TR/Virtool.INF.Autorun.233.32 in C:\Windows\System32\catroot2\... gefunden auf Windows 7 64 Bit

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:21 on 22/01/2014 (Sven)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-01-2014 01
Ran by Sven (administrator) on SVEN-PC on 22-01-2014 20:23:28
Running from C:\Users\Sven\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
() C:\ProgramData\TVersity\Media Server\MediaServer.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\Sven\AppData\Roaming\Dropbox\bin\Dropbox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
AppInit_DLLs-x32: c:\progra~3\browse~1\23796~1.11\{16cdf~1\browse~1.dll => File Not Found
Startup: C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sven\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050&SSPV=IEOB13
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xAE945D984A6ECD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - TVersitybar Toolbar - {66bd2442-241b-44cd-8c7a-b51037053cdb} - C:\Program Files (x86)\TVersitybar\prxtbTVer.dll (Conduit Ltd.)
URLSearchHook: HKCU - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
URLSearchHook: HKCU - (No Name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No File
URLSearchHook: HKCU - TVersitybar Toolbar - {66bd2442-241b-44cd-8c7a-b51037053cdb} - C:\Program Files (x86)\TVersitybar\prxtbTVer.dll (Conduit Ltd.)
SearchScopes: HKCU - DefaultScope {79BAB6F3-DE44-4A06-A5A5-2BA804B58B9E} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=110824&tt=4212_7&babsrc=SP_ss&mntrId=7e11aed4000000000000f46d04ce4334
SearchScopes: HKCU - {79BAB6F3-DE44-4A06-A5A5-2BA804B58B9E} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Giant Savings - {11111111-1111-1111-1111-110011441179} - C:\Program Files (x86)\Giant Savings\Giant Savings.dll (215 Apps)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: TVersitybar Toolbar - {66bd2442-241b-44cd-8c7a-b51037053cdb} - C:\Program Files (x86)\TVersitybar\prxtbTVer.dll (Conduit Ltd.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - TVersitybar Toolbar - {66bd2442-241b-44cd-8c7a-b51037053cdb} - C:\Program Files (x86)\TVersitybar\prxtbTVer.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\rj8or5dm.default
FF user.js: detected! => C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\rj8or5dm.default\user.js
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: hxxp://search.conduit.com/?ctid=CT2548838&SearchSource=13&CUI=SB_CUI
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2548838&SearchSource=2&CUI=UN55590922880056896&UM=false&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\rj8or5dm.default\searchplugins\dvdvideosofttb-customized-web-search.xml
FF SearchPlugin: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\rj8or5dm.default\searchplugins\tversitybar-customized-web-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DVDVideoSoftTB DE  - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\rj8or5dm.default\Extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} [2013-12-12]
FF Extension: TVersitybar  - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\rj8or5dm.default\Extensions\{66bd2442-241b-44cd-8c7a-b51037053cdb} [2013-12-12]
FF Extension: DVDVideoSoftTB  - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\rj8or5dm.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2013-11-20]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\rj8or5dm.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2012-12-13]
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\rj8or5dm.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi [2013-07-26]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\rj8or5dm.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: QuickJava - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\rj8or5dm.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2012-08-03]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-10-23]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-10-23]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (No Name) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj [2012-10-20]
CHR Extension: (No Name) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk [2012-10-20]
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2013-12-20]
CHR HKLM-x32\...\Chrome\Extension: [ndkhncnongaclekkbelchmeafffimifj] - C:\Users\Sven\AppData\Local\Giant Savings\Chrome\Giant Savings.crx [2012-09-19]
CHR HKLM-x32\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.crx [2012-09-19]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R2 TVersityMediaServer; C:\ProgramData\TVersity\Media Server\MediaServer.exe [1249064 2011-07-29] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-01] (Avira Operations GmbH & Co. KG)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-22 20:23 - 2014-01-22 20:24 - 00013972 _____ C:\Users\Sven\Desktop\FRST.txt
2014-01-22 20:23 - 2014-01-22 20:23 - 00000000 ____D C:\FRST
2014-01-22 20:22 - 2014-01-22 20:22 - 02077184 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-01-22 20:21 - 2014-01-22 20:21 - 00000470 _____ C:\Users\Sven\Desktop\defogger_disable.log
2014-01-22 20:21 - 2014-01-22 20:21 - 00000000 _____ C:\Users\Sven\defogger_reenable
2014-01-22 20:20 - 2014-01-22 20:20 - 00050477 _____ C:\Users\Sven\Desktop\Defogger.exe
2014-01-16 18:02 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-16 18:02 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-16 18:02 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-16 18:02 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-16 18:02 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-16 18:02 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-16 18:02 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-16 18:02 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-16 18:02 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-06 21:18 - 2014-01-06 21:18 - 00000000 ____D C:\Users\Sven\Downloads\Moderat-II-_MTR036CD_-Limited_Edition-CD-2013-hM
2014-01-06 21:15 - 2014-01-06 21:16 - 106505534 _____ C:\Users\Sven\Downloads\Moderat-II-_MTR036CD_-Limited_Edition-CD-2013-hM.rar
2014-01-06 21:11 - 2014-01-06 21:49 - 113187770 _____ C:\Users\Sven\Downloads\Booka Shade - Eve CD2 (2013).rar

==================== One Month Modified Files and Folders =======

2014-01-22 20:24 - 2014-01-22 20:23 - 00013972 _____ C:\Users\Sven\Desktop\FRST.txt
2014-01-22 20:23 - 2014-01-22 20:23 - 00000000 ____D C:\FRST
2014-01-22 20:22 - 2014-01-22 20:22 - 02077184 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-01-22 20:21 - 2014-01-22 20:21 - 00000470 _____ C:\Users\Sven\Desktop\defogger_disable.log
2014-01-22 20:21 - 2014-01-22 20:21 - 00000000 _____ C:\Users\Sven\defogger_reenable
2014-01-22 20:21 - 2012-07-30 12:48 - 00000000 ____D C:\Users\Sven
2014-01-22 20:20 - 2014-01-22 20:20 - 00050477 _____ C:\Users\Sven\Desktop\Defogger.exe
2014-01-22 20:15 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-22 20:15 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-22 19:46 - 2012-12-18 13:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-22 19:14 - 2012-07-30 12:44 - 01860037 _____ C:\Windows\WindowsUpdate.log
2014-01-22 18:57 - 2013-04-06 12:58 - 00000000 ____D C:\Users\Sven\Downloads\Cloud Downloader 2.0
2014-01-22 18:57 - 2013-01-23 22:30 - 00004941 _____ C:\Windows\SysWOW64\TVersityMediaServer.log
2014-01-22 18:02 - 2012-08-04 16:20 - 00000000 ____D C:\Users\Sven\AppData\Roaming\Dropbox
2014-01-22 18:01 - 2012-08-04 16:23 - 00000000 ___RD C:\Users\Sven\Dropbox
2014-01-22 18:01 - 2012-07-30 12:55 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-22 18:01 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-22 18:01 - 2009-07-14 05:51 - 00054552 _____ C:\Windows\setupact.log
2014-01-18 12:36 - 2009-07-14 05:45 - 00416424 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-16 20:09 - 2013-08-13 20:55 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 20:07 - 2012-07-30 16:25 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-16 19:21 - 2012-07-30 12:48 - 00000000 ___RD C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-16 19:20 - 2012-08-04 16:23 - 00001013 _____ C:\Users\Sven\Desktop\Dropbox.lnk
2014-01-16 19:20 - 2012-08-04 16:21 - 00000000 ____D C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 19:19 - 2013-08-27 08:27 - 00000000 ____D C:\Users\Sven\Downloads\Neuer Ordner
2014-01-14 19:34 - 2011-04-12 08:43 - 00657660 _____ C:\Windows\system32\perfh007.dat
2014-01-14 19:34 - 2011-04-12 08:43 - 00131032 _____ C:\Windows\system32\perfc007.dat
2014-01-14 19:34 - 2009-07-14 06:13 - 01507342 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-06 21:49 - 2014-01-06 21:11 - 113187770 _____ C:\Users\Sven\Downloads\Booka Shade - Eve CD2 (2013).rar
2014-01-06 21:18 - 2014-01-06 21:18 - 00000000 ____D C:\Users\Sven\Downloads\Moderat-II-_MTR036CD_-Limited_Edition-CD-2013-hM
2014-01-06 21:16 - 2014-01-06 21:15 - 106505534 _____ C:\Users\Sven\Downloads\Moderat-II-_MTR036CD_-Limited_Edition-CD-2013-hM.rar
2013-12-23 08:58 - 2012-10-20 12:20 - 00000000 ____D C:\Users\Sven\AppData\Roaming\Audacity

Some content of TEMP:
====================
C:\Users\Sven\AppData\Local\Temp\AskSLib.dll
C:\Users\Sven\AppData\Local\Temp\atl100.dll
C:\Users\Sven\AppData\Local\Temp\avgnt.exe
C:\Users\Sven\AppData\Local\Temp\ffunzip.exe
C:\Users\Sven\AppData\Local\Temp\IERunner.dll
C:\Users\Sven\AppData\Local\Temp\msvcp100.dll
C:\Users\Sven\AppData\Local\Temp\msvcr100.dll
C:\Users\Sven\AppData\Local\Temp\tbDVDV.dll
C:\Users\Sven\AppData\Local\Temp\tbedrs.dll
C:\Users\Sven\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-18 14:24

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-01-2014 01
Ran by Sven at 2014-01-22 20:24:58
Running from C:\Users\Sven\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated)
AIO_CDB_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Apple Application Support (x32 Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ASIO4ALL (x32 Version:  - )
ATI Catalyst Install Manager (Version: 3.0.762.0 - ATI Technologies, Inc.)
Audacity 2.0.2 (x32 Version: 2.0.2 - Audacity Team)
Audio Converter (HKCU Version:  - )
Audio Converter Packages (HKCU Version:  - )
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2948 - APN, LLC)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
F300 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
F300_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
F300Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
FL Studio 9 (x32 Version:  - Image-Line)
Free YouTube to MP3 Converter version 3.11.32.918 (x32 Version: 3.11.32.918 - DVDVideoSoft Ltd.)
Giant Savings (x32 Version: 1.23.151.151 - 215 Apps)
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Hardcore (x32 Version:  - Image-Line)
HP Customer Participation Program 13.0 (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (Version: 13.0 - HP)
HP Smart Web Printing 4.51 (Version: 4.51 - HP)
HP Solution Center 13.0 (Version: 13.0 - HP)
HP Update (x32 Version: 4.000.011.006 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
IL Download Manager (x32 Version:  - Image-Line)
iTunes (Version: 11.0.4.4 - Apple Inc.)
LAME v3.99.3 (for Windows) (x32 Version:  - )
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.14300 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (x32 Version: 12.0.4000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.18100 - Nero AG) Hidden
Nero Kwik Media (x32 Version: 1.18.18500 - Nero AG) Hidden
Nero Kwik Media (x32 Version: 12.0.01300 - Nero AG)
Nero Kwik Media Help (CHM) (x32 Version: 12.0.4000 - Nero AG) Hidden
Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06 - NVIDIA Corporation)
NVIDIA Display Control Panel (Version: 6.14.12.5936 - NVIDIA Corporation)
NVIDIA Drivers (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA Grafiktreiber 311.06 (Version: 311.06 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.10.0224 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
OCR Software by I.R.I.S. 13.0 (Version: 13.0 - HP)
PDFCreator (x32 Version: 1.4.3 - Frank Heindörfer, Philip Chinery)
PoiZone (x32 Version:  - Image-Line)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
Sawer (x32 Version:  - Image-Line)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (Version: 13.0 - HP)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
TeamViewer 7 (x32 Version: 7.0.13989 - TeamViewer)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
Toxic Biohazard (x32 Version:  - Image-Line)
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
TVersity Codec Pack 1.7 (x32 Version: 1.7 - TVersity Inc.)
TVersity Media Server 1.9.7 (x32 Version: 1.9.7 - TVersity)
TVersitybar Toolbar (x32 Version: 6.9.0.16 - TVersitybar)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Virtual DJ Pro Full - Atomix Productions (x32 Version:  - )
VLC media player 2.0.3 (x32 Version: 2.0.3 - VideoLAN)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Winamp (x32 Version: 5.63  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1 - Nullsoft, Inc)
WinRAR (x32 Version:  - )
Xiph.Org Open Codecs 0.85.17777 (x32 Version: 0.85.17777 - Xiph.Org)
YTD Video Downloader 3.9 (x32 Version:  - GreenTree Applications SRL)

==================== Restore Points  =========================

04-01-2014 13:57:11 Windows Update
09-01-2014 19:10:38 Windows Update
14-01-2014 17:11:37 Windows Update
16-01-2014 19:07:26 Windows Update
22-01-2014 17:06:56 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {3F681A41-B251-4414-A766-5293AC21B065} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-07-30 13:23 - 2008-06-19 23:41 - 00062464 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2013-08-13 19:54 - 2013-08-13 19:48 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00347944 _____ () C:\ProgramData\TVersity\Media Server\taglib.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00225064 _____ () C:\ProgramData\TVersity\Media Server\CORE_RL_lcms_.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00031528 _____ () C:\ProgramData\TVersity\Media Server\CORE_RL_xlib_.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00716584 _____ () C:\ProgramData\TVersity\Media Server\log4cxx.dll
2011-07-13 19:35 - 2011-07-13 19:35 - 04534072 _____ () C:\ProgramData\TVersity\Media Server\avcodec-52.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00083768 _____ () C:\ProgramData\TVersity\Media Server\avutil-50.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00313640 _____ () C:\ProgramData\TVersity\Media Server\libmp3lame-0.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00795448 _____ () C:\ProgramData\TVersity\Media Server\avformat-52.dll
2011-07-13 19:35 - 2011-07-13 19:35 - 00203064 _____ () C:\ProgramData\TVersity\Media Server\swscale-0.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00509720 _____ () C:\ProgramData\TVersity\Media Server\sqlite3.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Sven\AppData\Roaming\Dropbox\bin\libcef.dll
2013-12-10 20:02 - 2013-12-10 20:02 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-08-13 19:54 - 2013-08-13 19:48 - 00394824 _____ () C:\program files (x86)\avira\antivir desktop\sqlite3.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/22/2014 06:02:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/18/2014 00:38:01 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/16/2014 05:56:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/14/2014 06:08:19 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/12/2014 07:30:47 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2014 08:06:59 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/07/2014 01:57:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/06/2014 09:08:30 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/06/2014 00:31:34 PM) (Source: Bonjour Service) (User: )
Description: 324: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.)

Error: (01/06/2014 00:31:34 PM) (Source: Bonjour Service) (User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053


System errors:
=============
Error: (01/22/2014 06:04:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (01/22/2014 06:04:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (01/18/2014 00:39:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (01/18/2014 00:39:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (01/16/2014 05:57:35 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (01/16/2014 05:57:35 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (01/14/2014 06:09:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (01/14/2014 06:09:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (01/12/2014 07:32:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (01/12/2014 07:32:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-07-08 12:02:05.558
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-08 12:02:05.509
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 54%
Total physical RAM: 3326.11 MB
Available physical RAM: 1522.19 MB
Total Pagefile: 6650.41 MB
Available Pagefile: 4486.21 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:488.18 GB) (Free:300.23 GB) NTFS
Drive d: () (Fixed) (Total:443.23 GB) (Free:443.13 GB) NTFS
Drive g: (Expansion Drive) (Fixed) (Total:465.76 GB) (Free:156.81 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 98CDC115)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=488 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=443 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 466 GB) (Disk ID: 793DB9DA)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19355 - hxxp://www.gmer.net
Rootkit scan 2014-01-22 21:08:15
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_HD105SI rev.1AJ10001 931,51GB
Running: tjsdi3gk.exe; Driver: C:\Users\Sven\AppData\Local\Temp\kxldypog.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                                                                                                                                                      fffff80002fbb000 52 bytes [FF, FF, FF, FF, FF, FF, FF, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 582                                                                                                                                                                                                      fffff80002fbb036 27 bytes [FF, FF, FF, FF, FF, FF, FF, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Users\Sven\AppData\Roaming\Dropbox\bin\Dropbox.exe[2152] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 69                                                                                                                                                     0000000076171465 2 bytes [17, 76]
.text     C:\Users\Sven\AppData\Roaming\Dropbox\bin\Dropbox.exe[2152] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 155                                                                                                                                                    00000000761714bb 2 bytes [17, 76]
.text     ...                                                                                                                                                                                                                                                                     * 2
.text     C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[2708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                            0000000076171465 2 bytes [17, 76]
.text     C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[2708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                           00000000761714bb 2 bytes [17, 76]
.text     ...                                                                                                                                                                                                                                                                     * 2
.text     C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[2908] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                   0000000076171465 2 bytes [17, 76]
.text     C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[2908] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                  00000000761714bb 2 bytes [17, 76]
.text     ...                                                                                                                                                                                                                                                                     * 2
---- Processes - GMER 2.1 ----

Library   C:\Users\Sven\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (*** suspicious ***) @ C:\Windows\Explorer.EXE [1560]                                                                                                                                                     000007fef83c0000
Process   C:\ProgramData\TVersity\Media Server\MediaServer.exe (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072](2011-07-29 19:31:40)                                                                                                            0000000000400000
Library   C:\ProgramData\TVersity\Media Server\taglib.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                      0000000010000000
Library   C:\ProgramData\TVersity\Media Server\CORE_RL_magick_.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                             00000000005d0000
Library   C:\ProgramData\TVersity\Media Server\CORE_RL_ttf_.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                00000000003a0000
Library   C:\ProgramData\TVersity\Media Server\CORE_RL_lcms_.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                               00000000007c0000
Library   C:\ProgramData\TVersity\Media Server\CORE_RL_bzlib_.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                              00000000001e0000
Library   C:\ProgramData\TVersity\Media Server\CORE_RL_zlib_.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                               0000000000280000
Library   C:\ProgramData\TVersity\Media Server\CORE_RL_xlib_.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                               0000000000810000
Library   C:\ProgramData\TVersity\Media Server\libcurl.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                     0000000000830000
Library   C:\ProgramData\TVersity\Media Server\libapr.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                      000000006eec0000
Library   C:\ProgramData\TVersity\Media Server\libaprutil.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                  000000006ee60000
Library   C:\ProgramData\TVersity\Media Server\libapriconv.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                 000000006ee50000
Library   C:\ProgramData\TVersity\Media Server\log4cxx.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                     00000000008b0000
Library   C:\ProgramData\TVersity\Media Server\pthreadVC2.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                  0000000000970000
Library   C:\ProgramData\TVersity\Media Server\avcodec-52.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072](2011-07-13 18:35:58)                                                                                                             000000006ad40000
Library   C:\ProgramData\TVersity\Media Server\avutil-50.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                   0000000000990000
Library   C:\ProgramData\TVersity\Media Server\libmp3lame-0.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                000000006eb80000
Library   C:\ProgramData\TVersity\Media Server\avformat-52.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                 0000000064940000
Library   C:\ProgramData\TVersity\Media Server\swscale-0.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                   000000006d780000
Library   C:\ProgramData\TVersity\Media Server\sqlite3.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                     0000000060900000
Library   C:\ProgramData\TVersity\Media Server\zlib1.dll (*** suspicious ***) @ C:\ProgramData\TVersity\Media Server\MediaServer.exe [2072]                                                                                                                                       0000000061b80000
Process   C:\Users\Sven\AppData\Roaming\Dropbox\bin\Dropbox.exe (*** suspicious ***) @ C:\Users\Sven\AppData\Roaming\Dropbox\bin\Dropbox.exe [2152]                                                                                                                               0000000000400000
Library   C:\Users\Sven\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\Sven\AppData\Roaming\Dropbox\bin\Dropbox.exe [2152]                                                                                                                          0000000004090000
Library   C:\Users\Sven\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\Sven\AppData\Roaming\Dropbox\bin\Dropbox.exe [2152](2013-10-18 23:55:02)                                                                                                           000000006d360000
Library   C:\Users\Sven\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\Sven\AppData\Roaming\Dropbox\bin\Dropbox.exe [2152]                                                                                                                                 000000006c9d0000
Library   C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{740F7D4B-BCFC-427B-BFD7-891DAEE60067}\mpengine.dll (*** suspicious ***) @ C:\Windows\System32\svchost.exe [4636] (Microsoft Malware Protection Engine/Microsoft Corporation SIGNED)(2014-01-22 17:07:37)  000007feedb20000

---- EOF - GMER 2.1 ----