Google Ergebnisse öffnen Werbung (Ihavenet), Win7

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 11:42 on 28/09/2013 (xxxx)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2013 02
Ran by ***** (administrator) on *****-PC on 28-09-2013 11:47:06
Running from C:\Users\*****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Windows\AsScrPro.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
() C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
(Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
() C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
(Systweak) C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-05-17] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Runonce: [Del3266957] - cmd.exe /Q /D /c del "C:\Users\*****\AppData\Local\Temp\0.del" [x]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe
HKCU\...\Run: [vzqitd] - rundll32 "C:\Users\*****\AppData\Roaming\KBDSORS1K.dll",Gcgadleano
HKCU\...\Runonce: [Del3266957] - cmd.exe /Q /D /c del "C:\Users\*****\AppData\Local\Temp\0.del"
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] - C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini [370 2013-09-28] ()
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1644680 2013-02-08] (Ask)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [226920 2011-05-10] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll C:\Windows\SysWOW64\nvinit.dll [193128 2011-05-10] (NVIDIA Corporation)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=248478929C384F91&affID=119357&tt=240913_91213&tsp=5019
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=248478929C384F91&affID=119357&tt=240913_91213&tsp=5019
URLSearchHook: (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} -  No File
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=248478929C384F91&affID=119357&tt=240913_91213&tsp=5019
SearchScopes: HKCU - {3E93635B-8362-4312-8D9A-379164757619} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=1a8c31da-dc22-48dc-970e-0d4e178847e8&apn_sauid=DC177A56-AE5C-4A2D-A777-6164B668C7AA
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
BHO-x32: Plus-HD-2.3 - {11111111-1111-1111-1111-110311341126} - C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-bho.dll (Plus HD)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com)
BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\747xi4oc.default
FF user.js: detected! => C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\747xi4oc.default\user.js
FF NewTab: hxxp://www.searchgol.com/?babsrc=NT_ss&mntrId=248478929C384F91&affID=119357&tt=240913_91213&tsp=5019
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=248478929C384F91&affID=119357&tt=240913_91213&tsp=5019
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\747xi4oc.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\747xi4oc.default\Extensions\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com
FF Extension: Delta Toolbar - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\747xi4oc.default\Extensions\ffxtlbr@delta.com
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\747xi4oc.default\Extensions\toolbar@ask.com

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-04] (Avira Operations GmbH & Co. KG)
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [38440 2013-09-20] (Just Develop It)
R2 BitGuard; C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [2845152 2013-09-10] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-28] (Avira Operations GmbH & Co. KG)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-28 11:46 - 2013-09-28 11:46 - 00000000 ____D C:\FRST
2013-09-28 11:45 - 2013-09-28 11:45 - 01953880 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2013-09-28 11:42 - 2013-09-28 11:42 - 00000474 _____ C:\Users\*****\Desktop\defogger_disable.log
2013-09-28 11:42 - 2013-09-28 11:42 - 00000000 _____ C:\Users\*****\defogger_reenable
2013-09-28 11:40 - 2013-09-28 11:40 - 00050477 _____ C:\Users\*****\Desktop\Defogger.exe
2013-09-28 11:36 - 2013-09-28 11:37 - 00000000 ____D C:\Users\*****\AppData\Local\{D2CADF66-CA8F-4DEF-95FC-451F3AA6C851}
2013-09-28 11:34 - 2013-09-28 11:34 - 00003118 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-09-28 11:33 - 2013-09-28 11:33 - 00004230 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-codedownloader
2013-09-28 11:33 - 2013-09-28 11:33 - 00004226 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-updater
2013-09-28 11:33 - 2013-09-28 11:33 - 00004130 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-enabler
2013-09-28 11:33 - 2013-09-28 11:33 - 00001207 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2013-09-28 11:33 - 2013-09-28 11:33 - 00001200 _____ C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job
2013-09-28 11:33 - 2013-09-28 11:33 - 00001196 _____ C:\Windows\Tasks\Plus-HD-2.3-updater.job
2013-09-28 11:33 - 2013-09-28 11:33 - 00001100 _____ C:\Windows\Tasks\Plus-HD-2.3-enabler.job
2013-09-28 11:33 - 2013-09-28 11:33 - 00001093 _____ C:\Users\*****\Desktop\MyPC Backup.lnk
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\ProgramData\Systweak
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\Program Files (x86)\Delta
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-09-28 11:33 - 2012-07-25 12:03 - 00016896 _____ C:\Windows\system32\sasnative64.exe
2013-09-28 11:32 - 2013-09-28 11:35 - 00003240 _____ C:\Windows\System32\Tasks\DigitalSite
2013-09-28 11:32 - 2013-09-28 11:35 - 00000296 _____ C:\Windows\Tasks\DigitalSite.job
2013-09-28 11:32 - 2013-09-28 11:33 - 00003394 _____ C:\Windows\System32\Tasks\EPUpdater
2013-09-28 11:32 - 2013-09-28 11:33 - 00000000 ____D C:\Users\*****\AppData\Roaming\Systweak
2013-09-28 11:32 - 2013-09-28 11:33 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.3
2013-09-28 11:32 - 2013-09-28 11:32 - 00003326 _____ C:\Windows\System32\Tasks\Advanced System Protector
2013-09-28 11:32 - 2013-09-28 11:32 - 00003108 _____ C:\Windows\System32\Tasks\RegClean Pro
2013-09-28 11:32 - 2013-09-28 11:32 - 00003032 _____ C:\Windows\System32\Tasks\RegClean Pro_UPDATES
2013-09-28 11:32 - 2013-09-28 11:32 - 00002876 _____ C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
2013-09-28 11:32 - 2013-09-28 11:32 - 00001882 _____ C:\Users\*****\Desktop\Search.lnk
2013-09-28 11:32 - 2013-09-28 11:32 - 00001832 _____ C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job
2013-09-28 11:32 - 2013-09-28 11:32 - 00001116 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-09-28 11:32 - 2013-09-28 11:32 - 00001056 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2013-09-28 11:32 - 2013-09-28 11:32 - 00000286 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2013-09-28 11:32 - 2013-09-28 11:32 - 00000278 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\Users\*****\AppData\Roaming\DigitalSite
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\Users\*****\AppData\Roaming\Babylon
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\Users\*****\AppData\Roaming\BabSolution
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\ProgramData\BitGuard
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\ProgramData\Babylon
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-09-28 11:32 - 2013-07-22 16:07 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2013-09-28 11:31 - 2013-09-28 11:31 - 00749248 _____ C:\Users\*****\Downloads\ZipExtractorSetup.exe
2013-09-07 21:36 - 2013-09-07 21:36 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-07 21:36 - 2013-09-07 21:36 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-07 21:36 - 2013-09-07 21:36 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-07 21:36 - 2013-09-07 21:36 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-07 21:36 - 2013-09-07 21:36 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-29 19:19 - 2013-08-29 19:19 - 00167936 __RSH C:\Users\*****\AppData\Roaming\KBDSORS1K.dll

==================== One Month Modified Files and Folders =======

2013-09-28 11:49 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-28 11:49 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-28 11:47 - 2011-10-14 00:58 - 01909087 _____ C:\Windows\WindowsUpdate.log
2013-09-28 11:46 - 2013-09-28 11:46 - 00000000 ____D C:\FRST
2013-09-28 11:45 - 2013-09-28 11:45 - 01953880 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2013-09-28 11:42 - 2013-09-28 11:42 - 00000474 _____ C:\Users\*****\Desktop\defogger_disable.log
2013-09-28 11:42 - 2013-09-28 11:42 - 00000000 _____ C:\Users\*****\defogger_reenable
2013-09-28 11:42 - 2011-12-25 06:50 - 00000000 ____D C:\Users\*****
2013-09-28 11:40 - 2013-09-28 11:40 - 00050477 _____ C:\Users\*****\Desktop\Defogger.exe
2013-09-28 11:37 - 2013-09-28 11:36 - 00000000 ____D C:\Users\*****\AppData\Local\{D2CADF66-CA8F-4DEF-95FC-451F3AA6C851}
2013-09-28 11:35 - 2013-09-28 11:32 - 00003240 _____ C:\Windows\System32\Tasks\DigitalSite
2013-09-28 11:35 - 2013-09-28 11:32 - 00000296 _____ C:\Windows\Tasks\DigitalSite.job
2013-09-28 11:34 - 2013-09-28 11:34 - 00003118 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-09-28 11:33 - 2013-09-28 11:33 - 00004230 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-codedownloader
2013-09-28 11:33 - 2013-09-28 11:33 - 00004226 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-updater
2013-09-28 11:33 - 2013-09-28 11:33 - 00004130 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-enabler
2013-09-28 11:33 - 2013-09-28 11:33 - 00001207 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2013-09-28 11:33 - 2013-09-28 11:33 - 00001200 _____ C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job
2013-09-28 11:33 - 2013-09-28 11:33 - 00001196 _____ C:\Windows\Tasks\Plus-HD-2.3-updater.job
2013-09-28 11:33 - 2013-09-28 11:33 - 00001100 _____ C:\Windows\Tasks\Plus-HD-2.3-enabler.job
2013-09-28 11:33 - 2013-09-28 11:33 - 00001093 _____ C:\Users\*****\Desktop\MyPC Backup.lnk
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\ProgramData\Systweak
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\Program Files (x86)\Delta
2013-09-28 11:33 - 2013-09-28 11:33 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-09-28 11:33 - 2013-09-28 11:32 - 00003394 _____ C:\Windows\System32\Tasks\EPUpdater
2013-09-28 11:33 - 2013-09-28 11:32 - 00000000 ____D C:\Users\*****\AppData\Roaming\Systweak
2013-09-28 11:33 - 2013-09-28 11:32 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.3
2013-09-28 11:33 - 2013-08-24 23:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-28 11:33 - 2011-12-25 06:51 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-28 11:32 - 2013-09-28 11:32 - 00003326 _____ C:\Windows\System32\Tasks\Advanced System Protector
2013-09-28 11:32 - 2013-09-28 11:32 - 00003108 _____ C:\Windows\System32\Tasks\RegClean Pro
2013-09-28 11:32 - 2013-09-28 11:32 - 00003032 _____ C:\Windows\System32\Tasks\RegClean Pro_UPDATES
2013-09-28 11:32 - 2013-09-28 11:32 - 00002876 _____ C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
2013-09-28 11:32 - 2013-09-28 11:32 - 00001882 _____ C:\Users\*****\Desktop\Search.lnk
2013-09-28 11:32 - 2013-09-28 11:32 - 00001832 _____ C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job
2013-09-28 11:32 - 2013-09-28 11:32 - 00001116 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-09-28 11:32 - 2013-09-28 11:32 - 00001056 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2013-09-28 11:32 - 2013-09-28 11:32 - 00000286 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2013-09-28 11:32 - 2013-09-28 11:32 - 00000278 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\Users\*****\AppData\Roaming\DigitalSite
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\Users\*****\AppData\Roaming\Babylon
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\Users\*****\AppData\Roaming\BabSolution
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\ProgramData\BitGuard
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\ProgramData\Babylon
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-09-28 11:32 - 2013-09-28 11:32 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-09-28 11:31 - 2013-09-28 11:31 - 00749248 _____ C:\Users\*****\Downloads\ZipExtractorSetup.exe
2013-09-28 11:09 - 2012-05-01 13:30 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-28 11:09 - 2012-05-01 13:30 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-28 11:08 - 2012-05-01 13:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-28 11:08 - 2012-01-12 15:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-28 10:56 - 2011-04-13 04:33 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-28 10:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-28 10:43 - 2011-04-11 14:05 - 00446132 _____ C:\Windows\system32\perfh001.dat
2013-09-28 10:43 - 2011-04-11 14:05 - 00082970 _____ C:\Windows\system32\perfc001.dat
2013-09-28 10:43 - 2011-03-17 13:52 - 00687604 _____ C:\Windows\system32\perfh019.dat
2013-09-28 10:43 - 2011-03-17 13:52 - 00136502 _____ C:\Windows\system32\perfc019.dat
2013-09-28 10:43 - 2011-02-19 07:02 - 00365168 _____ C:\Windows\system32\perfh00D.dat
2013-09-28 10:43 - 2011-02-19 07:02 - 00073080 _____ C:\Windows\system32\perfc00D.dat
2013-09-28 10:43 - 2011-02-19 06:56 - 00563416 _____ C:\Windows\system32\perfh008.dat
2013-09-28 10:43 - 2011-02-19 06:56 - 00093422 _____ C:\Windows\system32\perfc008.dat
2013-09-28 10:43 - 2011-02-19 06:51 - 00396966 _____ C:\Windows\system32\prfh0404.dat
2013-09-28 10:43 - 2011-02-19 06:51 - 00110374 _____ C:\Windows\system32\prfc0404.dat
2013-09-28 10:43 - 2011-02-19 06:45 - 00690988 _____ C:\Windows\system32\prfh0816.dat
2013-09-28 10:43 - 2011-02-19 06:45 - 00137738 _____ C:\Windows\system32\prfc0816.dat
2013-09-28 10:43 - 2011-02-19 06:40 - 00702838 _____ C:\Windows\system32\perfh013.dat
2013-09-28 10:43 - 2011-02-19 06:40 - 00136926 _____ C:\Windows\system32\perfc013.dat
2013-09-28 10:43 - 2011-02-19 06:35 - 00700754 _____ C:\Windows\system32\perfh010.dat
2013-09-28 10:43 - 2011-02-19 06:35 - 00131130 _____ C:\Windows\system32\perfc010.dat
2013-09-28 10:43 - 2011-02-19 06:29 - 00706076 _____ C:\Windows\system32\perfh00C.dat
2013-09-28 10:43 - 2011-02-19 06:29 - 00134126 _____ C:\Windows\system32\perfc00C.dat
2013-09-28 10:43 - 2011-02-19 06:24 - 00665812 _____ C:\Windows\system32\perfh007.dat
2013-09-28 10:43 - 2011-02-19 06:24 - 00133992 _____ C:\Windows\system32\perfc007.dat
2013-09-28 10:43 - 2011-02-19 06:19 - 00705100 _____ C:\Windows\system32\perfh00A.dat
2013-09-28 10:43 - 2011-02-19 06:19 - 00141048 _____ C:\Windows\system32\perfc00A.dat
2013-09-28 10:43 - 2009-07-14 07:13 - 08651976 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-28 10:42 - 2009-07-14 06:51 - 00095593 _____ C:\Windows\setupact.log
2013-09-28 10:39 - 2011-04-13 04:33 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-28 10:38 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-07 21:42 - 2011-12-25 06:51 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2013-09-07 21:41 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-07 21:36 - 2013-09-07 21:36 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-07 21:36 - 2013-09-07 21:36 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-07 21:36 - 2013-09-07 21:36 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-07 21:36 - 2013-09-07 21:36 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-07 21:36 - 2013-09-07 21:36 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-07 21:36 - 2013-02-24 18:39 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-09-07 21:36 - 2011-12-26 14:58 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-04 12:39 - 2013-05-07 19:05 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-04 12:39 - 2013-03-28 09:43 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-04 12:39 - 2013-03-28 09:43 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-29 19:19 - 2013-08-29 19:19 - 00167936 __RSH C:\Users\*****\AppData\Roaming\KBDSORS1K.dll

Some content of TEMP:
====================
C:\Users\*****\AppData\Local\Temp\APNStub.exe
C:\Users\*****\AppData\Local\Temp\BackupSetup.exe
C:\Users\*****\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe
C:\Users\*****\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2009-07-29 07:04

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-09-2013 02
Ran by ***** at 2013-09-28 11:50:40
Running from C:\Users\*****\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 10 ActiveX (x32 Version: 10.1.85.3)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Advanced System Protector (x32 Version: 2.1.1000.10905)
ALDI NORD Bestellsoftware 4.11.0 (x32 Version: 4.11.0)
Ask Toolbar (x32 Version: 1.15.18.0)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.12.5.0)
ASUS AI Recovery (x32 Version: 1.0.13)
ASUS FancyStart (x32 Version: 1.0.8)
ASUS K3 Series ScreenSaver (x32 Version: 1.0.0002)
ASUS LifeFrame3 (x32 Version: 3.0.20)
ASUS Power4Gear Hybrid (Version: 1.1.43)
ASUS SmartLogon (x32 Version: 1.0.0011)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0030)
ASUS Virtual Camera (x32 Version: 1.0.21)
ATK Package (x32 Version: 1.0.0010)
Avira Free Antivirus (x32 Version: 13.0.0.4052)
Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.2.4.37268)
BitGuard (x32)
Canon iP4200
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
D3DX10 (x32 Version: 15.4.2368.0902)
Delta Chrome Toolbar (x32)
Delta toolbar   (x32 Version: 1.8.24.6)
ETDWare PS/2-X64 8.0.5.3_WHQL (Version: 8.0.5.3)
Fast Boot (Version: 1.0.10)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
GIMP 2.6.11 (x32 Version: 2.6.11)
Google Chrome (x32 Version: 16.0.912.63)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32)
Google Update Helper (x32 Version: 1.3.21.79)
Image Resizer Powertoy Clone for Windows (64 bit) (Version: 2.1.1)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2291)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.01.1000)
IrfanView (remove only) (x32 Version: 4.32)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MyPC Backup  (Version: )
Nuance PDF Reader (x32 Version: 6.00.0041)
NVIDIA Control Panel 268.56 (Version: 268.56)
NVIDIA Graphics Driver 268.56 (Version: 268.56)
NVIDIA Install Application (Version: 2.265.41.0)
NVIDIA Optimus 1.0.22 (Version: 1.0.22)
NVIDIA Update Components (Version: 1.0.22)
Open It! (x32 Version: 1.1.1)
OpenOffice.org 3.3 (x32 Version: 3.3.9567)
Plus-HD-2.3 (x32 Version: 1.27.153.8)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek Ethernet Controller Driver (x32 Version: 7.38.113.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6373)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7600.10001)
RegClean Pro (x32 Version: 6.21)
SCHLECKER Foto Digital Service (x32)
Skype™ 5.10 (x32 Version: 5.10.116)
Sonic Focus (x32 Version: 1.0.0.4)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Zip Extractor (HKCU)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Family Safety (Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Live 影像中心 (x32 Version: 15.4.3502.0922)
Windows Live 程式集 (x32 Version: 15.4.3502.0922)
WinFlash (x32 Version: 2.31.0)
Wireless Console 3 (x32 Version: 3.0.19)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922)
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2)
بريد Windows Live (x32 Version: 15.4.3502.0922)
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (x32 Version: 15.4.5722.2)
معرض صور Windows Live (x32 Version: 15.4.3502.0922)
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2)

==================== Restore Points  =========================

31-07-2013 06:47:35 Windows Update
06-08-2013 07:07:30 Windows Update
20-08-2013 21:06:29 Windows Update
20-08-2013 21:25:57 Windows Update
27-08-2013 12:26:21 Windows Update
03-09-2013 20:24:14 Windows Update
07-09-2013 18:06:15 Windows Update
07-09-2013 19:34:53 Installed Java 7 Update 25
28-09-2013 09:10:24 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0A7349F7-3C37-4CA1-92C7-F86D19D22F0E} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS)
Task: {227C2357-EA29-4A2B-9BB5-07E01395034C} - System32\Tasks\Plus-HD-2.3-codedownloader => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe [2013-09-28] (Plus HD)
Task: {30D6C80E-D11E-4DB4-B9F4-7BE097CC6B90} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-12-02] (ASUS)
Task: {60F398C6-F009-4FEB-B4EF-955537F134F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13] (Google Inc.)
Task: {6DD47A91-57CB-4391-84C6-2564E323ACAA} - System32\Tasks\Plus-HD-2.3-updater => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-updater.exe [2013-09-28] (Plus HD)
Task: {84A77F86-B445-48DE-B57F-B89B693CD5C2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13] (Google Inc.)
Task: {8D40F88E-5628-4F9A-8468-A1956516683A} - System32\Tasks\Plus-HD-2.3-enabler => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-enabler.exe [2013-09-28] (Plus HD)
Task: {9318029C-2DC7-42FE-AD04-4C7C43318914} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: {93E2B662-957F-4F70-A600-C7E1820ACAD1} - System32\Tasks\EPUpdater => C:\Users\*****\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-08-04] ()
Task: {A4E8BDC5-2059-4F3E-89FF-827C51FFA155} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-28] (Adobe Systems Incorporated)
Task: {B0F0E88B-F8C6-4D9C-983D-C24F7052FC9B} - System32\Tasks\Advanced System Protector => C:\Program Files (x86)\RegClean Pro\SystweakASP.exe [2012-09-17] (Systweak Inc                                                )
Task: {C408E317-F496-4D5C-9F2E-E794B641FEBC} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2013-07-22] (Systweak Inc)
Task: {C8623219-47AE-4E63-9C42-2C8EB6810DB8} - System32\Tasks\DigitalSite => C:\Users\*****\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {D06BC9DB-4E89-49B0-A37B-599096D30227} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2013-07-22] (Systweak Inc)
Task: {D86F234A-6724-4347-AFA4-6570C4D71260} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2013-07-22] (Systweak Inc)
Task: {DC349118-664F-4939-8029-3790183483C5} - System32\Tasks\Plus-HD-2.3-firefoxinstaller => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-firefoxinstaller.exe [2013-09-28] (Plus HD)
Task: {DCBECF3D-6BCD-45A5-BCA2-43338BE205CF} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: {F71C7F98-3159-4E7E-A54E-3F1790A17A33} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-02-08] ()
Task: {F9C97D02-A824-41D3-A889-6E2EEA3F3E7B} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [2013-05-24] (Systweak)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DigitalSite.job => C:\Users\*****\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-enabler.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-enabler.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-firefoxinstaller.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-updater.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-updater.exe
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe

==================== Loaded Modules (whitelisted) =============

2010-04-03 04:21 - 2008-10-01 08:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2010-07-15 01:11 - 2010-07-15 01:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2011-07-07 08:12 - 2011-01-27 02:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-05-02 22:41 - 2011-05-02 22:41 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2013-09-20 00:37 - 2013-09-20 00:37 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll
2013-09-20 00:32 - 2013-09-20 00:32 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2013-02-25 10:50 - 2013-02-25 10:45 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2011-01-17 17:19 - 2011-12-26 14:59 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2013-09-28 11:33 - 2013-09-10 16:34 - 02700768 _____ () C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll
2013-09-28 11:33 - 2012-07-25 12:03 - 00886272 _____ () C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll
2013-09-28 11:33 - 2013-05-24 13:13 - 01730928 _____ () C:\Program Files (x86)\Advanced System Protector\aspsys.dll
2013-09-28 11:33 - 2012-07-25 12:03 - 00168448 _____ () C:\Program Files (x86)\Advanced System Protector\UNRAR.DLL
2013-08-24 23:07 - 2013-08-24 23:07 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-09-28 11:08 - 2013-09-28 11:08 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/28/2013 11:36:01 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: cmd.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce78e2b
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1673.238, Zeitstempel: 0x522f2dcc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001793a8
ID des fehlerhaften Prozesses: 0xcb0
Startzeit der fehlerhaften Anwendung: 0xcmd.exe0
Pfad der fehlerhaften Anwendung: cmd.exe1
Pfad des fehlerhaften Moduls: cmd.exe2
Berichtskennung: cmd.exe3

Error: (09/28/2013 11:35:57 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: cmd.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce78e2b
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1673.238, Zeitstempel: 0x522f2dcc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001793a8
ID des fehlerhaften Prozesses: 0xcb0
Startzeit der fehlerhaften Anwendung: 0xcmd.exe0
Pfad der fehlerhaften Anwendung: cmd.exe1
Pfad des fehlerhaften Moduls: cmd.exe2
Berichtskennung: cmd.exe3

Error: (09/28/2013 11:35:53 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: cmd.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce78e2b
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1673.238, Zeitstempel: 0x522f2dcc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001793a8
ID des fehlerhaften Prozesses: 0x3cc
Startzeit der fehlerhaften Anwendung: 0xcmd.exe0
Pfad der fehlerhaften Anwendung: cmd.exe1
Pfad des fehlerhaften Moduls: cmd.exe2
Berichtskennung: cmd.exe3

Error: (09/28/2013 11:35:43 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: cmd.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce78e2b
Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1673.238, Zeitstempel: 0x522f2dcc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001793a8
ID des fehlerhaften Prozesses: 0x3cc
Startzeit der fehlerhaften Anwendung: 0xcmd.exe0
Pfad der fehlerhaften Anwendung: cmd.exe1
Pfad des fehlerhaften Moduls: cmd.exe2
Berichtskennung: cmd.exe3

Error: (07/20/2013 10:50:33 PM) (Source: Application Hang) (User: )
Description: Programm WLXPhotoGallery.exe, Version 15.4.3508.1109 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1110

Startzeit: 01ce858a98bd61ce

Endzeit: 31

Anwendungspfad: C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe

Berichts-ID: f9bf59c1-f17d-11e2-b882-5404a61b714d

Error: (06/01/2013 05:45:50 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Updater.exe, Version: 1.2.4.37268, Zeitstempel: 0x511585c3
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00686ca8
ID des fehlerhaften Prozesses: 0xe0c
Startzeit der fehlerhaften Anwendung: 0xUpdater.exe0
Pfad der fehlerhaften Anwendung: Updater.exe1
Pfad des fehlerhaften Moduls: Updater.exe2
Berichtskennung: Updater.exe3

Error: (05/20/2013 05:56:48 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 20.0.1.4847, Zeitstempel: 0x51650aee
Name des fehlerhaften Moduls: xul.dll, Version: 20.0.1.4847, Zeitstempel: 0x51650a09
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b10e8
ID des fehlerhaften Prozesses: 0x13ec
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (04/04/2013 11:14:46 PM) (Source: Application Hang) (User: )
Description: Programm gimp-2.6.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: f78

Startzeit: 01ce31791d317431

Endzeit: 32

Anwendungspfad: C:\Program Files (x86)\GIMP-2.0\bin\gimp-2.6.exe

Berichts-ID: 9b7b3963-9d6c-11e2-92c0-5404a61b714d

Error: (03/01/2013 10:12:39 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ALDI NORD Bestellsoftware.exe, Version: 4.11.0.3, Zeitstempel: 0x4e859362
Name des fehlerhaften Moduls: QtGui4.dll, Version: 4.7.4.0, Zeitstempel: 0x4e5e788c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00096543
ID des fehlerhaften Prozesses: 0xc30
Startzeit der fehlerhaften Anwendung: 0xALDI NORD Bestellsoftware.exe0
Pfad der fehlerhaften Anwendung: ALDI NORD Bestellsoftware.exe1
Pfad des fehlerhaften Moduls: ALDI NORD Bestellsoftware.exe2
Berichtskennung: ALDI NORD Bestellsoftware.exe3

Error: (09/09/2012 10:31:25 AM) (Source: MsiInstaller) (User: *****-PC)
Description: Product: Image Resizer Powertoy Clone for Windows -- You are attempting to install the 32-bit version on Windows 64-bit.  Please try again with the 64-bit version (available on the Downloads page).


System errors:
=============
Error: (09/28/2013 10:41:57 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/28/2013 10:41:57 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update Service (gupdate) erreicht.

Error: (09/07/2013 09:44:35 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/07/2013 09:44:35 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update Service (gupdate) erreicht.

Error: (09/07/2013 09:11:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/07/2013 09:11:24 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update Service (gupdate) erreicht.

Error: (09/07/2013 08:30:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/07/2013 08:30:24 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update Service (gupdate) erreicht.

Error: (09/07/2013 08:03:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/07/2013 08:03:14 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update Service (gupdate) erreicht.


Microsoft Office Sessions:
=========================
Error: (09/28/2013 11:36:01 AM) (Source: Application Error)(User: )
Description: cmd.exe6.1.7601.175144ce78e2bbitguard.dll2.6.1673.238522f2dccc0000005001793a8cb001cebc2e185f9cd2C:\Windows\SysWOW64\cmd.exec:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll626c9650-2821-11e3-aca0-5404a61b714d

Error: (09/28/2013 11:35:57 AM) (Source: Application Error)(User: )
Description: cmd.exe6.1.7601.175144ce78e2bbitguard.dll2.6.1673.238522f2dccc0000005001793a8cb001cebc2e185f9cd2C:\Windows\SysWOW64\cmd.exec:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll607653f6-2821-11e3-aca0-5404a61b714d

Error: (09/28/2013 11:35:53 AM) (Source: Application Error)(User: )
Description: cmd.exe6.1.7601.175144ce78e2bbitguard.dll2.6.1673.238522f2dccc0000005001793a83cc01cebc2e187c2d55C:\Windows\SysWOW64\cmd.exec:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll5dec7c4b-2821-11e3-aca0-5404a61b714d

Error: (09/28/2013 11:35:43 AM) (Source: Application Error)(User: )
Description: cmd.exe6.1.7601.175144ce78e2bbitguard.dll2.6.1673.238522f2dccc0000005001793a83cc01cebc2e187c2d55C:\Windows\SysWOW64\cmd.exec:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll57bb00c4-2821-11e3-aca0-5404a61b714d

Error: (07/20/2013 10:50:33 PM) (Source: Application Hang)(User: )
Description: WLXPhotoGallery.exe15.4.3508.1109111001ce858a98bd61ce31C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exef9bf59c1-f17d-11e2-b882-5404a61b714d

Error: (06/01/2013 05:45:50 PM) (Source: Application Error)(User: )
Description: Updater.exe1.2.4.37268511585c3unknown0.0.0.000000000c000000500686ca8e0c01ce5edf01283ba1C:\Program Files (x86)\Ask.com\Updater\Updater.exeunknown54f1c3fa-cad2-11e2-ae6d-5404a61b714d

Error: (05/20/2013 05:56:48 PM) (Source: Application Error)(User: )
Description: firefox.exe20.0.1.484751650aeexul.dll20.0.1.484751650a09c0000005000b10e813ec01ce5570dfc3aa90C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dlle091d278-c165-11e2-b82e-5404a61b714d

Error: (04/04/2013 11:14:46 PM) (Source: Application Hang)(User: )
Description: gimp-2.6.exe0.0.0.0f7801ce31791d31743132C:\Program Files (x86)\GIMP-2.0\bin\gimp-2.6.exe9b7b3963-9d6c-11e2-92c0-5404a61b714d

Error: (03/01/2013 10:12:39 PM) (Source: Application Error)(User: )
Description: ALDI NORD Bestellsoftware.exe4.11.0.34e859362QtGui4.dll4.7.4.04e5e788cc000000500096543c3001ce1684c8c6e51dC:\Program Files (x86)\ALDI NORD Bestellsoftware\ALDI NORD Bestellsoftware.exeC:\Program Files (x86)\ALDI NORD Bestellsoftware\QtGui4.dll5d722237-82ac-11e2-ae56-5404a61b714d

Error: (09/09/2012 10:31:25 AM) (Source: MsiInstaller)(User: *****-PC)
Description: Product: Image Resizer Powertoy Clone for Windows -- You are attempting to install the 32-bit version on Windows 64-bit.  Please try again with the 64-bit version (available on the Downloads page).(NULL)(NULL)(NULL)(NULL)(NULL)


CodeIntegrity Errors:
===================================
  Date: 2012-01-01 14:46:06.656
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\*****\Documents\boot\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-01 14:46:05.860
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\*****\Documents\boot\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-01 14:46:05.049
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\*****\Documents\boot\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-01 14:46:04.300
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\*****\Documents\boot\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-01 14:45:29.762
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\*****\Documents\boot\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-01 14:45:28.873
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\*****\Documents\boot\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-01 14:45:28.140
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\*****\Documents\boot\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-01 14:45:27.406
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\*****\Documents\boot\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-01 14:45:15.987
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\*****\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-01 14:45:15.207
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\*****\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 61%
Total physical RAM: 4006.7 MB
Available physical RAM: 1559.66 MB
Total Pagefile: 8011.57 MB
Available Pagefile: 5558.77 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:119.24 GB) (Free:39.68 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:153.85 GB) (Free:151.58 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: AA9693FE)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=119 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=154 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-28 12:15:15
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD32 rev.01.0 298,09GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\******\AppData\Local\Temp\uxdirpod.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 560                                                                                       fffff800031a7000 45 bytes [00, 00, 10, 02, 4D, 6D, 43, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 607                                                                                       fffff800031a702f 16 bytes [00, 08, 00, 00, 00, 00, 00, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Windows\AsScrPro.exe[3200] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                    0000000076d11465 2 bytes [D1, 76]
.text     C:\Windows\AsScrPro.exe[3200] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                   0000000076d114bb 2 bytes [D1, 76]
.text     ...                                                                                                                                                      * 2
.text     C:\Windows\SysWOW64\rundll32.exe[3532] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                           0000000076d11465 2 bytes [D1, 76]
.text     C:\Windows\SysWOW64\rundll32.exe[3532] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                          0000000076d114bb 2 bytes [D1, 76]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Ask.com\Updater\Updater.exe[1396] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                         0000000076d11465 2 bytes [D1, 76]
.text     C:\Program Files (x86)\Ask.com\Updater\Updater.exe[1396] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                        0000000076d114bb 2 bytes [D1, 76]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                           0000000076d11465 2 bytes [D1, 76]
.text     C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3148] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                          0000000076d114bb 2 bytes [D1, 76]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[4704] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                       0000000076d11465 2 bytes [D1, 76]
.text     C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[4704] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                      0000000076d114bb 2 bytes [D1, 76]
.text     ...                                                                                                                                                      * 2
.text     C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe[5920] C:\Windows\syswow64\USER32.dll!DialogBoxParamW            00000000762fcfca 5 bytes JMP 000000016d824a80
.text     C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe[5920] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000076d11465 2 bytes [D1, 76]
.text     C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe[5920] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000076d114bb 2 bytes [D1, 76]
.text     ...                                                                                                                                                      * 2
.text     C:\Windows\SysWOW64\schtasks.exe[4940] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                    00000000762fcfca 5 bytes JMP 000000016d824a80
.text     C:\Windows\SysWOW64\schtasks.exe[4940] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                           0000000076d11465 2 bytes [D1, 76]
.text     C:\Windows\SysWOW64\schtasks.exe[4940] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                          0000000076d114bb 2 bytes [D1, 76]
.text     ...                                                                                                                                                      * 2
.text     C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe[3708] C:\Windows\syswow64\USER32.dll!DialogBoxParamW            00000000762fcfca 5 bytes JMP 000000016d824a80
.text     C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe[3708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000076d11465 2 bytes [D1, 76]
.text     C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe[3708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000076d114bb 2 bytes [D1, 76]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe[6080] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                        00000000762fcfca 5 bytes JMP 000000016d824a80
.text     C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe[6080] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69               0000000076d11465 2 bytes [D1, 76]
.text     C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe[6080] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155              0000000076d114bb 2 bytes [D1, 76]
.text     ...                                                                                                                                                      * 2
.text     C:\Users\******\Desktop\gmer_2.1.19163.exe[2804] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                          00000000762fcfca 5 bytes JMP 000000016d824a80
.text     C:\Users\******\Desktop\gmer_2.1.19163.exe[2804] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                 0000000076d11465 2 bytes [D1, 76]
.text     C:\Users\******\Desktop\gmer_2.1.19163.exe[2804] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                0000000076d114bb 2 bytes [D1, 76]
.text     ...                                                                                                                                                      * 2

---- Threads - GMER 2.1 ----

Thread    C:\Windows\SysWOW64\rundll32.exe [3532:4036]                                                                                                             00000000001e02a0
Thread    C:\Windows\SysWOW64\rundll32.exe [3532:4040]                                                                                                             00000000001b3a80
Thread    C:\Windows\SysWOW64\rundll32.exe [3532:4056]                                                                                                             00000000001b3a10
Thread    C:\Windows\SysWOW64\rundll32.exe [3532:4340]                                                                                                             000000000027832b
Thread    C:\Windows\SysWOW64\rundll32.exe [3532:4344]                                                                                                             0000000000275514
Thread    C:\Windows\SysWOW64\rundll32.exe [3532:4348]                                                                                                             0000000000275a5e
Thread    C:\Program Files\Windows Media Player\wmpnetwk.exe [4832:4912]                                                                                           000007fefb0b2a7c

---- Registry - GMER 2.1 ----

Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0025d3b2962e                                                                              
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0025d3b2962e (not active ControlSet)                                                          

---- EOF - GMER 2.1 ----