop\rFactor.lnk
2013-05-29 13:43 - 2013-05-29 13:43 - 00000000 ____D C:\Users\User\AppData\Local\Craften_Dev_Team
2013-05-28 20:36 - 2012-07-10 22:37 - 00000000 ____D C:\Program Files (x86)\Google
2013-05-28 20:36 - 2012-07-10 22:36 - 00000000 ____D C:\Users\User\AppData\Local\Google
2013-05-26 12:18 - 2012-08-24 23:46 - 00000000 ____D C:\Users\User\AppData\Roaming\xVideoServiceThief
2013-05-25 19:55 - 2012-12-27 14:06 - 00000000 ____D C:\Users\User\Documents\FIFA 13
2013-05-24 21:49 - 2013-01-13 18:45 - 00000000 ___RD C:\Users\User\Virtual Machines
2013-05-22 16:11 - 2013-05-22 16:04 - 00000000 ____D C:\Users\User\Downloads\gilde2
2013-05-21 21:29 - 2013-05-21 21:29 - 00000044 ____A C:\Users\User\Documents\kaspersky lizenzkey.txt
2013-05-21 17:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-05-21 16:10 - 2013-05-21 16:10 - 00000000 ____D C:\Program Files (x86)\Convar
2013-05-17 22:01 - 2013-05-17 21:55 - 00000000 ____D C:\Program Files (x86)\The Guild 2 - Renaissance
2013-05-17 18:09 - 2013-05-17 18:09 - 00000000 ____D C:\Users\User\Documents\Eden Games
2013-05-17 18:07 - 2013-05-17 18:07 - 00000000 ____D C:\Users\User\AppData\Local\CrashRpt
2013-05-17 17:38 - 2013-05-17 17:38 - 00000000 ____D C:\Program Files (x86)\Atari
2013-05-17 16:52 - 2013-02-21 17:03 - 00438424 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-17 16:29 - 2012-03-19 22:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-05-17 03:25 - 2013-06-12 17:16 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-05-17 02:59 - 2013-06-12 17:16 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-17 02:59 - 2013-06-12 17:16 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-05-17 02:58 - 2013-06-12 17:16 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll

Files to move or delete:
====================
C:\ProgramData\ntuser.dat

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-06 20:57

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Und hier die Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-06-2013
Ran by User at 2013-06-15 15:32:43 Run:
Running from C:\Users\User\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

@BIOS (Version: 2.30)
2.2
64 Bit HP CIO Components Installer (Version: 7.2.4)
A321 Repaint Pack
Adobe AIR (Version: 3.7.0.1860)
Adobe Community Help (Version: 3.2.1)
Adobe Community Help (Version: 3.2.1.650)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Photoshop Elements 9 (Version: 9.0.3.0)
Adobe Shockwave Player 12.0 (Version: 12.0.2.122)
Aerosoft's - German Airfields FREE - Wasserkuppe (Version: 1.00)
Age of Empires II - The Conquerors - 1.0e Patch FINAL (Version: 1.0e)
Alarm für Cobra 11 - Das Syndikat
Alcor Micro USB Card Reader (Version: 3.10.142.72249)
Bandicam (Version: 1.8.7.347)
Bandisoft MPEG-1 Decoder
Battlefield Play4Free
C9
CCleaner (Version: 4.02)
CDBurnerXP (Version: 4.5.0.3717)
Cities in Motion
Cobra 11 - Crash Time (remove only)
concept/design onlineTV 8 (Version: 8.0.0.0)
Craften Terminal 3.3.4897.28268 (Version: 3.3.4897.28268)
D3DX10 (Version: 15.4.2368.0902)
DAEMON Tools Lite (Version: 4.47.1.0333)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DIE SIEDLER - Das Erbe der Könige - Gold Edition (Version: 1.00.0000)
Die Sims™ 3 "Erstelle eine Welt"-Tool - Beta (Version: 1.18.8)
Die Sims™ 3 (Version: 1.50.56)
Die Sims™ 3 70er, 80er & 90er Accessoires (Version: 17.0.77)
Die Sims™ 3 Design-Garten-Accessoires (Version: 7.0.55)
Die Sims™ 3 Diesel Accessoires (Version: 14.0.48)
Die Sims™ 3 Einfach tierisch (Version: 10.0.96)
Die Sims™ 3 Gib Gas-Accessoires (Version: 5.0.44)
Die Sims™ 3 Jahreszeiten (Version: 16.0.136)
Die Sims™ 3 Late Night (Version: 6.0.81)
Die Sims™ 3 Lebensfreude (Version: 8.0.152)
Die Sims™ 3 Luxus-Accessoires (Version: 3.0.38)
Die Sims™ 3 Reiseabenteuer (Version: 2.0.86)
Die Sims™ 3 Showtime (Version: 12.0.273)
Die Sims™ 3 Stadt-Accessoires (Version: 9.0.73)
Die Sims™ 3 Supernatural (Version: 15.0.135)
Die Sims™ 3 Traumkarrieren (Version: 4.0.87)
Die Sims™ 3 Traumsuite-Accessoires (Version: 11.0.84)
Dropbox (Version: 2.0.22)
Duden Korrektor Standard (Version: 7.00.0000)
Elements 9 Organizer (Version: 9.0)
Elements STI Installer (Version: 1.0)
Emergency4 (Version: 1.03.001)
Empire Earth
Empire Earth II (Version: 1.20)
Empire: Total War
F1 2012
FIFA 12 (Version: 1.0.0.0)
FIFA 13 (Version: 1.0.0.0)
Fotogalerie (Version: 16.4.3508.0205)
Foxit Reader (Version: 6.0.3.524)
FrameManager (Version: 3.00.0000)
Fraps (remove only)
GameShadow (Version: 2.03.0000)
GEM+/iGOR & Lee's GPL Setup Manager 2.5.0.32
German Truck Simulator 1.00 (Version: 1.00)
Google Chrome (Version: 27.0.1453.110)
Google Earth (Version: 7.0.3.8542)
Google Update Helper (Version: 1.3.21.145)
HiSuite (Version: 32.300.12.00.06)
HP LaserJet Professional CP1520 Series
Intel(R) Management Engine Components (Version: 8.0.0.1351)
Intel(R) USB 3.0 eXtensible Host Controller Driver (Version: 1.0.1.209)
Java 7 Update 21 (64-bit) (Version: 7.0.210)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
Kaspersky PURE 2.0 (Version: 12.0.2.733)
K-Lite Codec Pack 6.4.5 (64-bit) (Version: 6.4.5)
Logitech Gaming Software (Version: 4.40)
Logitech Gaming Software 5.10 (Version: 5.10.127)
Logitech Webcam Software (Version: 12.10.1113)
Logitech Webcam Software-Treiberpaket (Version: 12.10.1110)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
MeatWater FO Altitude Callouts v1.0
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Age of Empires II
Microsoft Age of Empires II: The Conquerors Expansion
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Flight Simulator X (Version: 10.0.60905)
Microsoft Flight Simulator X SDK (Version: 1.00.0000)
Microsoft Flight Simulator X: Acceleration (Version: 10.0.61637.0)
Microsoft Games for Windows - LIVE (Version: 3.1.186.0)
Microsoft Games for Windows - LIVE Redistributable (Version: 3.1.99.0)
Microsoft Mathematics (Version: 4.0)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook Connector (Version: 14.0.6123.5001)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office ScreenTip Language 2010 - Español (Version: 14.0.4763.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (Version: 11.0.50727.1)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (Version: 1.00.0000)
Movie Maker (Version: 16.4.3508.0205)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT110 (Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser und SDK (Version: 4.20.9818.0)
Napoleon: Total War
NASCAR® Racing 2002 Season
NASCAR® Racing 2003 Season
Need for Speed™ Most Wanted (Version: 1.5.0.0)
Need For Speed™ World (Version: 1.0.0.1166)
Notepad++ (Version: 6.3.2)
NVIDIA 3D Vision Controller Driver (Version: 275.33)
NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22)
NVIDIA 3D Vision Treiber 314.22 (Version: 314.22)
NVIDIA Grafiktreiber 314.22 (Version: 314.22)
NVIDIA HD-Audiotreiber 1.3.23.1 (Version: 1.3.23.1)
NVIDIA Install Application (Version: 2.1002.115.743)
NVIDIA PhysX (Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1422)
NVIDIA Systemsteuerung 314.22 (Version: 314.22)
NVIDIA Update 1.12.12 (Version: 1.12.12)
NVIDIA Update Components (Version: 1.12.12)
NYCv3.0
ON_OFF Charge B11.1102.1 (Version: 1.00.0001)
OpenAL
OpenTTD 1.2.3 (Version: 1.2.3)
Origin (Version: 8.6.0.357)
PC Inspector smart recovery (Version: 4.50)
PDFCreator (Version: 1.5.0)
Photo Common (Version: 16.4.3508.0205)
Photo Gallery (Version: 16.4.3508.0205)
ProtectDisc Driver, Version 11 (Version: 11.0.0.14)
PunkBuster Services (Version: 0.990)
RaceRoom Racing Experience 
Real Environment Xtreme (Version: 1.0.2008.1128)
Realtek Ethernet Controller Driver (Version: 7.67.1226.2012)
Realtek High Definition Audio Driver (Version: 6.0.1.6554)
Revo Uninstaller Pro 3.0.5 (Version: 3.0.5)
rFactor (remove only)
ROCCAT Kone Pure Mouse Driver
Samsung Universal Print Driver PCL 6 (Version: 2.03.01.00:36)
Sierra Utilities
Silent Hunter 4 Wolves of the Pacific (Version: 1.05.0000)
Silent Hunter 5 (Version: 1.2.0)
Skype™ 6.5 (Version: 6.5.158)
Steam (Version: 1.0.0.0)
Stronghold Crusader Extreme (Version: 1.20.0000)
swMSM (Version: 12.0.0.1)
TeamSpeak 3 Client (Version: 3.0.10.1)
Test Drive Unlimited 2
The Guild 2 - Renaissance
TOYv2.0
TRFormersMOD (Version: 1.7.5a)
Tunngle beta
Ubisoft Game Launcher (Version: 1.0.0.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
USB PC Camera VC305 (Version: 1.45.060824)
VLC media player 2.0.6 (Version: 2.0.6)
Windows Installer Clean Up (Version: 3.00.00.0000)
Windows Live Communications Platform (Version: 16.4.3508.0205)
Windows Live Essentials (Version: 16.4.3508.0205)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (Version: 16.4.3508.0205)
Windows Live Photo Common (Version: 16.4.3508.0205)
Windows Live PIMT Platform (Version: 16.4.3508.0205)
Windows Live SOXE (Version: 16.4.3508.0205)
Windows Live SOXE Definitions (Version: 16.4.3508.0205)
Windows Live UX Platform (Version: 16.4.3508.0205)
Windows Live UX Platform Language Pack (Version: 16.4.3508.0205)
Windows XP Mode (Version: 1.3.7600.16422)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Winterberg Configurator Version WEM Confi 8.8 (Version: WEM Confi 8.8)
Worms Revolution
xVideoServiceThief (Version: 2.4.1)

==================== Restore Points  =========================

08-06-2013 10:13:31 Removed Java 7 Update 21
08-06-2013 10:17:37 Removed Java 7 Update 21 (64-bit)
08-06-2013 10:18:52 Removed Java 7 Update 21
08-06-2013 10:27:44 Installed Java 7 Update 21
08-06-2013 10:29:11 Removed Java 7 Update 21
08-06-2013 10:30:28 Installed Java 7 Update 21 (64-bit)
08-06-2013 10:31:08 Installed Java 7 Update 21
08-06-2013 13:47:04 Revo Uninstaller Pro's restore point - F1 2010 Textures Edito 0.5
08-06-2013 13:49:30 Revo Uninstaller Pro's restore point - Java 7 Update 9
08-06-2013 13:50:06 Revo Uninstaller Pro's restore point - Java(TM) 6 Update 26
08-06-2013 13:51:03 Revo Uninstaller Pro's restore point - Java 7 Update 9
08-06-2013 13:52:34 Revo Uninstaller Pro's restore point - Java 7 Update 21
08-06-2013 13:53:08 Removed Java 7 Update 21
08-06-2013 13:54:27 Revo Uninstaller Pro's restore point - Java 7 Update 21 (64-bit)
08-06-2013 13:55:06 Removed Java 7 Update 21 (64-bit)
08-06-2013 13:56:33 Revo Uninstaller Pro's restore point - Java(TM) 6 Update 26
08-06-2013 14:13:19 Installed Java 7 Update 21
08-06-2013 14:14:48 Installed Java 7 Update 21 (64-bit)
12-06-2013 14:16:10 Windows Update
12-06-2013 15:15:28 Windows Update
13-06-2013 15:48:20 Windows Update
15-06-2013 11:19:56 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/15/2013 01:19:53 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: nvtray.exe, Version: 7.17.13.1422, Zeitstempel: 0x51428f51
Name des fehlerhaften Moduls: nvtray.exe, Version: 7.17.13.1422, Zeitstempel: 0x51428f51
Ausnahmecode: 0x40000015
Fehleroffset: 0x0000000000154f89
ID des fehlerhaften Prozesses: 0xad8
Startzeit der fehlerhaften Anwendung: 0xnvtray.exe0
Pfad der fehlerhaften Anwendung: nvtray.exe1
Pfad des fehlerhaften Moduls: nvtray.exe2
Berichtskennung: nvtray.exe3

Error: (06/15/2013 01:18:01 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: nvtray.exe, Version: 7.17.13.1422, Zeitstempel: 0x51428f51
Name des fehlerhaften Moduls: nvtray.exe, Version: 7.17.13.1422, Zeitstempel: 0x51428f51
Ausnahmecode: 0x40000015
Fehleroffset: 0x0000000000154f89
ID des fehlerhaften Prozesses: 0xda0
Startzeit der fehlerhaften Anwendung: 0xnvtray.exe0
Pfad der fehlerhaften Anwendung: nvtray.exe1
Pfad des fehlerhaften Moduls: nvtray.exe2
Berichtskennung: nvtray.exe3

Error: (06/15/2013 00:59:05 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/15/2013 00:42:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/13/2013 06:01:38 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/13/2013 03:37:08 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/12/2013 05:49:18 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/12/2013 04:09:10 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/10/2013 08:10:23 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (06/10/2013 01:32:01 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (06/15/2013 01:19:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (06/15/2013 01:19:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (06/15/2013 01:18:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (06/15/2013 01:18:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (06/15/2013 01:00:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (06/15/2013 01:00:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (06/15/2013 00:57:47 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
papycpu2
papyjoy
XSpaceWg

Error: (06/15/2013 00:57:13 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papyjoy.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (06/15/2013 00:57:13 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papycpu2.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (06/15/2013 00:43:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069


Microsoft Office Sessions:
=========================
Error: (06/15/2013 01:19:53 PM) (Source: Application Error)(User: )
Description: nvtray.exe7.17.13.142251428f51nvtray.exe7.17.13.142251428f51400000150000000000154f89ad801ce69ba2abdad2eC:\Program Files\NVIDIA Corporation\Display\nvtray.exeC:\Program Files\NVIDIA Corporation\Display\nvtray.exe7fba9d11-d5ad-11e2-9b80-902b3410c704

Error: (06/15/2013 01:18:01 PM) (Source: Application Error)(User: )
Description: nvtray.exe7.17.13.142251428f51nvtray.exe7.17.13.142251428f51400000150000000000154f89da001ce69b731f6f52bC:\Program Files\NVIDIA Corporation\Display\nvtray.exeC:\Program Files\NVIDIA Corporation\Display\nvtray.exe3ceac37e-d5ad-11e2-9b80-902b3410c704

Error: (06/15/2013 00:59:05 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/15/2013 00:42:14 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/13/2013 06:01:38 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/13/2013 03:37:08 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/12/2013 05:49:18 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/12/2013 04:09:10 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/10/2013 08:10:23 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Duden\Duden Korrektor\adxloader.dll.ManifestC:\Program Files (x86)\Duden\Duden Korrektor\adxloader.dll.Manifest2

Error: (06/10/2013 01:32:01 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-02-27 15:45:18.691
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-27 15:45:18.660
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-27 15:45:18.629
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-27 15:45:18.613
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-27 15:06:43.817
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-27 15:06:43.786
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 20%
Total physical RAM: 16330.14 MB
Available physical RAM: 12987.02 MB
Total Pagefile: 32658.46 MB
Available Pagefile: 29372.78 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:1862.79 GB) (Free:1413.33 GB) NTFS (Disk=0 Partition=3)
Drive d: (Sims3SP08) (CDROM) (Total:3.08 GB) (Free:0 GB) UDF
Drive i: (EEARTH) (CDROM) (Total:0.54 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT Partition Type
==================== End Of Log ============================
         

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hier von Combofix

Combofix Logfile:

ComboFix 13-06-13.01 - User 15.06.2013  16:00:10.3.8 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.16330.13845 [GMT 2:00]
ausgeführt von:: c:\users\User\Desktop\ComboFix.exe
AV: Kaspersky PURE 2.0 *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
FW: Kaspersky PURE 2.0 *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
SP: Kaspersky PURE 2.0 *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\ntuser.dat
c:\users\User\AppData\Roaming\technic-launcher.jar
c:\windows\SysWow64\frapsvid.dll
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-05-15 bis 2013-06-15  ))))))))))))))))))))))))))))))
.
.
2013-06-15 14:09 . 2013-06-15 14:09	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2013-06-15 14:09 . 2013-06-15 14:09	--------	d-----w-	c:\users\Public\AppData\Local\temp
2013-06-15 14:09 . 2013-06-15 14:09	--------	d-----w-	c:\users\Gast\AppData\Local\temp
2013-06-15 14:09 . 2013-06-15 14:09	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-06-15 13:31 . 2013-06-15 13:31	--------	d-----w-	C:\FRST
2013-06-15 11:20 . 2013-06-15 11:20	--------	d-----w-	c:\programdata\VS Revo Group
2013-06-15 11:09 . 2013-06-15 11:09	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2013-06-15 11:09 . 2013-04-04 12:50	25928	----a-w-	c:\windows\system32\drivers\mbam.sys
2013-06-15 10:46 . 2013-05-13 06:37	9460464	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{3E64C082-C017-4ED5-BB82-8A0299946804}\mpengine.dll
2013-06-12 15:16 . 2013-05-17 01:25	257536	----a-w-	c:\program files (x86)\Internet Explorer\ieproxy.dll
2013-06-12 14:16 . 2013-05-10 05:49	30720	----a-w-	c:\windows\system32\cryptdlg.dll
2013-06-08 18:44 . 2013-06-08 18:47	--------	d-----w-	c:\users\User\AppData\Roaming\.technic - Kopie
2013-06-08 18:44 . 2013-06-08 18:44	--------	d-----w-	c:\users\User\AppData\Roaming\.techniclauncher - Kopie
2013-06-08 14:15 . 2013-06-08 14:14	311200	----a-w-	c:\windows\system32\javaws.exe
2013-06-08 14:15 . 2013-06-08 14:15	108448	----a-w-	c:\windows\system32\WindowsAccessBridge-64.dll
2013-06-08 14:15 . 2013-06-08 14:14	188832	----a-w-	c:\windows\system32\javaw.exe
2013-06-08 14:15 . 2013-06-08 14:14	188320	----a-w-	c:\windows\system32\java.exe
2013-06-08 14:14 . 2013-06-08 14:14	--------	d-----w-	c:\program files\Java
2013-06-08 14:13 . 2013-06-08 14:13	95648	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-06-08 14:13 . 2013-06-08 14:13	--------	d-----w-	c:\program files (x86)\Java
2013-06-08 14:11 . 2013-06-08 14:11	810	----a-w-	c:\windows\system32\cc_20130608_161137.reg
2013-06-08 13:44 . 2013-06-08 13:44	--------	d-----w-	c:\users\User\AppData\Local\VS Revo Group
2013-06-08 13:44 . 2009-12-30 09:21	31800	----a-w-	c:\windows\system32\drivers\revoflt.sys
2013-06-08 13:44 . 2013-06-08 13:44	--------	d-----w-	c:\program files\VS Revo Group
2013-06-08 10:30 . 2013-06-08 10:30	1836	----a-w-	c:\windows\system32\cc_20130608_123004.reg
2013-06-08 10:27 . 2013-06-08 10:27	2758	----a-w-	c:\windows\system32\cc_20130608_122715.reg
2013-06-08 10:26 . 2013-06-08 10:26	32032	----a-w-	c:\windows\system32\cc_20130608_122655.reg
2013-06-08 09:47 . 2013-06-08 09:47	--------	d-----w-	c:\program files (x86)\Mozilla Maintenance Service
2013-06-03 14:36 . 2013-06-08 09:43	--------	d-----w-	c:\program files (x86)\Aurora
2013-06-01 17:10 . 2013-06-01 17:10	--------	d-----w-	c:\programdata\Caphyon
2013-06-01 17:09 . 2013-06-01 17:09	--------	d-----w-	c:\program files (x86)\Common Files\Adobe AIR
2013-06-01 17:06 . 2013-06-01 17:06	--------	d-----w-	c:\users\User\AppData\Roaming\TJMM Assemblys
2013-05-31 21:25 . 2013-05-31 21:25	--------	d-----w-	c:\users\User\AppData\Roaming\.mc3totalconversion
2013-05-31 21:24 . 2013-06-15 10:44	--------	d-----w-	c:\users\User\AppData\Roaming\.techniclauncher
2013-05-29 20:14 . 2012-06-09 17:21	206336	----a-w-	c:\windows\system32\unrar.dll
2013-05-29 20:14 . 2012-06-25 18:00	92160	----a-w-	c:\windows\system32\ff_vfw.dll
2013-05-29 20:14 . 2013-05-29 20:14	--------	d-----w-	c:\program files\K-Lite Codec Pack x64
2013-05-29 15:45 . 2013-05-29 15:45	--------	d-----w-	c:\windows\de
2013-05-29 15:44 . 2013-05-29 15:44	--------	d-----w-	c:\program files (x86)\Microsoft SQL Server Compact Edition
2013-05-29 15:43 . 2013-05-29 15:44	--------	d-----w-	c:\program files (x86)\Windows Live
2013-05-29 15:39 . 2013-05-29 20:04	--------	d-----w-	c:\users\User\AppData\Local\Windows Live
2013-05-29 15:39 . 2013-05-29 15:39	--------	d-----w-	c:\program files (x86)\Common Files\Windows Live
2013-05-29 14:32 . 2013-05-29 14:32	--------	d-----w-	c:\program files (x86)\Bandicam
2013-05-29 14:25 . 2013-05-29 14:32	--------	d-----w-	c:\program files (x86)\BandiMPEG1
2013-05-29 14:15 . 2013-05-29 14:17	--------	d-----w-	C:\Fraps
2013-05-29 12:26 . 2013-05-29 15:55	--------	d-----w-	c:\program files (x86)\rFactor
2013-05-29 11:43 . 2013-05-29 11:43	--------	d-----w-	c:\users\User\AppData\Local\Craften_Dev_Team
2013-05-29 11:43 . 2013-05-29 15:45	--------	d-----w-	c:\program files (x86)\Craften Terminal
2013-05-21 14:10 . 2013-05-21 14:10	--------	d-----w-	c:\program files (x86)\Convar
2013-05-21 14:10 . 2003-07-18 11:58	516784	----a-r-	c:\windows\SysWow64\XceedCry.dll
2013-05-21 14:10 . 2002-04-12 11:19	28672	----a-w-	c:\windows\SysWow64\DartWeb.oca
2013-05-21 14:10 . 2002-02-28 07:46	217088	----a-w-	c:\windows\SysWow64\DartSock.dll
2013-05-21 14:10 . 2002-02-21 08:12	118784	----a-w-	c:\windows\SysWow64\DartWeb.dll
2013-05-21 14:10 . 2002-02-04 00:43	44544	----a-w-	c:\windows\SysWow64\msxml4a.dll
2013-05-21 14:10 . 1998-06-17 22:00	89360	----a-w-	c:\windows\SysWow64\VB5DB.DLL
2013-05-21 14:10 . 1998-06-13 20:53	44544	----a-w-	c:\windows\SysWow64\Gif89.dll
2013-05-17 19:55 . 2013-05-17 20:01	--------	d-----w-	c:\program files (x86)\The Guild 2 - Renaissance
2013-05-17 16:07 . 2013-05-17 16:07	--------	d-----w-	c:\users\User\AppData\Local\CrashRpt
2013-05-17 15:38 . 2013-05-17 15:38	--------	d-----w-	c:\program files (x86)\Atari
2013-05-17 14:21 . 2013-04-10 06:01	265064	----a-w-	c:\windows\system32\drivers\dxgmms1.sys
2013-05-17 14:21 . 2013-04-10 06:01	983400	----a-w-	c:\windows\system32\drivers\dxgkrnl.sys
2013-05-17 14:21 . 2011-02-03 11:25	144384	----a-w-	c:\windows\system32\cdd.dll
2013-05-17 14:21 . 2013-02-27 06:02	111448	----a-w-	c:\windows\system32\consent.exe
2013-05-17 14:21 . 2013-02-27 05:52	14172672	----a-w-	c:\windows\system32\shell32.dll
2013-05-17 14:21 . 2013-02-27 05:52	197120	----a-w-	c:\windows\system32\shdocvw.dll
2013-05-17 14:21 . 2013-02-27 05:48	1930752	----a-w-	c:\windows\system32\authui.dll
2013-05-17 14:21 . 2013-02-27 05:47	70144	----a-w-	c:\windows\system32\appinfo.dll
2013-05-17 14:21 . 2013-02-27 04:49	1796096	----a-w-	c:\windows\SysWow64\authui.dll
2013-05-17 14:20 . 2013-04-10 03:30	3153920	----a-w-	c:\windows\system32\win32k.sys
2013-05-17 14:20 . 2013-03-19 05:53	48640	----a-w-	c:\windows\system32\wwanprotdim.dll
2013-05-17 14:20 . 2013-03-19 05:53	230400	----a-w-	c:\windows\system32\wwansvc.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 15:16 . 2012-03-30 20:40	75825640	----a-w-	c:\windows\system32\MRT.exe
2013-06-12 14:28 . 2013-02-27 19:10	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 14:28 . 2013-02-27 19:10	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-10 13:22 . 2013-04-14 16:38	282104	----a-w-	c:\windows\SysWow64\PnkBstrB.xtr
2013-06-10 13:22 . 2013-04-14 16:28	282104	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2013-06-10 13:22 . 2013-04-14 16:28	234768	----a-w-	c:\windows\SysWow64\PnkBstrB.ex0
2013-06-08 14:14 . 2012-03-28 13:36	1092512	----a-w-	c:\windows\system32\npdeployJava1.dll
2013-06-08 14:14 . 2012-03-28 13:36	971680	----a-w-	c:\windows\system32\deployJava1.dll
2013-06-08 14:13 . 2012-04-30 12:04	866720	----a-w-	c:\windows\SysWow64\npDeployJava1.dll
2013-06-08 14:13 . 2012-03-28 13:37	788896	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-05-29 15:44 . 2012-07-17 12:37	22240	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-03 19:24 . 2013-05-03 19:24	634	----a-w-	c:\windows\system32\cc_20130503_212404.reg
2013-05-02 00:06 . 2010-11-21 03:27	278800	------w-	c:\windows\system32\MpSigStub.exe
2013-05-01 16:23 . 2013-05-01 16:23	286	----a-w-	c:\windows\system32\cc_20130501_182327.reg
2013-05-01 16:23 . 2013-05-01 16:23	147638	----a-w-	c:\windows\system32\cc_20130501_182309.reg
2013-04-27 15:31 . 2013-04-27 15:31	45056	----a-r-	c:\users\User\AppData\Roaming\Microsoft\Installer\{B2390904-74BD-48AA-B2CC-6612F8D46379}\GameShadow.exe1_0A3DE514292C4EBA987823B82B0B2BA2.exe
2013-04-27 15:31 . 2013-04-27 15:31	45056	----a-r-	c:\users\User\AppData\Roaming\Microsoft\Installer\{B2390904-74BD-48AA-B2CC-6612F8D46379}\GameShadow.exe_0A3DE514292C4EBA987823B82B0B2BA2.exe
2013-04-27 15:31 . 2013-04-27 15:31	45056	----a-r-	c:\users\User\AppData\Roaming\Microsoft\Installer\{B2390904-74BD-48AA-B2CC-6612F8D46379}\ARPPRODUCTICON.exe
2013-04-24 14:41 . 2013-04-14 16:28	76888	----a-w-	c:\windows\SysWow64\PnkBstrA.exe
2013-04-13 05:49 . 2013-05-17 14:21	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-17 14:21	350208	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-17 14:21	308736	----a-w-	c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-17 14:21	111104	----a-w-	c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-17 14:21	474624	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-17 14:21	2176512	----a-w-	c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 12:12	1656680	----a-w-	c:\windows\system32\drivers\ntfs.sys
2013-04-07 14:39 . 2013-01-12 11:06	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2013-04-07 14:39 . 2013-01-12 11:06	42776	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2013-04-02 10:04 . 2013-04-02 10:04	283200	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
2013-03-30 10:28 . 2013-02-05 14:06	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2013-03-30 10:28 . 2013-02-05 14:06	42776	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2013-03-29 12:02 . 2013-01-12 11:06	1236816	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-03-19 06:04 . 2013-04-10 12:25	5550424	----a-w-	c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-10 12:25	43520	----a-w-	c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-10 12:25	3968856	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-10 12:25	3913560	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-10 12:25	6656	----a-w-	c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-10 12:25	112640	----a-w-	c:\windows\system32\smss.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{9B6B03F1-16CF-4491-BBBB-E872802DD717}]
2013-02-03 15:26	111616	----a-w-	c:\programdata\DNSErrorHelper\bho.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\User\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\User\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\User\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-08-30 21:24	496056	----a-w-	c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\shellex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-03 19603048]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-05 291608]
"RoccatKonePure"="c:\program files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.EXE" [2012-11-30 569040]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe" [2012-08-30 202328]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R1 XSpaceWg;XSpaceWg;c:\windows\system32\drivers\XSpaceWg.sys;c:\windows\SYSNATIVE\drivers\XSpaceWg.sys [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 lvpepf64;Volume Adapter;c:\windows\system32\DRIVERS\lv302a64.sys;c:\windows\SYSNATIVE\DRIVERS\lv302a64.sys [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
R3 LVUSBS64;Logitech USB Monitor Filter;c:\windows\system32\drivers\LVUSBS64.sys;c:\windows\SYSNATIVE\drivers\LVUSBS64.sys [x]
R3 miniusb;FrameManager Display Adapter;c:\windows\system32\DRIVERS\sam_miniusb.sys;c:\windows\SYSNATIVE\DRIVERS\sam_miniusb.sys [x]
R3 papycpu;papycpu; [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 Samsung UPD Service2;Samsung UPD Service2;c:\windows\System32\SUPDSvc2.exe;c:\windows\SYSNATIVE\SUPDSvc2.exe [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe;c:\program files (x86)\Tunngle\TnglCtrl.exe [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 vvftav;vvftav;c:\windows\system32\drivers\vvftav.sys;c:\windows\SYSNATIVE\drivers\vvftav.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\users\User\AppData\Local\Temp\tmp624B.tmp;c:\users\User\AppData\Local\Temp\tmp624B.tmp [x]
R3 ZSMC0305;USB PC Camera VC305;c:\windows\system32\Drivers\usbVM305.sys;c:\windows\SYSNATIVE\Drivers\usbVM305.sys [x]
S0 CSCrySec;InfoWatch Encrypt Sector Library driver;c:\windows\system32\DRIVERS\CSCrySec.sys;c:\windows\SYSNATIVE\DRIVERS\CSCrySec.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 CSVirtualDiskDrv;InfoWatch Virtual Disk driver;c:\windows\system32\DRIVERS\CSVirtualDiskDrv.sys;c:\windows\SYSNATIVE\DRIVERS\CSVirtualDiskDrv.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys;c:\windows\SYSNATIVE\DRIVERS\kl2.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys;c:\windows\SYSNATIVE\drivers\acedrv11.sys [x]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
S2 CSObjectsSrv;Verwaltungsservice vom CryproStorage-System;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [x]
S2 LVPrcS64;Process Monitor;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys;c:\windows\SYSNATIVE\DRIVERS\LVPr2M64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 SODI;SODI;c:\windows\system32\DRIVERS\sam_miniport.sys;c:\windows\SYSNATIVE\DRIVERS\sam_miniport.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys;c:\windows\SYSNATIVE\DRIVERS\tap0901t.sys [x]
S4 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [x]
S4 FrameManager Service;FrameManager Service;c:\program files\Samsung\FrameManager\sam_service.exe;c:\program files\Samsung\FrameManager\sam_service.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-06 18:29	1165776	----a-w-	c:\program files (x86)\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-27 14:28]
.
2013-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-10 20:37]
.
2013-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-10 20:37]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-08-30 21:26	566712	----a-w-	c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\shellex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-01-16 12445288]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://google.de/
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 217.0.43.97 217.0.43.113
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h2syn23t.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - ExtSQL: 2013-04-16 19:43; {fe272bd1-5f76-4ea4-8501-a05d35d823fc}; c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h2syn23t.default\extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi
FF - ExtSQL: 2013-04-16 19:43; elemhidehelper@adblockplus.org; c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h2syn23t.default\extensions\elemhidehelper@adblockplus.org.xpi
FF - ExtSQL: 2013-05-12 21:19; helper@savefrom.net; c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h2syn23t.default\extensions\helper@savefrom.net.xpi
FF - ExtSQL: 2013-05-28 20:52; client@anonymox.net; c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h2syn23t.default\extensions\client@anonymox.net.xpi
FF - user.js: network.http.max-connections-per-server - 6
FF - user.js: network.http.max-persistent-connections-per-server - 3
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WinRing0_1_2_0]
"ImagePath"="\??\c:\users\User\AppData\Local\Temp\tmp624B.tmp"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-06-15  16:16:10
ComboFix-quarantined-files.txt  2013-06-15 14:16
.
Vor Suchlauf: 38 Verzeichnis(se), 1.517.633.789.952 Bytes frei
Nach Suchlauf: 39 Verzeichnis(se), 1.517.495.947.264 Bytes frei
.
- - End Of File - - A360E2997A384DAF9CED024139DA4D67
         

--- --- ---
A36C5E4F47E84449FF07ED3517B43A31

Supi,

alles von java deinstallieren, dann das:

JavaRa Free Download
Laden, entpacken und laufen lassen.
Alles bestätigen und alte Versionen löschen, reboot und aktuelle Java Version installieren.

das problem bleibt weiterhin mit java7u21 32bit bestehen

Genau Meldung bzw Screenshot?

Es kommt immernoch "Could not create the JAVA Virtual Machine"

Geh auf Systemsteuerung -> Alle Systemsteuerungselemente -> System -> Erweiterte Systemeinstellungen -> Erweitert -> Umgebungsvariablen

Lösche bei Benutzervariablen den Eintrag für Java

danke, genau das war die Lösung

nicht verzagen schrauber fragen

Zitat von schrauber

nicht verzagen schrauber fragen

Hab ich ja

Hehe

aufräumen

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

gut ist gemacht, jetzt läuft alles wieder

NOCHMAL:

Vielen, vielen Dank schrauber