win7 bei jedem Programmstart "ungültiges Bild"

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 10:45 on 30/10/2013 (BueroTobias)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-10-2013
Ran by BueroTobias (administrator) on BUEROTOBIAS-PC on 30-10-2013 11:13:15
Running from C:\Users\BueroTobias\Desktop
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G Data\AntiVirus\AVK\AVKWCtl.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\AntiVirus\AVK\AVKService.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe
(Ralink Technology, Corp.) C:\Program Files\Edimax\Common\RaRegistry.exe
(VMware, Inc.) C:\Program Files\VMware\VMware Tools\vmtoolsd.exe
(AMD) C:\Windows\system32\atieclxx.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe
(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe
(Nuance Communications, Inc.) C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
(OLYMPUS IMAGING CORP.) C:\Program Files\Olympus\ib\olycamdetect.exe
(VMware, Inc.) C:\Program Files\VMware\VMware Tools\vmtoolsd.exe
(G Data Software AG) C:\Program Files\G Data\AntiVirus\AVKTray\AVKTray.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Akamai Technologies, Inc.) C:\Users\BueroTobias\AppData\Local\Akamai\netsession_win.exe
(Smartbar) C:\Users\BueroTobias\AppData\Local\Smartbar\Application\SnapDo.exe
() C:\Program Files\Gomez\GomezPEER\bin\GomezPEER.exe
(Edimax Technology Co., Ltd.) C:\Program Files\Edimax\Common\RaUI.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
(Akamai Technologies, Inc.) C:\Users\BueroTobias\AppData\Local\Akamai\netsession_win.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Sun Microsystems, Inc.) C:\PROGRA~1\Gomez\GOMEZP~1\jre\bin\java.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [FreePDF Assistant] - C:\Program Files\FreePDF_XP\fpassist.exe [373760 2013-03-14] (shbox.de)
HKLM\...\Run: [SSBkgdUpdate] - C:\Program Files\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM\...\Run: [PaperPort PTD] - C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [29984 2008-07-09] (Nuance Communications, Inc.)
HKLM\...\Run: [IndexSearch] - C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [46368 2008-07-09] (Nuance Communications, Inc.)
HKLM\...\Run: [PPort11reminder] - C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.)
HKLM\...\Run: [BrMfcWnd] - C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM\...\Run: [ControlCenter3] - C:\Program Files\Brother\ControlCenter3\BrCtrCen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7711264 2009-08-18] (Realtek Semiconductor)
HKLM\...\Run: [MDS_Menu] - C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe [220336 2010-07-01] (CyberLink Corp.)
HKLM\...\Run: [Olympus ib] - C:\Program Files\Olympus\ib\olycamdetect.exe [93360 2010-09-30] (OLYMPUS IMAGING CORP.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [VMware User Process] - C:\Program Files\VMware\VMware Tools\vmtoolsd.exe [63056 2013-02-25] (VMware, Inc.)
HKLM\...\Run: [G Data AntiVirus Tray] - C:\Program Files\G Data\AntiVirus\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKCU\...\Run: [Olympus ib] - C:\Program Files\Olympus\ib\olycamdetect.exe [93360 2010-09-30] (OLYMPUS IMAGING CORP.)
HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20133824 2013-09-25] (Google)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\BueroTobias\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\BueroTobias\AppData\Local\Smartbar\Application\SnapDo.exe [21024 2013-10-08] (Smartbar)
HKCU\...0c966feabec1\InprocServer32: [Default-shell32]  ATTENTION! ====> ZeroAccess?
HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
AppInit_DLLs: c:\progra~1\browse~1\sprote~1.dll [ 2013-10-29] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=dfb1750d-37ea-9fef-d55f-876c9d625e96&searchtype=ds&q={searchTerms}&installDate=14/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=dfb1750d-37ea-9fef-d55f-876c9d625e96&searchtype=hp&installDate=14/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0B4A79611328CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=dfb1750d-37ea-9fef-d55f-876c9d625e96&searchtype=ds&q={searchTerms}&installDate=14/10/2013
URLSearchHook: HKLM - (No Name) - {ebd898f8-fcf6-4694-bc3b-eabc7271eeb1} -  No File
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=dfb1750d-37ea-9fef-d55f-876c9d625e96&searchtype=ds&q={searchTerms}&installDate=14/10/2013
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=dfb1750d-37ea-9fef-d55f-876c9d625e96&searchtype=ds&q={searchTerms}&installDate=14/10/2013
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=dfb1750d-37ea-9fef-d55f-876c9d625e96&searchtype=ds&q={searchTerms}&installDate=14/10/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=dfb1750d-37ea-9fef-d55f-876c9d625e96&searchtype=ds&q={searchTerms}&installDate=14/10/2013
BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: No Name - {ebd898f8-fcf6-4694-bc3b-eabc7271eeb1} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} -  No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {EBD898F8-FCF6-4694-BC3B-EABC7271EEB1} -  No File
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog5 01 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 05 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Hosts: 127.0.0.1 validation.sls.microsoft.com
Tcpip\..\Interfaces\{7C57D007-7865-489C-9782-152CAB3B3E57}: [NameServer]192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\BueroTobias\AppData\Roaming\Mozilla\Firefox\Profiles\0giew5sv.default
FF NewTab: hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=dfb1750d-37ea-9fef-d55f-876c9d625e96&searchtype=nt&installDate=14/10/2013
FF DefaultSearchEngine: Web Search
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF SelectedSearchEngine: Web Search
FF Homepage: hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=dfb1750d-37ea-9fef-d55f-876c9d625e96&searchtype=hp&installDate=14/10/2013
FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=dfb1750d-37ea-9fef-d55f-876c9d625e96&searchtype=ds&installDate=14/10/2013&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @eleco.com/o2cplayer - C:\Program Files\Eleco\o2c Player\npO2CPlayer.DLL (ELECO Software GmbH)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @lexoview.com/internet viewer;version=19 - C:\Program Files\internet viewer\npInternetViewer.dll (cadwork informatik)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\BueroTobias\AppData\Roaming\Mozilla\Firefox\Profiles\0giew5sv.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Bruoywse2savee - C:\Users\BueroTobias\AppData\Roaming\Mozilla\Firefox\Profiles\0giew5sv.default\Extensions\aa.wo@eeara.edu
FF Extension: EbookBrOuwosE - C:\Users\BueroTobias\AppData\Roaming\Mozilla\Firefox\Profiles\0giew5sv.default\Extensions\ioeeia@dxkiaoi.org
FF Extension: Snap.Do  - C:\Users\BueroTobias\AppData\Roaming\Mozilla\Firefox\Profiles\0giew5sv.default\Extensions\{dfb1750d-37ea-9fef-d55f-876c9d625e96}

Chrome: 
=======
CHR Extension: (Bruoywse2savee) - C:\Users\BUEROT~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\indiagcnecpbildfcoocpgbebjbhaaln\1
CHR Extension: (EbookBrOuwosE) - C:\Users\BUEROT~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdgpfadamjapopmaingipchjnkbpdpgm\1

========================== Services (Whitelisted) =================

R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\AntiVirus\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G Data\AntiVirus\AVK\AVKWCtl.exe [2101280 2013-10-15] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
R2 MotoHelper; C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe [214896 2011-12-06] ()
R2 RalinkRegistryWriter; C:\Program Files\Edimax\Common\RaRegistry.exe [185632 2009-07-14] (Ralink Technology, Corp.)
S3 TPAutoConnSvc; C:\Program Files\VMware\VMware Tools\TPAutoConnSvc.exe [378192 2012-05-01] (Cortado AG)
S3 TPVCGateway; C:\Program Files\VMware\VMware Tools\TPVCGateway.exe [406864 2012-05-01] (Cortado AG)
S2 Akamai; C:/Program Files/Common Files/Akamai/netsession_win_4f7fccd.dll [x]
S2 SN_Service; C:\Program Files\ASBYTE\SYNCING.NET\bin\SN_Service.exe [x]

==================== Drivers (Whitelisted) ====================

S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [45912 2013-10-30] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [96600 2013-10-30] (G Data Software AG)
S3 GdNetMon; C:\Windows\system32\drivers\GdNetMon32.sys [29400 2011-07-20] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [52056 2013-10-30] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [54104 2013-10-30] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [30416 2012-05-22] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [51032 2013-10-30] (G Data Software AG)
S3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [20992 2006-11-02] (Microsoft Corporation)
S3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [746496 2009-07-03] (Ralink Technology Corp.)
S3 OlyCamComm; C:\Windows\System32\DRIVERS\OlyCamComm.sys [21648 2009-09-10] (OLYMPUS IMAGING CORP.)
R2 VMMEMCTL; C:\Program Files\Common Files\VMware\Drivers\memctl\vmmemctl.sys [15568 2013-02-25] (VMware, Inc.)
R3 vmusbmouse; C:\Windows\System32\DRIVERS\vmusbmouse.sys [11928 2013-02-25] (VMware, Inc.)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [61464 2012-10-24] (VMware, Inc.)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
U3 kwtirkob; \??\C:\Users\BUEROT~1\AppData\Local\Temp\kwtirkob.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-30 10:55 - 2013-10-30 10:55 - 00001262 _____ C:\Users\BueroTobias\Desktop\Gmer.txt
2013-10-30 10:45 - 2013-10-30 10:45 - 00000484 _____ C:\Users\BueroTobias\Desktop\defogger_disable.log
2013-10-30 10:45 - 2013-10-30 10:45 - 00000000 _____ C:\Users\BueroTobias\defogger_reenable
2013-10-30 10:44 - 2013-10-30 09:54 - 00050477 _____ C:\Users\BueroTobias\Desktop\Defogger.exe
2013-10-30 10:43 - 2013-10-30 09:44 - 00377856 _____ C:\Users\BueroTobias\Desktop\gmer_2.1.19163.exe
2013-10-30 10:39 - 2013-10-30 10:39 - 00007126 _____ C:\Users\BueroTobias\Desktop\G Data Protokoll ID 20161.html
2013-10-30 10:39 - 2013-10-30 10:39 - 00003734 _____ C:\Users\BueroTobias\Desktop\G Data Protokoll ID 20181.html
2013-10-30 10:02 - 2013-10-30 10:02 - 00000380 _____ C:\Windows\PFRO.log
2013-10-30 10:01 - 2013-10-30 10:01 - 00001887 _____ C:\Users\Public\Desktop\G Data AntiVirus 2014.lnk
2013-10-30 09:50 - 2013-10-30 09:50 - 00030210 _____ C:\Users\BueroTobias\Desktop\Addition.txt
2013-10-30 09:49 - 2013-10-30 09:49 - 00000000 ____D C:\FRST
2013-10-30 09:47 - 2013-10-30 09:45 - 01089275 _____ (Farbar) C:\Users\BueroTobias\Desktop\FRST.exe
2013-10-30 09:19 - 2013-10-30 09:21 - 04379048 _____ (Piriform Ltd) C:\Users\BueroTobias\Downloads\ccsetup407.exe
2013-10-15 09:32 - 2013-10-21 08:47 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-14 14:08 - 2013-10-14 14:08 - 00002405 _____ C:\Users\BueroTobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2013-10-14 14:08 - 2013-10-14 14:08 - 00002307 _____ C:\Users\BueroTobias\Desktop\Search.lnk
2013-10-14 14:08 - 2013-10-14 14:08 - 00000000 ____D C:\Users\BueroTobias\AppData\Local\Smartbar
2013-10-14 13:06 - 2013-10-14 13:06 - 01035878 _____ C:\Users\BueroTobias\Desktop\Dachwartung.zip
2013-10-14 10:20 - 2013-10-30 10:02 - 00001389 _____ C:\Windows\setupact.log
2013-10-14 10:20 - 2013-10-14 10:20 - 00000000 _____ C:\Windows\setuperr.log
2013-10-09 02:04 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 02:04 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 02:04 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-09 02:04 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 02:04 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 02:04 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 02:04 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 02:04 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 02:04 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 02:04 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 02:04 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-09 02:04 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-09 02:04 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 02:04 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-09 02:04 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 02:04 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-08 22:11 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-08 22:11 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-08 22:11 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-08 22:11 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-08 22:11 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-08 22:11 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-08 22:11 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-08 22:11 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-08 22:11 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-08 22:11 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-08 22:11 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-10-08 22:11 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-08 22:11 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-08 22:11 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-08 22:11 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-08 22:11 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-08 22:11 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-08 22:11 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 22:11 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-08 22:11 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-08 22:11 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-08 22:11 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-08 22:11 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-08 22:11 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-08 22:11 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-08 22:11 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-08 22:06 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-08 22:06 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-08 22:06 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-08 22:06 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-08 22:06 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-08 22:06 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

==================== One Month Modified Files and Folders =======

2013-10-30 10:55 - 2013-10-30 10:55 - 00001262 _____ C:\Users\BueroTobias\Desktop\Gmer.txt
2013-10-30 10:45 - 2013-10-30 10:45 - 00000484 _____ C:\Users\BueroTobias\Desktop\defogger_disable.log
2013-10-30 10:45 - 2013-10-30 10:45 - 00000000 _____ C:\Users\BueroTobias\defogger_reenable
2013-10-30 10:45 - 2010-07-07 19:39 - 00000000 ____D C:\Users\BueroTobias
2013-10-30 10:39 - 2013-10-30 10:39 - 00007126 _____ C:\Users\BueroTobias\Desktop\G Data Protokoll ID 20161.html
2013-10-30 10:39 - 2013-10-30 10:39 - 00003734 _____ C:\Users\BueroTobias\Desktop\G Data Protokoll ID 20181.html
2013-10-30 10:31 - 2013-02-28 13:56 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-30 10:19 - 2011-02-22 11:59 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-30 10:09 - 2010-02-09 20:56 - 01622012 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-30 10:07 - 2013-07-15 23:57 - 00022000 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-a289-439d-8115-601632D005A0
2013-10-30 10:07 - 2013-07-15 23:57 - 00022000 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-a289-439d-8115-601632D005A0
2013-10-30 10:05 - 2010-07-07 19:37 - 01537878 _____ C:\Windows\WindowsUpdate.log
2013-10-30 10:04 - 2013-07-22 16:57 - 00000000 ___RD C:\Users\BueroTobias\Google Drive
2013-10-30 10:03 - 2010-07-27 12:03 - 00000000 ____D C:\Users\BueroTobias\AppData\Local\FreePDF_XP
2013-10-30 10:02 - 2013-10-30 10:02 - 00000380 _____ C:\Windows\PFRO.log
2013-10-30 10:02 - 2013-10-14 10:20 - 00001389 _____ C:\Windows\setupact.log
2013-10-30 10:02 - 2013-04-09 14:53 - 00000326 _____ C:\Windows\Tasks\GlaryInitialize.job
2013-10-30 10:02 - 2011-02-22 11:59 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-30 10:02 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-30 10:02 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Registration
2013-10-30 10:01 - 2013-10-30 10:01 - 00001887 _____ C:\Users\Public\Desktop\G Data AntiVirus 2014.lnk
2013-10-30 10:01 - 2011-07-20 14:50 - 00052056 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys
2013-10-30 10:01 - 2010-07-07 14:37 - 00051032 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2013-10-30 10:01 - 2010-07-07 14:36 - 00096600 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2013-10-30 10:01 - 2010-07-07 14:36 - 00054104 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd32.sys
2013-10-30 10:01 - 2010-07-07 14:36 - 00045912 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2013-10-30 10:01 - 2010-07-07 14:36 - 00000000 ____D C:\ProgramData\G DATA
2013-10-30 10:01 - 2010-07-07 14:36 - 00000000 ____D C:\Program Files\Common Files\G Data
2013-10-30 10:01 - 2010-07-07 14:34 - 00000000 ____D C:\Users\BueroTobias\AppData\Local\Downloaded Installations
2013-10-30 09:54 - 2013-10-30 10:44 - 00050477 _____ C:\Users\BueroTobias\Desktop\Defogger.exe
2013-10-30 09:50 - 2013-10-30 09:50 - 00030210 _____ C:\Users\BueroTobias\Desktop\Addition.txt
2013-10-30 09:49 - 2013-10-30 09:49 - 00000000 ____D C:\FRST
2013-10-30 09:45 - 2013-10-30 09:47 - 01089275 _____ (Farbar) C:\Users\BueroTobias\Desktop\FRST.exe
2013-10-30 09:44 - 2013-10-30 10:43 - 00377856 _____ C:\Users\BueroTobias\Desktop\gmer_2.1.19163.exe
2013-10-30 09:28 - 2012-07-19 17:54 - 00000000 ____D C:\Program Files\CCleaner
2013-10-30 09:21 - 2013-10-30 09:19 - 04379048 _____ (Piriform Ltd) C:\Users\BueroTobias\Downloads\ccsetup407.exe
2013-10-30 09:12 - 2012-11-19 16:30 - 00000000 ____D C:\Program Files\Java
2013-10-29 16:38 - 2013-03-14 10:49 - 00000000 ____D C:\ProgramData\EbookBrOuwosE
2013-10-24 16:12 - 2010-07-20 21:50 - 00000943 _____ C:\Windows\BRWMARK.INI
2013-10-22 13:09 - 2012-07-21 17:19 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-10-21 08:47 - 2013-10-15 09:32 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-21 08:47 - 2012-07-21 17:26 - 00000000 ____D C:\Users\BueroTobias\AppData\Local\Mozilla
2013-10-14 14:08 - 2013-10-14 14:08 - 00002405 _____ C:\Users\BueroTobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2013-10-14 14:08 - 2013-10-14 14:08 - 00002307 _____ C:\Users\BueroTobias\Desktop\Search.lnk
2013-10-14 14:08 - 2013-10-14 14:08 - 00000000 ____D C:\Users\BueroTobias\AppData\Local\Smartbar
2013-10-14 14:08 - 2013-01-14 14:38 - 00000000 ____D C:\Users\BueroTobias\AppData\Roaming\MyPhoneExplorer
2013-10-14 14:06 - 2013-01-14 14:38 - 00002015 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-10-14 14:06 - 2013-01-14 14:37 - 00000000 ____D C:\Program Files\MyPhoneExplorer
2013-10-14 13:18 - 2010-07-07 16:52 - 00000000 ____D C:\ProgramData\FreePDF
2013-10-14 13:18 - 2010-07-07 16:52 - 00000000 ____D C:\Program Files\FreePDF_XP
2013-10-14 13:12 - 2010-07-27 12:03 - 00081420 _____ C:\fpRedmon.log
2013-10-14 13:06 - 2013-10-14 13:06 - 01035878 _____ C:\Users\BueroTobias\Desktop\Dachwartung.zip
2013-10-14 10:20 - 2013-10-14 10:20 - 00000000 _____ C:\Windows\setuperr.log
2013-10-10 08:34 - 2010-02-09 20:45 - 00000000 ____D C:\Windows\Panther
2013-10-09 19:34 - 2012-04-13 06:16 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-09 19:34 - 2011-05-20 07:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-09 07:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-10-09 07:30 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-10-09 07:19 - 2011-02-22 11:58 - 00000000 ____D C:\Users\BueroTobias\AppData\Local\Google
2013-10-09 07:18 - 2009-07-14 05:33 - 00347760 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-09 02:24 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-10-09 02:08 - 2010-07-07 19:47 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-09 02:06 - 2013-07-30 05:27 - 00000000 ____D C:\Windows\system32\MRT
2013-10-09 02:05 - 2010-07-20 14:59 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-09 02:05 - 2010-02-09 21:01 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

ZeroAccess:
C:\Windows\Installer\{2074e1bd-3e19-b7a5-0910-72cf8d115873}
C:\Windows\Installer\{2074e1bd-3e19-b7a5-0910-72cf8d115873}\@
C:\Windows\Installer\{2074e1bd-3e19-b7a5-0910-72cf8d115873}\n
C:\Windows\Installer\{2074e1bd-3e19-b7a5-0910-72cf8d115873}\L\00000004.@
C:\Windows\Installer\{2074e1bd-3e19-b7a5-0910-72cf8d115873}\L\1afb2d56
C:\Windows\Installer\{2074e1bd-3e19-b7a5-0910-72cf8d115873}\L\201d3dde

Some content of TEMP:
====================
C:\Users\BueroTobias\AppData\Local\Temp\bitool.dll
C:\Users\BueroTobias\AppData\Local\Temp\Installer.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-22 14:28

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 30-10-2013
Ran by BueroTobias at 2013-10-30 09:50:21
Running from C:\Users\BueroTobias\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: G Data AntiVirus 2013 (Enabled - Out of date) {39B780B4-63C2-05B0-3B40-8F7A21E4F496}
AS: G Data AntiVirus 2013 (Enabled - Out of date) {82D66150-45F8-0A3E-01F0-B4085A63BE2B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8)
Akamai NetSession Interface Service
ArCon Eleco Small Business (Version: 1.01.0000)
Autodesk Design Review 2013 (Version: 13.0.0.82)
Brother MFL-Pro Suite MFC-6490CW (Version: 1.0.1.0)
Brother MFL-Pro Suite MFC-9440CN (Version: 1.0.1.0)
BrowseToSave 1.74
Bruoywse2savee (Version: )
CCleaner (Version: 4.00)
Cisco EAP-FAST Module (Version: 2.1.6)
Cisco LEAP Module (Version: 1.0.12)
Cisco PEAP Module (Version: 1.0.13)
CLTdesigner provided by Haas Holzprodukte GmbH
EbookBrOuwosE (Version: )
Edimax Wireless LAN Card (Version: 1.5.1.0)
FreePDF (Remove only)
G Data AntiVirus 2011 (Version: 21.0.0.0)
Geogrid®-Viewer (Version: 6.6.0.0000)
Glary Utilities 2.54.0.1758 (Version: 2.54.0.1758)
GomezPEER (Version: 3.2)
Google Apps Migration For Microsoft Outlook® 2.3.12.34 (Version: 2.3.12.34)
Google Apps Sync™ for Microsoft Outlook® 3.3.355.950 (Version: 3.3.355.950)
Google Drive (Version: 1.12.5329.1887)
Google Earth Plug-in (Version: 7.1.1.1888)
Google SketchUp 8 (Version: 3.0.11762)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4601.54)
Google Update Helper (Version: 1.3.21.165)
GPL Ghostscript 8.71
internet viewer v19.0 (Version: 19.0)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Language Pack 2007 - German/Deutsch (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office O MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3)
Microsoft Office SharePoint Designer MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word Viewer 2003 (Version: 11.0.8173.0)
Microsoft Office X MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works 6-9 Converter (Version: 14.0.6120.5002)
MotoHelper 2.1.32 Driver 5.4.0 (Version: 2.1.32)
MotoHelper MergeModules (Version: 1.2.0)
Motorola Mobile Drivers Installation 5.4.0 (Version: 5.4.0)
Mozilla Firefox 24.0 (x86 de) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyPhoneExplorer (Version: 1.8.5)
o2c Player (Version: 2.0.0.66)
OLYMPUS ib (Version: 1.1.1404)
PaperPort Image Printer (Version: 1.00.0000)
Realtek Ethernet Controller  Driver (Version: 1.00.0008)
Realtek High Definition Audio Driver (Version: 6.0.1.5919)
RedMon - Redirection Port Monitor
ScanSoft PaperPort 11 (Version: 11.2.0000)
Snap.Do (Version: 1.149.1.12678)
Snap.Do Engine (HKCU Version: 1.149.1.12678)
TopMapsViewer Bayern (Version: 6.6.0.0000)
TrimFox (Version: 2013)
TrimFox 2012 (Version: 2012)
TrimFox Update 1.01c
TrimFox Update 2012
TrimFox Update 5.01y (Version: 5.01y)
TrimFox Update 5.02b (Version: Update 5.02b)
TrimFox Update 5.02e (Version: Update 5.02e)
TrimFox Update 5.02h (Version: Update 5.02h)
TrimFox Update 5.02p (Version: Update 5.02p)
TrimFox Update 5.02r (Version: Update 5.02r)
TrimFox Update 5.03b (Version: Update 5.03b)
TrimFox Update 5.03d (Version: Update 5.03d)
TrimFox Update 5.03j (Version: Update 5.03j)
TrimFox Update 5.03k (Version: Update 5.03k)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
VMware Tools (Version: 9.2.3.21136)
WinDirStat 1.1.2
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (Version: 09/09/2009 1.0.0.0)
WiseConvert Toolbar (Version: 6.8.8.8)
Zirbel
Zirbel V 4.91j
Zirbel V 4.91k
Zirbel-Dachziegel 1.0

==================== Restore Points  =========================

09-10-2013 01:00:24 Windows Update
15-10-2013 05:55:12 Windows Update
18-10-2013 05:58:24 Windows Update
22-10-2013 13:06:23 Windows Update
25-10-2013 18:17:05 Windows Update
29-10-2013 17:06:25 Windows Update
30-10-2013 08:12:19 Removed Java(TM) 6 Update 37
30-10-2013 08:12:46 Removed Java 7 Update 25

==================== Hosts content: ==========================

2009-07-14 03:04 - 2012-03-12 15:13 - 00000864 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 validation.sls.microsoft.com

==================== Scheduled Tasks (whitelisted) =============

Task: {0617C10F-62F6-4824-AD84-65D4A5C5B4CE} - System32\Tasks\MotoHelper Routing => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()
Task: {1F02D1E4-75B9-48F5-8085-7F564B36CE5F} - System32\Tasks\MotoHelper MUM => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()
Task: {6689D4D9-C621-4F20-8BD9-DCA8F70F9402} - System32\Tasks\GlaryInitialize => C:\Program Files\Glary Utilities\initialize.exe [2013-03-19] (Glarysoft Ltd)
Task: {78D62AFA-90FB-4532-B04D-3527405B8D71} - System32\Tasks\MotoHelper Initial Update => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()
Task: {83BB3374-BF4F-4AA6-AD20-B0307D1F24D2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {99C4C00F-7695-4C8F-8397-8C1744E0E1F7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-22] (Google Inc.)
Task: {A99BF743-98F1-46AF-A3B0-92C2F51E5695} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-22] (Google Inc.)
Task: {BAE72A32-1448-498B-951E-1A74B28139E2} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline No Task File
Task: {C717D73B-C754-4C52-8162-B2091D37A460} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: {DE8D7B86-E302-4516-A151-0D9FDB5C6AF2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {EB728AA2-E3F4-413F-ADFD-58B602006676} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask No Task File
Task: {F578E928-4B01-4760-9688-160DAB2C7A9A} - System32\Tasks\MotoHelper Update => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files\Glary Utilities\initialize.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-10-08 19:24 - 2013-10-08 19:24 - 00034848 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00055328 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\srau.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00150560 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00112160 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 01808416 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00055840 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\spbl.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00013344 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\siem.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00048672 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\sppsm.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00727072 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00081952 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00014368 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00017440 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00030240 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\srut.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00020512 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\srsbs.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00057376 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00014368 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\srpdm.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00014368 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\sgml.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00053280 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2013-10-08 19:23 - 2013-10-08 19:23 - 00048160 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2013-10-08 19:23 - 2013-10-08 19:23 - 00026144 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00025632 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00193056 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\sgmu.dll
2013-10-08 19:23 - 2013-10-08 19:23 - 00068640 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll
2013-10-08 19:24 - 2013-10-08 19:24 - 00248352 _____ () C:\Users\BueroTobias\AppData\Local\Smartbar\Application\srns.dll
2010-07-20 23:16 - 2009-07-03 17:34 - 00811008 _____ () C:\Program Files\Edimax\Common\RaWLAPI.dll
2011-02-11 12:23 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2013-07-31 05:28 - 2013-07-31 05:28 - 02593168 _____ () C:\Users\BueroTobias\AppData\Local\Temp\SevenZipJBinding-N8q7X\lib7-Zip-JBinding.dll
2013-03-28 07:57 - 2013-07-31 05:26 - 00017408 _____ () C:\Program Files\Gomez\GomezPEER\jre\bin\SystemInfo.dll
2013-03-28 07:57 - 2013-03-28 07:57 - 00055808 _____ () C:\Program Files\Gomez\GomezPEER\jre\bin\ICE_JNIRegistry.dll
2013-10-30 09:35 - 2013-10-30 09:35 - 00098816 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\win32api.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00110080 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\PyWinTypes27.dll
2013-10-30 09:35 - 2013-10-30 09:35 - 00364544 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\pythoncom27.dll
2013-10-30 09:35 - 2013-10-30 09:35 - 00044032 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\_socket.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 01153024 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\_ssl.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00320512 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\win32com.shell.shell.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00711680 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\_hashlib.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 01175040 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\wx._core_.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00805888 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\wx._gdi_.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00811008 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\wx._windows_.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 01062400 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\wx._controls_.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00735232 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\wx._misc_.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00128512 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\_elementtree.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00127488 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\pyexpat.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00557056 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\pysqlite2._sqlite.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00087040 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\_ctypes.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00119808 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\win32file.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00108544 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\win32security.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00018432 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\win32event.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00038912 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\win32inet.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00122368 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\wx._wizard.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00686080 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\unicodedata.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00026624 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\_multiprocessing.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00070656 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\wx._html2.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00010240 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\select.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00025600 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\win32pdh.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00504832 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\windows._cacheinvalidation.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00011264 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\win32crypt.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00035840 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\win32process.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00017408 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\win32profile.pyd
2013-10-30 09:35 - 2013-10-30 09:35 - 00022528 _____ () C:\Users\BueroTobias\AppData\Local\Temp\_MEI26362\win32ts.pyd

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/30/2013 09:16:36 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/10/30 09:16:36.495]: [00002212]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.0.104]

Error: (10/30/2013 04:38:11 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/10/30 04:38:11.687]: [00002212]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.0.102]

Error: (10/30/2013 04:11:41 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/10/30 04:11:41.312]: [00002212]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.0.102]

Error: (10/30/2013 04:05:36 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/10/30 04:05:36.859]: [00002212]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.0.102]

Error: (10/30/2013 04:04:25 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/10/30 04:04:25.859]: [00002212]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.0.102]

Error: (10/30/2013 03:55:08 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/10/30 03:55:08.844]: [00002212]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.0.102]

Error: (10/30/2013 00:57:14 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/10/30 00:57:14.031]: [00002212]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.0.104]

Error: (10/30/2013 00:56:30 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/10/30 00:56:30.781]: [00002212]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.0.102]

Error: (10/30/2013 00:50:26 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/10/30 00:50:26.281]: [00002212]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.0.102]

Error: (10/30/2013 00:50:09 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/10/30 00:50:09.328]: [00002212]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.0.104]


System errors:
=============
Error: (10/30/2013 09:34:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SYNCING.NET Service Component" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/30/2013 09:34:34 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Akamai NetSession Interface" wurde mit folgendem Fehler beendet: 
%%126

Error: (10/30/2013 09:34:31 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎30.‎10.‎2013 um 09:27:26 unerwartet heruntergefahren.

Error: (10/26/2013 06:02:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SYNCING.NET Service Component" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/26/2013 06:02:42 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Akamai NetSession Interface" wurde mit folgendem Fehler beendet: 
%%126

Error: (10/26/2013 06:02:37 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎26.‎10.‎2013 um 19:01:25 unerwartet heruntergefahren.

Error: (10/26/2013 10:41:22 AM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.0.138
registriert werden. Der Computer mit IP-Adresse 192.168.0.115 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (10/26/2013 08:54:27 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (10/26/2013 08:53:33 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SYNCING.NET Service Component" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/26/2013 08:53:32 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Akamai NetSession Interface" wurde mit folgendem Fehler beendet: 
%%126


Microsoft Office Sessions:
=========================
Error: (02/18/2013 07:38:09 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 181 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (08/10/2011 07:25:28 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 53 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (07/30/2010 00:12:27 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 93 seconds with 60 seconds of active time.  This session ended with a crash.

Error: (07/30/2010 00:10:46 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 77 seconds with 60 seconds of active time.  This session ended with a crash.

Error: (07/30/2010 00:08:57 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 42 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (07/30/2010 00:08:01 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 39 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (07/30/2010 00:06:59 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 397 seconds with 180 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2013-06-18 05:44:28.718
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-17 20:34:38.095
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-17 06:07:38.548
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 06:29:32.286
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 06:14:06.922
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-05-22 05:33:01.783
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-05-18 15:09:30.433
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-05-18 14:57:08.653
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-05-18 08:43:45.993
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-05-18 08:28:06.551
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 46%
Total physical RAM: 2519.55 MB
Available physical RAM: 1341.7 MB
Total Pagefile: 5037.4 MB
Available Pagefile: 3450.57 MB
Total Virtual: 2047.88 MB
Available Virtual: 1906.21 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:137.48 GB) (Free:94.46 GB) NTFS
Drive z: (Daten 1) (Network) (Total:488.28 GB) (Free:165.46 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 138 GB) (Disk ID: 183C4156)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=137 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-30 10:55:27
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 VMware_Virtual_IDE_Hard_Drive rev.00000001 137,62GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\BUEROT~1\AppData\Local\Temp\kwtirkob.sys


---- Kernel code sections - GMER 2.1 ----

.text  ntkrnlpa.exe!ZwRollbackEnlistment + 142D                                                         8247EA15 1 Byte  [06]
.text  ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                           824B8212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}

---- Registry - GMER 2.1 ----

Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001bdc05ccde                      
Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001bdc05ccde@b8fffe4ec05d         0x2B 0xB3 0x85 0x81 ...
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001bdc05ccde (not active ControlSet)  
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001bdc05ccde@b8fffe4ec05d             0x2B 0xB3 0x85 0x81 ...

---- EOF - GMER 2.1 ----
         

*** Prozess ***

Prozess: 5864
Dateiname: erunt.exe
Pfad: c:\windows\erunt.exe

Herausgeber: Unbekannter Herausgeber
Erstelldatum: 02/22/13 15:05:21
Änderungsdatum: 02/22/13 02:04:50

Gestartet von: cmd.exe
Herausgeber: Microsoft Windows


*** Aktionen ***

Ein Packer wurde auf die Programmdatei angewandt. Möglicherweise um schädliche Inhalte zu verbergen.
Das Programm hat in Dateien oder Ordnern geschrieben die genutzt werden können um das System zu gefährden.
Das Programm hat Werte in der System-Registrierung verändert die genutzt werden können um das System zu gefährden.


*** Quarantäne ***

Folgende Dateien wurden in Quarantäne verschoben:
C:\FRST\Hives\Users\00000001\NTUSER.DAT
C:\Windows\ERUNT.exe

Folgende Registry Einträge wurden gelöscht:
\REGISTRY\MACHINE\SECURITY


YGLRttKQcnIuJ+diYqBygnKCYmLAcnJycmJi0HJycnJiYuBy4nLiYmJwKnRyQicnJga3cnJycmJicCwnJycnJgZocnJycmJigCsnJycnJgaZcnKQKxZtKwnJcnJwp3JycHhycnJyYmJwmXJycnJiYnC6crFeY7ZycrFeY7ZyYmIAAA
Version der Regeln: 3.1.18
OS: Windows 6.1 Service Pack 1.0 Build: 7601 - Workstation 32bit OS
BB Revision: 26928

ERUNT.exe C:\FRST\HIVES silent sysreg curuser /noconfirmdelete /noprogresswindow
C:\Windows\system32\cmd.exe /c ERUNT.exe C:\FRST\HIVES silent sysreg curuser /noconfirmdelete /noprogresswindow
         

Virenprüfung mit G Data AntiVirus 2013
Version 23.1.0.2 (16.01.2013)
Virensignaturen vom 24.10.2013
Job: Lokale Festplatten
Startzeit: 29.10.2013 16:37:10
Engine(s): Engine A (AVA 22.13405), Engine B (AVL 22.1829)
Heuristik: Ein
Archive: Ein
Systembereiche: Ein
RootKits prüfen: Ein

Prüfung der Systembereiche...
Prüfung aller im Speicher befindlichen Prozesse und Verweise im Autostart...
Prüfung auf RootKits...
Prüfung aller lokalen Festplatten...
Analyse vollständig durchgeführt: 29.10.2013 17:08:24
    153904 Dateien überprüft
    2 infizierte Dateien gefunden
    0 verdächtige Dateien gefunden


Objekt: settings.ini
    Pfad: C:\ProgramData\EbookBrOuwosE
    Status: Datei in Quarantäne. Es ist ein Neustart erforderlich.
    Virus: Gen:Adware.MPlug.2 (Engine A)

Objekt: sprotector.dll
    Pfad: C:\Program Files\BrowseToSave
    Status: Virus entfernt
    Virus: Adware.Agent.NSJ (Engine A)

+Der Zugriff auf die folgenden Dateien wurde verweigert:

+Die folgenden Dateien sind Passwortgeschützt: