spyware adware malware etc was soll ich tun antivir ist auch geblockt

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2013
Ran by Gruen (administrator) on 25-07-2013 21:20:46
Running from C:\Users\Gruen\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\PROGRAM FILES (X86)\WINZIPPER\WINZIPERSVC.EXE
(NVIDIA Corporation) C:\PROGRAM FILES\NVIDIA CORPORATION\DISPLAY\NVXDSYNC.EXE
(NVIDIA Corporation) C:\WINDOWS\SYSTEM32\NVVSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY CBE\ENGINE\20.4.0.40\CCSVCHST.EXE
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
() C:\Users\Gruen\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY CBE\ENGINE\20.4.0.40\CCSVCHST.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Crawler.com) C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE
(NVIDIA Corporation) C:\PROGRAM FILES\NVIDIA CORPORATION\DISPLAY\NVTRAY.EXE
(Realtek Semiconductor) C:\PROGRAM FILES\REALTEK\AUDIO\HDA\RAVCPL64.EXE
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Spotify Ltd) C:\USERS\GRUEN\APPDATA\ROAMING\SPOTIFY\DATA\SPOTIFYWEBHELPER.EXE
(Dropbox, Inc.) C:\USERS\GRUEN\APPDATA\ROAMING\DROPBOX\BIN\DROPBOX.EXE
(Inbox.com, Inc.) C:\PROGRAM FILES (X86)\INBOX TOOLBAR\INBOX.EXE
(Photobucket) C:\PROGRAM FILES (X86)\PHOTOBUCKET BACKUP\PHOTOBUCKET.APP.EXE
(Ask) C:\PROGRAM FILES (X86)\ASK.COM\UPDATER\UPDATER.EXE
(RealNetworks, Inc.) C:\PROGRAM FILES (X86)\REAL\REALPLAYER\UPDATE\REALSCHED.EXE
(Oracle Corporation) C:\PROGRAM FILES (X86)\COMMON FILES\JAVA\JAVA UPDATE\JUSCHED.EXE
(Crawler.com) C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORUPDATE.EXE
(coolspot AG, Düsseldorf) C:\COOLSPOT AG\PERSONAL ID\PID.EXE
(TeamViewer GmbH) C:\PROGRAM FILES (X86)\TEAMVIEWER\VERSION8\TEAMVIEWER_SERVICE.EXE
(TeamViewer GmbH) C:\PROGRAM FILES (X86)\TEAMVIEWER\VERSION8\TEAMVIEWER.EXE
(TeamViewer GmbH) C:\PROGRAM FILES (X86)\TEAMVIEWER\VERSION8\TV_W32.EXE
(TeamViewer GmbH) C:\PROGRAM FILES (X86)\TEAMVIEWER\VERSION8\TV_X64.EXE
(TeamViewer GmbH) C:\PROGRAM FILES (X86)\TEAMVIEWER\VERSION8\TEAMVIEWER_DESKTOP.EXE
(Google Inc.) C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777296 2012-11-09] (Crawler.com)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [Ocs_SM] - C:\Users\Gruen\AppData\Roaming\OCS\SM\SearchAnonymizer.exe [106496 2013-04-14] (OCS)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1672616 2013-07-10] (Valve Corporation)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Gruen\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-20] (Spotify Ltd)
HKCU\...\Run: [SDP] - C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe [201808 2012-10-03] (Somoto)
HKCU\...\Run: [Personal ID] - C:\COOLSP~1\PERSON~1\PID.EXE [1132984 2012-12-21] (coolspot AG, Düsseldorf)
HKCU\...\Run: [Spotify] - C:\Users\Gruen\AppData\Roaming\Spotify\spotify.exe [4640768 2013-07-20] (Spotify Ltd)
HKCU\...\Run: [Pokki] - C:\Windows\system32\rundll32.exe [45568 2009-07-14] (Microsoft Corporation)
MountPoints2: {b1dc9b27-0234-11e2-8b29-806e6f6e6963} - E:\zdata\cobi.exe
HKLM-x32\...\Run: [InboxToolbar] - "C:\Program Files (x86)\Inbox Toolbar\Inbox.exe" /STARTUP [1738904 2013-07-19] (Inbox.com, Inc.)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [Photobucket Backup] - C:\Program Files (x86)\Photobucket Backup\Photobucket.App.exe [320000 2013-01-29] (Photobucket)
HKLM-x32\...\Run: [ApnUpdater] - "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" [1646216 2013-03-31] (Ask)
HKLM-x32\...\Run: [TkBellExe] - "C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot [295512 2013-04-20] (RealNetworks, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKU\UpdatusUser\...\Run: [Steam] - "C:\Program Files (x86)\Steam\steam.exe" -silent [1672616 2013-07-10] (Valve Corporation)
HKU\UpdatusUser\...\Run: [Spotify Web Helper] - "C:\Users\Gruen\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1104384 2013-07-20] (Spotify Ltd)
HKU\UpdatusUser\...\Run: [SDP] - C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto  [201808 2012-10-03] (Somoto)
HKU\UpdatusUser\...\Run: [Personal ID] - C:\COOLSP~1\PERSON~1\PID.EXE [1132984 2012-12-21] (coolspot AG, Düsseldorf)
HKU\UpdatusUser\...\Run: [EADM] - "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart [3456080 2013-06-04] (Electronic Arts)
HKU\UpdatusUser\...\Run: [Driver Whiz] - C:\PROGRAM FILES (X86)\DRIVER WHIZ\DRIVER WHIZ\DRIVERWHIZ.EXE /applicationMode:systemTray /showWelcome:false [x]
HKU\UpdatusUser\...\Run: [Spotify] - "C:\Users\Gruen\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart [4640768 2013-07-20] (Spotify Ltd)
HKU\UpdatusUser\...\Run: [DriverBoost] - C:\PROGRAM FILES (X86)\DRIVERBOOST\DRIVERBOOST\DRIVERBOOST.EXE /applicationMode:systemTray /showWelcome:false [x]
HKU\UpdatusUser\...\Run: [PCSpeedUp] - C:\Program Files (x86)\PC Beschleunigen\PCSUNotifier.exe [x]
HKU\UpdatusUser\...\Run: [Pokki] - "%LOCALAPPDATA%\Pokki\Engine\pokki.exe" [x]
Startup: C:\Users\Gruen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Gruen\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=816c40bb-55f8-49f5-97fe-07774352533e&searchtype=ds&q={searchTerms}&installDate=12/06/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://mixidj.delta-search.com/?babsrc=HP_ss&mntrId=6802001CDF329308&affID=121139&tsp=4934
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www1.delta-search.com/?affID=119828&babsrc=HP_ss&mntrId=6802001CDF329308
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp:///
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=816c40bb-55f8-49f5-97fe-07774352533e&searchtype=ds&q={searchTerms}&installDate=12/06/2013
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.chatzum.com/?orig=HP&affid=62&cztbid=322776071
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=816c40bb-55f8-49f5-97fe-07774352533e&searchtype=ds&q={searchTerms}&installDate=12/06/2013
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=816c40bb-55f8-49f5-97fe-07774352533e&searchtype=ds&q={searchTerms}&installDate=12/06/2013
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=816c40bb-55f8-49f5-97fe-07774352533e&searchtype=ds&q={searchTerms}&installDate=12/06/2013
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=816c40bb-55f8-49f5-97fe-07774352533e&searchtype=ds&q={searchTerms}&installDate=12/06/2013
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D267372633D49452D536561726368426F7826464F524D3D494531305352&st={searchTerms}&clid=f49b116f-9e5e-4367-8254-fb6cb5fa9fdd&pid=freewarede&k=0
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&babsrc=SP_ss_sps&mntrId=6802001CDF329308&affID=121139&tsp=4934
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=20&locale=de_DE&gct=kwd&qsrc=2869
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: No Name - {11111111-1111-1111-1111-110311151154} -  No File
BHO-x32: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} -  No File
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: No Name - {4D6A9BBF-402C-4301-B1EF-28D04F71D761} -  No File
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: AppGraffiti - {6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} - C:\PROGRA~2\APPGRA~1\APPGRA~1.DLL (Omega Partners Ltd)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} -  No File
Toolbar: HKLM-x32 - No Name - {82E1477C-B154-48D3-9891-33D83C26BCD3} -  No File
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - No Name - {CA9B9C89-4662-4ADC-9C23-A452BECD5D19} -  No File
Toolbar: HKCU - No Name - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} -  No File
Handler-x32: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\PROGRA~2\INBOXT~1\Inbox.dll (Inbox.com, Inc.)
Tcpip\Parameters: [DhcpNameServer] 82.212.62.62 78.42.43.62

FireFox:
========
FF ProfilePath: C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default
FF user.js: detected! => C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\user.js
FF Homepage: hxxp://mixidj.delta-search.com/?babsrc=HP_ss&mntrId=6802001CDF329308&affID=121139&tsp=4934
FF SelectedSearchEngine: Mixi.DJ Search
FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=816c40bb-55f8-49f5-97fe-07774352533e&searchtype=ds&installDate=12/06/2013&q=
FF NewTab: hxxp://mixidj.delta-search.com/?babsrc=NT_ss&mntrId=6802001CDF329308&affID=121139&tsp=4934
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.1.18 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.1.18 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Gruen\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF SearchPlugin: C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\searchplugins\mixidj.xml
FF SearchPlugin: C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\searchplugins\SweetIM Search.xml
FF SearchPlugin: C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\searchplugins\Web Search.xml
FF Extension: No Name - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\6be3335b-ef79-4b0b-a0ba-b87afbc6f4ad@6bbb4d2e-e33e-4fa5-9b37-934f4fb50182.com
FF Extension: Amazon-Icon - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\amazon-icon@winload.de
FF Extension: AppGraffiti - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\AppGraffiti@AppGraffiti.com
FF Extension: No Name - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\ffxtlbr@babylon.com
FF Extension: Delta Toolbar - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\ffxtlbr@delta.com
FF Extension: incredibar.com - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\ffxtlbr@incredibar.com
FF Extension: MixiDJ Toolbar - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\ffxtlbr@mixidj.com
FF Extension: No Name - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\staged
FF Extension: Ask Toolbar - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\toolbar@ask.com
FF Extension: addon - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\addon@defaulttab.com.xpi
FF Extension: onlinehdtv - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\onlinehdtv@onlinehd.tv.xpi
FF Extension: plugin - C:\Users\Gruen\AppData\Roaming\Mozilla\Firefox\Profiles\zdcwyjec.default\Extensions\plugin@yontoo.com.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [siteranker@siteranker.com] C:\Program Files (x86)\SiteRanker\firefox\
FF Extension: SiteRanker - C:\Program Files (x86)\SiteRanker\firefox\
FF HKLM-x32\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{DAC3F861-B30D-40dd-9166-F4E75327FAC7}] C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn\
FF HKCU\...\Firefox\Extensions: [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension
FF HKCU\...\Firefox\Extensions: [lrcsearch@bjornet.net] C:\Program Files (x86)\LyricSearch\FF\
FF Extension: No Name - C:\Program Files (x86)\LyricSearch\FF\

Chrome: 
=======
CHR HomePage: hxxp://google.de/
CHR RestoreOnStartup: "hxxp://mixidj.delta-search.com/?babsrc=HP_ss&mntrId=6802001CDF329308&affID=121139&tsp=4934"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.89\npGoogleUpdate3.dll No File
CHR Extension: (TinEye Reverse Image Search) - C:\Users\Gruen\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.2_0
CHR Extension: (Norton Identity Protection) - C:\Users\Gruen\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_1
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx
CHR HKLM-x32\...\Chrome\Extension: [aaaaojmikegpiepcfdkkjaplodkpfmlo] - C:\Users\Gruen\AppData\Local\APN\GoogleCRXs\apnorjtoolbar.crx
CHR HKLM-x32\...\Chrome\Extension: [angobeimajilfhlcpeiccndaifchnppl] - C:\Program Files (x86)\AppGraffiti\Chrome\graff_chr.crx
CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx
CHR HKLM-x32\...\Chrome\Extension: [cjkpeelhbaipjkogeledgpkllepmkdmc] - C:\Program Files (x86)\LyricSearch\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [dkinklhnkmkhkhofcnapakaoehijaoih] - C:\Program Files (x86)\OnlineHD.TV\onhd11.crx
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx
CHR HKLM-x32\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\SysWOW64\jmdp\pnte.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Gruen\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\Exts\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files (x86)\Yontoo\YontooLayers.crx
CHR HKLM-x32\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx

==================== Services (Whitelisted) =================

R2 NIS; C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-03-06] ()
R2 SearchAnonymizer; C:\Users\Gruen\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe [40960 2013-04-14] ()
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1148664 2012-11-09] (Crawler.com)
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [424104 2013-07-05] (Taiwan Shui Mu Chih Ching Technology Limited.)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-02-15] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [39768 2013-02-18] (AVG Technologies)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-05-31] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-05-31] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-08-18] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130724.001\IDSvia64.sys [513184 2013-05-11] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130724.001\IDSvia64.sys [513184 2013-05-11] (Symantec Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-02-15] ()
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130725.003\ENG64.SYS [126040 2013-07-11] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130725.003\ENG64.SYS [126040 2013-07-11] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130725.003\EX64.SYS [2098776 2013-07-11] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130725.003\EX64.SYS [2098776 2013-07-11] (Symantec Corporation)
R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                           )
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2012-11-10] (Windows (R) Win 7 DDK provider)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
S3 esgiguard; \??\C:\PROGRAM FILES\ENIGMA SOFTWARE GROUP\SPYHUNTER\esgiguard.sys [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-25 21:07 - 2013-07-25 21:08 - 00028405 _____ C:\Users\Gruen\Desktop\Addition.txt
2013-07-25 20:56 - 2013-07-25 20:56 - 00000000 ____D C:\FRST
2013-07-25 20:55 - 2013-07-25 20:55 - 01779761 _____ (Farbar) C:\Users\Gruen\Desktop\FRST64.exe
2013-07-25 20:20 - 2013-07-25 20:20 - 00001158 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-07-25 20:20 - 2013-07-25 20:20 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-07-25 00:21 - 2013-07-25 13:18 - 00000168 _____ C:\Windows\setupact.log
2013-07-25 00:21 - 2013-07-25 00:21 - 00000000 _____ C:\Windows\setuperr.log
2013-07-23 23:20 - 2013-07-23 23:20 - 00000000 ____D C:\Users\Gruen\AppData\Local\Funcom
2013-07-23 23:20 - 2013-07-23 23:20 - 00000000 ____D C:\Program Files (x86)\Funcom
2013-07-20 23:53 - 2013-07-21 11:54 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\Awesomium
2013-07-20 23:53 - 2013-07-20 23:53 - 00000677 _____ C:\Users\Public\Desktop\Panzar.lnk
2013-07-18 16:01 - 2013-07-18 16:01 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\DefaultTab
2013-07-16 17:05 - 2013-07-16 17:05 - 00002713 _____ C:\Users\Public\Desktop\Loong - Dragonblood.lnk
2013-07-16 17:03 - 2013-07-16 17:03 - 00000000 ____D C:\gamigo
2013-07-13 12:21 - 2013-07-13 12:21 - 00000154 _____ C:\general_info_filter.ini
2013-07-13 11:48 - 2013-07-13 12:09 - 00000083 _____ C:\attach.ini
2013-07-13 11:45 - 2013-07-13 12:21 - 00000239 _____ C:\mapui.ini
2013-07-13 11:27 - 2013-07-13 11:27 - 00000986 _____ C:\Users\Public\Desktop\Age of Wushu.lnk
2013-07-13 11:27 - 2013-07-13 11:27 - 00000000 ____D C:\Program Files (x86)\Snail Games USA
2013-07-13 10:21 - 2013-07-13 10:21 - 00001293 _____ C:\Users\Gruen\Desktop\AgeofWushu_downloader.lnk
2013-07-12 09:57 - 2013-07-12 09:57 - 00003144 _____ C:\{67F01E90-61B7-4BFA-AFED-4A0484D067BE}
2013-07-11 08:03 - 2013-07-11 08:03 - 00000000 ____D C:\fafc3aedc42a660220babc
2013-07-11 07:56 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 07:56 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 07:56 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 07:56 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 07:56 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 07:56 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 07:56 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 07:56 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 07:56 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 07:56 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 07:56 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 07:56 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 07:56 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 07:56 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 07:56 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 07:56 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 07:56 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 07:56 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 07:56 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 07:56 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 07:55 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 07:55 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 07:55 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 07:55 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 07:55 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 07:55 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 07:55 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 07:55 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 07:55 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 07:55 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 07:55 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 07:23 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 07:23 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 07:23 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 07:23 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 07:23 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 07:22 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 07:22 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 15:51 - 2013-07-10 15:51 - 02239792 _____ C:\Users\Gruen\Downloads\divinity2_egodraconissavegame-cripz.zip
2013-07-06 12:13 - 2013-07-06 12:13 - 00002512 _____ C:\{B20950D2-3ABA-4328-824D-518176B22882}
2013-07-06 12:10 - 2013-07-06 12:10 - 00002776 _____ C:\{E3D0D857-FF1D-4B6B-8C3E-9FEABB31F3EC}
2013-07-06 10:18 - 2013-07-06 10:17 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-06 10:18 - 2013-07-06 10:17 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-07-06 10:18 - 2013-07-06 10:17 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-07-06 10:18 - 2013-07-06 10:17 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-06 10:17 - 2013-07-06 10:17 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-05 18:20 - 2013-07-05 18:21 - 00000000 ___RD C:\Users\Gruen\Downloads\Neuer Aktenkoffer
2013-07-05 10:05 - 2013-07-23 15:58 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-07-05 10:05 - 2013-07-05 10:05 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\WinZipper
2013-07-05 10:05 - 2013-07-05 10:05 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\337
2013-07-05 09:21 - 2013-07-25 21:21 - 00001158 _____ C:\Windows\Tasks\Feven-updater.job
2013-07-05 09:21 - 2013-07-05 09:21 - 00004188 _____ C:\Windows\System32\Tasks\Feven-updater
2013-07-05 09:20 - 2013-07-25 21:21 - 00001062 _____ C:\Windows\Tasks\Feven-enabler.job
2013-07-05 09:20 - 2013-07-25 21:20 - 00001162 _____ C:\Windows\Tasks\Feven-codedownloader.job
2013-07-05 09:20 - 2013-07-05 09:21 - 00004092 _____ C:\Windows\System32\Tasks\Feven-enabler
2013-07-05 09:20 - 2013-07-05 09:20 - 00004192 _____ C:\Windows\System32\Tasks\Feven-codedownloader
2013-07-05 09:19 - 2013-07-12 09:53 - 00000000 ____D C:\ProgramData\eSafe
2013-07-05 09:17 - 2013-07-25 21:17 - 00001858 _____ C:\Windows\Tasks\Feven-chromeinstaller.job
2013-07-05 09:17 - 2013-07-25 21:17 - 00001782 _____ C:\Windows\Tasks\Feven-firefoxinstaller.job
2013-07-04 19:34 - 2013-07-04 19:34 - 00522248 _____ C:\Users\Gruen\Downloads\Setup (1).exe
2013-07-04 11:43 - 2013-07-04 11:43 - 00018102 _____ C:\Users\Gruen\Downloads\Anschreiben1.odt
2013-07-04 11:11 - 2013-07-04 11:11 - 00007630 _____ C:\Users\Gruen\Downloads\lebenslauf 13.odt
2013-07-04 10:57 - 2013-07-04 10:59 - 30331923 _____ C:\Users\Gruen\Documents\1.xps
2013-07-03 19:44 - 2013-07-03 19:44 - 00523296 _____ C:\Users\Gruen\Downloads\Setup.exe
2013-06-27 21:09 - 2013-06-27 21:09 - 00001102 _____ C:\Users\Public\Desktop\Free RAR Extract Frog.lnk
2013-06-27 21:09 - 2013-06-27 21:09 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\Philipp Winterberg
2013-06-27 21:08 - 2013-06-27 21:08 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\OpenCandy
2013-06-27 21:08 - 2013-06-27 21:08 - 00000000 ____D C:\Program Files (x86)\Free RAR Extract Frog

==================== One Month Modified Files and Folders =======

2013-07-25 21:21 - 2013-07-05 09:21 - 00001158 _____ C:\Windows\Tasks\Feven-updater.job
2013-07-25 21:21 - 2013-07-05 09:20 - 00001062 _____ C:\Windows\Tasks\Feven-enabler.job
2013-07-25 21:20 - 2013-07-05 09:20 - 00001162 _____ C:\Windows\Tasks\Feven-codedownloader.job
2013-07-25 21:17 - 2013-07-05 09:17 - 00001858 _____ C:\Windows\Tasks\Feven-chromeinstaller.job
2013-07-25 21:17 - 2013-07-05 09:17 - 00001782 _____ C:\Windows\Tasks\Feven-firefoxinstaller.job
2013-07-25 21:08 - 2013-07-25 21:07 - 00028405 _____ C:\Users\Gruen\Desktop\Addition.txt
2013-07-25 21:08 - 2013-04-15 09:37 - 00000000 ____D C:\Windows\SysWOW64\jmdp
2013-07-25 20:58 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-25 20:58 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-25 20:56 - 2013-07-25 20:56 - 00000000 ____D C:\FRST
2013-07-25 20:55 - 2013-07-25 20:55 - 01779761 _____ (Farbar) C:\Users\Gruen\Desktop\FRST64.exe
2013-07-25 20:53 - 2012-09-19 10:04 - 00067328 _____ C:\Users\Gruen\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-25 20:50 - 2012-09-18 18:51 - 01294717 _____ C:\Windows\WindowsUpdate.log
2013-07-25 20:38 - 2012-09-20 13:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-25 20:32 - 2012-09-19 10:57 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-25 20:20 - 2013-07-25 20:20 - 00001158 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-07-25 20:20 - 2013-07-25 20:20 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-07-25 16:43 - 2012-11-09 17:21 - 00000000 ____D C:\ProgramData\Spyware Terminator
2013-07-25 15:32 - 2012-09-19 10:57 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-25 13:49 - 2012-09-30 14:55 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\Spotify
2013-07-25 13:25 - 2013-01-26 01:11 - 00000000 ____D C:\Program Files (x86)\Origin
2013-07-25 13:21 - 2012-12-27 16:32 - 00000000 ___RD C:\Users\Gruen\Dropbox
2013-07-25 13:21 - 2012-12-27 16:27 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\Dropbox
2013-07-25 13:19 - 2012-09-19 12:04 - 00000000 ____D C:\Program Files (x86)\Steam
2013-07-25 13:18 - 2013-07-25 00:21 - 00000168 _____ C:\Windows\setupact.log
2013-07-25 13:18 - 2012-11-18 03:21 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-25 13:18 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-25 00:21 - 2013-07-25 00:21 - 00000000 _____ C:\Windows\setuperr.log
2013-07-24 16:48 - 2013-05-20 08:26 - 00000000 ____D C:\Users\Gruen\AppData\Local\CrashDumps
2013-07-24 13:00 - 2013-04-14 16:40 - 00000308 _____ C:\Windows\Tasks\FreeFixer background scan.job
2013-07-23 23:20 - 2013-07-23 23:20 - 00000000 ____D C:\Users\Gruen\AppData\Local\Funcom
2013-07-23 23:20 - 2013-07-23 23:20 - 00000000 ____D C:\Program Files (x86)\Funcom
2013-07-23 23:20 - 2012-12-11 23:02 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-23 23:20 - 2012-12-11 23:02 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-07-23 20:51 - 2012-11-01 04:16 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\vlc
2013-07-23 15:58 - 2013-07-05 10:05 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-07-21 11:54 - 2013-07-20 23:53 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\Awesomium
2013-07-20 23:53 - 2013-07-20 23:53 - 00000677 _____ C:\Users\Public\Desktop\Panzar.lnk
2013-07-20 23:52 - 2012-10-15 20:02 - 00000000 ____D C:\games
2013-07-20 15:53 - 2012-09-30 14:55 - 00000000 ____D C:\Users\Gruen\AppData\Local\Spotify
2013-07-20 00:26 - 2012-11-09 17:11 - 00000000 ____D C:\Program Files (x86)\Inbox Toolbar
2013-07-18 16:46 - 2013-05-19 12:33 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-07-18 16:45 - 2012-12-03 17:15 - 00000000 ____D C:\Users\Gruen\AppData\Local\Sony Online Entertainment
2013-07-18 16:22 - 2012-09-18 19:44 - 00000000 ____D C:\Windows\Panther
2013-07-18 16:03 - 2013-04-07 21:29 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-07-18 16:03 - 2013-04-07 21:29 - 00000000 ____D C:\Program Files\CCleaner
2013-07-18 16:01 - 2013-07-18 16:01 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\DefaultTab
2013-07-17 15:08 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-16 17:05 - 2013-07-16 17:05 - 00002713 _____ C:\Users\Public\Desktop\Loong - Dragonblood.lnk
2013-07-16 17:03 - 2013-07-16 17:03 - 00000000 ____D C:\gamigo
2013-07-13 12:21 - 2013-07-13 12:21 - 00000154 _____ C:\general_info_filter.ini
2013-07-13 12:21 - 2013-07-13 11:45 - 00000239 _____ C:\mapui.ini
2013-07-13 12:09 - 2013-07-13 11:48 - 00000083 _____ C:\attach.ini
2013-07-13 11:27 - 2013-07-13 11:27 - 00000986 _____ C:\Users\Public\Desktop\Age of Wushu.lnk
2013-07-13 11:27 - 2013-07-13 11:27 - 00000000 ____D C:\Program Files (x86)\Snail Games USA
2013-07-13 11:27 - 2012-09-19 13:26 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-13 10:21 - 2013-07-13 10:21 - 00001293 _____ C:\Users\Gruen\Desktop\AgeofWushu_downloader.lnk
2013-07-12 15:27 - 2012-09-19 10:57 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-12 15:27 - 2012-09-19 10:57 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-12 09:57 - 2013-07-12 09:57 - 00003144 _____ C:\{67F01E90-61B7-4BFA-AFED-4A0484D067BE}
2013-07-12 09:53 - 2013-07-05 09:19 - 00000000 ____D C:\ProgramData\eSafe
2013-07-11 14:34 - 2011-04-12 09:43 - 00707706 _____ C:\Windows\system32\perfh007.dat
2013-07-11 14:34 - 2011-04-12 09:43 - 00153192 _____ C:\Windows\system32\perfc007.dat
2013-07-11 14:34 - 2009-07-14 07:13 - 01664614 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-11 12:37 - 2009-07-14 06:45 - 00306248 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 12:36 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 12:36 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 12:36 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 08:03 - 2013-07-11 08:03 - 00000000 ____D C:\fafc3aedc42a660220babc
2013-07-11 07:58 - 2012-09-18 19:06 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-11 07:41 - 2013-04-09 02:40 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 07:41 - 2013-04-09 02:40 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-10 15:51 - 2013-07-10 15:51 - 02239792 _____ C:\Users\Gruen\Downloads\divinity2_egodraconissavegame-cripz.zip
2013-07-06 12:13 - 2013-07-06 12:13 - 00002512 _____ C:\{B20950D2-3ABA-4328-824D-518176B22882}
2013-07-06 12:10 - 2013-07-06 12:10 - 00002776 _____ C:\{E3D0D857-FF1D-4B6B-8C3E-9FEABB31F3EC}
2013-07-06 10:17 - 2013-07-06 10:18 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-06 10:17 - 2013-07-06 10:18 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-07-06 10:17 - 2013-07-06 10:18 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-07-06 10:17 - 2013-07-06 10:18 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-06 10:17 - 2013-07-06 10:17 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-06 10:17 - 2013-04-12 13:54 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-07-06 10:17 - 2013-04-12 13:54 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-07-05 21:12 - 2013-04-11 10:13 - 00000000 ____D C:\Users\Gruen\AppData\Local\Pokki
2013-07-05 18:21 - 2013-07-05 18:20 - 00000000 ___RD C:\Users\Gruen\Downloads\Neuer Aktenkoffer
2013-07-05 10:05 - 2013-07-05 10:05 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\WinZipper
2013-07-05 10:05 - 2013-07-05 10:05 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\337
2013-07-05 09:21 - 2013-07-05 09:21 - 00004188 _____ C:\Windows\System32\Tasks\Feven-updater
2013-07-05 09:21 - 2013-07-05 09:20 - 00004092 _____ C:\Windows\System32\Tasks\Feven-enabler
2013-07-05 09:20 - 2013-07-05 09:20 - 00004192 _____ C:\Windows\System32\Tasks\Feven-codedownloader
2013-07-05 09:19 - 2011-06-11 02:58 - 00420944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll
2013-07-05 09:18 - 2013-06-12 22:28 - 00003388 _____ C:\Windows\System32\Tasks\EPUpdater
2013-07-04 19:34 - 2013-07-04 19:34 - 00522248 _____ C:\Users\Gruen\Downloads\Setup (1).exe
2013-07-04 11:43 - 2013-07-04 11:43 - 00018102 _____ C:\Users\Gruen\Downloads\Anschreiben1.odt
2013-07-04 11:11 - 2013-07-04 11:11 - 00007630 _____ C:\Users\Gruen\Downloads\lebenslauf 13.odt
2013-07-04 10:59 - 2013-07-04 10:57 - 30331923 _____ C:\Users\Gruen\Documents\1.xps
2013-07-03 19:44 - 2013-07-03 19:44 - 00523296 _____ C:\Users\Gruen\Downloads\Setup.exe
2013-06-27 21:38 - 2013-04-20 21:58 - 00003340 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3510469574-3247218974-9759721-1000
2013-06-27 21:38 - 2013-04-20 21:58 - 00003206 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3510469574-3247218974-9759721-1000
2013-06-27 21:09 - 2013-06-27 21:09 - 00001102 _____ C:\Users\Public\Desktop\Free RAR Extract Frog.lnk
2013-06-27 21:09 - 2013-06-27 21:09 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\Philipp Winterberg
2013-06-27 21:08 - 2013-06-27 21:08 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\OpenCandy
2013-06-27 21:08 - 2013-06-27 21:08 - 00000000 ____D C:\Program Files (x86)\Free RAR Extract Frog
2013-06-26 09:20 - 2012-09-19 09:49 - 00000000 ____D C:\Users\Gruen\AppData\Roaming\AIMP3
2013-06-25 13:26 - 2013-06-11 23:52 - 00000211 _____ C:\Users\Gruen\Desktop\Schüsse aus der Nagelpistole - volksfreund.de.url

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-23 15:30

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-07-2013
Ran by Gruen at 2013-07-25 21:31:34
Running from C:\Users\Gruen\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
7-Zip 4.65 (x64 edition) (Version: 4.65.00.0)
7-Zip 9.20 (x32)
AChat 1.17 (x32)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Advanced System Protector (x32 Version: 2.1.1000.10443)
Age of Conan: Unchained (x32)
Age of Wushu (x32 Version: 0.0.1.034)
AIMP3 (x32 Version: v3.20.1165, 21.12.2012)
AirMech (x32)
Anno 1701 (x32 Version: 1.02)
AppGraffiti (x32 Version: 1.0.0.33)
Ask Toolbar (x32 Version: 1.15.23.0)
Ask Toolbar Updater (HKCU Version: 1.2.5.36191)
Assassin's Creed ® III (x32 Version: 1.00)
Assassin's Creed Revelations 1.02 (x32 Version: 1.02)
Audiograbber 1.83 SE  (x32 Version: 1.83 SE )
Audiograbber MP3-Plugin (x32 Version: 1.0)
Battlefield 2142 (x32)
BrowserProtect (x32)
CDBurnerXP (x32 Version: 4.4.1.3184)
Danger from the Deep (x32 Version: 0.0.4.3327)
Divinity II - Ego Draconis (x32)
DMUninstaller (x32)
Dota 2 (x32)
Dropbox (HKCU Version: 2.0.22)
eaner (Version: 4.03)
Empire: Total War (x32)
Fable III (x32 Version: 1.0.0000.131)
Fable III (x32 Version: 1.0.0002.131)
FilesFrog Update Checker (x32)
Forged By Chaos (x32)
Free RAR Extract Frog (x32 Version: 5.20)
Frontline Tactics (x32)
Gameforge Live 1.0 "Legend" (x32 Version: 1.0.1717)
gamelauncher-ps2-psg (HKCU)
GameMaker: Studio (x32)
GIMP 2.8.4 (Version: 2.8.4)
Google Chrome (x32 Version: 28.0.1500.72)
Google Drive (x32 Version: 1.10.4769.632)
Google Update Helper (x32 Version: 1.3.21.153)
Hitman 2: Silent Assassin (x32)
Hitman Blood Money (x32 Version: 1.00.0000)
Hitman: Contracts (x32)
HP Deskjet 3520 series - Grundlegende Software für das Gerät (Version: 27.0.847.0)
HP Deskjet 3520 series Hilfe (x32 Version: 27.0.0)
HP Deskjet 3520 series Setup Guide (x32 Version: 27.0.0)
HP FWUpdateEDO2 (x32 Version: 1.2.0.0)
HP Photo Creations (x32 Version: 1.0.0.3341)
HP Update (x32 Version: 5.003.003.001)
HPDiagnosticAlert (x32 Version: 1.00.0000)
Inbox Toolbar (x32 Version: 2.0.0.36)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
K-Lite Codec Pack 6.0.4 (Basic) (x32 Version: 6.0.4)
LibreOffice 3.4 (x32 Version: 3.4.502)
Loong - Dragonblood (x32 Version: 2.04.0)
Lyrics Search (x32)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Games for Windows - LIVE (x32 Version: 3.3.24.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 17.0.1 (x86 de) (x32 Version: 17.0.1)
Mozilla Maintenance Service (x32 Version: 17.0.1)
Napoleon: Total War (x32)
Norton Internet Security CBE (x32 Version: 20.4.0.40)
NVIDIA 3D Vision Controller-Treiber 314.07 (Version: 314.07)
NVIDIA 3D Vision Treiber 314.07 (Version: 314.07)
NVIDIA Drivers (Version: 1.5)
NVIDIA Grafiktreiber 314.07 (Version: 314.07)
NVIDIA HD-Audiotreiber 1.3.23.1 (Version: 1.3.23.1)
NVIDIA Install Application (Version: 2.1002.109.706)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1407)
NVIDIA Systemsteuerung 314.07 (Version: 314.07)
NVIDIA Update 1.12.12 (Version: 1.12.12)
NVIDIA Update Components (Version: 1.12.12)
OnlineHDTV (x32 Version: 2.1 Build 26473)
Optimizer Pro v3.0 (x32 Version: 3.0)
Origin (x32 Version: 9.1.11.2678)
Panzar (x32 Version: 1.0)
Personal ID (x32 Version: 1.8.5)
Phoenix Viewer 1.6.0.1691 (x32)
Photobucket Backup (x32 Version: 1.0.5.2168)
PlanetSide 2 (HKCU Version: 1.0.3.181)
QuickTime (x32 Version: 7.73.80.64)
R.U.S.E (x32)
RealDownloader (x32 Version: 1.3.1)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Risen (x32 Version: 1.00.0000)
RPG Maker Fonts (x32 Version: 1.0.0)
SearchAnonymizer (Version: 1.0.1 (de))
SecondLifeViewer (remove only) (x32)
Secret City (x32 Version: 1.9.4152)
SiteRanker (x32 Version: 1.0.0.29)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
Spyware Terminator 2012 (x32 Version: 3.0.0.80)
Star Trek Online (x32)
Star Wars: The Old Republic (x32 Version: 1.00)
Steam (x32 Version: 1.0.0.0)
Studie zur Verbesserung von HP Deskjet 3520 series Produkten (Version: 27.0.847.0)
TeamSpeak 3 Client (x32 Version: 3.0.10.1)
TeamViewer 8 (x32 Version: 8.0.19617)
The Witcher 2 (x32 Version: 1.00.0000)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.73)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 9.0.6030.1)
UFO Afterlight (x32 Version: 1.5)
UFO:AI 2.4 (x32 Version: 2.4)
Uncharted Waters Online (x32)
Unity Web Player (HKCU Version: )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Uplay (x32 Version: 2.0)
Vampires Dawn 2 (x32)
VLC media player 2.0.1 (Version: 2.0.1)
VLC media player 2.0.5 (x32 Version: 2.0.5)
Warframe (x32)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Wing Commander Saga 1.0.2.7795 (Version: 1.0.2.7795)
Wing Commander Saga 1.1.0.7822 (Version: 1.1.0.7822)
Wing Commander Unknown Enemy (x32 Version: 1.01)
WinZipper (x32 Version: 1.4.8)
Wsys Control 1.0.0.2539 (x32 Version: 1.0.0.2539)
XCOM: Enemy Unknown (x32)
Yontoo 1.10.02 (Version: 1.10.02)
YouTube Song Downloader (x32 Version: 8.2)

==================== Restore Points  =========================

19-07-2013 14:40:42 Geplanter Prüfpunkt
20-07-2013 22:54:00 DirectX wurde installiert
24-07-2013 14:05:19 Spyware Terminator 2012 (24.07.2013 16:05:13)
25-07-2013 18:49:08 Removed Java(TM) 7 Update 3 (64-bit)

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {014C73AB-D554-4CF4-A7E5-2DC4AE3B26E1} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3510469574-3247218974-9759721-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {074DF7A4-239F-4BF6-8999-0FFE6356DC34} - System32\Tasks\Driver Whiz-RTMScan => C:\PROGRAM FILES (X86)\DRIVER WHIZ\DRIVER WHIZ\DRIVERWHIZ.EXE No File
Task: {1C0C92AA-9447-4520-8C83-AF93884A673F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-19] (Google Inc.)
Task: {2242C89F-9933-48BF-B96B-F417F5B9D673} - System32\Tasks\Driver Whiz-RTMUpdater => C:\PROGRAM FILES (X86)\DRIVER WHIZ\DRIVER WHIZ\DRIVERWHIZ.EXE No File
Task: {24BFBC2C-C3B0-48EB-97AC-AA7C8B92971B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-19] (Google Inc.)
Task: {283E51AE-E428-4CC6-83C2-9E99E254B298} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe No File
Task: {2DBFA0C3-E5A0-4B89-99A0-CE0DFEFAFF89} - System32\Tasks\Omiga Plus RunAsStdUser => C:\Program Files (x86)\Omiga Plus\omigaplus.exe No File
Task: {2F31C1BB-3712-40F3-9100-EAA59FCC98EE} - System32\Tasks\EPUpdater => C:\Users\Gruen\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-06-06] ()
Task: {2F591610-0BEA-47A1-A854-19A07F008EA1} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-03-31] ()
Task: {31733467-7056-4DC4-918F-39028048544E} - System32\Tasks\HPCustParticipation HP Deskjet 3520 series => C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPCustPartic.exe [2012-01-31] (Hewlett-Packard Co.)
Task: {3A494441-9547-439A-98B6-32DBDCBF175E} - System32\Tasks\Feven-enabler => C:\Program Files (x86)\Feven\Feven-enabler.exe No File
Task: {3FB1D4DE-DA2C-4717-9119-1EC753A145EF} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {440230ED-D1D7-4B78-92D3-78FF5631293F} - System32\Tasks\Feven-firefoxinstaller => C:\Program Files (x86)\Feven\Feven-firefoxinstaller.exe No File
Task: {48327B44-D241-4B3B-BC97-8B40C7F6A593} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3510469574-3247218974-9759721-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {51616B00-0D22-484D-BA96-0D3B7376C8C7} - System32\Tasks\Advanced System Protector => C:\Program Files (x86)\RegClean Pro\SystweakASP.exe No File
Task: {5EF9EAEA-251C-475B-A0DE-A4D0B3AFF30C} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {65A7D270-EAA2-4D1A-AE42-683B0D93336E} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {6621527D-EA93-4B1A-9D10-6F87F12B9075} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {6637E7E1-94F4-498D-A475-71E5BA92A9FC} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe No File
Task: {6ADF3CE1-1DDF-4C3E-BD60-F4038D194132} - System32\Tasks\Feven-updater => C:\Program Files (x86)\Feven\Feven-updater.exe No File
Task: {8081E83E-D577-4B61-8CF8-BB2FD6ACD3D9} - System32\Tasks\RegClean Prosch => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe No File
Task: {8B6C3C58-7F5D-4622-8FB8-6A1C7A402FDE} - System32\Tasks\DriverBoost-RTMUpdater => C:\PROGRAM FILES (X86)\DRIVERBOOST\DRIVERBOOST\DRIVERBOOST.EXE No File
Task: {8D7C0146-75B0-4B06-B811-F0D261F1C86A} - System32\Tasks\Feven-chromeinstaller => C:\Program Files (x86)\Feven\Feven-chromeinstaller.exe No File
Task: {999967CE-F3D7-441F-A36D-09977A3C6A5B} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {9A9BCEE1-D80B-4985-AD06-EB293618B9C5} - System32\Tasks\CCleanerSkipUAC => C:\PROGRAM FILES\CCLEANER\CCLEANER.EXE [2013-06-19] (Piriform Ltd)
Task: {9E7D1535-49D2-4D19-9071-D2533092F088} - System32\Tasks\DriverBoost-RTMRules => C:\PROGRAM FILES (X86)\DRIVERBOOST\DRIVERBOOST\DRIVERBOOST.EXE No File
Task: {A905D9C3-D35B-442C-86F1-FD47A2130B53} - System32\Tasks\Feven-codedownloader => C:\Program Files (x86)\Feven\Feven-codedownloader.exe No File
Task: {B02624AD-96E4-418E-87AD-C073A594F4E6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {B9EB8B6A-2F8A-44D9-B685-F244160A2A72} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe No File
Task: {BCCE5F1A-297B-410B-B9D3-633D11056D8E} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [2012-12-18] (Systweak)
Task: {BFAF70EC-F453-49B8-99DF-CE29AC3988A1} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {C7532FE4-38DF-4884-9445-FD2806C68D24} - System32\Tasks\Driver Whiz-RTMRules => C:\PROGRAM FILES (X86)\DRIVER WHIZ\DRIVER WHIZ\DRIVERWHIZ.EXE No File
Task: {CF3119DD-E4E8-4B9C-A9B3-170B1525FE4F} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3510469574-3247218974-9759721-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-03-06] (RealNetworks, Inc.)
Task: {E32A5EA3-46C9-4E2E-8C75-D3C388AF512D} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe No File
Task: {E416AB69-00F2-45B8-9964-54E9B7E0C341} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation)
Task: {E50EAA79-58BC-4C5C-BB6D-5F8834092E3F} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3510469574-3247218974-9759721-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {E81A0249-FDD4-4883-AA4A-A2D41355D56C} - System32\Tasks\DriverBoost-RTMScan => C:\PROGRAM FILES (X86)\DRIVERBOOST\DRIVERBOOST\DRIVERBOOST.EXE No File
Task: {F686787C-6274-4957-8E92-C02EED961E18} - System32\Tasks\FreeFixer background scan => C:\PROGRAM FILES\FREEFIXER\freefixer.exe No File
Task: {F6F6B13F-FAA5-4BAC-9B67-DE234993C7C5} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3510469574-3247218974-9759721-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Feven-chromeinstaller.job => C:\Program Files (x86)\Feven\Feven-chromeinstaller.exe
Task: C:\Windows\Tasks\Feven-codedownloader.job => C:\Program Files (x86)\Feven\Feven-codedownloader.exe
Task: C:\Windows\Tasks\Feven-enabler.job => C:\Program Files (x86)\Feven\Feven-enabler.exe
Task: C:\Windows\Tasks\Feven-firefoxinstaller.job => C:\Program Files (x86)\Feven\Feven-firefoxinstaller.exe
Task: C:\Windows\Tasks\Feven-updater.job => C:\Program Files (x86)\Feven\Feven-updater.exe
Task: C:\Windows\Tasks\FreeFixer background scan.job => C:\PROGRAM FILES\FREEFIXER\freefixer.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name: NVIDIA High Definition Audio
Description: NVIDIA High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: NVIDIA
Service: NVHDA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Fast-Ethernet-Netzwerkkarte für Realtek RTL8139/810x-Familie
Description: Fast-Ethernet-Netzwerkkarte für Realtek RTL8139/810x-Familie
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek Semiconductor Corp.
Service: RTL8023x64
Problem: : Your computer's system firmware does not include enough information to properly configure and use this device. To use this device, contact your computer manufacturer to obtain a firmware or BIOS update. (Code 35)
Resolution: The Multiprocessor System (MPS) table, which stores the resource assignments for the BIOS, is missing an entry for your device and needs to be updated.
Obtain a new BIOS from the system vendor.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/25/2013 07:58:15 PM) (Source: Application Hang) (User: )
Description: Programm UTHERVERSE.EXE, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: eeb8

Startzeit: 01ce895ee38aed78

Endzeit: 162

Anwendungspfad: C:\PROGRAM FILES (X86)\SECRETCITY 3DCHAT\UTHERVERSE VWW CLIENT\UTHERVERSE.EXE

Berichts-ID: c3fba9c9-f553-11e2-88a0-665544336040

Error: (07/25/2013 01:20:23 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/25/2013 07:03:34 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/25/2013 00:23:08 AM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16635 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 13b0

Startzeit: 01ce88bc3d5eef00

Endzeit: 63

Anwendungspfad: C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE

Berichts-ID:

Error: (07/25/2013 00:22:34 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/25/2013 00:21:25 AM) (Source: Windows Search Service) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/25/2013 00:21:25 AM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/25/2013 00:21:25 AM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/25/2013 00:21:25 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (07/25/2013 00:21:22 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (07/25/2013 01:21:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (07/25/2013 01:21:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (07/25/2013 07:04:33 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (07/25/2013 07:04:33 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (07/25/2013 00:23:29 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (07/25/2013 00:23:29 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (07/25/2013 00:21:56 AM) (Source: Service Control Manager) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (07/25/2013 00:21:25 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/25/2013 00:21:25 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (07/24/2013 04:49:32 PM) (Source: DCOM) (User: Gruen-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Gruen-PCGruenS-1-5-21-3510469574-3247218974-9759721-1000LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================
Error: (07/25/2013 07:58:15 PM) (Source: Application Hang)(User: )
Description: UTHERVERSE.EXE0.0.0.0eeb801ce895ee38aed78162C:\PROGRAM FILES (X86)\SECRETCITY 3DCHAT\UTHERVERSE VWW CLIENT\UTHERVERSE.EXEc3fba9c9-f553-11e2-88a0-665544336040

Error: (07/25/2013 01:20:23 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/25/2013 07:03:34 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/25/2013 00:23:08 AM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.1663513b001ce88bc3d5eef0063C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE

Error: (07/25/2013 00:22:34 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/25/2013 00:21:25 AM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/25/2013 00:21:25 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/25/2013 00:21:25 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/25/2013 00:21:25 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (07/25/2013 00:21:22 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore


CodeIntegrity Errors:
===================================
  Date: 2013-04-09 11:44:18.895
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Gruen\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-04-09 11:44:18.809
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Gruen\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-04-09 11:44:18.299
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-04-09 11:44:18.209
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 51%
Total physical RAM: 3839.24 MB
Available physical RAM: 1873.61 MB
Total Pagefile: 7676.67 MB
Available Pagefile: 5046.05 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:463.77 GB) (Free:125 GB) NTFS (Disk=0 Partition=2)
Drive e: (EXPENDABLES) (CDROM) (Total:6.48 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 16D7CCBC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=464 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=468 GB) - (Type=06)

==================== End Of Log ============================