Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: MS Security Essentials fordert wiederholt Neustart wegen Worm:Win32/Cridex.E

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 15.01.2014, 19:13   #1
markus67
 
MS Security Essentials fordert wiederholt Neustart wegen Worm:Win32/Cridex.E - Standard

MS Security Essentials fordert wiederholt Neustart wegen Worm:Win32/Cridex.E



Nachdem ich dumm genug war von einer fingierten Telekomrechnungsmail den zip-Anhang zu öffnen, meldete sich MS Security Essentials.
Angeblich hat es die Gefahr gebannt, fordert dann aber zum Neustart auf, nach dem die Aufforderung zum Neustart aber erneut kommt usw.
Auch ein stundenlanger Gesamtscan des Systems hat daran nichts geändert.
Im Verlauf bei MSSE ist von "Worm:Win32/Cridex.E" die Rede, Warnstufe schwerwiegend, unter Quarantäne... aber mit Datum/Zeit identisch mit jedem einzelnen Neustart.
Die ersten Schritte eurer Anleitung habe ich durchgeführt und folgende Protokolle:

FRST.TXT
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014
Ran by Ma (administrator) on MARTINIMOBIL on 15-01-2014 08:10:44
Running from C:\Users\Ma\Downloads
Windows 7 Enterprise Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official downoad link fo FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Promethean) C:\Program Files\Activ Software\ActivDriver\ActivControlsvc.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\AllShareFrameworkManagerDMS.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\AllShareFrameworkDMS.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe
(Data Perceptions / PowerProgrammer) C:\Windows\SysWOW64\WebUpdateSvc4.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files\Activ Software\ActivDriver\ActivMgr.exe
(Samsung Electronics) C:\Program Files\Samsung\Samsung Link\utils\Samsung Link Launcher.exe
(Fieldston Software) C:\Program Files (x86)\Fieldston Software\gSyncit\gsyncit.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
() C:\Users\Ma\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files\Activ Software\ActivDriver\FlashExtension\flashbridge-wrapper-crossplatform.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
() C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Dropbox, Inc.) C:\Users\Ma\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\agcp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11780712 2011-02-26] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2589480 2011-02-09] (ELAN Microelectronics Corp.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [ActivManager] - C:\Program Files\Activ Software\ActivDriver\ActivMgr.exe [712584 2012-11-28] ()
HKLM\...\Run: [Samsung Link] - C:\Program Files\Samsung\Samsung Link\utils\Samsung Link Launcher.exe [407384 2013-05-09] (Samsung Electronics)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-12] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [AllShareAgent] - C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-04] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [NoteTaker] -  -silent
HKCU\...\Run: [gSyncit] - C:\Program Files (x86)\Fieldston Software\gSyncit\gsyncit.exe [167616 2013-04-03] (Fieldston Software)
HKCU\...\Run: [Dölli`s WAN IP-Checker] - C:\Program Files (x86)\WAN IP-Checker\wanipchecker.exe [216997 2007-11-04] ()
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Ma\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKCU\...\Run: [KB00257769.exe] - C:\Users\Ma\AppData\Roaming\KB00257769.exe [159744 2014-01-15] ()
MountPoints2: {5cc5a2a3-277b-11e2-9235-b870f4fc137f} - G:\SETUP.EXE
MountPoints2: {af39f80f-53b4-11e1-94ab-b870f4fc137f} - E:\LaunchU3.exe -a
MountPoints2: {d1c4673a-4c7a-11e1-9513-b870f4fc137f} - E:\LaunchU3.exe -a
Startup: C:\Users\Ma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Ma\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Ma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startfenster.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x401C8B82EB0CCD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Softonic Helper Object - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files (x86)\Softonic\softonic\1.5.11.5\bh\softonic.dll (Softonic.com)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\softonic\1.5.11.5\softonicTlbr.dll (Softonic.com)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Ma\AppData\Roaming\Mozilla\Firefox\Profiles\1fccuh21.default
FF user.js: detected! => C:\Users\Ma\AppData\Roaming\Mozilla\Firefox\Profiles\1fccuh21.default\user.js
FF Homepage: file:///C:/Users/Ma/Documents/Privat/Online/start.htm
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Ma\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin HKCU: samsung.com/SamsungLinkPCPlugin - C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll (Samsung)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Ma\AppData\Roaming\Mozilla\Firefox\Profiles\1fccuh21.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-29]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Ma\AppData\Roaming\Mozilla\Firefox\Profiles\1fccuh21.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Adblock Plus - C:\Users\Ma\AppData\Roaming\Mozilla\Firefox\Profiles\1fccuh21.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-01]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-12-20]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-12-20]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-12-20]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-01-15]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-01-15]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files (x86)\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpplugin.dll (RealPlayer)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin.dll (Amazon.com, Inc.)
CHR Plugin: (NPCIG.dll) - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Extension: (YouTube) - C:\Users\Ma\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 [2014-01-14]
CHR Extension: (Google Search) - C:\Users\Ma\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 [2014-01-14]
CHR Extension: (RealDownloader) - C:\Users\Ma\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0 [2014-01-14]
CHR Extension: (Google Wallet) - C:\Users\Ma\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 [2014-01-14]
CHR Extension: (Gmail) - C:\Users\Ma\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2 [2014-01-14]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

==================== Services (Whitelisted) =================

R2 ActivControl; C:\Program Files\Activ Software\ActivDriver\ActivControlsvc.exe [21400 2012-11-28] (Promethean)
R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\AllShareFrameworkManagerDMS.exe [405896 2013-05-03] (Samsung)
R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [511920 2011-07-22] (REINER SCT)
R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [350720 2012-06-01] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 WebUpdate4; C:\Windows\SysWOW64\WebUpdateSvc4.exe [262360 2008-09-15] (Data Perceptions / PowerProgrammer)

==================== Drivers (Whitelisted) ====================

S3 ACTIVhidmini; C:\Windows\System32\DRIVERS\ACTIVhidmini.sys [102384 2012-10-30] (Promethean Technologies Ltd)
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
S3 Logi_Headset_DFU; C:\Windows\System32\Drivers\lhusbdfuamd64.sys [44136 2013-09-30] (CSR plc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 prmvmouse; C:\Windows\System32\DRIVERS\activmouse.sys [10992 2012-10-30] (Promethean Technologies Ltd)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-15 08:10 - 2014-01-15 08:11 - 00027231 _____ C:\Users\Ma\Downloads\FRST.txt
2014-01-15 08:10 - 2014-01-15 08:10 - 00000000 ____D C:\FRST
2014-01-15 08:09 - 2014-01-15 08:10 - 02076160 _____ (Farbar) C:\Users\Ma\Downloads\FRST64.exe
2014-01-15 08:08 - 2014-01-15 08:08 - 00000466 _____ C:\Users\Ma\Downloads\defogger_disable.log
2014-01-15 08:08 - 2014-01-15 08:08 - 00000000 _____ C:\Users\Ma\defogger_reenable
2014-01-15 08:07 - 2014-01-15 08:07 - 00050477 _____ C:\Users\Ma\Downloads\Defogger.exe
2014-01-14 23:32 - 2014-01-14 23:32 - 00002101 _____ C:\Users\Ma\Downloads\193093867.vcs
2014-01-14 22:40 - 2014-01-15 07:23 - 00003224 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3188104431-1312187564-477085468-1000
2014-01-14 18:26 - 2014-01-14 18:26 - 00002074 _____ C:\Users\Public\Desktop\ASV-Client.lnk
2014-01-14 18:26 - 2014-01-14 18:26 - 00000000 ____D C:\Program Files (x86)\Medienzentrum München Land
2014-01-14 18:25 - 2013-11-18 17:47 - 00596992 _____ C:\Users\Ma\Desktop\AllgemeineSchulverwaltung.msi
2014-01-14 16:14 - 2014-01-15 07:23 - 00003364 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3188104431-1312187564-477085468-1000
2014-01-14 16:08 - 2014-01-15 07:21 - 00000000 ___HD C:\Users\Ma\AppData\Roaming\5ECBABB4
2014-01-14 09:26 - 2014-01-15 07:21 - 00159744 _____ C:\Users\Ma\AppData\Roaming\KB00257769.exe
2014-01-12 21:39 - 2014-01-12 21:39 - 00000000 ____D C:\Users\Ma\AppData\Roaming\GeoGebra 4.4
2014-01-07 11:43 - 2014-01-07 11:43 - 00001008 _____ C:\Users\Public\Desktop\UE BOOM Update-Assistent 1.2.7.lnk
2014-01-07 11:43 - 2014-01-07 11:43 - 00000000 ____D C:\Users\Ma\AppData\Local\UE BOOM
2014-01-07 11:43 - 2014-01-07 11:43 - 00000000 ____D C:\Program Files (x86)\UE BOOM Update-Assistent 1.2.7
2013-12-31 09:42 - 2013-12-31 09:42 - 00000000 ____D C:\Users\Ma\Documents\Canon Utilities
2013-12-27 00:23 - 2013-12-27 00:23 - 00001137 _____ C:\Users\Public\Desktop\Map Utility.lnk
2013-12-27 00:15 - 2013-12-27 00:15 - 00000000 ____D C:\Users\Ma\AppData\Roaming\Canon_Inc_IC
2013-12-27 00:14 - 2013-12-27 00:14 - 00001192 _____ C:\Users\Public\Desktop\ImageBrowser EX.lnk
2013-12-27 00:11 - 2013-12-27 00:11 - 00000000 ____D C:\ProgramData\Canon_Inc_IC
2013-12-20 14:35 - 2013-12-20 14:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-19 22:18 - 2013-12-19 22:18 - 00001851 _____ C:\Users\Public\Desktop\GeoGebra.lnk
2013-12-19 22:17 - 2013-12-19 22:18 - 00000000 ____D C:\Program Files (x86)\GeoGebra 4.4

==================== One Month Modified Files and Folders =======

2014-01-15 08:11 - 2014-01-15 08:10 - 00027231 _____ C:\Users\Ma\Downloads\FRST.txt
2014-01-15 08:10 - 2014-01-15 08:10 - 00000000 ____D C:\FRST
2014-01-15 08:10 - 2014-01-15 08:09 - 02076160 _____ (Farbar) C:\Users\Ma\Downloads\FRST64.exe
2014-01-15 08:08 - 2014-01-15 08:08 - 00000466 _____ C:\Users\Ma\Downloads\defogger_disable.log
2014-01-15 08:08 - 2014-01-15 08:08 - 00000000 _____ C:\Users\Ma\defogger_reenable
2014-01-15 08:08 - 2011-12-23 19:04 - 00000000 ____D C:\Users\Ma
2014-01-15 08:07 - 2014-01-15 08:07 - 00050477 _____ C:\Users\Ma\Downloads\Defogger.exe
2014-01-15 08:05 - 2009-07-14 05:45 - 00015168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-15 08:05 - 2009-07-14 05:45 - 00015168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-15 07:57 - 2012-02-07 22:31 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-15 07:42 - 2012-04-11 06:58 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-15 07:29 - 2011-12-23 19:01 - 01510978 _____ C:\Windows\WindowsUpdate.log
2014-01-15 07:26 - 2013-06-07 21:38 - 00000000 ____D C:\Samsung Link
2014-01-15 07:26 - 2012-08-22 17:08 - 00000000 ____D C:\Users\Ma\AppData\Roaming\Dropbox
2014-01-15 07:25 - 2012-08-22 17:11 - 00000000 ___RD C:\Users\Ma\Dropbox
2014-01-15 07:23 - 2014-01-14 22:40 - 00003224 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3188104431-1312187564-477085468-1000
2014-01-15 07:23 - 2014-01-14 16:14 - 00003364 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3188104431-1312187564-477085468-1000
2014-01-15 07:23 - 2012-02-07 22:31 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-15 07:23 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-15 07:23 - 2009-07-14 05:51 - 00176542 _____ C:\Windows\setupact.log
2014-01-15 07:21 - 2014-01-14 16:08 - 00000000 ___HD C:\Users\Ma\AppData\Roaming\5ECBABB4
2014-01-15 07:21 - 2014-01-14 09:26 - 00159744 _____ C:\Users\Ma\AppData\Roaming\KB00257769.exe
2014-01-15 07:13 - 2012-01-29 11:30 - 00000000 ____D C:\Users\Ma\Documents\Outlook-Dateien
2014-01-15 07:12 - 2012-01-29 13:33 - 00000000 ____D C:\Users\Ma\AppData\Roaming\gSyncit
2014-01-15 07:12 - 2009-07-14 11:49 - 00654400 _____ C:\Windows\system32\perfh007.dat
2014-01-15 07:12 - 2009-07-14 11:49 - 00130240 _____ C:\Windows\system32\perfc007.dat
2014-01-15 07:12 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-14 23:32 - 2014-01-14 23:32 - 00002101 _____ C:\Users\Ma\Downloads\193093867.vcs
2014-01-14 21:17 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2014-01-14 18:26 - 2014-01-14 18:26 - 00002074 _____ C:\Users\Public\Desktop\ASV-Client.lnk
2014-01-14 18:26 - 2014-01-14 18:26 - 00000000 ____D C:\Program Files (x86)\Medienzentrum München Land
2014-01-14 18:25 - 2012-03-08 16:01 - 00002000 ____H C:\Users\Ma\Documents\Default.rdp
2014-01-13 07:59 - 2012-01-10 20:50 - 00000000 ____D C:\Users\Ma\Downloads\mmm
2014-01-12 23:40 - 2012-01-10 20:50 - 00000000 ____D C:\Users\Ma\Documents\Mathematikverein
2014-01-12 21:39 - 2014-01-12 21:39 - 00000000 ____D C:\Users\Ma\AppData\Roaming\GeoGebra 4.4
2014-01-12 11:39 - 2012-01-08 07:36 - 00000000 ____D C:\Users\Ma\AppData\Roaming\vlc
2014-01-11 11:41 - 2012-12-23 10:01 - 00003342 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3188104431-1312187564-477085468-1000
2014-01-11 11:41 - 2012-12-23 10:01 - 00003202 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3188104431-1312187564-477085468-1000
2014-01-08 14:39 - 2012-02-08 23:27 - 00000000 ____D C:\Program Files (x86)\StarMoney 8.0
2014-01-08 01:00 - 2013-04-25 20:30 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-07 22:41 - 2012-01-11 07:35 - 00000000 ____D C:\Users\Ma\Documents\tmp
2014-01-07 11:43 - 2014-01-07 11:43 - 00001008 _____ C:\Users\Public\Desktop\UE BOOM Update-Assistent 1.2.7.lnk
2014-01-07 11:43 - 2014-01-07 11:43 - 00000000 ____D C:\Users\Ma\AppData\Local\UE BOOM
2014-01-07 11:43 - 2014-01-07 11:43 - 00000000 ____D C:\Program Files (x86)\UE BOOM Update-Assistent 1.2.7
2014-01-06 23:03 - 2012-01-11 01:30 - 00000000 ____D C:\Users\Ma\Documents\pdf
2014-01-01 13:52 - 2011-12-23 16:30 - 00110210 _____ C:\Windows\PFRO.log
2014-01-01 09:58 - 2012-02-04 01:52 - 00000000 ____D C:\Users\Ma\AppData\Roaming\ZoomBrowser EX
2013-12-31 09:42 - 2013-12-31 09:42 - 00000000 ____D C:\Users\Ma\Documents\Canon Utilities
2013-12-31 09:42 - 2012-02-21 09:41 - 00000000 ____D C:\Users\Ma\AppData\Roaming\CANON INC
2013-12-29 13:03 - 2012-02-04 01:48 - 00000000 ____D C:\Users\Public\Documents\Canon MyCameraFiles
2013-12-27 00:24 - 2012-02-04 01:47 - 00000000 ____D C:\Program Files (x86)\Canon
2013-12-27 00:23 - 2013-12-27 00:23 - 00001137 _____ C:\Users\Public\Desktop\Map Utility.lnk
2013-12-27 00:15 - 2013-12-27 00:15 - 00000000 ____D C:\Users\Ma\AppData\Roaming\Canon_Inc_IC
2013-12-27 00:14 - 2013-12-27 00:14 - 00001192 _____ C:\Users\Public\Desktop\ImageBrowser EX.lnk
2013-12-27 00:11 - 2013-12-27 00:11 - 00000000 ____D C:\ProgramData\Canon_Inc_IC
2013-12-27 00:11 - 2012-09-01 12:19 - 00000000 ____D C:\Users\Ma\AppData\Roaming\Canon
2013-12-26 23:50 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-25 19:52 - 2012-02-17 23:06 - 00006144 _____ C:\Users\Ma\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-24 00:02 - 2012-01-10 21:17 - 00000000 ____D C:\Users\Ma\Documents\Bezirkefahrt
2013-12-21 21:28 - 2012-04-30 06:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-21 15:38 - 2012-09-26 17:44 - 00001012 _____ C:\Users\Ma\Desktop\Dropbox.lnk
2013-12-21 15:38 - 2011-12-23 19:05 - 00000000 ___RD C:\Users\Ma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-20 14:36 - 2013-12-20 14:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-19 22:18 - 2013-12-19 22:18 - 00001851 _____ C:\Users\Public\Desktop\GeoGebra.lnk
2013-12-19 22:18 - 2013-12-19 22:17 - 00000000 ____D C:\Program Files (x86)\GeoGebra 4.4
2013-12-18 01:18 - 2013-09-16 01:54 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-12-16 08:31 - 2013-07-17 19:57 - 00000000 ____D C:\Windows\system32\MRT
2013-12-16 08:28 - 2012-01-05 13:05 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Files to move or delete:
====================
C:\ProgramData\SDPlatformMgr.dll
C:\ProgramData\SplashID%20Safe.exe
C:\ProgramData\sqlite3.dll
C:\Users\Ma\tmpifo.bat


Some content of TEMP:
====================
C:\Users\Ma\AppData\Local\Temp\AskSLib.dll
C:\Users\Ma\AppData\Local\Temp\doxillionsetup.exe
C:\Users\Ma\AppData\Local\Temp\exp4E61.tmp.exe
C:\Users\Ma\AppData\Local\Temp\exp6F27.tmp.exe
C:\Users\Ma\AppData\Local\Temp\i4jdel0.exe
C:\Users\Ma\AppData\Local\Temp\iMesh_setup.exe
C:\Users\Ma\AppData\Local\Temp\javagiac0.22838679750492852.dll
C:\Users\Ma\AppData\Local\Temp\javagiac0.502366714967456.dll
C:\Users\Ma\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe
C:\Users\Ma\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\Ma\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Ma\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\Ma\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Ma\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Ma\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Ma\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Ma\AppData\Local\Temp\lowproc.exe
C:\Users\Ma\AppData\Local\Temp\ose00000.exe
C:\Users\Ma\AppData\Local\Temp\ose00001.exe
C:\Users\Ma\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\Ma\AppData\Local\Temp\SetupDataMngr_iMesh.exe
C:\Users\Ma\AppData\Local\Temp\Shockwave_Installer_FF.exe
C:\Users\Ma\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\Ma\AppData\Local\Temp\stubhelper.dll
C:\Users\Ma\AppData\Local\Temp\vlc-2.0.4-win32.exe
C:\Users\Ma\AppData\Local\Temp\vlc-2.0.6-win32.exe
C:\Users\Ma\AppData\Local\Temp\vlc-2.0.7-win32.exe
C:\Users\Ma\AppData\Local\Temp\vlc-2.0.8-win32.exe
C:\Users\Ma\AppData\Local\Temp\vlc-2.1.2-win32.exe
C:\Users\Ma\AppData\Local\Temp\_is7F8B.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-09 01:21

==================== End Of Log ============================
         
ADDITION.TXT
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-01-2014
Ran by Ma at 2014-01-15 08:14:07
Running from C:\Users\Ma\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
ActivDriver x64 v5.8 (Version: 5.8.46 - Promethean)
ActivInspire Core Resources (DEU) v1 (x32 Version: 1.6.3 - Promethean)
ActivInspire Help (DEU) v1 (x32 Version: 1.6.3 - Promethean)
ActivInspire HWR Resources (DEU) v1 (x32 Version: 1.7.1 - Promethean)
ActivInspire v1 (x32 Version: 1.7.58968 - Promethean)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.4.144 - Adobe Systems, Inc.)
AIO_CDA_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDA_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
Allgemeine Schulverwaltung (x32 Version: 1.0.0 - Medienzentrum München Land)
AllShare Framework DMS (Version: 1.3.09 - Samsung)
Amazon MP3-Downloader 1.0.15 (x32 Version: 1.0.15 - Amazon Services LLC)
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18 - Amazon Services LLC)
Anki (x32 Version:  - )
Apple Application Support (x32 Version: 2.3 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Archimedes Geo3D 1.3.6 (x32 Version:  - Andreas Goebel)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.36 - Atheros Communications Inc.)
Atheros Driver Installation Program (x32 Version: 9.0 - Atheros)
ATI Catalyst Install Manager (Version: 3.0.812.0 - ATI Technologies, Inc.)
Audacity 1.2.6 (x32 Version:  - )
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
C6100 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
c6100_Help (x32 Version: 82.0.256.000 - Hewlett-Packard) Hidden
CANON iMAGE GATEWAY MyCamera Download Plugin (x32 Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (x32 Version: 1.9.0.9 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 3.7.0.4 - Canon Inc.)
Canon Utilities CameraWindow DC 8 (x32 Version: 8.10.0.16 - Canon Inc.)
Canon Utilities ImageBrowser EX (x32 Version: 1.4.0.5 - Canon Inc.)
Canon Utilities MyCamera (x32 Version: 7.4.0.2 - Canon Inc.)
Canon Utilities PhotoStitch (x32 Version: 3.1.23.47 - Canon Inc.)
Canon Utilities ZoomBrowser EX (x32 Version: 6.7.0.24 - Canon Inc.)
Catalyst Control Center InstallProxy (x32 Version: 2011.0208.2202.39516 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0208.2202.39516 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help English (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help French (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help German (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
ccc-core-static (x32 Version: 2011.0208.2202.39516 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2011.0208.2202.39516 - ATI) Hidden
CDBurnerXP (x32 Version: 4.4.2.3442 - CDBurnerXP)
Contenta Converter PREMIUM (x32 Version:  - Contenta Software)
ConvertHelper 2.2 (x32 Version:  - DownloadHelper)
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
cyberJack Base Components (x32 Version: 6.9.13 - REINER SCT)
Debut Video Capture Software (x32 Version:  - NCH Software)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (x32 Version:  - Microsoft)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Dölli`s WAN IP-Checker 1.90 - Trialversion (x32 Version:  - Stefan Döllinger)
Dropbox (HKCU Version: 2.4.10 - Dropbox, Inc.)
DTAUS 2011 Profi (x32 Version:  - Yokey Software)
DTAUS 2011 Profi (x32 Version: 1.0.0 - Yokey Software) Hidden
DVDx 4.0 Open Edition (x32 Version: 4.0 (Open Edition) - labDV)
Easy note taker 3.0 (x32 Version: 3.0.1.0 - Yifang Digital)
ETDWare PS/2-X64 8.0.6.2_WHQL (Version: 8.0.6.2 - ELAN Microelectronic Corp.)
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
FormatFactory 2.96 (x32 Version: 2.96 - Free Time)
Foxit Reader (x32 Version: 4.3.1.118 - Foxit Corporation)
Free YouTube Download version 3.1.29.608 (x32 Version: 3.1.29.608 - DVDVideoSoft Ltd.)
FreePDF (Remove only) (x32 Version:  - )
GeoGebra 4.4 (x32 Version: 4.4.3.0 - International GeoGebra Institute)
GeoGebraPrim (HKCU Version:  - International GeoGebra Institute)
GIMP 2.6.12-2 (x32 Version: 2.6.12 - The GIMP Team)
Google Chrome (x32 Version: 32.0.1700.72 - Google Inc.)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
GPL Ghostscript (x32 Version: 9.04 - Artifex Software Inc.)
gSyncit (x32 Version: 3.6.137 - Fieldston Software)
Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
HotPotatoes v 6.3.0.4 (x32 Version:  - HalfBaked)
HP Customer Participation Program 13.0 (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (Version: 13.0 - HP)
HP Photosmart All-In-One Driver Software 13.0 Rel. A (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (Version: 3.5 - HP)
HP Product Detection (x32 Version: 11.14.0001 - HP)
HP Smart Web Printing 4.51 (Version: 4.51 - HP)
HP Solution Center 13.0 (Version: 13.0 - HP)
HP Update (x32 Version: 5.005.000.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
iMesh (x32 Version: 11.0.0.122124 - iMesh Inc.)
iMesh (x32 Version: 11.0.0.122124 - iMesh Inc.) Hidden
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004 - Intel Corporation)
IrfanView (remove only) (x32 Version: 4.32 - Irfan Skiljan)
Java 7 Update 25 (64-bit) (Version: 7.0.250 - Oracle)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 37 (x32 Version: 6.0.370 - Oracle)
Kies Air Discovery Service (HKCU Version:  - Samsung)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Access MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (x32 Version:  - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (x32 Version:  - Microsoft) Hidden
Microsoft Office 64-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Word MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mp3tag v2.49b (x32 Version: v2.49b - Florian Heidenreich)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MyScript Notes Lite (x32 Version: 2.2.0.0 - Vision Objects)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
Nokia Connectivity Cable Driver (Version: 7.1.32.69 - )
OCR Software by I.R.I.S. 13.0 (Version: 13.0 - HP)
ODIR (x32 Version:  - Vaita)
OpenOffice.org 3.3 (x32 Version: 3.3.9567 - OpenOffice.org)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
PDF-Viewer (Version: 2.5.201.0 - Tracker Software Products Ltd)
Picasa 3 (x32 Version: 3.9 - Google, Inc.)
PIXELA AAC LC CODEC (x32 Version: 1.1.0.1 - Canon Inc.)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (x32 Version: 16.0.3 - RealNetworks)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6318 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
RedMon - Redirection Port Monitor (Version:  - )
Samsung AllShare (x32 Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.)
Samsung AllShare (x32 Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.) Hidden
Samsung Link 1.5.0.1305092012 (Version: 1.5.0.1305092012 - Copyright 2013 SAMSUNG)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (Version: 13.0 - HP)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
Softonic toolbar  on IE and Chrome (x32 Version:  - ) <==== ATTENTION
Software Update Wizard (Redistributable) 4.5 (x32 Version: 4.5 - PowerProgrammer)
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Sophos Free Encryption 2.40.1 (x32 Version: 2.40.1.1 - Sophos)
SplashID Safe 6.0.4 (x32 Version: 6.0.4 - SplashData)
StarMoney (x32 Version: 3.0.2.50 - StarFinanz) Hidden
StarMoney 8.0  (x32 Version: 8.0 - Star Finanz GmbH)
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
TrueCrypt (x32 Version: 7.1a - TrueCrypt Foundation)
UE BOOM Update-Assistent (x32 Version: 1.2.7 - Logitech, Inc.)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Access 2013 (KB2768008) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Access 2013 (KB2827233) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft InfoPath 2013 (KB2837648) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2817678) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2738038) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760242) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760267) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760539) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760553) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2767845) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817314) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817490) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817626) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826004) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827225) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827230) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827239) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837626) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837637) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837638) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837655) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2850066) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2850063) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2767850) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Project 2013 (KB2727085) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2837635) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft SkyDrive Pro (KB2817495) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft SkyDrive Pro (KB2837652) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio 2013 (KB2817306) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2768338) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2837647) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2850060) 32-Bit Edition (x32 Version:  - Microsoft)
VirtualCloneDrive (x32 Version:  - Elaborate Bytes)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
WinRAR 4.11 (32-bit) (x32 Version: 4.11.0 - win.rar GmbH)

==================== Restore Points  =========================

23-12-2013 09:04:39 Windows Update
26-12-2013 22:33:00 Windows Update
31-12-2013 08:45:29 Windows Update
03-01-2014 20:03:38 Windows Update
05-01-2014 10:03:23 Windows-Sicherung
08-01-2014 07:13:19 Windows Update
12-01-2014 01:27:14 Windows Update
14-01-2014 17:25:24 Installed Allgemeine Schulverwaltung

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02990153-5971-4CBF-BD25-CA91C18AF81D} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3188104431-1312187564-477085468-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {0B36359A-1CDC-4D10-9017-1D66894B7696} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07] (Google Inc.)
Task: {1938BA2F-E285-4486-A812-FB8157EDD663} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3188104431-1312187564-477085468-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {4A3BCE71-2ECD-4563-BC05-D6B09EFA0934} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3188104431-1312187564-477085468-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {5B00F47F-6633-4C6F-B4A0-6361EDD02CFD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {6943BB7A-7178-4DDD-9C91-792FC80DB9D1} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3188104431-1312187564-477085468-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {6A55AA1C-226C-498C-80F2-3CA9DD9F1F54} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {7BCFCCB6-83DB-4084-934B-BFF154F014E0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3188104431-1312187564-477085468-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {8B58FEE1-A8A9-475D-998E-54A6EECA1243} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3188104431-1312187564-477085468-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {BA30B710-1493-487C-A351-ED5CDCD17120} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07] (Google Inc.)
Task: {BA6DB598-8BEA-4FB6-9395-4FB9A122BAF6} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3188104431-1312187564-477085468-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {C18E7CA8-C29C-4F1E-91A5-6BC6F1ABF8D4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {CDD2568F-54E0-45F8-90DF-FF269BD57160} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {D6E29CA4-5FDF-4E70-80F9-5B22001990B3} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {DD970D21-9EB1-4DD7-800D-E7927FAB4ABD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-06-07 21:37 - 2013-05-09 19:12 - 01226752 _____ () C:\Program Files\Samsung\Samsung Link\SecLibJNI.dll
2013-06-07 21:38 - 2013-06-07 21:38 - 00515584 _____ () C:\Users\Ma\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
2013-06-07 21:37 - 2013-05-09 19:12 - 00011264 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll
2013-05-03 13:20 - 2013-05-03 13:20 - 00036864 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\64bit\JNIInterface.dll
2013-05-03 13:21 - 2013-05-03 13:21 - 00144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\64bit\ASFAPI.dll
2013-05-03 13:22 - 2013-05-03 13:22 - 00018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\64bit\MediaDB_Manager.dll
2013-02-14 18:41 - 2013-02-14 18:41 - 00030720 _____ () C:\Windows\system32\MediaDB64.dll
2013-02-14 18:41 - 2013-02-14 18:41 - 00905216 _____ () C:\Windows\system32\ContentDirectoryPresenter64.dll
2013-05-03 13:22 - 2013-05-03 13:22 - 00521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\64bit\DMS_Manager.dll
2013-04-15 17:52 - 2013-04-15 17:52 - 00049152 _____ () C:\Windows\system32\boost_date_time-vc90-mt-1_47.dll
2013-04-15 17:52 - 2013-04-15 17:52 - 00016896 _____ () C:\Windows\system32\boost_system-vc90-mt-1_47.dll
2013-04-15 17:52 - 2013-04-15 17:52 - 00058880 _____ () C:\Windows\system32\boost_thread-vc90-mt-1_47.dll
2013-04-15 17:52 - 2013-04-15 17:52 - 00299520 _____ () C:\Windows\system32\boost_serialization-vc90-mt-1_47.dll
2013-04-19 16:29 - 2013-04-19 16:29 - 01113600 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\DMSManager.dll
2013-04-19 15:37 - 2013-04-19 15:37 - 00704000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\ContentDirectoryPresenter.dll
2013-04-19 15:39 - 2013-04-19 15:39 - 00107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\DCMCDP.dll
2013-04-19 15:38 - 2013-04-19 15:38 - 00101376 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\FolderCDP.dll
2013-04-19 16:29 - 2013-04-19 16:29 - 00077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\MetadataFramework.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\sqlite3.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\MoodExtractor.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 05717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\DCMImgExtractor.dll
2013-04-12 07:58 - 2013-04-12 07:58 - 00028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\AutoChaptering.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\libexpat.dll
2013-04-12 07:58 - 2013-04-12 07:58 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\VideoThumb.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 04671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\avcodec-52.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\avutil-50.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\avformat-52.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\swscale-0.dll
2013-04-19 16:29 - 2013-04-19 16:29 - 00028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\AudioExtractor.dll
2013-04-19 16:29 - 2013-04-19 16:29 - 00064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\ID3Driver.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\tag.dll
2013-04-12 07:58 - 2013-04-12 07:58 - 00289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\libThumbnail.dll
2013-04-19 15:58 - 2013-04-19 15:58 - 00023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\RichInfoDriver.dll
2013-04-19 15:58 - 2013-04-19 15:58 - 00017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\VideoExtractor.dll
2013-04-19 15:58 - 2013-04-19 15:58 - 00117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\ThumbnailMaker.dll
2013-04-12 07:59 - 2013-04-12 07:59 - 01033216 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\ImageMagickWrapper.dll
2013-04-19 15:58 - 2013-04-19 15:58 - 00133632 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\VideoMetadataDriver.dll
2013-04-19 15:58 - 2013-04-19 15:58 - 00290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\libKeyFrame.dll
2013-04-19 15:58 - 2013-04-19 15:58 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\SECMetaDriver.dll
2013-04-19 15:58 - 2013-04-19 15:58 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\ImageExtractor.dll
2013-04-12 07:58 - 2013-04-12 07:58 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\photoDriver.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\libexif-12.dll.dll
2013-04-19 15:58 - 2013-04-19 15:58 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\TextExtractor.dll
2013-04-19 15:39 - 2013-04-19 15:39 - 00032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\Autobackup.dll
2013-04-19 15:38 - 2013-04-19 15:38 - 00055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\RosettaAllShare.dll
2013-04-15 17:52 - 2013-04-15 17:52 - 00227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\boost_serialization-vc90-mt-1_47.dll
2013-04-15 17:53 - 2013-04-15 17:53 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\boost_date_time-vc90-mt-1_47.dll
2013-04-15 17:52 - 2013-04-15 17:52 - 00012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\boost_system-vc90-mt-1_47.dll
2013-04-15 17:53 - 2013-04-15 17:53 - 00046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\boost_thread-vc90-mt-1_47.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.09\us.dll
2012-02-08 23:57 - 2007-05-31 08:38 - 00167936 ____N () C:\Windows\SysWOW64\SerialXP.dll
2013-02-21 06:16 - 2011-01-13 11:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 8.0\ouservice\PATCHW32.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00168344 _____ () C:\Windows\libactivboardex.dll
2013-04-03 13:41 - 2013-04-03 13:41 - 01960960 _____ () C:\Program Files (x86)\Fieldston Software\gSyncit\gSyncit.core.dll
2012-01-26 10:42 - 2012-01-26 10:42 - 00837632 _____ () C:\Program Files (x86)\Fieldston Software\gSyncit\System.Data.SQLite.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00086408 _____ () C:\Program Files\Activ Software\ActivDriver\FlashExtension\activsdk2.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00387472 _____ () C:\Program Files\Activ Software\ActivDriver\FlashExtension\activsystem1.dll
2012-11-28 09:20 - 2012-11-28 09:20 - 00690576 _____ () C:\Program Files\Activ Software\ActivDriver\FlashExtension\QtNetwork4.dll
2012-11-28 09:20 - 2012-11-28 09:20 - 02151816 _____ () C:\Program Files\Activ Software\ActivDriver\FlashExtension\QtCore4.dll
2012-11-28 09:20 - 2012-11-28 09:20 - 00340872 _____ () C:\Program Files\Activ Software\ActivDriver\FlashExtension\QtXml4.dll
2012-11-28 09:20 - 2012-11-28 09:20 - 07988616 _____ () C:\Program Files\Activ Software\ActivDriver\FlashExtension\QtGui4.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00125320 _____ () C:\Program Files\Activ Software\ActivDriver\FlashExtension\plugins\imageformats\qjpeg4.dll
2012-08-30 13:39 - 2013-10-03 10:42 - 00112128 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFMFileSystemWatcher.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Ma\AppData\Roaming\Dropbox\bin\libcef.dll
2011-01-17 16:19 - 2012-01-29 11:10 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2013-08-22 09:03 - 2013-08-22 09:03 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9ab0e818cb3d1b6930eba54179f89300\IsdiInterop.ni.dll
2011-12-23 19:08 - 2011-01-12 17:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 01135616 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMSWrap.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00656896 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ContentDirectoryPresenter.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00105472 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMCDP.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00098816 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\FolderCDP.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00077312 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MetadataFramework.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00520234 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\sqlite3.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00450560 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MoodExtractor.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 05717504 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMImgExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00029184 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AutoChaptering.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00147456 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexpat.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoThumb.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 04671488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avcodec-52.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00070656 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avutil-50.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00686080 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avformat-52.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00152064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\swscale-0.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00027648 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AudioExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00063488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ID3Driver.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00366592 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\tag.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00289792 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libThumbnail.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00023040 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RichInfoDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ThumbnailMaker.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00133120 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoMetadataDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00290304 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libKeyFrame.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\SECMetaDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ImageExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\photoDriver.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00399826 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexif-12.dll.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00013824 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\TextExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00031232 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\Autobackup.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00054784 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RosettaAllShare.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00044032 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\us.dll
2013-12-20 14:35 - 2013-12-20 14:35 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2013-04-03 13:41 - 2013-04-03 13:41 - 00045056 _____ () C:\Program Files (x86)\Fieldston Software\gSyncit\gsyncit.addin.dll
2013-07-19 11:56 - 2013-07-19 11:56 - 01027240 _____ () C:\Program Files (x86)\Microsoft Office\Office15\ADDINS\UmOutlookAddin.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Ma\Documents\Alpenvereinskarten digital:Roxio EMC Stream

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: HP Color LaserJet 3600
Description: HP Color LaserJet 3600
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: HP LaserJet 400 color M451nw
Description: HP LaserJet 400 color M451nw
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: Hewlett-Packard
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: HP Color LaserJet 3600
Description: HP Color LaserJet 3600
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: Hewlett-Packard
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: HP Color LaserJet 3600
Description: HP Color LaserJet 3600
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: Hewlett-Packard
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Photosmart C6100 series
Description: Photosmart C6100 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: HP Color LaserJet 3600
Description: HP Color LaserJet 3600
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: Hewlett-Packard
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Photosmart C6100 series
Description: Photosmart C6100 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: HP Color LaserJet 3600
Description: HP Color LaserJet 3600
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart C6100 series
Description: Photosmart C6100 series
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart C6100 series
Description: Photosmart C6100 series
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/15/2014 07:23:45 AM) (Source: AllShare Framework DMS) (User: )
Description: AllShare Framework DMSSvcInit started failed with 0

Error: (01/15/2014 07:23:45 AM) (Source: AllShare Framework DMS) (User: )
Description: AllShare Framework DMSSvcMain failed with 0

Error: (01/15/2014 07:14:29 AM) (Source: AllShare Framework DMS) (User: )
Description: AllShare Framework DMSSvcInit started failed with 0

Error: (01/15/2014 07:14:29 AM) (Source: AllShare Framework DMS) (User: )
Description: AllShare Framework DMSSvcMain failed with 0

Error: (01/15/2014 04:02:02 AM) (Source: AllShare Framework DMS) (User: )
Description: AllShare Framework DMSSvcCtrlHandler received  failed with 0

Error: (01/15/2014 04:02:00 AM) (Source: AllShare Framework DMS) (User: )
Description: AllShare Framework DMSSvcCtrlHandler received  failed with 0

Error: (01/14/2014 11:41:38 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: EXCEL.EXE, Version: 15.0.4535.1507, Zeitstempel: 0x52282875
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc00000fd
Fehleroffset: 0x0009da14
ID des fehlerhaften Prozesses: 0x1578
Startzeit der fehlerhaften Anwendung: 0xEXCEL.EXE0
Pfad der fehlerhaften Anwendung: EXCEL.EXE1
Pfad des fehlerhaften Moduls: EXCEL.EXE2
Berichtskennung: EXCEL.EXE3

Error: (01/14/2014 10:40:14 PM) (Source: AllShare Framework DMS) (User: )
Description: AllShare Framework DMSSvcInit started failed with 0

Error: (01/14/2014 10:40:14 PM) (Source: AllShare Framework DMS) (User: )
Description: AllShare Framework DMSSvcMain failed with 0

Error: (01/14/2014 09:15:05 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: KB00257769.exe, Version: 0.0.0.0, Zeitstempel: 0x52cbc9ee
Name des fehlerhaften Moduls: netprofm.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4a5bda75
Ausnahmecode: 0xc0000005
Fehleroffset: 0x74c42505
ID des fehlerhaften Prozesses: 0xf00
Startzeit der fehlerhaften Anwendung: 0xKB00257769.exe0
Pfad der fehlerhaften Anwendung: KB00257769.exe1
Pfad des fehlerhaften Moduls: KB00257769.exe2
Berichtskennung: KB00257769.exe3


System errors:
=============
Error: (01/15/2014 07:28:30 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (01/14/2014 10:48:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (01/14/2014 10:46:52 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (01/14/2014 10:45:18 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst eventlog erreicht.

Error: (01/14/2014 10:41:01 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Web Update Wizard Service V4 erreicht.

Error: (01/14/2014 09:13:35 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Netman erreicht.

Error: (01/14/2014 07:00:25 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.

Error: (01/14/2014 04:19:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (01/14/2014 04:17:41 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (01/14/2014 04:15:19 PM) (Source: DCOM) (User: )
Description: {0006F03A-0000-0000-C000-000000000046}


Microsoft Office Sessions:
=========================
Error: (01/15/2014 07:23:45 AM) (Source: AllShare Framework DMS)(User: )
Description: AllShare Framework DMSSvcInit started failed with 0

Error: (01/15/2014 07:23:45 AM) (Source: AllShare Framework DMS)(User: )
Description: AllShare Framework DMSSvcMain failed with 0

Error: (01/15/2014 07:14:29 AM) (Source: AllShare Framework DMS)(User: )
Description: AllShare Framework DMSSvcInit started failed with 0

Error: (01/15/2014 07:14:29 AM) (Source: AllShare Framework DMS)(User: )
Description: AllShare Framework DMSSvcMain failed with 0

Error: (01/15/2014 04:02:02 AM) (Source: AllShare Framework DMS)(User: )
Description: AllShare Framework DMSSvcCtrlHandler received  failed with 0

Error: (01/15/2014 04:02:00 AM) (Source: AllShare Framework DMS)(User: )
Description: AllShare Framework DMSSvcCtrlHandler received  failed with 0

Error: (01/14/2014 11:41:38 PM) (Source: Application Error)(User: )
Description: EXCEL.EXE15.0.4535.150752282875unknown0.0.0.000000000c00000fd0009da14157801cf1179c71f6cd2C:\Program Files (x86)\Microsoft Office\Office15\EXCEL.EXEunknown07158a36-7d6d-11e3-b514-b870f4fc137f

Error: (01/14/2014 10:40:14 PM) (Source: AllShare Framework DMS)(User: )
Description: AllShare Framework DMSSvcInit started failed with 0

Error: (01/14/2014 10:40:14 PM) (Source: AllShare Framework DMS)(User: )
Description: AllShare Framework DMSSvcMain failed with 0

Error: (01/14/2014 09:15:05 PM) (Source: Application Error)(User: )
Description: KB00257769.exe0.0.0.052cbc9eenetprofm.dll_unloaded0.0.0.04a5bda75c000000574c42505f0001cf113b120e1c14C:\Users\Ma\AppData\Roaming\KB00257769.exenetprofm.dll8db5ed72-7d58-11e3-bb9a-b870f4fc137f


==================== Memory info =========================== 

Percentage of memory in use: 33%
Total physical RAM: 8173.86 MB
Available physical RAM: 5417.63 MB
Total Pagefile: 16345.9 MB
Available Pagefile: 13143.83 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:596.07 GB) (Free:332.78 GB) NTFS
Drive f: (Daten) (Fixed) (Total:931.51 GB) (Free:524.48 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: FC2D1024)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=596 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 43490C58)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
GMER.TXT

im Anhang, da sonst die Nachricht zu lang ist.

DANK und Gruß M

 

Themen zu MS Security Essentials fordert wiederholt Neustart wegen Worm:Win32/Cridex.E
adblock, adobe, canon, converter, defender, desktop, dvdvideosoft ltd., excel, explorer, failed, firefox, flash player, homepage, installation, monitor, mozilla, mp3, ms security essentials, neustart, object, realtek, registry, rundll, scan, security, services.exe, software, starmoney, temp, tracker, win 7 64bit, winlogon.exe, worm cridex.e




Ähnliche Themen: MS Security Essentials fordert wiederholt Neustart wegen Worm:Win32/Cridex.E


  1. Microsoft Security Essentials findet wiederholt Trojan:Win32 und BrowserModifier:Win32
    Plagegeister aller Art und deren Bekämpfung - 15.08.2015 (13)
  2. Leider auch Vodafone Rechnung Trojaner erwischt TR/Cridex.A.199, TR/Spy.ZBot.xgxi, Worm/Cridex.E.560
    Log-Analyse und Auswertung - 03.02.2014 (13)
  3. TR/Dropper.Gen und WORM/Cridex.A.48 gefunden!
    Plagegeister aller Art und deren Bekämpfung - 24.01.2014 (9)
  4. Windows 7 fordert zum Neustart auf
    Plagegeister aller Art und deren Bekämpfung - 22.11.2013 (5)
  5. WIN32/Zbot.gen!Y - trotz Microsoft Security Essentials
    Log-Analyse und Auswertung - 07.05.2013 (17)
  6. TR/Agent13107.52, TR/Matsnu.A.74, Worm/Cridex.B.247 und andere gefunden.
    Plagegeister aller Art und deren Bekämpfung - 26.03.2013 (6)
  7. PWS:WIn32/ZBOT.gen!aj von Microsoft Security Essentials entdeckt
    Plagegeister aller Art und deren Bekämpfung - 27.02.2013 (9)
  8. Microsoft Security Essentials fand: win32/Pdfjsc.rm
    Log-Analyse und Auswertung - 23.02.2013 (3)
  9. Microsoft Security Essentials findet Win32/Zbot.gen!Y
    Log-Analyse und Auswertung - 21.07.2012 (26)
  10. Microsoft Security Essentials: WinNT/Sirefef.J, Win32/Karagany.I, Win32/Small.TG etc
    Plagegeister aller Art und deren Bekämpfung - 01.06.2012 (44)
  11. Ihr Computer wurde gesperrt...U-kash fordert wegen unlizenzierter Software 100,-€
    Plagegeister aller Art und deren Bekämpfung - 04.02.2012 (1)
  12. defogger fordert nicht zum neustart auf
    Plagegeister aller Art und deren Bekämpfung - 30.11.2011 (5)
  13. Defogger fordert mich nicht zum Neustart auf
    Log-Analyse und Auswertung - 12.11.2011 (19)
  14. Defogger fordert keinen Neustart Was nun?
    Log-Analyse und Auswertung - 08.11.2011 (38)
  15. Security Allert Center und Avira Funde Net.Worm.Win32.Mytob.t & TR/PCK.Tdss.AA.2442
    Plagegeister aller Art und deren Bekämpfung - 23.01.2010 (30)
  16. Your System is infected! Wegen Worm.win32 Netsky
    Log-Analyse und Auswertung - 15.01.2010 (5)
  17. Security Alert Worm.WIn32.NetSky Panda sagt TrojanSPM/LX
    Log-Analyse und Auswertung - 08.01.2010 (1)

Zum Thema MS Security Essentials fordert wiederholt Neustart wegen Worm:Win32/Cridex.E - Nachdem ich dumm genug war von einer fingierten Telekomrechnungsmail den zip-Anhang zu öffnen, meldete sich MS Security Essentials. Angeblich hat es die Gefahr gebannt, fordert dann aber zum Neustart auf, - MS Security Essentials fordert wiederholt Neustart wegen Worm:Win32/Cridex.E...
Archiv
Du betrachtest: MS Security Essentials fordert wiederholt Neustart wegen Worm:Win32/Cridex.E auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.