win7 64bit: malwarebyte meldet Infektionen

klausc127 · 21.12.2013, 15:06

Hallo,
ein scan mit malwarebyte meldet Infektionen:

Code:

ATTFilter

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.20.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16750
user :: USER-TOSH [Administrator]

20.12.2013 15:13:31
MBAM-log-2013-12-20 (16-57-14).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|F:\|L:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 521370
Laufzeit: 32 Minute(n), 15 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 5
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\BabylonToolbar (PUP.Optional.BabylonToolBar.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt.
HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Google\Chrome\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf (PUP.Optional.SpeedAnalysis2.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 1
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.StartPage) -> Bösartig: (hxxp://www2.delta-search.com/?affID=119677&babsrc=HP_ss&mntrId=765988532E772D39) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt.

Infizierte Verzeichnisse: 7
C:\Users\user\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Roaming\SpeedAnalysis2 (PUP.Optional.SpeedAnalysis.A) -> Keine Aktion durchgeführt.
C:\Users\Klaus\AppData\Roaming\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Roaming\File Scout (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Local\Temp\mt_ffx\Delta (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Local\Temp\mt_ffx\Delta\delta (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.16.16 (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt.

Infizierte Dateien: 20
C:\Users\Klaus\AppData\Local\Temp\M1BNT0oO.exe.part (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt.
C:\Users\Klaus\Downloads\BestCodecsPackSetup(1).exe (Adware.InstallBrain) -> Keine Aktion durchgeführt.
C:\Users\Klaus\Downloads\BestCodecsPackSetup.exe (Adware.InstallBrain) -> Keine Aktion durchgeführt.
C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_foxit-reader.exe (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt.
C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_mobile-atlas-creator.exe (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt.
C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_pdfcreator.exe (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7R6U3LAP\MyPhoneExplorer_v2_5185[1].exe (PUP.Optional.InstallMonetizer.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UJ1Q8ZPT\pack[1].7z (PUP.Optional.PerformerSoft.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Local\Temp\Сodec Performer803601.exe (Adware.InstallBrain) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Local\Temp\A885D2CB-BAB0-7891-B618-477089D08B9A\Setup.exe (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Local\Temp\A885D2CB-BAB0-7891-B618-477089D08B9A\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Local\Temp\A885D2CB-BAB0-7891-B618-477089D08B9A\Latest\MyBabylonTB.exe (PUP.Optional.Delta) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Local\Temp\A885D2CB-BAB0-7891-B618-477089D08B9A\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Roaming\File Scout\filescout.exe (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Roaming\SpeedAnalysis2\speedanalysis.crx (PUP.Optional.SpeedAnalysis.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Roaming\speedanalysis.ico (PUP.Optional.SpeedAnalysis2.A) -> Keine Aktion durchgeführt.
C:\Users\Klaus\AppData\Roaming\PerformerSoft\PC Performer\log_04-26-2013.log (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\Klaus\AppData\Roaming\PerformerSoft\PC Performer\eng_rcp.dat (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\user\AppData\Roaming\File Scout\uninst.exe (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt.

(Ende)

FRST

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-12-2013 02
Ran by Klaus (ATTENTION: The logged in user is not administrator) on USER-TOSH on 21-12-2013 14:11:19
Running from C:\Users\Klaus\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
() C:\Program Files\TOSHIBA\FlashCards\Hotkey\TCrdKBB.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Spigot, Inc.) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Klaus\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\widimon\widimon.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
() C:\nxp\LPCXpresso_4.1.5_219\lpcxpresso\lpcxpresso.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
() C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
() C:\Program Files (x86)\Bazaar\tbzrcache.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [x]
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12856936 2011-09-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-17] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-04] (Synaptics Incorporated)
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [590256 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [981888 2011-08-03] (TOSHIBA Corporation)
HKLM\...\Run: [BatteryManager] - C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe [285608 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1544624 2011-08-23] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [712096 2011-08-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710560 2011-06-10] (TOSHIBA Corporation)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-06-01] (Intel(R) Corporation)
HKLM\...\Run: [TosVolRegulator] - C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosNC] - C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe [598448 2011-06-28] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38824 2011-06-28] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [Toshiba Registration] - C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-10-16] (Toshiba Europe GmbH)
HKLM\...\Runonce: [MSPCLOCK] - rundll32.exe streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000}
HKLM\...\Runonce: [MSPQM] - rundll32.exe streamci,StreamingDeviceSetup {DDF4358E-BB2C-11D0-A42F-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196}
HKLM\...\Runonce: [MSKSSRV] - rundll32.exe streamci,StreamingDeviceSetup {96E080C7-143C-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196}
HKLM\...\Runonce: [MSTEE.CxTransform] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},C:\windows\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [MSTEE.Splitter] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},C:\windows\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [WDM_DRMKAUD] - rundll32.exe streamci,StreamingDeviceSetup {EEC12DB6-AD9C-4168-8658-B03DAEF417FE},{ABD61E00-9350-47e2-A632-4438B90C6641},{FFBB6E3F-CCFE-4D84-90D9-421418B03A8E},C:\windows\inf\WDMAUDIO.inf,WDM_DRMKAUD.Interface.Install
HKLM-x32\...\RunOnce: [aswAhAScr.dll] - "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\AhAScr.dll" [169824 2013-12-09] (AVAST Software)
HKLM-x32\...\RunOnce: [aswasOutExt.dll] - "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\asOutExt.dll" [418560 2013-12-09] (AVAST Software)
HKLM-x32\...\RunOnce: [aswasOutExt64.dll] - "C:\Program Files\AVAST Software\Avast\aswRegSvr64.exe" "C:\Program Files\AVAST Software\Avast\asOutExt64.dll" [450008 2013-12-09] (AVAST Software)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
MountPoints2: {0fb0090c-7bf3-11e2-a5e9-fa81d59540b0} - E:\SETUP.EXE
MountPoints2: {b98a5166-32d8-11e1-93c9-88532e772d38} - D:\autorun.exe
MountPoints2: {cd3dfb00-f336-11e1-84a3-005056c00008} - D:\shelexec.exe start.htm
HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1409424 2011-06-29] (Nero AG)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ITSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-02] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [TOSDCR] - C:\Program Files (x86)\TOSHIBA\PasswordUtility\TOSDCR.exe [169296 2007-08-28] ()
HKLM-x32\...\Run: [ToshibaServiceStation] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-12] (TOSHIBA Corporation)
HKLM-x32\...\Run: [TSleepSrv] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [252792 2010-06-05] (TOSHIBA)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [SearchSettings] - C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [983904 2012-04-23] (Spigot, Inc.)
HKLM-x32\...\Run: [Reader Application Helper] - C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [898952 2012-11-08] (Sony Corporation)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\1ce4d5d5-40dd-4876-9601-c3e8eda25bfa.exe [180184 2013-12-05] (AVAST Software)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-09] (AVAST Software)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Users\Klaus\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - DefaultScope {1A4B5EEF-3962-42D1-8CA8-4A6AF1796564} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{33822A57-F00C-4F8D-BC78-8B65AE4DDCDC}: [NameServer]0.0.0.0

FireFox:
========
FF ProfilePath: C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\fsm3yj81.default-1386322393877
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @sony.com/ReaderDesktop - C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
CHR RestoreOnStartup: "hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.200.2) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U20) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (DocuCom PDF Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (WildTangent Games App Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Extension: (YouTube) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (avast! WebRep) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0
CHR Extension: (Google Wallet) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dgjkhjdcljddbedokogakmmdjgnbeanf] - C:\Users\user\AppData\Roaming\SpeedAnalysis2\speedanalysis.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-09] (AVAST Software)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9663848 2011-04-10] (DisplayLink Corp.)
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [69192 2013-10-11] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Guard Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R2 irstrtsv; C:\windows\SysWow64\irstrtsv.exe [184320 2011-07-07] (Intel Corporation)
R2 lmhosts; C:\Windows\system32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-06-01] ()
R2 NlaSvc; C:\Windows\System32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013\RpcAgentSrv.exe [68760 2008-11-04] (SiSoftware)
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
R2 vmware-converter-agent; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter-a.exe [423536 2011-08-19] (VMware, Inc.)
R2 vmware-converter-server; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [423536 2011-08-19] (VMware, Inc.)
R2 vmware-converter-worker; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [423536 2011-08-19] (VMware, Inc.)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [38984 2013-12-09] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [84328 2013-12-09] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [92544 2013-12-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-09] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1032416 2013-12-09] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [409832 2013-12-09] (AVAST Software)
R1 aswTdi; C:\windows\system32\drivers\aswTdi.sys [65264 2013-12-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-09] ()
S3 bmdrvr; C:\Windows\SysWow64\drivers\bmdrvr.sys [74352 2011-03-15] (VMware, Inc.)
S3 cpuz135; C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [23816 2012-02-07] (CPUID)
S3 dfu; C:\Windows\System32\drivers\MassDfu64.sys [15360 2011-12-12] (Philips PTCL)
S3 DisplayLinkUsbPort; C:\Windows\System32\DRIVERS\DisplayLinkUsbPort_5.6.31854.0.sys [17408 2011-04-10] (hxxp://libusb-win32.sourceforge.net)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48200 2013-09-04] ()
R2 hhdserhelp; C:\windows\system32\drivers\hhdserhelp.sys [20776 2011-08-16] (HHD Software Ltd.)
R3 hhdserial64; C:\Windows\System32\DRIVERS\hhdserial64.sys [42280 2011-08-16] (HHD Software Ltd.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 pwdrvio; C:\windows\system32\pwdrvio.sys [19032 2013-01-11] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12384 2013-01-11] ()
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254976 2010-08-31] (Jungo)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-21 14:11 - 2013-12-21 14:11 - 00025431 _____ C:\Users\Klaus\Downloads\FRST.txt
2013-12-21 14:11 - 2013-12-21 14:11 - 00000000 ____D C:\FRST
2013-12-21 14:10 - 2013-12-21 14:10 - 00000470 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-12-21 14:10 - 2013-12-21 14:10 - 00000000 _____ C:\Users\user\defogger_reenable
2013-12-21 13:38 - 2013-12-21 13:38 - 02193141 _____ (Farbar) C:\Users\Klaus\Downloads\FRST64.exe
2013-12-21 13:37 - 2013-12-21 13:37 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-12-21 13:33 - 2013-12-21 13:34 - 00377856 _____ C:\Users\Klaus\Downloads\tg2fpwht.exe
2013-12-21 13:32 - 2013-12-21 13:33 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf(1).exe
2013-12-21 13:31 - 2013-12-21 13:31 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf.exe
2013-12-21 13:30 - 2013-12-21 13:31 - 00000000 ____D C:\Users\Klaus\Documents\VirenKram
2013-12-20 16:58 - 2013-12-20 16:58 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-12-20 16:58 - 2013-12-20 16:58 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-20 14:33 - 2013-12-20 14:33 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-12-20 14:33 - 2013-12-20 14:33 - 00001132 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-20 14:33 - 2013-12-20 14:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-20 14:33 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-12-20 12:40 - 2013-12-20 12:52 - 00002029 _____ C:\Users\Klaus\Desktop\CringStart.lnk
2013-12-20 12:19 - 2013-12-20 12:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-19 17:10 - 2012-06-05 12:35 - 00001963 _____ C:\Users\Klaus\Desktop\DOSBox 0.74.lnk
2013-12-19 17:09 - 2013-12-19 17:27 - 00000000 ____D C:\CONTEXT4
2013-12-19 13:14 - 2013-12-19 13:14 - 00002235 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 12:41 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-19 12:41 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-19 12:41 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-19 12:41 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-19 12:41 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-19 12:41 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-19 12:41 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-19 12:41 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-19 12:41 - 2013-10-25 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-19 12:41 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-19 12:39 - 2013-12-19 12:41 - 00000000 ____D C:\windows\system32\MRT
2013-12-19 12:37 - 2013-12-21 13:54 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-19 11:37 - 2013-12-19 11:37 - 00000000 ____D C:\windows\system32\RsFx
2013-12-19 11:37 - 2009-07-21 01:42 - 00111640 _____ (Microsoft Corporation) C:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00079896 _____ (Microsoft Corporation) C:\windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00078872 _____ (Microsoft Corporation) C:\windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00050200 _____ (Microsoft Corporation) C:\windows\SysWOW64\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\SysWOW64\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1033
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2013-12-19 11:35 - 2013-12-19 11:35 - 00000000 ____D C:\windows\PCHEALTH
2013-12-19 11:34 - 2013-12-19 11:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-19 11:24 - 2013-12-19 11:24 - 03277648 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcs_web.exe
2013-12-19 11:23 - 2013-12-19 11:23 - 00673024 _____ (                                                            ) C:\Users\Klaus\Downloads\ZipOpenerSetup.exe
2013-12-15 12:33 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-15 12:33 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-15 12:33 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-15 12:33 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-15 12:33 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-15 12:33 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-15 12:33 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-15 12:33 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-15 12:33 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-15 12:33 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-15 12:33 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-15 12:33 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-15 12:33 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-15 12:33 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-15 12:33 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-15 12:33 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-15 12:33 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-15 12:33 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-15 12:33 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2013-12-09 13:46 - 2013-12-09 14:21 - 00397824 ___SH C:\EUMONBMP.SYS
2013-12-09 13:38 - 2013-12-09 13:38 - 00001244 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 6.1.lnk
2013-12-09 13:38 - 2013-09-04 11:24 - 00189000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\EuFdDisk.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00061000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\eubakup.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00048200 _____ C:\windows\system32\Drivers\EUBKMON.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00018504 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\eudskacs.sys
2013-12-09 13:36 - 2013-09-04 11:32 - 00024136 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\fbnative.exe
2013-12-09 13:35 - 2013-12-09 13:35 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-09 13:33 - 2013-12-09 13:33 - 118962544 _____ (                                                            ) C:\Users\Klaus\Downloads\tb_free.exe
2013-12-09 13:30 - 2013-12-09 13:30 - 00583496 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Users\Klaus\Downloads\tb_free_installer.exe
2013-12-09 13:24 - 2013-12-09 13:24 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vc_web.exe
2013-12-09 12:11 - 2013-12-09 12:11 - 00813920 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\VS10sp1-KB983509(1).exe
2013-12-09 12:03 - 2013-12-09 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVAST Software
2013-12-09 11:18 - 2013-12-09 11:18 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcPlus_web.exe
2013-12-09 09:33 - 2013-12-09 09:33 - 00000000 ____D C:\Movtec-Kinegram
2013-12-06 13:28 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-12-06 10:40 - 2013-12-19 12:37 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-06 10:40 - 2013-12-19 12:37 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-06 10:33 - 2013-12-06 10:33 - 00000000 ____D C:\Users\Klaus\Desktop\Alte Firefox-Daten
2013-12-06 09:54 - 2013-12-06 09:55 - 02753344 _____ (AVAST Software) C:\Users\Klaus\Downloads\avast-browser-cleanup.exe
2013-12-05 18:42 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-12-05 18:42 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-12-05 18:42 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll
2013-12-05 18:42 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\credui.dll
2013-12-05 18:42 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-12-05 18:42 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\SysWOW64\SmartcardCredentialProvider.dll
2013-12-05 18:42 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2013-12-05 18:42 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\credui.dll
2013-12-05 18:42 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-12-05 18:42 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2013-12-05 18:42 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2013-12-05 18:42 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2013-12-05 18:42 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2013-12-05 18:42 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2013-12-05 18:42 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2013-12-05 18:42 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2013-12-05 18:42 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-12-05 18:42 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2013-12-05 18:42 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2013-12-05 18:42 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2013-12-05 18:42 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2013-12-05 18:42 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2013-12-05 18:42 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-12-05 18:42 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-12-05 18:42 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-12-05 18:42 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-12-05 18:42 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-12-05 18:42 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-12-05 18:42 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-12-05 18:42 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-12-05 18:42 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-12-05 18:42 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-12-05 18:42 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-12-05 18:42 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-12-05 18:42 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-12-05 18:42 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-12-05 18:42 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-12-05 18:42 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-12-05 18:42 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-12-05 18:42 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-12-05 18:42 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2013-12-05 18:42 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-12-05 18:42 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-12-05 18:42 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2013-12-05 18:42 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2013-12-05 18:42 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2013-12-05 18:42 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-12-05 18:42 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2013-12-05 18:42 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2013-12-05 18:42 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2013-12-05 18:42 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-12-05 18:42 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-12-05 18:42 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-12-05 18:42 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d11.dll
2013-12-05 18:42 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\windows\system32\d3d11.dll
2013-12-05 18:41 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-12-05 18:41 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-12-05 18:41 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-12-05 18:41 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll
2013-12-05 18:41 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll
2013-12-05 18:41 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-12-05 18:41 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-12-05 18:41 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2013-12-05 18:41 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-12-05 18:41 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2013-12-05 18:41 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-12-05 18:41 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-12-05 18:41 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-12-05 18:41 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2013-12-05 18:41 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-12-05 18:41 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2013-12-05 18:41 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-12-05 18:41 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-12-05 18:41 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-12-05 18:41 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-12-05 18:41 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2013-12-05 18:41 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-12-05 18:41 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-12-05 18:41 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-12-05 18:41 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-12-05 18:41 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-05 18:41 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-05 18:41 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-12-05 18:41 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-12-05 18:41 - 2013-07-12 11:40 - 00109824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBAUDIO.sys
2013-12-05 18:41 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2013-12-05 18:41 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2013-12-05 18:41 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2013-12-05 18:41 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2013-12-05 18:41 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2013-12-05 18:41 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-12-05 18:41 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-12-05 18:41 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2013-12-05 18:41 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2013-12-05 18:41 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2013-12-05 18:41 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\certenc.dll
2013-12-05 18:41 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\windows\system32\certutil.exe
2013-12-05 18:41 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\windows\SysWOW64\certutil.exe
2013-12-05 18:41 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\certenc.dll
2013-12-05 18:41 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\cryptdlg.dll
2013-12-05 18:41 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptdlg.dll
2013-12-05 18:41 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2013-12-05 18:41 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32spl.dll
2013-12-05 18:41 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2013-12-05 18:41 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2013-12-05 18:40 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-12-05 18:40 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-12-05 18:40 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-12-05 18:40 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-12-05 18:40 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-12-05 18:40 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll
2013-12-05 18:40 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2013-12-05 18:40 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2013-12-05 15:57 - 2013-12-19 10:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00002073 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Users\user\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-12-05 15:36 - 2013-12-05 15:37 - 36047576 _____ (Foxit Corporation                                           ) C:\Users\Klaus\Downloads\FoxitReader604.0719_L10N_Setup.exe
2013-12-05 15:34 - 2013-12-05 15:34 - 00401752 _____ (Softonic                                        ) C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_foxit-reader.exe
2013-12-05 15:22 - 2013-12-05 15:28 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-12-05 15:21 - 2013-12-05 15:21 - 00002080 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-12-05 15:21 - 2013-12-05 15:21 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2013-12-05 15:17 - 2013-12-05 15:17 - 07080248 _____ C:\Users\Klaus\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-12-05 13:15 - 2013-12-05 13:15 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes

==================== One Month Modified Files and Folders =======

2013-12-21 14:11 - 2013-12-21 14:11 - 00025431 _____ C:\Users\Klaus\Downloads\FRST.txt
2013-12-21 14:11 - 2013-12-21 14:11 - 00000000 ____D C:\FRST
2013-12-21 14:10 - 2013-12-21 14:10 - 00000470 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-12-21 14:10 - 2013-12-21 14:10 - 00000000 _____ C:\Users\user\defogger_reenable
2013-12-21 13:55 - 2011-11-16 00:56 - 01892704 _____ C:\windows\WindowsUpdate.log
2013-12-21 13:54 - 2013-12-19 12:37 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-21 13:38 - 2013-12-21 13:38 - 02193141 _____ (Farbar) C:\Users\Klaus\Downloads\FRST64.exe
2013-12-21 13:37 - 2013-12-21 13:37 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-12-21 13:34 - 2013-12-21 13:33 - 00377856 _____ C:\Users\Klaus\Downloads\tg2fpwht.exe
2013-12-21 13:34 - 2012-01-10 11:11 - 03451762 _____ C:\Users\Klaus\Documents\.bzr.log
2013-12-21 13:33 - 2013-12-21 13:32 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf(1).exe
2013-12-21 13:31 - 2013-12-21 13:31 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf.exe
2013-12-21 13:31 - 2013-12-21 13:30 - 00000000 ____D C:\Users\Klaus\Documents\VirenKram
2013-12-21 13:12 - 2011-10-16 21:40 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-21 12:33 - 2012-05-18 11:33 - 00000402 _____ C:\windows\Tasks\FreeFileViewerUpdateChecker.job
2013-12-20 19:26 - 2011-10-16 21:40 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-20 16:58 - 2013-12-20 16:58 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-12-20 16:58 - 2013-12-20 16:58 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-20 16:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-12-20 14:47 - 2011-02-11 09:21 - 00769312 _____ C:\windows\system32\perfh007.dat
2013-12-20 14:47 - 2011-02-11 09:21 - 00175692 _____ C:\windows\system32\perfc007.dat
2013-12-20 14:47 - 2009-07-14 06:13 - 01816312 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-20 14:37 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-20 14:37 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-20 14:33 - 2013-12-20 14:33 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-12-20 14:33 - 2013-12-20 14:33 - 00001132 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-20 14:33 - 2013-12-20 14:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-20 14:30 - 2012-05-12 11:27 - 00000000 ____D C:\ProgramData\VMware
2013-12-20 14:30 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-12-20 14:30 - 2009-07-14 05:51 - 00091816 _____ C:\windows\setupact.log
2013-12-20 14:29 - 2012-05-13 18:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 13:19 - 2012-01-02 11:36 - 00000000 ____D C:\Users\Klaus\AppData\Local\Mozilla
2013-12-20 12:52 - 2013-12-20 12:40 - 00002029 _____ C:\Users\Klaus\Desktop\CringStart.lnk
2013-12-20 12:19 - 2013-12-20 12:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-20 11:47 - 2012-03-13 14:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\UseNeXT
2013-12-20 11:38 - 2012-05-28 08:58 - 00000000 ____D C:\Users\Klaus\Documents\UseNeXT
2013-12-19 17:27 - 2013-12-19 17:09 - 00000000 ____D C:\CONTEXT4
2013-12-19 16:53 - 2012-03-09 14:02 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\vlc
2013-12-19 16:01 - 2013-03-26 11:50 - 00000978 _____ C:\windows\Tasks\Paragon Archive name arc_260313104821816.job
2013-12-19 13:14 - 2013-12-19 13:14 - 00002235 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 13:14 - 2011-10-16 21:40 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-19 12:53 - 2012-03-12 12:32 - 00000000 ____D C:\Ergebnis
2013-12-19 12:49 - 2009-07-14 05:45 - 00414376 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-19 12:43 - 2012-01-02 12:30 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-19 12:41 - 2013-12-19 12:39 - 00000000 ____D C:\windows\system32\MRT
2013-12-19 12:37 - 2013-12-06 10:40 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-19 12:37 - 2013-12-06 10:40 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-19 11:42 - 2012-01-03 14:56 - 00000000 ____D C:\Users\Klaus\Documents\Visual Studio 2010
2013-12-19 11:37 - 2013-12-19 11:37 - 00000000 ____D C:\windows\system32\RsFx
2013-12-19 11:37 - 2013-12-19 11:34 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\SysWOW64\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1033
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2013-12-19 11:36 - 2012-02-09 08:25 - 00000000 ____D C:\windows\SysWOW64\1033
2013-12-19 11:36 - 2012-01-03 14:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-12-19 11:36 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-12-19 11:35 - 2013-12-19 11:35 - 00000000 ____D C:\windows\PCHEALTH
2013-12-19 11:32 - 2012-01-03 14:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 10.0
2013-12-19 11:24 - 2013-12-19 11:24 - 03277648 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcs_web.exe
2013-12-19 11:23 - 2013-12-19 11:23 - 00673024 _____ (                                                            ) C:\Users\Klaus\Downloads\ZipOpenerSetup.exe
2013-12-19 10:41 - 2013-12-05 15:57 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Foxit Software
2013-12-15 12:21 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-12-09 14:21 - 2013-12-09 13:46 - 00397824 ___SH C:\EUMONBMP.SYS
2013-12-09 13:38 - 2013-12-09 13:38 - 00001244 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 6.1.lnk
2013-12-09 13:35 - 2013-12-09 13:35 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-09 13:33 - 2013-12-09 13:33 - 118962544 _____ (                                                            ) C:\Users\Klaus\Downloads\tb_free.exe
2013-12-09 13:30 - 2013-12-09 13:30 - 00583496 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Users\Klaus\Downloads\tb_free_installer.exe
2013-12-09 13:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-09 13:24 - 2013-12-09 13:24 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vc_web.exe
2013-12-09 13:05 - 2012-01-02 12:40 - 01607480 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-12-09 12:11 - 2013-12-09 12:11 - 00813920 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\VS10sp1-KB983509(1).exe
2013-12-09 12:03 - 2013-12-09 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVAST Software
2013-12-09 12:02 - 2010-11-21 04:47 - 00053152 _____ C:\windows\PFRO.log
2013-12-09 11:18 - 2013-12-09 11:18 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcPlus_web.exe
2013-12-09 09:33 - 2013-12-09 09:33 - 00000000 ____D C:\Movtec-Kinegram
2013-12-09 09:33 - 2012-01-13 10:41 - 00000000 ____D C:\Movtec-Raster-INI
2013-12-09 09:30 - 2012-01-23 12:34 - 00000000 ____D C:\MeineProgramme
2013-12-09 08:01 - 2013-03-21 16:13 - 00205320 _____ C:\windows\system32\Drivers\aswVmm.sys
2013-12-09 08:01 - 2013-03-21 16:13 - 00065776 _____ C:\windows\system32\Drivers\aswRvrt.sys
2013-12-09 08:01 - 2012-03-26 11:33 - 00092544 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 01032416 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00409832 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00334648 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2013-12-09 08:01 - 2012-01-11 10:27 - 00084328 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00065264 _____ (AVAST Software) C:\windows\system32\Drivers\aswTdi.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00038984 _____ (AVAST Software) C:\windows\system32\Drivers\aswFsBlk.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00002011 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-09 08:01 - 2012-01-11 10:26 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2013-12-09 07:59 - 2012-01-11 10:27 - 00000000 _____ C:\windows\SysWOW64\config.nt
2013-12-09 07:59 - 2012-01-11 10:26 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-06 10:33 - 2013-12-06 10:33 - 00000000 ____D C:\Users\Klaus\Desktop\Alte Firefox-Daten
2013-12-06 09:55 - 2013-12-06 09:54 - 02753344 _____ (AVAST Software) C:\Users\Klaus\Downloads\avast-browser-cleanup.exe
2013-12-06 09:52 - 2012-01-01 13:16 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-06 09:52 - 2012-01-01 13:16 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-06 09:15 - 2013-03-15 07:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-12-06 09:15 - 2011-10-16 21:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-12-06 09:14 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-12-06 09:14 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-12-06 08:20 - 2012-01-12 18:27 - 00000000 ____D C:\DATEN
2013-12-05 21:35 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\Msdtc
2013-12-05 15:52 - 2013-12-05 15:52 - 00002073 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Users\user\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-12-05 15:37 - 2013-12-05 15:36 - 36047576 _____ (Foxit Corporation                                           ) C:\Users\Klaus\Downloads\FoxitReader604.0719_L10N_Setup.exe
2013-12-05 15:34 - 2013-12-05 15:34 - 00401752 _____ (Softonic                                        ) C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_foxit-reader.exe
2013-12-05 15:28 - 2013-12-05 15:22 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-12-05 15:21 - 2013-12-05 15:21 - 00002080 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-12-05 15:21 - 2013-12-05 15:21 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2013-12-05 15:17 - 2013-12-05 15:17 - 07080248 _____ C:\Users\Klaus\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-12-05 13:15 - 2013-12-05 13:15 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes
2013-12-05 13:08 - 2012-01-01 13:16 - 00000000 ____D C:\Users\Klaus
2013-12-05 12:47 - 2011-10-16 21:40 - 00002198 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-01 14:42 - 2012-01-05 09:58 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-11-23 19:26 - 2013-12-15 12:33 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-11-23 18:47 - 2013-12-15 12:33 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll

Some content of TEMP:
====================
C:\Users\Klaus\AppData\Local\Temp\2f3amw1v.dll
C:\Users\Klaus\AppData\Local\Temp\3grkizhl.dll
C:\Users\Klaus\AppData\Local\Temp\Checkupdate.exe
C:\Users\Klaus\AppData\Local\Temp\dr12wdcz.dll
C:\Users\Klaus\AppData\Local\Temp\fldowivi.dll
C:\Users\Klaus\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Klaus\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\Klaus\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Klaus\AppData\Local\Temp\gcapi_dll.dll
C:\Users\Klaus\AppData\Local\Temp\gtapi_signed.dll
C:\Users\Klaus\AppData\Local\Temp\p5xr5ckg.dll
C:\Users\Klaus\AppData\Local\Temp\yfipgcsb.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================

Addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-12-2013 02
Ran by Klaus at 2013-12-21 14:11:48
Running from C:\Users\Klaus\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Digital Editions (x32)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)
Atmel Software Framework (x32 Version: 3.1.121)
Atmel Studio 6.0 (x32 Version: 6.0.1843)
Atmel USB (x32 Version: 10.6)
avast! Free Antivirus (x32 Version: 9.0.2008)
Bazaar 2.4.2 (x32 Version: 2.4.2)
Bing Bar (x32 Version: 7.1.391.0)
Bluetooth Stack for Windows by Toshiba (Version: v8.00.13(T))
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
CSChipID (HKCU Version: 1.0.0.5)
Dir Size View v1.0.0 (C:\Program Files (x86)\DirSizeView\) (x32)
Dir Size View v1.0.0 (x32)
Disk Investigator 1.61 (x32 Version: 1.61)
DisplayLink Core Software (Version: 5.6.31854.0)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.7)
EaseUS Todo Backup Free 6.1 (x32 Version: 6.1)
ElsterFormular (x32 Version: 14.1.11318)
ESET Online Scanner v3 (x32)
Evernote v. 4.6.5 (x32 Version: 4.6.5.8353)
FME Flash Programming Tool for Fujitsu 32Bit FR Microcontroller (x32)
Foxit Reader (x32 Version: 6.0.4.719)
FR Family SOFTUNE Professional Pack V6 (x32)
Free File Viewer 2011 (x32)
FreeMind (x32 Version: 0.9.0)
FUJITSU FLASH MCU Programmer for FR (x32 Version: 1.28.0000)
Google Chrome (x32 Version: 31.0.1650.63)
Google Earth (x32 Version: 7.1.2.2041)
Google Update Helper (x32 Version: 1.3.22.3)
GoToMeeting 5.4.0.1083 (HKCU Version: 5.4.0.1083)
HHD Software Device Monitoring Studio 6.23 (Version: 6.23.0.3373)
High-Definition Video Playback (x32 Version: 7.3.10900.8.0)
HxD Hex Editor Version 1.7.7.0 (x32 Version: 1.7.7.0)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Identity Protection Technology 1.2.18.0 (x32 Version: 1.2.18.0)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Network Connections Drivers (Version: 16.5)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2509)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.01.1000)
Intel(R) Rapid Start Technology (x32 Version: 1.0.0.1008)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004)
Intel(R) WiDi (x32 Version: 2.1.41.0)
Intel(R) Wireless Display
IrfanView (remove only) (x32 Version: 4.35)
Java 7 Update 21 (64-bit) (Version: 7.0.210)
Java Auto Updater (x32 Version: 2.0.2.1)
Java(TM) 6 Update 20 (x32 Version: 6.0.200)
JLink OB CDC Driver Package (Version: 1.2.1)
LinuxLive USB Creator (x32 Version: 2.8)
LPCXpresso (x32 Version: 4.1.5)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000)
Microsoft Help Viewer 1.1 (Version: 1.1.40219)
Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219)
Microsoft Office 2000 Premium (x32 Version: 9.00.2816)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 9.0.21022)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2008 (64-bit)
Microsoft SQL Server 2008 Browser (x32 Version: 10.1.2531.0)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22)
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0)
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0)
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0)
Microsoft SQL Server 2008 Native Client (Version: 10.1.2531.0)
Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.50.1750.9)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0)
Microsoft SQL Server Compact 3.5 SP2 DEU (x32 Version: 3.5.8080.0)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (Version: 3.5.8080.0)
Microsoft SQL Server System CLR Types (x32 Version: 10.50.1750.9)
Microsoft SQL Server VSS Writer (Version: 10.1.2531.0)
Microsoft Visual C# 2010 Express - DEU (x32 Version: 10.0.30319)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (x32 Version: 9.0.30729.4974)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319)
Microsoft Visual C++ 5.0 (x32)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (x32 Version: 10.0.30319)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (Version: 10.0.30319)
Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219)
Microsoft Visual Studio 2010 Shell (Isolated) - ENU (x32 Version: 10.0.40219)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303)
MiniTool Partition Wizard Home Edition 7.7 (x32)
Movtec-Raster (HKCU Version: 5.0.13.9)
Movtec-Server (HKCU Version: 2.3.0.7)
MozBackup 1.5.1 (x32)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)
Mozilla Maintenance Service (x32 Version: 26.0)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyPhoneExplorer (x32 Version: 1.8.5)
NanoJEasy 1.04 (x32)
NanoPro 1.60 (x32)
Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0)
Nero BackItUp 10 (x32 Version: 5.8.10900.8.100)
Nero BackItUp 10 Help (CHM) (x32 Version: 10.6.10700)
Nero BurnRights 10 (x32 Version: 4.4.10400.2.100)
Nero BurnRights 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Control Center 10 (x32 Version: 10.6.12700.0.7)
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10800)
Nero Core Components 10 (x32 Version: 2.0.20000.9.12)
Nero Express 10 (x32 Version: 10.6.10700.5.100)
Nero Express 10 Help (CHM) (x32 Version: 10.6.10700)
Nero InfoTool 10 (x32 Version: 7.4.10300.1.100)
Nero InfoTool 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Kwik Media (x32 Version: 1.6.15100.59.100)
Nero Multimedia Suite 10 Essentials (x32 Version: 10.6.10300)
Nero RescueAgent 10 (x32 Version: 3.6.10500.3.100)
Nero RescueAgent 10 Help (CHM) (x32 Version: 10.6.10800)
Nero StartSmart 10 (x32 Version: 10.6.10500.3.100)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Update (x32 Version: 1.0.10900.31.0)
NeroKwikMedia Help (CHM) (x32 Version: 10.6.10900)
NetObjects Fusion 8 (x32 Version: 8)
Paragon Backup & Recovery™ 2012 Free (x32 Version: 90.00.0003)
PC Wizard 2012.2.1 (x32)
PDFCreator (x32 Version: 1.2.3)
pdfforge Toolbar v5.6 (x32 Version: 5.6) <==== ATTENTION
Picasa 3 (x32 Version: 3.9)
PL-2303 USB-to-Serial (x32 Version: 1.5.0)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Reader for PC (x32 Version: 2.0.01.11080)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6458)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.25.0)
RICOH Media Driver v2.15.17.02 (x32 Version: 2.15.17.02)
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (Version: 10.1.2531.0)
SimpleHelloWelt (HKCU Version: 1.0.0.0)
SiSoftware Sandra Lite 2013 (Version: 19.11.2013.1)
Skype™ 5.10 (x32 Version: 5.10.116)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0)
Synaptics Pointing Device Driver (Version: 15.2.11.1)
TeamViewer 8 (x32 Version: 8.0.18051)
Tftpd32 Standalone Edition (remove only) (x32)
tools-netware (x32 Version: 8.8.2.703057)
tools-windows (x32 Version: 8.8.2.703057)
tools-winPre2k (x32 Version: 8.8.2.703057)
TortoiseOverlays (Version: 1.1.19334)
TOSHIBA Assist (x32 Version: 4.2.3.0)
TOSHIBA Bulletin Board (Version: 2.1.17.64)
TOSHIBA Bulletin Board (x32 Version: 2.1.17.64)
TOSHIBA ConfigFree (x32 Version: 8.0.42)
TOSHIBA eco Utility (Version: 1.3.7.64)
TOSHIBA Face Recognition (Version: 3.1.18.64)
TOSHIBA Face Recognition (x32 Version: 3.1.18.64)
TOSHIBA HDD/SSD Alert (Version: 3.1.64.9)
Toshiba Manuals (x32 Version: 10.03)
TOSHIBA Media Controller (x32 Version: 1.0.87.4)
TOSHIBA Media Controller Plug-in (x32 Version: 1.0.7.6)
TOSHIBA Online Product Information (x32 Version: 4.01.0000)
TOSHIBA PC Health Monitor (Version: 1.7.11.64)
TOSHIBA Places Icon Utility (x32 Version: 1.0.2.4)
TOSHIBA Recovery Media Creator (x32 Version: 2.1.5.5109a)
TOSHIBA Recovery Media Creator Reminder (x32 Version: 1.00.0019)
TOSHIBA ReelTime (Version: 1.7.21.64)
TOSHIBA ReelTime (x32 Version: 1.7.21.64)
TOSHIBA Resolution+ Plug-in for Windows Media Player (x32 Version: 1.1.2003)
TOSHIBA Security Assist (x32 Version: 2.0.9)
TOSHIBA Service Station (x32 Version: 2.2.13)
TOSHIBA Sleep Utility (x32 Version: 1.4.2.9)
TOSHIBA TEMPRO (x32 Version: 3.35)
TOSHIBA Value Added Package (Version: 1.6.9.64)
TOSHIBA Value Added Package (x32 Version: 1.6.9.64)
TOSHIBA Web Camera Application (x32 Version: 2.0.3.29)
TOSHIBA Wireless Display Monitor (x32 Version: 1.0.1)
TOSHIBA Wireless LAN Indicator (x32 Version: 1.0.5)
Total Commander (Remove or Repair) (x32 Version: 7.56a)
TrueCrypt (x32 Version: 7.1a)
Unterstützungsdateien für Microsoft SQL Server 2008-Setup  (Version: 10.1.2731.0)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
UseNeXT by Tangysoft (x32)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (x32 Version: 4.0.8080.0)
VLC media player 2.0.0 (x32 Version: 2.0.0)
VmciSockets (Version: 9.1.54.1)
VMware Player (x32 Version: 4.0.3.29699)
VMware vCenter Converter Standalone (x32 Version: 5.0.0.470252)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows-Treiberpaket - Segger (jlink_ob_x64) USB  (03/13/2012 2.6.6.2) (Version: 03/13/2012 2.6.6.2)
Windows-Treiberpaket - SEGGER (usbser) Ports  (01/25/2012 6.0.2600.4) (Version: 01/25/2012 6.0.2600.4)
WinPcap 4.1.2 (x32 Version: 4.1.0.2001)
Wireshark 1.6.4 (x32 Version: 1.6.4)
XXClone  ver 2.01.2 (Version: 2.01.2)
Zattoo4 4.0.5 (x32 Version: 4.0.5)

==================== Restore Points  =========================

Could not list Restore Points. Check WMI.


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\windows\Tasks\FreeFileViewerUpdateChecker.job => ?
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => ?
Task: C:\windows\Tasks\Paragon Archive name arc_260313104821816.job => ?

==================== Loaded Modules (whitelisted) =============

2012-01-10 11:11 - 2011-11-02 15:56 - 00265728 _____ () C:\Program Files (x86)\Bazaar\tbzrshellext_x64.dll
2011-08-31 21:13 - 2011-08-31 21:13 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-08-23 00:19 - 2011-08-23 00:19 - 11204992 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll
2010-11-30 19:37 - 2010-11-30 19:37 - 00048504 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll
2010-03-03 23:15 - 2010-03-03 23:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll
2010-03-03 23:15 - 2010-03-03 23:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll
2011-08-23 02:08 - 2011-08-23 02:08 - 00593856 _____ () C:\Program Files\TOSHIBA\TECO\TecoPower.dll
2010-12-16 00:19 - 2010-12-16 00:19 - 00124320 _____ () C:\Program Files\TOSHIBA\TECO\MUIHelp.dll
2011-06-01 02:32 - 2011-06-01 02:32 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-06-28 13:02 - 2011-06-28 13:02 - 03421104 _____ () C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll
2011-10-16 22:05 - 2011-02-22 10:16 - 00559104 _____ () C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\de\Humphrey.resources.dll
2011-10-16 21:53 - 2011-04-21 09:57 - 00013184 _____ () C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\de\TosDILangPack.resources.dll
2011-10-16 21:53 - 2011-04-21 09:57 - 00063360 _____ () C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIInternal.XmlSerializers.dll
2011-06-10 06:09 - 2011-06-10 06:09 - 00079784 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/21/2013 01:32:08 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/21/2013 01:32:08 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/21/2013 03:00:26 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Visual Studio 2010 Shell (Isolated) - ENU - Update "KB2251489" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\windows\TEMP\KB2251489_20131221_030020816-Microsoft Visual Studio 2010 Shell (Isolated) - ENU-MSP0.txt enthalten.

Error: (12/21/2013 03:00:26 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Microsoft Visual Studio 2010 Shell (Isolated) - ENU -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2902. The arguments are: ixfAssemblyCopy, ,

Error: (12/20/2013 04:58:48 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/20/2013 04:58:43 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/20/2013 02:30:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/20/2013 07:46:41 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Visual Studio 2010 Shell (Isolated) - ENU - Update "KB2251489" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\windows\TEMP\KB2251489_20131220_074632302-Microsoft Visual Studio 2010 Shell (Isolated) - ENU-MSP0.txt enthalten.

Error: (12/20/2013 07:46:41 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Microsoft Visual Studio 2010 Shell (Isolated) - ENU -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2902. The arguments are: ixfAssemblyCopy, ,

Error: (12/19/2013 00:49:32 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (12/21/2013 03:00:41 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft Visual Studio 2010 XML-Editor  (KB2251489)

Error: (12/20/2013 02:31:18 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (12/20/2013 02:30:20 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (12/20/2013 02:30:01 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎20.‎12.‎2013 um 14:29:11 unerwartet heruntergefahren.

Error: (12/20/2013 07:47:01 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft Visual Studio 2010 XML-Editor  (KB2251489)

Error: (12/19/2013 05:08:59 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.

Error: (12/19/2013 05:08:58 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.

Error: (12/19/2013 05:08:58 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.

Error: (12/19/2013 05:08:57 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.

Error: (12/19/2013 00:50:29 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2012-02-21 10:52:00.548
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-02-21 10:52:00.468
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-21 10:50:11.885
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-21 10:50:11.835
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-12-17 10:58:31.634
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-12-17 10:58:31.578
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-24 14:29:33.404
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-24 14:29:33.379
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-24 14:29:33.356
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-01-24 14:29:33.334
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 64%
Total physical RAM: 3996.55 MB
Available physical RAM: 1421.96 MB
Total Pagefile: 7991.27 MB
Available Pagefile: 4837.26 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: (TI30818500B) (Fixed) (Total:96.94 GB) (Free:18.11 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HDDRECOVERY) (Fixed) (Total:12.83 GB) (Free:0.6 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive l: (System) (Fixed) (Total:1.46 GB) (Free:1.22 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive r: (INTENSO) (Fixed) (Total:596.17 GB) (Free:335.76 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================

gmer im Anhang
Avast meldet keine Problem
Vorhin hatte ich einen blauen Bildschirm, das System wurde neu gestartet und läuft wie vorher
Vielen Dank für Eure Hilfe im Voraus
Klaus

win7 64bit: malwarebyte meldet Infektionen

Plagegeister aller Art und deren Bekämpfung: win7 64bit: malwarebyte meldet Infektionen

win7 64bit: malwarebyte meldet Infektionen

Ähnliche Themen: win7 64bit: malwarebyte meldet Infektionen