Softwareupdater.ui.exe auf Windows Vista (SP2) eingefangen

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 11:40 on 22/09/2013 (Toasty)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20-09-2013
Ran by Toasty (administrator) on TOASTY-PC on 22-09-2013 11:45:36
Running from C:\Users\Toasty\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files\Common Files\G DATA\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G DATA\InternetSecurity\AVK\AVKWCtl.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Simplygen) C:\Program Files\Protected Search\ProtectedSearch.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
() C:\Acer\Empowering Technology\SysMonitor.exe
(HiTRUST) C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
(Intel Corporation) C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Nuance Communications, Inc.) C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe
(G Data Software AG) C:\Program Files\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(G Data Software AG) C:\Program Files\G DATA\InternetSecurity\AVKTray\AVKTray.exe
(AccSys GmbH) C:\Program Files\Common Files\AccSys\AccVSSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(phonostar) C:\Program Files\phonostar\ps_timer.exe
(CyberLink) C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
(Valve Corporation) D:\steam\Steam.exe
() C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Intel(R) Corporation) C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
(G Data Software AG) C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe
() C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
(HiTRSUT) C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
(Teruten) C:\Windows\system32\FsUsbExService.Exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Acer Inc.) C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
(G Data Software AG) C:\Program Files\G DATA\InternetSecurity\Firewall\GDFwSvc.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil32_11_8_800_174_ActiveX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [PCMMediaSharing] - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [204908 2007-06-21] ()
HKLM\...\Run: [Acer Empowering Technology Monitor] - C:\Acer\Empowering Technology\SysMonitor.exe [326440 2007-06-15] ()
HKLM\...\Run: [eDataSecurity Loader] - C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [457216 2007-04-25] (HiTRUST)
HKLM\...\Run: [NMSSupport] - C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe [439768 2007-04-06] (Intel Corporation)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-07-12] (Intel Corporation)
HKLM\...\Run: [NeroFilterCheck] - C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKLM\...\Run: [NBKeyScan] - C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [1828136 2007-08-08] (Nero AG)
HKLM\...\Run: [PaperPort PTD] - C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [29984 2007-10-11] (Nuance Communications, Inc.)
HKLM\...\Run: [IndexSearch] - C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [46368 2007-10-11] (Nuance Communications, Inc.)
HKLM\...\Run: [BrMfcWnd] - C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1089536 2008-02-19] (Brother Industries, Ltd.)
HKLM\...\Run: [ControlCenter3] - C:\Program Files\Brother\ControlCenter3\brctrcen.exe [86016 2007-12-21] (Brother Industries, Ltd.)
HKLM\...\Run: [FreePDF Assistant] - C:\Program Files\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM\...\Run: [GDFirewallTray] - C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM\...\Run: [G Data AntiVirus Tray] - C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444304 2013-03-22] (G Data Software AG)
HKLM\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKCU\...\Run: [PhonostarTimer] - C:\Program Files\phonostar\ps_timer.exe [126976 2009-05-13] (phonostar)
HKCU\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [202024 2007-08-03] (Nero AG)
HKCU\...\Run: [Steam] - D:\steam\Steam.exe [1811368 2013-09-06] (Valve Corporation)
HKCU\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKCU\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKCU\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)
MountPoints2: L - L:\LaunchU3.exe -a
MountPoints2: {78a434d5-f3aa-11dd-a19e-0019213ccbac} - F:\LaunchU3.exe -a
MountPoints2: {b8d2bdd4-275e-11e2-bfd0-001060a5736f} - L:\start.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\RunOnce: [RUN] - C:\Windows\Acer_Normal\run_DT.exe [ 2007-04-19] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\RunOnce: [RUN] - C:\Windows\Acer_Normal\run_DT.exe [ 2007-04-19] ()
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

ProxyServer: :0
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ig
HKCU\Software\Microsoft\Internet Explorer\Main,SEARCH PAGE = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1368776270467&tguid=43169-3580-1368776236779-357084&st=chrome&q=
HKCU\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1368776270467&tguid=43169-3580-1368776236779-357084&st=chrome&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1368776270467&tguid=43169-3580-1368776236779-357084&st=chrome&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.intl.acer.yahoo.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1368776270467&tguid=43169-3580-1368776236779-357084&st=chrome&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1368776270467&tguid=43169-3580-1368776236779-357084&st=chrome&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ts=1368776270467&tguid=43169-3580-1368776236779-357084&st=chrome&q=
URLSearchHook: Yahoo! Toolbar mit Pop-Up-Blocker - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -  No File
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=43169&st=bs&tid=3580&ts=1368776270467&tguid=43169-3580-1368776236779-357084&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=43169&st=bs&tid=3580&ts=1368776270467&tguid=43169-3580-1368776236779-357084&q={searchTerms}
SearchScopes: HKCU - DefaultScope {38FE38B4-7C64-48BA-B3D7-1586307ED451} URL = hxxp://search.certified-toolbar.com?si=43169&st=bs&tid=3580&ts=1368776270467&tguid=43169-3580-1368776236779-357084&q={searchTerms}
SearchScopes: HKCU - {04295096-516D-4E77-92CA-8D7C021C9580} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=29861803-FADC-49B0-B923-F657748E00AF&apn_sauid=A701C141-1B71-404C-A989-12010F7B8279&
SearchScopes: HKCU - {38FE38B4-7C64-48BA-B3D7-1586307ED451} URL = hxxp://search.certified-toolbar.com?si=43169&st=bs&tid=3580&ts=1368776270467&tguid=43169-3580-1368776236779-357084&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=
SearchScopes: HKCU - {E6EC2A9E-8BA5-4481-B820-51CBBA248C93} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll (HiTRUST)
Toolbar: HKLM - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU -Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: {48DD0448-9209-4F81-9F6D-D83562940134} hxxp://lads.myspace.com/upload/MySpaceUploader1006.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 193.189.244.202 193.189.244.194

========================== Services (Whitelisted) =================

R2 accvssvc; C:\Program Files\Common Files\AccSys\AccVSSvc.exe [131072 2008-07-09] (AccSys GmbH)
R2 Acer HomeMedia Connect Service; C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [269448 2007-06-21] (CyberLink)
R2 AcerMemUsageCheckService; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [28672 2007-04-16] ()
R2 AlertService; C:\Program Files\Intel\IntelDH\CCU\AlertService.exe [223704 2007-04-06] (Intel(R) Corporation)
R2 AVKProxy; C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe [1957840 2013-03-22] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [635344 2013-02-25] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G DATA\InternetSecurity\AVK\AVKWCtl.exe [2096456 2013-04-24] (G Data Software AG)
S3 DHTRACE; C:\Program Files\Common Files\Intel\IntelDH\bin\DHTraceController.exe [39896 2007-04-06] (Intel(R) Corporation)
R2 DQLWinService; C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe [208896 2007-02-12] ()
R2 eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [457512 2007-04-25] (HiTRSUT)
R2 eRecoveryService; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [53248 2007-06-29] (Acer Inc.)
R3 GDFwSvc; C:\Program Files\G DATA\InternetSecurity\Firewall\GDFwSvc.exe [2362744 2013-03-22] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G DATA\GDScan\GDScan.exe [696808 2013-02-25] (G Data Software AG)
S3 IntelDHSvcConf; C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe [36312 2007-04-06] (Intel(R) Corporation)
S3 ISSM; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe [59352 2007-04-06] (Intel(R) Corporation)
S3 M1 Server; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe [256472 2007-04-06] ()
S3 MCLServiceATL; C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe [158168 2007-04-06] (Intel(R) Corporation)
S3 NMSCore; C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe [313816 2007-04-06] (Intel(R) Corporation)
S3 QualityManager; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe [272856 2007-04-06] (Intel(R) Corporation)
S3 Remote UI Service; C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe [449496 2007-04-06] (Intel(R) Corporation)
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [262247 2006-07-19] ()
S2 SystemStoreService; C:\Program Files\SoftwareUpdater\SystemStore.exe [278016 2013-07-09] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1724192 2013-01-28] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [277544 2009-01-19] (Protect Software GmbH)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2013-01-08] ()
R3 AVMWAN; C:\Windows\System32\DRIVERS\avmwan.sys [38672 2003-06-02] (AVM Berlin)
R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-07-18] ()
S3 FXUSBASE; C:\Windows\System32\DRIVERS\fxusbase.sys [503600 2003-06-02] (AVM Berlin)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [45912 2013-06-09] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [96344 2013-06-09] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [52056 2013-06-09] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [54104 2013-06-09] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [30896 2013-06-09] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [51032 2013-06-09] (G Data Software AG)
R2 int15; C:\Acer\Empowering Technology\eRecovery\int15.sys [15392 2007-07-03] (Acer, Inc.)
R3 IntelDH; C:\Windows\System32\Drivers\IntelDH.sys [5504 2009-01-24] (Intel Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2013-01-08] ()
R2 nmsunidr; C:\Windows\System32\DRIVERS\nmsunidr.sys [5376 2007-02-18] (Gteko Ltd.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [42000 2007-06-05] (CACE Technologies)
R0 PSDFilter; C:\Windows\System32\DRIVERS\psdfilter.sys [20776 2007-04-25] (HiTRUST)
R0 PSDNServ; C:\Windows\System32\drivers\PSDNServ.sys [16680 2007-04-25] (HiTRUST)
R0 psdvdisk; C:\Windows\System32\drivers\psdvdisk.sys [60712 2007-04-25] (HiTRUST)
S3 TSHWMDTCP; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.sys [14808 2007-04-06] ()
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Live\Acer PlayMovie\000.fcl [39408 2007-08-31] (Cyberlink Corp.)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S3 igfx; system32\DRIVERS\igdkmd32.sys [x]
S3 IntcAzAudAddService; system32\drivers\RTKVHDA.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x]
S3 RkHit; \??\C:\Windows\system32\drivers\RKHit.sys [x]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-22 11:45 - 2013-09-22 11:45 - 00000000 ____D C:\FRST
2013-09-22 11:44 - 2013-09-22 11:44 - 01089757 _____ (Farbar) C:\Users\Toasty\Downloads\FRST.exe
2013-09-22 11:39 - 2013-09-22 11:40 - 00000474 _____ C:\Users\Toasty\Desktop\defogger_disable.log
2013-09-22 11:39 - 2013-09-22 11:39 - 00000000 _____ C:\Users\Toasty\defogger_reenable
2013-09-22 11:32 - 2013-09-22 11:32 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-22 11:29 - 2013-09-22 11:29 - 00000000 ____D C:\Program Files\MyFree Codec
2013-09-19 11:10 - 2013-09-19 11:10 - 00001653 _____ C:\Users\Toasty\Downloads\Amazon-MP3-1379581804.amz
2013-09-13 17:25 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-13 17:25 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-13 17:25 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-13 17:25 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-13 17:25 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-13 17:25 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-13 17:25 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-13 17:25 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-13 17:25 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-13 17:25 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-13 17:25 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-13 17:25 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-13 17:25 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-13 17:25 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-13 17:25 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-13 17:25 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-12 08:06 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-12 08:06 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2013-08-29 19:13 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

==================== One Month Modified Files and Folders =======

2013-09-22 11:45 - 2013-09-22 11:45 - 00000000 ____D C:\FRST
2013-09-22 11:44 - 2013-09-22 11:44 - 01089757 _____ (Farbar) C:\Users\Toasty\Downloads\FRST.exe
2013-09-22 11:40 - 2013-09-22 11:39 - 00000474 _____ C:\Users\Toasty\Desktop\defogger_disable.log
2013-09-22 11:39 - 2013-09-22 11:39 - 00000000 _____ C:\Users\Toasty\defogger_reenable
2013-09-22 11:39 - 2009-02-01 14:48 - 00000000 ____D C:\Users\Toasty
2013-09-22 11:32 - 2013-09-22 11:32 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-22 11:31 - 2007-07-18 22:22 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-09-22 11:30 - 2013-08-16 19:01 - 00000000 ____D C:\Program Files\Samsung
2013-09-22 11:30 - 2009-05-04 20:22 - 00000000 ____D C:\Users\Toasty\AppData\Local\Downloaded Installations
2013-09-22 11:29 - 2013-09-22 11:29 - 00000000 ____D C:\Program Files\MyFree Codec
2013-09-22 11:29 - 2012-07-28 09:25 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-22 11:29 - 2012-04-01 08:16 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-22 11:29 - 2011-06-04 09:53 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-22 11:25 - 2009-01-24 09:41 - 01492785 _____ C:\Windows\WindowsUpdate.log
2013-09-22 11:12 - 2011-11-27 21:24 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-22 11:12 - 2006-11-02 12:33 - 01474572 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-22 11:07 - 2009-02-01 14:50 - 00008592 _____ C:\Users\Toasty\AppData\Local\d3d9caps.dat
2013-09-22 11:04 - 2011-11-27 21:24 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-22 11:04 - 2009-02-03 20:38 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-22 11:04 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-22 11:04 - 2006-11-02 14:47 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-22 11:04 - 2006-11-02 14:47 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-20 12:25 - 2009-02-09 16:49 - 00002155 _____ C:\Windows\bthservsdp.dat
2013-09-20 12:25 - 2006-11-02 15:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-20 11:50 - 2007-07-18 22:50 - 00414154 _____ C:\Windows\PFRO.log
2013-09-20 08:44 - 2009-02-22 11:33 - 00000000 ____D C:\Program Files\Nokia
2013-09-20 08:43 - 2007-07-18 22:36 - 00245390 _____ C:\Windows\DPINST.LOG
2013-09-20 08:42 - 2009-02-22 11:32 - 00000000 ____D C:\ProgramData\Installations
2013-09-19 11:10 - 2013-09-19 11:10 - 00001653 _____ C:\Users\Toasty\Downloads\Amazon-MP3-1379581804.amz
2013-09-17 10:39 - 2013-08-16 19:09 - 00000000 ____D C:\Users\Toasty\AppData\Roaming\Samsung
2013-09-14 09:10 - 2009-02-07 12:38 - 00100352 _____ C:\Users\Toasty\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-13 17:55 - 2006-11-02 14:47 - 00399464 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-13 17:25 - 2013-08-15 06:57 - 00000000 ____D C:\Windows\system32\MRT
2013-09-13 17:21 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-09-11 15:17 - 2011-01-22 09:29 - 00000000 ____D C:\Users\Toasty\AppData\Roaming\vlc
2013-09-11 14:53 - 2011-05-15 18:13 - 00000000 ____D C:\Users\Toasty\AppData\Roaming\dvdcss
2013-09-11 14:40 - 2011-09-24 13:03 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-09-09 17:46 - 2006-11-02 14:52 - 00353491 _____ C:\Windows\setupact.log

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-22 11:10

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 20-09-2013
Ran by Toasty at 2013-09-22 11:46:29
Running from C:\Users\Toasty\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs ======================

Acer Arcade Live Main Page (Version: 1.1.0623)
Acer DV Magician (Version: 1.5.0621)
Acer DVDivine (Version: 3.2.0621)
Acer eDataSecurity Management (Version: 2.5.4241)
Acer Empowering Technology (Version: 2.5.4008)
Acer ePerformance Management (Version: 2.5.4001)
Acer HomeMedia (Version: 1.4.0621)
Acer HomeMedia Connect (Version: 1.4.4221)
Acer PlayMovie (Version: DVD 1.5.3317)
Acer ScreenSaver (Version: 4.01.20070419)
Acer SlideShow DVD (Version: 1.5.0621)
Acer Tour (Version: 2.0.1003)
Acer VideoMagician (Version: 1.4.0621)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.175)
Adobe Reader 8.3.1 - Deutsch (Version: 8.3.1)
Adobe Setup (Version: 1.0)
Amazon MP3-Downloader 1.0.17 (Version: 1.0.17)
Anno 1701 (Version: 1.00)
BookScan&Whiteboard Suite (Version: 1.0)
Business English Wortschatztrainer 4.0 (Version: 4.0.0)
Cisco EAP-FAST Module (Version: 2.0.26)
Cisco LEAP Module (Version: 1.0.11)
Cisco PEAP Module (Version: 1.0.12)
Commandos 2: Men of Courage
Commandos 3: Destination Berlin
Cool Edit Pro 2.0
Drakensang
DSL Connection Manager (Version: 2.1.0.18)
Empire: Total War
Free Video Flip and Rotate version 2.1.8.622 (Version: 2.1.8.622)
FreePDF (Remove only)
G Data InternetSecurity 2014 (Version: 24.0.2.3)
Google Earth Plug-in (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.153)
GPL Ghostscript (Version: 9.04)
Intel(R) Matrix Storage Manager
Intel(R) PRO Network Connections Drivers
Intel® Viiv™ Software (Version: 1.7.231.0)
IrfanView (remove only) (Version: 4.30)
ITECIR Driver (Version: 1.00.000)
LightScribe  1.4.142.1 (Version: 1.4.142.1)
M4P MP3 Converter 1.0 (Version: 1.0)
MCF Ravenhearst
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Works (Version: 08.05.0822)
MSVC80_x86 (Version: 1.0.1.0)
MSVC80_x86_v2 (Version: 1.0.3.0)
MSVC90_x86 (Version: 1.0.1.2)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyFreeCodec
Mystery Case Files - Prime Suspects
Napoleon: Total War
NAVIGON Fresh 3.2.0 (Version: 3.2.0)
Nero 8 (Version: 8.0.182)
NTI Backup NOW! 4.7 (Version: 4)
NTI CD & DVD-Maker (Version: 7)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA PhysX (Version: 9.10.0513)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
PaperPort Image Printer (Version: 1.00.0000)
phonostar-Player Version 2.01.4
ProtectDisc Driver, Version 11 (Version: 11.0.0.12)
Protected Search 1.1
PVSonyDll (Version: 1.00.0001)
QIP 2005 psYNovA-Edition
QIP Infium 9030 Jeak-Edition (Version: 9030)
RedMon - Redirection Port Monitor
Samsung Kies (Version: 2.3.2.12064_9)
Samsung Story Album Viewer (Version: 1.0.0.13054_1)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0)
ScanSoft PaperPort 11 (Version: 11.1.0000)
Silent Hunter 5 (Version: 1.2.0)
SILIPA 1.21
SILIPA93 2.00
Spelling Dictionaries Support For Adobe Reader 8 (Version: 8.0.0)
Steam (Version: 1.0.0.0)
TuneUp Utilities 2013 (Version: 13.0.3020.2)
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.3020.2)
Tycoon City - New York (Version: 1.00.000)
Ubisoft Game Launcher (Version: 1.0.0.0)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Vista Icon Pack ST
VLC media player 1.1.5 (Version: 1.1.5)
WinRAR archiver

==================== Restore Points  =========================

22-08-2013 06:17:45 Geplanter Prüfpunkt
25-08-2013 17:59:15 Windows Update
26-08-2013 05:59:36 Geplanter Prüfpunkt
29-08-2013 17:37:14 Windows Update
04-09-2013 08:15:30 Windows Update
09-09-2013 15:07:10 Geplanter Prüfpunkt
11-09-2013 15:47:04 Geplanter Prüfpunkt
12-09-2013 06:02:55 Windows Update
13-09-2013 15:20:17 Windows Update
14-09-2013 07:03:38 Geplanter Prüfpunkt
17-09-2013 17:54:35 Windows Update
20-09-2013 06:39:26 Nokia Connectivity Cable Driver wird entfernt
20-09-2013 06:42:29 PC Connectivity Solution wird entfernt
20-09-2013 06:44:13 Removed Nokia Software Updater.
22-09-2013 09:30:24 Installiert Samsung Story Album Viewer

==================== Hosts content: ==========================

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {02D5F7E2-D2A8-4037-8699-959C0987E60F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-11-27] (Google Inc.)
Task: {10CCBAA1-7204-4DFF-B569-3163A86DDF33} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-07-09] ()
Task: {1A5A071D-E2A6-4718-87AB-1A4A3ADBB05C} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-29] (Adobe Systems Incorporated)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {39B6F5A3-BE4C-47B9-AB80-DA5707D17292} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-07-06] ()
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3C331EB7-0C9E-4FA3-A512-BD938BCB2588} - System32\Tasks\Freemium1ClickMaint => C:\Program Files\Covus Freemium\Free System Utilities\1Click.exe
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-19] (Microsoft Corporation)
Task: {7A42BC0D-6B7D-434A-85E9-F7EB46B576F7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-22] (Adobe Systems Incorporated)
Task: {7CB76E2B-08EC-483F-9997-25F11AFD63C1} - System32\Tasks\Microsoft\Windows\RestartManager\{311E968B-10A8-4185-B9CB-0B8F0477FCD1} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {8CD8FABD-99B8-4A3E-96E6-18EFF6A49146} - System32\Tasks\User_Feed_Synchronization-{1EAD76C3-E88B-4F7F-A11E-6A31E6789A35} => C:\Windows\system32\msfeedssync.exe [2012-03-08] (Microsoft Corporation)
Task: {93267A6B-7B6B-421B-8C04-E595FD3259CD} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-19] (Microsoft Corporation)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\system32\pla.dll [2008-01-19] (Microsoft Corporation)
Task: {AD01D464-6E1F-463B-9719-F0BAEFB420ED} - System32\Tasks\ScanSoft Background Update => C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25] (Nuance Communications, Inc.)
Task: {C7410D3D-4666-4818-AE50-A70B16144CA5} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-19] (Microsoft Corporation)
Task: {C75C398E-7537-46DD-8AB8-C4A1C072A314} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2013-01-28] (TuneUp Software)
Task: {CA152048-E91B-43EE-A6DB-719C16E24A29} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-11-27] (Google Inc.)
Task: {CE2A6C8F-9766-42EE-94A6-21D2ED173390} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2011-03-28] ()
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-05] ()
Task: {EC00AB36-22C2-42E9-8549-2B78D873AF05} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {F0156960-6494-4EAA-BC6C-3194AD800EA6} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2008-01-19] (Microsoft Corporation)
Task: {FE935573-8A28-4D48-9795-287E5B6950A0} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files\Protected Search\ProtectedSearch.exe [2013-03-19] (Simplygen)
Task: {FEDB837C-62BB-4932-8EC6-9A8F14D98140} - System32\Tasks\Microsoft\Windows\RestartManager\{FCB211CF-D36E-49b6-9F19-7E8BF13771AD} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-02-26 00:22 - 2013-02-26 00:22 - 15129960 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2007-02-12 16:02 - 2007-02-12 16:02 - 00094208 _____ (HiTRUST Inc.) C:\Windows\system32\MsnChatHook.dll
2007-04-25 16:30 - 2007-04-25 16:30 - 00063488 _____ () C:\Windows\system32\ShowErrMsg.dll
2007-04-25 16:30 - 2007-04-25 16:30 - 00286720 _____ (HiTRUST) C:\Windows\system32\sysenv.dll
2007-04-25 16:31 - 2007-04-25 16:31 - 00028672 _____ () C:\Windows\system32\BatchCrypto.dll
2006-11-29 21:30 - 2006-11-29 21:30 - 00401408 _____ (HiTRUST) C:\Windows\system32\CryptoAPI.dll
2007-03-17 05:19 - 2007-03-17 05:19 - 00237568 _____ (HiTRSUT) C:\Windows\system32\keyManager.dll
2011-04-01 11:15 - 2013-02-25 05:16 - 01268688 _____ (G Data Software AG) C:\Program Files\G Data\InternetSecurity\Shredder\Reisswlf.dll
2011-11-08 22:46 - 2011-11-08 22:46 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2007-08-08 09:25 - 2007-08-08 09:25 - 00255272 _____ (Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBShell.dll
2013-02-25 05:14 - 2013-02-25 05:14 - 00429008 ____N (G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\ShellExt.dll
2009-02-11 11:36 - 2007-05-22 11:59 - 00128512 _____ () C:\Program Files\WinRAR\rarext.dll
2013-01-28 15:19 - 2013-01-28 15:19 - 00030496 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2013\SDShelEx-win32.dll
2013-01-28 15:19 - 2013-01-28 15:19 - 00025888 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2013\DseShExt-x86.dll
2007-04-25 16:30 - 2007-04-25 16:30 - 00315392 _____ (HiTRUST) C:\Windows\system32\eDSshellExt.dll
2007-08-04 11:18 - 2007-08-04 11:18 - 02102568 _____ (Nero AG) C:\Program Files\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll
2007-08-03 12:48 - 2007-08-03 12:48 - 03974440 _____ (Nero AG) C:\Program Files\Common Files\Nero\Shared\NL3\AdvrCntr3.dll
2006-11-02 11:03 - 2006-11-02 11:44 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\msadp32.acm
2011-05-12 12:08 - 2011-05-12 12:08 - 00108144 _____ (Sony DADC Austria AG.) C:\Windows\system32\CmdLineExt.dll
2007-04-25 16:30 - 2007-04-25 16:30 - 00151552 _____ (HiTRUST) C:\Windows\system32\eDStoolbar.dll
2007-08-03 12:50 - 2007-08-03 12:50 - 01807656 _____ (Nero AG) C:\Program Files\Common Files\Nero\Lib\MediaLibraryNSE.dll
2007-04-25 16:31 - 2007-04-25 16:31 - 00122880 _____ (HiTRUST) C:\Windows\system32\ADMIN_CLASS_LIB.dll
2007-04-25 16:30 - 2007-04-25 16:30 - 00121344 _____ (HiTRUST) C:\Windows\system32\PSDUtil.dll
2007-10-11 19:03 - 2007-10-11 19:03 - 00029984 _____ (Nuance Communications, Inc.) C:\Program Files\ScanSoft\PaperPort\PPRecDiag.dll
2007-10-11 19:04 - 2007-10-11 19:04 - 00058656 _____ (Nuance Communications, Inc.) C:\Program Files\ScanSoft\PaperPort\XMAXUTIL.dll
2005-09-07 11:03 - 2005-09-07 11:03 - 00036864 _____ (Black Ice Software, Inc.) C:\Program Files\ScanSoft\PaperPort\blicectr.dll
2007-10-11 19:07 - 2007-10-11 19:07 - 02987296 _____ (Nuance Communications, Inc.) C:\Program Files\ScanSoft\PaperPort\MaxRes.dll
2007-10-11 19:07 - 2007-10-11 19:07 - 00136480 _____ (Nuance Communications, Inc.) C:\Program Files\ScanSoft\PaperPort\BindRes.dll
2013-02-25 04:12 - 2013-02-25 04:12 - 01019344 ____N (G Data Software AG) C:\Program Files\Common Files\G Data\ObjBrwse.dll
2011-04-01 11:12 - 2013-02-25 14:59 - 01633768 _____ (G Data Software AG) C:\Program Files\G Data\InternetSecurity\Common\AVKRes.dll
2013-09-13 17:29 - 2013-09-13 17:29 - 16244616 ____N (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\Flash32_11_8_800_174.ocx
2013-02-25 04:57 - 2013-02-25 04:57 - 00264144 ____N (G Data Software AG) C:\Program Files\Common Files\G DATA\AVKProxy\BanksafeLDR.dll
2009-05-04 19:47 - 2012-01-20 02:19 - 00360448 _____ (phonostar) C:\Program Files\phonostar\phonocmd.dll
2007-08-03 12:51 - 2007-08-03 12:51 - 00063784 _____ (Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexingServicePS.dll
2007-08-03 12:51 - 2007-08-03 12:51 - 00023848 _____ (Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvrPS.dll
2007-08-03 12:51 - 2007-08-03 12:51 - 03147048 _____ (Nero AG) C:\Program Files\Common Files\Nero\Lib\NMDataServices.dll
2013-08-08 13:43 - 2013-09-06 22:55 - 00288680 _____ (Valve Corporation) D:\steam\crashhandler.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 01039192 _____ (Microsoft Corporation) D:\steam\dbghelp.dll
2013-07-15 14:32 - 2013-07-16 00:32 - 02895272 _____ (Valve Corporation) D:\steam\steam.dll
2013-07-26 14:46 - 2013-09-06 22:55 - 10659752 _____ (Valve Corporation) D:\steam\steamui.dll
2013-07-01 08:20 - 2013-08-22 00:18 - 00687104 _____ () D:\steam\SDL2.dll
2013-07-26 14:46 - 2013-09-06 22:55 - 00263080 _____ (Valve Corporation) D:\steam\tier0_s.dll
2013-07-26 14:46 - 2013-09-06 22:56 - 00236456 _____ (Valve Corporation) D:\steam\vstdlib_s.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 00122864 _____ (Valve) D:\steam\CSERHelper.dll
2013-07-26 14:46 - 2013-09-06 22:55 - 00169384 _____ (Valve Corporation) D:\steam\bin\filesystem_stdio.dll
2013-07-26 14:46 - 2013-09-06 22:55 - 00694696 _____ (Valve Corporation) D:\steam\bin\vgui2_s.dll
2013-07-26 14:46 - 2013-09-06 22:55 - 01120680 _____ () D:\steam\bin\chromehtml.dll
2013-07-15 14:32 - 2013-08-07 21:31 - 20625832 _____ () D:\steam\bin\libcef.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 09955112 _____ (The ICU Project) D:\steam\bin\icudt.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 01100800 _____ () D:\steam\bin\avcodec-53.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 00124416 _____ () D:\steam\bin\avutil-51.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 00192000 _____ () D:\steam\bin\avformat-53.dll
2013-07-26 14:46 - 2013-09-06 22:55 - 07751080 _____ (Valve Corporation) D:\steam\steamclient.dll
2013-07-26 14:46 - 2013-09-06 22:55 - 02449832 _____ (Valve Corporation) d:\steam\bin\friendsui.dll
2013-07-26 14:46 - 2013-09-06 22:55 - 01804712 _____ (Valve Corporation) d:\steam\bin\serverbrowser.dll
2007-07-18 22:37 - 2007-04-04 09:30 - 00270336 _____ (The Apache Software Foundation) C:\Acer\Empowering Technology\log4net.dll
2007-07-18 22:37 - 2007-06-15 16:15 - 00057344 _____ () C:\Acer\Empowering Technology\Acer.Empowering.Framework.DialogManager.dll
2007-07-18 22:37 - 2007-06-15 16:15 - 00053248 _____ (Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Shared.UI.dll
2007-07-18 22:37 - 2007-06-15 11:22 - 00762368 _____ (Acer inc.) C:\Acer\Empowering Technology\Acer.Empowering.Windows.Forms.dll
2007-07-18 22:37 - 2007-06-15 16:47 - 00049152 _____ (Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.Presenter.dll
2007-07-18 22:37 - 2007-06-15 16:47 - 01851392 _____ (Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.LaunchBarView.dll
2007-07-18 22:37 - 2007-06-15 16:15 - 00032768 _____ (Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.Shared.dll
2007-07-18 22:37 - 2007-06-15 16:47 - 00045056 _____ (Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.Host.dll
2007-07-18 22:37 - 2007-06-15 16:47 - 00024576 _____ () C:\Acer\Empowering Technology\Acer.Empowering.Framework.PasswordSetting.dll
2007-07-18 22:37 - 2007-06-15 16:01 - 00020480 _____ (Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.Interface.dll
2007-07-18 22:37 - 2007-06-15 16:47 - 00114688 _____ (Acer Inc.) C:\Acer\Empowering Technology\de\Acer.Empowering.Framework.LaunchBarView.resources.dll
2007-04-25 16:30 - 2007-04-25 16:30 - 00217088 _____ (HiTRUST Inc.) C:\Acer\Empowering Technology\eDataSecurity\eDSplugin.dll
2009-02-01 16:43 - 2007-06-29 16:10 - 02711552 _____ (Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryUI.dll
2009-02-01 16:43 - 2007-02-13 07:26 - 00016384 _____ () C:\Acer\Empowering Technology\eRecovery\ServiceInterface.dll
2007-07-18 22:39 - 2007-04-16 18:48 - 00045056 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Plugin.dll
2007-07-18 22:39 - 2007-04-16 18:47 - 00024576 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Presenter.dll
2007-07-18 22:39 - 2007-04-16 18:47 - 00020480 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Model.Interface.dll
2007-07-18 22:39 - 2007-04-16 18:47 - 00028672 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Model.dll
2007-07-18 22:39 - 2007-04-16 18:47 - 00040960 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Library.dll
2007-07-18 22:40 - 2007-04-16 18:47 - 00016384 _____ () C:\Acer\Empowering Technology\MemCheck.Interface.dll
2009-02-01 16:43 - 2007-06-20 19:46 - 00167936 _____ (Acer Inc.) C:\Acer\Empowering Technology\eRecovery\de\eRecoveryUI.resources.dll
2007-07-18 22:39 - 2007-04-16 18:48 - 00003584 _____ () C:\Acer\Empowering Technology\ePerformance\de\ePerformance.Plugin.resources.dll
2007-08-03 12:51 - 2007-08-03 12:51 - 00279848 _____ (Nero AG) C:\Program Files\Common Files\Nero\Lib\NMSQLDB.dll
2007-08-03 12:51 - 2007-08-03 12:51 - 00075048 _____ (Nero AG) C:\Program Files\Common Files\Nero\Lib\NMLogCxx.dll
2007-03-13 11:28 - 2007-03-13 11:28 - 00823296 _____ () C:\Program Files\Common Files\Nero\Lib\log4cxx.dll
2007-08-03 12:51 - 2007-08-03 12:51 - 00738600 _____ (Nero AG) C:\Program Files\Common Files\Nero\Lib\NMCoFoundation.dll
2007-08-03 13:03 - 2007-08-03 13:03 - 00169256 _____ (Nero AG) C:\Program Files\Common Files\Nero\Lib\NMPluginBase.dll
2007-08-03 12:51 - 2007-08-03 12:51 - 00226600 _____ (Nero AG) C:\Program Files\Common Files\Nero\Lib\NMFullTextExtraction.dll
2007-08-03 12:51 - 2007-08-03 12:51 - 00234792 _____ (Nero AG) C:\Program Files\Common Files\Nero\Lib\NMSearchPluginSimilarImages.dll
2007-08-04 10:01 - 2007-08-04 10:01 - 04085032 _____ (Nero AG) C:\Program Files\Common Files\Nero\Lib\NeroIPP.dll
2013-09-13 17:29 - 2013-09-13 17:29 - 00479112 ____N (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashUtil32_11_8_800_174_ActiveX.dll
2013-04-26 03:59 - 2013-04-26 03:59 - 00266704 ____N (G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\Banksafe.dll
2011-08-14 12:36 - 2008-09-08 12:42 - 02028544 _____ (Brother Industries Ltd.) C:\Windows\system32\spool\DRIVERS\W32X86\3\briu08b.dll
2011-08-14 12:36 - 2008-09-08 12:42 - 00058368 _____ (Brother Industries Ltd.) C:\Windows\system32\spool\DRIVERS\W32X86\3\BRIL08B.DLL
2013-02-26 00:22 - 2013-02-26 00:22 - 02505144 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2013-02-26 00:22 - 2013-02-26 00:22 - 12641992 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2013-09-22 11:29 - 2013-09-22 11:29 - 16244616 ____R (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\Flash32_11_8_800_175.ocx
2011-08-14 12:36 - 2008-09-08 12:42 - 01685504 _____ (Brother Industries Ltd.) C:\Windows\system32\spool\DRIVERS\W32X86\3\brio08b.dll
2013-02-25 04:54 - 2013-02-25 04:54 - 01027024 ____N (G Data Software AG) C:\Program Files\Common Files\G DATA\AVKMail\AskOut.dll
2013-02-25 04:16 - 2013-02-25 04:16 - 00489936 ____N (G Data Software AG) C:\Program Files\G Data\InternetSecurity\ASK\GDASpam.dll
2013-02-25 04:53 - 2013-02-25 04:53 - 00507344 ____N (G Data Software AG) C:\Program Files\Common Files\G DATA\AVKMail\AVKExchd.dll
2013-02-25 04:54 - 2013-02-25 04:54 - 01902032 ____N (G Data Software AG) C:\Program Files\Common Files\G Data\AVKMail\GDOfficeAddinx86.dll
2007-04-25 16:32 - 2007-04-25 16:32 - 00274432 _____ (hitrust) C:\Windows\system32\OAddin.dll
2006-12-25 15:44 - 2006-12-25 15:44 - 00022016 _____ () C:\Windows\system32\MailFormat_U.dll
2012-07-02 17:11 - 2013-09-04 12:08 - 00250368 _____ (Windows (R) Codename Longhorn DDK provider) C:\Program Files\Samsung\Kies\External\DeviceModules\UPNPDevice_Kies.dll
2013-08-16 19:38 - 2013-08-22 11:58 - 00167312 _____ (Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\AgentDialogs.dll
2013-08-16 19:38 - 2013-08-22 11:58 - 00053128 _____ (Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\AgentModels.dll
2013-08-16 19:38 - 2013-08-22 11:58 - 00120712 _____ (Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\GlobalUtil.dll
2012-06-26 16:03 - 2013-08-22 11:58 - 01040784 _____ (Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\CommonModule.dll
2013-08-16 19:38 - 2013-08-22 11:58 - 01636232 _____ (Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\AgentModule.dll
2013-08-16 19:38 - 2013-08-22 11:58 - 00106496 _____ (TODO: <Company name>) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\BaseUI.dll
2013-08-16 19:38 - 2013-08-22 11:58 - 03341208 _____ (Codejock Software) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\ToolkitPro1331vc90U.dll

==================== Alternate Data Streams (whitelisted) ======

AlternateDataStreams: C:\ProgramData\TEMP:430C6D84
AlternateDataStreams: C:\ProgramData\TEMP:A8ADE5D8
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/19/2013 00:37:11 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung TuneUpUtilitiesService32.exe, Version 13.0.3020.2, Zeitstempel 0x51067abd, fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode 0xc0000005, Fehleroffset 0x00000064,
Prozess-ID 0xe18, Anwendungsstartzeit TuneUpUtilitiesService32.exe0.

Error: (09/19/2013 11:58:31 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung TuneUpUtilitiesService32.exe, Version 13.0.3020.2, Zeitstempel 0x51067abd, fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode 0xc0000005, Fehleroffset 0x00000035,
Prozess-ID 0xe40, Anwendungsstartzeit TuneUpUtilitiesService32.exe0.

Error: (09/13/2013 06:02:41 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung TuneUpUtilitiesService32.exe, Version 13.0.3020.2, Zeitstempel 0x51067abd, fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode 0xc0000005, Fehleroffset 0x00000000,
Prozess-ID 0xaa4, Anwendungsstartzeit TuneUpUtilitiesService32.exe0.

Error: (08/26/2013 00:00:18 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung TuneUpUtilitiesService32.exe, Version 13.0.3020.2, Zeitstempel 0x51067abd, fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode 0xc0000005, Fehleroffset 0x80000000,
Prozess-ID 0xca0, Anwendungsstartzeit TuneUpUtilitiesService32.exe0.

Error: (08/25/2013 08:20:38 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung TuneUpUtilitiesService32.exe, Version 13.0.3020.2, Zeitstempel 0x51067abd, fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode 0xc0000005, Fehleroffset 0x00000064,
Prozess-ID 0x958, Anwendungsstartzeit TuneUpUtilitiesService32.exe0.

Error: (08/25/2013 09:32:57 AM) (Source: Windows Search Service) (User: )
Description: Die Aktualisierung kann nicht gestartet werden, da kein Zugriff auf die Inhaltsquellen bestand. Beheben Sie die Fehler, und starten Sie die Aktualisierung erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (08/18/2013 00:55:04 PM) (Source: Application Hang) (User: )
Description: Programm Kies.exe, Version 1.0.0.1346 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 7bc
Anfangszeit: 01ce9c00eba09316
Zeitpunkt der Beendigung: 102

Error: (08/18/2013 00:23:43 PM) (Source: Application Hang) (User: )
Description: Programm Kies.exe, Version 1.0.0.1346 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 27cc
Anfangszeit: 01ce9bfc87f80cc6
Zeitpunkt der Beendigung: 110


System errors:
=============
Error: (09/19/2013 04:43:03 PM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 192.168.1.35 für die Netzwerkkarte mit der Netzwerkadresse 0019213CCBAC wurde durch den DHCP-Server 192.168.1.1 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).

Error: (09/19/2013 07:50:21 AM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 192.168.1.35 für die Netzwerkkarte mit der Netzwerkadresse 0019213CCBAC wurde durch den DHCP-Server 192.168.1.1 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).

Error: (09/16/2013 04:05:35 PM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 192.168.1.35 für die Netzwerkkarte mit der Netzwerkadresse 0019213CCBAC wurde durch den DHCP-Server 192.168.1.1 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).

Error: (09/14/2013 08:00:04 AM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 192.168.1.34 für die Netzwerkkarte mit der Netzwerkadresse 0019213CCBAC wurde durch den DHCP-Server 192.168.1.1 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).

Error: (09/13/2013 05:16:00 PM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 192.168.1.36 für die Netzwerkkarte mit der Netzwerkadresse 0019213CCBAC wurde durch den DHCP-Server 192.168.1.1 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).

Error: (09/12/2013 04:25:43 PM) (Source: Service Control Manager) (User: )
Description: G Data Personal Firewall%%1053

Error: (09/12/2013 04:25:43 PM) (Source: Service Control Manager) (User: )
Description: 30000G Data Personal Firewall

Error: (09/12/2013 04:25:43 PM) (Source: DCOM) (User: )
Description: 1053GDFwSvc-Service{1DED95CA-C567-464A-B405-087EDDF0B095}

Error: (09/11/2013 02:59:27 PM) (Source: cdrom) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.

Error: (09/11/2013 02:59:20 PM) (Source: cdrom) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.


CodeIntegrity Errors:
===================================
  Date: 2013-09-22 11:46:05.611
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-22 11:46:05.393
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-22 11:46:05.174
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-22 11:46:04.940
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-08-08 10:08:43.567
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-08-08 10:08:43.363
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-08-08 10:08:17.754
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-08-08 10:08:17.478
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-08-08 10:08:17.277
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-08-08 10:08:17.077
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 61%
Total physical RAM: 3070.51 MB
Available physical RAM: 1188.5 MB
Total Pagefile: 6344.04 MB
Available Pagefile: 3551.37 MB
Total Virtual: 2047.88 MB
Available Virtual: 1898.81 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:228.13 GB) (Free:134.1 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:227.87 GB) (Free:96.6 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: A56BC4CE)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=228 GB) - (Type=06)
Partition 3: (Not Active) - (Size=228 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-22 12:38:19
Windows 6.0.6002 Service Pack 2 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD50 rev.12.0 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Toasty\AppData\Local\Temp\kwriipoc.sys


---- Kernel code sections - GMER 2.1 ----

.reloc  C:\Windows\system32\drivers\acedrv11.sys                                                          section is executable [0xA0C79300, 0x25D4C, 0xE0000060]
.text   C:\Windows\system32\DRIVERS\atksgt.sys                                                            section is writeable [0xA0CA0300, 0x3B6D8, 0xE8000020]
.text   C:\Windows\system32\DRIVERS\lirsgt.sys                                                            section is writeable [0xA0CEA300, 0x1BEE, 0xE8000020]
        C:\Program Files\Acer Arcade Live\Acer PlayMovie\000.fcl                                          entry point in "" section [0xB2A29000]
.clc    C:\Program Files\Acer Arcade Live\Acer PlayMovie\000.fcl                                          unknown last section [0xB2A2A000, 0x1000, 0x00000000]

---- User code sections - GMER 2.1 ----

.text   C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe[7688] ntdll.dll!DbgBreakPoint  77C5878E 1 Byte  [C3]

---- Devices - GMER 2.1 ----

Device  \Driver\BTHUSB \Device\00000084                                                                   bthport.sys
Device  \Driver\BTHUSB \Device\00000086                                                                   bthport.sys

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001060a5736f                       
Reg     HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001060a5736f@a0821fc028dd          0x84 0xF2 0x64 0x15 ...
Reg     HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001060a5736f (not active ControlSet)   
Reg     HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001060a5736f@a0821fc028dd              0x84 0xF2 0x64 0x15 ...

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                                                             unknown MBR code

---- EOF - GMER 2.1 ----
         

Leerlauf-Scan wurde erfolgreich durchgefürt:
276080 Dateien überprüft.
Keine infizierten Dateien gefunden.