Windows 7 Firefox läd selbständig websiten und bringt kleines Feld mit Werbung

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 10:57 on 15/01/2014 (Bernd)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014
Ran by Bernd (administrator) on BERND-PC on 15-01-2014 10:57:42
Running from C:\Users\Bernd\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official downoad link fo FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files\Ocster Backup\bin\backupService-ox.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PSIService.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Ocster Backup\bin\oxHelper.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Program Files\Ocster Backup\bin\backupClient-ox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(Abelssoft) C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
() C:\Program Files\Ocster Backup\bin\oxHelper.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [Ocster Backup] - C:\Program Files\Ocster Backup\bin\backupClient-ox.exe [312664 2013-11-28] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Startup: C:\Users\Bernd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Windows-Kalender (2).lnk
ShortcutTarget: Windows-Kalender (2).lnk -> C:\Program Files\WinCal.exe (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0744722B4E4FCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {6EF87C3B-FC3C-4306-9EDD-43675667079D} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {8962F6AD-6740-4EF0-B319-67F408792CC6} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=302398&p={searchTerms}
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll ()
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll ()
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Bernd\AppData\Roaming\Mozilla\Firefox\Profiles\vtz9toef.tarnfox
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Click&Clean - C:\Users\Bernd\AppData\Roaming\Mozilla\Firefox\Profiles\vtz9toef.tarnfox\Extensions\clickclean@hotcleaner.com [2012-05-08]
FF Extension: Facebook Disconnect - C:\Users\Bernd\AppData\Roaming\Mozilla\Firefox\Profiles\vtz9toef.tarnfox\Extensions\facebook@disconnect.me.xpi [2012-05-08]
FF Extension: Collusion - C:\Users\Bernd\AppData\Roaming\Mozilla\Firefox\Profiles\vtz9toef.tarnfox\Extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi [2012-05-08]
FF Extension: Long URL Please - C:\Users\Bernd\AppData\Roaming\Mozilla\Firefox\Profiles\vtz9toef.tarnfox\Extensions\longurlplease@darragh.curran.xpi [2012-05-08]
FF Extension: Stealthy - C:\Users\Bernd\AppData\Roaming\Mozilla\Firefox\Profiles\vtz9toef.tarnfox\Extensions\stealthyextension@gmail.com.xpi [2012-05-08]
FF Extension: PrivacyChoice TrackerBlock - C:\Users\Bernd\AppData\Roaming\Mozilla\Firefox\Profiles\vtz9toef.tarnfox\Extensions\trackerblock@privacychoice.org.xpi [2012-05-08]
FF Extension: NoScript - C:\Users\Bernd\AppData\Roaming\Mozilla\Firefox\Profiles\vtz9toef.tarnfox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2012-05-08]
FF Extension: Adblock Plus - C:\Users\Bernd\AppData\Roaming\Mozilla\Firefox\Profiles\vtz9toef.tarnfox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-05-08]
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2013-11-16]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2013-11-16]
FF HKLM-x32\...\Firefox\Extensions: [{B7082FAA-CB62-4872-9106-E42DD88EDE45}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2009-11-18]
FF HKLM-x32\...\Firefox\Extensions: [{09F060FA-566D-42D7-BF79-97AB30863433}] - C:\Program Files (x86)\Steganos Privacy Suite 11\pfplugin
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 11\spmplugin3

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-02-22] (Adobe Systems)
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\AESTSr64.exe [89600 2009-03-02] (Andrea Electronics Corporation)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 ocster_backup; c:\Program Files\Ocster Backup\bin\backupService-ox.exe [23896 2013-11-28] ()
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [479840 2012-11-27] (Sony Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2010-01-22] ()
R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] ()
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe [240128 2009-06-29] (IDT, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2144056 2013-10-22] (TuneUp Software)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S2 ASPI32; No ImagePath
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-18] (Avira Operations GmbH & Co. KG)
S3 cleanhlp; C:\Users\Bernd\Neuer Ordner\Run\cleanhlp64.sys [57024 2013-12-31] (Emsisoft GmbH)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.)
S2 DgiVecp; C:\Windows\SysWOW64\Drivers\DgiVecp.sys [41984 2007-01-17] (Samsung Electronics Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 OV550I; C:\Windows\System32\Drivers\ov550ivx.sys [196992 2008-02-21] (Omnivision Technologies, Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-05-08] (TuneUp Software)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [53840 2011-03-03] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [528464 2011-03-03] (Paragon)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-15 10:57 - 2014-01-15 10:58 - 00017659 _____ C:\Users\Bernd\Downloads\FRST.txt
2014-01-15 10:57 - 2014-01-15 10:57 - 00000000 ____D C:\FRST
2014-01-15 10:56 - 2014-01-15 10:56 - 02076160 _____ (Farbar) C:\Users\Bernd\Downloads\FRST64.exe
2014-01-15 10:52 - 2014-01-15 10:57 - 00000472 _____ C:\Users\Bernd\Downloads\defogger_disable.log
2014-01-15 10:52 - 2014-01-15 10:52 - 00000000 _____ C:\Users\Bernd\defogger_reenable
2014-01-15 10:49 - 2014-01-15 10:49 - 00050477 _____ C:\Users\Bernd\Downloads\Defogger.exe
2014-01-06 14:03 - 2014-01-06 14:03 - 00016077 _____ C:\Users\Bernd\Documents\Mercedes-A-Klasse-3.odt
2014-01-03 17:47 - 2014-01-03 17:48 - 00000000 ____D C:\Users\Bernd\Documents\Fax
2013-12-31 13:42 - 2013-12-31 13:42 - 00000833 _____ C:\Users\Bernd\Desktop\Emsisoft Emergency Kit.lnk
2013-12-31 13:41 - 2013-12-31 13:42 - 00000000 ____D C:\Users\Bernd\Neuer Ordner
2013-12-31 13:41 - 2013-12-31 13:41 - 00000000 ____D C:\Users\Bernd\Freeware Antitoolbaar
2013-12-23 17:06 - 2013-12-23 17:06 - 00254170 _____ C:\Users\Bernd\Documents\Golf-plus.xps
2013-12-20 15:25 - 2014-01-06 14:04 - 00020663 _____ C:\Users\Bernd\Documents\Mercedes-A-Klasse-2.odt
2013-12-18 17:08 - 2013-12-18 17:08 - 00360960 _____ C:\Users\Bernd\Documents\Adventszeit für Freunde 2.ppt
2013-12-18 15:16 - 2014-01-15 10:23 - 00003512 _____ C:\Windows\System32\Tasks\Bernd NBAgent
2013-12-16 00:18 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-16 00:18 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-16 00:18 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-16 00:18 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-16 00:18 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-16 00:18 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-16 00:18 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-16 00:18 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-16 00:18 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-16 00:18 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-16 00:18 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-16 00:18 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-16 00:18 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-16 00:18 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-16 00:18 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-16 00:18 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-16 00:18 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-16 00:18 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-16 00:18 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-16 00:18 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-16 00:18 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-16 00:18 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-16 00:18 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-16 00:18 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-16 00:18 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-16 00:18 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-16 00:18 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-16 00:18 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-16 00:18 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-16 00:18 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-16 00:18 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

==================== One Month Modified Files and Folders =======

2014-01-15 10:58 - 2014-01-15 10:57 - 00017659 _____ C:\Users\Bernd\Downloads\FRST.txt
2014-01-15 10:58 - 2009-11-18 16:55 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-15 10:57 - 2014-01-15 10:57 - 00000000 ____D C:\FRST
2014-01-15 10:57 - 2014-01-15 10:52 - 00000472 _____ C:\Users\Bernd\Downloads\defogger_disable.log
2014-01-15 10:56 - 2014-01-15 10:56 - 02076160 _____ (Farbar) C:\Users\Bernd\Downloads\FRST64.exe
2014-01-15 10:52 - 2014-01-15 10:52 - 00000000 _____ C:\Users\Bernd\defogger_reenable
2014-01-15 10:52 - 2009-11-18 14:17 - 00000000 ____D C:\Users\Bernd
2014-01-15 10:49 - 2014-01-15 10:49 - 00050477 _____ C:\Users\Bernd\Downloads\Defogger.exe
2014-01-15 10:25 - 2012-05-13 16:16 - 01760036 _____ C:\Windows\WindowsUpdate.log
2014-01-15 10:23 - 2013-12-18 15:16 - 00003512 _____ C:\Windows\System32\Tasks\Bernd NBAgent
2014-01-15 10:21 - 2009-07-14 05:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-15 10:21 - 2009-07-14 05:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-15 10:16 - 2012-02-16 10:07 - 00000288 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2014-01-15 10:16 - 2009-11-18 16:55 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-15 10:13 - 2013-12-01 11:31 - 00000000 ____D C:\Users\_ocster_backup_
2014-01-15 10:13 - 2013-08-29 22:04 - 00012264 _____ C:\Windows\setupact.log
2014-01-15 10:13 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-14 23:40 - 2012-03-31 10:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-14 13:51 - 2013-11-12 17:13 - 00000000 ____D C:\Users\Bernd\Documents\Tennis
2014-01-14 09:45 - 2011-02-21 13:09 - 00000000 ____D C:\Users\Bernd\AppData\Local\Ocster Backup
2014-01-06 14:04 - 2013-12-20 15:25 - 00020663 _____ C:\Users\Bernd\Documents\Mercedes-A-Klasse-2.odt
2014-01-06 14:03 - 2014-01-06 14:03 - 00016077 _____ C:\Users\Bernd\Documents\Mercedes-A-Klasse-3.odt
2014-01-04 12:13 - 2012-12-27 16:18 - 00018002 _____ C:\Users\Bernd\Documents\Zugangsdaten.ods
2014-01-03 17:53 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2014-01-03 17:48 - 2014-01-03 17:47 - 00000000 ____D C:\Users\Bernd\Documents\Fax
2013-12-31 13:42 - 2013-12-31 13:42 - 00000833 _____ C:\Users\Bernd\Desktop\Emsisoft Emergency Kit.lnk
2013-12-31 13:42 - 2013-12-31 13:41 - 00000000 ____D C:\Users\Bernd\Neuer Ordner
2013-12-31 13:41 - 2013-12-31 13:41 - 00000000 ____D C:\Users\Bernd\Freeware Antitoolbaar
2013-12-30 19:15 - 2010-01-13 15:31 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-12-26 15:38 - 2009-07-14 18:58 - 00694054 _____ C:\Windows\system32\perfh007.dat
2013-12-26 15:38 - 2009-07-14 18:58 - 00142050 _____ C:\Windows\system32\perfc007.dat
2013-12-26 15:38 - 2009-07-14 06:13 - 01593652 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-23 17:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-23 17:06 - 2013-12-23 17:06 - 00254170 _____ C:\Users\Bernd\Documents\Golf-plus.xps
2013-12-21 15:38 - 2008-12-28 09:23 - 00000000 ____D C:\Users\Bernd\Fotos
2013-12-21 13:28 - 2011-12-27 13:24 - 00000000 ____D C:\Users\Bernd\Vermögensübersichten
2013-12-21 10:26 - 2013-07-20 14:25 - 00000000 ____D C:\Users\Bernd\AppData\Local\CrashDumps
2013-12-20 15:29 - 2013-11-16 10:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-19 14:30 - 2013-09-17 08:25 - 00707068 _____ C:\Windows\PFRO.log
2013-12-19 10:53 - 2013-06-07 12:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-18 17:08 - 2013-12-18 17:08 - 00360960 _____ C:\Users\Bernd\Documents\Adventszeit für Freunde 2.ppt
2013-12-18 11:40 - 2013-11-03 12:24 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-18 11:40 - 2013-11-03 12:24 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-18 11:40 - 2013-11-03 12:24 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-17 14:23 - 2012-02-01 19:47 - 00022032 _____ C:\Users\Bernd\Documents\Skatstatistik.ods
2013-12-16 17:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-16 12:58 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-16 00:18 - 2013-08-14 11:46 - 00000000 ____D C:\Windows\system32\MRT
2013-12-16 00:15 - 2009-11-18 14:21 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\Bernd\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-14 12:59

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-01-2014
Ran by Bernd at 2014-01-15 10:59:19
Running from C:\Users\Bernd\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (x32 Version:  - )
ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.1568.4089 - ABBYY Software House)
ACDSee for PENTAX 2.0 (x32 Version: 6.0.24 - ACD Systems Ltd.)
Adobe AIR (x32 Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.3.9120 - Adobe Systems Inc.) Hidden
Adobe Bridge 1.0 (x32 Version: 001.000.001 - Adobe Systems) Hidden
Adobe Common File Installer (x32 Version: 1.00.002 - Adobe System Incorporated) Hidden
Adobe Creative Suite 2 (x32 Version:  - )
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Help Center 1.0 (x32 Version: 001.000.0002 - Adobe Systems) Hidden
Adobe InCopy CS2 (x32 Version: 004.000.000 - Adobe Systems Incorporated)
Adobe InCopy CS2 (x32 Version: 004.000.000 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.) Hidden
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Ahnenblatt 2.70 (x32 Version: 2.70.0.0 - Dirk Boettcher)
AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden
Apple Application Support (x32 Version: 2.3.3 - Apple Inc.)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
Ashampoo Snap 3.50 (x32 Version: 3.5.0 - ashampoo GmbH & Co. KG)
Assistant 5.05.010 (x32 Version: 5.5.10.0 - Medion)
ATI Catalyst Install Manager (Version: 3.0.829.0 - ATI Technologies, Inc.)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2949 - APN, LLC)
AVS Video Converter 8 (x32 Version: 8.4.2.541 - Online Media Technologies Ltd.)
Bayern Nord 2.0 (x32 Version: 2.0 - MagicMaps)
bcWebCam (x32 Version: 2.2.01 - QS QualitySoft GmbH)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Call of Duty Black Ops - Mod Tools (BETA) (x32 Version:  - )
Call of Duty Black Ops - Remote Console (x32 Version:  - Treyarch)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000 - Activision)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000 - Activision) Hidden
Call of Duty: Black Ops - Multiplayer (x32 Version:  - Treyarch)
Call of Duty: Black Ops (x32 Version:  - Treyarch)
Call of Duty: Black Ops II - Zombies (x32 Version:  - )
Call of Duty: Black Ops II (x32 Version:  - Treyarch)
Call of Duty: Modern Warfare 2 (x32 Version:  - Infinity Ward)
Call of Juarez - Bound in Blood (x32 Version: 1.00.0000 - Ubisoft)
Call of Juarez - Bound in Blood (x32 Version: 1.00.0000 - Ubisoft) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2009.0625.1812.30825 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0625.1812.30825 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2009.0625.1812.30825 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2009.0625.1812.30825 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.0625.1812.30825 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0625.1812.30825 - ATI) Hidden
Catalyst Control Center Localization All (x32 Version: 2009.0625.1812.30825 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Danish (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Dutch (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help English (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Finnish (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help French (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help German (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Italian (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Japanese (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Korean (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Russian (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Spanish (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
CCC Help Swedish (x32 Version: 2009.0625.1811.30825 - ATI) Hidden
ccc-core-static (x32 Version: 2009.0625.1812.30825 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2009.0625.1812.30825 - ATI) Hidden
CCleaner (Version: 3.14 - Piriform)
CheckDrive (x32 Version: 3.0 - Abelssoft)
Corel MediaOne (x32 Version: 2.00.0000 - Corel Corporation)
CorelDRAW Essential Edition 3 (x32 Version:  - Corel Corporation)
CorelDRAW Essential Edition 3 (x32 Version: 3.0 - Corel Corporation) Hidden
CyberLink PhotoDirector 3 (x32 Version: 3.0.3618 - CyberLink Corp.)
CyberLink PhotoDirector 3 (x32 Version: 3.0.3618 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Das Interaktive Kartenwerk. Deutschland (x32 Version: 2.0.0 - MagicMaps)
DE (x32 Version: 3.0 - Corel Corporation) Hidden
DivX-Setup (x32 Version: 2.1.2.2 - DivX, Inc. )
EA Download Manager (x32 Version: 4.0.0.462 - Electronic Arts) Hidden
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Fallout: New Vegas (x32 Version:  - Bethesda Softworks)
Firebird SQL Server - MAGIX Edition (x32 Version: 2.0.1.13 - MAGIX AG)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Garmin BaseCamp (x32 Version: 3.2.2 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (x32 Version: 2.3.0.0 - Garmin Ltd or its subsidiaries)
GeoSetter 3.4.16 (x32 Version:  - Friedemann Schmidt)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
High-Definition Video Playback (x32 Version: 11.1.10400.2.65 - Nero AG) Hidden
IDT Audio (x32 Version: 1.0.6217.0 - IDT)
IrfanView (remove only) (x32 Version: 4.27 - Irfan Skiljan)
iTunes (Version: 11.0.2.26 - Apple Inc.)
Java 7 Update 40 (x32 Version: 7.0.400 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Logitech SetPoint 6.20 (Version: 6.20.64 - Logitech)
MAGIX 3D Maker (embeded) (x32 Version: 6.0.0.3 - MAGIX AG)
MAGIX Digital Foto Maker 8 6.0.0.401 (D) (x32 Version: 6.0.0.401 - MAGIX AG)
MAGIX Fotobuch 3.6 (x32 Version: 3.6 - MAGIX AG)
MAGIX Fotos auf CD & DVD 8 deluxe 8.0.0.14 (D) (x32 Version: 8.0.0.14 - MAGIX AG)
MAGIX Fotos auf DVD easy COMPUTER BILD-Edition (Version: 1.0.3.16 - MAGIX AG) Hidden
MAGIX Fotos auf DVD easy COMPUTER BILD-Edition (x32 Version: 1.0.3.16 - MAGIX AG)
MAGIX Goya burnR 1.3.1.3 (D) (x32 Version: 1.3.1.3 - MAGIX AG)
MAGIX Online Druck Service 3.4.3.0 (D) (x32 Version: 3.4.3.0 - MAGIX AG)
MAGIX Screenshare 4.3.6.1987 (D) (x32 Version: 4.3.6.1987 - MAGIX AG)
MAGIX Xtreme Foto Designer 6 6.0.25.0 (D) (x32 Version: 6.0.25.0 - MAGIX AG)
MailStore Home 8.1.0.9075 (x32 Version: 8.1.0.9075 - MailStore Software GmbH)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Document Explorer 2008 (x32 Version:  - Microsoft Corporation)
Microsoft Document Explorer 2008 (x32 Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Office 2000 Premium (x32 Version: 9.00.2816 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU Version: 17.0.2015.0811 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (x32 Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x64 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x86 (x32 Version: 9.0.30729 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
Mufin MusicFinder Base 1.0.1.229 (D) (x32 Version: 1.0.1.229 - MAGIX AG)
MyHeritage Family Tree Builder (x32 Version: 6.0.0.5634 - MyHeritage.com)
Nero 11 Kwik Themes Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 9 Lite (x32 Version:  - Nero AG)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero BackItUp (x32 Version: 5.2.22001 - Nero AG)
Nero BackItUp and Burn (x32 Version: 1.2.0031 - Nero AG)
Nero BurnRights (x32 Version: 3.6.26001 - Nero AG)
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero Core Components 11 (x32 Version: 11.0.15000.1.12 - Nero AG) Hidden
Nero Express (x32 Version: 9.6.16000 - Nero AG)
Nero Installer (x32 Version: 4.4.9.0 - Nero AG) Hidden
Nero Kwik Media (x32 Version: 1.10.19300.93.100 - Nero AG) Hidden
Nero Kwik Media (x32 Version: 11.0.15300 - Nero AG)
Nero Kwik Media Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden
Nero Online Upgrade (x32 Version: 1.3.0.0 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 2.6.26000 - Nero AG)
Nero StartSmart (x32 Version: 9.4.31.100 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.10623.22.0 - Nero AG) Hidden
nero.prerequisites.msi (x32 Version: 11.0.20008 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Ocster Backup Pro (Version: 6.43 - Ocster GmbH & Co. KG)
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
OVTScanner_Vista64 (x32 Version: 1.00.0000 - OVT)
Painkiller Hell & Damnation (x32 Version:  - )
Painkiller Pandemonium Edition (x32 Version: 1.0.0 - JoWooD )
Paint.NET v3.5.10 (Version: 3.60.0 - dotPDN LLC)
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
PlayMemories Home (x32 Version: 7.0.00.11271 - Sony Corporation)
QuickTime (x32 Version: 7.73.80.64 - Apple Inc.)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6251 - Realtek Semiconductor Corp.)
RICOH Media Driver ver.2.07.01.00 (x32 Version: 2.07.01.00 - RICOH)
S.T.A.L.K.E.R. - Call Of Pripyat [v1.6.01] (x32 Version: 1.6.01 - bitComposer Games)
S.T.A.L.K.E.R. - Shadow of Chernobyl (x32 Version: 1.0000 - THQ)
Samsung CLX-216x Series (x32 Version:  - Samsung Electronics CO.,LTD)
ScanWizard 5 (x32 Version:  - )
Skype™ 6.6 (x32 Version: 6.6.106 - Skype Technologies S.A.)
SmarThru 4 (x32 Version:  - )
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
StreamTransport version: 1.0.2.2171 (x32 Version:  - )
Treiber-Studio 2011 7.0.2.111  (x32 Version: 7.0.2.111 - Publish Data)
TuneUp Utilities 2012 (x32 Version: 12.0.3600.151 - TuneUp Software)
TuneUp Utilities 2012 (x32 Version: 12.0.3600.151 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.151 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 9.0.6030.1 - TuneUp Software) Hidden
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update Manager (x32 Version: 4.60 - Corel Corporation) Hidden
Vasco da Gama 4 HDPro (x32 Version: 4.00.0000 - MotionStudios)
VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden
VLC media player 2.1.0 (Version: 2.1.0 - VideoLAN)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (Version: 06/03/2009 2.3.0.0 - Garmin)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Media Encoder 9 Series (x32 Version:  - )
Windows Media Encoder 9 Series (x32 Version: 9.00.2980 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0 - Microsoft Corporation)
WinPatrol (Version: 28.9.2013.1 - BillP Studios)
Xfire (remove only) (x32 Version:  - )

==================== Restore Points  =========================

14-12-2013 21:29:05 Windows Update
15-12-2013 23:14:37 Windows Update
20-12-2013 12:43:57 Windows Update
24-12-2013 10:18:07 Windows Update
31-12-2013 12:24:10 Windows Update
03-01-2014 15:23:00 Windows Update
08-01-2014 08:04:07 Windows Update
14-01-2014 11:44:08 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-09-27 15:38 - 00000027 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0AB79BEB-91F8-4CF7-B3D9-8BF5E4B40A74} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe
Task: {14D7F368-BEE5-4B53-88C6-D94929E8AB67} - System32\Tasks\CheckDriveBackgroundGuard => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe [2012-01-16] (Abelssoft)
Task: {1830869E-72DF-4354-BE53-0A77685ADBC7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-11-18] (Google Inc.)
Task: {230F7C97-EE4E-4E3D-8842-7A09B7C742A6} - System32\Tasks\{1C0B4ED5-B0FF-4AB9-81EC-4104A82DB2F5} => Firefox.exe hxxp://ui.skype.com/ui/0/5.8.0.158.217/en/abandoninstall?page=tsMain
Task: {25BF265B-C1FD-45D8-BBA6-0AFD0B7A36F2} - System32\Tasks\{3CDF5D78-FC29-4D03-922C-25451497B8E7} => C:\Program Files\WinCal.exe [2009-12-27] (Microsoft Corporation)
Task: {28F54BC6-049A-4B6D-83B4-F6C5E334B5C2} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {2E390CF3-C07E-4AA1-851C-E7DEA38FAF92} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files (x86)\TuneUp Utilities 2012\OneClick.exe [2013-10-22] (TuneUp Software)
Task: {3CB31E86-1B8E-4EEB-91AA-27984B6193B6} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe
Task: {49AAE629-C079-4714-8D10-59E97DDC963F} - System32\Tasks\{BF5616A4-B239-4FF2-96F6-638E9B8C5CA5} => C:\Program Files (x86)\MagicMaps\Das Interaktive Kartenwerk. Deutschland\FlyAway.exe [2006-06-02] ( )
Task: {4A226778-B523-48EC-B422-76AEC55D656E} - System32\Tasks\{0F640454-4EA7-4084-85C6-6DE18E0CAD59} => C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
Task: {4A6E0DF7-C39F-4E22-A41D-77E64AA38D88} - System32\Tasks\{3965F5B3-8135-4940-81F2-A8F4FF991513} => C:\Program Files (x86)\MAGIX\Goya_burnR\Goya.exe [2007-11-23] (MAGIX AG)
Task: {4DCB117E-7716-438A-9B78-6BC46F8DBABF} - System32\Tasks\Bernd3 => C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBCore.exe
Task: {5154ED0B-2A09-4ADB-9E59-B58A98B35EC2} - System32\Tasks\{CEEC8CEB-5495-4D89-B5B1-F0AB98ABC577} => C:\Users\Bernd\Documents\zbar\zbar.exe
Task: {694481E3-1A2B-43B7-8533-1A97BC454DDC} - System32\Tasks\ArcSoft Connect Daemon => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
Task: {6B3C8125-6A87-45FD-BE30-0B2A82AB5DE9} - System32\Tasks\Bernd => C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBCore.exe
Task: {6EEFD242-C1AD-46C3-B5BF-08D360AB4C75} - System32\Tasks\{733C5D1F-332F-4CDE-94C7-2F3C3E1698FA} => C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
Task: {85294026-0757-4084-A495-C3B5E5704FBB} - System32\Tasks\{F201FA6C-0E9E-4DA5-B5ED-C73B030F2BC8} => C:\Program Files (x86)\MagicMaps\Das Interaktive Kartenwerk. Deutschland\FlyAway.exe [2006-06-02] ( )
Task: {86A70FC2-A901-420F-9846-4E83841D3130} - System32\Tasks\Bernd Local Autobackup => C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBCore.exe
Task: {88960FF9-F3E4-4546-BFEE-BA3A679FA354} - System32\Tasks\{C36621FD-5C22-4C6E-820A-009DB150D1AF} => C:\Program Files\WinCal.exe [2009-12-27] (Microsoft Corporation)
Task: {8A5D467A-7B54-4695-89B2-E15DE9CCCDB3} - System32\Tasks\{56947FF7-85FB-4640-8AC0-E4CC5F395D08} => D:\setup.exe
Task: {980952C8-BE7B-4916-8D6B-AF47CA2DF0DB} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {9A441FBE-D7FF-4125-9D77-8313F0E8D9DD} - System32\Tasks\Bernd NBAgent => C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe
Task: {9B03E2C3-0EF8-4CA7-A917-631E3ED2373E} - System32\Tasks\{4F14970F-D51B-40E6-99B2-DC346C082076} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=4.1.0.179.217&LastError=206
Task: {AF26F579-2F96-4CA6-A4EB-45157A879B47} - System32\Tasks\{A815F3FE-DC13-4301-8EC7-7BB94A083CF8} => C:\Program Files\WinCal.exe [2009-12-27] (Microsoft Corporation)
Task: {BE23382E-1A02-476A-BAA4-D674E77C598C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-11-18] (Google Inc.)
Task: {C163FEB6-FA2C-4513-B04B-C341F7E4DAEC} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.)
Task: {D008664F-A7D0-4415-97D0-C77615E1062D} - System32\Tasks\{EDFD228B-BB27-4CCB-9155-D78F04C0DC83} => C:\Program Files (x86)\ScanWizard 5\ScanWizard5.exe
Task: {D249D6FA-4848-4964-BC64-FD7BB48C0791} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {D85A9628-D437-40ED-A3C2-87974B160CC7} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {EAE16FC0-848E-4165-825D-8A120B8BB602} - System32\Tasks\{947EAA8D-6A6D-4012-BC53-7CFD5613300C} => C:\Users\Bernd\Documents\zbar\zbar.exe
Task: {EE25291C-E9BC-4338-ABEA-EB45E7057758} - System32\Tasks\Bernd2 => C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBCore.exe
Task: {F525F90D-5E7A-4846-A263-1474E2921570} - System32\Tasks\{95A5CD9E-57E9-4E90-878D-C93942F084B7} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\CheckDriveBackgroundGuard.job => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-11-28 14:58 - 2013-11-28 14:58 - 04837720 _____ () c:\Program Files\Ocster Backup\bin\ox.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 06131032 _____ () C:\Program Files\Ocster Backup\bin\backupClientLib.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 00389464 _____ () C:\Program Files\Ocster Backup\bin\updateman.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 00506200 _____ () C:\Program Files\Ocster Backup\bin\twirl.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 00343384 _____ () C:\Program Files\Ocster Backup\bin\tomb.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 04837720 _____ () C:\Program Files\Ocster Backup\bin\ox.dll
2013-09-23 20:24 - 2013-09-23 20:24 - 00076288 _____ () C:\Program Files\Ocster Backup\bin\zdll.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 11015512 _____ () C:\Program Files\Ocster Backup\bin\backupCore.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 00156504 _____ () C:\Program Files\Ocster Backup\bin\deemon.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 00493400 _____ () C:\Program Files\Ocster Backup\bin\veem.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 00060248 _____ () C:\Program Files\Ocster Backup\bin\minizutil.dll
2013-11-21 11:54 - 2013-11-21 11:54 - 00020992 _____ () C:\Program Files\Ocster Backup\bin\zlibutil.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 00052568 _____ () C:\Program Files\Ocster Backup\bin\lzmaUtil.dll
2013-11-28 13:33 - 2013-11-28 13:33 - 00049664 _____ () C:\Program Files\Ocster Backup\bin\lzma.dll
2013-11-21 11:56 - 2013-11-21 11:56 - 00309248 _____ () C:\Program Files\Ocster Backup\bin\party.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 00112984 _____ () C:\Program Files\Ocster Backup\bin\scoolite.dll
2013-11-28 13:32 - 2013-11-28 13:32 - 00626688 _____ () C:\Program Files\Ocster Backup\bin\sqlite.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 00210264 _____ () C:\Program Files\Ocster Backup\bin\netutil.dll
2013-11-28 14:58 - 2013-11-28 14:58 - 00147288 _____ () C:\Program Files\Ocster Backup\bin\featback.dll
2012-02-16 10:07 - 2012-01-16 15:26 - 00018848 _____ () C:\Program Files (x86)\CheckDrive\AbSettingsKeeper.dll
2012-02-16 10:07 - 2012-01-16 15:26 - 00010144 _____ () C:\Program Files (x86)\CheckDrive\AbUpdateBugReporter.dll
2012-02-16 10:07 - 2012-01-16 15:26 - 00037792 _____ () C:\Program Files (x86)\CheckDrive\AbCommons.dll
2012-02-16 10:07 - 2012-01-16 15:26 - 00031648 _____ () C:\Program Files (x86)\CheckDrive\Controller.dll
2012-02-16 10:07 - 2012-01-16 15:26 - 00183712 _____ () C:\Program Files (x86)\CheckDrive\AbBugReporter.dll
2012-02-16 10:07 - 2012-01-16 15:26 - 00013216 _____ () C:\Program Files (x86)\CheckDrive\AbMessages.dll
2012-02-16 10:07 - 2012-01-16 15:26 - 00585632 _____ () C:\Program Files (x86)\CheckDrive\AbScheduler.dll
2013-11-03 12:24 - 2013-10-10 19:14 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2011-11-01 23:26 - 2011-11-01 23:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-11-01 23:26 - 2011-11-01 23:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-11-16 10:59 - 2013-12-20 15:29 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/15/2014 10:51:13 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/15/2014 10:24:10 AM) (Source: BackItUp5) (User: )
Description: Backup process failed.

Error: (01/15/2014 10:24:10 AM) (Source: BackItUp5) (User: )
Description: Job execution failed because the selected target for job does not exist.

Error: (01/14/2014 11:41:08 PM) (Source: BackItUp5) (User: )
Description: Backup process failed.

Error: (01/14/2014 11:41:08 PM) (Source: BackItUp5) (User: )
Description: Job execution failed because the selected target for job does not exist.

Error: (01/14/2014 02:17:38 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4665

Error: (01/14/2014 02:17:38 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4665

Error: (01/14/2014 02:17:38 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/14/2014 02:17:37 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3073

Error: (01/14/2014 02:17:37 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3073


System errors:
=============
Error: (01/15/2014 10:58:38 AM) (Source: ACPI) (User: )
Description: : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen Situationen zur Folge haben, dass der Computer fehlerhaft läuft.

Error: (01/15/2014 10:52:47 AM) (Source: ACPI) (User: )
Description: : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen Situationen zur Folge haben, dass der Computer fehlerhaft läuft.

Error: (01/15/2014 10:42:43 AM) (Source: ACPI) (User: )
Description: : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen Situationen zur Folge haben, dass der Computer fehlerhaft läuft.

Error: (01/15/2014 10:39:04 AM) (Source: ACPI) (User: )
Description: : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen Situationen zur Folge haben, dass der Computer fehlerhaft läuft.

Error: (01/15/2014 10:37:41 AM) (Source: ACPI) (User: )
Description: : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen Situationen zur Folge haben, dass der Computer fehlerhaft läuft.

Error: (01/15/2014 10:36:37 AM) (Source: ACPI) (User: )
Description: : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen Situationen zur Folge haben, dass der Computer fehlerhaft läuft.

Error: (01/15/2014 10:24:21 AM) (Source: ACPI) (User: )
Description: : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen Situationen zur Folge haben, dass der Computer fehlerhaft läuft.

Error: (01/15/2014 10:16:41 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Mobile 2003-basierte Gerätekonnektivität" ist vom Dienst "Windows Mobile-basierte Geräteverbindungen" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (01/15/2014 10:14:38 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
UimBus
Uim_IM

Error: (01/15/2014 10:13:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%20


Microsoft Office Sessions:
=========================
Error: (01/15/2014 10:51:13 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\Bernd\Downloads\computerbild_downloader_fuer_winzip.exe

Error: (01/15/2014 10:24:10 AM) (Source: BackItUp5)(User: )
Description: Sicherung ist fehlgeschlagen.

Error: (01/15/2014 10:24:10 AM) (Source: BackItUp5)(User: )
Description: Die Ausführung des Jobs ist fehlgeschlagen, da das gewählte Ziel (G:\) für Job (Bernd Local Autobackup) nicht existiert oder nicht darauf zugegriffen werden kann.

Error: (01/14/2014 11:41:08 PM) (Source: BackItUp5)(User: )
Description: Sicherung ist fehlgeschlagen.

Error: (01/14/2014 11:41:08 PM) (Source: BackItUp5)(User: )
Description: Die Ausführung des Jobs ist fehlgeschlagen, da das gewählte Ziel (G:\) für Job (Bernd Local Autobackup) nicht existiert oder nicht darauf zugegriffen werden kann.

Error: (01/14/2014 02:17:38 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4665

Error: (01/14/2014 02:17:38 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4665

Error: (01/14/2014 02:17:38 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/14/2014 02:17:37 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3073

Error: (01/14/2014 02:17:37 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3073


CodeIntegrity Errors:
===================================
  Date: 2013-09-27 16:35:06.727
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-27 16:35:06.571
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-17 10:02:47.463
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-17 10:02:47.291
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-01-07 19:27:01.546
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-01-07 19:27:01.433
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-01-20 13:21:59.077
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\MAGIX Shared\Syscheck\SysCNTio.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-01-20 13:21:59.062
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\MAGIX Shared\Syscheck\SysCNTio.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 4060.89 MB
Available physical RAM: 2236.42 MB
Total Pagefile: 8119.96 MB
Available Pagefile: 5942.39 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:207.04 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 2B4D25D0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2014-01-15 11:55:32
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD5000BEVT-00A0RT0 rev.01.01A01 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Bernd\AppData\Local\Temp\pgloqpog.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                      fffff800033ab000 65 bytes [00, 00, 15, 02, 46, 69, 6C, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 594                                                                      fffff800033ab042 4 bytes [00, 00, 00, 00]

---- User code sections - GMER 2.1 ----

.text     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[1156] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69         0000000075871465 2 bytes [87, 75]
.text     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[1156] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155        00000000758714bb 2 bytes [87, 75]
.text     ...                                                                                                                                     * 2
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2080] C:\Windows\SysWOW64\WSOCK32.dll!recv + 83                                                        0000000072d117fb 1 byte [72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2080] C:\Windows\SysWOW64\WSOCK32.dll!recvfrom + 89                                                    0000000072d11861 1 byte [72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2080] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 99                                                  0000000072d11943 1 byte [72]
.text     C:\Windows\SysWOW64\PnkBstrA.exe[2080] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 110                                                 0000000072d1194e 1 byte [72]
.text     C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[3660] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000075871465 2 bytes [87, 75]
.text     C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[3660] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000758714bb 2 bytes [87, 75]
.text     ...                                                                                                                                     * 2

---- Registry - GMER 2.1 ----

Reg       HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\temp\aulauncher.exe               1

---- EOF - GMER 2.1 ----