Windows Vista: xxxxx.xxx - Ungültiges Bild

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:11 on 17/11/2013 (otmar)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-11-2013 01
Ran by otmar (administrator) on OTMAR-PC on 17-11-2013 13:15:11
Running from C:\Users\otmar\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe
(Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.GBELECTRONICS12\MSSQL\Binn\sqlservr.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(Prolific Technology Inc.) C:\Windows\system32\IoctlSvc.exe
() C:\Windows\system32\PSIService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
() C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Sony Corporation) C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(Hewlett-Packard Company) C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\HpqSRmon.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Software Update\hpwuschd2.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Express Tray\ExpressTray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(GBelectronics GmbH) C:\Program Files\GBelectronics\Bucharchiv v3\Bucharchiv_v3_Service.exe
(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Program Files\Windows Mail\WinMail.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [itype] - C:\Program Files\Microsoft IntelliType Pro\itype.exe [1313640 2011-08-10] (Microsoft Corporation)
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [1821576 2011-08-01] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM\...\Run: [HTC Sync Loader] - C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [651264 2012-04-17] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6724128 2009-02-03] (Realtek Semiconductor)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Reader Application Helper] - C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2013-06-25] (Sony Corporation)
HKLM\...\Run: [HP Component Manager] - C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [233472 2003-10-23] (Hewlett-Packard Company)
HKLM\...\Run: [DeviceDiscovery] - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [229437 2003-05-21] (Hewlett-Packard)
HKLM\...\Run: [hpqSRMon] - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\HpqSRmon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM\...\Run: [HP Software Update] - C:\Program Files\Hewlett-Packard\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM\...\Run: [GDFirewallTray] - C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM\...\Run: [G Data AntiVirus Tray] - C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKLM\...\Run: [NBKeyScan] - C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2221352 2008-12-02] (Nero AG)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [Polar Sync] - [x]
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1840424 2008-12-12] (Nero AG)
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-05-05] (Google Inc.)
HKCU\...\Run: [GarminExpressTrayApp] - C:\Program Files\Garmin\Express Tray\ExpressTray.exe [1093464 2013-07-22] (Garmin Ltd or its subsidiaries)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [ 2013-07-26] ()
Startup: C:\Users\otmar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk /r \??\L:autocheck autochk * 

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://at.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.gmx.at/
hxxp://www.upc.at/
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www2.delta-search.com/?affID=119816&tt=gc_&babsrc=HP_ss&mntrId=B416002421030B8C
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=119816&tt=gc_&babsrc=SP_ss&mntrId=B416002421030B8C
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.16.16\bh\delta.dll (Delta-search.com)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.16.16\deltaTlbr.dll (Delta-search.com)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\otmar\AppData\Roaming\Mozilla\Firefox\Profiles\8wferdle.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @garmin.com/GpsControl - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @sony.com/ReaderDesktop - C:\Program Files\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\otmar\AppData\Roaming\Mozilla\Firefox\Profiles\8wferdle.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

Chrome: 
=======
CHR Extension: (YouTube) - C:\Users\otmar\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\otmar\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Gmail) - C:\Users\otmar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\otmar\AppData\Roaming\BabSolution\CR\delta2.crx

========================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor10.0; C:\Program Files\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe [2101280 2013-10-15] (G Data Software AG)
R2 BAV3; C:\Program Files\GBelectronics\Bucharchiv v3\Bucharchiv_v3_Service.exe [607104 2013-07-25] (GBelectronics GmbH)
S2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [0 2013-07-26] ()
R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG)
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®)
R2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [219480 2013-07-22] (Garmin Ltd or its subsidiaries)
R3 GDFwSvc; C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe [2373712 2013-10-17] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
R3 hpqcxs08; C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.)
R2 MSSQL$GBELECTRONICS12; C:\Program Files\Microsoft SQL Server\MSSQL11.GBELECTRONICS12\MSSQL\Binn\sqlservr.exe [160768 2012-12-29] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
S4 SQLAgent$GBELECTRONICS12; C:\Program Files\Microsoft SQL Server\MSSQL11.GBELECTRONICS12\MSSQL\Binn\SQLAGENT.EXE [448488 2012-12-29] (Microsoft Corporation)
S3 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [544768 2006-12-14] (Magix AG)

==================== Drivers (Whitelisted) ====================

R0 AFS; C:\Windows\System32\Drivers\AFS.sys [77004 2013-05-06] (Oak Technology Inc.)
R2 DbgMsg; C:\Windows\System32\Drivers\DbgMsg.sys [18240 2008-07-07] (Compuware Corporation - NuMega Lab)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [45912 2013-09-28] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [96600 2013-09-28] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [52056 2013-09-28] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [54104 2013-10-27] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [30040 2013-09-30] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [51032 2013-09-28] (G Data Software AG)
S3 MosIrUsb; C:\Windows\System32\DRIVERS\MosIrUsb.sys [22016 2007-10-11] ()
S4 RsFx0201; C:\Windows\System32\DRIVERS\RsFx0201.sys [270824 2012-10-20] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-17 13:15 - 2013-11-17 13:15 - 00016807 _____ C:\Users\otmar\Desktop\FRST.txt
2013-11-17 13:14 - 2013-11-17 13:14 - 00000000 ____D C:\FRST
2013-11-17 13:13 - 2013-11-17 13:13 - 01091023 _____ (Farbar) C:\Users\otmar\Desktop\FRST.exe
2013-11-17 13:11 - 2013-11-17 13:11 - 00000474 _____ C:\Users\otmar\Desktop\defogger_disable.log
2013-11-17 13:11 - 2013-11-17 13:11 - 00000000 _____ C:\Users\otmar\defogger_reenable
2013-11-17 13:10 - 2013-11-17 13:10 - 00050477 _____ C:\Users\otmar\Desktop\Defogger.exe
2013-11-17 13:02 - 2013-11-17 13:02 - 00014386 _____ C:\Users\otmar\Desktop\G Data Protokoll ID 1663.html
2013-11-13 18:32 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-13 18:32 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-13 18:32 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-13 18:32 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-13 18:32 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-13 18:32 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-13 18:32 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-13 18:32 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-13 18:32 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-13 18:32 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-13 18:32 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-13 18:32 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-13 18:32 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-13 18:32 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-13 18:32 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-13 18:32 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-13 14:32 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 14:32 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 14:32 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-13 14:32 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 14:32 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-06 16:21 - 2013-11-08 15:33 - 00000000 ____D C:\DVD-Video-Archiv-v7-Datenbank
2013-11-06 16:19 - 2013-11-08 15:22 - 00002163 _____ C:\Users\Public\Desktop\DVD-Video-Archiv+ v7.lnk
2013-11-06 15:39 - 2012-02-11 19:02 - 00045656 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL11.GBELECTRONICS12-sqlagtctr.dll
2013-11-06 15:38 - 2012-02-11 19:08 - 00147032 _____ (Microsoft Corporation) C:\Windows\system32\hadrres.dll
2013-11-06 15:38 - 2012-02-11 19:08 - 00069208 _____ (Microsoft Corporation) C:\Windows\system32\fssres.dll
2013-11-06 15:38 - 2012-02-11 19:03 - 00082520 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL$GBELECTRONICS12-sqlctr11.1.3000.0.dll
2013-11-06 15:36 - 2013-11-06 15:36 - 00000000 ____D C:\Windows\system32\RsFx
2013-11-06 15:36 - 2013-11-06 15:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 10.0
2013-11-06 15:34 - 2013-11-06 16:18 - 00000000 ____D C:\Windows\system32\1033
2013-11-06 15:16 - 2013-11-06 15:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-11-06 15:05 - 2013-11-08 15:02 - 00000000 ___SD C:\Bucharchiv_v3
2013-11-06 15:03 - 2013-11-06 15:03 - 00001950 _____ C:\Users\Public\Desktop\Bucharchiv v3.lnk
2013-11-06 14:58 - 2013-11-06 18:11 - 163606685 _____ C:\Program Files\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2013-11-06 14:45 - 2013-11-17 13:11 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-22 18:26 - 2013-10-22 18:26 - 00000000 ____D C:\Users\otmar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ROBOPro
2013-10-22 18:26 - 2013-10-22 18:26 - 00000000 ____D C:\Program Files\ROBOPro
2013-10-19 14:54 - 2013-10-19 14:54 - 00000000 ____D C:\Users\otmar\AppData\Local\Macromedia
2013-10-18 17:46 - 2013-10-18 17:46 - 00000000 ____D C:\ProgramData\McAfee
2013-10-18 11:54 - 2013-10-18 11:54 - 00000000 ____D C:\ProgramData\Oracle
2013-10-18 11:54 - 2013-10-18 11:54 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-18 11:53 - 2013-10-18 11:53 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-18 11:53 - 2013-10-18 11:52 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-18 11:53 - 2013-10-18 11:52 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-18 11:53 - 2013-10-18 11:52 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-18 11:52 - 2013-10-18 11:52 - 00000000 ____D C:\Program Files\Java

==================== One Month Modified Files and Folders =======

2013-11-17 13:15 - 2013-11-17 13:15 - 00016807 _____ C:\Users\otmar\Desktop\FRST.txt
2013-11-17 13:14 - 2013-11-17 13:14 - 00000000 ____D C:\FRST
2013-11-17 13:13 - 2013-11-17 13:13 - 01091023 _____ (Farbar) C:\Users\otmar\Desktop\FRST.exe
2013-11-17 13:11 - 2013-11-17 13:11 - 00000474 _____ C:\Users\otmar\Desktop\defogger_disable.log
2013-11-17 13:11 - 2013-11-17 13:11 - 00000000 _____ C:\Users\otmar\defogger_reenable
2013-11-17 13:11 - 2013-11-06 14:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-17 13:11 - 2013-05-05 14:46 - 00000000 ____D C:\Users\otmar
2013-11-17 13:10 - 2013-11-17 13:10 - 00050477 _____ C:\Users\otmar\Desktop\Defogger.exe
2013-11-17 13:02 - 2013-11-17 13:02 - 00014386 _____ C:\Users\otmar\Desktop\G Data Protokoll ID 1663.html
2013-11-17 12:59 - 2013-05-05 22:03 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-17 12:59 - 2013-05-05 22:02 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-17 12:53 - 2013-05-17 09:12 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-17 12:24 - 2006-11-02 13:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-17 12:24 - 2006-11-02 13:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-17 08:00 - 2008-01-21 02:35 - 01500966 _____ C:\Windows\WindowsUpdate.log
2013-11-17 02:00 - 2013-05-05 16:01 - 00000000 ____D C:\Users\otmar\AppData\Local\Adobe
2013-11-16 18:31 - 2008-01-21 08:16 - 01808930 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-16 18:26 - 2013-06-16 12:30 - 00000000 ____D C:\Users\otmar\AppData\Local\Htc
2013-11-16 18:24 - 2013-05-05 15:15 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-16 18:24 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-16 18:24 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Registration
2013-11-15 19:23 - 2006-11-02 14:01 - 00032534 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-14 15:58 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 15:39 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-13 18:32 - 2013-08-06 10:19 - 00000000 ____D C:\Windows\system32\MRT
2013-11-13 18:30 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-13 15:03 - 2013-05-10 11:39 - 00000000 ____D C:\Users\otmar\AppData\Roaming\WinTrack
2013-11-08 15:33 - 2013-11-06 16:21 - 00000000 ____D C:\DVD-Video-Archiv-v7-Datenbank
2013-11-08 15:22 - 2013-11-06 16:19 - 00002163 _____ C:\Users\Public\Desktop\DVD-Video-Archiv+ v7.lnk
2013-11-08 15:02 - 2013-11-06 15:05 - 00000000 ___SD C:\Bucharchiv_v3
2013-11-07 15:17 - 2013-10-10 14:38 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-06 18:11 - 2013-11-06 14:58 - 163606685 _____ C:\Program Files\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2013-11-06 16:55 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-11-06 16:21 - 2013-05-08 21:22 - 00000000 ____D C:\Users\otmar\AppData\Local\GBelectronics
2013-11-06 16:19 - 2013-05-08 21:18 - 00000000 ____D C:\ProgramData\GBelectronics
2013-11-06 16:19 - 2013-05-08 21:18 - 00000000 ____D C:\Program Files\GBelectronics
2013-11-06 16:18 - 2013-11-06 15:34 - 00000000 ____D C:\Windows\system32\1033
2013-11-06 15:37 - 2013-11-06 15:16 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-11-06 15:36 - 2013-11-06 15:36 - 00000000 ____D C:\Windows\system32\RsFx
2013-11-06 15:36 - 2013-11-06 15:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 10.0
2013-11-06 15:36 - 2006-11-02 12:18 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-11-06 15:35 - 2013-05-05 19:17 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-11-06 15:10 - 2006-11-02 13:47 - 00544808 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-06 15:04 - 2013-05-05 14:48 - 00167952 _____ C:\Users\otmar\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-06 15:03 - 2013-11-06 15:03 - 00001950 _____ C:\Users\Public\Desktop\Bucharchiv v3.lnk
2013-10-27 18:45 - 2008-01-21 03:47 - 00850346 _____ C:\Windows\PFRO.log
2013-10-27 18:42 - 2013-09-28 11:38 - 00001843 _____ C:\Users\Public\Desktop\G Data InternetSecurity 2014.lnk
2013-10-27 18:42 - 2013-07-25 09:40 - 00054104 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd32.sys
2013-10-22 18:26 - 2013-10-22 18:26 - 00000000 ____D C:\Users\otmar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ROBOPro
2013-10-22 18:26 - 2013-10-22 18:26 - 00000000 ____D C:\Program Files\ROBOPro
2013-10-19 14:54 - 2013-10-19 14:54 - 00000000 ____D C:\Users\otmar\AppData\Local\Macromedia
2013-10-18 17:46 - 2013-10-18 17:46 - 00000000 ____D C:\ProgramData\McAfee
2013-10-18 17:46 - 2013-05-17 09:12 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-18 17:46 - 2013-05-17 09:12 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-18 17:45 - 2013-08-11 22:09 - 00000000 ____D C:\Program Files\Amazon
2013-10-18 11:54 - 2013-10-18 11:54 - 00000000 ____D C:\ProgramData\Oracle
2013-10-18 11:54 - 2013-10-18 11:54 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-18 11:53 - 2013-10-18 11:53 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-18 11:52 - 2013-10-18 11:53 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-18 11:52 - 2013-10-18 11:53 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-18 11:52 - 2013-10-18 11:53 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-18 11:52 - 2013-10-18 11:52 - 00000000 ____D C:\Program Files\Java

Some content of TEMP:
====================
C:\Users\otmar\AppData\Local\Temp\ABCofPics.exe
C:\Users\otmar\AppData\Local\Temp\DeltaTB.exe
C:\Users\otmar\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe
C:\Users\otmar\AppData\Local\Temp\hpzscr01.exe
C:\Users\otmar\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\otmar\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\otmar\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\otmar\AppData\Local\Temp\mgxfonts.exe
C:\Users\otmar\AppData\Local\Temp\QuickShare1.exe
C:\Users\otmar\AppData\Local\Temp\readSTILog.dll
C:\Users\otmar\AppData\Local\Temp\setup_3.2.20.exe
C:\Users\otmar\AppData\Local\Temp\SmartbarExeInstaller.exe
C:\Users\otmar\AppData\Local\Temp\unwise.exe
C:\Users\otmar\AppData\Local\Temp\UpdaterCopy.exe
C:\Users\otmar\AppData\Local\Temp\Vorlagen_Explorer.exe
C:\Users\otmar\AppData\Local\Temp\_isF7F6.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-17 06:31

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-11-2013 01
Ran by otmar at 2013-11-17 13:16:11
Running from C:\Users\otmar\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: G Data InternetSecurity 2014 (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G Data InternetSecurity 2014 (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installed Programs ======================

1click Fotorahmen
3D-Weltatlas 3.0 (Version: 1.00.0000)
45.000 Cliparts
Adobe AIR (Version: 3.7.0.1860)
Adobe Community Help (Version: 3.5.23)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Photoshop Elements 10 (Version: 10.0)
Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8)
AKVIS Decorator (Version: 2.0.431.8072)
AKVIS NatureArt (Version: 3.0.1114.8074)
Amazon Kindle
Audio-CD-Archiv v7 (Version: 7.00.723)
Avery Zweckform DesignPro
Avery Zweckform Etiketten Assistent
BenVista PhotoZoom Classic 4.1.4 (HKCU Version: 4.1.4)
BrowserProtect
Bucharchiv v2 (Version: 2.00.236)
Bucharchiv v3 (Version: 3.00.335)
BufferChm (Version: 130.0.331.000)
Bundled software uninstaller
Color Efex Pro 3.0 Standard (Version: 3.108)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
Cut Out 3.0
Delta Chrome Toolbar
Delta toolbar   (Version: 1.8.16.16)
DesignCAD 20 (Version: 20.0.0)
DesignCAD Toolkit Basis Version 1.1b (Version: 1.1b)
DesignPro 5 (Version: 5.3.0705)
Destinations (Version: 130.0.0.0)
DocProc (Version: 13.0.0.0)
DVD-Video-Archiv+ v6 (Version: 6.00.383)
DVD-Video-Archiv+ v7 (Version: 7.00.416)
Easyplan3D 4.1.20111121 (Version: 4.1)
Elements 10 Organizer (Version: 10.0)
Elevated Installer (Version: 2.2.17)
Firebird SQL Server - MAGIX Edition (Version: 2.1.32.0)
Franzis 3D-Eisenbahnplaner 12 (Version: 12.09)
G Data InternetSecurity 2014 (Version: 24.0.3.4)
Garmin BaseCamp (Version: 4.2.2)
Garmin Express (Version: 2.2.17)
Garmin Express Tray (Version: 2.2.17)
Garmin MapInstall (Version: 4.0.3)
Garmin MapSource (Version: 6.16.3)
Garmin POI Loader (Version: 2.7.2)
Garmin TOPO Deutschland 2010 (Version: 4.0.0.0)
Garmin TOPO Österreich v2 (Version: 2.0.0.0)
Garmin Update Service (Version: 2.2.17)
Garmin USB Drivers (Version: 1.0.0.0)
Garmin USB Drivers (Version: 2.3.0.0)
GDR 3128 für SQL Server 2012 (KB2793634) (Version: 11.1.3128.0)
Google Earth (Version: 7.1.1.1888)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4601.54)
Google Update Helper (Version: 1.3.21.165)
GPBaseService2 (Version: 130.0.371.000)
GrafPlan 1.1
HappyFoto-Designer 5.1
HDR Darkroom Windows Version v4.0 (Version: Windows Version v4.0)
hp deskjet 5100 (Version: 1.03.0000)
HP Imaging Device Functions 13.0 (Version: 13.0)
HP Photo and Imaging 2.0 - Deskjet Series (Version: 2.00.0001)
HP Photosmart Essential 3.5 (Version: 3.5)
hp print screen utility
HP Scanjet G4000 Series (Version: 13.0)
HP Solution Center 13.0 (Version: 13.0)
HP Speicher-Disc (Version: 1.0.4.805)
HP Update (Version: 5.005.000.001)
hpg4000 (Version: 13.0.0.0)
HPPhotosmartEssential (Version: 2.04.0000)
HPProductAssistant (Version: 130.0.371.000)
HTC BMP USB Driver (Version: 1.0.5375)
HTC Driver Installer (Version: 3.0.0.021)
HTC Sync (Version: 3.2.20)
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
KnockOut 2
Kreativ Drucken easy 2012
MAGIX Foto Manager 10 (Version: 8.0.2.184)
MAGIX MP3 deluxe MX (Version: 18.0.0.109)
MAGIX Music Cleaning Lab 2008 deluxe 9.0.0.0 (D) (Version: 9.0.0.0)
MAGIX PC Visit (Version: 4.3.6.1987)
MAGIX Screenshare (Version: 4.3.6.1987)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6)
MIBA Smartcat 2.1 (MIBA Jahrbuch 2009) (Version: 2.1)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0)
Microsoft IntelliType Pro 8.2 (Version: 8.20.469.0)
Microsoft Office 2000 Disc 2 (Version: 9.00.2816)
Microsoft Office 2000 Professional (Version: 9.00.2816)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2008 R2 Native Client (Version: 10.50.1600.1)
Microsoft SQL Server 2008 Setup Support Files  (Version: 10.1.2731.0)
Microsoft SQL Server 2012
Microsoft SQL Server 2012 Native Client  (Version: 11.1.3000.0)
Microsoft SQL Server 2012 RsFx Driver (Version: 11.1.3000.0)
Microsoft SQL Server 2012 Setup (English) (Version: 11.1.3128.0)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (Version: 11.1.3000.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft VSS Writer for SQL Server 2012 (Version: 11.1.3000.0)
Microsoft Word 2000 (Version: 9.00.2816)
Microsoft Works (Version: 9.7.0621)
Mozilla Firefox 25.0 (x86 de) (Version: 25.0)
Mozilla Maintenance Service (Version: 25.0)
MP3 deluxe MX Update (Version: 18.0.3.115)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
Mufin MusicFinder Base 1.0.1.229 (D) (Version: 1.0.1.229)
Nero 8 Essentials (Version: 8.3.500)
neroxml (Version: 1.0.0)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Drivers
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OCR Software by I.R.I.S. 13.0 (Version: 13.0)
OLYMPUS A-GPS Utility (Version: 1.0.0)
OLYMPUS Digital Camera Updater (Version: 1.0.3)
OLYMPUS Viewer 3 (Version: 1.0.0)
OpenOffice.org 3.4.1 (Version: 3.41.9593)
Picasa 3 (Version: 3.9)
Polar IrDA USB Adapter (Version: 1.03.0000)
Polar ProTrainer (Version: 5.35.160)
PSE10 STI Installer (Version: 10.0)
Railroad & Co. Version 7.0
Reader for PC (Version: 2.1.00.06250)
Realtek High Definition Audio Driver (Version: 6.0.1.5783)
RescuePRO Deluxe 5.1.2.7 (Version: 5.1.2.7)
ROBOPro (fischertechnik) Programm
Scan (Version: 13.0.0.0)
Service Pack 1 für SQL Server 2012 (KB2674319) (Version: 11.1.3000.0)
SILKYPIX Elements Deutsch (Version: 4)
SolutionCenter (Version: 130.0.373.000)
SQL Server 2012 Common Files (Version: 11.1.3000.0)
SQL Server 2012 Database Engine Services (Version: 11.1.3000.0)
SQL Server 2012 Database Engine Shared (Version: 11.1.3000.0)
SQL Server Browser for SQL Server 2012 (Version: 11.1.3000.0)
Sql Server Customer Experience Improvement Program (Version: 11.1.3000.0)
UltraSnap 1.1
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
Vista Codec Package (Version: 6.5.2)
Viveza (Version: 1.005)
WebReg (Version: 130.0.132.017)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (Version: 06/03/2009 2.3.0.0)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (Version: 09/09/2009 1.0.0.0)
WinTrack Version 11.0 3D (Version: 11.0 3D)
Wondershare Flash Gallery Factory 5.2.0.14 (Version: 5.2.0.14)

==================== Restore Points  =========================

01-10-2013 11:33:53 Windows Update
04-10-2013 15:22:43 Geplanter Prüfpunkt
06-10-2013 20:37:40 Geplanter Prüfpunkt
07-10-2013 14:15:30 Geplanter Prüfpunkt
09-10-2013 10:16:21 Windows Update
10-10-2013 15:26:48 Geplanter Prüfpunkt
11-10-2013 15:27:32 Geplanter Prüfpunkt
11-10-2013 18:12:00 Windows Update
12-10-2013 12:41:46 Geplanter Prüfpunkt
13-10-2013 19:00:42 Geplanter Prüfpunkt
15-10-2013 11:17:35 Geplanter Prüfpunkt
15-10-2013 11:31:06 Windows Update
18-10-2013 10:51:31 Installed Java 7 Update 45
19-10-2013 15:21:56 Geplanter Prüfpunkt
20-10-2013 17:45:33 Geplanter Prüfpunkt
22-10-2013 14:28:53 Windows Update
23-10-2013 12:53:21 Geplanter Prüfpunkt
24-10-2013 12:09:34 Geplanter Prüfpunkt
27-10-2013 17:38:22 Windows Update
30-10-2013 16:44:13 Geplanter Prüfpunkt
03-11-2013 19:47:54 Windows Update
06-11-2013 13:10:01 Geplanter Prüfpunkt
06-11-2013 14:01:51 Bucharchiv v3 wurde installiert.
06-11-2013 15:19:00 DVD-Video-Archiv+ v7 wurde installiert.
07-11-2013 16:24:07 Geplanter Prüfpunkt
08-11-2013 11:55:51 Windows Update
09-11-2013 14:57:47 Geplanter Prüfpunkt
10-11-2013 17:43:34 Geplanter Prüfpunkt
11-11-2013 16:35:29 Geplanter Prüfpunkt
12-11-2013 12:17:20 Windows Update
13-11-2013 16:10:06 Geplanter Prüfpunkt
13-11-2013 17:29:44 Windows Update
15-11-2013 16:29:41 Geplanter Prüfpunkt
16-11-2013 19:39:23 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {07AC54D6-DF64-4BB7-9736-3AB9B1A2D609} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-05-05] (Google Inc.)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {5EA71A9D-F886-4334-96AD-243EDA607E2F} - System32\Tasks\EPUpdater => C:\Users\otmar\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] ()
Task: {9712D84F-11BF-40AE-A61A-C28C79D624BF} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => C:\Program Files\Microsoft IntelliType Pro\itype.exe [2011-08-10] (Microsoft Corporation)
Task: {BA472C01-3A64-441A-9FD7-4C4E170B46A3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-18] (Adobe Systems Incorporated)
Task: {BF80D6C8-8CA2-46E8-9C0E-BC09035A537B} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - otmar => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)
Task: {CAD92507-992F-41D9-A39A-55690401E7E4} - System32\Tasks\Microsoft_Hardware_Launch_rundll32_exe => C:\Windows\System32\url.dll [2013-10-13] (Microsoft Corporation)
Task: {CFC893C1-AC75-4EBC-A2EC-C6E22A426510} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17] ()
Task: {D8AC04C4-4B94-43FE-AA4F-362048C66495} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {DD70087A-BDF1-4179-B80F-F8C0319FE0AA} - System32\Tasks\AdobeAAMUpdater-1.0-otmar-PC-otmar => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-03-21] (Adobe Systems Incorporated)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {F435B398-4315-4863-940A-8828D668B66C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-05-05] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-04-17 14:05 - 2012-04-17 14:05 - 00103936 _____ () C:\Program Files\HTC\HTC Sync 3.0\OutputLog.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00516599 _____ () C:\Program Files\HTC\HTC Sync 3.0\sqlite3.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00094208 _____ () C:\Program Files\HTC\HTC Sync 3.0\fdHttpd.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00389120 _____ () C:\Program Files\HTC\HTC Sync 3.0\HtcDetect.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00151552 _____ () C:\Program Files\HTC\HTC Sync 3.0\htcDisk.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00172032 _____ () C:\Program Files\HTC\HTC Sync 3.0\htcDetectLegend.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00559244 _____ () C:\Program Files\HTC\HTC Sync 3.0\sqlite3.7.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 01515520 _____ () C:\Program Files\HTC\HTC Sync 3.0\Maps\R66Api.dll
2013-06-25 17:23 - 2013-06-25 17:23 - 00880640 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\fsk.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00040264 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskMediaPlayers.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00239944 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\Fskin.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00026952 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskinLocalize.dll
2013-05-23 18:54 - 2013-05-23 18:54 - 00798720 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskSecurity.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00125256 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskDocumentViewer.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00016200 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskPower.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00024904 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskNetInterface.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00017224 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskMobileMediaDevice.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00015176 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskTimeHardware.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00034632 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\ticket.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00018760 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\ebookDeviceNotifier.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00092488 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\ebookUsb.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00149832 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\readerAppHelper.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00178504 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\USBDetector.dll
2013-08-14 09:30 - 2013-08-14 09:30 - 00279504 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll
2012-08-10 15:51 - 2012-08-10 15:51 - 00985088 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll
2012-08-10 15:50 - 2012-08-10 15:50 - 00170496 _____ () C:\Program Files\OpenOffice.org 3\program\libxslt.dll
2013-11-06 14:45 - 2013-11-06 14:45 - 03368048 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:3241321C
AlternateDataStreams: C:\ProgramData\TEMP:5B8EC693

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: 802.11 n WLAN
Description: 802.11 n WLAN
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/16/2013 08:39:23 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: 
Details:
AddCoreCsiFiles : BeginFileEnumeration() failed.

System Error:
Zugriff verweigert

Error: (11/16/2013 08:39:22 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: 
Details:
AddCoreCsiFiles : BeginFileEnumeration() failed.

System Error:
Zugriff verweigert

Error: (11/16/2013 06:25:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/15/2013 05:29:41 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: 
Details:
AddCoreCsiFiles : BeginFileEnumeration() failed.

System Error:
Zugriff verweigert

Error: (11/15/2013 05:29:40 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: 
Details:
AddCoreCsiFiles : BeginFileEnumeration() failed.

System Error:
Zugriff verweigert

Error: (11/15/2013 02:43:31 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung NMIndexStoreSvr.exe, Version 3.3.9.0, Zeitstempel 0x493788e3, fehlerhaftes Modul NMIndexStoreSvr.exe, Version 3.3.9.0, Zeitstempel 0x493788e3, Ausnahmecode 0xc0000409, Fehleroffset 0x001101f2,
Prozess-ID 0xdf4, Anwendungsstartzeit NMIndexStoreSvr.exe0.

Error: (11/15/2013 02:42:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/14/2013 05:33:35 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung NMIndexStoreSvr.exe, Version 3.3.9.0, Zeitstempel 0x493788e3, fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode 0xc0000005, Fehleroffset 0x07070707,
Prozess-ID 0xfac, Anwendungsstartzeit NMIndexStoreSvr.exe0.

Error: (11/14/2013 05:32:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/14/2013 05:26:05 PM) (Source: Windows Search Service) (User: )
Description: Der Filterhostprozess kann nicht initialisiert werden. Der Vorgang wird abgebrochen.


Details:
	Klasse nicht registriert
 (0x80040154)


System errors:
=============
Error: (11/16/2013 06:25:54 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%193

Error: (11/16/2013 06:24:40 PM) (Source: NETLOGON) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (11/15/2013 02:42:24 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%193

Error: (11/15/2013 02:41:21 PM) (Source: NETLOGON) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (11/14/2013 05:32:52 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%193

Error: (11/14/2013 05:32:04 PM) (Source: NETLOGON) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (11/14/2013 05:32:02 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 14.11.2013 um 17:28:56 unerwartet heruntergefahren.

Error: (11/14/2013 03:42:38 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%193

Error: (11/14/2013 03:42:35 PM) (Source: NETLOGON) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (11/13/2013 02:24:29 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%193


Microsoft Office Sessions:
=========================
Error: (11/16/2013 08:39:23 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddCoreCsiFiles : BeginFileEnumeration() failed.

System Error:
Zugriff verweigert

Error: (11/16/2013 08:39:22 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddCoreCsiFiles : BeginFileEnumeration() failed.

System Error:
Zugriff verweigert

Error: (11/16/2013 06:25:52 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/15/2013 05:29:41 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddCoreCsiFiles : BeginFileEnumeration() failed.

System Error:
Zugriff verweigert

Error: (11/15/2013 05:29:40 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddCoreCsiFiles : BeginFileEnumeration() failed.

System Error:
Zugriff verweigert

Error: (11/15/2013 02:43:31 PM) (Source: Application Error)(User: )
Description: NMIndexStoreSvr.exe3.3.9.0493788e3NMIndexStoreSvr.exe3.3.9.0493788e3c0000409001101f2df401cee2087fbf8c31

Error: (11/15/2013 02:42:24 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/14/2013 05:33:35 PM) (Source: Application Error)(User: )
Description: NMIndexStoreSvr.exe3.3.9.0493788e3unknown0.0.0.000000000c000000507070707fac01cee1571aaf526b

Error: (11/14/2013 05:32:52 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/14/2013 05:26:05 PM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Klasse nicht registriert
 (0x80040154)


CodeIntegrity Errors:
===================================
  Date: 2013-11-17 13:15:29.541
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-17 13:15:29.447
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-17 13:15:29.354
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-17 13:15:29.260
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-14 16:42:14.015
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\otmar\AppData\Local\Temp\tmpA24C.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-14 16:42:13.906
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\otmar\AppData\Local\Temp\tmpA24C.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-14 16:42:13.812
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\otmar\AppData\Local\Temp\tmpA24C.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-14 16:42:13.719
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\otmar\AppData\Local\Temp\tmpA24C.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-14 16:25:59.120
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\otmar\AppData\Local\Temp\tmpC1FC.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-14 16:25:59.011
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\otmar\AppData\Local\Temp\tmpC1FC.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 57%
Total physical RAM: 3325.27 MB
Available physical RAM: 1413.43 MB
Total Pagefile: 6845.55 MB
Available Pagefile: 4274.51 MB
Total Virtual: 2047.88 MB
Available Virtual: 1889.37 MB

==================== Drives ================================

Drive c: (BOOT) (Fixed) (Total:911.5 GB) (Free:583.85 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (HDDRIVE2GO) (Fixed) (Total:931.51 GB) (Free:693.07 GB) NTFS
Drive e: (RECOVER) (Fixed) (Total:20 GB) (Free:9.88 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 932 GB) (Disk ID: 2BAB359D)
Partition 1: (Active) - (Size=912 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 932 GB) (Disk ID: A042A26C)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-11-17 13:45:10
Windows 6.0.6002 Service Pack 2 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST31000333AS rev.BD15 931,51GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\otmar\AppData\Local\Temp\uwloapow.sys


---- System - GMER 2.1 ----

INT 0x2D        \??\C:\Windows\System32\Drivers\DbgMsg.sys  A1CC9C90

---- Kernel code sections - GMER 2.1 ----

.text           C:\Windows\system32\DRIVERS\nvlddmkm.sys    section is writeable [0x8F207340, 0x411467, 0xE8000020]

---- Devices - GMER 2.1 ----

AttachedDevice  \FileSystem\fastfat \Fat                    fltmgr.sys

---- EOF - GMER 2.1 ----
         

 Virenprüfung mit G Data InternetSecurity 2014
Version 24.0.3.4 (15.10.2013)
Virensignaturen vom 17.11.2013
Job: otmar
Startzeit: 17.11.2013 01:00:00
Engine(s): Engine A (AVA 22.13836), Engine B (GD 23.2400)
Heuristik: Ein
Archive: Ein
Systembereiche: Ein
RootKits prüfen: Ein

Prüfung der Systembereiche...
Prüfung aller im Speicher befindlichen Prozesse und Verweise im Autostart...
Prüfung auf RootKits...
Prüfung aller lokalen Festplatten...
Analyse vollständig durchgeführt: 17.11.2013 03:46:31
    809602 Dateien überprüft
    0 infizierte Dateien gefunden
    0 verdächtige Dateien gefunden


– Der Zugriff auf die folgenden Dateien wurde verweigert:
C:\ProgramData\MAGIX\Common\Online Services Info\index_0407.htm
C:\ProgramData\MAGIX\Common\Online Services Info\reminder1_0407.htm
C:\ProgramData\MAGIX\Common\Online Services Info\services_0407.ini
C:\ProgramData\MAGIX\Common\Online Services Info\0407\master\7x7.gif
C:\ProgramData\MAGIX\Common\Online Services Info\0407\master\emotion.jpg
C:\ProgramData\MAGIX\Common\Online Services Info\0407\master\btn_aktualisieren.gif
C:\ProgramData\MAGIX\Common\Online Services Info\0407\master\ipace_logo.gif
C:\ProgramData\MAGIX\Common\Online Services Info\0407\master\magix_logo_mailing.gif
C:\ProgramData\MAGIX\Common\Online Services Info\0407\master\pixellinie.gif
C:\ProgramData\MAGIX\Common\Online Services Info\0407\master\popup_01.gif
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\digimag_tsg_int.jpg
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_catooh_INT.jpg
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_com_INT.jpg
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_com_INT.gif
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_obs_INT.jpg
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_mygoya_INT.gif
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_ods_INT.jpg
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_ofa_INT.jpg
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_ofs_INT.jpg
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_oms_INT.jpg
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_pcs_INT.jpg
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_scd_INT.jpg
C:\ProgramData\MAGIX\Common\Online Services Info\0407\redaktion\os_wss_INT.jpg
C:\ProgramData\MAGIX\C_Foto_Manager_10\crm.dat
C:\ProgramData\MAGIX\C_Foto_Manager_10\Fotomanager_dlx.ini
C:\ProgramData\MAGIX\C_Foto_Manager_10\UserData\FotoManager_dlx.ini
C:\ProgramData\MAGIX\C_Foto_Manager_10\UserData\UnfinishedScanJobs.ini
C:\ProgramData\MAGIX\C_Foto_Manager_2008\CritOp.log
C:\ProgramData\MAGIX\C_Foto_Manager_2008\Communities\MxCommunities.xml
C:\ProgramData\MAGIX\C_Foto_Manager_2008\FotoMaker.ini
C:\ProgramData\MAGIX\C_Mufin MusicFinder\CritOp.log
C:\ProgramData\MAGIX\C_Mufin MusicFinder\crm.dat
C:\ProgramData\MAGIX\C_Mufin MusicFinder\MxAutoUpdEMail.ini
C:\ProgramData\MAGIX\C_Mufin MusicFinder\Sonos.ini
C:\Users\otmar\AppData\Local\Temp\~DF353F.tmp
C:\Users\otmar\AppData\Local\Temp\~DF6E51.tmp
C:\Users\otmar\AppData\Local\Temp\~DF6EEA.tmp

– Die folgenden Dateien sind Passwortgeschützt:
C:\Program Files\GBelectronics\Bucharchiv v3\ToolsBA1.cto
C:\Program Files\GBelectronics\Bucharchiv v3\ToolsBA2.cto
C:\Program Files\GBelectronics\Audio-CD-Archiv 6.0 Edition 2008\Update\aca_upd_638_SP1.exe
C:\Program Files\GBelectronics\Audio-CD-Archiv v7\Toolsaca1.cto
C:\Program Files\GBelectronics\Audio-CD-Archiv v7\Toolsaca2.cto
C:\Program Files\GBelectronics\Audio-CD-Archiv v7\Toolsaca3.cto
C:\Program Files\GBelectronics\Audio-CD-Archiv v7\Toolsaca4.cto
C:\Program Files\GBelectronics\Audio-CD-Archiv v7\Toolsaca6.cto
C:\Program Files\GBelectronics\Audio-CD-Archiv v7\de\Audio-CD-Archiv-v7.gbhs
C:\Program Files\GBelectronics\Audio-CD-Archiv v7\en\Audio-CD-Archiv-v7.gbhs
C:\Program Files\GBelectronics\Bucharchiv v2\Toolsba1.cto
C:\Program Files\GBelectronics\Bucharchiv v2\Toolsba2.cto
C:\Program Files\GBelectronics\Bucharchiv v2\Toolsba3.cto
C:\Program Files\GBelectronics\Bucharchiv v2\de\Bucharchiv_v2.gbhs
C:\Program Files\GBelectronics\Bucharchiv v2\en\Bucharchiv_v2.gbhs
C:\Program Files\GBelectronics\Bucharchiv v3\ToolsBA1.cto
C:\Program Files\GBelectronics\Bucharchiv v3\ToolsBA2.cto
C:\Program Files\GBelectronics\Bucharchiv v3\ToolsBA3.cto
C:\Program Files\GBelectronics\Bucharchiv v3\ToolsBA4.cto
C:\Program Files\GBelectronics\Bucharchiv v3\ToolsBA6.cto
C:\Program Files\GBelectronics\DVD-Video-Archiv+ v6\ToolsDVD1.cto
C:\Program Files\GBelectronics\DVD-Video-Archiv+ v6\ToolsDVD2.cto
C:\Program Files\GBelectronics\DVD-Video-Archiv+ v6\ToolsDVD3.cto
C:\Program Files\GBelectronics\DVD-Video-Archiv+ v6\de\DVD-Video-Archiv.gbhs
C:\Program Files\GBelectronics\DVD-Video-Archiv+ v7\ToolsDVD1.cto
C:\Program Files\GBelectronics\DVD-Video-Archiv+ v7\ToolsDVD3.cto
C:\Program Files\GBelectronics\DVD-Video-Archiv+ v7\ToolsDVD2.cto
D:\Bücher\Buch Archiv\Update\ba_upd_240.exe
D:\GBelectronics\Bucharchiv_v2 Datenbank\Update\ba_upd_240.exe
C:\Program Files\PM\3DWeltatlas30\DE\UI.aim
C:\Alte Festplatte\Dokumente und Einstellungen\Otmar\Anwendungsdaten\Adobe\Acrobat\7.0\Messages\DEU\read0700win_DEUadbe0700.pdf
C:\Alte Festplatte\Dokumente und Einstellungen\Otmar\Anwendungsdaten\Adobe\Acrobat\7.0\Messages\DEU\read0600win_DEUyhoo0010.pdf
C:\Alte Festplatte\Dokumente und Einstellungen\Otmar\Anwendungsdaten\DirektFotoSystem2\dealer.zip
C:\Alte Festplatte\Dokumente und Einstellungen\Otmar\Anwendungsdaten\DirektFotoSystem2\artikelstamm.zip
C:\Alte Festplatte\Dokumente und Einstellungen\Otmar\Anwendungsdaten\DirektFotoSystem2\system.zip
C:\Alte Festplatte\Dokumente und Einstellungen\Otmar\Anwendungsdaten\DirektFotoSystem2\update.zip
C:\Alte Festplatte\Dokumente und Einstellungen\Otmar\Anwendungsdaten\DirektFotoSystem2\user.zip
C:\Alte Festplatte\Dokumente und Einstellungen\Otmar\Anwendungsdaten\DirektFotoSystem2\version.zip
C:\Alte Festplatte\Programme\DirektFotoSystem\artikelstamm.zip
C:\Alte Festplatte\Programme\DirektFotoSystem\dealer.zip
C:\Alte Festplatte\Programme\DirektFotoSystem\version.zip
C:\Alte Festplatte\Programme\DirektFotoSystem2\plugins\fotobuch2\save\20060829191359\config.zip
C:\Alte Festplatte\Programme\DirektFotoSystem2\update\plugin.exe
C:\Alte Festplatte\Programme\networld\DirektFotoSystem\artikelstamm.zip
C:\Alte Festplatte\Programme\networld\DirektFotoSystem\dealer.zip
C:\Alte Festplatte\Programme\networld\DirektFotoSystem\version.zip
C:\Alte Festplatte\Software\AdobeReader6\DATA1.CAB
C:\ProgramData\GBelectronics\Audio-CD-Archiv 6.0\Backupsystem.bin
C:\Windows.old\Program Files\GBelectronics\Audio-CD-Archiv 6.0 Edition 2008\Update\aca_upd_634_SP1.exe
C:\Windows.old\Program Files\GBelectronics\Audio-CD-Archiv 6.0 Edition 2008\Update\aca_upd_638_SP1.exe
C:\Windows.old\Program Files\GBelectronics\Audio-CD-Archiv v7\Toolsaca1.cto
C:\Windows.old\Program Files\GBelectronics\Audio-CD-Archiv v7\Toolsaca2.cto
C:\Windows.old\Program Files\GBelectronics\Audio-CD-Archiv v7\Toolsaca3.cto
C:\Windows.old\Program Files\GBelectronics\Audio-CD-Archiv v7\Toolsaca4.cto
C:\Windows.old\Program Files\GBelectronics\Audio-CD-Archiv v7\Toolsaca6.cto
C:\Windows.old\Program Files\GBelectronics\Audio-CD-Archiv v7\de\Audio-CD-Archiv-v7.gbhs
C:\Windows.old\Program Files\GBelectronics\Audio-CD-Archiv v7\en\Audio-CD-Archiv-v7.gbhs
C:\Windows.old\Program Files\GBelectronics\Bucharchiv v2\Toolsba1.cto
C:\Windows.old\Program Files\GBelectronics\Bucharchiv v2\Toolsba2.cto
C:\Windows.old\Program Files\GBelectronics\Bucharchiv v2\Toolsba3.cto
C:\Windows.old\Program Files\GBelectronics\Bucharchiv v2\de\Bucharchiv_v2.gbhs
C:\Windows.old\Program Files\GBelectronics\Bucharchiv v2\en\Bucharchiv_v2.gbhs
C:\Windows.old\Program Files\GBelectronics\Bucharchiv v2\Update\ba_upd_240.exe
C:\Windows.old\Program Files\GBelectronics\DVD-Video-Archiv+ 5.0 Edition 2009\Update\dvd_upd_276.exe
C:\Windows.old\Program Files\GBelectronics\DVD-Video-Archiv+ 5.0 Edition 2009\Update\dvd_upd_280.exe
C:\Windows.old\Program Files\GBelectronics\DVD-Video-Archiv+ 5.0 Edition 2009\Update\dvd_upd_284.exe
C:\Windows.old\Program Files\GBelectronics\DVD-Video-Archiv+ v6\ToolsDVD1.cto
C:\Windows.old\Program Files\GBelectronics\DVD-Video-Archiv+ v6\ToolsDVD2.cto
C:\Windows.old\Program Files\GBelectronics\DVD-Video-Archiv+ v6\ToolsDVD3.cto
C:\Windows.old\Program Files\GBelectronics\DVD-Video-Archiv+ v6\de\DVD-Video-Archiv.gbhs
C:\Windows.old\Program Files\PM\3DWeltatlas30\DE\UI.aim
C:\Windows.old\ProgramData\GBelectronics\Audio-CD-Archiv 6.0\Backupsystem.bin
C:\Windows.old\Users\Otmar\AppData\Local\Temp\ERROR_LOG_Audio-CD-Archiv v7.log.zip