"\RECYCLER\e621ca505.exe konnte nicht gefunden werden" auf ext. Festplatte

"E\RECYCLER\e621ca505.exe konnte nicht gefunden werden. Stellen Sie sicher..."
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-10-2013 01
Ran by win7 (administrator) on WIN7-PC on 26-10-2013 22:49:11
Running from C:\Users\win7\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\ProgramData\MobileBrServ\mbbservice.exe
(Whilokii) C:\Program Files (x86)\Whilokii\updateWhilokii.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe
(Whilokii) C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\avgnt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\timeout.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352 2009-10-29] (Realtek Semiconductor)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [818720 2010-02-26] (Acer Incorporated)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.)
MountPoints2: {4c5c72dd-08a5-11e3-8c69-701a04b1c55b} - E:\AutoRun.exe
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-01-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [RemoteControl8] - c:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-15] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-10] (Avira Operations GmbH & Co. KG)
HKU\Default\...\RunOnce: [ScrSav] - [x]

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://packardbell.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Whilokii - {204df522-9a96-4a72-abb0-60f7a216d6d2} - C:\Program Files (x86)\Whilokii\Whilokiibho.dll (Whilokii)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: BonanzaDeals - {fe063412-bea4-4d76-8ed3-183be6220d17} - C:\Program Files (x86)\BonanzaDeals\BonanzaDealsIE.dll (BonanzaDeals)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\win7\AppData\Roaming\Mozilla\Firefox\Profiles\5u58p4qn.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=3 - C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=9 - C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: BonanzaDeals - C:\Users\win7\AppData\Roaming\Mozilla\Firefox\Profiles\5u58p4qn.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}
FF Extension: firefox - C:\Users\win7\AppData\Roaming\Mozilla\Firefox\Profiles\5u58p4qn.default\Extensions\firefox@whilokii.net.xpi

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Whilokii) - C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaimhpklononapfjngelgdokckfjekfc\1.0.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [iaimhpklononapfjngelgdokckfjekfc] - C:\Program Files (x86)\Whilokii\iaimhpklononapfjngelgdokckfjekfc.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-10-10] (Avira Operations GmbH & Co. KG)
S2 bonanzadealslive; C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-10-21] (BonanzaDeals)
S3 bonanzadealslivem; C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-10-21] (BonanzaDeals)
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [841248 2010-02-26] (Acer Incorporated)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [230240 2013-08-19] ()
R2 Update Whilokii; C:\Program Files (x86)\Whilokii\updateWhilokii.exe [65304 2013-10-05] (Whilokii)
R2 Util Whilokii; C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe [65304 2013-10-22] (Whilokii)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-10-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-10-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [83160 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 TVICHW32; C:\Windows\system32\DRIVERS\TVICHW32.SYS [21200 2013-07-30] (EnTech Taiwan)
S3 TVICHW32; C:\Windows\SysWow64\DRIVERS\TVICHW32.SYS [29536 2013-07-30] (EnTech Taiwan)
S3 ALSysIO; \??\C:\Users\win7\AppData\Local\Temp\ALSysIO64.sys [x]
S3 cpuz135; \??\C:\Users\win7\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [x]
S3 GPU-Z; \??\C:\Users\win7\AppData\Local\Temp\GPU-Z.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-26 22:48 - 2013-10-26 22:48 - 01956160 _____ (Farbar) C:\Users\win7\Downloads\FRST64.exe
2013-10-26 22:48 - 2013-10-26 22:48 - 00000000 ____D C:\FRST
2013-10-26 22:30 - 2013-10-26 22:30 - 00050477 _____ C:\Users\win7\Downloads\Defogger.exe
2013-10-26 22:30 - 2013-10-26 22:30 - 00000470 _____ C:\Users\win7\Downloads\defogger_disable.log
2013-10-26 22:30 - 2013-10-26 22:30 - 00000000 _____ C:\Users\win7\defogger_reenable
2013-10-26 22:07 - 2013-10-26 22:07 - 00000000 ____D C:\Users\win7\AppData\Roaming\Avira
2013-10-26 22:02 - 2013-10-26 22:02 - 00000000 ____D C:\ProgramData\Avira
2013-10-26 22:02 - 2013-10-26 22:02 - 00000000 ____D C:\Program Files (x86)\Avira
2013-10-26 22:02 - 2013-10-10 19:14 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-26 22:02 - 2013-10-10 19:14 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-26 22:02 - 2013-10-10 19:14 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-10-26 22:02 - 2013-10-10 19:14 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-10-26 21:58 - 2013-10-26 22:00 - 123853152 _____ C:\Users\win7\Downloads\avira_free_antivirus_de.exe
2013-10-26 19:03 - 2013-10-26 19:03 - 00001074 _____ C:\Users\Franzi\Desktop\GIMP 2.lnk
2013-10-25 20:54 - 2013-10-25 20:54 - 00000000 ____D C:\ProgramData\FLEXnet
2013-10-23 20:38 - 2013-10-26 20:35 - 00000000 ____D C:\Users\Franzi\.gimp-2.8
2013-10-23 20:37 - 2013-10-23 20:37 - 00000000 ____D C:\Users\Franzi\AppData\Local\gegl-0.2
2013-10-22 12:49 - 2013-10-26 22:49 - 00000095 _____ C:\Users\win7\AppData\Roaming\WB.CFG
2013-10-22 12:49 - 2013-10-26 22:49 - 00000006 _____ C:\Users\win7\AppData\Roaming\WBPU-TTL.DAT
2013-10-21 19:12 - 2013-10-21 19:12 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\Systweak
2013-10-21 14:49 - 2013-10-26 22:49 - 00000288 _____ C:\Windows\Tasks\DigitalSite.job
2013-10-21 14:49 - 2013-10-26 21:54 - 00000922 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2013-10-21 14:49 - 2013-10-26 21:49 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-21 14:49 - 2013-10-26 21:46 - 00000918 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2013-10-21 14:49 - 2013-10-22 14:52 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-21 14:49 - 2013-10-21 22:08 - 00000000 ____D C:\Users\win7\AppData\Roaming\Systweak
2013-10-21 14:49 - 2013-10-21 14:49 - 00003918 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA
2013-10-21 14:49 - 2013-10-21 14:49 - 00003666 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore
2013-10-21 14:49 - 2013-10-21 14:49 - 00003384 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2013-10-21 14:49 - 2013-10-21 14:49 - 00003224 _____ C:\Windows\System32\Tasks\DigitalSite
2013-10-21 14:49 - 2013-10-21 14:49 - 00000967 _____ C:\Users\win7\Desktop\MiPony.lnk
2013-10-21 14:49 - 2013-10-21 14:49 - 00000967 _____ C:\Users\Gast\Desktop\MiPony.lnk
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiPony
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BonanzaDeals
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Roaming\DigitalSite
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Local\BonanzaDealsLive
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\ProgramData\Babylon
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Program Files (x86)\MiPony
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-10-21 14:49 - 2013-07-22 16:07 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2013-10-21 14:48 - 2013-10-21 14:48 - 00707880 _____ C:\Users\Franzi\Downloads\DownloadManagerSetup.exe
2013-10-16 15:29 - 2013-10-16 15:29 - 00236648 _____ (Big Fish Games) C:\Users\Franzi\Downloads\fitness-bustle-energieschub_s2_l2_gF6445T1L2_d2178203378.exe
2013-10-14 15:57 - 2013-10-14 15:58 - 00000000 ____D C:\Program Files\GIMP 2
2013-10-14 15:42 - 2013-10-14 15:42 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\PearlMountain
2013-10-14 15:41 - 2013-10-14 15:41 - 00000630 _____ C:\Users\Public\Desktop\CollageIt.lnk
2013-10-14 15:41 - 2013-10-14 15:41 - 00000000 ____D C:\Users\win7\AppData\Roaming\PearlMountain
2013-10-14 15:41 - 2013-10-14 15:41 - 00000000 ____D C:\Users\Public\Documents\PearlMountain
2013-10-14 15:41 - 2013-10-14 15:41 - 00000000 ____D C:\ProgramData\PearlMountain
2013-10-14 15:41 - 2013-10-14 15:41 - 00000000 ____D C:\CollageIt
2013-10-14 15:39 - 2013-10-14 15:39 - 08728328 _____ (PearlMountain Technology Co., Ltd                           ) C:\Users\Franzi\Downloads\Collage192It.exe
2013-10-11 22:30 - 2013-10-11 22:30 - 11216789 _____ C:\Users\Franzi\Downloads\WhatsApp.apk
2013-10-11 22:10 - 2013-10-11 22:11 - 00001721 _____ C:\Users\Franzi\Documents\Open Ofiice.odb
2013-10-11 22:09 - 2013-10-11 22:09 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\OpenOffice
2013-10-11 22:08 - 2013-10-11 22:08 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-10-11 22:07 - 2013-10-11 22:08 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-10-11 22:06 - 2013-10-11 22:06 - 00000000 ____D C:\Users\win7\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-10-11 22:04 - 2013-10-11 22:06 - 163606685 _____ C:\Users\Franzi\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2013-10-10 21:14 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-10 21:14 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-10 21:14 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-10 21:14 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-10 21:14 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-10 21:14 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-10 21:14 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-10 21:14 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-10 21:14 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-10 21:14 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-10 21:14 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-10 21:14 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-10 21:14 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-10 21:14 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-10 21:14 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-10 21:14 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-10 21:14 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-10 21:14 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-10 21:14 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-10 21:14 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-10 21:14 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-10 21:14 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-10 21:13 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-10 21:13 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-10 21:13 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-10 21:13 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-10 21:13 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-10 21:13 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-10 21:13 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-10 21:13 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-10 21:13 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-10 06:52 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-10 06:52 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-10 06:52 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-10 06:52 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-10 06:52 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-10 06:52 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-10 06:52 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-10 06:52 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-10 06:52 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-10 06:52 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-10 06:52 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-10 06:52 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-10 06:52 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-10 06:52 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-10 06:52 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-10 06:52 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-10 06:52 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-10 06:52 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-10 06:52 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-10 06:52 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 06:52 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-10 06:52 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 06:52 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-10 06:52 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 06:52 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-10 06:52 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-10 06:52 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-10 06:52 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 06:52 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-10 06:52 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 06:52 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 06:52 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 06:52 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-10 06:52 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-10 06:52 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-10 06:52 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 06:52 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-10 06:52 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-10 06:52 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-10 06:52 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 06:52 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-10 06:52 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-10 06:51 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-10 06:51 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-10 06:51 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 06:51 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-03 10:51 - 2013-10-03 10:51 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2013-10-02 14:22 - 2013-10-02 14:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-01 17:32 - 2013-10-17 15:47 - 00002155 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-01 17:31 - 2013-10-26 22:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-01 17:31 - 2013-10-26 21:46 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-01 17:31 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Local\Google
2013-10-01 17:31 - 2013-10-08 19:37 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-01 17:31 - 2013-10-08 19:37 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-01 17:31 - 2013-10-01 17:32 - 00000000 ____D C:\Users\Franzi\AppData\Local\Google
2013-10-01 17:31 - 2013-10-01 17:32 - 00000000 ____D C:\Program Files (x86)\Google

==================== One Month Modified Files and Folders =======

2013-10-26 22:49 - 2013-10-22 12:49 - 00000095 _____ C:\Users\win7\AppData\Roaming\WB.CFG
2013-10-26 22:49 - 2013-10-22 12:49 - 00000006 _____ C:\Users\win7\AppData\Roaming\WBPU-TTL.DAT
2013-10-26 22:49 - 2013-10-21 14:49 - 00000288 _____ C:\Windows\Tasks\DigitalSite.job
2013-10-26 22:48 - 2013-10-26 22:48 - 01956160 _____ (Farbar) C:\Users\win7\Downloads\FRST64.exe
2013-10-26 22:48 - 2013-10-26 22:48 - 00000000 ____D C:\FRST
2013-10-26 22:47 - 2013-07-31 19:27 - 00000000 ____D C:\Users\win7\AppData\Roaming\Skype
2013-10-26 22:42 - 2013-10-01 17:31 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-26 22:30 - 2013-10-26 22:30 - 00050477 _____ C:\Users\win7\Downloads\Defogger.exe
2013-10-26 22:30 - 2013-10-26 22:30 - 00000470 _____ C:\Users\win7\Downloads\defogger_disable.log
2013-10-26 22:30 - 2013-10-26 22:30 - 00000000 _____ C:\Users\win7\defogger_reenable
2013-10-26 22:30 - 2013-07-31 19:11 - 00000416 _____ C:\Windows\Tasks\Packard Bell Registration - Reminder Recall task.job
2013-10-26 22:30 - 2013-07-29 19:12 - 00000000 ____D C:\Users\win7
2013-10-26 22:07 - 2013-10-26 22:07 - 00000000 ____D C:\Users\win7\AppData\Roaming\Avira
2013-10-26 22:05 - 2013-08-25 15:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-26 22:02 - 2013-10-26 22:02 - 00000000 ____D C:\ProgramData\Avira
2013-10-26 22:02 - 2013-10-26 22:02 - 00000000 ____D C:\Program Files (x86)\Avira
2013-10-26 22:00 - 2013-10-26 21:58 - 123853152 _____ C:\Users\win7\Downloads\avira_free_antivirus_de.exe
2013-10-26 21:54 - 2013-10-21 14:49 - 00000922 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2013-10-26 21:54 - 2009-07-14 06:45 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-26 21:54 - 2009-07-14 06:45 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-26 21:53 - 2013-07-30 04:06 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-10-26 21:53 - 2013-07-30 04:06 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-10-26 21:53 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-26 21:51 - 2013-07-29 18:13 - 01893345 _____ C:\Windows\WindowsUpdate.log
2013-10-26 21:49 - 2013-10-21 14:49 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-26 21:49 - 2013-07-29 19:13 - 00000000 ___RD C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-26 21:46 - 2013-10-21 14:49 - 00000918 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2013-10-26 21:46 - 2013-10-01 17:31 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-26 21:46 - 2013-08-25 15:23 - 00015970 _____ C:\Windows\setupact.log
2013-10-26 21:46 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-26 21:40 - 2013-07-31 19:33 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\Skype
2013-10-26 20:35 - 2013-10-23 20:38 - 00000000 ____D C:\Users\Franzi\.gimp-2.8
2013-10-26 19:03 - 2013-10-26 19:03 - 00001074 _____ C:\Users\Franzi\Desktop\GIMP 2.lnk
2013-10-25 20:56 - 2013-09-08 15:26 - 00000000 ____D C:\Users\Franzi\AppData\Local\Adobe
2013-10-25 20:54 - 2013-10-25 20:54 - 00000000 ____D C:\ProgramData\FLEXnet
2013-10-25 20:54 - 2013-07-31 19:35 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\Adobe
2013-10-24 16:31 - 2013-08-26 22:16 - 00000000 ____D C:\Users\Franzi\AppData\Local\CrashDumps
2013-10-23 20:38 - 2013-07-31 19:32 - 00000000 ____D C:\Users\Franzi
2013-10-23 20:37 - 2013-10-23 20:37 - 00000000 ____D C:\Users\Franzi\AppData\Local\gegl-0.2
2013-10-22 14:52 - 2013-10-21 14:49 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-21 22:08 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Roaming\Systweak
2013-10-21 19:12 - 2013-10-21 19:12 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\Systweak
2013-10-21 14:49 - 2013-10-21 14:49 - 00003918 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA
2013-10-21 14:49 - 2013-10-21 14:49 - 00003666 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore
2013-10-21 14:49 - 2013-10-21 14:49 - 00003384 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2013-10-21 14:49 - 2013-10-21 14:49 - 00003224 _____ C:\Windows\System32\Tasks\DigitalSite
2013-10-21 14:49 - 2013-10-21 14:49 - 00000967 _____ C:\Users\win7\Desktop\MiPony.lnk
2013-10-21 14:49 - 2013-10-21 14:49 - 00000967 _____ C:\Users\Gast\Desktop\MiPony.lnk
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiPony
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BonanzaDeals
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Roaming\DigitalSite
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Users\win7\AppData\Local\BonanzaDealsLive
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\ProgramData\Babylon
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Program Files (x86)\MiPony
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-10-21 14:49 - 2013-10-21 14:49 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-10-21 14:49 - 2013-10-01 17:31 - 00000000 ____D C:\Users\win7\AppData\Local\Google
2013-10-21 14:48 - 2013-10-21 14:48 - 00707880 _____ C:\Users\Franzi\Downloads\DownloadManagerSetup.exe
2013-10-19 09:16 - 2013-07-29 19:13 - 00065104 _____ C:\Users\win7\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-17 15:47 - 2013-10-01 17:32 - 00002155 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-16 15:29 - 2013-10-16 15:29 - 00236648 _____ (Big Fish Games) C:\Users\Franzi\Downloads\fitness-bustle-energieschub_s2_l2_gF6445T1L2_d2178203378.exe
2013-10-14 15:58 - 2013-10-14 15:57 - 00000000 ____D C:\Program Files\GIMP 2
2013-10-14 15:42 - 2013-10-14 15:42 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\PearlMountain
2013-10-14 15:41 - 2013-10-14 15:41 - 00000630 _____ C:\Users\Public\Desktop\CollageIt.lnk
2013-10-14 15:41 - 2013-10-14 15:41 - 00000000 ____D C:\Users\win7\AppData\Roaming\PearlMountain
2013-10-14 15:41 - 2013-10-14 15:41 - 00000000 ____D C:\Users\Public\Documents\PearlMountain
2013-10-14 15:41 - 2013-10-14 15:41 - 00000000 ____D C:\ProgramData\PearlMountain
2013-10-14 15:41 - 2013-10-14 15:41 - 00000000 ____D C:\CollageIt
2013-10-14 15:39 - 2013-10-14 15:39 - 08728328 _____ (PearlMountain Technology Co., Ltd                           ) C:\Users\Franzi\Downloads\Collage192It.exe
2013-10-14 15:33 - 2009-07-14 06:45 - 00299304 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-13 19:01 - 2013-07-31 19:33 - 00065104 _____ C:\Users\Franzi\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-12 03:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-11 22:30 - 2013-10-11 22:30 - 11216789 _____ C:\Users\Franzi\Downloads\WhatsApp.apk
2013-10-11 22:11 - 2013-10-11 22:10 - 00001721 _____ C:\Users\Franzi\Documents\Open Ofiice.odb
2013-10-11 22:09 - 2013-10-11 22:09 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\OpenOffice
2013-10-11 22:08 - 2013-10-11 22:08 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-10-11 22:08 - 2013-10-11 22:07 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-10-11 22:06 - 2013-10-11 22:06 - 00000000 ____D C:\Users\win7\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-10-11 22:06 - 2013-10-11 22:04 - 163606685 _____ C:\Users\Franzi\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2013-10-11 22:06 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-10-11 13:55 - 2013-07-31 19:26 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-11 13:55 - 2013-07-31 19:22 - 00000000 ____D C:\ProgramData\Skype
2013-10-10 21:12 - 2013-08-01 00:12 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-10 21:12 - 2013-08-01 00:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-10 21:09 - 2013-08-25 15:20 - 00000000 ____D C:\Windows\system32\MRT
2013-10-10 21:08 - 2013-08-25 15:19 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-10 19:14 - 2013-10-26 22:02 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-10 19:14 - 2013-10-26 22:02 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-10 19:14 - 2013-10-26 22:02 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-10-10 19:14 - 2013-10-26 22:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-10-10 07:05 - 2013-08-25 15:16 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-10 07:05 - 2013-08-25 15:16 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-10 07:05 - 2013-08-25 15:16 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 19:37 - 2013-10-01 17:31 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-08 19:37 - 2013-10-01 17:31 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-06 11:32 - 2009-07-14 07:08 - 00032602 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-05 20:42 - 2013-09-09 10:22 - 00001986 _____ C:\Users\Public\Desktop\Adobe Reader 9.lnk
2013-10-03 10:51 - 2013-10-03 10:51 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2013-10-03 09:23 - 2013-08-25 15:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-02 23:02 - 2013-08-25 15:31 - 00000000 ____D C:\Users\Franzi\AppData\Local\Mozilla
2013-10-02 14:22 - 2013-10-02 14:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-02 12:40 - 2013-08-25 15:22 - 00233462 _____ C:\Windows\PFRO.log
2013-10-01 17:32 - 2013-10-01 17:31 - 00000000 ____D C:\Users\Franzi\AppData\Local\Google
2013-10-01 17:32 - 2013-10-01 17:31 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-26 16:49 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

Some content of TEMP:
====================
C:\Users\Franzi\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Franzi\AppData\Local\Temp\drm_dyndata_7320010.dll
C:\Users\Franzi\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\win7\AppData\Local\Temp\avgnt.exe
C:\Users\win7\AppData\Local\Temp\BackupSetup.exe
C:\Users\win7\AppData\Local\Temp\bdfilters.dll
C:\Users\win7\AppData\Local\Temp\ccleaner.exe
C:\Users\win7\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-22 19:29

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-10-2013 01
Ran by win7 at 2013-10-26 22:50:17
Running from C:\Users\win7\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 1.5.0.7220)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Photoshop Elements 8.0 (x32 Version: 8.0)
Adobe Reader 9.5.5 MUI (x32 Version: 9.5.5)
Advertising Center (x32 Version: 0.0.0.2)
Alcor Micro USB Card Reader (x32 Version: 1.4.17.35005)
ALPS Touch Pad Driver (Version: 7.105.2015.1105)
ATI Catalyst Install Manager (Version: 3.0.758.0)
Avira Free Antivirus (x32 Version: 14.0.0.411)
Bandicam (x32 Version: 1.9.0.397)
Bandisoft MPEG-1 Decoder (x32)
Bonanza Deals (remove only) (x32 Version: 5.0.1.0)
Broadcom Gigabit NetLink Controller (Version: 14.2.4.2)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2010.0122.858.16002)
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0122.858.16002)
Catalyst Control Center Graphics Full New (x32 Version: 2010.0122.858.16002)
Catalyst Control Center Graphics Light (x32 Version: 2010.0122.858.16002)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0122.858.16002)
Catalyst Control Center InstallProxy (x32 Version: 2010.0122.858.16002)
Catalyst Control Center Localization All (x32 Version: 2010.0122.858.16002)
CCC Help Chinese Standard (x32 Version: 2010.0122.0857.16002)
CCC Help Chinese Traditional (x32 Version: 2010.0122.0857.16002)
CCC Help Czech (x32 Version: 2010.0122.0857.16002)
CCC Help Danish (x32 Version: 2010.0122.0857.16002)
CCC Help Dutch (x32 Version: 2010.0122.0857.16002)
CCC Help English (x32 Version: 2010.0122.0857.16002)
CCC Help Finnish (x32 Version: 2010.0122.0857.16002)
CCC Help French (x32 Version: 2010.0122.0857.16002)
CCC Help German (x32 Version: 2010.0122.0857.16002)
CCC Help Greek (x32 Version: 2010.0122.0857.16002)
CCC Help Hungarian (x32 Version: 2010.0122.0857.16002)
CCC Help Italian (x32 Version: 2010.0122.0857.16002)
CCC Help Japanese (x32 Version: 2010.0122.0857.16002)
CCC Help Korean (x32 Version: 2010.0122.0857.16002)
CCC Help Norwegian (x32 Version: 2010.0122.0857.16002)
CCC Help Polish (x32 Version: 2010.0122.0857.16002)
CCC Help Portuguese (x32 Version: 2010.0122.0857.16002)
CCC Help Russian (x32 Version: 2010.0122.0857.16002)
CCC Help Spanish (x32 Version: 2010.0122.0857.16002)
CCC Help Swedish (x32 Version: 2010.0122.0857.16002)
CCC Help Thai (x32 Version: 2010.0122.0857.16002)
CCC Help Turkish (x32 Version: 2010.0122.0857.16002)
ccc-core-static (x32 Version: 2010.0122.858.16002)
ccc-utility64 (Version: 2010.0122.858.16002)
CCleaner (Version: 4.04)
CollageIt 1.9.2 (x32 Version: 1.9.2)
CyberLink PowerDVD 8 (x32 Version: 8.0.3726.50)
Die Sims™ 2 Deluxe (x32)
GIMP 2.8.6 (Version: 2.8.6)
Google Chrome (x32 Version: 30.0.1599.101)
Google Update Helper (x32 Version: 1.3.21.165)
ImagXpress (x32 Version: 7.0.74.0)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002)
Junk Mail filter update (x32 Version: 14.0.8089.726)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MiPony 2.0.2 (x32 Version: 2.0.2)
Mipony Download Manager Packages (HKCU)
Mobile Broadband HL Service (x32 Version: 22.001.10.00.03)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nero 9 Essentials (x32)
Nero ControlCenter (x32 Version: 9.0.0.1)
Nero DiscSpeed (x32 Version: 5.4.13.100)
Nero DiscSpeed Help (x32 Version: 5.4.4.100)
Nero DriveSpeed (x32 Version: 4.4.12.100)
Nero DriveSpeed Help (x32 Version: 4.4.4.100)
Nero Express Help (x32 Version: 9.4.37.100)
Nero InfoTool (x32 Version: 6.4.12.100)
Nero InfoTool Help (x32 Version: 6.4.4.100)
Nero Installer (x32 Version: 4.4.9.0)
Nero Online Upgrade (x32 Version: 1.3.0.0)
Nero StartSmart (x32 Version: 9.4.37.100)
Nero StartSmart Help (x32 Version: 9.4.27.100)
Nero StartSmart OEM (x32 Version: 9.4.10.100)
NeroExpress (x32 Version: 9.4.37.100)
neroxml (x32 Version: 1.0.0)
OpenOffice 4.0.1 (x32 Version: 4.01.9714)
Packard Bell Power Management (x32 Version: 4.05.3007)
Packard Bell Recovery Management (x32 Version: 4.05.3013)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5969)
Skype™ 6.9 (x32 Version: 6.9.106)
Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.6)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Mipony Download Manager (HKCU)
Whilokii 1.0.0 (Version: 1.0.0)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Movie Maker (x32 Version: 14.0.8091.0730)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)

==================== Restore Points  =========================

08-10-2013 12:24:17 Windows Update
10-10-2013 19:05:02 Windows Update
11-10-2013 20:07:32 OpenOffice 4.0.1 wird installiert
15-10-2013 12:14:20 Windows Update
18-10-2013 15:42:37 Windows Update
22-10-2013 10:37:04 Windows Update
25-10-2013 07:56:10 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05EF5137-60AC-4BD3-92B9-DD3C1690AAED} - System32\Tasks\{0F378DF8-5FEB-4C4A-B2F9-7FB9B205798B} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=4.1.0.179.370&LastError=404
Task: {2EB8AF70-D070-46E6-862A-02F681D413EB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)
Task: {5FA2EDB0-D7CC-4E9A-96CA-34585AE0170D} - System32\Tasks\{B863B783-A619-4D09-B3B7-66FCD06F883F} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=4.1.0.179.370&LastError=404
Task: {6B15DF2F-7D42-43B2-B741-EE15EF3DDE0A} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [2013-10-21] (BonanzaDeals)
Task: {78D14FE1-E3A2-4F63-9F00-8659BAEAECFF} - System32\Tasks\{32FB9247-6C51-4AE4-A269-AB0A15746D19} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=4.1.0.179.370&LastError=404
Task: {8790980F-6AD4-4312-A7C1-202DBE963B4C} - System32\Tasks\{0939EEF8-B2AC-4D53-9163-5AB28E2D94C0} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=4.1.0.179.370&LastError=404
Task: {96C8CF4E-529B-4A75-99D9-32F0A13E0456} - System32\Tasks\DigitalSite => C:\Users\win7\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {A10134EF-8D5F-457F-8DA0-2976A2F25957} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {B8FE6874-C954-430C-A719-33EBCDA98148} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-07-22] (Piriform Ltd)
Task: {C934E86B-FD6E-4A66-AD3C-C037AD021FD4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-01] (Google Inc.)
Task: {D09B5378-CF17-4A94-943C-631B0B8560FF} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [2013-10-21] (BonanzaDeals)
Task: {D1A6EDB8-2B40-4D9D-AADA-3CC99AACA759} - System32\Tasks\{559D9CA1-6581-4313-B4E8-0818A810C811} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=4.1.0.179.370&LastError=404
Task: {EDC0D937-070C-4068-A3CB-34E5D298D2E2} - System32\Tasks\BonanzaDealsUpdate => C:\Program
Task: {EECB3DA4-569A-47AB-BCA0-3B09D39B4EEF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-01] (Google Inc.)
Task: {FF31B459-C324-470B-B72C-E9F25FB93FA4} - System32\Tasks\Packard Bell Registration - Reminder Recall task => C:\Program Files (x86)\Packard Bell\Registration\GREG.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe
Task: C:\Windows\Tasks\DigitalSite.job => C:\Users\win7\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Packard Bell Registration - Reminder Recall task.job => C:\Program Files (x86)\Packard Bell\Registration\GREG.exe

==================== Loaded Modules (whitelisted) =============

2010-01-07 14:42 - 2010-01-07 14:42 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-07-29 18:20 - 2013-07-29 18:20 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-10-23 15:09 - 2013-10-23 15:09 - 00337920 _____ () C:\Program Files (x86)\Whilokii\bin\sqlite3.DLL
2013-10-26 22:02 - 2013-10-10 19:14 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-10-17 15:47 - 2013-10-09 02:01 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libglesv2.dll
2013-10-17 15:47 - 2013-10-09 02:01 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libegl.dll
2013-10-17 15:47 - 2013-10-09 02:02 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll
2013-10-17 15:47 - 2013-10-09 02:02 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll
2013-10-17 15:47 - 2013-10-09 02:01 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ffmpegsumo.dll
2013-10-17 15:47 - 2013-10-09 02:02 - 13584336 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\win7\Downloads\Fw_BESTATIGUNG_RESERVATION.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/26/2013 01:26:13 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (10/26/2013 01:25:55 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (10/24/2013 04:31:03 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PXStudioRuntimeMMO.exe, Version: 0.0.0.0, Zeitstempel: 0x5267cc72
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0xfffd9019
ID des fehlerhaften Prozesses: 0x11e0
Startzeit der fehlerhaften Anwendung: 0xPXStudioRuntimeMMO.exe0
Pfad der fehlerhaften Anwendung: PXStudioRuntimeMMO.exe1
Pfad des fehlerhaften Moduls: PXStudioRuntimeMMO.exe2
Berichtskennung: PXStudioRuntimeMMO.exe3

Error: (10/23/2013 06:55:58 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (10/23/2013 06:55:44 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (10/22/2013 07:30:46 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (10/22/2013 07:30:31 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (10/21/2013 07:12:32 PM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 7cc

Startzeit: 01cece809f84f085

Endzeit: 0

Anwendungspfad: C:\Windows\Explorer.EXE

Berichts-ID: f0fa7e50-3a73-11e3-9cc6-00262d6c6c7c

Error: (10/20/2013 02:21:18 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PXStudioRuntimeMMO.exe, Version: 0.0.0.0, Zeitstempel: 0x525e5547
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x83fffd8a
ID des fehlerhaften Prozesses: 0x137c
Startzeit der fehlerhaften Anwendung: 0xPXStudioRuntimeMMO.exe0
Pfad der fehlerhaften Anwendung: PXStudioRuntimeMMO.exe1
Pfad des fehlerhaften Moduls: PXStudioRuntimeMMO.exe2
Berichtskennung: PXStudioRuntimeMMO.exe3

Error: (10/20/2013 00:05:33 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.


System errors:
=============
Error: (10/26/2013 09:48:56 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Computer Backup (MyPC Backup)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/25/2013 01:50:50 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (10/25/2013 09:57:24 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800f020b fehlgeschlagen: Google, Inc. - Other hardware - Alcatel Android ADB Interface

Error: (10/23/2013 09:04:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Server" wurde mit folgendem Fehler beendet: 
%%1062

Error: (10/23/2013 09:04:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" wurde mit folgendem Fehler beendet: 
%%1115

Error: (10/21/2013 04:00:10 PM) (Source: WMPNetworkSvc) (User: )
Description: 0x80004004-1

Error: (10/20/2013 09:49:15 PM) (Source: WMPNetworkSvc) (User: )
Description: 0x80004004-1

Error: (10/20/2013 04:07:07 PM) (Source: WMPNetworkSvc) (User: )
Description: 0x80004004-1

Error: (10/20/2013 00:45:02 PM) (Source: WMPNetworkSvc) (User: )
Description: 0x80004004-1

Error: (10/17/2013 11:51:41 PM) (Source: WMPNetworkSvc) (User: )
Description: 0x80004004-1


Microsoft Office Sessions:
=========================
Error: (10/26/2013 01:26:13 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (10/26/2013 01:25:55 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (10/24/2013 04:31:03 PM) (Source: Application Error)(User: )
Description: PXStudioRuntimeMMO.exe0.0.0.05267cc72unknown0.0.0.000000000c0000005fffd901911e001ced0c0ec18cfccC:\Users\Public\StarStableOnline\PXStudioRuntimeMMO.exeunknowne8ba094c-3cb8-11e3-8549-00262d6c6c7c

Error: (10/23/2013 06:55:58 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (10/23/2013 06:55:44 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (10/22/2013 07:30:46 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (10/22/2013 07:30:31 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (10/21/2013 07:12:32 PM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.1.7601.175677cc01cece809f84f0850C:\Windows\Explorer.EXEf0fa7e50-3a73-11e3-9cc6-00262d6c6c7c

Error: (10/20/2013 02:21:18 PM) (Source: Application Error)(User: )
Description: PXStudioRuntimeMMO.exe0.0.0.0525e5547unknown0.0.0.000000000c000000583fffd8a137c01cecd88899b01faC:\Users\Public\StarStableOnline\PXStudioRuntimeMMO.exeunknown1ebdcf88-3982-11e3-9a3d-00262d6c6c7c

Error: (10/20/2013 00:05:33 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8


==================== Memory info =========================== 

Percentage of memory in use: 47%
Total physical RAM: 3956.5 MB
Available physical RAM: 2059.26 MB
Total Pagefile: 7911.18 MB
Available Pagefile: 5392.77 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:298.09 GB) (Free:238.96 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (Familienfotos) (Fixed) (Total:931.51 GB) (Free:819.81 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 221F6CFD)
Partition 1: (Active) - (Size=298 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E11055CE)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-26 23:08:33
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Hitachi_ rev.PB3O 298,09GB
Running: gvongugj.exe; Driver: C:\Users\win7\AppData\Local\Temp\kxldqpod.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                 fffff80003207000 76 bytes [0F, B7, C0, 41, 8B, CC, 2B, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 606                 fffff8000320704e 23 bytes {MOV [RSP+0x58], EAX; JMP 0xa}

---- Threads - GMER 2.1 ----

Thread    C:\Windows\System32\svchost.exe [1784:948]                                         000007fef1829688

---- Registry - GMER 2.1 ----

Reg       HKLM\SYSTEM\CurrentControlSet\Control\Session Manager@PendingFileRenameOperations  ????????tunnel????????????????????????H?????????????????? ??? ???????-???????????+????????????d1$???????????????????88??????Net??????????????t???|????*??????t??????????????????????????tu???????????????????a???????t????n??????t????h?????????????????????????volsnap.inf:MSFT.NTamd64:volume_snapshot_install:6.1.7600.16385:storage\volumesnapshot??????????????????????????????????????????????????????????????????????????????????????????????????24??????????????????????????????????????????????????????????????????????????????????6.1.7600.16385??????????2}????????????????????:?????????????Standard-Volumeschattenkopie????????37??????????????????????????????????volsnap.inf?????????{0????????????????????0?????????????volume_snapshot_install?????????????????????????????????????????????.NTAMD64??????????????????????????????.?????????????storage\volumesnapshot??????????00??????????????????????????????????Microsoft???????????????????????????????????????????????????H????????????????????????????????????????????????????h????"????

---- EOF - GMER 2.1 ----