Windows 7 HP 32bit: spontane Abstürze, 3 Antivir-Funde

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:15 on 08/09/2013 (User)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-09-2013
Ran by User (administrator) on PC03 on 08-09-2013 19:00:53
Running from C:\Users\User\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
(Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AUCOTEC AG) C:\RupLiz47\liz472Sys\nt-i386\Lizser472.exe
(Siemens AG) C:\Windows\System32\SerExt.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Siemens) C:\Program Files\Gigaset DECT\talk&surf_6_0\xcontrolcom.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\avscan.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9874024 2010-11-19] (Realtek Semiconductor)
HKLM\...\Run: [NUSB3MON] - C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768 2011-03-28] (Avira GmbH)
HKLM\...\Run: [Samsung PanelMgr] - C:\Windows\samsung\panelmgr\SSMMgr.exe [692224 2011-04-05] ()
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [ZoneAlarm] - C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe [73832 2013-03-27] (Check Point Software Technologies LTD)
HKLM\...\Run: [PDFPrint] - C:\Program Files\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [SerExt] - SerExt.exe /unplug 
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [332288 2010-12-17] ()
HKLM\...\Run: [ISW] - C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [738984 2012-11-22] (Check Point Software Technologies)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\talk&surf 6.0 - Monitor.lnk
ShortcutTarget: talk&surf 6.0 - Monitor.lnk -> C:\Program Files\Gigaset DECT\talk&surf_6_0\semon21.exe (Siemens AG)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\eh1p655v.default
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\eh1p655v.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin: @checkpoint.com/FFApi - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @Nero.com/KM - C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\eh1p655v.default\searchplugins\zonealarm.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Flashblock - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\eh1p655v.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\eh1p655v.default\Extensions\{D9A7CBEC-DE1A-444f-A092-844461596C4D}
FF Extension: autosaveimproved - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\eh1p655v.default\Extensions\autosaveimproved@scrapbook.mozdev.org.xpi
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\eh1p655v.default\Extensions\{53A03D43-5363-4669-8190-99061B2DEBA5}.xpi
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\eh1p655v.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\TrustChecker
FF Extension: ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\TrustChecker

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360 2011-03-28] (Avira GmbH)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480 2011-12-13] (Avira GmbH)
R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [497320 2012-11-22] (Check Point Software Technologies)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [641832 2011-09-23] (Nero AG)
R2 RuLizServer; C:\RupLiz47\liz472Sys\nt-i386\Lizser472.exe [1081344 2011-10-31] (AUCOTEC AG)
R2 vsmon; C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe [2447888 2013-03-27] (Check Point Software Technologies LTD)
R3 xControlCOM; C:\Program Files\Gigaset DECT\talk&surf_6_0\xcontrolcom.exe [327680 2005-03-01] (Siemens)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [66616 2011-12-13] (Avira GmbH)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [138192 2011-12-13] (Avira GmbH)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R3 DectEnum; C:\Windows\System32\Drivers\DectEnum.sys [8448 2005-03-01] (Siemens AG)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [38400 2009-03-25] (Samsung Electronics Co., Ltd.)
R3 Gigusb; C:\Windows\System32\Drivers\Gigusb.sys [53632 2005-03-01] (Siemens AG)
R3 HRCMPA; C:\Windows\System32\DRIVERS\hrcmpa.sys [263751 2004-09-08] (SIEMENS AG)
R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [27056 2012-11-22] (Check Point Software Technologies)
R3 IUAPIWDM; C:\Windows\System32\DRIVERS\IUAPIWDM.sys [50759 2004-09-08] (SIEMENS AG)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [62336 2010-12-10] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [141440 2010-12-10] (Renesas Electronics Corporation)
S2 Sentinel; C:\Windows\System32\Drivers\SENTINEL.SYS [73216 2000-10-24] ()
R3 siellif; C:\Windows\System32\Drivers\siellif.sys [113408 2005-03-01] (Siemens AG)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2010-06-17] (Avira GmbH)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2011-04-05] (Samsung Electronics)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [454744 2012-12-13] (Check Point Software Technologies LTD)
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-08 18:59 - 2013-09-08 18:59 - 01082239 _____ (Farbar) C:\Users\User\Desktop\FRST.exe
2013-09-08 18:58 - 2013-09-08 18:58 - 00000470 _____ C:\Users\User\Desktop\defogger_disable.log
2013-09-08 18:58 - 2013-09-08 18:58 - 00000000 _____ C:\Users\User\defogger_reenable
2013-09-08 18:56 - 2013-09-08 18:56 - 00050477 _____ C:\Users\User\Desktop\Defogger.exe
2013-09-08 18:33 - 2013-09-08 18:33 - 00020302 _____ C:\Users\User\Desktop\AVSCAN-20130908-173009-4810393E.LOG
2013-09-08 17:30 - 2013-09-08 17:30 - 00002048 _____ C:\Users\User\Desktop\Avira AntiVir Personal Profil Manuelle Auswahl.LNK
2013-09-06 08:55 - 2013-09-06 08:55 - 00000000 ____D C:\Users\User\Desktop\SK2 06.09.2013
2013-09-06 08:46 - 2013-09-06 08:51 - 00000000 ____D C:\Users\User\Desktop\SK STICK 06.09.2013
2013-09-05 06:33 - 2013-09-05 06:33 - 00152824 _____ C:\Windows\Minidump\090513-8907-01.dmp
2013-08-30 13:57 - 2013-08-30 13:57 - 00157896 _____ C:\Windows\Minidump\083013-9297-01.dmp
2013-08-26 07:53 - 2013-08-26 07:54 - 02466392 _____ (Check Point Software Technologies LTD) C:\Users\User\Downloads\zafwSetupWeb_110_768_000.exe
2013-08-19 07:15 - 2013-08-19 07:15 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-14 16:21 - 2013-08-14 16:22 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 16:18 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 16:18 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 16:18 - 2013-07-26 05:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-14 16:18 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 16:18 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 16:18 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 16:18 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 16:18 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 16:18 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 16:18 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-14 16:18 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-14 16:18 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 16:18 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 16:18 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-14 16:18 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 16:18 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-14 06:14 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 06:14 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-14 06:14 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 06:14 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 06:14 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 06:14 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 06:14 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 06:14 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 06:14 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 06:14 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 06:13 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 06:13 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-09-08 19:00 - 2013-09-08 19:00 - 00000000 ____D C:\FRST
2013-09-08 18:59 - 2013-09-08 18:59 - 01082239 _____ (Farbar) C:\Users\User\Desktop\FRST.exe
2013-09-08 18:58 - 2013-09-08 18:58 - 00000470 _____ C:\Users\User\Desktop\defogger_disable.log
2013-09-08 18:58 - 2013-09-08 18:58 - 00000000 _____ C:\Users\User\defogger_reenable
2013-09-08 18:56 - 2013-09-08 18:56 - 00050477 _____ C:\Users\User\Desktop\Defogger.exe
2013-09-08 18:55 - 2013-03-19 16:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-08 18:33 - 2013-09-08 18:33 - 00020302 _____ C:\Users\User\Desktop\AVSCAN-20130908-173009-4810393E.LOG
2013-09-08 17:59 - 2011-10-22 13:18 - 02059536 _____ C:\Windows\WindowsUpdate.log
2013-09-08 17:30 - 2013-09-08 17:30 - 00002048 _____ C:\Users\User\Desktop\Avira AntiVir Personal Profil Manuelle Auswahl.LNK
2013-09-08 16:55 - 2010-11-20 23:01 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-08 16:52 - 2009-07-14 06:39 - 00081000 _____ C:\Windows\setupact.log
2013-09-08 11:59 - 2009-07-14 06:34 - 00022528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-08 11:59 - 2009-07-14 06:34 - 00022528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-08 11:52 - 2013-04-18 19:01 - 00041499 _____ C:\hoTrace.log
2013-09-08 11:52 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-08 11:51 - 2011-10-22 13:30 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-06 08:55 - 2013-09-06 08:55 - 00000000 ____D C:\Users\User\Desktop\SK2 06.09.2013
2013-09-06 08:51 - 2013-09-06 08:46 - 00000000 ____D C:\Users\User\Desktop\SK STICK 06.09.2013
2013-09-05 08:25 - 2012-12-13 08:14 - 00021934 _____ C:\Users\User\Desktop\Beschriftungen Streifen ET200S.xlsx
2013-09-05 06:33 - 2013-09-05 06:33 - 00152824 _____ C:\Windows\Minidump\090513-8907-01.dmp
2013-09-05 06:33 - 2012-09-13 16:11 - 00000000 ____D C:\Windows\Minidump
2013-08-30 13:57 - 2013-08-30 13:57 - 00157896 _____ C:\Windows\Minidump\083013-9297-01.dmp
2013-08-28 13:45 - 2013-02-07 15:39 - 00000000 ____D C:\Users\User\Desktop\STICK ABB 07.02.13
2013-08-26 07:54 - 2013-08-26 07:53 - 02466392 _____ (Check Point Software Technologies LTD) C:\Users\User\Downloads\zafwSetupWeb_110_768_000.exe
2013-08-22 08:24 - 2009-07-14 06:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-20 06:11 - 2012-07-15 14:37 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-08-19 07:15 - 2013-08-19 07:15 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-15 15:30 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-08-15 08:03 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-15 07:49 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-14 16:22 - 2013-08-14 16:21 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 16:21 - 2012-05-29 15:35 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Files to move or delete:
====================
C:\Users\User\AppData\Local\Temp\AskSLib.dll
C:\Users\User\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit.exe
C:\Users\User\AppData\Local\Temp\install_flashplayer11x32_mssa_aih.exe
C:\Users\User\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe
C:\Users\User\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\User\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\User\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\User\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\User\AppData\Local\Temp\Uninstall.exe
C:\Users\User\AppData\Local\Temp\_is68FF.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-02 10:44

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 08-09-2013
Ran by User at 2013-09-08 19:01:31
Running from C:\Users\User\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

7-Zip 9.20
Adobe Flash Player 11 ActiveX (Version: 11.7.700.202)
Adobe Flash Player 11 Plugin (Version: 11.7.700.202)
Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)
Amazon MP3-Downloader 1.0.17 (Version: 1.0.17)
ASUS nVidia Driver (Version: 1.00.0000)
Avira AntiVir Personal - Free Antivirus (Version: 10.2.0.2100)
CDBurnerXP (Version: 4.5.1.3868)
Common Desktop Agent (Version: 1.53.0)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
es control 1.4 (Version: 1.04.0005)
Foxit Reader 5.1 (Version: 5.1.3.1201)
Gigaset SX2x5isdn / 417x / 307x (Version: 600.36.0603)
GIMP 2.8.0 (Version: 2.8.0)
GPL Ghostscript (Version: 9.05)
GravoStyle'98 V4.1.0.0
High-Definition Video Playback (Version: 11.1.10400.2.65)
Intel(R) Management Engine Components (Version: 7.0.0.1144)
IrfanView (remove only) (Version: 4.32)
Java 7 Update 17 (Version: 7.0.170)
Java Auto Updater (Version: 2.1.9.0)
McAfee Security Scan Plus (Version: 3.0.285.6)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Access 2002 Runtime (Version: 10.0.6626.0)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Home and Business 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nero 11 Kwik Themes Basic (Version: 11.0.11200.12.0)
Nero Audio Pack 1 (Version: 11.0.11500.110.0)
Nero Core Components 11 (Version: 11.0.15000.1.12)
Nero Kwik Media (Version: 1.10.19300.93.100)
Nero Kwik Media (Version: 11.0.15300)
Nero Kwik Media Help (CHM) (Version: 11.0.10200)
Nero Update (Version: 11.0.10623.22.0)
nero.prerequisites.msi (Version: 11.0.20008)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA HD-Audiotreiber 1.2.18.0 (Version: 1.2.18.0)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA PhysX (Version: 9.10.0514)
NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update Components (Version: 1.11.3)
OpenOffice.org 3.3 (Version: 3.3.9567)
PDF24 Creator 5.4.0
Readiris Pro 10
Realtek Ethernet Controller Driver For Windows Vista and Later (Version: 1.00.0009)
Realtek High Definition Audio Driver (Version: 6.0.1.6251)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.32.0)
RUPLAN 4.71 (Version: 4.71 (Build:1058))
RUPLAN 4.72 (Version: 4.72-a (Build:2011))
Samsung CLP-310 Series
Samsung CLX-3170 Series
Samsung Easy Printer Manager (Version: 1.01.16.02)
Samsung ML-2950 Series
Samsung Printer Live Update
Sentinel System Driver
SmarThru 4
SmarThru PC Fax
talk&surf 6.0 (Version: 600.36.0603)
UBitMenuDE (Version: 01.04)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
ZoneAlarm Firewall (Version: 11.0.000.057)
ZoneAlarm Firewall (Version: 11.0.000.504)
ZoneAlarm Free Firewall (Version: 11.0.000.504)
ZoneAlarm LTD Toolbar
ZoneAlarm Security (Version: 11.0.000.057)
ZoneAlarm Security (Version: 11.0.000.504)
ZoneAlarm Security Toolbar  (Version: 1.8.11.11)
 

==================== Restore Points  =========================

08-09-2013 13:03:53 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0D9B5D92-3A22-486D-A887-3AA21597CF27} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {57444BB1-CE3E-4A84-B1ED-FE0836134E47} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {CF4CF196-C4EC-450A-9C2C-7AFBDE540534} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {F7204E22-F040-414C-885F-35A3037DAC0A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-31] (Adobe Systems Incorporated)
Task: {F9130176-9F83-49CB-A48B-75228C24D189} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-02-26 00:22 - 2013-02-26 00:22 - 12641992 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2012-11-22 16:34 - 2012-11-22 16:34 - 00603816 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
2011-12-13 16:11 - 2011-03-28 17:15 - 00086376 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\shlext.dll
2012-04-30 20:03 - 2012-11-22 16:11 - 01794048 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ISWRCS.dll
2012-11-22 16:34 - 2012-11-22 16:34 - 00759464 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\trustchecker\bin\trustchecker.dll
2012-04-30 21:05 - 2012-11-22 16:33 - 00890536 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ISWUL.dll
2012-11-22 16:33 - 2012-11-22 16:33 - 00562856 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ISWUL_MIN\ISWUL.dll
2012-04-30 21:05 - 2012-11-22 16:33 - 00513704 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\Plugins\ISWDMP.dll
2012-04-30 21:06 - 2012-11-22 16:33 - 00841384 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\Plugins\ISWMENUS.dll
2012-04-30 21:05 - 2012-11-22 16:33 - 00390824 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ISWUIlib.dll
2012-04-30 21:06 - 2012-11-22 16:33 - 00599720 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\Plugins\ISWFWMON.dll
2012-04-30 21:06 - 2012-11-22 16:34 - 00521896 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\Plugins\ISWUPD.dll
2012-04-30 21:06 - 2012-11-22 16:34 - 00202408 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\Plugins\updating.dll
2012-04-30 21:06 - 2012-11-22 16:34 - 00300712 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\Plugins\ISWSTATS.dll
2012-04-30 21:06 - 2012-11-22 16:33 - 00644776 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll
2012-04-30 21:06 - 2012-11-22 16:34 - 00386728 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\Plugins\SiteChecker.dll
2010-03-18 18:50 - 2010-03-18 18:50 - 08152416 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\trustchecker\bin\samplesites.dll
2012-11-22 16:33 - 2012-11-22 16:33 - 00120488 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\trustchecker\bin\liblua.dll
2012-11-22 16:33 - 2012-11-22 16:33 - 00292520 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\trustchecker\bin\libtextcat.dll
2012-11-22 16:34 - 2012-11-22 16:34 - 00190120 _____ (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\trustchecker\bin\tcdata.dll
2010-11-17 03:52 - 2010-11-17 03:52 - 00096904 _____ (Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll
2011-12-13 16:11 - 2011-03-28 17:15 - 00288616 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\ccwkrlib.dll
2011-12-13 16:11 - 2011-03-28 17:15 - 00054120 _____ (Avira GmbH) c:\program files\avira\antivir desktop\cfglib.dll
2011-12-13 16:11 - 2011-12-13 17:37 - 00873832 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccgen.dll
2011-12-13 16:11 - 2011-03-28 17:15 - 00039784 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccgenrc.dll
2011-12-13 16:11 - 2011-12-13 17:37 - 00446312 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccguard.dll
2011-12-13 16:11 - 2011-03-28 17:15 - 00025448 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccgrdrc.dll
2011-12-13 16:11 - 2011-03-28 17:14 - 00092520 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccgrdw.dll
2011-12-13 16:11 - 2011-03-28 17:14 - 00062312 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\avipc.dll
2011-12-13 16:11 - 2011-12-13 17:37 - 00290664 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccupdate.dll
2011-12-13 16:11 - 2011-03-28 17:15 - 00025448 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccupdrc.dll
2011-12-13 16:11 - 2011-12-13 17:37 - 00174440 _____ (Avira GmbH) c:\program files\avira\antivir desktop\cclic.dll
2011-12-13 16:11 - 2011-03-28 17:15 - 00005480 _____ (Avira GmbH) c:\program files\avira\antivir desktop\cclicrc.dll
2011-12-13 16:11 - 2011-12-13 17:37 - 00304488 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccmsg.dll
2011-12-13 16:11 - 2011-03-28 17:15 - 00005480 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccmsgrc.dll
2011-12-13 16:11 - 2011-12-13 17:37 - 02589544 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\rcimage.dll
2011-12-13 16:11 - 2011-03-28 17:15 - 00008552 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccmainrc.dll
2011-12-13 16:11 - 2011-12-13 17:37 - 00121704 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccupdw.dll
2013-03-27 13:31 - 2013-03-27 13:31 - 01239144 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\zpeng25.dll
2013-03-27 13:31 - 2013-03-27 13:31 - 00258664 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\VSINIT.dll
2013-03-27 13:59 - 2013-03-27 13:59 - 00316008 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\lib\pyd\zpui.pyd
2010-12-30 10:38 - 2010-12-30 10:38 - 02035712 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\zhtml.dll
2013-03-27 13:59 - 2013-03-27 13:59 - 00082024 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\lib\pyd\_ctypes.pyd
2013-03-27 13:58 - 2013-03-27 13:58 - 00037992 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\lib\pyd\zpdx.pyd
2013-03-27 13:57 - 2013-03-27 13:57 - 00135784 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\lib\pyd\pyexpat.pyd
2013-03-27 13:59 - 2013-03-27 13:59 - 00039528 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\lib\pyd\_socket.pyd
2013-03-27 13:59 - 2013-03-27 13:59 - 00273000 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\lib\pyd\zptv.pyd
2013-03-27 13:31 - 2013-03-27 13:31 - 00242792 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\VSPUBAPI.dll
2013-03-27 13:31 - 2013-03-27 13:31 - 00640616 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\VSUTIL.dll
2013-01-29 21:39 - 2013-01-29 21:39 - 00047208 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\VSUTIL_Loc0407.dll
2013-03-27 13:31 - 2013-03-27 13:31 - 00107112 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\fbl.dll
2013-03-27 13:31 - 2013-03-27 13:31 - 00129640 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\vsdata.dll
2013-03-27 13:31 - 2013-03-27 13:31 - 00110696 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\vsxml.dll
2013-03-27 13:31 - 2013-03-27 13:31 - 00122472 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\ZDx.dll
2013-03-27 13:31 - 2013-03-27 13:31 - 00120424 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\vsmonapi.dll
2013-03-27 13:31 - 2013-03-27 13:31 - 00082024 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\zlcomm.dll
2013-03-27 13:31 - 2013-03-27 13:31 - 00116328 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\zlcommdb.dll
2013-03-27 13:31 - 2013-03-27 13:31 - 00435304 _____ (Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\SSLeay32.dll
2011-12-13 19:54 - 2013-03-20 15:38 - 00057384 _____ (Geek Software GmbH) C:\Program Files\PDF24\Settings.dll
2011-12-13 19:54 - 2013-03-20 15:38 - 00395304 _____ (Geek Software GmbH) C:\Program Files\PDF24\NotifyIcon.dll
2011-12-13 19:54 - 2013-03-20 15:38 - 00047144 _____ (Geek Software GmbH) C:\Program Files\PDF24\Language.dll
2011-12-13 19:54 - 2013-03-20 15:38 - 00382504 _____ (Geek Software GmbH) C:\Program Files\PDF24\About.dll
2010-12-17 18:13 - 2010-12-17 18:13 - 00049664 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2013-08-19 07:15 - 2013-08-19 07:15 - 03551640 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-02-26 00:22 - 2013-02-26 00:22 - 02505144 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2011-02-28 21:32 - 2013-01-18 16:20 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2012-03-23 07:36 - 2012-03-23 07:36 - 00733184 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\ssk3mdu.dll
2012-03-23 07:36 - 2012-03-23 07:36 - 00996864 _____ (Windows (R) 2000 DDK provider) C:\Windows\system32\spool\DRIVERS\W32X86\3\ssk3m.dll
2011-12-13 16:11 - 2011-12-13 17:37 - 00057192 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\AVSCAN.DLL
2011-12-13 16:11 - 2011-03-28 17:14 - 00019304 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\AVWINLL.DLL
2011-12-13 16:11 - 2011-12-13 17:37 - 00045416 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\LUKE.DLL
2011-12-13 16:11 - 2011-12-13 17:37 - 00244072 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\ExtDlgFw.dll
2011-12-13 16:11 - 2011-12-13 17:37 - 00452456 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccavscanex.dll
2011-12-13 16:11 - 2011-12-13 17:37 - 00015208 _____ (Avira GmbH) c:\program files\avira\antivir desktop\ccavscanexrc.dll
2011-12-13 16:11 - 2011-12-13 17:37 - 00174120 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\AVREP.DLL
2011-12-13 16:11 - 2011-12-13 17:37 - 00119656 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\AVSCPLR.DLL
2011-12-13 16:11 - 2011-12-13 17:37 - 00088833 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\AVREG.DLL
2011-12-13 16:11 - 2011-12-13 17:37 - 00044904 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\AVPREF.DLL
2011-12-13 16:11 - 2011-12-13 17:37 - 00203112 _____ (Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\avevtlog.dll
2011-12-13 16:11 - 2010-06-17 16:27 - 00355688 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll

==================== Alternate Data Streams (whitelisted) ==========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/08/2013 11:53:38 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/07/2013 08:05:10 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 06:30:12 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/05/2013 06:17:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 10.0.9200.16660, Zeitstempel: 0x51f1c5f3
Name des fehlerhaften Moduls: IEFRAME.dll, Version: 10.0.9200.16660, Zeitstempel: 0x51f1c8bc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f9cf3
ID des fehlerhaften Prozesses: 0xf80
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/05/2013 06:10:02 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/05/2013 06:35:39 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/04/2013 06:58:00 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/03/2013 08:30:43 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2013 08:38:45 AM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "K:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (09/02/2013 08:30:17 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (09/08/2013 06:59:10 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk6\DR10 gefunden.

Error: (09/08/2013 06:59:09 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk6\DR10 gefunden.

Error: (09/08/2013 03:49:30 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "K:" wurde während der Ermittlung abgebrochen.

Error: (09/08/2013 11:54:07 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (09/08/2013 11:54:07 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (09/08/2013 11:52:03 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%20

Error: (09/08/2013 11:52:03 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Sentinel" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%20

Error: (09/07/2013 08:05:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (09/07/2013 08:05:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (09/07/2013 08:03:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%20


Microsoft Office Sessions:
=========================
Error: (09/08/2013 11:53:38 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/07/2013 08:05:10 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 06:30:12 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/05/2013 06:17:44 PM) (Source: Application Error)(User: )
Description: iexplore.exe10.0.9200.1666051f1c5f3IEFRAME.dll10.0.9200.1666051f1c8bcc0000005002f9cf3f8001ceaa535c9addefC:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\IEFRAME.dllb1d7b53f-1646-11e3-8382-f46d0477a3ab

Error: (09/05/2013 06:10:02 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/05/2013 06:35:39 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/04/2013 06:58:00 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/03/2013 08:30:43 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2013 08:38:45 AM) (Source: Windows Backup)(User: )
Description: K:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)

Error: (09/02/2013 08:30:17 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-09-08 18:53:36.627
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-08 18:22:25.767
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-08 17:30:10.051
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-08 17:07:25.440
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-08 16:52:06.617
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-08 15:49:31.675
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-08 14:30:21.062
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-08 13:14:52.130
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-08 13:01:57.627
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-08 12:50:40.825
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 46%
Total physical RAM: 3573.23 MB
Available physical RAM: 1929.34 MB
Total Pagefile: 7144.75 MB
Available Pagefile: 5290.05 MB
Total Virtual: 2047.88 MB
Available Virtual: 1890.04 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:58.5 GB) (Free:18.43 GB) NTFS
Drive d: () (Fixed) (Total:407.17 GB) (Free:396.56 GB) NTFS
Drive l: (STICKSYSYS4) (Removable) (Total:14.44 GB) (Free:13.02 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 28711A32)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=58 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=407 GB) - (Type=07 NTFS)

========================================================
Disk: 6 (Size: 14 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=14 GB) - (Type=0C)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-08 20:26:59
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD5000AAKX-001CA0 rev.15.01H15 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\User\AppData\Local\Temp\pxldapow.sys


---- System - GMER 2.1 ----

SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwAlpcConnectPort [0x91F6E082]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwAlpcCreatePort [0x91F6E94A]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwConnectPort [0x91F6DAD8]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwCreateFile [0x91F67334]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwCreateKey [0x91F891DA]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwCreatePort [0x91F6E5E2]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwCreateProcess [0x91F82F1C]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwCreateProcessEx [0x91F83344]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwCreateSection [0x91F8D96E]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwCreateUserProcess [0x91F837B8]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwCreateWaitablePort [0x91F6E740]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwDeleteFile [0x91F68070]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwDeleteKey [0x91F8ACCE]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwDeleteValueKey [0x91F8A580]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwDuplicateObject [0x91F81CFC]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwLoadDriver [0x91F61D46]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwLoadKey [0x91F8B760]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwLoadKey2 [0x91F8B99E]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwLoadKeyEx [0x91F8BE50]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwMapViewOfSection [0x91F8DD2C]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwOpenFile [0x91F67C22]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwOpenProcess [0x91F85430]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwOpenThread [0x91F8501E]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwProtectVirtualMemory [0x91F9A340]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwRenameKey [0x91F8C838]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwReplaceKey [0x91F8C11A]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwRequestWaitReplyPort [0x91F6D67C]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwRestoreKey [0x91F8D29E]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwSecureConnectPort [0x91F6DDA4]
SSDT   915081FB                                                                                          ZwSetContextThread
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwSetInformationFile [0x91F6847C]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwSetInformationObject [0x91F9A204]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwSetSecurityObject [0x91F8CDC2]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwSetSystemInformation [0x91F61410]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwSetValueKey [0x91F89CA0]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwSystemDebugControl [0x91F84042]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwTerminateProcess [0x91F83D72]
SSDT   \SystemRoot\system32\DRIVERS\vsdatant.sys                                                         ZwUnloadDriver [0x91F62198]

---- Kernel code sections - GMER 2.1 ----

.text  ntkrnlpa.exe!ZwRollbackEnlistment + 142D                                                          8307DA15 1 Byte  [06]
.text  ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                            830B7212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 10FF                                                               830BE494 8 Bytes  [82, E0, F6, 91, 4A, E9, F6, ...]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1193                                                               830BE528 4 Bytes  [D8, DA, F6, 91]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11AF                                                               830BE544 4 Bytes  [34, 73, F6, 91]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11BF                                                               830BE554 4 Bytes  [DA, 91, F8, 91]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11DB                                                               830BE570 4 Bytes  [E2, E5, F6, 91]
.text  ...                                                                                               

---- User code sections - GMER 2.1 ----

.text  C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe[1996] USER32.dll!GetUpdateRect + CF           77C5A644 5 Bytes  JMP 20CC9266 C:\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3720] ntdll.dll!LdrGetProcedureAddress + 26          77B522A9 7 Bytes  JMP 64E5F140 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3720] kernel32.dll!K32GetDeviceDriverBaseNameW + 5D  76E3941E 7 Bytes  JMP 6547FDD2 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3720] kernel32.dll!QueryPerformanceCounter + 13      76E3C435 7 Bytes  JMP 6547FDF5 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3720] kernel32.dll!LoadAppInitDlls + 355             76E3F4F6 7 Bytes  JMP 64E62942 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3720] USER32.dll!GetUpdateRect + CF                  77C5A644 5 Bytes  JMP 20CC9266 C:\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3720] GDI32.dll!GetViewportOrgEx + 26C               775C884B 7 Bytes  JMP 6547FD53 C:\Program Files\Mozilla Firefox\xul.dll

---- EOF - GMER 2.1 ----
         

Problemsignatur:
  Problemereignisname:	BlueScreen
  Betriebsystemversion:	6.1.7601.2.1.0.768.3
  Gebietsschema-ID:	1031

Zusatzinformationen zum Problem:
  BCCode:	c2
  BCP1:	00000007
  BCP2:	0000109B
  BCP3:	080B0017
  BCP4:	861D88D0
  OS Version:	6_1_7601
  Service Pack:	1_0
  Product:	768_1

Dateien, die bei der Beschreibung des Problems hilfreich sind:
  C:\Windows\Minidump\090813-9391-01.dmp
  C:\Users\User\AppData\Local\Temp\WER-41558-0.sysdata.xml

Lesen Sie unsere Datenschutzbestimmungen online:
  hxxp://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0407

Wenn die Onlinedatenschutzbestimmungen nicht verfügbar sind, lesen Sie unsere Datenschutzbestimmungen offline:
  C:\Windows\system32\de-DE\erofflps.txt
         

Exportierte Ereignisse:

08.09.2013 18:33 [Scanner] Malware gefunden
      Die Datei 'C:\Users\User\AppData\Local\Temp\cvk1KzvX.zip.part'
      enthielt einen Virus oder unerwünschtes Programm 'TR/Crypt.ZPACK.3870' [trojan].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4bea26b7.qua' 
      verschoben!

08.09.2013 18:33 [Scanner] Malware gefunden
      Die Datei 'C:\Users\User\AppData\Local\Temp\YMhfgVWQ.zip.part'
      enthielt einen Virus oder unerwünschtes Programm 'TR/Crypt.ZPACK.3870' [trojan].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '537e0979.qua' 
      verschoben!

08.09.2013 18:33 [Scanner] Malware gefunden
      Die Datei 
      'C:\$Recycle.Bin\S-1-5-21-3757261131-3724360388-91717279-1000\$RM52OKF.exe'
      enthielt einen Virus oder unerwünschtes Programm 'ADWARE/Downware.AA.3' 
      [adware].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '195b7c3b.qua' 
      verschoben!