Windows 7: Fehlermeldung "ihr browser hat gesperrt"

Exportierte Ereignisse:

30.12.2013 04:10 [System-Scanner] Malware gefunden
      Die Datei 
      'C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\3813f1b6-5bf8e
      d86'
      enthielt einen Virus oder unerwünschtes Programm 'Java/Lamar.isd.2' [virus].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '069c4d53.qua' 
      verschoben!

30.12.2013 04:10 [System-Scanner] Malware gefunden
      Die Datei 'D:\TOBIAS-PC\Backup Set 2013-04-14 190000\Backup Files 2013-06-16 
      190001\Backup files 1.zip'
      enthielt einen Virus oder unerwünschtes Programm 'Java/Lamar.QCZ.28' [virus].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4bf66121.qua' 
      verschoben!

30.12.2013 04:10 [System-Scanner] Malware gefunden
      Die Datei 'C:\Users\Admin\AppData\Local\Temp\AddLyrics.exe'
      enthielt einen Virus oder unerwünschtes Programm 'ADWARE/Adware.Gen' [adware].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '7b510d37.qua' 
      verschoben!

30.12.2013 04:10 [System-Scanner] Suche
      Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
      Anzahl Dateien:	4239204
      Anzahl Verzeichnisse:	61264
      Anzahl Malware:	109
      Anzahl Warnungen:	108

30.12.2013 04:10 [System-Scanner] Malware gefunden
      Die Datei 'C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet 
      Files\Content.IE5\E6NASS36\pack[1].7z'
      enthielt einen Virus oder unerwünschtes Programm 'Adware/BHO.Bprotector.1.2' 
      [adware].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '560c2277.qua' 
      verschoben!

30.12.2013 04:10 [System-Scanner] Malware gefunden
      Die Datei 'D:\TOBIAS-PC\Backup Set 2013-07-21 210000\Backup Files 2013-08-04 
      210000\Backup files 1.zip'
      enthielt einen Virus oder unerwünschtes Programm 'EXP/CVE-2012-1723.A.5149' 
      [exploit].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '34ed5347.qua' 
      verschoben!

30.12.2013 04:10 [System-Scanner] Malware gefunden
      Die Datei 'D:\TOBIAS-PC\Backup Set 2013-09-22 210000\Backup Files 2013-09-22 
      210000\Backup files 8.zip'
      enthielt einen Virus oder unerwünschtes Programm 'Java/Lamar.isd.2' [virus].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '175e31b9.qua' 
      verschoben!

30.12.2013 04:10 [System-Scanner] Malware gefunden
      Die Datei 'D:\TOBIAS-PC\Backup Set 2013-07-21 210000\Backup Files 2013-09-08 
      210000\Backup files 1.zip'
      enthielt einen Virus oder unerwünschtes Programm 'Java/Lamar.isd.2' [virus].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '71697e79.qua' 
      verschoben!

30.12.2013 04:10 [System-Scanner] Malware gefunden
      Die Datei 'D:\TOBIAS-PC\Backup Set 2013-12-29 210000\Backup Files 2013-12-29 
      210000\Backup files 9.zip'
      enthielt einen Virus oder unerwünschtes Programm 'Java/Lamar.isd.2' [virus].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '45016b50.qua' 
      verschoben!

30.12.2013 04:10 [System-Scanner] Malware gefunden
      Die Datei 'D:\TOBIAS-PC\Backup Set 2013-12-29 235143\Backup Files 2013-12-29 
      235143\Backup files 9.zip'
      enthielt einen Virus oder unerwünschtes Programm 'Java/Lamar.isd.2' [virus].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5d9644e8.qua' 
      verschoben!
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 01
Ran by Admin (administrator) on TOBIAS-PC on 30-12-2013 10:14:06
Running from C:\Users\Admin\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
() D:\Program Files (x86)\Sony\PlayMemories Home\dfs.exe
(Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Sony Corporation) D:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() D:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe
(Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\CaptureDLNA.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Lucidlogix Technologies\VIRTU MVP\MVPControlPanel.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Tobit.Software) D:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe
(Hauppauge Computer Works) C:\Program Files (x86)\WinTV\Ir.exe
(Hauppauge Computer Works, Inc.) C:\Program Files (x86)\WinTV\WinTV7\WinTVTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Game Inc.) D:\Program Files (x86)\SHARKOON Skiller\GameMon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Sony Corporation) D:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(1und1 Mail und Media GmbH) C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Software Security System) C:\Program Files\Lucidlogix Technologies\VIRTU MVP\Ekag20nt.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(LucidLogix) C:\Program Files\Lucidlogix Technologies\VIRTU MVP\LucidServices.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ServiceLocator.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Toolbar.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-01-31] (Realtek Semiconductor)
HKLM\...\Run: [VIRTU MVP] - C:\Program Files\Lucidlogix Technologies\VIRTU MVP\MVPControlPanel.exe [3049776 2012-11-29] ()
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GamingKeyboard] - D:\Program Files (x86)\SHARKOON Skiller\GameMon.exe [1803264 2012-06-07] (Game Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - D:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
HKLM-x32\...\Run: [PMBVolumeWatcher] - D:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740888 2013-04-24] (Sony Corporation)
HKLM-x32\...\Run: [MailCheck IE Broker] - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe [1766464 2013-10-16] (1und1 Mail und Media GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Steam] - D:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-11] (Valve Corporation)
HKCU\...\Run: [HP Officejet 4620 series (NET)] - C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [2548072 2011-12-18] (Hewlett-Packard Co.)
HKCU\...\Run: [SearchEngineProtection] - C:\Program Files (x86)\GamesBar\update\SearchEngineProtection.exe
HKCU\...\Run: [Media Fairy Pro] - "C:\Program Files (x86)\Media Fairy Pro\MediaFairyPro.exe" /opentotray
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2741616 2011-03-04] (Hewlett-Packard Company)
HKCU\...\Run: [rfxsrvtray] - D:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: {0306dfcd-484d-11e2-b999-806e6f6e6963} - E:\ASRSetup.exe
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 4620 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF5460D1C2394CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
SearchScopes: HKLM-x32 - {01bd49d7-c76b-4310-8beb-14d7e5f322c6} URL = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=34&r=2013/02/09&hid=716873920&lg=EN&cc=DE
SearchScopes: HKCU - DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/search?utf8in=1&fr=ietb&q={SearchTerms}
SearchScopes: HKCU - {6D682CA5-B84A-4A1B-90EC-53ACE2043F3E} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {724233C0-C3CB-4965-BA81-DEF9DB0B5D6F} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/search?utf8in=1&fr=ietb&q={SearchTerms}
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: WEB.DE MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll No File
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: No Name - {8984B388-A5BB-4DF7-B274-77B879E179DB} -  No File
BHO-x32: WEB.DE MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WEB.DE MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - WEB.DE MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - WEB.DE MailCheck - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {4646332D-5637-006A-76A7-7A786E7484D7} -  No File
Toolbar: HKCU - No Name - {09900DE8-1DCA-443F-9243-26FF581438AF} -  No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\72qw7n4i.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 - D:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin: @videolan.org/vlc,version=2.0.6 - D:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

==================== Services (Whitelisted) =================

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [908856 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
R2 DeviceFinderService; D:\Program Files (x86)\Sony\PlayMemories Home\dfs.exe [149528 2013-04-24] ()
R2 HauppaugeTVServer; C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe [579072 2013-12-11] (Hauppauge Computer Works)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [121344 2012-02-07] ()
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PMBDeviceInfoProvider; D:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-04-24] (Sony Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-12-28] ()
R2 Radio.fx; d:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
S2 SkypeUpdate; D:\Program Files (x86)\Skype\Updater\Updater.exe [171680 2013-09-05] (Skype Technologies)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [x]
S4 Hamachi2Svc; "D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s [x]

==================== Drivers (Whitelisted) ====================

R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-02-10] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-18] (Avira Operations GmbH & Co. KG)
R3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] ()
R3 hcw88rc5; C:\Windows\System32\Drivers\hcw88rc5.sys [15872 2012-11-20] (Hauppauge Computer Works, Inc.)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] ()
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] ()
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-02-10] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2013-12-30] ()
S3 ALSysIO; \??\C:\Users\Admin\AppData\Local\Temp\ALSysIO64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-30 10:14 - 2013-12-30 10:14 - 00022541 _____ C:\Users\Admin\Desktop\FRST.txt
2013-12-30 10:14 - 2013-12-30 10:14 - 00000000 ____D C:\Users\Admin\Desktop\Viruas
2013-12-30 10:13 - 2013-12-30 10:13 - 01931302 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe
2013-12-30 10:13 - 2013-12-30 10:13 - 00000000 ____D C:\FRST
2013-12-30 10:12 - 2013-12-30 10:12 - 00000472 _____ C:\Users\Admin\Desktop\defogger_disable.log
2013-12-30 10:12 - 2013-12-30 10:12 - 00000000 _____ C:\Users\Admin\defogger_reenable
2013-12-30 10:10 - 2013-12-30 10:10 - 00050477 _____ C:\Users\Admin\Desktop\Defogger.exe
2013-12-30 10:06 - 2013-12-30 10:06 - 00007546 _____ C:\Users\Admin\Desktop\Ereignisse avira.txt
2013-12-30 09:10 - 2013-12-30 09:10 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-12-30 09:10 - 2013-12-30 09:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-24 21:52 - 2013-12-29 23:40 - 00000000 ____D C:\Users\Admin\Documents\Assassin's Creed IV Black Flag
2013-12-24 21:25 - 2013-12-28 22:50 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-24 21:25 - 2013-12-28 22:49 - 00291944 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-21 20:48 - 2013-12-21 20:48 - 00001026 _____ C:\Users\Admin\Desktop\RW Image Viewer.lnk
2013-12-21 20:48 - 2013-12-21 20:48 - 00001008 _____ C:\Users\Admin\Desktop\RW_Tools.lnk
2013-12-20 22:04 - 2013-12-20 22:06 - 00000000 ____D C:\Users\Public\WinTV
2013-12-20 21:47 - 2013-12-30 09:17 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2013-12-20 21:19 - 2013-12-20 21:21 - 146621272 _____ C:\Users\Admin\Desktop\wintv7_cd_3.2.exe
2013-12-20 21:01 - 2013-12-20 21:05 - 134214884 _____ C:\Users\Admin\Downloads\wintv7_cd_3.2.exe.jvfvuf7.partial
2013-12-20 20:25 - 2012-11-20 14:02 - 00440576 _____ (Hauppauge Computer Works, Inc) C:\Windows\system32\Drivers\hcw88vid.sys
2013-12-20 20:25 - 2012-11-20 14:02 - 00339968 _____ (Hauppauge Computer Works, Inc) C:\Windows\system32\Drivers\hcw88tse.sys
2013-12-20 20:25 - 2012-11-20 14:02 - 00259456 _____ (Hauppauge Computer Works, Inc) C:\Windows\system32\Drivers\hcw88bda.sys
2013-12-20 20:25 - 2012-11-20 14:02 - 00133632 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\Drivers\hcw88prx.ax
2013-12-20 20:25 - 2012-11-20 14:02 - 00111232 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\Drivers\hcw88tun.sys
2013-12-20 20:25 - 2012-11-20 14:02 - 00021632 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\Drivers\hcw88bar.sys
2013-12-20 20:25 - 2012-11-20 14:02 - 00015872 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\Drivers\hcw88rc5.sys
2013-12-20 17:55 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-20 17:55 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-19 21:46 - 2013-12-19 21:46 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 16:50 - 2013-12-13 13:58 - 00979456 _____ (Aerosoft GmbH) C:\Users\Admin\Desktop\fontsPr.dll
2013-12-19 16:41 - 2013-12-19 16:41 - 00000886 _____ C:\Users\Public\Desktop\Aerosoft Launcher.lnk
2013-12-16 17:25 - 2013-12-16 17:25 - 02808316 _____ C:\Users\Admin\Downloads\MagicLeagueExtra.c4f
2013-12-14 22:32 - 2013-12-14 22:32 - 00000000 ____D C:\Users\Admin\AppData\Local\AskPartnerNetwork
2013-12-14 22:31 - 2013-12-18 21:08 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-14 22:31 - 2013-12-18 21:08 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-14 22:31 - 2013-12-18 21:08 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-14 22:31 - 2013-12-14 22:31 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Avira
2013-12-14 22:31 - 2013-12-14 22:31 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-12-14 22:31 - 2013-12-14 22:31 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-14 22:31 - 2013-12-14 22:31 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-12-14 22:31 - 2013-12-14 22:29 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-14 16:20 - 2013-12-14 21:19 - 00000000 ____D C:\Users\Admin\Desktop\GALAXY
2013-12-13 18:40 - 2013-12-13 18:40 - 00021464 _____ C:\Users\Admin\Desktop\4gb_patch.zip
2013-12-13 15:05 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-13 15:05 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-13 15:05 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-13 15:05 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-12 19:11 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 19:11 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 19:11 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 19:11 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 19:11 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 19:11 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 19:11 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 19:11 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 19:11 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 19:11 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 19:11 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 19:11 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 19:11 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 19:11 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 19:11 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 19:11 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 19:11 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 19:11 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 19:11 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 20:06 - 2013-12-11 21:06 - 09272200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-12-06 20:52 - 2013-12-06 20:52 - 00001421 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-06 20:46 - 2013-12-06 20:49 - 00010074 _____ C:\Windows\IE11_main.log
2013-11-30 08:48 - 2013-12-13 13:41 - 00000000 ____D C:\Windows\SysWOW64\märklin BR 05 Exclusivmodell 2007 dir

==================== One Month Modified Files and Folders =======

2013-12-30 10:14 - 2013-12-30 10:14 - 00022541 _____ C:\Users\Admin\Desktop\FRST.txt
2013-12-30 10:14 - 2013-12-30 10:14 - 00000000 ____D C:\Users\Admin\Desktop\Viruas
2013-12-30 10:13 - 2013-12-30 10:13 - 01931302 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe
2013-12-30 10:13 - 2013-12-30 10:13 - 00000000 ____D C:\FRST
2013-12-30 10:12 - 2013-12-30 10:12 - 00000472 _____ C:\Users\Admin\Desktop\defogger_disable.log
2013-12-30 10:12 - 2013-12-30 10:12 - 00000000 _____ C:\Users\Admin\defogger_reenable
2013-12-30 10:12 - 2012-12-17 14:26 - 00000000 ____D C:\Users\Admin
2013-12-30 10:10 - 2013-12-30 10:10 - 00050477 _____ C:\Users\Admin\Desktop\Defogger.exe
2013-12-30 10:06 - 2013-12-30 10:06 - 00007546 _____ C:\Users\Admin\Desktop\Ereignisse avira.txt
2013-12-30 10:06 - 2013-01-06 18:19 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-30 09:41 - 2013-01-26 00:04 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-30 09:24 - 2010-11-21 07:50 - 00699416 _____ C:\Windows\system32\perfh007.dat
2013-12-30 09:24 - 2010-11-21 07:50 - 00149556 _____ C:\Windows\system32\perfc007.dat
2013-12-30 09:24 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-30 09:22 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-30 09:22 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-30 09:19 - 2013-05-23 19:25 - 01593956 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-30 09:19 - 2012-12-17 14:26 - 01623445 _____ C:\Windows\WindowsUpdate.log
2013-12-30 09:17 - 2013-12-20 21:47 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2013-12-30 09:17 - 2013-01-26 00:04 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-30 09:17 - 2012-12-17 16:08 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-30 09:17 - 2012-12-17 15:32 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys
2013-12-30 09:17 - 2012-12-17 15:32 - 00000000 ____D C:\Users\Admin\Lucidlogix
2013-12-30 09:17 - 2012-12-17 15:29 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-12-30 09:17 - 2010-11-21 04:47 - 00952396 _____ C:\Windows\PFRO.log
2013-12-30 09:17 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-30 09:17 - 2009-07-14 05:51 - 00137534 _____ C:\Windows\setupact.log
2013-12-30 09:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-30 09:10 - 2013-12-30 09:10 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-12-30 09:10 - 2013-12-30 09:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-30 09:10 - 2013-03-01 15:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-30 09:10 - 2013-01-01 15:04 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Mozilla
2013-12-30 04:11 - 2012-12-25 00:24 - 00001118 _____ C:\Users\Admin\Desktop\Automatisch runterfahren.lnk
2013-12-29 23:41 - 2013-08-22 15:06 - 00000000 ____D C:\Users\Admin\AppData\Local\LogMeIn Hamachi
2013-12-29 23:40 - 2013-12-24 21:52 - 00000000 ____D C:\Users\Admin\Documents\Assassin's Creed IV Black Flag
2013-12-29 23:40 - 2013-11-08 19:17 - 00000000 ____D C:\Users\Admin\AppData\Roaming\vlc
2013-12-29 23:40 - 2013-02-19 13:43 - 00000000 ____D C:\Users\Gast
2013-12-29 23:40 - 2012-12-17 14:26 - 00000000 ___RD C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-29 23:40 - 2010-11-21 08:00 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-12-29 23:40 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-12-29 22:05 - 2012-12-24 21:12 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2013-12-28 23:13 - 2013-01-19 12:12 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype
2013-12-28 23:12 - 2013-01-19 12:12 - 00000000 ____D C:\ProgramData\Skype
2013-12-28 22:50 - 2013-12-24 21:25 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-28 22:49 - 2013-12-24 21:25 - 00291944 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-28 22:49 - 2013-02-03 11:25 - 00291944 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-12-28 22:49 - 2013-02-03 11:25 - 00000000 ____D C:\Users\Admin\AppData\Local\PunkBuster
2013-12-28 15:15 - 2012-12-17 15:29 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-12-24 22:34 - 2012-12-24 20:59 - 00000000 ____D C:\Users\Admin\Desktop\Spiele
2013-12-24 21:27 - 2012-12-24 21:18 - 00278460 _____ C:\Windows\DirectX.log
2013-12-24 21:25 - 2013-01-29 14:49 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-24 12:34 - 2013-08-20 11:50 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Nitro PDF
2013-12-21 20:48 - 2013-12-21 20:48 - 00001026 _____ C:\Users\Admin\Desktop\RW Image Viewer.lnk
2013-12-21 20:48 - 2013-12-21 20:48 - 00001008 _____ C:\Users\Admin\Desktop\RW_Tools.lnk
2013-12-20 22:41 - 2012-12-17 19:31 - 00368779 _____ C:\hcwDriverInstall.txt
2013-12-20 22:39 - 2012-12-25 15:06 - 00000000 ____D C:\ProgramData\Hauppauge
2013-12-20 22:06 - 2013-12-20 22:04 - 00000000 ____D C:\Users\Public\WinTV
2013-12-20 22:06 - 2012-12-25 15:07 - 00000401 _____ C:\Windows\ODBCINST.INI
2013-12-20 22:06 - 2012-12-25 15:06 - 00037639 _____ C:\Windows\Irremote.ini
2013-12-20 22:06 - 2012-12-25 08:52 - 00000507 _____ C:\Windows\ODBC.INI
2013-12-20 22:06 - 2012-12-17 19:32 - 00000000 ____D C:\Program Files (x86)\WinTV
2013-12-20 22:05 - 2012-12-17 19:32 - 00002918 _____ C:\Windows\HCWPNP.INI
2013-12-20 21:48 - 2012-12-17 15:27 - 00000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2013-12-20 21:21 - 2013-12-20 21:19 - 146621272 _____ C:\Users\Admin\Desktop\wintv7_cd_3.2.exe
2013-12-20 21:05 - 2013-12-20 21:01 - 134214884 _____ C:\Users\Admin\Downloads\wintv7_cd_3.2.exe.jvfvuf7.partial
2013-12-20 21:05 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-20 21:01 - 2012-12-17 14:26 - 00000000 ____D C:\Users\Admin\AppData\Local\VirtualStore
2013-12-20 20:26 - 2013-06-07 20:11 - 00000000 ____D C:\ProgramData\Package Cache
2013-12-19 21:46 - 2013-12-19 21:46 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 21:46 - 2013-01-26 00:04 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-19 16:41 - 2013-12-19 16:41 - 00000886 _____ C:\Users\Public\Desktop\Aerosoft Launcher.lnk
2013-12-18 21:08 - 2013-12-14 22:31 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-18 21:08 - 2013-12-14 22:31 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-18 21:08 - 2013-12-14 22:31 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-16 17:25 - 2013-12-16 17:25 - 02808316 _____ C:\Users\Admin\Downloads\MagicLeagueExtra.c4f
2013-12-16 15:11 - 2013-02-10 19:22 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Clonk Rage
2013-12-15 11:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-14 22:32 - 2013-12-14 22:32 - 00000000 ____D C:\Users\Admin\AppData\Local\AskPartnerNetwork
2013-12-14 22:31 - 2013-12-14 22:31 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Avira
2013-12-14 22:31 - 2013-12-14 22:31 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-12-14 22:31 - 2013-12-14 22:31 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-14 22:31 - 2013-12-14 22:31 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-12-14 22:31 - 2013-04-04 17:08 - 00000000 ____D C:\ProgramData\Avira
2013-12-14 22:29 - 2013-12-14 22:31 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-14 21:19 - 2013-12-14 16:20 - 00000000 ____D C:\Users\Admin\Desktop\GALAXY
2013-12-14 16:18 - 2013-02-19 20:11 - 00028160 ___SH C:\Users\Admin\Documents\Thumbs.db
2013-12-13 18:40 - 2013-12-13 18:40 - 00021464 _____ C:\Users\Admin\Desktop\4gb_patch.zip
2013-12-13 13:58 - 2013-12-19 16:50 - 00979456 _____ (Aerosoft GmbH) C:\Users\Admin\Desktop\fontsPr.dll
2013-12-13 13:47 - 2013-08-14 07:52 - 00000000 ____D C:\Windows\system32\MRT
2013-12-13 13:46 - 2012-12-17 16:38 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 13:45 - 2009-07-14 05:45 - 00404264 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-13 13:41 - 2013-11-30 08:48 - 00000000 ____D C:\Windows\SysWOW64\märklin BR 05 Exclusivmodell 2007 dir
2013-12-11 21:06 - 2013-12-11 20:06 - 09272200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-12-11 21:06 - 2013-01-06 18:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 21:06 - 2013-01-06 18:19 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 21:06 - 2013-01-06 18:19 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-10 03:13 - 2013-10-28 17:31 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-12-10 03:13 - 2013-10-28 17:31 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-12-08 21:36 - 2013-01-26 00:04 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-08 21:36 - 2013-01-26 00:04 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-07 10:19 - 2012-12-24 23:15 - 00000000 ____D C:\Users\Admin\AppData\Local\Adobe
2013-12-06 20:52 - 2013-12-06 20:52 - 00001421 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-06 20:49 - 2013-12-06 20:46 - 00010074 _____ C:\Windows\IE11_main.log
2013-12-05 09:42 - 2013-12-20 17:55 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-05 09:42 - 2013-12-20 17:55 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-05 09:42 - 2013-09-07 17:45 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-12-03 20:08 - 2013-05-23 19:27 - 00000000 ____D C:\Users\Admin\AppData\Local\NVIDIA
2013-12-03 20:07 - 2013-11-13 21:24 - 00000000 ____D C:\Users\Admin\AppData\Local\NVIDIA Corporation
2013-12-03 20:07 - 2012-12-17 16:08 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-03 20:07 - 2012-12-17 16:08 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-03 20:07 - 2012-12-17 16:08 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\7.8.20.2-EasyShrx.Dll
C:\Users\Admin\AppData\Local\Temp\8.3.20.1-EasyShrx.Dll
C:\Users\Admin\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Admin\AppData\Local\Temp\AskSLib.dll
C:\Users\Admin\AppData\Local\Temp\avgnt.exe
C:\Users\Admin\AppData\Local\Temp\CheatEngine62Clean.exe
C:\Users\Admin\AppData\Local\Temp\checkdb.exe
C:\Users\Admin\AppData\Local\Temp\comver.dll
C:\Users\Admin\AppData\Local\Temp\DeltaTB.exe
C:\Users\Admin\AppData\Local\Temp\dotnetfx45_full_setup.exe
C:\Users\Admin\AppData\Local\Temp\FastDownload.exe
C:\Users\Admin\AppData\Local\Temp\filebulldogTb_1.0.0.8.exe
C:\Users\Admin\AppData\Local\Temp\FileSystemView.dll
C:\Users\Admin\AppData\Local\Temp\IE10-Windows6.1-x64-de-de.exe
C:\Users\Admin\AppData\Local\Temp\IminentSetup.exe
C:\Users\Admin\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Admin\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Admin\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Admin\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Admin\AppData\Local\Temp\nitro_reader3_64.exe
C:\Users\Admin\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Admin\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Admin\AppData\Local\Temp\nvStInst.exe
C:\Users\Admin\AppData\Local\Temp\SIntf16.dll
C:\Users\Admin\AppData\Local\Temp\SIntf32.dll
C:\Users\Admin\AppData\Local\Temp\SIntfNT.dll
C:\Users\Admin\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Admin\AppData\Local\Temp\sonarinst.exe
C:\Users\Admin\AppData\Local\Temp\tbedrs.dll
C:\Users\Admin\AppData\Local\Temp\tbGame.dll
C:\Users\Admin\AppData\Local\Temp\tmp_minecraft.exe
C:\Users\Admin\AppData\Local\Temp\TrainzPatchInstaller.exe
C:\Users\Admin\AppData\Local\Temp\uninst1.exe
C:\Users\Admin\AppData\Local\Temp\VirtuMVP2-1-221-25032 Setup_64Bit.exe
C:\Users\Admin\AppData\Local\Temp\VistaLib64_1.dll
C:\Users\Admin\AppData\Local\Temp\vlc-2.0.6-win64.exe
C:\Users\Admin\AppData\Local\Temp\vlc-2.0.8-win64.exe
C:\Users\Admin\AppData\Local\Temp\vlc-2.1.1-win64.exe
C:\Users\Admin\AppData\Local\Temp\WEB.DE_Toolbar_IE_Setup.exe
C:\Users\Admin\AppData\Local\Temp\WEB.DE_Toolbar_IE_Special.exe
C:\Users\Admin\AppData\Local\Temp\webde_onlinespeicher_setup.exe
C:\Users\Admin\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Admin\AppData\Local\Temp\_is5FFC.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-20 14:45

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-12-2013 01
Ran by Admin at 2013-12-30 10:14:50
Running from C:\Users\Admin\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG)
Aerosoft's - Aerosoft Launcher (x32 Version: 1.2.0.0 - Aerosoft)
ANNO 2070 (x32 Version: 1.0.0.0 - Ubisoft)
Apple Application Support (x32 Version: 2.3 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.10.1.0 - Asmedia Technology)
Asmedia ASM106x SATA Host Controller Driver (x32 Version: 1.3.1.000 - Asmedia Technology)
ASRock App Charger v1.0.5 (Version:  - ASRock Inc.)
Assassin's Creed II (x32 Version: 1.01 - Ubisoft)
Assassin's Creed IV Black Flag (x32 Version:  - Ubisoft)
Assassin's Creed(R) III v1.06 (x32 Version: 1.06 - Ubisoft)
Audio Recorder for Free v12.9.8 (x32 Version:  - Copyright(C) 2006-2012 AudioToolMedia Software.)
Avira Antivirus Suite (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2949 - APN, LLC)
Battlelog Web Plugins (x32 Version: 2.3.0 - EA Digital Illusions CE AB)
Bing-Desktop (x32 Version: 1.3.171.0 - Microsoft Corporation)
Blender (Version: 2.65a-release - Blender Foundation)
Blu-ray Disc-Zusatz-Software (x32 Version: 5.0.00.00000 - Sony Corporation)
Broadcom NetLink Controller (Version: 14.8.5.1 - Broadcom Corporation)
BrowseToSave 1.74 (x32 Version:  - ) <==== ATTENTION
BVG Kubus Serie v.2.0 (x32 Version: 2.0 - CJayDesign)
CCScore (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company)
Cheat Engine 6.2 (x32 Version:  - Dark Byte)
Clonk Rage (x32 Version:  - RedWolf Design GmbH)
Content Manager 2 (x32 Version: 3.10.0.52790 - NNG Llc.)
Craften Terminal 3.4.5011.37604 (x32 Version: 3.4.5011.37604 - Craften.de)
Cube World version 0.0.1 (x32 Version: 0.0.1 - Picroma)
DIE SIEDLER - Aufstieg eines Königreichs (x32 Version: 1.00.0000 - Ubisoft)
Digital Camera Manager (x32 Version:  - )
Easy CD and DVD Cover Creator 4.13 (x32 Version: 4.13 - Ben Williamson)
ESSBrwr (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company)
ESSCDBK (x32 Version: 8.03.0000.0001 - EASTMAN KODAK Company)
ESScore (x32 Version: 8.03.0000.0001 - Ihr Firmenname)
ESSgui (x32 Version: 8.03.0000.0001 - EASTMAN KODAK Company)
ESSini (x32 Version: 8.02.0000.0001 - Ihr Firmenname)
ESSPCD (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company)
ESSPDock (x32 Version: 6.03.0001.0004 - Ihr Firmenname)
ESSTOOLS (x32 Version: 5.00.0000.0004 - EASTMAN KODAK Company)
essvatgt (x32 Version: 8.00.0000.0001 - EASTMAN KODAK Company)
fflink (x32 Version: 6.02.1001.0001 - EASTMAN KODAK Company)
Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.32.0 - MAGIX AG)
FormatFactory 3.1.1 (x32 Version: 3.1.1 - Free Time)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation)
GeoGebra 4.2 (x32 Version: 4.2.60.0 - International GeoGebra Institute)
GIMP 2.8.4 (Version: 2.8.4 - The GIMP Team)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.)
Hauppauge WinTV 7 (x32 Version: v7.0.31347 (CD 3.2) - Hauppauge Computer Works)
HP Officejet 4620 series - Grundlegende Software für das Gerät (Version: 26.0.784.0 - Hewlett-Packard Co.)
HP Officejet 4620 series Hilfe (x32 Version: 6.0.0 - Hewlett Packard)
HP Update (x32 Version: 5.003.001.001 - Hewlett-Packard)
I.R.I.S. OCR (x32 Version: 12.3.4.0 - HP)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.35342 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 8.0.2.1410 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (x32 Version:  - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2932 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032 - Intel Corporation)
Intel(R) Smart Connect Technology 2.0 x64 (Version: 2.0.1083.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.3.214 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.23.605.1 - Intel Corporation)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.)
Java SE Development Kit 7 Update 10 (64-bit) (Version: 1.7.0.100 - Oracle)
kgcbaby (x32 Version: 5.03.0000.0002 - EASTMAN KODAK Company)
kgchday (x32 Version: 5.03.0000.0002 - EASTMAN KODAK Company)
kgchlwn (x32 Version: 5.03.0000.0002 - EASTMAN KODAK Company)
kgcinvt (x32 Version: 5.03.0000.0003 - EASTMAN KODAK Company)
kgckids (x32 Version: 6.03.0001.0001 - EASTMAN KODAK Company)
kgcmove (x32 Version: 6.03.0001.0001 - EASTMAN KODAK Company)
kgcvday (x32 Version: 5.03.0000.0002 - EASTMAN KODAK Company)
Kodak EasyShare Software (x32 Version:  - Eastman Kodak Company)
LibreOffice 3.6 (x32 Version: 3.6.5.2 - The Document Foundation)
LightScribe System Software (x32 Version: 1.18.22.2 - LightScribe)
LogMeIn Hamachi (x32 Version: 2.2.0.58 - LogMeIn, Inc.)
MAGIX Content und Soundpools (x32 Version: 1.0.0.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (Version: 4.3.2.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (x32 Version: 4.3.2.0 - MAGIX AG)
MAGIX Music Maker 2014 (Version: 20.0.2.35 - MAGIX AG)
MAGIX Music Maker 2014 (x32 Version: 20.0.2.35 - MAGIX AG)
MAGIX Music Maker 2014 Trial Soundpools (Version: 1.0.0.0 - MAGIX AG)
Mass Effect™ 3 (x32 Version: 1.05.0.0 - Electronic Arts)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office XP Professional mit FrontPage (x32 Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation)
MM Eisenbahn-Bildschirmschoner V3 (x32 Version:  - )
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCMergeModules (x32 Version: 1.0.0 - Nav N Go Kft.)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
Naviextras Toolbox Prerequesities (x32 Version: 1.0.0 - NNG Llc.)
Nero 9 Lite (x32 Version:  - Nero AG)
Nero BurnLite 10 (x32 Version: 10.0.10500.5.100 - Nero AG)
Nero BurnLite 10 (x32 Version: 10.0.10600 - Nero AG)
Nero Control Center 10 (x32 Version: 10.0.13100.3.1 - Nero AG)
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG)
Nero ControlCenter 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG)
Nero Core Components 10 (x32 Version: 2.0.15100.0.1 - Nero AG)
Nero Installer (x32 Version: 4.4.9.0 - Nero AG)
Nero Online Upgrade (x32 Version: 1.3.0.0 - Nero AG)
Nero StartSmart (x32 Version: 9.4.31.100 - Nero AG)
Nero Update (x32 Version: 1.0.0018 - Nero AG)
neroxml (x32 Version: 1.0.0 - Nero AG)
netbrdg (x32 Version: 7.01.0000.0001 - EASTMAN KODAK Company)
Nitro Reader 3 (Version: 3.5.6.5 - Nitro)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation)
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation)
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation)
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation)
NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation)
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.19 (Version: 1.2.19 - NVIDIA Corporation)
OfotoXMI (x32 Version: 8.03.0000.0001 - EASTMAN KODAK Company)
OMSI - Stadtbus O305 (x32 Version: 1.00 - aerosoft)
OMSI - The Bus Simulator (x32 Version: 1.06 - aerosoft)
OMSI 2 (x32 Version:  - MR-Software GbR)
OMSI Addon Manager Version 1.2.3 (x32 Version: 1.2.3 - Jan Kiesewalter)
Origin (x32 Version: 9.1.13.85 - Electronic Arts, Inc.)
PEVSoft Images2TGA (x32 Version:  - )
PlanetSide 2 (HKCU Version: 1.0.3.183 - Sony Online Entertainment)
PlayMemories Home (x32 Version: 7.0.03.04240 - Sony Corporation)
ProTrain Perfect 2 - 3D Schienen - (x32 Version: 1.0.1 - Blue Sky Interactive)
ProTrain Perfect 2 - Addon 9 Ersatzaufgabe  - (x32 Version: 1.31 - Blue Sky Interactive)
ProTrain Perfect 2 - Aufgabenfix - (x32 Version: 1.0.1 - Blue Sky Interactive)
ProTrain Perfect 2 - BR 110  - (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 - Erfurt - Halle - (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 - Garmisch -Innsbruck - (x32 Version: 1.0 - vizzart)
ProTrain Perfect 2 - Kassel Fulda - (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 - Kassel Fulda - Update - (x32 Version: 1.0.1 - Blue Sky Interactive)
ProTrain Perfect 2 - Leipzig - Saalfeld  - (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 - München - Mittenwald - Update (x32 Version: 1.11 - vizzart)
ProTrain Perfect 2 - Nürnberg - Saalfeld - (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 - Streckenupdate - (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 - Stuttgart - Tübingen  - (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 - Stuttgart - Tübingen  Update - (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 - TEE Rheingold  - (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 (x32 Version:  - Auran)
ProTrain Perfect Addon 4 - S-Bahn Berlin- (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect Addon 4 - S-Bahn Berlin- Update 1.01 (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect Addon 4 - S-Bahn Berlin- Update 1.1 (x32 Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect Addon 5 - Fulda - Würzburg  - (x32 Version: 1.0 - Blue Sky Interactive)
PunkBuster Services (x32 Version: 0.991 - Even Balance, Inc.)
QuickTime (x32 Version: 7.73.80.64 - Apple Inc.)
Radio.fx (x32 Version:  - Tobit.Software)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6559 - Realtek Semiconductor Corp.)
Recuva (Version: 1.44 - Piriform)
RW_Tools V5 (HKCU Version:  - )
SFR (x32 Version: 8.01.0000.0001 - Eastman Kodak Company)
SHARKOON Skiller (x32 Version: 1.00.0000 - )
SHASTA (x32 Version: 7.01.0000.0001 - EASTMAN KODAK Company)
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation)
SimCity™ (x32 Version: 1.0.0.0 - Electronic Arts)
skin0001 (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company)
SKINXSDK (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
staticcr (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
Studie zur Verbesserung von HP Officejet 4620 series Produkten (Version: 26.0.784.0 - Hewlett-Packard Co.)
Text-To-Speech-Runtime (x32 Version: 1.0.0.0 - Magix Development GmbH)
Train Simulator 2014 (x32 Version:  - RailSimulator.com)
TRS2007 (x32 Version: 1.00.000 - )
Ubisoft Game Launcher (x32 Version: 1.0.0.0 - UBISOFT)
UKTS Freeware Pack - Blocks-Lofts-Bridges #1 (x32 Version: 1.0.9 - UKTrainSim)
UKTS Freeware Pack - Clutter #1 (x32 Version: 1.0.6 - UKTrainSim)
UKTS Freeware Pack - Commercial #1 (x32 Version: 1.0.3 - UKTrainSim)
UKTS Freeware Pack - Foliage #1 (x32 Version: 1.0.2 - UKTrainSim)
UKTS Freeware Pack - Housing #1 (x32 Version: 1.1.1 - UKTrainSim)
UKTS Freeware Pack - Industrial #1 (x32 Version: 1.0.3 - UKTrainSim)
UKTS Freeware Pack - Railway Buildings #1 (x32 Version: 1.0.4 - UKTrainSim)
UKTS Freeware Pack - UK Wagons #1 (x32 Version: 1.1.3 - UKTrainSim)
Uplay (x32 Version: 2.0 - Ubisoft)
Versystem Soundboard (x32 Version:  - )
VIRTU MVP 2.1.221 (Version: 2.1.221 - Lucidlogix Technologies LTD)
VLC media player 2.1.1 (Version: 2.1.1 - VideoLAN)
VPRINTOL (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company)
WEB.DE MailCheck für Internet Explorer (x32 Version: 2.4.0.0 - 1&1 Mail & Media GmbH)
WEB.DE Softwareaktualisierung (x32 Version: 3.0.0.55 - 1&1 Mail & Media GmbH)
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
WIRELESS (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company)

==================== Restore Points  =========================

29-12-2013 18:23:57 Windows Update
29-12-2013 18:27:16 Removed LogMeIn Hamachi
29-12-2013 20:00:08 Windows-Sicherung
29-12-2013 22:40:00 Wiederherstellungsvorgang
29-12-2013 22:51:44 Windows-Sicherung
30-12-2013 08:15:53 Windows Modules Installer
30-12-2013 08:19:30 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {19CE637E-F5A5-4EC9-9A6F-C85B9AEDF973} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {1FF89195-676A-45C6-8A4F-DEB073B3A0AC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-26] (Google Inc.)
Task: {45DBC8BF-E38F-4D6D-8145-C12464811D28} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {5B23FFB2-2D8C-4B88-A566-FE978BF734E0} - System32\Tasks\HPCustParticipation HP Officejet 4620 series => C:\Program Files\HP\HP Officejet 4620 series\Bin\HPCustPartic.exe [2011-12-18] (Hewlett-Packard Co.)
Task: {6737F5A3-9CC8-4CED-B5BD-1533C502850F} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {6A9D8E4D-9C33-404D-8A21-1363AD5BEB5B} - System32\Tasks\0 => Iexplore.exe  <==== ATTENTION
Task: {6BDE94FD-A7E4-4E6D-BA75-F057F9490C3F} - System32\Tasks\4670 => Wscript.exe C:\Users\Admin\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {99F57062-09A3-407A-B566-C8B965DCD822} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {A231D70F-3AA5-4D9E-85ED-6844F063B462} - System32\Tasks\EasyShare Registration Task => Rundll32.exe C:\PROGRA~3\Kodak\EasyShareSetup\$REGIS~1\Registration_8.3.20.1.sxt _RegistrationOffer@16
Task: {A604E5DA-F54B-47E8-A6B4-DB004627D7B5} - System32\Tasks\EPUpdater => C:\Users\Admin\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] () <==== ATTENTION
Task: {E05D5101-B912-4D89-B7F8-406A2B74B87F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-26] (Google Inc.)
Task: {E15768A9-10DD-49E0-BE00-EA54CDDC4103} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2013-06-18] (1&1 Mail & Media GmbH)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\EasyShare Registration Task.job => ó僰¢…ŽI‰â«°ú_:•F^<
 sÀ €!Ý
†!C:\Windows\system32\rundll32.exeZC:\PROGRA~3\Kodak\EasyShareSetup\$REGIS~1\Registration_8.3.20.1.sxt _RegistrationOffer@16Admin0Ý

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe

==================== Loaded Modules (whitelisted) =============

2013-01-06 18:24 - 2012-11-29 20:17 - 00134448 _____ () C:\Program Files\Lucidlogix Technologies\VIRTU MVP\GuiCommon.dll
2012-12-17 15:25 - 2012-03-19 08:09 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-12-14 22:31 - 2013-12-14 22:29 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-12-20 22:05 - 2011-08-23 10:04 - 00057344 _____ () C:\Program Files (x86)\WinTV\TVServer\libhdhomerun.dll
2013-12-20 22:05 - 2013-11-25 01:10 - 00025600 _____ () C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServerps.dll
2013-03-12 17:10 - 2013-11-06 22:48 - 00691200 _____ () D:\Program Files (x86)\Steam\SDL2.dll
2012-12-24 22:17 - 2013-12-11 20:40 - 01135016 _____ () D:\Program Files (x86)\Steam\bin\chromehtml.DLL
2012-12-24 22:17 - 2013-11-06 22:48 - 20625832 _____ () D:\Program Files (x86)\Steam\bin\libcef.dll
2012-12-24 22:17 - 2013-06-15 00:49 - 01100800 _____ () D:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-12-24 22:17 - 2013-06-15 00:49 - 00124416 _____ () D:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-12-24 22:17 - 2013-06-15 00:49 - 00192000 _____ () D:\Program Files (x86)\Steam\bin\avformat-53.dll
2011-03-04 12:02 - 2011-03-04 12:02 - 02121728 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
2011-03-04 12:02 - 2011-03-04 12:02 - 07745536 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
2011-03-04 12:02 - 2011-03-04 12:02 - 00135168 _____ () C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2013-04-02 12:03 - 2013-06-03 12:06 - 09907712 _____ () D:\Program Files (x86)\Tobit Radio.fx\Client\TOBITCLT.dll
2013-04-02 12:03 - 2013-05-16 13:28 - 00242688 _____ () D:\Program Files (x86)\Tobit Radio.fx\Client\rfx-client$.ger
2013-08-19 18:37 - 2013-08-19 18:37 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\991a8d378a3e64b31c0f4770ba9ae071\IsdiInterop.ni.dll
2012-12-17 15:27 - 2011-11-29 20:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-12-17 15:29 - 2012-02-07 17:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData:$SS_DESCRIPTOR_LBP6VPVFLVGVVFB84LTSUTB92PFNPC7BPV4XFJDMNGTFB5V5NBJ5TBBJMT9Y0N96GMP3V0GRUEF39X8XHH0TCFUL44FTBX4MLSWPBXRTF6VEKLFEJK35PNX0WHNGT9LSVEVF1VTVVTVXVVD
AlternateDataStreams: C:\Users\All Users:$SS_DESCRIPTOR_LBP6VPVFLVGVVFB84LTSUTB92PFNPC7BPV4XFJDMNGTFB5V5NBJ5TBBJMT9Y0N96GMP3V0GRUEF39X8XHH0TCFUL44FTBX4MLSWPBXRTF6VEKLFEJK35PNX0WHNGT9LSVEVF1VTVVTVXVVD
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:$SS_DESCRIPTOR_LBP6VPVFLVGVVFB84LTSUTB92PFNPC7BPV4XFJDMNGTFB5V5NBJ5TBBJMT9Y0N96GMP3V0GRUEF39X8XHH0TCFUL44FTBX4MLSWPBXRTF6VEKLFEJK35PNX0WHNGT9LSVEVF1VTVVTVXVVD
AlternateDataStreams: C:\ProgramData\Application Data:$SS_DESCRIPTOR_LBP6VPVFLVGVVFB84LTSUTB92PFNPC7BPV4XFJDMNGTFB5V5NBJ5TBBJMT9Y0N96GMP3V0GRUEF39X8XHH0TCFUL44FTBX4MLSWPBXRTF6VEKLFEJK35PNX0WHNGT9LSVEVF1VTVVTVXVVD

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/30/2013 09:19:04 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/30/2013 09:17:22 AM) (Source: ISCT Agent) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (12/30/2013 09:00:33 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/30/2013 08:58:51 AM) (Source: ISCT Agent) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (12/29/2013 11:43:05 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/29/2013 11:41:31 PM) (Source: ISCT Agent) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (12/29/2013 10:05:53 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: ContentPolicy.dll, Version: 1.0.0.1, Zeitstempel: 0x51b168fa
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002ef2e
ID des fehlerhaften Prozesses: 0x2d38
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (12/29/2013 09:51:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Toolbar.exe, Version: 21.5.0.2560, Zeitstempel: 0x5272f72c
Name des fehlerhaften Moduls: so.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5272f720
Ausnahmecode: 0xc0000005
Fehleroffset: 0x59478870
ID des fehlerhaften Prozesses: 0x2f78
Startzeit der fehlerhaften Anwendung: 0xToolbar.exe0
Pfad der fehlerhaften Anwendung: Toolbar.exe1
Pfad des fehlerhaften Moduls: Toolbar.exe2
Berichtskennung: Toolbar.exe3

Error: (12/29/2013 07:31:37 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/29/2013 07:30:01 PM) (Source: ISCT Agent) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2


System errors:
=============
Error: (12/29/2013 11:18:36 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (12/29/2013 11:18:36 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (12/29/2013 07:17:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.

Error: (12/29/2013 07:17:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email-Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.

Error: (12/29/2013 07:16:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde nicht richtig gestartet.

Error: (12/29/2013 07:16:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email-Schutz" wurde nicht richtig gestartet.

Error: (12/28/2013 09:45:25 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (12/26/2013 10:10:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.

Error: (12/26/2013 10:10:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Email-Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.

Error: (12/26/2013 10:09:40 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde nicht richtig gestartet.


Microsoft Office Sessions:
=========================
Error: (12/30/2013 09:19:04 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/30/2013 09:17:22 AM) (Source: ISCT Agent)(User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (12/30/2013 09:00:33 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/30/2013 08:58:51 AM) (Source: ISCT Agent)(User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (12/29/2013 11:43:05 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/29/2013 11:41:31 PM) (Source: ISCT Agent)(User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (12/29/2013 10:05:53 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.16428525b664cContentPolicy.dll1.0.0.151b168fac00000050002ef2e2d3801cf04d9c0e721cbC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\30.1\config\skin\widgets\com.avira.dnt\widget\lib\ContentPolicy.dll0017a2e2-70cd-11e3-8fb7-bc5ff4452fef

Error: (12/29/2013 09:51:41 PM) (Source: Application Error)(User: )
Description: Toolbar.exe21.5.0.25605272f72cso.dll_unloaded0.0.0.05272f720c0000005594788702f7801cf04d2f403525cC:\Program Files (x86)\AskPartnerNetwork\Toolbar\Toolbar.exeso.dll0449c1f5-70cb-11e3-8fb7-bc5ff4452fef

Error: (12/29/2013 07:31:37 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/29/2013 07:30:01 PM) (Source: ISCT Agent)(User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2


CodeIntegrity Errors:
===================================
  Date: 2013-01-16 19:19:46.115
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Admin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-01-16 19:19:46.107
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Admin\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-01-16 19:19:46.094
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-01-16 19:19:46.086
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-01-03 19:26:07.848
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 41%
Total physical RAM: 8079.56 MB
Available physical RAM: 4697.98 MB
Total Pagefile: 16269.74 MB
Available Pagefile: 12636.37 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:20.6 GB) NTFS
Drive d: () (Fixed) (Total:931.51 GB) (Free:374.22 GB) NTFS
Drive f: (Volume) (Fixed) (Total:931.51 GB) (Free:12.9 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 2D35F671)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 2D35F664)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 606553AE)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-12-30 10:35:36
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 OCZ-VERT rev.1.5_ 119,24GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Admin\AppData\Local\Temp\uwdiipod.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                      fffff800031f8000 33 bytes [00, 00, 6F, 00, 49, 6F, 20, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 562                                                                      fffff800031f8022 11 bytes [99, 0E, 80, FA, FF, FF, 00, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe[1932] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69       0000000075391465 2 bytes [39, 75]
.text     C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe[1932] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155      00000000753914bb 2 bytes [39, 75]
.text     ...                                                                                                                                     * 2
.text     C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe[2112] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                0000000075391465 2 bytes [39, 75]
.text     C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe[2112] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155               00000000753914bb 2 bytes [39, 75]
.text     ...                                                                                                                                     * 2
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322                                                 0000000072421a22 2 bytes [42, 72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496                                                 0000000072421ad0 2 bytes [42, 72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552                                                 0000000072421b08 2 bytes [42, 72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730                                                 0000000072421bba 2 bytes [42, 72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762                                                 0000000072421bda 2 bytes [42, 72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                          0000000075391465 2 bytes [39, 75]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2400] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                         00000000753914bb 2 bytes [39, 75]
.text     ...                                                                                                                                     * 2
.text     d:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe[2444] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter          00000000753c8769 5 bytes JMP 000000010067b780
.text     C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe[2752] C:\Windows\SysWOW64\ksuser.dll!KsCreatePin + 35                           0000000071ec11a8 2 bytes [EC, 71]
.text     C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe[2752] C:\Windows\SysWOW64\ksuser.dll!KsCreateAllocator + 21                     0000000071ec13a8 2 bytes [EC, 71]
.text     C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe[2752] C:\Windows\SysWOW64\ksuser.dll!KsCreateClock + 21                         0000000071ec1422 2 bytes [EC, 71]
.text     C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe[2752] C:\Windows\SysWOW64\ksuser.dll!KsCreateTopologyNode + 19                  0000000071ec1498 2 bytes [EC, 71]
.text     C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe[2752] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 195       0000000071eb1b41 2 bytes {JMP 0x73}
.text     C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe[2752] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 362       0000000071eb1be8 2 bytes {JMP 0x73}
.text     C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe[2752] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 418       0000000071eb1c20 2 bytes {JMP 0x73}
.text     C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe[2752] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 596       0000000071eb1cd2 2 bytes {JMP 0x73}
.text     C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe[2752] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 628       0000000071eb1cf2 2 bytes {JMP 0x73}
.text     C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[5468] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000075391465 2 bytes [39, 75]
.text     C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[5468] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000753914bb 2 bytes [39, 75]
.text     ...                                                                                                                                     * 2

---- Registry - GMER 2.1 ----

Reg       HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{B28D14CD-3D0D-40F7-9662-F15B39262499}@LeaseObtainedTime             1388395511
Reg       HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{B28D14CD-3D0D-40F7-9662-F15B39262499}@T1                            1388395638
Reg       HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{B28D14CD-3D0D-40F7-9662-F15B39262499}@T2                            1388395734
Reg       HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{B28D14CD-3D0D-40F7-9662-F15B39262499}@LeaseTerminatesTime           1388395766

---- EOF - GMER 2.1 ----