Windows 7: Virenfund JS/Redir

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:07 on 17/01/2014 (Admin)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 03
Ran by Admin (administrator) on ALTERNATE on 17-01-2014 14:09:30
Running from D:\Download\Farbar
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Windows\SysWOW64\ASGT.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManagerService64.exe
(Agito d.o.o.) C:\Program Files (x86)\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Service.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker64.exe
(Synology Inc.) D:\Program Files (x86)\Synology Data Replicator  3\Backup.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
() C:\Users\Admin\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Logitech Inc.) C:\Program Files (x86)\Squeezebox\SqueezeTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Malwarebytes Corporation) D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.15.96\ccSvcHst.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
() D:\Program Files (x86)\Synology Data Replicator  3\SynoDrServicex64.exe
(Malwarebytes Corporation) D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(AVG) D:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.15.96\ccSvcHst.exe
() D:\Program Files (x86)\Würth Bemessung\Würth Update\WuerthUpdateService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(AVG) D:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.15.96\SymcPCCULaunchSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
(Mozilla Corporation) D:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) D:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(www.rene-zeidler.de) D:\Download\Snipping Tool\Snipping Tool Plus.exe
() D:\Download\defogger\Defogger.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6457960 2011-12-28] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor)
HKLM\...\Run: [Autodesk Sync] - C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-05] (Autodesk, Inc.)
HKLM\...\Run: [FileOpenBroker] - C:\Program Files\FileOpen\Services\FileOpenBroker64.exe [1092528 2012-11-07] (FileOpen Systems Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-12-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-04] (Intel Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46368 2010-03-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [29984 2010-03-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFHook] - C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF5 Registry Controller] - C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ControlCenter4] - C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2011-04-20] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 1
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKCU\...\Run: [Data Replicator 3] - D:\Program Files (x86)\Synology Data Replicator  3\Backup.exe [11587584 2012-05-30] (Synology Inc.)
HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Admin\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKCU\...\Policies\Explorer: [] 
HKCU\...\Policies\Explorer: [TaskbarNoNotification] 1
HKCU\...\Policies\Explorer: [HideSCAHealth] 1
MountPoints2: {a63bcd54-a596-11e1-9123-806e6f6e6963} - E:\.\Bin\ASSETUP.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x611D7436D347CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: PDFXChange 4.0 - {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} - d:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll (Tracker Software Products (Canada) Ltd.)
BHO-x32: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - PDFXChange 4.0 - {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} - d:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll (Tracker Software Products (Canada) Ltd.)
Toolbar: HKLM-x32 - No Name - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\h68hyvj6.default
FF SearchEngineOrder.1: Ask Search
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - d:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @garmin.com/GpsControl - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - D:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - d:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.5 - d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 - d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - d:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - d:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - d:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Admin\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-01-16]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-01-16]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-01-16]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-01-16]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-01-16]
FF StartMenuInternet: FIREFOX.EXE - d:\Program Files (x86)\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]

==================== Services (Whitelisted) =================

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] ()
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [225280 2011-08-05] (DTS, Inc)
R2 FileOpenManagerService; C:\Program Files\FileOpen\Services\FileOpenManagerService64.exe [335288 2012-11-07] (FileOpen Systems Inc.)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [128928 2010-12-14] (Futuremark Corporation)
R2 Hilti PROFIS AutoUpdate Service; C:\Program Files (x86)\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Service.exe [206336 2012-06-29] (Agito d.o.o.)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [109352 2013-12-29] (SurfRight B.V.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-20] (Intel Corporation)
R2 MBAMScheduler; d:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; d:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.15.96\SymcPCCULaunchSvc.exe [123320 2012-08-25] (Symantec Corporation)
S3 OpenVPNService; D:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [36352 2009-12-12] ()
R2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.15.96\ccSvcHst.exe [126392 2011-11-07] (Symantec Corporation)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)
R2 SynoDrService; D:\Program Files (x86)\Synology Data Replicator  3\SynoDrServicex64.exe [378368 2012-05-30] ()
R2 TuneUp.UtilitiesSvc; D:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2102072 2013-12-18] (AVG)
R2 WuerthUpdateSvc; d:\Program Files (x86)\Würth Bemessung\Würth Update\WuerthUpdateService.exe [3341824 2013-03-26] ()
S2 HPSLPSVC; C:\Users\Admin\AppData\Local\Temp\7zS2081\hpslpsvc64.dll [x]

==================== Drivers (Whitelisted) ====================

R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-11-11] (AVG Technologies)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-01-16] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620640 2014-01-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-01-16] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MosIrUsb; C:\Windows\System32\DRIVERS\MosIrUsb.sys [27648 2007-10-11] ()
R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [63528 2011-05-27] (SafeNet, Inc.)
S3 tap0801; C:\Windows\System32\DRIVERS\tap0801.sys [30720 2005-04-13] (The OpenVPN Project)
R3 TuneUpUtilitiesDrv; D:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [107008 2009-10-27] (WIBU-SYSTEMS AG)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-17 14:09 - 2014-01-17 14:09 - 00000000 ____D C:\FRST
2014-01-17 14:07 - 2014-01-17 14:07 - 00000000 _____ C:\Users\Admin\defogger_reenable
2014-01-17 13:40 - 2014-01-17 13:40 - 00000859 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-17 13:40 - 2014-01-17 13:40 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-17 13:40 - 2014-01-17 13:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-17 13:13 - 2014-01-17 13:13 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-17 13:13 - 2014-01-17 13:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-17 13:13 - 2014-01-17 13:13 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-17 13:13 - 2014-01-17 13:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-17 13:12 - 2014-01-17 13:12 - 00000000 ____D C:\Program Files\Java
2014-01-17 12:15 - 2014-01-17 12:15 - 00003704 _____ C:\Windows\System32\Tasks\Java Update Scheduler
2014-01-17 12:15 - 2014-01-17 12:15 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-01-17 12:13 - 2014-01-17 12:13 - 00001171 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-17 12:13 - 2014-01-17 12:13 - 00001143 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-17 12:13 - 2014-01-17 12:13 - 00000000 ____D C:\Users\Admin\AppData\Roaming\AVG
2014-01-17 12:13 - 2014-01-17 12:13 - 00000000 ____D C:\ProgramData\AVG
2014-01-17 12:13 - 2013-12-18 09:38 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-01-17 12:13 - 2013-12-18 09:38 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-01-17 12:13 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll
2014-01-17 12:12 - 2014-01-17 12:15 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-16 17:19 - 2014-01-16 17:19 - 00001529 _____ C:\Users\Admin\Desktop\JRT.txt
2014-01-16 17:06 - 2014-01-16 17:07 - 00000000 ____D C:\AdwCleaner
2014-01-16 17:04 - 2014-01-16 17:12 - 00000000 ____D C:\Windows\ERUNT
2014-01-16 17:04 - 2014-01-16 17:04 - 00000780 _____ C:\DelFix.txt
2014-01-16 16:51 - 2014-01-17 13:12 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-16 16:51 - 2014-01-17 13:12 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-16 16:51 - 2014-01-17 13:12 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-16 16:51 - 2014-01-17 13:12 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-16 16:45 - 2014-01-16 16:45 - 00002340 _____ C:\Users\Admin\Desktop\Sicherer Zahlungsverkehr.lnk
2014-01-16 16:45 - 2014-01-16 16:45 - 00001134 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-01-16 16:45 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-01-16 16:44 - 2014-01-17 14:04 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2014-01-16 16:44 - 2014-01-16 16:49 - 00620640 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-01-16 16:44 - 2014-01-16 16:44 - 00000000 ____D C:\Windows\ELAMBKUP
2014-01-16 16:44 - 2014-01-16 16:44 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2014-01-16 16:44 - 2013-06-08 20:18 - 00112224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-01-16 14:35 - 2014-01-16 14:35 - 00000833 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-16 14:35 - 2014-01-16 14:35 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Malwarebytes
2014-01-16 14:35 - 2014-01-16 14:35 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-16 14:35 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-11 19:45 - 2014-01-17 09:45 - 00000298 _____ C:\Windows\Tasks\Synology Data Replicator 3-Alternate-Admin.job
2014-01-11 19:45 - 2014-01-11 19:45 - 00002874 _____ C:\Windows\System32\Tasks\Synology Data Replicator 3-Alternate-Admin
2014-01-11 12:55 - 2014-01-14 20:45 - 00003790 _____ C:\Windows\System32\Tasks\DTReg
2014-01-10 17:40 - 2014-01-10 17:40 - 00000000 ____D C:\Windows\USB 2.0 IrDA
2014-01-10 17:37 - 2014-01-10 17:37 - 00000744 _____ C:\Users\Public\Desktop\Synology Data Replicator 3.lnk
2014-01-09 14:33 - 2014-01-09 14:33 - 00000000 ____D C:\Users\Admin\AppData\Roaming\avidemux
2014-01-08 17:48 - 2014-01-08 17:48 - 00000000 ____D C:\Program Files\Garmin GPS Plugin
2014-01-08 17:48 - 2014-01-08 17:48 - 00000000 ____D C:\Program Files (x86)\Garmin GPS Plugin
2014-01-08 17:48 - 2014-01-08 17:48 - 00000000 ____D C:\Program Files (x86)\Garmin
2014-01-08 17:12 - 2014-01-08 17:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Garmin
2014-01-07 16:57 - 2010-11-11 15:34 - 00201728 _____ (Freebyte.com) C:\Users\Admin\Desktop\hjsplit.exe
2014-01-07 10:34 - 2014-01-07 10:34 - 00000044 _____ C:\Windows\Esa.INI
2014-01-06 17:26 - 2014-01-06 17:31 - 00000000 ____D C:\ProgramData\XggpDrXg
2014-01-06 17:26 - 2014-01-06 17:26 - 00000000 ___HD C:\Users\Admin\AppData\Roaming\CCFB9B16
2014-01-02 09:41 - 2014-01-14 11:59 - 00009349 _____ C:\Users\Admin\Desktop\Passwords.xlsx
2013-12-29 16:03 - 2013-12-29 16:12 - 00001843 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-12-29 16:02 - 2013-12-29 16:03 - 00000000 ____D C:\Program Files\HitmanPro
2013-12-29 15:52 - 2013-12-29 16:05 - 00000000 ____D C:\ProgramData\HitmanPro
2013-12-21 10:26 - 2013-12-21 10:26 - 00000000 ____D C:\Users\Admin\AppData\Local\Frey_Software
2013-12-21 10:26 - 2013-12-21 10:26 - 00000000 ____D C:\Users\Admin\AppData\Local\Frey Software
2013-12-21 10:16 - 2013-12-21 10:16 - 00000000 ____D C:\ProgramData\FrMethods
2013-12-21 10:14 - 2013-12-21 10:14 - 00002785 _____ C:\Users\Public\Desktop\Bodenseeschifferpatent.lnk

==================== One Month Modified Files and Folders =======

2014-01-17 14:09 - 2014-01-17 14:09 - 00000000 ____D C:\FRST
2014-01-17 14:07 - 2014-01-17 14:07 - 00000000 _____ C:\Users\Admin\defogger_reenable
2014-01-17 14:07 - 2012-05-24 12:55 - 00000000 ____D C:\Users\Admin
2014-01-17 14:06 - 2012-05-28 19:40 - 00000000 ____D C:\Users\Admin\Documents\Outlook-Dateien
2014-01-17 14:04 - 2014-01-16 16:44 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2014-01-17 13:40 - 2014-01-17 13:40 - 00000859 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-17 13:40 - 2014-01-17 13:40 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-17 13:40 - 2014-01-17 13:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-17 13:36 - 2012-05-29 07:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-17 13:17 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-17 13:17 - 2009-07-14 05:45 - 00021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-17 13:13 - 2014-01-17 13:13 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-17 13:13 - 2014-01-17 13:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-17 13:13 - 2014-01-17 13:13 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-17 13:13 - 2014-01-17 13:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-17 13:13 - 2013-11-14 16:38 - 00000000 ____D C:\ProgramData\Oracle
2014-01-17 13:12 - 2014-01-17 13:12 - 00000000 ____D C:\Program Files\Java
2014-01-17 13:12 - 2014-01-16 16:51 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-17 13:12 - 2014-01-16 16:51 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-17 13:12 - 2014-01-16 16:51 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-17 13:12 - 2014-01-16 16:51 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-17 13:12 - 2010-11-21 07:50 - 00700168 _____ C:\Windows\system32\perfh007.dat
2014-01-17 13:12 - 2010-11-21 07:50 - 00148964 _____ C:\Windows\system32\perfc007.dat
2014-01-17 13:12 - 2009-07-14 06:13 - 01621244 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-17 13:10 - 2012-05-29 07:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-17 13:10 - 2012-05-29 07:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-17 13:10 - 2012-05-29 07:26 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-17 13:10 - 2012-05-24 13:41 - 00000000 ____D C:\Users\Admin\AppData\Local\Adobe
2014-01-17 13:10 - 2012-05-24 12:55 - 01435310 _____ C:\Windows\WindowsUpdate.log
2014-01-17 13:07 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-17 13:07 - 2009-07-14 05:51 - 00197263 _____ C:\Windows\setupact.log
2014-01-17 12:21 - 2010-11-21 04:47 - 00508272 _____ C:\Windows\PFRO.log
2014-01-17 12:15 - 2014-01-17 12:15 - 00003704 _____ C:\Windows\System32\Tasks\Java Update Scheduler
2014-01-17 12:15 - 2014-01-17 12:15 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-01-17 12:15 - 2014-01-17 12:12 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-17 12:15 - 2012-06-07 07:45 - 00000000 ____D C:\Users\Admin\AppData\Local\Downloaded Installations
2014-01-17 12:15 - 2012-05-28 19:25 - 00000000 ____D C:\Users\Admin\AppData\Local\Microsoft Help
2014-01-17 12:15 - 2012-05-24 12:55 - 00000000 ___RD C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 12:13 - 2014-01-17 12:13 - 00001171 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-17 12:13 - 2014-01-17 12:13 - 00001143 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-17 12:13 - 2014-01-17 12:13 - 00000000 ____D C:\Users\Admin\AppData\Roaming\AVG
2014-01-17 12:13 - 2014-01-17 12:13 - 00000000 ____D C:\ProgramData\AVG
2014-01-17 09:45 - 2014-01-11 19:45 - 00000298 _____ C:\Windows\Tasks\Synology Data Replicator 3-Alternate-Admin.job
2014-01-16 18:50 - 2012-07-28 09:57 - 00000000 ____D C:\ProgramData\MFAData
2014-01-16 17:20 - 2012-06-11 16:42 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2014-01-16 17:19 - 2014-01-16 17:19 - 00001529 _____ C:\Users\Admin\Desktop\JRT.txt
2014-01-16 17:12 - 2014-01-16 17:04 - 00000000 ____D C:\Windows\ERUNT
2014-01-16 17:07 - 2014-01-16 17:06 - 00000000 ____D C:\AdwCleaner
2014-01-16 17:04 - 2014-01-16 17:04 - 00000780 _____ C:\DelFix.txt
2014-01-16 16:49 - 2014-01-16 16:44 - 00620640 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-01-16 16:49 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2014-01-16 16:49 - 2013-06-06 17:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2014-01-16 16:45 - 2014-01-16 16:45 - 00002340 _____ C:\Users\Admin\Desktop\Sicherer Zahlungsverkehr.lnk
2014-01-16 16:45 - 2014-01-16 16:45 - 00001134 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-01-16 16:44 - 2014-01-16 16:44 - 00000000 ____D C:\Windows\ELAMBKUP
2014-01-16 16:44 - 2014-01-16 16:44 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2014-01-16 14:40 - 2013-03-09 08:40 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-16 14:35 - 2014-01-16 14:35 - 00000833 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-16 14:35 - 2014-01-16 14:35 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Malwarebytes
2014-01-16 14:35 - 2014-01-16 14:35 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-16 09:43 - 2013-08-14 14:03 - 00001156 __RSH C:\Users\Admin\ntuser.pol
2014-01-14 21:39 - 2013-03-01 21:28 - 00000000 ____D C:\Users\Admin\AppData\Roaming\vlc
2014-01-14 20:45 - 2014-01-11 12:55 - 00003790 _____ C:\Windows\System32\Tasks\DTReg
2014-01-14 11:59 - 2014-01-02 09:41 - 00009349 _____ C:\Users\Admin\Desktop\Passwords.xlsx
2014-01-11 19:45 - 2014-01-11 19:45 - 00002874 _____ C:\Windows\System32\Tasks\Synology Data Replicator 3-Alternate-Admin
2014-01-10 17:40 - 2014-01-10 17:40 - 00000000 ____D C:\Windows\USB 2.0 IrDA
2014-01-10 17:40 - 2012-05-24 13:05 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-10 17:37 - 2014-01-10 17:37 - 00000744 _____ C:\Users\Public\Desktop\Synology Data Replicator 3.lnk
2014-01-09 14:33 - 2014-01-09 14:33 - 00000000 ____D C:\Users\Admin\AppData\Roaming\avidemux
2014-01-08 17:48 - 2014-01-08 17:48 - 00000000 ____D C:\Program Files\Garmin GPS Plugin
2014-01-08 17:48 - 2014-01-08 17:48 - 00000000 ____D C:\Program Files (x86)\Garmin GPS Plugin
2014-01-08 17:48 - 2014-01-08 17:48 - 00000000 ____D C:\Program Files (x86)\Garmin
2014-01-08 17:48 - 2014-01-08 17:12 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Garmin
2014-01-08 16:51 - 2012-10-11 17:08 - 00000000 ____D C:\Users\Admin\AppData\Local\ZoneFiveSoftware
2014-01-08 12:03 - 2012-05-24 13:05 - 00000000 ____D C:\Windows\Downloaded Installations
2014-01-07 10:34 - 2014-01-07 10:34 - 00000044 _____ C:\Windows\Esa.INI
2014-01-06 17:31 - 2014-01-06 17:26 - 00000000 ____D C:\ProgramData\XggpDrXg
2014-01-06 17:26 - 2014-01-06 17:26 - 00000000 ___HD C:\Users\Admin\AppData\Roaming\CCFB9B16
2014-01-06 10:45 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2014-01-05 11:02 - 2012-09-18 12:33 - 00000000 ____D C:\ProgramData\SCS
2013-12-29 16:12 - 2013-12-29 16:03 - 00001843 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-12-29 16:05 - 2013-12-29 15:52 - 00000000 ____D C:\ProgramData\HitmanPro
2013-12-29 16:03 - 2013-12-29 16:02 - 00000000 ____D C:\Program Files\HitmanPro
2013-12-29 15:41 - 2013-03-20 15:04 - 00000000 ____D C:\Users\Admin\AppData\Roaming\ControlCenter4
2013-12-29 15:41 - 2010-11-21 08:00 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-12-29 15:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-12-28 16:20 - 2013-11-06 18:18 - 00000790 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-12-21 10:26 - 2013-12-21 10:26 - 00000000 ____D C:\Users\Admin\AppData\Local\Frey_Software
2013-12-21 10:26 - 2013-12-21 10:26 - 00000000 ____D C:\Users\Admin\AppData\Local\Frey Software
2013-12-21 10:16 - 2013-12-21 10:16 - 00000000 ____D C:\ProgramData\FrMethods
2013-12-21 10:14 - 2013-12-21 10:14 - 00002785 _____ C:\Users\Public\Desktop\Bodenseeschifferpatent.lnk
2013-12-18 09:38 - 2014-01-17 12:13 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2013-12-18 09:38 - 2014-01-17 12:13 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2013-12-18 09:38 - 2014-01-17 12:13 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll

Files to move or delete:
====================
C:\Users\Admin\g2ax_customer_downloadhelper_win32_x86.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-09 11:02

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-01-2014 03
Ran by Admin at 2014-01-17 14:09:45
Running from D:\Download\Farbar
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

3DMark 11 (x32 Version: 1.0.1 - Futuremark Corporation)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
AFPL Ghostscript 8.51 (x32 Version:  - )
AFPL Ghostscript Fonts (x32 Version:  - )
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18 - Amazon Services LLC)
AMD APP SDK Runtime (Version: 10.0.844.4 - Advanced Micro Devices Inc.) Hidden
AMD AVIVO64 Codecs (Version: 11.7.0.11229 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (Version: 3.0.855.0 - Advanced Micro Devices, Inc.)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ARPlugin 2.2 (x32 Version:  - Inglobe Technologies)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.14.3.0 - Asmedia Technology)
Asmedia ASM106x SATA Host Controller Driver (x32 Version: 1.3.4.000 - Asmedia Technology)
ASUS GPU Tweak (x32 Version: 2.0.3.3 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.0.3.3 - ASUSTek COMPUTER INC.) Hidden
ASUS Utility (x32 Version: 1.00.0000 - ASUSTek) Hidden
ASUS VGA Driver (x32 Version: 3.0.0.1 - Ihr Firmenname) Hidden
AutoCAD 2013 - Deutsch (German) (Version: 19.0.55.0 - Autodesk)
AutoCAD 2013 - Deutsch (German) (Version: 19.0.55.0 - Autodesk) Hidden
AutoCAD 2013 Language Pack - Deutsch (German) (Version: 19.0.55.0 - Autodesk) Hidden
Autodesk Content Service (x32 Version: 3.0.84.0 - Autodesk)
Autodesk Content Service (x32 Version: 3.0.84.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.0.84.0 - Autodesk) Hidden
Autodesk Inventor Fusion 2013 (Version: 2.0.0.206 - Autodesk, Inc.)
Autodesk Inventor Fusion 2013 (Version: 2.0.0.206 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion plug-in for AutoCAD 2013 (Version: 0.2.0.230 - Autodesk)
Autodesk Inventor Fusion plug-in for AutoCAD 2013 (Version: 0.2.0.230 - Autodesk) Hidden
Autodesk Inventor Fusion Plugin Language Pack for AutoCAD 2013 (Version: 0.2.0.230 - Autodesk) Hidden
Autodesk Material Library 2013 (x32 Version: 3.0.13 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2013 (x32 Version: 3.0.13 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2013 (x32 Version: 3.0.13 - Autodesk)
Autodesk Sync (Version: 3.5.24.0 - Autodesk, Inc.)
AVG 2014 (Version: 14.0.3681 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4259 - AVG Technologies) Hidden
AVG 2014 (Version: 2014.0.4259 - AVG Technologies)
AVG PC TuneUp 2014 (de-DE) (x32 Version: 14.0.1001.295 - AVG) Hidden
AVG PC TuneUp 2014 (x32 Version: 14.0.1001.295 - AVG)
AVG PC TuneUp 2014 (x32 Version: 14.0.1001.295 - AVG) Hidden
Bike GPS RichTrack Factory 3.3.1.0 (x32 Version:  - Bike GPS)
Bodenseeschifferpatent (x32 Version: 4.4.138 - Frey Software)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
BookScan&Whiteboard Suite (x32 Version: 1.0 - Reallusion)
Bouquet Editor Suite v1.22 Uninstall (x32 Version: 1.2.2.0 - )
Brother MFL-Pro Suite MFC-J6710DW (x32 Version: 1.0.25.0 - Brother Industries, Ltd.)
CADS Composite Beam Designer (x32 Version: 3.27.319.1 - Computer And Design Services Ltd)
CADS WindLoadEngine (x32 Version: 1.1.44.0 - Computer And Design Services Ltd)
Call of Duty Black Ops (x32 Version: 1.0 - Activision Blizzard)
Canon Internet Library for ZoomBrowser EX (x32 Version: 1.6.0.3 - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2011.1229.1025.18582 - Ihr Firmenname) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.1229.1025.18582 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.1229.1025.18582 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Profiles Desktop (x32 Version: 2011.1229.1025.18582 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2011.1229.1024.18582 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2011.1229.1025.18582 - Advanced Micro Devices, Inc.) Hidden
Composite Column Designer (x32 Version: 1.0.69.0 - Computer And Design Services Ltd)
Compufix 8 (x32 Version: 8.4.4581.17990 - fischerwerke)
Crysis® 2 (x32 Version: 1.0.0.0 - Electronic Arts)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (Version:  - Microsoft)
dreamboxEDIT -- The one and only settings editor for your Dreambox (x32 Version:  - )
ECtools 1.1.0.82 (x32 Version:  - )
FaceFilter Studio Brother Edition (x32 Version: 1.0 - )
FARO LS 1.1.406.58 (x32 Version: 4.6.58.2 - FARO Scanner Production)
FileOpen Client (x64) (Version: 3.0.90.926 - FileOpen Systems, Inc.)
FileZilla Client 3.6.0.2 (x32 Version: 3.6.0.2 - FileZilla Project)
Futuremark SystemInfo (x32 Version: 3.54.1.1 - Futuremark Corporation)
Garmin Communicator Plugin (x32 Version: 4.1.0 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin x64 (Version: 4.1.0 - Garmin Ltd or its subsidiaries)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
GoToMeeting 5.3.0.977 (HKCU Version: 5.3.0.977 - CitrixOnline)
Hardlock Gerätetreiber (x32 Version:  - )
Hilti PROFIS Anchor (x32 Version: 2.4.2 - Hilti Corp.)
Hilti PROFIS AutoUpdate (x32 Version: 1.6.0 - Hilti corp.)
HitmanPro 3.7 (Version: 3.7.8.208 - SurfRight B.V.)
HP Color LaserJet 1600 (Version:  - )
HydraVision (x32 Version: 4.2.220.0 - Advanced Micro Devices, Inc.) Hidden
ImgBurn (x32 Version: 2.5.7.0 - LIGHTNING UK!)
Ing+ 2010 (x32 Version: 20.10.1000 - mb AEC Software GmbH)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 8.0.1.1399 - Intel Corporation)
Intel(R) Network Connections 16.6.126.0 (Version: 16.6.126.0 - Intel)
Intel(R) Network Connections 16.6.126.0 (Version: 16.6.126.0 - Intel) Hidden
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.1.209 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.23.219.2 - Intel Corporation)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden
Lahey/Fujitsu Fortran Redistributable Runtime (x32 Version: 7.1.1 - Lahey Computer Systems, Inc.)
LiveUpdate 1.0 (x32 Version: 1.1.0.60 - ZiWu-Soft EDV Systeme GmbH)
Logitech Media Server 7.7.2 (x32 Version: 7.7.2 - Logitech)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Business 2010 (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
MyMDb 3.6 (x32 Version:  - )
Norton PC Checkup (x32 Version: 2.0.15.96 - Symantec Corporation)
Notepad++ (x32 Version: 6.1.8 - )
Nuance PaperPort 12 (x32 Version: 12.1.0000 - Nuance Communications, Inc.)
Nuance PDF Viewer Plus (x32 Version: 5.30.3290 - Nuance Communications, Inc)
OpenVPN 2.1.1 (x32 Version: 2.1.1 - )
PaperPort Image Printer 64-bit (Version: 1.00.0001 - Nuance Communications, Inc.)
PDF-Viewer (Version: 2.5.207.0 - Tracker Software Products Ltd)
PDF-XChange 4 Pro (Version: 4.201.201.0 - Tracker Software Products Ltd)
Polar ProTrainer (x32 Version: 5.20.130 - )
PVscout (x32 Version: 2.0.1328.3 - Solarschmiede GmbH)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 9.2 - Qualcomm Atheros)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
RcDesignersLink (x32 Version: 1.0.22.0 - Computer And Design Services Ltd)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6543 - Realtek Semiconductor Corp.)
Scansoft PDF Professional (x32 Version:  - ) Hidden
Scia Engineer 2011.1 (x32 Version: 11.0.1223 - SCIA)
Scia Engineer 2011.1 (x32 Version: 11.0.1223 - SCIA) Hidden
Scia Engineer 2012 (x32 Version: 12.0.1094 - Nemetschek Scia)
Scia Engineer 2013 (x32 Version: 13.0.2030 - Nemetschek Scia)
Scia Engineer 2013.1 (x32 Version: 13.1.64 - Nemetschek Scia)
Scia Engineer Quick Starts (x32 Version: 2.0.0 - Nemetschek Scia)
Scia Engineer Quick Starts (x32 Version: 2.0.0 - Nemetschek Scia) Hidden
Scia Pipeline 3D (x32 Version: 1.0.244 - SCIA)
Scia to Tekla plug-in (x32 Version: 1.0.3 - SCIA)
Sentinel Protection Installer 7.6.4 (x32 Version: 7.6.4 - SafeNet, Inc.)
Sentinel System Driver Installer 7.5.1 (x32 Version: 7.5.1 - SafeNet, Inc.)
SketchUp 8 (x32 Version: 3.0.16944 - Trimble Navigation Limited)
Ski Challenge 14 (HKCU Version:  - )
Space Invaders OpenGL (x32 Version:  - )
SportTracks 3.1 (x32 Version: 3.1.5064 - Zone Five Software)
SteelMemberDesigner (x32 Version: 1.02.188.0 - Computer And Design Services Ltd)
Synology Data Replicator  3 (x32 Version: 1.0.0.0 - Synology Inc.)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2767886) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 64-Bit Edition (Version:  - Microsoft)
USB 2.0 IrDA Bridge (x32 Version: 2.00.000 - )
USB-Ir Adapter (x32 Version: 1.03.0000 - )
VirtualCloneDrive (x32 Version:  - Elaborate Bytes)
Visual Studio 2008 x64 Redistributables (x32 Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN)
WIBU-KEY Setup (WIBU-KEY Remove) (Version: Version 5.20b of 2007-Apr-18 (Setup) - WIBU-SYSTEMS AG)
Windlast (x32 Version: 1.37.0000 - Sommer Informatik GmbH)
Würth Technical Software (x32 Version: 1.00.0000 - S&P SCS)

==================== Restore Points  =========================

17-01-2014 12:13:18 Installed Java 7 Update 51

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0244A692-B1CF-45DD-867A-9108994EEC8E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21] (Google Inc.)
Task: {1C227C79-58A0-4ED2-BEAD-612A1FD16A05} - \BackgroundContainer Startup Task No Task File
Task: {4398F7F5-0FBC-4519-9F4C-1145C28C8F26} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {4A94458D-BA77-4F61-BF73-D19438EEF35C} - System32\Tasks\Express Files Updater => C:\Program Files (x86)\ExpressFiles\EFupdater.exe <==== ATTENTION
Task: {75ABD4EE-05BF-4466-8038-613F64A83793} - System32\Tasks\Synology Data Replicator 3-Alternate-Admin => D:\Program Files (x86)\Synology Data Replicator  3\Backup.exe [2012-05-30] (Synology Inc.)
Task: {7C82C1B2-8926-47BF-8135-9F6E1CD4649A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-12-21] (Adobe Systems Incorporated)
Task: {8BFA3ACA-CB93-4E3C-9885-4DE18B27030A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {C70BC53B-2722-41C4-A93A-B4142D022B71} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-21] (Google Inc.)
Task: {DA1F8CA0-FDCA-489B-AB7D-1434FE992279} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-17] (Adobe Systems Incorporated)
Task: {EC67E12E-D711-4873-898D-A1773448BAD9} - System32\Tasks\DTReg => C:\Users\Admin\AppData\Roaming\DefaultTab\DefaultTab\DTReg.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Synology Data Replicator 3-Alternate-Admin.job => D:\Program Files (x86)\Synology Data Replicator  3\Backup.exe

==================== Loaded Modules (whitelisted) =============

2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () d:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2011-11-02 13:03 - 2011-11-02 13:03 - 00430080 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-11-02 13:03 - 2011-11-02 13:03 - 00032768 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResources.dll
2011-12-29 09:23 - 2011-12-29 09:23 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2012-02-20 20:29 - 2012-02-20 20:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 20:28 - 2012-02-20 20:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00028774 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\d1e7c33431cd8713f2ce3582829a8b14\Socket.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00024679 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\c5cce8d16a1bd48692b421dcf46d3396\Util.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00032878 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\7ef0d901bf4203fbcf7a0fff0e82aa5f\Encode.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00024701 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\d10c2c06ba2044cccc247c4315f5c7d3\Process.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00028779 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\60ff464e01c2cd5526dbdad5a125081d\Dumper.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00020601 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\4461f48e31bde5c56b31b973b773de09\List.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00118918 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\eaeabd54205de2f10c00aea80bbf0d83\Registry.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00082048 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\3a7ccbf8181ee5a145227a6dfce3594c\WinError.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00020576 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\31638f63e39b38d3e250a9a57cb9d1c5\Cwd.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00036964 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\f233f63b6654362865c7577442edb9e3\Win32.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00020590 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\5ffd05b2cbd58528e56519784ca9c869\Hostname.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00082033 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\df1ba73f49c38cbbc7a11c779c3506d2\OLE.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00024676 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\32785c19dc6898fbbbf06f3b776edd08\Fcntl.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00061540 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\e56c61f7248672819579325af3387035\POSIX.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00094334 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\eb138ef0e4282611dbf485a302784646\LibYAML.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00053340 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\de446fdd1ae335c7d2b9e62bb8cdf765\B.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00184414 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\bd5179a413bc0c4b82eedc22c6cab101\re.dll
2014-01-17 13:07 - 2014-01-17 13:07 - 00024701 ____R () C:\Users\Admin\AppData\Local\Temp\pdk-Admin-3604\93e7e3d6030f426844228042348210cf\Service.dll
2013-03-20 15:02 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-08-15 02:24 - 2013-08-15 02:24 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\991a8d378a3e64b31c0f4770ba9ae071\IsdiInterop.ni.dll
2012-05-24 14:15 - 2011-11-29 19:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-05-24 14:12 - 2012-01-20 10:23 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-01-17 13:40 - 2013-12-05 20:36 - 03559024 _____ () d:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2012-11-29 22:59 - 2012-11-29 22:59 - 00093696 _____ () d:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-01-17 13:10 - 2014-01-17 13:10 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/17/2014 01:08:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/17/2014 00:23:40 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/17/2014 11:53:48 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 11:42:47 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 10:43:54 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 10:43:46 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 09:46:29 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 09:46:22 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 09:08:12 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 08:32:57 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}


System errors:
=============
Error: (01/17/2014 01:09:19 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/17/2014 00:24:16 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/17/2014 07:47:32 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/16/2014 06:52:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/16/2014 05:23:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/16/2014 05:20:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Common Client Job Manager Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/16/2014 05:20:24 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (01/17/2014 01:08:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/17/2014 00:23:40 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/17/2014 11:53:48 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 11:42:47 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 10:43:54 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 10:43:46 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 09:46:29 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 09:46:22 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 09:08:12 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}

Error: (01/17/2014 08:32:57 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {31d8967a-873e-4eea-83c1-dc01df9067d7}


CodeIntegrity Errors:
===================================
  Date: 2014-01-17 13:07:14.540
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-17 13:06:24.072
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-17 12:22:20.234
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-17 12:01:31.006
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-17 11:54:05.113
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-17 11:43:43.014
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-17 11:27:08.350
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-17 11:16:24.600
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-17 10:46:19.860
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-17 10:16:25.059
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 20%
Total physical RAM: 16339.23 MB
Available physical RAM: 13044.87 MB
Total Pagefile: 32676.63 MB
Available Pagefile: 28915.84 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: (Win7Prox64) (Fixed) (Total:111.79 GB) (Free:13.79 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:465.76 GB) (Free:298.52 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: 0A8D9778)
Partition 1: (Active) - (Size=112 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 195FAE1F)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================