Sofwareupdater.ui.exe

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-07-2013
Ran by Achim (administrator) on 03-07-2013 14:06:27
Running from C:\Users\Achim\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\System32\ASGT.exe
() C:\Program Files\Guard-ICQ\GuardICQ.exe
() C:\Windows\system32\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] RtHDVCpl.exe [x]
HKLM\...\Run: [Skytel] Skytel.exe [x]
HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-26] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1233920 2009-04-11] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
MountPoints2: {02e4ad25-ba1b-11e2-be95-0015af9bc5f5} - J:\LGAutoRun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://isearch.avg.com/?cid={0F60EBAF-4B21-4085-8655-4DF661FD1196}&mid=ddae352aff4b47d0b59ed168c3ea2f0f-33e718152db334caa7e70836743ad27c2ac3d5d1&lang=de&ds=od011&pr=sa&d=2012-07-08 22:08:21&v=11.1.0.12&sap=hp
HKCU SearchScopes: DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={0F60EBAF-4B21-4085-8655-4DF661FD1196}&mid=ddae352aff4b47d0b59ed168c3ea2f0f-33e718152db334caa7e70836743ad27c2ac3d5d1&lang=de&ds=od011&pr=sa&d=2012-07-08 22:08:21&v=11.1.0.12&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={0F60EBAF-4B21-4085-8655-4DF661FD1196}&mid=ddae352aff4b47d0b59ed168c3ea2f0f-33e718152db334caa7e70836743ad27c2ac3d5d1&lang=de&ds=od011&pr=sa&d=2012-07-08 22:08:21&v=11.1.0.12&sap=dsp&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} -  No File
Toolbar: HKCU -No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Tcpip\..\Interfaces\{D9FD40BE-343E-47F4-A880-F9BEC6909FDF}: [NameServer]217.237.151.161

FireFox:
========
FF ProfilePath: C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\q6i8e3dd.default
FF user.js: detected! => C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\q6i8e3dd.default\user.js
FF SearchEngine: Google
FF Homepage: google.de
FF Keyword.URL: hxxp://isearch.avg.com/search?cid=%7B82af102d-a94f-42db-9478-00c988531782%7D&mid=ddae352aff4b47d0b59ed168c3ea2f0f-33e718152db334caa7e70836743ad27c2ac3d5d1&ds=od011&v=11.1.0.12&lang=de&pr=sa&d=2012-07-08%2022%3A08%3A21&sap=ku&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: ???????? HTTP ?????????? - C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\q6i8e3dd.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
FF Extension: openingknots - C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\q6i8e3dd.default\Extensions\openingknots@gmail.com.xpi
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-06-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-26] (Avira Operations GmbH & Co. KG)
R2 ASGT; C:\Windows\System32\ASGT.exe [55296 2012-01-17] ()
R2 Guard.Mail.ru; C:\Program Files\Guard-ICQ\GuardICQ.exe [1564368 2012-05-14] ()
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [66872 2013-01-20] ()
S2 SystemStoreService; C:\Program Files\SoftwareUpdater\SystemStore.exe [296448 2013-05-11] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-05-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-05-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-05-03] (Avira Operations GmbH & Co. KG)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [38400 2009-03-02] (Samsung Electronics Co., Ltd.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-07-04] (DT Soft Ltd)
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] ()
S3 NAL; C:\Windows\system32\Drivers\iqvw32.sys [30816 2008-02-20] (Intel Corporation )
S3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1131136 2007-04-03] (Philips Semiconductors GmbH)
S3 PVUSB; C:\Windows\System32\DRIVERS\CESG502.sys [47648 2007-03-13] (Hitachi Semiconductor and Devices Sales Co.,Ltd.)
R3 rt2870; C:\Windows\System32\DRIVERS\rt2870.sys [1690784 2013-02-06] (Ralink Technology, Corp.)
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-25] (Avira GmbH)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2009-03-02] (Samsung Electronics)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
S3 AndNetDiag; system32\DRIVERS\lgandnetdiag.sys [x]
S3 ANDNetModem; system32\DRIVERS\lgandnetmodem.sys [x]
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 USBAAPL; System32\Drivers\usbaapl.sys [x]
S3 usbbus; system32\DRIVERS\lgusbbus.sys [x]
S3 UsbDiag; system32\DRIVERS\lgusbdiag.sys [x]
S3 USBModem; system32\DRIVERS\lgusbmodem.sys [x]
S3 vtany; \??\C:\Windows\vtany.sys [x]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-03 14:06 - 2013-07-03 14:06 - 00000000 ____D C:\FRST
2013-07-03 14:05 - 2013-07-03 14:05 - 01372415 ____A (Farbar) C:\Users\Achim\Desktop\FRST.exe
2013-07-03 13:13 - 2013-07-03 13:13 - 00082024 ____A C:\Users\Achim\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-03 13:12 - 2013-07-03 13:13 - 00327400 ____A C:\Windows\System32\FNTCACHE.DAT
2013-07-01 18:32 - 2013-07-01 18:31 - 00263592 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-07-01 18:32 - 2013-07-01 18:31 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-07-01 18:32 - 2013-07-01 18:31 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-07-01 18:32 - 2013-07-01 18:31 - 00094632 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll
2013-07-01 18:31 - 2013-07-01 18:31 - 00000000 ____D C:\Program Files\Java
2013-06-26 14:01 - 2013-06-26 14:01 - 00000000 ____A C:\Users\Achim\Desktop\Neues Textdokument.txt
2013-06-12 21:58 - 2013-05-17 01:08 - 12329984 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 21:58 - 2013-05-17 00:49 - 09738752 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 21:58 - 2013-05-17 00:39 - 01800704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 21:58 - 2013-05-17 00:28 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 21:58 - 2013-05-17 00:28 - 01104384 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 21:58 - 2013-05-17 00:27 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-12 21:58 - 2013-05-17 00:26 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-12 21:58 - 2013-05-17 00:23 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 21:58 - 2013-05-17 00:21 - 00717824 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 21:58 - 2013-05-17 00:21 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-12 21:58 - 2013-05-17 00:20 - 00420864 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-12 21:58 - 2013-05-17 00:19 - 00607744 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 21:58 - 2013-05-17 00:17 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 21:58 - 2013-05-17 00:17 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-12 21:58 - 2013-05-17 00:16 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 21:58 - 2013-05-17 00:12 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 17:27 - 2013-05-08 06:37 - 00905576 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 17:27 - 2013-05-03 00:03 - 03603832 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2013-06-12 17:27 - 2013-05-03 00:03 - 03551096 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-06-12 17:27 - 2013-05-02 06:04 - 00443904 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 17:27 - 2013-05-02 06:03 - 00037376 ____A (Microsoft Corporation) C:\Windows\System32\printcom.dll
2013-06-12 17:27 - 2013-04-24 06:00 - 00985600 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 17:27 - 2013-04-24 06:00 - 00133120 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 17:27 - 2013-04-24 06:00 - 00098304 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 17:27 - 2013-04-24 06:00 - 00041984 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 17:27 - 2013-04-24 03:46 - 00812544 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 17:27 - 2013-04-17 14:30 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 15:11 - 2013-06-12 15:11 - 00000000 ____D C:\Users\Achim\Desktop\Neuer Ordner
2013-06-11 21:18 - 2013-06-11 21:19 - 00000000 ____D C:\Users\Achim\Desktop\Stab2D
2013-06-03 17:30 - 2013-06-03 17:32 - 00000000 ____D C:\Users\Achim\Desktop\Mathe

==================== One Month Modified Files and Folders ========

2013-07-03 14:06 - 2013-07-03 14:06 - 00000000 ____D C:\FRST
2013-07-03 14:05 - 2013-07-03 14:05 - 01372415 ____A (Farbar) C:\Users\Achim\Desktop\FRST.exe
2013-07-03 14:05 - 2006-11-02 14:47 - 00003712 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-03 14:05 - 2006-11-02 14:47 - 00003712 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-03 14:00 - 2013-06-02 16:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-07-03 14:00 - 2012-10-14 23:23 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-03 13:39 - 2012-04-22 12:23 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-03 13:18 - 2008-01-21 09:16 - 01474308 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-03 13:16 - 2013-01-21 18:11 - 01450394 ____A C:\Windows\WindowsUpdate.log
2013-07-03 13:13 - 2013-07-03 13:13 - 00082024 ____A C:\Users\Achim\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-03 13:13 - 2013-07-03 13:12 - 00327400 ____A C:\Windows\System32\FNTCACHE.DAT
2013-07-03 13:13 - 2012-03-12 19:37 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-03 13:13 - 2006-11-02 15:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-03 13:13 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\System32\LogFiles
2013-07-02 22:58 - 2006-11-02 15:01 - 00032530 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-01 18:31 - 2013-07-01 18:32 - 00263592 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-07-01 18:31 - 2013-07-01 18:32 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-07-01 18:31 - 2013-07-01 18:32 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-07-01 18:31 - 2013-07-01 18:32 - 00094632 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll
2013-07-01 18:31 - 2013-07-01 18:31 - 00000000 ____D C:\Program Files\Java
2013-07-01 18:31 - 2012-10-14 23:26 - 00867240 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-07-01 18:31 - 2012-10-14 23:26 - 00789416 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-06-26 14:01 - 2013-06-26 14:01 - 00000000 ____A C:\Users\Achim\Desktop\Neues Textdokument.txt
2013-06-16 12:36 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-06-16 12:20 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\System32\de-DE
2013-06-12 21:56 - 2006-11-02 12:24 - 73381792 ____A (Microsoft Corporation) C:\Windows\System32\mrt.exe
2013-06-12 15:11 - 2013-06-12 15:11 - 00000000 ____D C:\Users\Achim\Desktop\Neuer Ordner
2013-06-11 22:40 - 2012-04-22 12:23 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-06-11 22:40 - 2012-04-22 12:23 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-06-11 21:19 - 2013-06-11 21:18 - 00000000 ____D C:\Users\Achim\Desktop\Stab2D
2013-06-03 17:32 - 2013-06-03 17:30 - 00000000 ____D C:\Users\Achim\Desktop\Mathe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-03 13:26

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-07-2013
Ran by Achim at 2013-07-03 14:07:11
Running from C:\Users\Achim\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)
ASUS GPU Tweak (Version: 2.1.0.1)
Avira Free Antivirus (Version: 13.0.0.3737)
CCleaner (Version: 3.23)
Crysis WARHEAD(R)
Crysis WARHEAD(R) (Version: 1.0)
Crysis(R) (Version: 1.00.0000)
DAEMON Tools Lite (Version: 4.45.4.0314)
Defraggler (Version: 2.14)
EE-ZDE
Electronic Arts Product Registration (Version: 1.01.0000)
Empire Earth
GIMP 2.8.0 (Version: 2.8.0)
Guard.ICQ
Harry Potter II
Harry Potter und der Feuerkelch™
Harry Potter und der Gefangene von Askaban(TM)
Harry Potter und der Halbblut-Prinz™ (Version: 1.0.0.0)
ICQ7M (Version: 7.8)
ImgBurn (Version: 2.5.7.0)
Intel(R) Network Connections 13.0.42.0 (Version: 13.0.42.0)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
MCCI(r)Firmware Update Driver for MTK (Version: 1.00.0000)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2742597)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (Version: 9.0.30411)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
NVIDIA 3D Vision Controller-Treiber 296.16 (Version: 296.16)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.109.718)
NVIDIA PhysX (Version: 9.12.0213)
NVIDIA PhysX-Systemsoftware 9.12.0213 (Version: 9.12.0213)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OpenOffice.org 3.4 (Version: 3.4.9590)
PunkBuster Services (Version: 0.986)
Realtek High Definition Audio Driver (Version: 6.0.1.5618)
SIW version 2011.10.29 (Version: 2011.10.29)
SpeedFan (remove only)
Stronghold Crusader Extreme HD (Version: 1.30.1000)
SWF Opener (Version: 1.3)
TubeBox (Version: 4.1.1.0)
TuxGuitar (Version: 1.2)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
VLC media player 2.0.1 (Version: 2.0.1)
WinRAR 4.20 (32-Bit) (Version: 4.20.0)

==================== Restore Points  =========================

19-05-2013 01:22:32 Geplanter Prüfpunkt
29-05-2013 10:48:38 Geplanter Prüfpunkt
30-05-2013 15:36:38 Geplanter Prüfpunkt
02-06-2013 14:29:06 Windows Update
03-06-2013 14:20:07 Geplanter Prüfpunkt
12-06-2013 05:33:21 Geplanter Prüfpunkt
12-06-2013 19:55:59 Windows Update
16-06-2013 11:40:17 Geplanter Prüfpunkt
26-06-2013 12:33:14 Geplanter Prüfpunkt
28-06-2013 11:15:24 Geplanter Prüfpunkt
29-06-2013 13:49:37 Geplanter Prüfpunkt
01-07-2013 16:31:03 Installed Java 7 Update 25
02-07-2013 19:32:20 Geplanter Prüfpunkt
03-07-2013 11:23:45 Removed CASIO FA-124.

==================== Scheduled Tasks (whitelisted) =============

Task: {0106FC09-D8FC-4EEF-8464-1B08F2AEDA67} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-11] (Adobe Systems Incorporated)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {4A3C0BD9-6EBB-4A0D-9995-B0D35B2F1044} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-09-24] (Piriform Ltd)
Task: {61CE2900-7823-4EFE-B93E-DD754CD37B32} - System32\Tasks\Hoolapp Init => C:\Users\Achim\AppData\Roaming\HOOLAP~1\Hoolapp.exe No File
Task: {85D08BD2-20B7-4E18-BCEA-D79A38C649BD} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {8828858F-A058-4300-8714-5C588DD942F2} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-06-11] ()
Task: {900B063A-CC68-4D0E-AA4B-44649E5EBB09} - System32\Tasks\Hoolapp For Android => C:\Users\Achim\AppData\Roaming\HOOLAP~1\UPDATE~1\UPDATE~1.EXE No File
Task: {944AC94E-6611-45A9-B9F8-F76C950361E0} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-06-11] ()
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\system32\rundll32.exe [2006-11-02] (Microsoft Corporation)
Task: {B5AE5739-7E02-422B-B71C-8C46C6D0BB98} - System32\Tasks\User_Feed_Synchronization-{F5CF370E-6AAC-4E90-B948-23977CDF2146} => C:\Windows\system32\msfeedssync.exe [2012-05-15] (Microsoft Corporation)
Task: {E4C453C5-1D86-4FD3-9575-8C24483C9BE4} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/03/2013 01:14:36 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/02/2013 06:11:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/01/2013 06:16:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/29/2013 02:25:30 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/28/2013 09:00:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/28/2013 11:14:41 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/26/2013 00:40:13 PM) (Source: ESENT) (User: )
Description: Windows (3436) Windows: Die Shadowkopfzeile für Datei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk konnte nicht geschrieben werden. Fehler -1032.

Error: (06/26/2013 00:40:13 PM) (Source: ESENT) (User: )
Description: Windows (3436) Windows: Versuch, Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (06/26/2013 00:32:07 PM) (Source: ESENT) (User: )
Description: Windows (3436) Windows: Die Shadowkopfzeile für Datei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk konnte nicht geschrieben werden. Fehler -1032.

Error: (06/26/2013 00:32:07 PM) (Source: ESENT) (User: )
Description: Windows (3436) Windows: Versuch, Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.


System errors:
=============
Error: (07/03/2013 01:15:33 PM) (Source: Service Control Manager) (User: )
Description: NVIDIA Update Service Daemon%%1069

Error: (07/03/2013 01:15:33 PM) (Source: Service Control Manager) (User: )
Description: nvUpdatusService.\UpdatusUser%%1330

Error: (07/03/2013 01:14:37 PM) (Source: Service Control Manager) (User: )
Description: DgiVecp%%20

Error: (07/02/2013 06:12:46 PM) (Source: Service Control Manager) (User: )
Description: NVIDIA Update Service Daemon%%1069

Error: (07/02/2013 06:12:46 PM) (Source: Service Control Manager) (User: )
Description: nvUpdatusService.\UpdatusUser%%1330

Error: (07/02/2013 06:11:53 PM) (Source: Service Control Manager) (User: )
Description: DgiVecp%%20

Error: (07/01/2013 06:17:08 PM) (Source: Service Control Manager) (User: )
Description: NVIDIA Update Service Daemon%%1069

Error: (07/01/2013 06:17:08 PM) (Source: Service Control Manager) (User: )
Description: nvUpdatusService.\UpdatusUser%%1330

Error: (07/01/2013 06:16:25 PM) (Source: Service Control Manager) (User: )
Description: DgiVecp%%20

Error: (06/29/2013 02:26:11 PM) (Source: Service Control Manager) (User: )
Description: NVIDIA Update Service Daemon%%1069


Microsoft Office Sessions:
=========================
Error: (07/03/2013 01:14:36 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/02/2013 06:11:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/01/2013 06:16:24 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/29/2013 02:25:30 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/28/2013 09:00:34 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/28/2013 11:14:41 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/26/2013 00:40:13 PM) (Source: ESENT)(User: )
Description: Windows3436Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk-1032

Error: (06/26/2013 00:40:13 PM) (Source: ESENT)(User: )
Description: Windows3436Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (06/26/2013 00:32:07 PM) (Source: ESENT)(User: )
Description: Windows3436Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk-1032

Error: (06/26/2013 00:32:07 PM) (Source: ESENT)(User: )
Description: Windows3436Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.


CodeIntegrity Errors:
===================================
  Date: 2013-02-23 14:52:13.309
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dxgi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-23 14:51:48.936
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dxgi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-23 14:49:22.237
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dxgi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-05-10 18:21:39.870
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-05-10 18:21:39.823
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-05-10 18:21:39.776
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-05-10 18:21:39.714
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-05-10 18:21:39.651
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 43%
Total physical RAM: 3069.45 MB
Available physical RAM: 1723.87 MB
Total Pagefile: 6357.93 MB
Available Pagefile: 5087.38 MB
Total Virtual: 2047.88 MB
Available Virtual: 1900.89 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.76 GB) (Free:279.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 2BAB359D)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================