QVO6-Problem auf Windows Vista

 defogger_disable by jpshortstuff (23.02.10.1)
Log created at 16:15 on 25/10/2013 (Hele)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-10-2013 01
Ran by Hele (administrator) on HELE-PC on 25-10-2013 17:23:30
Running from C:\Users\Hele\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
() C:\Windows\system32\dmwu.exe
() C:\Program Files\CDBurnerXP\NMSAccessU.exe
() C:\Windows\System32\jmdp\stij.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(RealNetworks, Inc.) C:\Program Files\Common Files\Real\Update_OB\realsched.exe
(Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATIEFE.EXE
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Dropbox, Inc.) C:\Users\Hele\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcfgex.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
() C:\Program Files\Samsung\Samsung Update Plus\SLUTrayNotifier.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics, Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6111232 2008-04-17] (Realtek Semiconductor)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [33648 2007-08-24] (Microsoft Corporation)
HKLM\...\Run: [TkBellExe] - C:\Program Files\Common Files\Real\Update_OB\realsched.exe [198160 2010-02-07] (RealNetworks, Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2011-07-05] (Apple Inc.)
HKLM\...\Run: [WinampAgent] - C:\Program Files\Winamp\winampa.exe [74752 2011-12-09] (Nullsoft, Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-18] (Adobe Systems Incorporated)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4908592 2013-10-07] (AVG Technologies CZ, s.r.o.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [EPSON Stylus SX200 Series] - C:\Users\Hele\AppData\Local\Temp\E_SC3CB.tmp [122 2011-03-11] ()
HKCU\...\Run: [Google Update] - C:\Users\Hele\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-11-22] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.)
MountPoints2: {7f836ef1-2d12-11e0-ae87-001377adcfdc} - SNOVE///pijes.exe
MountPoints2: {d847d1c9-e505-11de-a791-001377adcfdc} - wubi.exe --cdmenu
MountPoints2: {f655bdff-532b-11e0-b93d-001377adcfdc} - EDWARD\\\\stereolove.exe
MountPoints2: {fef87b99-e42f-11e0-bcf7-001377adcfdc} - F:\LaunchU3.exe -a
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
Startup: C:\Users\Hele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Hele\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Hele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Hele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk
ShortcutTarget: OpenOffice.org 3.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD3200BEVT-35ZCT0_WD-WXE908AD5344D5344&ts=1378301593
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD3200BEVT-35ZCT0_WD-WXE908AD5344D5344&ts=1378301593
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD3200BEVT-35ZCT0_WD-WXE908AD5344D5344&ts=1378301593
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD3200BEVT-35ZCT0_WD-WXE908AD5344D5344&ts=1378301593
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=WDCXWD3200BEVT-35ZCT0_WD-WXE908AD5344D5344&ts=1378301593
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD3200BEVT-35ZCT0_WD-WXE908AD5344D5344&ts=1378301594
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD3200BEVT-35ZCT0_WD-WXE908AD5344D5344&ts=1378301594
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD3200BEVT-35ZCT0_WD-WXE908AD5344D5344&ts=1378301594
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD3200BEVT-35ZCT0_WD-WXE908AD5344D5344&ts=1378301594
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb174/?search={searchTerms}&loc=IB_DS&a=6R8DnVnPkI&i=26
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
DPF: {1ED48504-8834-11D5-AC75-0008C73FD642} file:///C:/Program%20Files/proeWildfire%202.0/i486_nt/obj/pvx_install.exe
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default
FF user.js: detected! => C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\user.js
FF Homepage: hxxp://fm4.orf.at/
FF Keyword.URL: hxxp://mystart.incredibar.com/mb174/?a=6R8DnVnPkI&loc=skw&search=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=1.0.3.448 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Hele\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Hele\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\qvo6.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: No Name - C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: sharemenot - C:\Users\Hele\AppData\Roaming\Mozilla\Firefox\Profiles\98odespk.default\Extensions\sharemenot@franziroesner.com.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Program Files\Real\RealPlayer\browserrecord\firefox\ext
FF Extension: RealPlayer Browser Record Plugin - C:\Program Files\Real\RealPlayer\browserrecord\firefox\ext
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [{8E9E3331-D360-4f87-8803-52DE43566502}] - C:\Program Files\Web Assistant\Firefox

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://orf.at/"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Hele\AppData\Local\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Hele\AppData\Local\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Hele\AppData\Local\Google\Chrome\Application\30.0.1599.101\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft\\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (DivX Web Player) - C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll No File
CHR Plugin: (DivX Player Netscape Plugin) - C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll No File
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Winamp Application Detector) - C:\Program Files\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (BrowserPlus (from Yahoo!) v2.9.2) - C:\Users\Hele\AppData\Local\Yahoo!\BrowserPlus\2.9.2\Plugins\npybrowserplus_2.9.2.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\Hele\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Hele\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Skype Click to Call) - C:\Users\Hele\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Hele\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Hele\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Hele\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
CHR HKLM\...\Chrome\Extension: [jifflliplgeajjdhmkcfnngfpgbjonjg] - C:\Program Files\Perion\NewTab\newTab.crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

========================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3538480 2013-10-03] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-25] (AVG Technologies CZ, s.r.o.)
R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528608 2008-08-29] (Cisco Systems, Inc.)
R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1432368 2013-10-15] ()
R2 NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2009-11-12] ()
S2 Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [77480 2008-05-13] ()
S2 Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [x]

==================== Drivers (Whitelisted) ====================

S3 ADDMEM; C:\Users\Hele\AppData\Local\Temp\__Samsung_Update\ADDMEM.SYS [3205 2009-07-07] ()
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120632 2013-09-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209208 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [145720 2013-09-02] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [223032 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102200 2013-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-08] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
R0 CLFS; C:\Windows\System32\CLFS.sys [247352 2008-01-21] (Microsoft Corporation)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
R2 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306299 2008-08-29] (Cisco Systems, Inc.)
R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [125328 2008-03-29] (Deterministic Networks, Inc.)
R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2009-07-07] (SAMSUNG ELECTRONICS CO., LTD.)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [7168 2009-11-12] ()
R3 VMC302; C:\Windows\System32\Drivers\VMC302.sys [242048 2008-06-05] (Vimicro Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U3 kxldipow; \??\C:\Users\Hele\AppData\Local\Temp\kxldipow.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-25 16:55 - 2013-10-25 16:55 - 00000091 _____ C:\Users\Hele\AppData\Roaming\WB.CFG
2013-10-25 16:55 - 2013-10-25 16:55 - 00000006 _____ C:\Users\Hele\AppData\Roaming\WBPU-TTL.DAT
2013-10-25 16:51 - 2013-10-25 16:51 - 00138832 _____ C:\Windows\Minidump\Mini102513-01.dmp
2013-10-25 16:51 - 2013-10-25 16:51 - 00000000 ____D C:\Windows\Minidump
2013-10-25 16:50 - 2013-10-25 16:51 - 346901418 _____ C:\Windows\MEMORY.DMP
2013-10-25 16:40 - 2013-10-25 16:42 - 00012404 _____ C:\Users\Hele\Downloads\Addition.txt
2013-10-25 16:33 - 2013-10-25 16:33 - 00377856 _____ C:\Users\Hele\Desktop\5zp79ydu.exe
2013-10-25 16:30 - 2013-10-25 16:30 - 00004479 _____ C:\Users\Hele\Desktop\Addition.txt
2013-10-25 16:26 - 2013-10-25 16:26 - 00000000 ____D C:\FRST
2013-10-25 16:25 - 2013-10-25 16:25 - 01088113 _____ (Farbar) C:\Users\Hele\Desktop\FRST.exe
2013-10-25 16:10 - 2013-10-25 16:15 - 00000470 _____ C:\Users\Hele\Desktop\defogger_disable.log
2013-10-25 16:10 - 2013-10-25 16:10 - 00000000 _____ C:\Users\Hele\defogger_reenable
2013-10-25 16:09 - 2013-10-25 16:09 - 00050477 _____ C:\Users\Hele\Desktop\Defogger.exe
2013-10-25 15:59 - 2013-10-25 16:18 - 00000000 ____D C:\Program Files\MyPC Backup
2013-10-25 15:56 - 2013-10-25 17:12 - 00000000 ____D C:\Users\Hele\AppData\Roaming\Systweak
2013-10-25 15:56 - 2013-10-25 16:57 - 00000284 _____ C:\Windows\Tasks\FoxTab.job
2013-10-25 15:56 - 2013-10-25 15:56 - 00000000 ____D C:\Users\Hele\AppData\Roaming\FoxTab
2013-10-25 15:56 - 2013-07-22 16:07 - 00018776 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot.exe
2013-10-25 15:55 - 2013-10-25 16:55 - 00000288 _____ C:\Windows\Tasks\DigitalSite.job
2013-10-25 15:55 - 2013-10-25 15:55 - 00000000 ____D C:\Users\Hele\AppData\Roaming\DigitalSite
2013-10-25 15:53 - 2013-10-25 15:52 - 00752344 _____ C:\Users\Hele\Downloads\ZipExtractorSetup.exe
2013-10-24 22:00 - 2013-10-24 22:00 - 00000000 ____D C:\Windows\system32\jmdp
2013-10-15 15:38 - 2013-10-15 15:38 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-27 20:37 - 2013-09-27 20:37 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-09-27 20:37 - 2013-09-27 20:37 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-09-25 20:57 - 2013-09-25 20:57 - 00120632 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiskx.sys

==================== One Month Modified Files and Folders =======

2013-10-25 17:16 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-25 17:16 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-25 17:14 - 2011-11-22 14:25 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475481164-914024980-864890415-1000UA.job
2013-10-25 17:12 - 2013-10-25 15:56 - 00000000 ____D C:\Users\Hele\AppData\Roaming\Systweak
2013-10-25 17:07 - 2009-09-17 17:06 - 00000000 ____D C:\Users\Hele\AppData\Roaming\Skype
2013-10-25 17:07 - 2008-01-21 03:35 - 01442123 _____ C:\Windows\WindowsUpdate.log
2013-10-25 16:57 - 2013-10-25 15:56 - 00000284 _____ C:\Windows\Tasks\FoxTab.job
2013-10-25 16:55 - 2013-10-25 16:55 - 00000091 _____ C:\Users\Hele\AppData\Roaming\WB.CFG
2013-10-25 16:55 - 2013-10-25 16:55 - 00000006 _____ C:\Users\Hele\AppData\Roaming\WBPU-TTL.DAT
2013-10-25 16:55 - 2013-10-25 15:55 - 00000288 _____ C:\Windows\Tasks\DigitalSite.job
2013-10-25 16:53 - 2012-05-12 23:49 - 00000000 ___RD C:\Users\Hele\Dropbox
2013-10-25 16:53 - 2012-05-12 23:41 - 00000000 ____D C:\Users\Hele\AppData\Roaming\Dropbox
2013-10-25 16:52 - 2010-11-05 09:40 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-25 16:51 - 2013-10-25 16:51 - 00138832 _____ C:\Windows\Minidump\Mini102513-01.dmp
2013-10-25 16:51 - 2013-10-25 16:51 - 00000000 ____D C:\Windows\Minidump
2013-10-25 16:51 - 2013-10-25 16:50 - 346901418 _____ C:\Windows\MEMORY.DMP
2013-10-25 16:51 - 2011-08-07 01:47 - 00000306 _____ C:\Windows\Tasks\WinMaximizer-Hele-Startup.job
2013-10-25 16:51 - 2009-07-07 12:17 - 00096640 _____ C:\ProgramData\nvModes.001
2013-10-25 16:51 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-25 16:49 - 2008-01-21 04:47 - 00044086 _____ C:\Windows\PFRO.log
2013-10-25 16:42 - 2013-10-25 16:40 - 00012404 _____ C:\Users\Hele\Downloads\Addition.txt
2013-10-25 16:38 - 2010-11-05 09:40 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-25 16:33 - 2013-10-25 16:33 - 00377856 _____ C:\Users\Hele\Desktop\5zp79ydu.exe
2013-10-25 16:32 - 2012-02-01 23:18 - 00000000 ____D C:\Users\Hele\Documents\notiz
2013-10-25 16:30 - 2013-10-25 16:30 - 00004479 _____ C:\Users\Hele\Desktop\Addition.txt
2013-10-25 16:29 - 2009-07-27 12:12 - 00002631 _____ C:\Users\Hele\Desktop\Microsoft Office Word 2007.lnk
2013-10-25 16:26 - 2013-10-25 16:26 - 00000000 ____D C:\FRST
2013-10-25 16:25 - 2013-10-25 16:25 - 01088113 _____ (Farbar) C:\Users\Hele\Desktop\FRST.exe
2013-10-25 16:18 - 2013-10-25 15:59 - 00000000 ____D C:\Program Files\MyPC Backup
2013-10-25 16:15 - 2013-10-25 16:10 - 00000470 _____ C:\Users\Hele\Desktop\defogger_disable.log
2013-10-25 16:10 - 2013-10-25 16:10 - 00000000 _____ C:\Users\Hele\defogger_reenable
2013-10-25 16:10 - 2009-07-07 09:34 - 00000000 ____D C:\Users\Hele
2013-10-25 16:09 - 2013-10-25 16:09 - 00050477 _____ C:\Users\Hele\Desktop\Defogger.exe
2013-10-25 15:56 - 2013-10-25 15:56 - 00000000 ____D C:\Users\Hele\AppData\Roaming\FoxTab
2013-10-25 15:55 - 2013-10-25 15:55 - 00000000 ____D C:\Users\Hele\AppData\Roaming\DigitalSite
2013-10-25 15:52 - 2013-10-25 15:53 - 00752344 _____ C:\Users\Hele\Downloads\ZipExtractorSetup.exe
2013-10-25 14:44 - 2009-09-21 22:42 - 00000000 ____D C:\Program Files\DivX
2013-10-25 14:43 - 2006-11-02 15:01 - 00032510 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-25 14:30 - 2012-08-27 22:57 - 00000000 ____D C:\Program Files\Perion
2013-10-25 14:25 - 2012-05-01 12:20 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-10-25 12:46 - 2013-09-23 12:18 - 00000000 ____D C:\ProgramData\MFAData
2013-10-25 12:40 - 2013-03-04 11:48 - 00000000 ____D C:\Windows\system32\WNLT
2013-10-24 22:00 - 2013-10-24 22:00 - 00000000 ____D C:\Windows\system32\jmdp
2013-10-24 21:59 - 2013-03-04 11:48 - 00000000 ____D C:\Windows\system32\ARFC
2013-10-24 12:14 - 2011-11-22 14:25 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475481164-914024980-864890415-1000Core.job
2013-10-22 12:11 - 2009-10-03 13:29 - 00000000 ____D C:\Users\Hele\Documents\Uni
2013-10-19 15:22 - 2011-11-22 14:31 - 00002339 _____ C:\Users\Hele\Desktop\Google Chrome.lnk
2013-10-16 13:56 - 2013-09-19 18:49 - 00000000 _____ C:\end
2013-10-15 15:38 - 2013-10-15 15:38 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-15 11:05 - 2013-03-04 11:48 - 01432368 _____ C:\Windows\system32\dmwu.exe
2013-10-15 10:58 - 2013-03-04 11:48 - 00027136 _____ (IncrediMail, Ltd.) C:\Windows\system32\ImHttpComm.dll
2013-10-06 14:57 - 2008-01-21 09:16 - 01418806 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-06 14:52 - 2009-09-17 17:06 - 00000000 ___RD C:\Program Files\Skype
2013-10-06 14:52 - 2009-09-17 17:06 - 00000000 ____D C:\ProgramData\Skype
2013-10-01 14:33 - 2006-11-02 14:52 - 00129266 _____ C:\Windows\setupact.log
2013-09-30 17:53 - 2013-03-04 11:48 - 00632656 _____ (Microsoft Corporation) C:\Windows\system32\msvcr80.dll
2013-09-30 17:53 - 2013-03-04 11:48 - 00554832 _____ (Microsoft Corporation) C:\Windows\system32\msvcp80.dll
2013-09-30 17:53 - 2013-03-04 11:48 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\msvcm80.dll
2013-09-30 17:53 - 2013-03-04 11:48 - 00001870 _____ C:\Windows\system32\Microsoft.VC80.CRT.manifest
2013-09-27 20:37 - 2013-09-27 20:37 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-09-27 20:37 - 2013-09-27 20:37 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-09-25 20:57 - 2013-09-25 20:57 - 00120632 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiskx.sys

Files to move or delete:
====================
C:\Windows\Tasks\At1.job


Some content of TEMP:
====================
C:\Users\Hele\AppData\Local\Temp\02B673~1.exe
C:\Users\Hele\AppData\Local\Temp\66275uninstall.exe
C:\Users\Hele\AppData\Local\Temp\7z920.exe
C:\Users\Hele\AppData\Local\Temp\BackupSetup.exe
C:\Users\Hele\AppData\Local\Temp\bpuninstall.exe
C:\Users\Hele\AppData\Local\Temp\bundlesweetimsetup.exe
C:\Users\Hele\AppData\Local\Temp\ConResGr.dll
C:\Users\Hele\AppData\Local\Temp\contentDATs.exe
C:\Users\Hele\AppData\Local\Temp\DelayInst.exe
C:\Users\Hele\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Hele\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe
C:\Users\Hele\AppData\Local\Temp\incredibar_installer.exe
C:\Users\Hele\AppData\Local\Temp\installservice.exe
C:\Users\Hele\AppData\Local\Temp\instmsi.exe
C:\Users\Hele\AppData\Local\Temp\instmsiw.exe
C:\Users\Hele\AppData\Local\Temp\ose00000.exe
C:\Users\Hele\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\Hele\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Hele\AppData\Local\Temp\Sqlite3.dll
C:\Users\Hele\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Hele\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Hele\AppData\Local\Temp\vpnclient_setup.exe
C:\Users\Hele\AppData\Local\Temp\ydetect.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-25 16:55

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 23-10-2013 01
Ran by Hele at 2013-10-25 17:25:39
Running from C:\Users\Hele\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

2007 Microsoft Office Suite Service Pack 1 (SP1)
7-Zip 9.20
Adobe Flash Player 10 ActiveX (Version: 10.0.12.36)
Adobe Flash Player 11 Plugin (Version: 11.5.502.135)
Adobe Reader XI (11.0.02) (Version: 11.0.02)
Apple Application Support (Version: 2.0.1)
Apple Software Update (Version: 2.1.3.127)
Atheros WLAN Client (Version: 1.00.000)
AVG 2014 (Version: 14.0.3615)
AVG 2014 (Version: 14.0.4158)
AVG 2014 (Version: 2014.0.4158)
CDBurnerXP (Version: 4.2.7.1875)
Chinese Simplified Fonts Support For Adobe Reader 9 (Version: 9.0.0)
Cisco Systems VPN Client 5.0.04.0300 (Version: 5.0.4)
Dropbox (HKCU Version: 2.0.22)
Druckerdeinstallation für EPSON Stylus SX200 Series
Easy Network Manager 3.0 (Version: 3.0.0.0)
EasyBits GO
EPSON Scan
GIMP 2.6.10 (Version: 2.6.10)
Google Chrome (HKCU Version: 30.0.1599.101)
Google Earth Plug-in (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.165)
IB Updater Service (Version: 4.0.8.8)
ICQ7.2 (Version: 7.2)
Inkscape 0.48.4 (Version: 0.48.4)
Intel® Matrix Storage Manager
Microsoft – Speichern als PDF oder XPS – Add-In für 2007 Microsoft Office-Programme (Version: 12.0.4518.1014)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6215.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft SOAP Toolkit 2.0 SP2 (Version: 623.1)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Mozilla Firefox 24.0 (x86 de) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
NVIDIA Drivers
OpenOffice.org 3.1 (Version: 3.1.9420)
PDFCreator (Version: 1.5.1)
Pro/ENGINEER Release Wildfire 2.0 Datecode M270 (Version: Wildfire 2.0)
QuickTime (Version: 7.70.80.34)
RealPlayer
Realtek High Definition Audio Driver (Version: 6.0.1.5605)
Samsung Update Plus (Version: 1.3.0.11)
Skype Click to Call (Version: 5.9.9216)
Skype™ 6.7 (Version: 6.7.102)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
Synaptics Pointing Device Driver (Version: 10.1.2.0)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Zip Extractor
Update for Zip Opener
Vimicro UVC Camera (Version: 1.00.0000)
Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1)
VMLoad
Winamp (Version: 5.623 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
WinZip 16.0 (Version: 16.0.9715)
Yahoo! Detect

==================== Restore Points  =========================

23-09-2013 10:29:25 Removed Java(TM) 6 Update 10
24-09-2013 09:39:12 Geplanter Prüfpunkt
24-09-2013 09:50:48 Installed AVG 2014
24-09-2013 09:51:13 Installed AVG 2014
29-09-2013 17:07:18 Geplanter Prüfpunkt
01-10-2013 13:01:05 Geplanter Prüfpunkt
10-10-2013 18:32:52 Geplanter Prüfpunkt
11-10-2013 10:25:44 Geplanter Prüfpunkt
13-10-2013 09:11:04 Geplanter Prüfpunkt
15-10-2013 16:03:57 Geplanter Prüfpunkt
16-10-2013 11:51:29 Geplanter Prüfpunkt
18-10-2013 19:12:40 Geplanter Prüfpunkt
20-10-2013 17:38:54 Geplanter Prüfpunkt
21-10-2013 14:19:18 Geplanter Prüfpunkt
23-10-2013 16:11:06 Geplanter Prüfpunkt
25-10-2013 11:38:45 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {250373CC-A849-4A3F-8751-878293A1C2BE} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1475481164-914024980-864890415-1000UA => C:\Users\Hele\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-22] (Google Inc.)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3D5FCC10-6F8C-44DA-8FFB-22EE5A88E87E} - System32\Tasks\FoxTab => C:\Users\Hele\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {85EADEAC-EC32-4F43-B52E-A62862FB45FB} - System32\Tasks\DigitalSite => C:\Users\Hele\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE [2013-04-12] ()
Task: {88569C84-941F-4C60-A151-4EE520758DFC} - System32\Tasks\WinMaximizer-Hele-Startup => C:\Program Files\WinMaximizer\WinMaximizer.exe
Task: {92AFBD8A-8331-4AF7-A595-7D6FDBF1BF87} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-05] (Google Inc.)
Task: {A16E5CCF-F2B7-4F1C-9F86-B324A50FB799} - System32\Tasks\{1F5742FE-2DBB-4595-B042-F06C5DF4C601} => C:\Program Files\Skype\Phone\Skype.exe [2013-07-25] (Skype Technologies S.A.)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\system32\pla.dll [2008-01-21] (Microsoft Corporation)
Task: {AF2C3325-B9B7-4B60-964C-70B89C8A1830} - System32\Tasks\{A6AF78F1-75FF-4EBB-B4FD-FAF75CE0B460} => C:\Program Files\Skype\\Phone\Skype.exe [2013-07-25] (Skype Technologies S.A.)
Task: {CE379565-D83A-4C9F-804F-124766D90CFE} - System32\Tasks\At1 => C:\Users\Hele\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE [2013-09-04] ()
Task: {E43B0508-DAAE-4E2F-9E28-AE000FCE4DBB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1475481164-914024980-864890415-1000Core => C:\Users\Hele\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-22] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {FA8BC14A-41D8-4E76-9137-E4C66449D31A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-05] (Google Inc.)
Task: C:\Windows\Tasks\At1.job => C:\Users\Hele\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\DigitalSite.job => C:\Users\Hele\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\FoxTab.job => C:\Users\Hele\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475481164-914024980-864890415-1000Core.job => C:\Users\Hele\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475481164-914024980-864890415-1000UA.job => C:\Users\Hele\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\WinMaximizer-Hele-Startup.job => C:\Program Files\WinMaximizer\WinMaximizer.exe

==================== Loaded Modules (whitelisted) =============

2013-10-15 11:03 - 2013-10-15 11:03 - 01057792 _____ () C:\Windows\System32\jmdp\lmrn.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Hele\AppData\Roaming\Dropbox\bin\libcef.dll
2009-08-18 16:54 - 2009-08-18 16:54 - 00970752 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll
2013-10-15 15:38 - 2013-10-15 15:38 - 03279768 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Hele\Downloads\The_Age_Of_Stupid_eng.avi:TOC.WMV

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Tun-Miniportadapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunmp
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Cisco Systems VPN Adapter
Description: Cisco Systems VPN Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/25/2013 05:06:10 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung 5zp79ydu.exe, Version 2.1.19163.0, Zeitstempel 0x515d31f0, fehlerhaftes Modul 5zp79ydu.exe, Version 2.1.19163.0, Zeitstempel 0x515d31f0, Ausnahmecode 0xc0000409, Fehleroffset 0x000723d6,
Prozess-ID 0x1394, Anwendungsstartzeit 5zp79ydu.exe0.

Error: (10/25/2013 04:51:37 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/25/2013 04:23:10 PM) (Source: Application Hang) (User: )
Description: Programm _iu14D2N.tmp, Version 51.1052.0.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 1474
Anfangszeit: 01ced18d36b6f930
Zeitpunkt der Beendigung: 6

Error: (10/25/2013 04:11:11 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung SynTPEnh.exe, Version 10.1.2.0, Zeitstempel 0x472258c9, fehlerhaftes Modul SynTPEnh.exe, Version 10.1.2.0, Zeitstempel 0x472258c9, Ausnahmecode 0xc0000409, Fehleroffset 0x00028ffc,
Prozess-ID 0xeb8, Anwendungsstartzeit SynTPEnh.exe0.

Error: (10/25/2013 03:58:19 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\HELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\98ODESPK.DEFAULT\EXTENSIONS\{5EBDCA98-43B3-45BB-87E0-716029FB42AB}\SKIN\EXTERNAL\JQUERY.SIMPLECOLORPICKER.CSS> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/25/2013 03:58:19 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\HELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\98ODESPK.DEFAULT\EXTENSIONS\{5EBDCA98-43B3-45BB-87E0-716029FB42AB}\SKIN\EXTERNAL\JQUERY.SIMPLECOLORPICKER.CSS> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/25/2013 03:58:18 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\HELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\98ODESPK.DEFAULT\EXTENSIONS\{5EBDCA98-43B3-45BB-87E0-716029FB42AB}\SKIN\EXTERNAL\JQUERY.JCROP.MIN.CSS> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/25/2013 03:58:18 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\HELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\98ODESPK.DEFAULT\EXTENSIONS\{5EBDCA98-43B3-45BB-87E0-716029FB42AB}\SKIN\EXTERNAL\JQUERY.JCROP.MIN.CSS> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/25/2013 03:58:18 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\HELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\98ODESPK.DEFAULT\EXTENSIONS\{5EBDCA98-43B3-45BB-87E0-716029FB42AB}\SKIN\EXTERNAL\JQUERY.AUTOCOMPLETE.CSS> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/25/2013 03:58:18 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\HELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\98ODESPK.DEFAULT\EXTENSIONS\{5EBDCA98-43B3-45BB-87E0-716029FB42AB}\SKIN\EXTERNAL\JQUERY.AUTOCOMPLETE.CSS> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)


System errors:
=============
Error: (10/25/2013 04:51:38 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (10/25/2013 04:51:38 PM) (Source: Service Control Manager) (User: )
Description: 30000PlugPlay

Error: (10/25/2013 04:51:11 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: C:\Windows\system32\athihvs.dll126

Error: (10/25/2013 04:51:11 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueueKerberos

Error: (10/25/2013 04:50:28 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 25.10.2013 um 16:43:05 unerwartet heruntergefahren.

Error: (10/25/2013 04:40:04 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (10/25/2013 02:45:51 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (10/25/2013 02:44:19 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: C:\Windows\system32\athihvs.dll126

Error: (10/25/2013 02:44:18 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueueKerberos

Error: (10/25/2013 02:27:16 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-10-25 17:24:19.305
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-25 17:24:19.148
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-25 17:24:18.999
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-25 17:24:18.862
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-25 17:24:18.706
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-25 17:24:18.552
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-25 17:24:18.411
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-25 17:24:18.250
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-25 17:24:14.619
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-25 17:24:14.467
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 63%
Total physical RAM: 3065.84 MB
Available physical RAM: 1132.72 MB
Total Pagefile: 6332.08 MB
Available Pagefile: 4892.85 MB
Total Virtual: 2047.88 MB
Available Virtual: 1915.57 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:283.09 GB) (Free:113.7 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Volume) (Fixed) (Total:15 GB) (Free:14.9 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: B079B6F4)
Partition 1: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=283 GB) - (Type=07 NTFS)

==================== End Of Log ============================