Antivirus Security pro - mich hats erwischt

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-10-2013
Ran by Dreier (administrator) on LENOVO on 23-10-2013 08:41:47
Running from C:\Users\Dreier\Desktop
Windows Vista (TM) Business Service Pack 2 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Safe Mode (minimal)

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\System32\mobsync.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Mouse Suite 98 Daemon] - C:\Windows\system32\ICO.EXE [93184 2008-06-27] (Primax Electronics Ltd.)
HKLM\...\Run: [nwiz] - C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2041192 2012-10-10] ()
Winlogon\Notify\psfus: C:\Windows\system32\psqlpwd.dll (UPEK Inc.)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-02-13] (Samsung)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1509232 2013-02-13] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
MountPoints2: {27cf4b7e-014f-11e2-aed3-00247e54698d} - J:\LaunchU3.exe -a
MountPoints2: {369c4889-4ba6-11e0-9b39-00247e54698d} - H:\installer.exe
MountPoints2: {6aafded2-95f7-11de-8a31-806e6f6e6963} - Q:\LenovoQDrive.exe
MountPoints2: {8bca6a61-9642-11de-b947-00247e54698c} - S:\LenovoSDrive.exe
HKLM-x32\...\Run: [ALTOOLS] - AccessL.exe
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [TVT Scheduler Proxy] - C:\Program Files (x86)\Common Files\Lenovo\Scheduler\scheduler_proxy.exe [487424 2008-05-24] (Lenovo Group Limited)
HKLM-x32\...\Run: [BrStsWnd] - C:\Program Files (x86)\Brownie\BrstsW64.exe [1159480 2008-12-08] (brother)
HKLM-x32\...\Run: [GDFirewallTray] - C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe [1124424 2009-09-24] (G DATA Software AG)
HKLM-x32\...\Run: [G DATA AntiVirus Trayapplication] - C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe [924232 2009-09-18] (G Data Software AG)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [246504 2010-01-11] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310128 2013-02-13] (Samsung Electronics Co., Ltd.)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\RunOnce: [] - [x]
HKU\Default\...\RunOnce: [Lenovoautosdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe /DRIVE=S
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe /DRIVE=Q
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\RunOnce: [] - [x]
HKU\Default User\...\RunOnce: [Lenovoautosdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe /DRIVE=S
HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe /DRIVE=Q
Lsa: [Notification Packages] scecli psqlpwd
Startup: C:\Users\MEIER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks Taskplaner Modul.lnk
ShortcutTarget: SolidWorks Taskplaner Modul.lnk -> C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\swBOEngine.exe (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo.live.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkcentre
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo.live.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo.live.com
URLSearchHook: (No Name) - {a51a36e6-31e7-4838-9ff7-76298b527ec0} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2449729
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&FORM=LENIE
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2449729
SearchScopes: HKCU - DefaultScope {BBB406F3-10CE-40E8-BF99-F113084B6C49} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&FORM=LENIE
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2449729
SearchScopes: HKCU - {BBB406F3-10CE-40E8-BF99-F113084B6C49} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: G Data WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G DATA\InternetSecurity\Webfilter\AVKWebIEx64.dll (G Data Software AG)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: G Data WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G DATA\InternetSecurity\Webfilter\AVKWebIE.dll (G Data Software AG)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: softonic-Germany Toolbar - {a51a36e6-31e7-4838-9ff7-76298b527ec0} - C:\Program Files (x86)\softonic-Germany\tbsoft.dll (Conduit Ltd.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - G Data WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G DATA\InternetSecurity\Webfilter\AVKWebIEx64.dll (G Data Software AG)
Toolbar: HKLM-x32 - G Data WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G DATA\InternetSecurity\Webfilter\AVKWebIE.dll (G Data Software AG)
Toolbar: HKLM-x32 - Vodafone SMS Toolbar - {27743AB1-8A7C-442A-8F10-AE39E2F26538} - C:\Program Files (x86)\Vodafone\IP Phone Pro\Plugins\Vodafone SMS Toolbar\IE\SMSToolbar.dll (Vodafone)
Toolbar: HKLM-x32 - softonic-Germany Toolbar - {a51a36e6-31e7-4838-9ff7-76298b527ec0} - C:\Program Files (x86)\softonic-Germany\tbsoft.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKCU - No Name - {A51A36E6-31E7-4838-9FF7-76298B527EC0} -  No File
Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} -  No File
Toolbar: HKCU - Vodafone SMS Toolbar - {27743AB1-8A7C-442A-8F10-AE39E2F26538} -  No File
DPF: HKLM-x32 {12545791-AC9A-44B2-8964-0DA216C4A4E5} hxxp://misumi-configurator-de.partcommunity.com/partserver/viewer/cnsweb3d/cnsweb3d.cab
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {22CF0C35-80CE-11D3-9354-00105AA793BF} hxxp://www.immdesign.com/webview/IPAWebView.cab
DPF: HKLM-x32 {43E3F87D-DE7F-4087-BD4F-0DC854981158} hxxp://download.microsoft.com/download/7/3/8/7384c441-3721-41ee-ae15-b678888f00dd/clearadj.CAB
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

==================== Services (Whitelisted) =================

S2 AVKProxy; C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe [1128008 2009-12-07] (G Data Software AG)
S2 AVKService; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe [397896 2009-08-08] (G Data Software AG)
S2 AVKWCtl; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlX64.exe [1731504 2009-11-25] (G Data Software AG)
S3 COMSysApp; C:\Windows\SysWow64\dllhost.exe [7168 2006-11-02] (Microsoft Corporation)
S3 CoordinatorServiceHost; C:\Program Files\SolidWorks Corp\SolidWorks (2)\swScheduler\DTSCoordinatorService.exe [87336 2010-10-05] (Dassault Systèmes SolidWorks Corp.)
S2 DraftSight API Service; C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe [123392 2012-12-27] (Dassault Systèmes)
S3 GDFwSvc; C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe [1664560 2009-11-25] (G Data Software AG)
S3 GDScan; C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe [302152 2009-11-26] (G Data Software AG)
S2 MagicTuneEngine; C:\Program Files (x86)\MagicTune Premium\MagicTuneEngine.exe [45056 2007-08-23] ()
S3 nosGetPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper_3001.dll [64328 2010-07-09] (NOS Microsystems Ltd.)
S2 NVIDIA Performance Driver Service; C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe [4297728 2008-12-11] ()
S2 ThinkVantage Registry Monitor Service; C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe [644408 2008-05-24] (Lenovo Group Limited)
S2 TVT Backup Protection Service; C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrpservice.exe [520192 2008-05-24] ()
S2 TVT Backup Service; C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe [950272 2008-05-24] (Lenovo Group Limited)
S2 TVT Scheduler; C:\Program Files (x86)\Common Files\Lenovo\Scheduler\tvtsched.exe [1155072 2008-05-24] (Lenovo Group Limited)
S2 TVT_UpdateMonitor; C:\Program Files (x86)\Lenovo\Rescue and Recovery\UpdateMonitor.exe [360448 2008-10-09] (Lenovo Group Limited)
S2 WSearch; C:\Windows\SysWow64\SearchIndexer.exe [441344 2009-04-11] (Microsoft Corporation)
U2 *etadpug; "C:\Program Files (x86)\Google\Desktop\Install\{cc3e3d28-4292-57ac-3fab-46f89dd64a77}\   \...\???\{cc3e3d28-4292-57ac-3fab-46f89dd64a77}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)

==================== Drivers (Whitelisted) ====================

S3 dgderdrv; C:\Windows\SysWow64\Drivers\dgderdrv.sys [20032 2013-02-05] (Devguru Co., Ltd)
S2 DLABMFSE; C:\Windows\System32\DLA\DLABMFSE.SYS [44152 2007-06-18] (Roxio)
S2 DLABOIOE; C:\Windows\System32\DLA\DLABOIOE.SYS [41976 2007-06-18] (Roxio)
R1 DLACDBHE; C:\Windows\System32\Drivers\DLACDBHE.SYS [15864 2007-02-08] (Roxio)
S2 DLADResE; C:\Windows\System32\DLA\DLADResE.SYS [10360 2007-06-18] (Roxio)
S2 DLAIFS_E; C:\Windows\System32\DLA\DLAIFS_E.SYS [142584 2007-06-18] (Roxio)
S2 DLAOPIOE; C:\Windows\System32\DLA\DLAOPIOE.SYS [34552 2007-06-18] (Roxio)
S2 DLAPoolE; C:\Windows\System32\DLA\DLAPoolE.SYS [18040 2007-06-18] (Roxio)
R1 DLARTL_E; C:\Windows\System32\Drivers\DLARTL_E.SYS [39160 2007-02-08] (Roxio)
S2 DLAUDFAE; C:\Windows\System32\DLA\DLAUDFAE.SYS [135544 2007-06-18] (Roxio)
S2 DLAUDF_E; C:\Windows\System32\DLA\DLAUDF_E.SYS [143736 2007-06-18] (Roxio)
R0 DRVECDB; C:\Windows\System32\Drivers\DRVECDB.SYS [123992 2007-03-12] (Sonic Solutions)
S2 DRVEDDM; C:\Windows\System32\Drivers\DRVEDDM.SYS [63608 2007-02-09] (Roxio)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [34760 2010-10-27] (G Data Software AG)
S3 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [74184 2009-09-30] (G Data Software AG)
S3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [57288 2009-09-30] (G DATA Software AG)
S1 gdwfpcd; C:\Windows\System32\DRIVERS\gdwfpcd64.sys [48584 2010-10-27] (G DATA Software AG)
S1 GRD; C:\Windows\system32\drivers\GRD.sys [106224 2009-09-24] (G Data Software)
S3 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [42952 2009-09-10] (G Data Software AG)
R0 mv64xx; C:\Windows\System32\drivers\mv64xx.sys [322088 2009-01-28] (Marvell Semiconductor, Inc.)
S3 pelmouse; C:\Windows\System32\DRIVERS\pelmouse.sys [23040 2008-07-11] (Primax Electronics Ltd.)
S3 pelusblf; C:\Windows\System32\DRIVERS\pelusblf.sys [19456 2008-06-27] (Primax Electronics Ltd.)
S2 smihlp; C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys [13840 2008-06-24] (UPEK Inc.)
S2 tvtfilter; C:\Windows\System32\DRIVERS\tvtfilter.sys [37696 2009-08-31] (Lenovo)
S3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [41536 2009-02-18] (Lenovo (United States) Inc.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-23 08:41 - 2013-10-23 08:41 - 00000000 ____D C:\FRST
2013-10-23 08:35 - 2013-10-23 08:28 - 01954682 _____ (Farbar) C:\Users\Meier\Desktop\FRST64.exe
2013-10-22 15:20 - 2013-10-22 15:20 - 00001624 _____ C:\Users\Meier\Desktop\Antivirus Security Pro.lnk
2013-10-22 15:20 - 2013-10-22 15:20 - 00000118 _____ C:\Users\Meier\Desktop\Antivirus Security Pro support.url
2013-10-22 15:20 - 2013-10-22 15:20 - 00000000 ____D C:\Users\Meier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro
2013-10-22 15:15 - 2013-10-22 15:22 - 00000000 ____D C:\ProgramData\gpraia33
2013-10-22 15:15 - 2013-10-22 15:15 - 00000000 ____D C:\Users\Meier\AppData\Local\Google
2013-10-22 15:15 - 2013-10-22 15:15 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-21 13:12 - 2013-10-21 13:12 - 00201216 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_qtc30_m4_rfc_tpc5_2_03.sldasm
2013-10-21 13:11 - 2013-10-21 13:11 - 00491090 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_qtc30_m4_rfc_tpc5_2_03.stp
2013-10-21 13:06 - 2013-10-21 13:06 - 00491083 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_qtc30_m4_tpc5_2_03.stp
2013-10-21 13:06 - 2013-10-21 13:06 - 00200704 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_qtc30_m4_tpc5_2_03.sldasm
2013-10-21 12:58 - 2013-10-21 12:58 - 00459189 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_2_03.stp
2013-10-21 12:58 - 2013-10-21 12:58 - 00195072 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_2_03.sldasm
2013-10-21 08:48 - 2013-10-22 09:36 - 04980736 ___HT C:\Users\Meier\Documents\~Outlook.pst.tmp
2013-10-15 03:15 - 2013-09-22 17:43 - 17833984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-15 03:15 - 2013-09-22 17:01 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-15 03:15 - 2013-09-22 16:42 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-15 03:15 - 2013-09-22 16:36 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-15 03:15 - 2013-09-22 16:33 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-10-15 03:15 - 2013-09-22 16:33 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-15 03:15 - 2013-09-22 16:30 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-10-15 03:15 - 2013-09-22 16:27 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-15 03:15 - 2013-09-22 16:23 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-10-15 03:15 - 2013-09-22 16:22 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-15 03:15 - 2013-09-22 16:21 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-10-15 03:15 - 2013-09-22 16:19 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-15 03:15 - 2013-09-22 16:19 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-15 03:15 - 2013-09-22 16:16 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-10-15 03:15 - 2013-09-22 16:15 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-15 03:15 - 2013-09-22 16:07 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-15 03:15 - 2013-09-22 12:29 - 12336128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-15 03:15 - 2013-09-22 12:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-15 03:15 - 2013-09-22 12:22 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-15 03:15 - 2013-09-22 12:14 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-10-15 03:15 - 2013-09-22 12:13 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-15 03:15 - 2013-09-22 12:13 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-15 03:15 - 2013-09-22 12:12 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-10-15 03:15 - 2013-09-22 12:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-15 03:15 - 2013-09-22 12:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-10-15 03:15 - 2013-09-22 12:07 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-15 03:15 - 2013-09-22 12:06 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-10-15 03:15 - 2013-09-22 12:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-15 03:15 - 2013-09-22 12:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-15 03:15 - 2013-09-22 12:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-15 03:15 - 2013-09-22 12:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-10-15 03:15 - 2013-09-22 11:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-14 08:28 - 2013-08-29 09:48 - 02775552 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-14 08:28 - 2013-08-27 05:39 - 01268224 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-10-14 08:28 - 2013-08-27 05:39 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-10-14 08:28 - 2013-08-27 05:39 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-10-14 08:28 - 2013-08-27 05:39 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-10-14 08:28 - 2013-08-27 04:47 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-10-14 08:28 - 2013-08-27 04:47 - 00219648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-10-14 08:28 - 2013-08-27 04:47 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-10-14 08:28 - 2013-08-27 04:47 - 00160768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-10-14 08:28 - 2013-08-27 04:32 - 02002944 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-10-14 08:28 - 2013-08-27 04:30 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-10-14 08:28 - 2013-08-27 04:06 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-10-14 08:28 - 2013-08-27 04:00 - 01556480 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-10-14 08:28 - 2013-08-27 04:00 - 01149952 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-10-14 08:28 - 2013-08-27 03:52 - 01172480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-10-14 08:28 - 2013-08-27 03:50 - 00486400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-10-14 08:28 - 2013-08-27 03:32 - 00683008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-10-14 08:28 - 2013-08-27 03:28 - 01069056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-10-14 08:28 - 2013-08-01 06:10 - 00901568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-14 08:28 - 2013-08-01 05:37 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-10-14 08:28 - 2013-07-20 12:45 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-14 08:28 - 2013-07-20 12:44 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-14 08:28 - 2013-07-04 06:21 - 00532480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-14 08:28 - 2013-07-04 06:13 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-14 08:28 - 2013-07-03 04:55 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-14 08:28 - 2013-07-03 04:22 - 00031616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-14 08:28 - 2013-06-29 04:25 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-14 08:28 - 2013-06-29 04:25 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-14 08:28 - 2013-06-29 04:25 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-14 08:28 - 2013-06-29 04:25 - 00007552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-14 08:28 - 2013-06-27 01:00 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-14 08:28 - 2013-06-04 06:16 - 00048128 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-14 08:28 - 2013-06-04 06:16 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-14 08:28 - 2013-06-04 04:01 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-14 08:28 - 2013-06-04 03:49 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-14 08:28 - 2011-05-05 16:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-14 08:28 - 2011-05-05 16:17 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-01 10:53 - 2013-10-01 10:53 - 05556306 _____ (Jared Breland                                               ) C:\Users\Meier\Downloads\uniextract161 (1).exe
2013-10-01 10:52 - 2013-10-01 10:52 - 05556306 _____ (Jared Breland                                               ) C:\Users\Meier\Downloads\uniextract161.exe
2013-10-01 10:40 - 2013-10-01 10:41 - 41160152 _____ (Lenovo Group                                                ) C:\Users\Meier\Downloads\IN1WLN86WW5.exe
2013-10-01 10:10 - 2013-10-01 10:11 - 29740256 _____ (Dell Inc.) C:\Users\Meier\Downloads\Network_Driver_MCNMX_WN_6.30.223.64_A01.EXE
2013-10-01 09:53 - 2013-10-01 09:53 - 11806048 _____ (Dell Inc.) C:\Users\Meier\Downloads\Chipset_Driver_THK45_WN_1.0.8.251_A05.EXE
2013-10-01 09:36 - 2013-10-01 09:36 - 03126008 _____ C:\Users\Meier\Downloads\DRVR_Chipset_Intel_A00-CPNKY_setup_ZPE.exe
2013-10-01 09:35 - 2013-10-01 09:37 - 94107224 _____ (Dell Inc.) C:\Users\Meier\Downloads\Network_Driver_4FK7J_WN32_A00.EXE
2013-10-01 09:35 - 2013-10-01 09:35 - 203686536 _____ C:\Users\Meier\Downloads\Video_nVIDIA_W7_64_A00_Setup-J43Y9_ZPE.exe
2013-09-24 10:19 - 2013-09-24 10:20 - 00000000 ____D C:\Users\Meier\Desktop\Versuchsaufbau kosmetik konzept
2013-09-23 15:22 - 2013-09-23 15:29 - 00527872 _____ C:\Users\Meier\Desktop\Blumenschale.SLDPRT
2013-09-23 12:06 - 2013-09-23 12:06 - 00403378 _____ C:\Users\Meier\Desktop\Serien-Kapsel-30.08.2013.DWG
2013-09-23 12:01 - 2013-09-23 12:01 - 00148213 _____ C:\Users\Meier\Desktop\Serien-Kapsel-30.08.2013.EPRT
2013-09-23 11:41 - 2013-09-23 11:41 - 00982528 _____ C:\Users\Meier\Desktop\Serien-Kapsel-30.08.2013.SLDPRT
2013-09-23 11:40 - 2013-09-23 11:40 - 01109177 _____ C:\Users\Meier\Desktop\Serien-Kapsel-30.08.2013.stp

==================== One Month Modified Files and Folders =======

2013-10-23 08:41 - 2013-10-23 08:41 - 00000000 ____D C:\FRST
2013-10-23 08:36 - 2009-08-31 08:32 - 01846414 _____ C:\Windows\WindowsUpdate.log
2013-10-23 08:36 - 2006-11-02 17:38 - 00032558 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-23 08:36 - 2006-11-02 17:38 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-23 08:36 - 2006-11-02 17:20 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-23 08:36 - 2006-11-02 17:20 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-23 08:35 - 2009-09-10 12:58 - 00000250 _____ C:\Windows\Brownie.ini
2013-10-23 08:34 - 2012-08-13 09:12 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-23 08:33 - 2008-04-17 15:53 - 01454018 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-23 08:33 - 2008-04-17 15:52 - 00632242 _____ C:\Windows\system32\perfh007.dat
2013-10-23 08:33 - 2008-04-17 15:52 - 00127504 _____ C:\Windows\system32\perfc007.dat
2013-10-23 08:28 - 2013-10-23 08:35 - 01954682 _____ (Farbar) C:\Users\Meier\Desktop\FRST64.exe
2013-10-22 15:22 - 2013-10-22 15:15 - 00000000 ____D C:\ProgramData\gpraia33
2013-10-22 15:20 - 2013-10-22 15:20 - 00001624 _____ C:\Users\Meier\Desktop\Antivirus Security Pro.lnk
2013-10-22 15:20 - 2013-10-22 15:20 - 00000118 _____ C:\Users\Meier\Desktop\Antivirus Security Pro support.url
2013-10-22 15:20 - 2013-10-22 15:20 - 00000000 ____D C:\Users\Meier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro
2013-10-22 15:18 - 2009-09-10 16:26 - 1208828928 _____ C:\Users\Meier\Documents\Outlook.pst
2013-10-22 15:15 - 2013-10-22 15:15 - 00000000 ____D C:\Users\Meier\AppData\Local\Google
2013-10-22 15:15 - 2013-10-22 15:15 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-22 14:36 - 2010-06-17 08:53 - 00000000 ____D C:\Users\Meier\Documents\PRIVAT
2013-10-22 12:12 - 2012-03-02 08:12 - 00003686 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{AB3F3B60-4D4C-4E9E-AF3B-8D416226993A}
2013-10-22 10:42 - 2009-09-10 13:02 - 00000432 _____ C:\Windows\BRWMARK.INI
2013-10-22 09:36 - 2013-10-21 08:48 - 04980736 ___HT C:\Users\Meier\Documents\~Outlook.pst.tmp
2013-10-22 09:21 - 2011-04-01 11:58 - 00000000 ____D C:\Users\Meier\AppData\Roaming\dvdcss
2013-10-21 13:12 - 2013-10-21 13:12 - 00201216 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_qtc30_m4_rfc_tpc5_2_03.sldasm
2013-10-21 13:11 - 2013-10-21 13:11 - 00491090 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_qtc30_m4_rfc_tpc5_2_03.stp
2013-10-21 13:06 - 2013-10-21 13:06 - 00491083 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_qtc30_m4_tpc5_2_03.stp
2013-10-21 13:06 - 2013-10-21 13:06 - 00200704 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_qtc30_m4_tpc5_2_03.sldasm
2013-10-21 12:58 - 2013-10-21 12:58 - 00459189 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_2_03.stp
2013-10-21 12:58 - 2013-10-21 12:58 - 00195072 _____ C:\Users\Meier\Desktop\ttpa16t10250_a_n18_2_03.sldasm
2013-10-21 11:24 - 2009-09-16 11:37 - 00000000 ____D C:\Users\Meier\AppData\Local\TempSWSicherungsverzeichnis
2013-10-21 10:49 - 2009-10-15 16:31 - 00000000 ____D C:\Aktuelle Projekte
2013-10-21 10:46 - 2010-03-10 09:32 - 00002657 _____ C:\Users\Meier\Desktop\Microsoft Office Excel 2007 (2).lnk
2013-10-21 10:29 - 2010-10-14 15:35 - 00426122 _____ C:\Users\Meier\Desktop\41002000.stp
2013-10-21 10:29 - 2009-09-15 10:30 - 00000000 ____D C:\Users\Meier\AppData\Roaming\SolidWorks
2013-10-21 08:13 - 2009-08-31 08:42 - 00000000 ____D C:\ProgramData\NVIDIA
2013-10-18 08:56 - 2010-03-18 12:56 - 00000680 _____ C:\Users\Meier\AppData\Local\d3d9caps.dat
2013-10-18 07:51 - 2009-09-10 13:02 - 00000000 ___RD C:\Users\Meier\AppData\Roaming\Brother
2013-10-15 04:11 - 2006-11-02 17:20 - 00493264 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-15 04:10 - 2010-09-14 13:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-15 03:50 - 2009-08-31 08:58 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-15 03:23 - 2013-08-15 03:08 - 00000000 ____D C:\Windows\system32\MRT
2013-10-15 03:18 - 2006-11-02 14:35 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-10-09 11:34 - 2012-08-13 09:12 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-09 11:34 - 2012-08-13 09:12 - 00003736 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-09 11:34 - 2011-10-10 11:25 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 09:09 - 2009-09-15 10:18 - 00000000 ____D C:\ProgramData\SolidWorks
2013-10-02 13:41 - 2006-11-02 17:25 - 00210596 _____ C:\Windows\setupact.log
2013-10-01 10:53 - 2013-10-01 10:53 - 05556306 _____ (Jared Breland                                               ) C:\Users\Meier\Downloads\uniextract161 (1).exe
2013-10-01 10:52 - 2013-10-01 10:52 - 05556306 _____ (Jared Breland                                               ) C:\Users\Meier\Downloads\uniextract161.exe
2013-10-01 10:41 - 2013-10-01 10:40 - 41160152 _____ (Lenovo Group                                                ) C:\Users\Meier\Downloads\IN1WLN86WW5.exe
2013-10-01 10:11 - 2013-10-01 10:10 - 29740256 _____ (Dell Inc.) C:\Users\Meier\Downloads\Network_Driver_MCNMX_WN_6.30.223.64_A01.EXE
2013-10-01 09:53 - 2013-10-01 09:53 - 11806048 _____ (Dell Inc.) C:\Users\Meier\Downloads\Chipset_Driver_THK45_WN_1.0.8.251_A05.EXE
2013-10-01 09:37 - 2013-10-01 09:35 - 94107224 _____ (Dell Inc.) C:\Users\Meier\Downloads\Network_Driver_4FK7J_WN32_A00.EXE
2013-10-01 09:36 - 2013-10-01 09:36 - 03126008 _____ C:\Users\Meier\Downloads\DRVR_Chipset_Intel_A00-CPNKY_setup_ZPE.exe
2013-10-01 09:35 - 2013-10-01 09:35 - 203686536 _____ C:\Users\Meier\Downloads\Video_nVIDIA_W7_64_A00_Setup-J43Y9_ZPE.exe
2013-09-26 20:59 - 2009-08-31 08:54 - 00000436 _____ C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2013-09-24 10:20 - 2013-09-24 10:19 - 00000000 ____D C:\Users\Meier\Desktop\Versuchsaufbau kosmetik konzept
2013-09-24 09:44 - 2012-06-26 07:30 - 00002655 _____ C:\Users\Meier\Desktop\Microsoft Office Word 2007 (2).lnk
2013-09-24 09:43 - 2011-03-09 13:01 - 00000000 ____D C:\Users\Meier\AppData\Local\Paint.NET
2013-09-23 15:29 - 2013-09-23 15:22 - 00527872 _____ C:\Users\Meier\Desktop\Blumenschale.SLDPRT
2013-09-23 12:06 - 2013-09-23 12:06 - 00403378 _____ C:\Users\Meier\Desktop\Serien-Kapsel-30.08.2013.DWG
2013-09-23 12:01 - 2013-09-23 12:01 - 00148213 _____ C:\Users\Meier\Desktop\Serien-Kapsel-30.08.2013.EPRT
2013-09-23 11:41 - 2013-09-23 11:41 - 00982528 _____ C:\Users\Meier\Desktop\Serien-Kapsel-30.08.2013.SLDPRT
2013-09-23 11:40 - 2013-09-23 11:40 - 01109177 _____ C:\Users\Meier\Desktop\Serien-Kapsel-30.08.2013.stp
2013-09-23 11:30 - 2013-05-14 13:33 - 00002829 _____ C:\Users\Public\Desktop\SolidWorks eDrawings 2011 x64 Edition.lnk

Files to move or delete:
====================
ZeroAccess:
C:\Users\Meier\AppData\Local\Google\Desktop\Install
ZeroAccess:
C:\Program Files (x86)\Google\Desktop\Install
C:\Users\Dreier\cnsweb3d.exe


Some content of TEMP:
====================
C:\Users\Meier\AppData\Local\Temp\111684594.exe
C:\Users\Meier\AppData\Local\Temp\jre-1.6.0_20-windows-i586-iftw.exe_90744722.exe
C:\Users\Meier\AppData\Local\Temp\jre-6u20-windows-i586-jinstall_uac.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
C:\Program Files\Windows Defender\mpsvc.dll => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Windows Defender


LastRegBack: 2013-10-22 20:37

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-10-2013
Ran by Meier at 2013-10-23 08:42:59
Running from C:\Users\Meier\Desktop
Boot Mode: Safe Mode (minimal)
==========================================================


==================== Security Center ========================

AV: G Data InternetSecurity 2010 (Disabled - Out of date) {54ACC2FC-837E-E665-7A92-5352D560D5EF}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G Data Personal Firewall (Enabled) {6C9743D9-C911-E73D-51CD-FA672BB39294}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32)
64 Bit HP CIO Components Installer (Version: 3.2.1)
7000E809a (x32 Version: 50.0.165.000)
7000E809a_eDocs (x32 Version: 50.0.165.000)
7000E809a_Help (x32 Version: 1.00.0000)
7-Zip 9.20 (x32)
Adobe Flash Player 10 Plugin (x32 Version: 10.0.12.36)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Reader 9 - Deutsch (x32 Version: 9.0.0)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.7.637)
Advertising Center (x32 Version: 0.0.0.1)
BMWi-Softwarepaket 9.3 (x32 Version: 9.3.0)
BPDSoftware (x32 Version: 50.0.165.000)
BPDSoftware_Ini (x32 Version: 1.00.0000)
Broadcom Gigabit Integrated Controller (Version: 11.44.03)
Brother HL-5350DN (x32 Version: 1.00)
Brother P-touch Editor 5.0 (x32 Version: 5.0.110)
Brother P-touch Software User's Guide (x32 Version: 1.00.0000)
BufferChm (x32 Version: 120.0.194.000)
Conduit Engine (x32 Version: )
ContiTech Suite 5.0 (x32 Version: 5.0)
Corel Graphics - Windows Shell Extension (x32 Version: 15.0.0.487)
Corel Graphics - Windows Shell Extension (x32 Version: 15.0.487)
CorelDRAW Graphics Suite X5 - Capture (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Common (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Connect (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Custom Data (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - DE (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Draw (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Filters (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - FontNav (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - IPM (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - PHOTO-PAINT (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Photozoom Plugin (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Redist (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Setup Files (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - VBA (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - VideoBrowser (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - VSTA (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit (Version: 15.0.487)
CorelDRAW Graphics Suite X5 - WT (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 (x32 Version: 15.0)
CorelDRAW(R) Graphics Suite X5 (x32 Version: 15.0.0.486)
DeviceDiscovery (x32 Version: 120.0.194.000)
DirectXInstallService (x32 Version: 9.0.2)
DraftSight x64 (Version: 10.1.1069)
Drag-to-Disc (Version: 9.05)
Festo PARTdataManager 2013 (x32 Version: 2013.0)
Festo Produktkatalog 2013 (x32 Version: 3.2013.2331)
FluidDraw S5 Demo Version 5.0w (x32)
FluidSIM 4.2n Pneumatik Demoversion (x32)
FormatFactory 2.96 (x32 Version: 2.96)
Free RAR Extract Frog (x32 Version: 2.10)
Free Video Flip and Rotate version 2.1.3.903 (x32 Version: 2.1.3.903)
G Data InternetSecurity (x32 Version: 20.0.0.0)
getPlus+(R) Download Manager for Corel (x32 Version: 1.6.0.74)
GIMP 2.8.2 (Version: 2.8.2)
GoGear SA19xx Device Manager (x32 Version: 0.1)
GPBaseService2 (x32 Version: 120.0.194.000)
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (x32 Version: 1)
HP Customer Participation Program 12.0 (Version: 12.0)
HP Imaging Device Functions 12.0 (Version: 12.0)
HP Officejet 7000 E809a Series (Version: 12.0)
HP Smart Web Printing (Version: 4.05)
HP Solution Center 12.0 (Version: 12.0)
HP Update (x32 Version: 4.000.011.006)
HPProductAssistant (x32 Version: 120.0.194.000)
HPSSupply (x32 Version: 120.0.194.000)
ImagXpress (x32 Version: 7.0.74.0)
InterVideo Register Manager (x32 Version: 1.0.4.0)
InterVideo WinDVD (x32 Version: 5.0-B11.1268)
ioIsland.com ClearTweak (x32)
Iomega StorCenter (x32 Version: 1.1.0.0)
Japanese Fonts Support For Adobe Reader 9 (x32 Version: 9.0.0)
Java Auto Updater (x32 Version: 2.0.1.2)
Java(TM) 6 Update 18 (64-bit) (Version: 6.0.180)
Java(TM) 6 Update 18 (x32 Version: 6.0.180)
Lenovo Registration (x32)
Lenovo System Toolbox (Version: 5.1.5183.09)
Lenovo Welcome v1.0.24.3 (x32)
MagicTune Premium (x32 Version: 1.0 Beta)
MarketResearch (x32 Version: 120.0.226.000)
Menu Templates - Starter Kit (x32 Version: 9.4.1.0)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office 2003 Web Components (x32 Version: 12.0.6213.1000)
Microsoft Office 2007 Primary Interop Assemblies (x32 Version: 12.0.4518.1014)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Small Business Connectivity Components (x32 Version: 2.0.7024.0)
Microsoft Office Suite Activation Assistant (x32 Version: 2.9)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (x32 Version: 5.1.20913.0)
Microsoft SQL Server Native Client (Version: 9.00.3042.00)
Microsoft SQL Server VSS Writer (Version: 9.00.3042.00)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (Version: 8.0.52572)
Microsoft Visual Studio 2005 Tools for Applications - ENU (x32 Version: 8.0.50727.146)
Microsoft Visual Studio 2005 Tools for Applications - ENU (x32)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (x32 Version: 9.0.30729)
Mouse Suite
Movie Templates - Starter Kit (x32 Version: 9.4.1.0)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyFreeCodec (HKCU)
MyPhoneExplorer (x32 Version: 1.8.4)
Nero 9 Essentials (x32)
Nero BurnRights (x32 Version: 2.99.6.100)
Nero BurnRights (x32 Version: 3.4.7.100)
Nero ControlCenter (x32 Version: 9.0.0.1)
Nero CoverDesigner (x32 Version: 4.4.7.100)
Nero CoverDesigner Help (x32 Version: 4.4.2.100)
Nero Disc Copy Gadget (x32 Version: 2.4.17.0)
Nero Disc Copy Gadget Help (x32 Version: 2.2.7.0)
Nero DiscSpeed (x32 Version: 4.99.5.105)
Nero DiscSpeed (x32 Version: 5.4.7.100)
Nero DriveSpeed (x32 Version: 3.99.5.105)
Nero DriveSpeed (x32 Version: 4.4.7.100)
Nero Express Help (x32 Version: 9.2.2.100)
Nero InfoTool (x32 Version: 5.99.5.105)
Nero InfoTool (x32 Version: 6.4.7.100)
Nero Installer (x32 Version: 2.0.0.1)
Nero Online Upgrade (x32 Version: 1.3.0.0)
Nero Rescue Agent (x32 Version: 2.4.4.100)
Nero RescueAgent Help (x32 Version: 1.99.0.1)
Nero ShowTime (x32 Version: 4.99.0.0)
Nero ShowTime (x32 Version: 5.4.12.100)
Nero StartSmart (x32 Version: 9.4.9.100)
Nero StartSmart Help (x32 Version: 9.4.8.100)
Nero Vision (x32 Version: 0.0.0.1)
Nero Vision (x32 Version: 6.4.7.100)
NeroExpress (x32 Version: 9.4.9.100)
neroxml (x32 Version: 1.0.0)
Network64 (Version: 120.0.194.000)
NVIDIA 3D Vision Treiber 306.97 (Version: 306.97)
NVIDIA Grafiktreiber 306.97 (Version: 306.97)
NVIDIA Install Application (Version: 2.1002.85.551)
NVIDIA nView 136.53 (Version: 136.53)
NVIDIA nView Desktop Manager
NVIDIA Performance Drivers (Version: 1.0.0.2)
NVIDIA PhysX v8.08.01 (x32 Version: 8.08.01)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.0697)
NVIDIA Systemsteuerung 306.97 (Version: 306.97)
Paint.NET v3.5.10 (Version: 3.60.0)
PARTcommunity 3D Web Viewer (x32 Version: 1.0.36.11)
Product Recovery Disc Burning Utility (x32 Version: 1.20.0037.00)
ProductContext (x32 Version: 50.0.165.000)
Registry patch to improve USB device detection on resume from sleep for Windows Vista (x32 Version: 1.01.0000)
Rescue and Recovery (x32 Version: 4.21.0014.00)
Roxio Activation Module (x32 Version: 1.0)
Roxio Central Audio (x32 Version: 3.7.0)
Roxio Central Copy (x32 Version: 3.7.0)
Roxio Central Core (x32 Version: 3.7.0)
Roxio Central Data (x32 Version: 3.7.0)
Roxio Central Tools (x32 Version: 3.7.0)
Roxio Creator Business Edition (x32 Version: 10.1)
Roxio Creator Business Edition (x32 Version: 10.1.177)
Roxio Express Labeler 3 (x32 Version: 3.2.1)
Samsung Kies (x32 Version: 2.5.2.13021_10)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.18.0)
Shop for HP Supplies (Version: 12)
SmartWebPrinting (x32 Version: 120.0.194.000)
softonic-Germany Toolbar (x32 Version: 6.2.7.3)
SolidWorks 2011 x64 Edition SP0 (Version: 19.100.5019)
SolidWorks 2011 x64 Edition SP0 (x32 Version: 19.0.0.5019)
SolidWorks 2011 x64 German Resources (Version: 19.100.5019)
SolidWorks eDrawings 2011 x64 Edition SP0 (Version: 11.0.720)
SolidWorks Explorer 2011 SP0 x64 Edition (Version: 19.00.5019)
SolutionCenter (x32 Version: 120.0.194.000)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0)
Sonic Icons for Lenovo (x32 Version: 2.0.0)
SoundMAX (x32 Version: 6.10.2.6540)
Status (x32 Version: 120.0.194.000)
swMSM (x32 Version: 12.0.0.1)
TeamViewer 6 (x32 Version: 6.0.11656)
ThinkVantage Fingerprint Software 5.8 (Version: 5.8.2.4462)
ThinkVantage Status Gadget (Version: 1.1.0027)
ThinkVantage Technologies Welcome Message (x32 Version: 1.18)
Toolbox (x32 Version: 120.0.194.000)
TrayApp (x32 Version: 120.0.194.000)
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (x32 Version: 9.00.3042.00)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
USB Keyboard with Fingerprint Reader Hotkey Driver (x32)
VD64Inst (Version: 1.00.0000)
Visual Basic for Applications (R) Core - English (x32 Version: 6.4.99.69)
Visual Basic for Applications (R) Core - German (x32 Version: 6.4.99.69)
Visual Basic for Applications (R) Core (x32 Version: 6.4.99.69)
VLC media player 0.9.8a (x32 Version: 0.9.8a)
Vodafone IP Phone Pro (x32 Version: 1.2)
Wallpapers (x32)
WebReg (x32 Version: 120.0.194.000)
Windows Driver Package - AnalogDevices (ADIHdAudAddService) MEDIA  (12/02/2008 6.10.02.6540) (Version: 12/02/2008 6.10.02.6540)
Windows Driver Package - Broadcom (b57nd60a) Net  (10/14/2008 11.7.1.0) (Version: 10/14/2008 11.7.1.0)
Windows Driver Package - Intel (iaStor) hdc  (04/27/2009 8.8.2.1001) (Version: 04/27/2009 8.8.2.1001)
Windows Driver Package - Intel hdc  (02/25/2008 7.0.0.1000) (Version: 02/25/2008 7.0.0.1000)
Windows Driver Package - Intel System  (01/15/2008 1.3.00.0) (Version: 01/15/2008 1.3.00.0)
Windows Driver Package - Intel System  (02/25/2008 9.0.0.1005) (Version: 02/25/2008 9.0.0.1005)
Windows Driver Package - Intel System  (05/27/2008 9.0.0.1009) (Version: 05/27/2008 9.0.0.1009)
Windows Driver Package - Intel System  (07/30/2008 9.1.0.1005) (Version: 07/30/2008 9.1.0.1005)
Windows Driver Package - Intel System  (09/15/2006 7.0.0.1011) (Version: 09/15/2006 7.0.0.1011)
Windows Driver Package - Intel USB  (02/25/2008 9.0.0.1005) (Version: 02/25/2008 9.0.0.1005)
Windows Driver Package - NVIDIA (nvlddmkm) Display  (01/07/2009 7.15.11.7868) (Version: 01/07/2009 7.15.11.7868)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8098.930)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)

==================== Restore Points  =========================

18-10-2013 05:42:20 Windows Update
21-10-2013 14:14:14 Geplanter Prüfpunkt
22-10-2013 22:00:00 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2006-11-02 14:34 - 2006-09-18 23:37 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0B2D5B3F-9FB6-4082-9F0F-B186F82535AB} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\system32\pla.dll [2008-01-21] (Microsoft Corporation)
Task: {159A98F8-1D42-4AC2-A5CA-050039BBA247} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] ()
Task: {295AB156-9D98-41B6-BD15-E31A172330EC} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-24] (Microsoft Corporation)
Task: {396DB588-31F5-44D0-BB6B-57B067B069B3} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {556ED8B7-D2D0-453F-97C1-D84C33838F20} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {66E11425-1D54-4324-BF69-29840D864FF2} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {67B26356-8014-4EAE-B663-EF1BF5CFECCE} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2008-01-21] (Microsoft Corporation)
Task: {76ADA224-6A7D-4E7A-BE9C-D5D51A5FB701} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {EF438E4C-6EED-489C-B485-E8AB3D4CB5EE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {F37610AF-F823-4108-81D4-5B2E7546F5F8} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {FBA28BAB-97E1-413A-B86F-26D97884B20D} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PCDR5\pcdr5cuiw32.exe [2009-02-20] (PC-Doctor, Inc.)
Task: {FF53BC52-F368-4962-9C27-0DB2DFB9032C} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PCDR5\pcdr5cuiw32.exe

==================== Loaded Modules (whitelisted) =============

2009-08-31 08:48 - 2007-06-18 16:29 - 00049912 _____ () C:\Windows\system32\DLAAPI_W.DLL
2012-11-19 20:46 - 2009-03-25 22:05 - 00395264 _____ () C:\Windows\system32\nvshell.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"

==================== Faulty Device Manager Devices =============

Name: Officejet 7000 E809a
Description: Officejet 7000 E809a
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/23/2013 08:40:24 AM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (10/23/2013 00:00:08 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service Windows-Defender since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (10/22/2013 03:28:31 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16514, Zeitstempel 0x523ec269, fehlerhaftes Modul MSHTML.dll, Version 9.0.8112.16514, Zeitstempel 0x523ec657, Ausnahmecode 0xc0000005, Fehleroffset 0x0019a37e,
Prozess-ID 0x2244, Anwendungsstartzeit iexplore.exe0.

Error: (10/22/2013 03:26:37 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16514, Zeitstempel 0x523ec269, fehlerhaftes Modul MSHTML.dll, Version 9.0.8112.16514, Zeitstempel 0x523ec657, Ausnahmecode 0xc0000005, Fehleroffset 0x0019a384,
Prozess-ID 0x1b88, Anwendungsstartzeit iexplore.exe0.

Error: (10/22/2013 03:26:35 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16514, Zeitstempel 0x523ec269, fehlerhaftes Modul MSHTML.dll, Version 9.0.8112.16514, Zeitstempel 0x523ec657, Ausnahmecode 0xc0000005, Fehleroffset 0x0019a37e,
Prozess-ID 0x15b0, Anwendungsstartzeit iexplore.exe0.

Error: (10/21/2013 10:30:01 AM) (Source: Perflib) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll8

Error: (10/21/2013 10:30:01 AM) (Source: Perflib) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll8

Error: (10/21/2013 08:13:26 AM) (Source: simpleServer) (User: )
Description: simpleServer information:  Error: Ignoring unknown directive "StartThread"
At line 6 in C:\Users\Meier\AppData\Local\sohoclient\cfg/sohoclient.conf

Make sure the required module is loaded and the relevant handlers
have been added. Ensure the directive is after all LoadModule and
AddHandler directives.        .

Error: (10/18/2013 11:00:17 AM) (Source: Perflib) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll8

Error: (10/18/2013 11:00:17 AM) (Source: Perflib) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll8


System errors:
=============
Error: (10/23/2013 08:41:28 AM) (Source: Service Control Manager) (User: )
Description: NetzwerklistendienstNLA (Network Location Awareness)%%1068

Error: (10/23/2013 08:41:28 AM) (Source: Service Control Manager) (User: )
Description: NetzwerklistendienstNLA (Network Location Awareness)%%1068

Error: (10/23/2013 08:41:28 AM) (Source: Service Control Manager) (User: )
Description: NetzwerklistendienstNLA (Network Location Awareness)%%1068

Error: (10/23/2013 08:41:28 AM) (Source: Service Control Manager) (User: )
Description: NetzwerklistendienstNLA (Network Location Awareness)%%1068

Error: (10/23/2013 08:41:28 AM) (Source: Service Control Manager) (User: )
Description: AFD
CSC
DfsC
gdwfpcd
i8042prt
NetBIOS
netbt
nsiproxy
PSched
RasAcd
rdbss
Smb
spldr
tdx
tvtumon
Wanarpv6

Error: (10/23/2013 08:41:28 AM) (Source: Service Control Manager) (User: )
Description: NetzwerklistendienstNLA (Network Location Awareness)%%1068

Error: (10/23/2013 08:41:28 AM) (Source: Service Control Manager) (User: )
Description: NLA (Network Location Awareness)Netzwerkspeicher-Schnittstellendienst%%1068

Error: (10/23/2013 08:41:28 AM) (Source: Service Control Manager) (User: )
Description: IKE- und AuthIP IPsec-SchlüsselerstellungsmoduleBFE

Error: (10/23/2013 08:41:28 AM) (Source: Service Control Manager) (User: )
Description: WebClientWebDav Client Redirector Driver%%1068

Error: (10/23/2013 08:41:28 AM) (Source: Service Control Manager) (User: )
Description: SMB 2.0 MiniRedirectorSMB MiniRedirector Wrapper and Engine%%1068


Microsoft Office Sessions:
=========================
Error: (07/29/2013 11:58:26 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 28 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (07/29/2013 11:57:54 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 29 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (07/29/2013 11:34:08 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 12240 seconds with 300 seconds of active time.  This session ended with a crash.

Error: (06/27/2012 07:42:06 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1912 seconds with 300 seconds of active time.  This session ended with a crash.

Error: (06/26/2012 10:45:11 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 11068 seconds with 5640 seconds of active time.  This session ended with a crash.

Error: (07/01/2011 00:00:47 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6557.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2271 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/25/2011 04:30:28 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6550.5004, Microsoft Office Version: 12.0.6425.1000. This session lasted 12755 seconds with 60 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2013-10-23 08:42:28.993
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-23 08:42:28.837
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-23 08:42:28.696
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-23 08:42:28.540
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-25 08:28:50.610
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-25 08:28:50.375
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-25 08:28:47.528
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-25 08:28:47.298
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-25 08:28:44.567
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-25 08:28:44.414
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 11%
Total physical RAM: 8182.37 MB
Available physical RAM: 7250.61 MB
Total Pagefile: 16412.27 MB
Available Pagefile: 15721.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (SW_Preload) (Fixed) (Total:128.5 GB) (Free:13.13 GB) NTFS
Drive q: (Lenovo) (Fixed) (Total:9.77 GB) (Free:2.62 GB) NTFS
Drive s: (SERVICEV003) (Fixed) (Total:1.46 GB) (Free:0.65 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 140 GB) (Disk ID: 327DEFDA)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=129 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10 GB) - (Type=07 NTFS)

==================== End Of Log ============================