Windows 7, langsames Hochfahren, hohe CPU-Auslastung (>60%) bereits bei Sitzungs-Start

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by Sebastian (ATTENTION: The logged in user is not administrator) on LENOVO on 03-11-2013 07:41:05
Running from C:\Users\Sebastian\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\Energy Management\utility.exe
(Lenovo (Beijing) Limited) C:\Program Files\Lenovo\Energy Management\Energy Management.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Mobogenie\DaemonProcess.exe
(Conexant Systems, Inc) C:\Program Files\Conexant\SAII\SmartAudio.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [VeriFaceManager] - C:\Program Files\Lenovo\VeriFace\PManage.exe
HKLM\...\Run: [UpdateP2GShortCut] - C:\Program Files\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM\...\Run: [EnergyUtility] - C:\Program Files\Lenovo\Energy Management\utility.exe [4114288 2009-09-29] (Lenovo(beijing) Limited)
HKLM\...\Run: [Energy Management] - C:\Program Files\Lenovo\Energy Management\Energy Management.exe [5064560 2009-09-29] (Lenovo (Beijing) Limited)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-06] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\Update\realsched.exe [295072 2013-03-09] (RealNetworks, Inc.)
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-07-19] (Cisco Systems, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe [735936 2013-10-15] ()
HKLM\...\Run: [SmartAudio] - C:\Program Files\Conexant\SAII\SAIICpl.exe [307768 2009-07-16] ()
HKLM\...\Runonce: [ Malwarebytes Anti-Malware  (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript
MountPoints2: {e9b0ddf4-f887-11e2-baad-705ab64d574b} - F:\Startme.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ecosia.org/
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\office15\OCHelper.dll (Microsoft Corporation)
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKLM - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKCU - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 139.6.0.132	vpn-gm.fh-koeln.de ###Cisco AnyConnect VPN client modified this file. Please do not modify contents until this comment is removed.
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\7z21yzyr.default
FF SelectedSearchEngine: Ecosia
FF Homepage: hxxp://www.ecosia.org/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.0.282 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.0.282 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\7z21yzyr.default\searchplugins\ecosia.xml
FF SearchPlugin: C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\7z21yzyr.default\searchplugins\forestle-de.xml
FF SearchPlugin: C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\7z21yzyr.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Ghostery - C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\7z21yzyr.default\Extensions\firefox@ghostery.com
FF Extension: No Name - C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\7z21yzyr.default\Extensions\nostmp
FF Extension: Adobe DLM (powered by getPlus(R)) - C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\7z21yzyr.default\Extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
FF Extension: adblockpopups - C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\7z21yzyr.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: noscript - C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\7z21yzyr.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: Adblock Plus - C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\7z21yzyr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: bprivacyprefs - C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\7z21yzyr.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi
FF Extension: Skype extension - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF HKLM\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-06] (Avira Operations GmbH & Co. KG)
R2 IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [38152 2009-07-14] (Lenovo Group Limited)
S3 Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [509192 2009-08-14] (Lenovo Group Limited)
S3 Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [579400 2009-09-22] (Lenovo Group Limited)
R2 lmhosts; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [45408 2008-11-24] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX86\integratedoffice.exe [1316024 2013-06-05] (Microsoft Corporation)
S3 PS_MDP; C:\Program Files\Lenovo\ReadyComm\PS_MDP.dll [276296 2009-07-16] (Lenovo Group Limited)
R2 ReadyComm.DirectRouter; C:\Program Files\Lenovo\ReadyComm\common\router.dll [103688 2009-07-14] (Lenovo Group Limited)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
R2 vpnagent; C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [557968 2013-07-19] (Cisco Systems, Inc.)

==================== Drivers (Whitelisted) ====================

R3 ACPIVPC; C:\Windows\System32\DRIVERS\AcpiVpc.sys [23136 2010-01-20] (Lenovo Corporation)
S3 acsock; C:\Windows\System32\DRIVERS\acsock.sys [92112 2013-07-19] (Cisco Systems, Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2011-04-01] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-06] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-06] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-31] (Avira Operations GmbH & Co. KG)
S3 Bridge0; C:\Windows\System32\drivers\WDBridge.sys [63240 2009-07-28] (Lenovo)
R1 funfrm; C:\Windows\System32\Drivers\funfrm.sys [54800 2009-12-11] ()
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2011-04-01] ()
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [124016 2010-03-15] (MCCI Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-25] (Avira GmbH)
S3 usbsmi; C:\Windows\System32\DRIVERS\SMIksdrv.sys [168704 2009-06-19] (SMI)
S3 vpnva; C:\Windows\System32\DRIVERS\vpnva-6.sys [43120 2013-07-19] (Cisco Systems, Inc.)
R3 wdmirror; C:\Windows\System32\DRIVERS\WDMirror.sys [11792 2009-07-16] (Windows (R) Codename Longhorn DDK provider)
S3 wsvd; C:\Windows\System32\DRIVERS\wsvd.sys [81704 2009-07-21] (CyberLink)
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S2 SVKP; \??\C:\windows\system32\SVKP.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]
S3 WinRing0_1_2_0; \??\D:\test\ECECECEC\WinRing0.sys [x]
S3 XDva385; \??\C:\windows\system32\XDva385.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-03 07:36 - 2013-11-03 07:36 - 00000000 ____D C:\FRST
2013-11-03 07:31 - 2013-11-03 07:31 - 01089445 _____ (Farbar) C:\Users\Sebastian\Desktop\FRST.exe
2013-11-03 07:19 - 2013-11-02 19:57 - 01060070 _____ C:\Users\Sebastian\Desktop\adwcleaner-3.010.exe
2013-11-03 07:19 - 2013-11-02 19:57 - 01033335 _____ (Thisisu) C:\Users\Sebastian\Desktop\JRT_6.0.7.exe
2013-11-02 20:03 - 2013-11-02 20:03 - 00000000 ____D C:\windows\ERUNT
2013-11-02 19:58 - 2013-11-02 20:00 - 00000000 ____D C:\AdwCleaner
2013-11-02 19:57 - 2013-11-02 19:57 - 01060070 _____ C:\Users\Alexan\Desktop\adwcleaner-3.010.exe
2013-11-02 19:57 - 2013-11-02 19:57 - 01033335 _____ C:\Users\Alexan\Desktop\JRT_6.0.7.exe
2013-11-02 19:30 - 2013-11-02 19:45 - 00000000 ____D C:\Program Files\Conexant
2013-11-02 16:08 - 2013-11-03 06:47 - 00000551 _____ C:\windows\setupact.log
2013-11-02 16:08 - 2013-11-02 16:08 - 00000000 _____ C:\windows\setuperr.log
2013-11-02 16:07 - 2013-11-02 22:56 - 00002352 _____ C:\windows\PFRO.log
2013-11-02 15:41 - 2013-11-02 15:41 - 00000378 _____ C:\windows\Tasks\ReclaimerResumeInstall_Alexan.job
2013-11-02 15:07 - 2013-11-02 15:07 - 00000218 _____ C:\Users\Sebastian\AppData\Local\recently-used.xbel
2013-11-02 12:49 - 2013-11-02 12:49 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Python-Eggs
2013-11-02 12:26 - 2013-11-02 22:57 - 00001088 _____ C:\Users\Sebastian\daemonprocess.txt
2013-11-02 12:08 - 2013-11-02 20:11 - 00000544 _____ C:\Users\Alexan\daemonprocess.txt
2013-11-02 12:07 - 2013-11-02 12:07 - 00000000 ____D C:\Users\Alexan\AppData\Roaming\Python-Eggs
2013-11-02 12:05 - 2013-11-02 15:45 - 00000000 ____D C:\Program Files\Mobogenie
2013-10-28 21:41 - 2013-10-28 21:41 - 00000000 ____D C:\Users\Sebastian\Documents\Eigene Maps
2013-10-28 21:41 - 2013-10-28 21:41 - 00000000 ____D C:\Users\Sebastian\AppData\Local\Mindjet
2013-10-27 22:19 - 2013-10-27 22:19 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 22:18 - 2013-10-27 22:19 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 22:18 - 2013-10-27 22:18 - 00264616 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-10-27 22:18 - 2013-10-27 22:18 - 00175016 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-10-27 22:18 - 2013-10-27 22:18 - 00174504 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-10-27 22:18 - 2013-10-27 22:18 - 00094632 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge.dll
2013-10-27 22:18 - 2013-10-27 22:18 - 00000000 ____D C:\Program Files\Java
2013-10-27 19:44 - 2013-10-30 12:47 - 00000034 _____ C:\Users\Sebastian\Desktop\Literatur 9.2.txt
2013-10-24 18:26 - 2013-10-28 21:59 - 00000408 _____ C:\Users\Sebastian\AppData\Roaming\CamShapes.ini
2013-10-24 18:26 - 2013-10-28 21:59 - 00000408 _____ C:\Users\Sebastian\AppData\Roaming\CamLayout.ini
2013-10-24 18:26 - 2013-10-28 21:59 - 00000107 _____ C:\Users\Sebastian\AppData\Roaming\Camdata.ini
2013-10-24 18:26 - 2013-10-28 08:14 - 00004535 _____ C:\Users\Sebastian\AppData\Roaming\CamStudio.cfg
2013-10-24 18:25 - 2013-10-24 18:25 - 00001206 _____ C:\Users\Sebastian\AppData\Roaming\CamStudio.Producer.ini
2013-10-24 18:25 - 2013-10-24 18:25 - 00000098 _____ C:\Users\Sebastian\AppData\Roaming\CamStudio.Producer.command
2013-10-24 18:25 - 2013-10-24 18:25 - 00000000 _____ C:\Users\Sebastian\AppData\Roaming\CamStudio.Producer.Data.ini
2013-10-24 18:24 - 2013-10-28 08:17 - 00000000 ____D C:\Users\Sebastian\Documents\My CamStudio Temp Files
2013-10-24 18:23 - 2013-10-28 08:15 - 00000096 _____ C:\Users\Sebastian\AppData\Roaming\version2.xml
2013-10-24 18:23 - 2013-10-24 18:23 - 00000000 ____D C:\Program Files\CamStudio 2.7
2013-10-18 09:37 - 2013-10-18 09:38 - 00000096 _____ C:\Users\Sebastian\Desktop\FRAGEN.txt
2013-10-17 10:40 - 2013-10-17 10:40 - 00001094 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore1cecb1ce2133659.job
2013-10-17 10:39 - 2013-10-17 10:39 - 00000000 ____D C:\Users\Sebastian\AppData\Local\Google
2013-10-09 18:08 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-10-09 18:08 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-10-09 18:08 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-10-09 18:08 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-10-09 18:08 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-10-09 18:08 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-10-09 18:08 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-10-09 18:08 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-10-09 18:08 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-10-09 18:08 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-10-09 18:08 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-10-09 18:08 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-10-09 18:08 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-10-09 18:08 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-10-09 18:08 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-10-09 18:08 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-10-09 08:06 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-10-09 08:06 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-10-09 08:06 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll
2013-10-09 08:06 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-10-09 08:06 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-10-09 08:06 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-10-09 08:06 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-10-09 08:06 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-10-09 08:06 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-10-09 08:06 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-10-09 08:06 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2013-10-09 08:06 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-10-09 08:06 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-10-09 08:06 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2013-10-09 08:06 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2013-10-09 08:06 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-10-09 08:06 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll
2013-10-09 08:06 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2013-10-09 08:06 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 08:06 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-10-09 08:06 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-10-09 08:06 - 2013-07-12 11:07 - 00080896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBAUDIO.sys
2013-10-09 08:06 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2013-10-09 08:06 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2013-10-09 08:06 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-10-09 08:06 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2013-10-09 08:06 - 2013-07-03 05:02 - 00036352 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbscan.sys
2013-10-09 08:06 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-10-09 08:06 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-10-09 08:06 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-10-09 08:06 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2013-10-09 08:06 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2013-10-09 08:06 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2013-10-09 08:06 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-10-09 08:06 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-10-05 15:15 - 2013-10-05 15:15 - 00003584 _____ C:\Users\Sebastian\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-04 18:35 - 2013-10-04 18:50 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Youtube Downloader HD
2013-10-04 18:35 - 2013-10-04 18:35 - 00000000 ____D C:\Program Files\Youtube Downloader HD

==================== One Month Modified Files and Folders =======

2013-11-03 07:40 - 2009-07-14 05:34 - 00014928 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-03 07:40 - 2009-07-14 05:34 - 00014928 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-03 07:36 - 2013-11-03 07:36 - 00000000 ____D C:\FRST
2013-11-03 07:31 - 2013-11-03 07:31 - 01089445 _____ (Farbar) C:\Users\Sebastian\Desktop\FRST.exe
2013-11-03 06:56 - 2009-11-16 13:06 - 01744586 _____ C:\windows\system32\PerfStringBackup.INI
2013-11-03 06:53 - 2009-12-11 04:24 - 01760844 _____ C:\windows\WindowsUpdate.log
2013-11-03 06:47 - 2013-11-02 16:08 - 00000551 _____ C:\windows\setupact.log
2013-11-02 22:57 - 2013-11-02 12:26 - 00001088 _____ C:\Users\Sebastian\daemonprocess.txt
2013-11-02 22:56 - 2013-11-02 16:07 - 00002352 _____ C:\windows\PFRO.log
2013-11-02 20:11 - 2013-11-02 12:08 - 00000544 _____ C:\Users\Alexan\daemonprocess.txt
2013-11-02 20:11 - 2010-05-21 15:28 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-02 20:03 - 2013-11-02 20:03 - 00000000 ____D C:\windows\ERUNT
2013-11-02 20:00 - 2013-11-02 19:58 - 00000000 ____D C:\AdwCleaner
2013-11-02 19:57 - 2013-11-03 07:19 - 01060070 _____ C:\Users\Sebastian\Desktop\adwcleaner-3.010.exe
2013-11-02 19:57 - 2013-11-03 07:19 - 01033335 _____ (Thisisu) C:\Users\Sebastian\Desktop\JRT_6.0.7.exe
2013-11-02 19:57 - 2013-11-02 19:57 - 01060070 _____ C:\Users\Alexan\Desktop\adwcleaner-3.010.exe
2013-11-02 19:57 - 2013-11-02 19:57 - 01033335 _____ C:\Users\Alexan\Desktop\JRT_6.0.7.exe
2013-11-02 19:45 - 2013-11-02 19:30 - 00000000 ____D C:\Program Files\Conexant
2013-11-02 16:08 - 2013-11-02 16:08 - 00000000 _____ C:\windows\setuperr.log
2013-11-02 15:45 - 2013-11-02 12:05 - 00000000 ____D C:\Program Files\Mobogenie
2013-11-02 15:41 - 2013-11-02 15:41 - 00000378 _____ C:\windows\Tasks\ReclaimerResumeInstall_Alexan.job
2013-11-02 15:41 - 2009-07-29 11:27 - 00000000 ____D C:\windows\Panther
2013-11-02 15:07 - 2013-11-02 15:07 - 00000218 _____ C:\Users\Sebastian\AppData\Local\recently-used.xbel
2013-11-02 12:49 - 2013-11-02 12:49 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Python-Eggs
2013-11-02 12:36 - 2010-07-02 18:02 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-11-02 12:32 - 2013-02-20 09:52 - 00000000 ____D C:\DeusEx
2013-11-02 12:26 - 2010-05-31 21:35 - 00000000 ____D C:\Users\Sebastian
2013-11-02 12:25 - 2009-07-14 05:33 - 00474632 _____ C:\windows\system32\FNTCACHE.DAT
2013-11-02 12:22 - 2010-05-31 21:35 - 00120288 _____ C:\Users\Sebastian\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-02 12:17 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2013-11-02 12:08 - 2010-03-05 00:38 - 00000000 ____D C:\Users\Alexan
2013-11-02 12:07 - 2013-11-02 12:07 - 00000000 ____D C:\Users\Alexan\AppData\Roaming\Python-Eggs
2013-11-01 12:04 - 2011-08-20 12:03 - 00001038 _____ C:\Users\Sebastian\Desktop\filme.txt
2013-11-01 07:05 - 2012-08-02 08:39 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-11-01 07:05 - 2012-06-12 21:05 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2013-11-01 07:05 - 2011-08-11 10:46 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2013-10-30 12:47 - 2013-10-27 19:44 - 00000034 _____ C:\Users\Sebastian\Desktop\Literatur 9.2.txt
2013-10-29 15:13 - 2009-07-14 03:37 - 00000000 ____D C:\windows\Microsoft.NET
2013-10-28 21:59 - 2013-10-24 18:26 - 00000408 _____ C:\Users\Sebastian\AppData\Roaming\CamShapes.ini
2013-10-28 21:59 - 2013-10-24 18:26 - 00000408 _____ C:\Users\Sebastian\AppData\Roaming\CamLayout.ini
2013-10-28 21:59 - 2013-10-24 18:26 - 00000107 _____ C:\Users\Sebastian\AppData\Roaming\Camdata.ini
2013-10-28 21:41 - 2013-10-28 21:41 - 00000000 ____D C:\Users\Sebastian\Documents\Eigene Maps
2013-10-28 21:41 - 2013-10-28 21:41 - 00000000 ____D C:\Users\Sebastian\AppData\Local\Mindjet
2013-10-28 11:52 - 2013-09-30 13:09 - 00000039 _____ C:\Users\Sebastian\Desktop\griesheim.txt
2013-10-28 11:32 - 2012-10-13 08:40 - 00000451 _____ C:\Users\Sebastian\Desktop\TO-DO.txt
2013-10-28 08:17 - 2013-10-24 18:24 - 00000000 ____D C:\Users\Sebastian\Documents\My CamStudio Temp Files
2013-10-28 08:15 - 2013-10-24 18:23 - 00000096 _____ C:\Users\Sebastian\AppData\Roaming\version2.xml
2013-10-28 08:14 - 2013-10-24 18:26 - 00004535 _____ C:\Users\Sebastian\AppData\Roaming\CamStudio.cfg
2013-10-27 22:19 - 2013-10-27 22:19 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 22:19 - 2013-10-27 22:18 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 22:18 - 2013-10-27 22:18 - 00264616 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-10-27 22:18 - 2013-10-27 22:18 - 00175016 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-10-27 22:18 - 2013-10-27 22:18 - 00174504 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-10-27 22:18 - 2013-10-27 22:18 - 00094632 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge.dll
2013-10-27 22:18 - 2013-10-27 22:18 - 00000000 ____D C:\Program Files\Java
2013-10-27 17:46 - 2013-05-18 15:46 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Aquamarin Haushaltsbuch
2013-10-27 16:13 - 2012-05-02 12:49 - 00000000 ____D C:\Users\Sebastian\Desktop\Studium
2013-10-25 06:49 - 2013-09-10 15:33 - 00000294 _____ C:\windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1765301761-1438820261-2839696435-1008.job
2013-10-25 06:46 - 2013-09-10 15:30 - 00000316 _____ C:\windows\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1765301761-1438820261-2839696435-1008.job
2013-10-25 06:10 - 2013-09-10 15:30 - 00000334 _____ C:\windows\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1765301761-1438820261-2839696435-1008.job
2013-10-24 18:25 - 2013-10-24 18:25 - 00001206 _____ C:\Users\Sebastian\AppData\Roaming\CamStudio.Producer.ini
2013-10-24 18:25 - 2013-10-24 18:25 - 00000098 _____ C:\Users\Sebastian\AppData\Roaming\CamStudio.Producer.command
2013-10-24 18:25 - 2013-10-24 18:25 - 00000000 _____ C:\Users\Sebastian\AppData\Roaming\CamStudio.Producer.Data.ini
2013-10-24 18:23 - 2013-10-24 18:23 - 00000000 ____D C:\Program Files\CamStudio 2.7
2013-10-20 10:56 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\NDF
2013-10-19 18:56 - 2013-09-30 13:08 - 00000310 _____ C:\Users\Sebastian\Desktop\wohnung.txt
2013-10-19 09:25 - 2013-09-26 18:49 - 00000041 _____ C:\Users\Sebastian\Desktop\Sahnehäubchen.txt
2013-10-18 16:49 - 2011-03-22 22:04 - 00000000 ____D C:\Users\Alexan\AppData\Roaming\Adobe
2013-10-18 09:38 - 2013-10-18 09:37 - 00000096 _____ C:\Users\Sebastian\Desktop\FRAGEN.txt
2013-10-18 09:33 - 2013-01-04 21:46 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Audacity
2013-10-17 10:40 - 2013-10-17 10:40 - 00001094 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore1cecb1ce2133659.job
2013-10-17 10:39 - 2013-10-17 10:39 - 00000000 ____D C:\Users\Sebastian\AppData\Local\Google
2013-10-17 10:39 - 2012-08-14 08:06 - 00000000 ____D C:\Program Files\Google
2013-10-13 20:55 - 2010-06-01 19:37 - 00000000 ____D C:\Musik
2013-10-09 18:13 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\de-DE
2013-10-09 18:11 - 2013-08-16 07:01 - 00000000 ____D C:\windows\system32\MRT
2013-10-09 18:09 - 2010-03-04 18:28 - 78106760 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-10-05 15:15 - 2013-10-05 15:15 - 00003584 _____ C:\Users\Sebastian\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-04 18:50 - 2013-10-04 18:35 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Youtube Downloader HD
2013-10-04 18:35 - 2013-10-04 18:35 - 00000000 ____D C:\Program Files\Youtube Downloader HD

Files to move or delete:
====================
C:\Users\Sebastian\AppData\Roaming\CamLayout.ini
C:\Users\Sebastian\AppData\Roaming\CamShapes.ini
C:\Users\Sebastian\AppData\Roaming\CamStudio.Producer.Data.ini
C:\ProgramData\ras_0oed.pad


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-10-2013
Ran by Sebastian at 2013-11-03 07:42:53
Running from C:\Users\Sebastian\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05)
AGEIA PhysX v7.07.24 (Version: 7.07.24)
ALPS Touch Pad Driver
Aquamarin Haushaltsbuch 2.9.2 b
Audacity 2.0.2 (Version: 2.0.2)
Avira Free Antivirus (Version: 13.0.0.4052)
Battlefield 1942
Battlefield 1942: Secret Weapons of WWII
Battlefield 1942: The Road To Rome
BitLord 2.3 (Version: 2.3.2-245)
Broadcom 802.11 Wireless Driver (Version: 1.0.0.0)
Broadcom Gigabit Integrated Controller (Version: 12.24.02)
Business Contact Manager für Outlook 2007 SP1 (Version: 3.0.7311.0)
CamStudio 2.7.2 (Version: 2.7.2)
CCleaner (Version: 4.04)
Cisco AnyConnect Diagnostics and Reporting Tool (Version: 3.1.04063)
Cisco AnyConnect Secure Mobility Client  (Version: 3.1.04063)
Cisco AnyConnect Secure Mobility Client (Version: 3.1.04063)
Conexant HD Audio (Version: 4.98.4.0)
Crazy Machines II - Gold (Version: 1.03)
Defraggler (Version: 2.15)
EasyCapture (Version: V4.0.09.1015)
Energy Management (Version: 4.3.1.5)
Google Earth Plug-in (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.165)
Intel(R) TV Wizard
Intel® Matrix Storage Manager
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
Junk Mail filter update (Version: 14.0.8089.726)
Lenovo EasyCamera
Lenovo EasyCamera (Version: 5.8.0.11)
Lenovo OneKey Recovery (Version: 7.0.0723)
Lenovo ReadyComm 5 (Version: 5.1.1.20)
Lenovo ReadyComm 5.0 Service (Version: 5.0.0.1)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Age of Empires II
Microsoft Age of Empires II: The Conquerors Expansion
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4505.1510)
Microsoft Search Enhancement Pack (Version: 1.2.123.0)
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) (Version: 9.3.4035.00)
Microsoft SQL Server Native Client (Version: 9.00.4035.00)
Microsoft SQL Server Setup Support Files (English) (Version: 9.00.4035.00)
Microsoft SQL Server VSS Writer (Version: 9.00.4035.00)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (Version: 9.0.21022.218)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Monkey Island™ Special Edition Collection (Version: 1.0.0.0)
Mozilla Firefox 13.0.1 (x86 de) (Version: 13.0.1)
Mozilla Maintenance Service (Version: 13.0.1)
Mozilla Thunderbird (3.1.7) (Version: 3.1.7 (de))
MSVCRT (Version: 14.0.1468.721)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4505.1510)
Office 15 Click-to-Run Licensing Component (Version: 15.0.4505.1510)
Office 15 Click-to-Run Localization Component (Version: 15.0.4505.1510)
OpenAL
PC-Doctor für Windows (Version: 6.0.5426.03)
Power2Go (Version: 5.6.0.4809d4)
RealDownloader (Version: 1.3.0)
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0)
RealPlayer (Version: 16.0.0)
Realtek USB 2.0 Card Reader (Version: 6.1.7600.30101)
RealUpgrade 1.1 (Version: 1.1.0)
Skype™ 6.1 (Version: 6.1.129)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Toolbar (Version: 14.0.8064.206)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
XP Codec Pack
Youtube Downloader HD v. 2.9.9.7

==================== Restore Points  =========================

Could not list Restore Points. Check WMI.


==================== Hosts content: ==========================

2009-07-14 03:04 - 2013-09-13 17:02 - 00000972 ____A C:\windows\system32\Drivers\etc\hosts

139.6.0.132	vpn-gm.fh-koeln.de ###Cisco AnyConnect VPN client modified this file. Please do not modify contents until this comment is removed.


==================== Scheduled Tasks (whitelisted) =============

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore1cecb1ce2133659.job => ?
Task: C:\windows\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1765301761-1438820261-2839696435-1008.job => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
Task: C:\windows\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1765301761-1438820261-2839696435-1008.job => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
Task: C:\windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1765301761-1438820261-2839696435-1008.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: C:\windows\Tasks\ReclaimerResumeInstall_Alexan.job => ?

==================== Loaded Modules (whitelisted) =============

2009-12-11 04:32 - 2008-12-20 04:20 - 00063304 _____ () C:\Program Files\Lenovo\Energy Management\kbdhook.dll
2009-12-11 04:32 - 2008-12-20 04:20 - 00051016 _____ () C:\Program Files\Lenovo\Energy Management\HookLib.dll
2013-07-19 22:29 - 2013-07-19 22:29 - 00063376 _____ () C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2011-05-11 13:10 - 2012-07-08 09:03 - 02042848 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: SVKP
Description: SVKP
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: SVKP
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (11/03/2013 06:47:34 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SVKP" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (11/02/2013 10:57:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SVKP" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (11/02/2013 10:37:57 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SVKP" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 55%
Total physical RAM: 3032.61 MB
Available physical RAM: 1343.64 MB
Total Pagefile: 6063.51 MB
Available Pagefile: 3928.03 MB
Total Virtual: 2047.88 MB
Available Virtual: 1904.87 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:210.29 GB) (Free:138.9 GB) NTFS
Drive d: (Lenovo) (Fixed) (Total:15.12 GB) (Free:14.41 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================