Hallo, Ihr Lieben!

Ich habe endlich meinen alten lahmen PC abgeschafft und den gebrauchten von meinem Mann übernommen. Jetzt möchte ich gerne kurz mit eurer Hilfe prüfen, ob der PC sauber und gut genug geschützt ist. Mögt ihr mir bitte kurz dabei helfen?

Vielen lieben Dank und liebe Grüße

Claudia

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hi Schrauber,

schön, dass du mir helfen magst, danke schon mal!

Hier die gewünschten Log-Files:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-01-2014
Ran by VM (administrator) on CK-PC on 23-01-2014 22:09:36
Running from C:\Users\VM\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal


==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Validity Sensors, Inc.) C:\Windows\System32\vfsFPService.exe
(Arachnoid Biometrics Identification Group Corp.) C:\Program Files\Acer\Acer Bio Protection\CompPtcVUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
() C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
() C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
() C:\Program Files\GfK-ProxyService\GfK-ProxyService.exe
() C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe
() C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe
() C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
( ) C:\Windows\System32\lxeecoms.exe
() C:\ACER\Mobility Center\MobilityService.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NewTech InfoSystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
() C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Prolific Technology Inc.) C:\Program Files\Nero\Nero BackItUp 4\IoctlSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe
(Uniblue) C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
(Acer Inc.) C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
(sonix) C:\Windows\PLFSetL.exe
() C:\Windows\PLFSetI.exe
(eBay Inc.) C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
() C:\Program Files\Lexmark Pro700 Series\ezprint.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Program Files\Lexmark Pro700 Series\lxeemon.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
() C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe
() C:\Program Files\PdaNet for Android\PdaNetPC.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Acer Inc.) C:\Program Files\Acer\Acer VCM\acp2HID.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Macrovision Europe Ltd.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2012-10-12] (Synaptics Incorporated)
HKLM\...\Run: [eAudio] - C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [544768 2008-05-30] (Acer Incorporated)
HKLM\...\Run: [ArcadeDeluxeAgent] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-07-24] (CyberLink Corp.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [1468296 2009-06-01] (Microsoft Corporation)
HKLM\...\Run: [Lexmark Pro700 Series Fax Server] - C:\Program Files\Lexmark Pro700 Series\fm3032.exe [316072 2011-01-23] ()
HKLM\...\Run: [eDataSecurity Loader] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [526896 2008-07-29] (Egis Incorporated)
HKLM\...\Run: [ePower_DMC] - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [405504 2008-08-01] (Acer Inc.)
HKLM\...\Run: [PLFSetL] - C:\Windows\PLFSetL.exe [94208 2011-01-22] (sonix)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2008-06-30] ()
HKLM\...\Run: [eBayToolbar] - C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe [632048 2009-03-19] (eBay Inc.)
HKLM\...\Run: [EzPrint] - C:\Program Files\Lexmark Pro700 Series\ezprint.exe [139944 2010-01-18] ()
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [182808 2008-07-20] (Intel Corporation)
HKLM\...\Run: [CLMLServer] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [167936 2008-07-24] (CyberLink)
HKLM\...\Run: [lxeemon.exe] - C:\Program Files\Lexmark Pro700 Series\lxeemon.exe [770728 2011-01-23] ()
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1115728 2009-12-15] (Dritek System Inc.)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM\...\Run: [LexwareInfoService] - C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-10] (AVAST Software)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2011-11-04] (Realtek Semiconductor)
Winlogon\Notify\AWinNotifyVitaKey MC3000: C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll (Arachnoid Biometrics Identification Group Corp.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung)
HKCU\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKCU\...\Run: [NextLive] - C:\Users\VM\AppData\Roaming\newnext.me\nengine.dll [1283584 2013-11-14] (NewNextDotMe)
HKCU\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
MountPoints2: {745ab459-58af-11de-af2e-806e6f6e6963} - F:\SETUP.EXE
MountPoints2: {b2eaf739-9ee3-11df-9989-001e331dd3dc} - E:\autorun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default\...\Run: [ProductReg] - C:\Program Files\Acer\WR_PopUp\ProductReg.exe [ 2008-11-17] (Acer)
HKU\Default\...\RunOnce: [AcerScrSav] - C:\Windows\Acer\run_NB.exe [ 2007-08-21] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [ProductReg] - C:\Program Files\Acer\WR_PopUp\ProductReg.exe [ 2008-11-17] (Acer)
HKU\Default User\...\RunOnce: [AcerScrSav] - C:\Windows\Acer\run_NB.exe [ 2007-08-21] ()
Lsa: [Notification Packages] scecli C:\Program Files\Acer\Acer Bio Protection\PwdFilter
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files\PdaNet for Android\PdaNetPC.exe ()

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:7777
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.freenet.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
URLSearchHook: HKLM - (No Name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} -  No File
URLSearchHook: HKCU - (No Name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} -  No File
SearchScopes: HKLM - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
BHO: GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files\GfK Internet-Monitor\Gacela2.dll (GfK)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll (Egis)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
Toolbar: HKLM - eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKLM - No Name - {872b5b88-9db5-4310-bdd0-ac189557e5f5} -  No File
Toolbar: HKLM - No Name - {98889811-442D-49dd-99D7-DC866BE87DBC} -  No File
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} -  No File
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: haufereader - No CLSID Value - 
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.0.43.49 217.0.43.33 192.168.1.1

Chrome: 
=======
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\32.0.1700.76\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\32.0.1700.76\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Dr.Web Anti-Virus Link Checker) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\aleggpabliehgbeagmfhnodcijcmbonb [2014-01-02]
CHR Extension: (WOT) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-01-02]
CHR Extension: (VTchromizer) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\efbjojhplkelaegfbieplglfidafgoka [2014-01-02]
CHR Extension: (AdBlock) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-02]
CHR Extension: (avast! Online Security) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-25]
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2013-02-25]
CHR Extension: (GfK Internet-Monitor) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef [2014-01-15]
CHR Extension: (Freemake Video Converter) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj [2013-06-08]
CHR Extension: (Google Wallet) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (NotScripts) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn [2014-01-02]
CHR Extension: (Gmail) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-02]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-25]
CHR HKLM\...\Chrome\Extension: [igkejcihojcegdmifcnlkhmnelneogef] - C:\Program Files\GfK Internet-Monitor\Chrome Extension\extension.crx [2014-01-15]
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-06-08]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-10] (AVAST Software)
R2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [81504 2008-01-16] ()
R2 DeviceManager; C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe [40960 2009-05-25] ()
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [406016 2009-08-24] (mst software GmbH, Germany)
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-06-02] ()
R2 GfK-Proxy-Service; C:\Program Files\GfK-ProxyService\GfK-ProxyService.exe [45544 2013-11-28] ()
R2 GfK-Reporting-Service; C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe [3089384 2013-11-28] ()
R2 GfK-Update-Service; C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe [1376232 2013-11-28] ()
R2 IGBASVC; C:\Program Files\Acer\Acer Bio Protection\BASVC.exe [3520512 2009-06-14] ()
S2 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe [193192 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [598696 2010-04-14] ( )
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] ()
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] ()
R2 PLFlash DeviceIoControl Service; C:\Program Files\Nero\Nero BackItUp 4\IoctlSvc.exe [81920 2008-08-29] (Prolific Technology Inc.)
R2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [272024 2007-01-09] ()
R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [233472 2008-07-19] (Acer Incorporated)
R2 Uniblue DiskRescue; C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe [229648 2008-09-10] (Uniblue)

==================== Drivers (Whitelisted) ====================

R0 AlfaFF; C:\Windows\System32\Drivers\AlfaFF.sys [43184 2009-06-14] (Alfa Corporation)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-01-10] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-12-25] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-01-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410528 2014-01-10] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-01-10] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2014-01-10] ()
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [28048 2010-02-05] (CSR, plc)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2010-01-01] (Elaborate Bytes AG)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-10-30] ()
R2 int15; C:\Windows\system32\drivers\int15.sys [69632 2007-01-26] ()
R3 itecir; C:\Windows\System32\DRIVERS\itecir.sys [62496 2011-11-04] (ITE Tech. Inc. )
R3 L1E; C:\Windows\System32\DRIVERS\L1E60x86.sys [54824 2012-10-12] (Atheros Communications, Inc.)
R3 NETwNv32; C:\Windows\System32\DRIVERS\NETwNv32.sys [7346176 2012-10-12] (Intel Corporation)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation)
R3 pmkbdfltr; C:\Windows\System32\DRIVERS\pmkbdfltr.sys [15248 2012-10-12] (PenMount)
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [103552 2009-05-25] (TCT International Mobile Ltd)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [23608 2012-10-12] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1759744 2011-01-22] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-10-16] (Avira GmbH)
R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2009-09-01] ()
R3 TelekomNM3; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys [35040 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [61424 2008-07-18] (Cyberlink Corp.)
S2 Aspi32; No ImagePath
S1 DritekPortIO; No ImagePath
S3 esgiguard; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x]
S3 S6U12Scanner; system32\drivers\usbscan.sys [x]
S3 usbscan; system32\DRIVERS\usbscan.sys [x]
U5 usbser; C:\Windows\System32\Drivers\usbser.sys [27648 2009-04-11] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-23 22:09 - 2014-01-23 22:10 - 00028117 _____ C:\Users\VM\Desktop\FRST.txt
2014-01-23 22:08 - 2014-01-23 22:08 - 00000000 ____D C:\FRST
2014-01-23 22:07 - 2014-01-23 22:07 - 01222144 _____ (Farbar) C:\Users\VM\Desktop\FRST.exe
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:43 - 00000000 ____D C:\Users\VM\.gimp-2.8
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\AppData\Local\gegl-0.2
2014-01-17 23:16 - 2014-01-18 00:27 - 00000000 ____D C:\Users\VM\Desktop\Mallorca
2014-01-16 21:10 - 2014-01-16 21:10 - 00000000 ____D C:\Windows\LastGood
2014-01-16 21:03 - 2007-11-14 15:18 - 00000553 _____ C:\Windows\USetup.iss
2014-01-16 17:45 - 2014-01-16 17:45 - 00000721 _____ C:\Users\VM\Desktop\Finca Cavalli.kmz
2014-01-16 05:23 - 2014-01-16 05:53 - 00000000 ____D C:\Program Files\GfK-ProxyService
2014-01-15 21:48 - 2014-01-23 22:07 - 00000000 ____D C:\Program Files\GfK Internet-Monitor
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-09 23:54 - 2014-01-16 03:09 - 00000000 ____D C:\Program Files\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee
2014-01-09 23:51 - 2014-01-23 17:46 - 00000000 ____D C:\Users\VM\AppData\Roaming\newnext.me
2014-01-09 23:51 - 2014-01-09 23:52 - 00000000 ____D C:\Users\VM\AppData\Local\Mobogenie
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\Documents\Mobogenie
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\genienext
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\cache
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\.android
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 _____ C:\Users\VM\daemonprocess.txt
2014-01-09 23:49 - 2014-01-09 23:52 - 00000000 ____D C:\Program Files\Mobogenie
2014-01-09 23:49 - 2014-01-09 23:49 - 00000000 ____D C:\Users\VM\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Image Converter
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Foxtab
2014-01-09 22:31 - 2014-01-09 22:31 - 00673168 _____ (                                                            ) C:\Users\VM\Desktop\ImageEditorSetup.exe
2014-01-05 22:37 - 2014-01-19 23:13 - 00000000 ____D C:\Users\VM\Desktop\Handybilder
2014-01-03 08:56 - 2014-01-03 08:56 - 00000427 _____ C:\Users\VM\Desktop\Dateien von CK.lnk
2014-01-02 22:46 - 2014-01-02 22:46 - 00000000 ____D C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-01-01 21:01 - 2014-01-01 21:05 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-01 20:51 - 2014-01-01 20:53 - 90396104 _____ (The GIMP Team                                               ) C:\Users\VM\Downloads\gimp-2.8.10-setup.exe
2013-12-31 13:53 - 2013-12-31 13:53 - 00000000 ____D C:\Program Files\MyFree Codec
2013-12-30 20:35 - 2013-12-30 20:36 - 00000000 ____D C:\Program Files\QuickTime
2013-12-30 20:31 - 2013-12-30 20:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-30 20:30 - 2013-12-30 20:30 - 00000000 ____D C:\Program Files\Apple Software Update
2013-12-30 20:21 - 2013-12-30 20:22 - 41404760 _____ (Apple Inc.) C:\Users\VM\Downloads\QuickTimeInstaller.exe
2013-12-27 01:14 - 2013-12-27 01:14 - 00000509 _____ C:\Users\VM\Desktop\Eigene Bilder.lnk
2013-12-26 19:50 - 2013-12-26 19:50 - 00161608 _____ C:\Windows\Minidump\Mini122613-01.dmp
2013-12-26 13:02 - 2013-12-26 23:21 - 616354938 _____ C:\Users\VM\Handy-Bilder 381.mp4
2013-12-25 17:05 - 2013-12-26 19:50 - 450556947 _____ C:\Windows\MEMORY.DMP
2013-12-25 17:05 - 2013-12-25 17:05 - 00161720 _____ C:\Windows\Minidump\Mini122513-01.dmp
2013-12-25 14:49 - 2014-01-10 00:07 - 00000350 ____H C:\Windows\Tasks\avast! Emergency Update.job
2013-12-25 14:44 - 2013-12-25 14:44 - 00000000 ____D C:\Users\VM\AppData\Roaming\AVAST Software
2013-12-25 14:43 - 2014-01-10 00:07 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-12-25 14:43 - 2014-01-10 00:07 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2013-12-25 14:43 - 2014-01-10 00:07 - 00180248 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-12-25 14:43 - 2014-01-10 00:07 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-12-25 14:43 - 2014-01-10 00:07 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-12-25 14:43 - 2014-01-10 00:07 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2013-12-25 14:43 - 2014-01-10 00:06 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-12-25 14:43 - 2013-12-25 14:42 - 00049944 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-12-25 14:42 - 2014-01-10 00:06 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-12-25 14:41 - 2013-12-25 14:41 - 00000000 ____D C:\Program Files\AVAST Software
2013-12-25 14:40 - 2013-12-25 14:40 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-25 14:33 - 2013-12-25 14:35 - 85269544 _____ (AVAST Software) C:\Users\VM\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe
2013-12-24 00:40 - 2014-01-21 21:43 - 00000000 ___RD C:\Users\VM\Eigene Bilder
2013-12-24 00:34 - 2013-12-26 19:48 - 00000000 ____D C:\Users\VM\Corel User Files
2013-12-24 00:34 - 2013-12-26 19:48 - 00000000 ____D C:\Users\VM\Azwsoft
2013-12-24 00:34 - 2013-12-24 00:34 - 00000000 ____D C:\Users\VM\Scanner Treiber
2013-12-24 00:34 - 2013-11-14 22:18 - 00011041 _____ C:\Users\VM\Mappe1.xlsx
2013-12-24 00:34 - 2013-11-07 20:49 - 00013712 _____ C:\Users\VM\Brief Claudia Klein.dotx
2013-12-24 00:34 - 2013-06-26 22:12 - 00023235 _____ C:\Users\VM\Kopie von 3-Monatsübersicht Tulpenweg.xlsx
2013-12-24 00:34 - 2013-03-18 12:38 - 00035840 ___SH C:\Users\VM\Thumbs.db
2013-12-24 00:34 - 2011-10-15 12:54 - 00013642 _____ C:\Users\VM\Briefbogen CK.dotx
2013-12-24 00:33 - 2013-12-26 19:47 - 00000000 ____D C:\Users\VM\My Digital Editions
2013-12-24 00:33 - 2013-12-26 19:45 - 00000000 ____D C:\Users\VM\Kestrel
2013-12-24 00:33 - 2013-12-26 19:45 - 00000000 ____D C:\Users\VM\Epubsoft
2013-12-24 00:33 - 2013-12-26 19:45 - 00000000 ____D C:\Users\VM\ePub DRM Removal
2013-12-24 00:33 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\samsung
2013-12-24 00:33 - 2013-12-22 23:43 - 00000000 ____D C:\Users\VM\PDF Architect Files

==================== One Month Modified Files and Folders =======

2014-01-23 22:10 - 2014-01-23 22:09 - 00028117 _____ C:\Users\VM\Desktop\FRST.txt
2014-01-23 22:08 - 2014-01-23 22:08 - 00000000 ____D C:\FRST
2014-01-23 22:08 - 2006-11-02 13:47 - 00003344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-23 22:08 - 2006-11-02 13:47 - 00003344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-23 22:07 - 2014-01-23 22:07 - 01222144 _____ (Farbar) C:\Users\VM\Desktop\FRST.exe
2014-01-23 22:07 - 2014-01-15 21:48 - 00000000 ____D C:\Program Files\GfK Internet-Monitor
2014-01-23 21:40 - 2009-06-14 07:52 - 01158242 _____ C:\Windows\WindowsUpdate.log
2014-01-23 17:46 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Roaming\newnext.me
2014-01-21 21:43 - 2013-12-24 00:40 - 00000000 ___RD C:\Users\VM\Eigene Bilder
2014-01-20 21:58 - 2010-03-07 20:31 - 00000000 ____D C:\ProgramData\Lx_cats
2014-01-20 14:58 - 2008-01-21 08:16 - 01596168 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-19 23:13 - 2014-01-05 22:37 - 00000000 ____D C:\Users\VM\Desktop\Handybilder
2014-01-19 22:27 - 2010-03-07 21:06 - 00399564 _____ C:\ProgramData\lxeeJSW.log
2014-01-19 14:58 - 2011-02-07 20:19 - 00007916 _____ C:\Users\VM\AppData\Local\d3d9caps.dat
2014-01-18 00:27 - 2014-01-17 23:16 - 00000000 ____D C:\Users\VM\Desktop\Mallorca
2014-01-18 00:27 - 2013-12-21 21:16 - 00008260 _____ C:\Windows\setupact.log
2014-01-17 23:43 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\.gimp-2.8
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\AppData\Local\gegl-0.2
2014-01-17 23:28 - 2009-06-28 17:16 - 00000000 ____D C:\Users\VM
2014-01-16 21:10 - 2014-01-16 21:10 - 00000000 ____D C:\Windows\LastGood
2014-01-16 21:10 - 2010-03-07 20:25 - 00226419 _____ C:\ProgramData\lxeescan.log
2014-01-16 21:09 - 2009-02-02 12:21 - 00000000 ____D C:\Windows\system32\RTCOM
2014-01-16 21:08 - 2009-06-14 08:05 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2014-01-16 21:07 - 2013-12-21 21:48 - 01069598 _____ C:\Windows\PFRO.log
2014-01-16 21:07 - 2009-02-02 13:15 - 00000147 _____ C:\Windows\system32\agent.log
2014-01-16 21:05 - 2009-07-02 00:19 - 00010652 _____ C:\Windows\bthservsdp.dat
2014-01-16 21:02 - 2009-02-02 12:23 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-01-16 21:02 - 2009-02-02 12:17 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2014-01-16 17:45 - 2014-01-16 17:45 - 00000721 _____ C:\Users\VM\Desktop\Finca Cavalli.kmz
2014-01-16 14:25 - 2009-06-28 17:19 - 00000000 ____D C:\Users\VM\AppData\Local\Google
2014-01-16 14:24 - 2009-02-02 12:44 - 00000000 ____D C:\Program Files\Google
2014-01-16 05:53 - 2014-01-16 05:23 - 00000000 ____D C:\Program Files\GfK-ProxyService
2014-01-16 03:11 - 2013-07-22 23:17 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 03:09 - 2014-01-09 23:54 - 00000000 ____D C:\Program Files\McAfee Security Scan
2014-01-16 03:01 - 2006-11-02 11:24 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-10 00:07 - 2013-12-25 14:49 - 00000350 ____H C:\Windows\Tasks\avast! Emergency Update.job
2014-01-10 00:07 - 2013-12-25 14:43 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00180248 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2014-01-10 00:06 - 2013-12-25 14:43 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-10 00:06 - 2013-12-25 14:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee
2014-01-09 23:54 - 2011-06-02 21:31 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-01-09 23:54 - 2009-06-28 22:44 - 00000000 ____D C:\Users\VM\AppData\Local\Adobe
2014-01-09 23:52 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\Mobogenie
2014-01-09 23:52 - 2014-01-09 23:49 - 00000000 ____D C:\Program Files\Mobogenie
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\Documents\Mobogenie
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\genienext
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\cache
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\.android
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 _____ C:\Users\VM\daemonprocess.txt
2014-01-09 23:49 - 2014-01-09 23:49 - 00000000 ____D C:\Users\VM\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Image Converter
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Foxtab
2014-01-09 22:31 - 2014-01-09 22:31 - 00673168 _____ (                                                            ) C:\Users\VM\Desktop\ImageEditorSetup.exe
2014-01-06 23:27 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2014-01-03 08:56 - 2014-01-03 08:56 - 00000427 _____ C:\Users\VM\Desktop\Dateien von CK.lnk
2014-01-02 22:46 - 2014-01-02 22:46 - 00000000 ____D C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-01-01 21:05 - 2014-01-01 21:01 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-01 20:53 - 2014-01-01 20:51 - 90396104 _____ (The GIMP Team                                               ) C:\Users\VM\Downloads\gimp-2.8.10-setup.exe
2013-12-31 14:06 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-12-31 13:53 - 2013-12-31 13:53 - 00000000 ____D C:\Program Files\MyFree Codec
2013-12-30 20:36 - 2013-12-30 20:35 - 00000000 ____D C:\Program Files\QuickTime
2013-12-30 20:35 - 2009-10-27 01:02 - 00000000 ____D C:\ProgramData\Apple Computer
2013-12-30 20:31 - 2013-12-30 20:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-30 20:30 - 2013-12-30 20:30 - 00000000 ____D C:\Program Files\Apple Software Update
2013-12-30 20:30 - 2009-10-27 01:00 - 00000000 ____D C:\ProgramData\Apple
2013-12-30 20:22 - 2013-12-30 20:21 - 41404760 _____ (Apple Inc.) C:\Users\VM\Downloads\QuickTimeInstaller.exe
2013-12-29 21:57 - 2011-05-29 11:57 - 00000000 ____D C:\ProgramData\Netzmanager
2013-12-27 01:14 - 2013-12-27 01:14 - 00000509 _____ C:\Users\VM\Desktop\Eigene Bilder.lnk
2013-12-26 23:21 - 2013-12-26 13:02 - 616354938 _____ C:\Users\VM\Handy-Bilder 381.mp4
2013-12-26 22:45 - 2009-07-24 21:03 - 00000000 ____D C:\Users\VM\Option
2013-12-26 19:50 - 2013-12-26 19:50 - 00161608 _____ C:\Windows\Minidump\Mini122613-01.dmp
2013-12-26 19:50 - 2013-12-25 17:05 - 450556947 _____ C:\Windows\MEMORY.DMP
2013-12-26 19:50 - 2010-01-11 00:25 - 00000000 ____D C:\Windows\Minidump
2013-12-26 19:48 - 2013-12-24 00:34 - 00000000 ____D C:\Users\VM\Corel User Files
2013-12-26 19:48 - 2013-12-24 00:34 - 00000000 ____D C:\Users\VM\Azwsoft
2013-12-26 19:47 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\My Digital Editions
2013-12-26 19:45 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\Kestrel
2013-12-26 19:45 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\Epubsoft
2013-12-26 19:45 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\ePub DRM Removal
2013-12-26 19:37 - 2009-02-02 13:00 - 00000000 ____D C:\Program Files\Acer GameZone
2013-12-26 19:35 - 2008-01-21 08:15 - 00000000 ____D C:\Windows\WindowsMobile
2013-12-26 19:06 - 2013-12-15 00:38 - 00000000 ____D C:\Users\VM\Tracing
2013-12-25 17:05 - 2013-12-25 17:05 - 00161720 _____ C:\Windows\Minidump\Mini122513-01.dmp
2013-12-25 14:44 - 2013-12-25 14:44 - 00000000 ____D C:\Users\VM\AppData\Roaming\AVAST Software
2013-12-25 14:42 - 2013-12-25 14:43 - 00049944 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-12-25 14:41 - 2013-12-25 14:41 - 00000000 ____D C:\Program Files\AVAST Software
2013-12-25 14:40 - 2013-12-25 14:40 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-25 14:35 - 2013-12-25 14:33 - 85269544 _____ (AVAST Software) C:\Users\VM\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe
2013-12-25 14:29 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\spool
2013-12-25 14:27 - 2012-10-16 17:04 - 00000000 ____D C:\ProgramData\Avira
2013-12-25 14:23 - 2010-11-26 22:48 - 00000000 ____D C:\Users\VM\Documents\Samsung
2013-12-25 14:23 - 2010-04-25 22:16 - 00000000 ____D C:\Users\VM\Documents\VirtualDJ
2013-12-25 14:23 - 2010-01-11 10:27 - 00000000 __RSD C:\Users\VM\Documents\My Stationery
2013-12-25 14:23 - 2009-12-12 19:53 - 00000000 ____D C:\Users\VM\Documents\Quicksteuer
2013-12-25 14:22 - 2013-06-08 20:43 - 00000000 ____D C:\Users\VM\Documents\Freemake
2013-12-25 14:22 - 2012-12-09 18:38 - 00000000 ____D C:\Users\VM\Documents\Medion
2013-12-25 14:21 - 2011-05-29 22:15 - 00000000 ____D C:\Users\VM\Documents\DVDVideoSoft
2013-12-25 14:20 - 2012-11-07 22:23 - 00000000 ____D C:\Users\VM\Documents\Amazon MP3
2013-12-25 03:12 - 2009-02-02 12:28 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-25 03:12 - 2006-11-02 11:23 - 00000301 _____ C:\Windows\win.ini
2013-12-24 00:34 - 2013-12-24 00:34 - 00000000 ____D C:\Users\VM\Scanner Treiber
2013-12-24 00:33 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\samsung
2013-12-24 00:12 - 2009-06-28 23:58 - 00139936 _____ C:\Windows\system32\GDIPFONTCACHEV1.DAT
2013-12-24 00:10 - 2006-11-02 13:47 - 00492008 _____ C:\Windows\system32\FNTCACHE.DAT

Files to move or delete:
====================
C:\Users\VM\AppData\Roaming\desktop.ini


Some content of TEMP:
====================
C:\Users\VM\AppData\Local\Temp\18039uninstall.exe
C:\Users\VM\AppData\Local\Temp\avgnt.exe
C:\Users\VM\AppData\Local\Temp\ose00000.exe
C:\Users\VM\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\VM\AppData\Local\Temp\Sqlite3.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-16 21:16

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 23-01-2014
Ran by VM at 2014-01-23 22:12:51
Running from C:\Users\VM\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================


3Planesoft Screensaver Manager 1.2 (Version: 1.2 - 3Planesoft)
AAV 6.0.00.15 (Version:  - )
ABBYY FineReader 6.0 Sprint (Version: 6.00.2146.41621 - ABBYY Software House)
Acer Arcade Deluxe (Version: 2.1.5529 - CyberLink Corp.)
Acer Arcade Deluxe (Version: 2.1.5529 - CyberLink Corp.) Hidden
Acer Bio Protection
Acer Crystal Eye Webcam 3.0.6.3 (Version: 3.0.6.3 - SuYin)
Acer eAudio Management (Version: 3.0.3008 - CyberLink Corp.)
Acer eDataSecurity Management (Version: 3.0.3065 - Egis Inc.)
Acer Empowering Technology (Version: 3.0.3009 - Acer Incorporated)
Acer ePower Management (Version: 3.0.3014 - Acer Incorporated)
Acer eRecovery Management (Version: 3.0.3014 - Acer Incorporated)
Acer eSettings Management (Version: 3.0.3011 - Acer Incorporated)
Acer GridVista (Version: 2.72.317 - )
Acer Mobility Center Plug-In (Version: 3.0.3000 - Acer Inc.)
Acer Product Registration (Version: 3.0.0.10 - Acer Incorporated)
Acer ScreenSaver (Version: 1.13.1301 - Acer Inc.)
Acer VCM (Version: 3.2.3002 - Acer Incorporated)
Adobe Acrobat 9 Pro - English, Français, Deutsch (Version: 9.0.0 - Adobe Systems) Hidden
Adobe Flash Player 11 ActiveX (Version: 11.1.102.55 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader for Pocket PC 2.0 (Version: 2.0 - Adobe Systems)
Adobe Reader for Pocket PC 2.0 (Version: 2.0 - Adobe Systems) Hidden
Adobe Reader X (10.1.9) - Deutsch (Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (Version: 11.5.9.615 - Adobe Systems, Inc.)
Advertising Center (Version: 0.0.0.1 - Nero AG) Hidden
Agere Systems HDA Modem (Version:  - Agere Systems)
Amazon MP3-Downloader 1.0.17 (Version: 1.0.17 - Amazon Services LLC)
Apple Application Support (Version: 2.3.4 - Apple Inc.)
Apple Software Update (Version: 2.1.3.127 - Apple Inc.)
Ashampoo WinOptimizer 6.60 (Version: 6.6.0 - Ashampoo GmbH & Co. KG)
Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver (Version: 1.0.0.30 - Atheros Communications Inc.)
avast! Free Antivirus (Version: 9.0.2011 - Avast Software)
BabylonObjectInstaller (Version: 2.0.0.2 - Babylon Ltd)
BPM-Studio 4 Profi (Version:  - )
C:\Program Files\Acer GameZone\GameConsole (Version: 2.0.1.4 - Oberon Media, Inc.)
CCleaner (Version: 4.06 - Piriform)
Classic PhoneTools (Version: 9.00 - Avanquest software)
Classic PhoneTools (Version: 9.00 - BVRP Software) Hidden
CorelDRAW Graphics Suite X3 (Version: 13.0 - Corel Corporation)
CyberLink PowerDirector (Version: 6.5.3023d - CyberLink Corp.)
CyberLink PowerDirector (Version: 6.5.3023d - CyberLink Corp.) Hidden
DATA BECKER - Die große CD-Druckerei (Version:  - )
DE (Version: 13.0 - Corel Corporation) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version:  - Microsoft)
DHTML Editing Component (Version: 6.02.0001 - Microsoft Corporation)
DivX-Setup (Version: 2.6.1.84 - DivX, LLC)
eBay Toolbar (Version: 2.50.12.4 - eBay)
eSobi v2 (Version: 2.0.3.000223 - esobi Inc.)
eSobi v2 (Version: 2.0.3.000223 - esobi Inc.) Hidden
Feedback Tool (Version: 1.2.0 - Microsoft Corporation)
Fireplace 3D Screensaver 1.0 (Version: 1.0 - 3Planesoft)
FontNav (Version: 5.0 - Corel Corporation) Hidden
Free Studio version 2013 (Version: 6.1.7.717 - DVDVideoSoft Ltd.)
Freemake Video Converter Version 4.0.1 (Version: 4.0.1 - Ellora Assets Corporation)
Galapago (Version:  - Oberon Media)
GameXN GO (HKCU Version:  - GameXN AS)
GfK Internet-Monitor (Version: 13.4.53 - GfK)
GfK Proxy Service (Version:  - )
GIMP 2.8.10 (Version: 2.8.10 - The GIMP Team)
Go-Go Gourmet (Version:  - Oberon Media)
Google Chrome (Version: 32.0.1700.76 - Google Inc.)
Google Earth (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Haufe iDesk-Service (Version: 11.07.19.8023 - Haufe)
Heroes of Hellas (Version:  - Oberon Media)
HSPA USB MODEM (Version:  - Alcatel)
Image Editor Packages (HKCU Version:  - ) <==== ATTENTION
ImagXpress (Version: 7.0.74.0 - Nero AG) Hidden
Intel PROSet Wireless (Version:  - ) Hidden
Intel(R) PROSet/Wireless WiFi-Software (Version: 12.00.0004 - Intel(R) Corporation)
Intel® Matrix Storage Manager (Version:  - Intel Corporation)
IrfanView (remove only) (Version:  - )
ITECIR (Version: 1.6 - ITE)
Java 7 Update 45 (Version: 7.0.450 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 2 (Version: 1.6.0.20 - Sun Microsystems, Inc.)
Java(TM) 6 Update 35 (Version: 6.0.350 - Oracle)
JMicron JMB38X Flash Media Controller (Version: 1.00.12.07 - JMicron Technology Corp.)
Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Launch Manager (Version: 3.0.02 - Acer Inc.)
Lexmark  (Version: 1.0.0.0 - )
Lexmark Pro700 Series (Version:  - Lexmark International, Inc.)
Lexmark Symbolleiste (Version: 4.63.37.0 - )
Lexmark Tools for Office (Version: 1.29.0.0 - )
Lexware Info Service (Version: 2.90.00.0009 - Haufe-Lexware GmbH & Co.KG)
LightScribe  1.4.142.1 (Version: 1.4.142.1 - hxxp://www.lightscribe.com) Hidden
Macromedia FreeHand 9 (Version: 9 - Macromedia)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation)
McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.)
MEDION GoPal Assistant (Version: 6.2.0.12196 - MEDION)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft IntelliPoint 7.0 (Version: 7.0.260.0 - Microsoft)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (Version: 08.05.0822 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0 - Microsoft Corp.)
Mobipocket Reader 6.2 (Version: 6.2.608 - Mobipocket.com)
MSVC80_x86 (Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0 - Microsoft Corporation)
MyFreeCodec (HKCU Version:  - )
Mythic Mahjong (Version:  - Oberon Media)
Nero 12 (Version: 12.0.02900 - Nero AG)
Nero Audio Pack 1 (Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero BackItUp (Version: 12.0.6002 - Nero AG) Hidden
Nero BackItUp (Version: 4.0.0.0 - Nero AG) Hidden
Nero BackItUp 4 (Version:  - Nero AG)
Nero BackItUp Help (CHM) (Version: 12.0.8000 - Nero AG) Hidden
Nero Blu-ray Player (Version: 12.0.17700 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (Version: 12.0.9000 - Nero AG) Hidden
Nero Burning ROM (Version: 12.0.28001 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden
Nero ControlCenter (Version: 11.0.15500 - Nero AG) Hidden
Nero ControlCenter (Version: 9.0.0.1 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero Core Components (Version: 11.0.18900 - Nero AG) Hidden
Nero Disc Menus Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Effects Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Express (Version: 12.0.28001 - Nero AG) Hidden
Nero Express Help (CHM) (Version: 12.0.5000 - Nero AG) Hidden
Nero Installer (Version: 2.0.0.1 - Nero AG) Hidden
Nero Kwik Media (Version: 1.18.19600 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero Kwik Themes Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero PiP Effects Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Recode (Version: 12.0.31001 - Nero AG) Hidden
Nero Recode Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero RescueAgent (Version: 12.0.10002 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero SharedVideoCodecs (Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (Version: 11.0.11800.31.0 - Nero AG) Hidden
Nero Video (Version: 12.0.8000 - Nero AG) Hidden
Nero Video Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
neroxml (Version: 1.0.0 - Nero AG) Hidden
Netzmanager (Version: 1.071 - Deutsche Telekom AG)
Netzmanager (Version: 1.071 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
NTI Backup Now 5 (Version: 5.1.2.606 - NewTech Infosystems)
NTI Backup Now Standard (Version: 5.1.2.606 - NewTech Infosystems) Hidden
NTI Media Maker 8 (Version: 8.0.2.6329 - NewTech Infosystems)
NTI Media Maker 8 (Version: 8.0.2.6329 - NewTech Infosystems) Hidden
NVIDIA Drivers (Version: 1.10 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.85.551 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.09.0203 - NVIDIA Corporation)
NVIDIA Systemsteuerung 306.97 (Version: 306.97 - NVIDIA Corporation) Hidden
Office-Bibliothek (Version: 5.00.4 - Bibliographisches Institut & F.A. Brockhaus AG)
Orion (Version: 2.0.1 - Convesoft)
PdaNet for Android 3.50 (Version:  - June Fabrics Technology Inc)
PhotoNow! (Version: 1.1.4619 - CyberLink Corp.)
PixiePack Codec Pack (Version: 1.1.1200.0 - None)
Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden
Putt Mania (Version:  - Oberon Media)
QuickSteuer 2011 (Version: 17.05.00.0003 - Haufe-Lexware GmbH & Co.KG)
QuickSteuer 2012 COMPUTERBILD Edition (Version: 18.07.00.0008 - Haufe-Lexware GmbH & Co.KG)
QuickSteuer 2013 (Version: 19.06.00.0003 - Haufe-Lexware GmbH & Co.KG)
QuickSteuer Wissens-Center 2011 (Version: 17.10.0.0 - Haufe-Lexware GmbH & Co. KG)
QuickSteuer Wissens-Center 2012 (Version: 18.1.0.0 - Haufe-Lexware GmbH & Co. KG)
QuickTime (Version: 7.74.80.86 - Apple Inc.)
Radiotracker (Version: 6.2.13700.0 - RapidSolution Software AG)
Realtek High Definition Audio Driver (Version: 6.0.1.6167 - Realtek Semiconductor Corp.)
Samsung Kies (Version: 2.0.1.11053_99 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.0.1.11053_99 - Samsung Electronics Co., Ltd.) Hidden
Samsung PC Studio 3 (Version: 3.0.0.80502 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (Version: 1.3.2410.0 - SAMSUNG Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
Servicepack Datumsaktualisierung (Version: 1.00.00.0005 - Haufe-Lexware) Hidden
Skype™ 6.0 (Version: 6.0.126 - Skype Technologies S.A.)
StarMoney (Version: 1.0 - StarFinanz) Hidden
StarMoney (Version: 2.0 - StarFinanz) Hidden
StarMoney (Version: 3.0.0.124 - StarFinanz) Hidden
Synaptics Pointing Device Driver (Version: 14.0.12.0 - Synaptics Incorporated)
TuneUp Utilities Language Pack (de-DE) (Version: 9.0.6030.1 - TuneUp Software) Hidden
TVgenial 4.10 (Version:  - )
Uniblue DiskRescue 2009 (Version: 1.0.0 - Uniblue Systems) Hidden
Uniblue DriverScanner 2009 (Version: 2.0.0.1 - Uniblue Systems Ltd.) Hidden
Uninstall 1.0.0.1 (Version:  - )
Unity Web Player (HKCU Version:  - Unity Technologies ApS)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version:  - Microsoft)
Update Manager (Version: 4.60 - Corel Corporation) Hidden
Validity Sensors software (Version: 2.7.44 - Validity Sensors, Inc.)
VBA (Version: 6.2 - Corel Corporation) Hidden
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Virtual DJ - Atomix Productions (Version:  - )
VirtualCloneDrive (Version:  - Elaborate Bytes)
VirtualDJ PRO Full (Version: 7.0.4 - Atomix Productions)
Welcome App (Start-up experience) (Version: 12.0.15000 - Nero AG) Hidden
Windows Live Call (Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (Version: 14.0.8098.930 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live ID-Anmelde-Assistent (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Mail (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter: Treiberupdate (Version: 6.1.6965.0 - Microsoft Corporation)
WinRAR (Version:  - )
Xara Photo & Graphic Designer 6 (Version: 6.1.3.25152 - Xara Group Ltd)
Xara Photo & Graphic Designer 6 (Version: 6.1.3.25152 - Xara Group Ltd) Hidden

==================== Restore Points  =========================

26-12-2013 18:11:50 Removed Bonjour
26-12-2013 18:32:54 QuickSteuer Wissens-Center 2011 wird entfernt
28-12-2013 14:13:53 Windows Update
30-12-2013 19:31:45 Installed QuickTime
31-12-2013 17:18:20 Windows Update
04-01-2014 00:16:15 Windows Update
07-01-2014 17:44:34 Windows Update
09-01-2014 23:03:34 avast! antivirus system restore point
15-01-2014 12:06:04 Windows Update
16-01-2014 02:00:30 Windows Update
21-01-2014 12:52:21 Windows Update

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {27EC1DEA-57EC-423F-AA44-2D88E86D382D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {549E9554-DB95-4E78-B10B-69AF49034DE0} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert
Task: {5A7F5460-B140-4D8D-B9EB-39C5E1DF451E} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {634EEDCC-710F-464A-A305-32334C8EE65A} - System32\Tasks\Uniblue DiskRescue 2009 => C:\Program Files\Uniblue\DiskRescue\UBDiskRescue.exe [2008-09-10] (Uniblue)
Task: {69623E90-07BC-4041-A70B-3E1A7D6BE87B} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2009-06-01] (Microsoft Corporation)
Task: {69682880-4C7B-4ADD-812B-0A11C2C1103B} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {73CF916C-8B98-4169-A0A9-2974C54CCBE3} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {75D79F72-E960-4A77-92D7-8F1A2A8EBD2C} - System32\Tasks\InstallShield Software-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2005-08-11] (Macrovision Corporation)
Task: {8B1C49D2-71EA-4E0F-A58D-6E463B027166} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-30] (Google Inc.)
Task: {A43163DD-771C-4F90-A1C5-827EF9792C8B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {B19AD1E9-68EC-4259-8132-F36461A0F0E0} - System32\Tasks\{F62FF463-32EE-4AB5-91B3-768D3C5905BB} => C:\Program Files\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {C0276B33-DD07-41FB-B1CC-1F7B41746315} - System32\Tasks\{B54E3089-7E05-4657-8ADF-FD6ACB82CC21} => C:\Program Files\Skype\\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {CD85FE0E-256B-4185-968B-B2E859598A46} - System32\Tasks\{6D53D572-09B3-432B-8B05-6B0C41F87FAC} => C:\Program Files\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {E1FD0C7C-6741-43CA-952C-72310DE39797} - System32\Tasks\{57C162A0-E3B0-4C81-81C7-3B784833FC42} => C:\Program Files\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {E765ADB2-FECE-4ECB-9724-E5AF8F8EFB3F} - System32\Tasks\{EDAB9B0E-ACA4-4294-AA65-0A1FE2741AEF} => Iexplore.exe hxxp://ui.skype.com/ui/0/4.1.0.179/de/abandoninstall?page=tsChrome&amp;installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:offered-notinstalled
Task: {E7D075D2-BF1B-45AC-BFE2-F0B692466C48} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-30] (Google Inc.)
Task: {E97F56B4-78D5-4E60-AE6B-C367FFE5A3D3} - System32\Tasks\Update Manager => C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [2011-07-31] (Haufe-Lexware GmbH & Co. KG)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cef1e721a369a0.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Uniblue DiskRescue 2009.job => C:\Program Files\Uniblue\DiskRescue\UBDiskRescue.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2008-05-22 03:27 - 2011-08-19 02:09 - 00528384 _____ () C:\Program Files\Lexmark Toolbar\toolband.dll
2008-05-22 03:28 - 2011-08-19 02:25 - 00471040 _____ () C:\Program Files\Lexmark Toolbar\resource.dll
2010-03-07 20:25 - 2009-05-18 08:29 - 00819200 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\lxeeptpc.dll
2010-03-07 20:25 - 2009-11-04 08:14 - 00165376 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\lxeedrui.dll
2010-03-07 20:25 - 2009-06-07 19:40 - 00167936 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\lxeePRPR.DLL
2011-08-28 14:21 - 2011-03-10 10:52 - 00636800 _____ () C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\ContextHandler.dll
2009-06-29 20:45 - 2008-09-16 19:18 - 00132608 _____ () C:\Program Files\WinRAR\rarext.dll
2008-07-29 17:52 - 2008-07-29 17:52 - 00227888 _____ () C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ShowErrMsg.dll
2009-02-02 12:43 - 2009-02-02 12:43 - 00036864 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Utility\3.0.3009.0__4df5dcab8860d239\Framework.Utility.dll
2009-02-02 12:43 - 2009-02-02 12:43 - 00061440 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Library\3.0.3009.0__3036420f80dd6947\Framework.Library.dll
2009-02-02 12:43 - 2009-02-02 12:43 - 00009216 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Model.ControllerInterface\3.0.3009.0__d842b71b4d6ed079\Framework.Model.ControllerInterface.dll
2010-03-07 20:22 - 2009-03-30 07:37 - 00708608 _____ () C:\Program Files\Lexmark Pro700 Series\Epwizard.DLL
2010-03-07 20:22 - 2009-03-30 07:35 - 00159744 _____ () C:\Program Files\Lexmark Pro700 Series\customui.dll
2010-03-07 20:22 - 2009-03-30 07:35 - 00118784 _____ () C:\Program Files\Lexmark Pro700 Series\Eputil.DLL
2010-03-07 20:22 - 2009-03-30 07:35 - 00139264 _____ () C:\Program Files\Lexmark Pro700 Series\Imagutil.DLL
2010-03-07 20:22 - 2009-03-30 07:35 - 00061440 _____ () C:\Program Files\Lexmark Pro700 Series\Epfunct.DLL
2010-03-07 20:22 - 2009-06-23 06:09 - 02203648 _____ () C:\Program Files\Lexmark Pro700 Series\EPWizRes.dll
2010-03-07 20:22 - 2009-06-23 06:10 - 00045056 _____ () C:\Program Files\Lexmark Pro700 Series\epstring.dll
2010-03-07 20:22 - 2009-06-23 06:11 - 00102400 _____ () C:\Program Files\Lexmark Pro700 Series\EPOEMDll.dll
2010-03-07 20:22 - 2009-04-07 14:25 - 00409600 _____ () C:\Program Files\Lexmark Pro700 Series\iptk.dll
2010-03-07 20:22 - 2009-03-02 09:25 - 00151552 _____ () C:\Program Files\Lexmark Pro700 Series\lxeeptp.dll
2010-03-07 20:25 - 2009-11-04 08:14 - 00236032 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\lxeedr.dll
2010-03-07 20:22 - 2010-04-01 11:23 - 00389120 _____ () C:\Program Files\Lexmark Pro700 Series\lxeescw.dll
2010-03-07 20:25 - 2009-05-27 07:16 - 00192512 _____ () C:\Windows\system32\spool\drivers\w32x86\3\lxeedatr.dll
2010-03-07 20:22 - 2010-04-01 11:24 - 01159168 _____ () C:\Program Files\Lexmark Pro700 Series\lxeeDRS.dll
2010-03-07 20:22 - 2009-03-10 00:43 - 00155648 _____ () C:\Program Files\Lexmark Pro700 Series\lxeecaps.dll
2010-03-07 20:10 - 2009-02-20 09:48 - 00299008 _____ () C:\Windows\system32\lxeesm.dll
2010-03-07 20:10 - 2009-04-28 08:56 - 00024064 _____ () C:\Windows\system32\lxeesmr.dll
2010-03-07 20:22 - 2009-12-09 15:03 - 00561152 _____ () C:\Program Files\Lexmark Pro700 Series\lxeealm.dll
2013-08-29 01:25 - 2013-08-29 01:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-12-25 14:42 - 2013-12-25 14:42 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-31 14:04 - 2013-12-31 14:04 - 01952256 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\abbba0f399508efdbeaf78b2e2fa7b03\Kies.UI.ni.dll
2013-12-31 14:04 - 2013-12-31 14:04 - 00079360 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\6f25a20174765872519f821c6c68bfda\Kies.MVVM.ni.dll
2013-12-31 14:04 - 2013-12-31 14:04 - 00189952 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\891822cfc054262435c02192bb220192\Kies.Common.DeviceServiceLib.Interface.ni.dll
2013-12-31 14:05 - 2013-12-31 14:05 - 00367104 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePhoto\0cb1ca6d0bc2fbc4225ec8b991eecd07\DevicePhoto.ni.dll
2013-12-31 14:06 - 2013-12-31 14:06 - 00301568 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceVideo\1f0d8f012eae2b7353c8d594b2a06e9d\DeviceVideo.ni.dll
2013-12-31 14:06 - 2013-12-31 14:06 - 00616448 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePodcast\3eb0df72e19c269e7ec4dc4a2c130521\DevicePodcast.ni.dll
2013-12-31 14:06 - 2013-12-31 14:06 - 00307200 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DummyStorePlugin\9e97c3b33aa7fb9d900bca4f6d93ec9e\DummyStorePlugin.ni.dll
2013-12-31 14:06 - 2013-12-31 14:06 - 14972928 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\642ba04dfd0cf6b5a4bd768ab404eb4f\Kies.Theme.ni.dll
2013-12-31 14:05 - 2013-12-31 14:05 - 00581632 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\42ab5ed8c70495af14fc9a8e38e5383a\Kies.Common.DeviceServiceLib.FileService.ni.dll
2013-12-31 14:04 - 2013-12-31 14:04 - 00046592 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\fb36527133c6a9e51f53aab9ca2faabe\Kies.Common.DeviceServiceLib.FirmwareUpdate.FirmwareUpdateAgentHelper.ni.dll
2013-12-31 14:05 - 2013-12-31 14:05 - 01002496 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceCommonLib\06251528bbadcb3da726d324a41e710f\DeviceCommonLib.ni.dll
2013-12-31 14:05 - 2013-12-31 14:05 - 00232960 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\c5efe841e2998c266e0f5e29bed04b55\ASF_cSharpAPI.ni.dll
2009-06-14 08:13 - 2007-09-11 10:12 - 00475136 _____ () C:\Program Files\Acer\Acer VCM\AcerControl.dll
2014-01-16 21:19 - 2014-01-16 21:19 - 04591616 _____ () C:\Users\VM\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libglesv2.dll
2014-01-16 21:19 - 2014-01-16 21:19 - 00112128 _____ () C:\Users\VM\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libegl.dll
2014-01-16 20:06 - 2014-01-11 11:29 - 04055320 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.76\pdf.dll
2014-01-16 20:06 - 2014-01-11 11:29 - 00399640 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll
2014-01-16 20:06 - 2014-01-11 11:28 - 01634584 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.76\ffmpegsumo.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf
2013-02-14 15:46 - 2013-02-14 15:46 - 01044048 _____ () C:\Program Files\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
2014-01-16 20:06 - 2014-01-11 11:29 - 13615896 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:05113FB9
AlternateDataStreams: C:\ProgramData\Temp:430C6D84
AlternateDataStreams: C:\ProgramData\Temp:4D066AD2
AlternateDataStreams: C:\ProgramData\Temp:5D7E5A8F
AlternateDataStreams: C:\ProgramData\Temp:C99F6ECA
AlternateDataStreams: C:\ProgramData\Temp:DAFD38AE
AlternateDataStreams: C:\ProgramData\Temp:DFC5A2B2
AlternateDataStreams: C:\ProgramData\Temp:EEFF768F
AlternateDataStreams: C:\Users\VM\Handy-Bilder 381.mp4:TOC.WMV

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: isatap.{E8D12279-C9FE-4919-B3C2-94C4123E65E8}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: isatap.{E8D12279-C9FE-4919-B3C2-94C4123E65E8}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: isatap.home
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-ISATAP-Adapter #4
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/20/2014 09:10:02 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung CLMLSvc.exe, Version 2.1.1901.0, Zeitstempel 0x486a3d0d, fehlerhaftes Modul CLMLSvc.exe, Version 2.1.1901.0, Zeitstempel 0x486a3d0d, Ausnahmecode 0xc0000005, Fehleroffset 0x00014984,
Prozess-ID 0xa68, Anwendungsstartzeit CLMLSvc.exe0.

Error: (01/16/2014 09:08:27 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 09:51:22 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 07:25:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/14/2014 08:44:17 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung lxeecoms.exe, Version 9.2.33.0, Zeitstempel 0x4b1ffc19, fehlerhaftes Modul lxeeserv.dll, Version 9.2.33.0, Zeitstempel 0x4b1ffdcd, Ausnahmecode 0xc0000005, Fehleroffset 0x0006bcd7,
Prozess-ID 0xb20, Anwendungsstartzeit lxeecoms.exe0.

Error: (01/10/2014 03:24:46 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/10/2014 00:03:32 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {0216780d-cbb3-4380-acdc-cf1f5bd54025}

Error: (01/09/2014 08:01:49 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung lxeecoms.exe, Version 9.2.33.0, Zeitstempel 0x4b1ffc19, fehlerhaftes Modul lxeeserv.dll, Version 9.2.33.0, Zeitstempel 0x4b1ffdcd, Ausnahmecode 0xc0000005, Fehleroffset 0x0006bcd7,
Prozess-ID 0xb34, Anwendungsstartzeit lxeecoms.exe0.

Error: (01/04/2014 00:57:53 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung Explorer.EXE, Version 6.0.6002.18005, Zeitstempel 0x49e01da5, fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode 0xc0000005, Fehleroffset 0x076a251c,
Prozess-ID 0xce0, Anwendungsstartzeit Explorer.EXE0.

Error: (12/31/2013 01:58:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (01/22/2014 09:31:45 PM) (Source: Service Control Manager) (User: )
Description: 30000PlugPlay

Error: (01/21/2014 05:54:09 PM) (Source: Service Control Manager) (User: )
Description: 30000PlugPlay

Error: (01/21/2014 01:37:58 PM) (Source: Service Control Manager) (User: )
Description: 30000PlugPlay

Error: (01/20/2014 01:55:42 PM) (Source: Service Control Manager) (User: )
Description: 30000PlugPlay

Error: (01/19/2014 07:35:46 PM) (Source: DCOM) (User: )
Description: 1053WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (01/19/2014 07:35:46 PM) (Source: Service Control Manager) (User: )
Description: Windows Search%%1053

Error: (01/19/2014 07:35:46 PM) (Source: Service Control Manager) (User: )
Description: 30000Windows Search

Error: (01/19/2014 07:10:40 PM) (Source: Print) (User: CK-PC)
Description: Das Dokument OPs-CK.xls im Besitz von VM konnte nicht auf dem Drucker Lexmark Pro700 Series (Netzwerk) gedruckt werden. Versuchen Sie erneut, das Dokument zu drucken, oder starten Sie den Druckspooler erneut. 
Datentyp: LEMF. Größe der Spooldatei in Bytes: 10350. Anzahl der gedruckten Bytes: 10350. Gesamtanzahl der Seiten des Dokuments: 1. Anzahl der gedruckten Seiten: 0. Clientcomputer: \\CK-PC. Vom Druckprozessor zurückgegebener Win32-Fehlercode: OPs-CK.xls0. OPs-CK.xls1

Error: (01/19/2014 06:30:57 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "VOLI4-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{E8D12279-C9FE-4919-B3C2-94C4123E6-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (01/18/2014 08:48:12 PM) (Source: Service Control Manager) (User: )
Description: Netzmanager Infrastruktur Informationssystem Dienst150001Neustart des Diensts


Microsoft Office Sessions:
=========================
Error: (01/20/2014 09:10:02 PM) (Source: Application Error)(User: )
Description: CLMLSvc.exe2.1.1901.0486a3d0dCLMLSvc.exe2.1.1901.0486a3d0dc000000500014984a6801cf12f6d4bc99fb

Error: (01/16/2014 09:08:27 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 09:51:22 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 07:25:34 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/14/2014 08:44:17 AM) (Source: Application Error)(User: )
Description: lxeecoms.exe9.2.33.04b1ffc19lxeeserv.dll9.2.33.04b1ffdcdc00000050006bcd7b2001cf0e0fb16e9ee4

Error: (01/10/2014 03:24:46 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/10/2014 00:03:32 AM) (Source: VSS)(User: )
Description: 0x80070005

Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {0216780d-cbb3-4380-acdc-cf1f5bd54025}

Error: (01/09/2014 08:01:49 PM) (Source: Application Error)(User: )
Description: lxeecoms.exe9.2.33.04b1ffc19lxeeserv.dll9.2.33.04b1ffdcdc00000050006bcd7b3401cf062806c9fb65

Error: (01/04/2014 00:57:53 AM) (Source: Application Error)(User: )
Description: Explorer.EXE6.0.6002.1800549e01da5unknown0.0.0.000000000c0000005076a251cce001cf064a90a867c0

Error: (12/31/2013 01:58:55 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-07-22 21:35:04.411
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-22 21:35:03.879
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-22 21:28:34.355
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-22 21:28:33.853
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:08:50.063
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:08:49.499
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:05:35.967
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:05:35.492
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-09-26 00:33:23.763
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-09-26 00:33:23.345
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 65%
Total physical RAM: 3068.03 MB
Available physical RAM: 1043.82 MB
Total Pagefile: 6040.13 MB
Available Pagefile: 3303.05 MB
Total Virtual: 2047.88 MB
Available Virtual: 1913.67 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:144.04 GB) (Free:24.93 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:137.5 GB) (Free:131.03 GB) NTFS
Drive f: (SpanischMP3CD) (CDROM) (Total:0.27 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 4EBF5754)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=138 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=4 GB) - (Type=12)

==================== End Of Log ============================
         

LG
Claudia

Adware

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hi Schrauber,

erst mal bin ich entsetzt, dass ich hier tatsächlich fündig geworden bin, denn angeblich war der Rechner "sauber"...

Also hier schon mal das erste Log-File von Malwarebytes:

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.24.06

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
VM :: CK-PC [Administrator]

Schutz: Aktiviert

24.01.2014 21:02:04
mbam-log-2014-01-24 (21-02-04).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 236998
Laufzeit: 27 Minute(n), 13 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 1
C:\Users\VM\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart.

Infizierte Registrierungsschlüssel: 3
HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Speedchecker Limited\PC Speed Up (PUP.Optional.PCSpeedUp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|NextLive (PUP.Optional.NextLive.A) -> Daten: C:\Windows\system32\rundll32.exe "C:\Users\VM\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0H1L1J1L1S1R1N -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 2
C:\Users\VM\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Löschen bei Neustart.
C:\Users\VM\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 4
C:\Users\VM\Desktop\ImageEditorSetup.exe (PUP.Optional.InstallCore) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\VM\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart.
C:\Users\VM\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\VM\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Der Rest folgt nach getaner Arbeit.

So ein Mist, Schrauber!

Mein PC bootet nicht mehr richtig hoch. Ich sollte nach dem Malwarebytes-Scan einen Neustart machen und jetzt hab ich den Salat. Das Passwort kann ich noch eingeben, danach bleibt der Bildschirm schwarz. Im abgesicherten Modus gehts zwar, aber dann kann ich nicht online gehen. HILFEEEE...


LG,
CLAUDIA

So ein Mist, Schrauber!

Mein PC bootet nicht mehr richtig hoch. Ich sollte nach dem Malwarebytes-Scan einen Neustart machen und jetzt hab ich den Salat. Das Passwort kann ich noch eingeben, danach bleibt der Bildschirm schwarz. Im abgesicherten Modus gehts zwar, aber dann kann ich nicht online gehen. HILFEEEE...


LG,
CLAUDIA

Wähle mal den abgesicherten Modus mit netzwerktreibern, dann kannste auch online gehen und den Rest der obigen Anleitung machen. Bekommen wir schon hin

Hi Schrauber,

Das ist ja mein Problem, dass ich eben leider NICHT online gehen kann. Beim Internet bekomme ich folgende Meldung: "Verbindung zum Proxyserver kann nicht hergestellt werden. " Fehlercode "ERR_PROXY_CONNECTION_FAILE D". Und wenn ich eMails abrufen will kommt diese Meldung:"Microsoft Office kann die Lizenz für diese Anwendung nicht überprüberprüfen. Fehler bei einem Reparaturversuch oder Abbruch durch den Benutzer. Sie Anwendung wird jetzt heruntergefahren. " Wenn mein Mann erfährt, dass der PC nicht mehr läuft, wird er sicher sehr sauer sein, denn es war vorher sein Rechner. .. :-(

Bekommen wir das wirklich wieder hin??? Bitte mach, dass er wieder läuft. ..

Liebe Grüße

Claudia

Klar. Du bist sicher im abgesicherten Modus mit Netzwerktreibern? Was passiert wenn Du nun in den normalen Modus booten willst? Hast DU nen Stick?

Dann AdwCleaner und JRT rüber mit dem Stick, laufen lassen nach Anleitung. Logs auf den Stick packen und hier posten.

Ebenso bitte nen frischen Scan mit FRST machen, Log auf den Stick hier posten.

Und nebenbei:

DU kannst da gar nix für. Rechner ist voll mit Adware, die wehrt sich gerne mal en bissl wenn man sie entfernen will. Is wie en guter Pickel oder ne Winterkirsche, aber das Teil bekommen wir schon ausgedrückt

Hi Schrauber,

ja, ich habe ALLE abgesicherten Modi ausprobiert.

Den ADW-Cleaner hatte ich mir gerade noch rechtzeitig vorher runtergeladen. Den hab ich jetzt laufen lassen, der Rechner fährt gerade wieder hoch und das sieht ganz gut aus.

Bei JRT gibt's ein anderes Problem, weil ich zur Zeit per Handy mit dir schreibe und nicht per Tablet. Ich habe zur Zeit kein Tablet. Mal sehen, ob ich das per Handy runterladen kann...

Leider hat sich nach dem Neustart des Rechners keine Lof-Datei geöffnet, ich muss die jetzt erst mal suchen. ..

Okay, es klappt:

JRT-LOGFILE:

[CODE] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows Vista (TM) Home Premium x86
Ran by VM on 27.01.2014 at 11:21:03,73
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2667981686-1106648099-187186479-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\caphyon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.01.2014 at 11:23:36,58
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~/CODE]

ADW-LOGFILE:

# AdwCleaner v3.017 - Bericht erstellt am 27/01/2014 um 11:00:04
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzername : VM - CK-PC
# Gestartet von : C:\Users\VM\Desktop\adwcleaner.exe
# Option : L鰏chen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gel鰏cht : C:\ProgramData\NCH Software
Ordner Gel鰏cht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Ordner Gel鰏cht : C:\Program Files\FoxTab
Ordner Gel鰏cht : C:\Program Files\Mobogenie
Ordner Gel鰏cht : C:\Program Files\myfree codec
Ordner Gel鰏cht : C:\Program Files\Common Files\DVDVideoSoft\TB
Ordner Gel鰏cht : C:\Users\VM\AppData\Local\genienext
Ordner Gel鰏cht : C:\Users\VM\AppData\Local\Mobogenie
Ordner Gel鰏cht : C:\Users\VM\AppData\Local\PackageAware
Ordner Gel鰏cht : C:\Users\VM\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Ordner Gel鰏cht : C:\Users\VM\Documents\Mobogenie
Datei Gel鰏cht : C:\END
Datei Gel鰏cht : C:\Windows\System32\Tasks\BrowserDefendert

***** [ Verkn黳fungen ] *****


***** [ Registrierungsdatenbank ] *****

[#] Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{549E9554-DB95-4E78-B10B-69AF49034DE0}
[#] Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{549E9554-DB95-4E78-B10B-69AF49034DE0}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\d
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\speedupmypc
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Wert Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Schl黶sel Gel鰏cht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\TypeLib\{DB797681-40E0-11D2-9BD5-0060082AE372}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EC73EAE3-4B91-474E-AABE-6E96FB1B675F}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{98E94708-93C2-4C60-8F9C-ABECF0A1EDF0}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E70EC461-31E1-4D56-B40F-B5FCE222BE5D}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Wert Gel鰏cht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gel鰏cht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Wert Gel鰏cht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gel鰏cht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Schl黶sel Gel鰏cht : HKCU\Software\Conduit
Schl黶sel Gel鰏cht : HKCU\Software\Myfree Codec
Schl黶sel Gel鰏cht : HKCU\Software\NCH Software
Schl黶sel Gel鰏cht : HKCU\Software\Uniblue
Schl黶sel Gel鰏cht : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB
Schl黶sel Gel鰏cht : HKLM\Software\AskTBar
Schl黶sel Gel鰏cht : HKLM\Software\Conduit
Schl黶sel Gel鰏cht : HKLM\Software\DataMngr
Schl黶sel Gel鰏cht : HKLM\Software\DivX\Install\Setup\WizardLayout\ConduitToolbar
Schl黶sel Gel鰏cht : HKLM\Software\DVDVideoSoftTB
Schl黶sel Gel鰏cht : HKLM\Software\Myfree Codec
Schl黶sel Gel鰏cht : HKLM\Software\Speedchecker Limited
Schl黶sel Gel鰏cht : HKLM\Software\Uniblue
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Ask Toolbar_is1
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mobogenie
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyFreeCodec
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Optimizer Pro_is1
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PriceGong
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DVDVideoSoftTB Toolbar
Schl黶sel Gel鰏cht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Schl黶sel Gel鰏cht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schl黶sel Gel鰏cht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Schl黶sel Gel鰏cht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
Schl黶sel Gel鰏cht : HKLM\Software\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16526


-\\ Google Chrome v32.0.1700.76

[ Datei : C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gel鰏cht : icon_url

*************************

AdwCleaner[R0].txt - [8955 octets] - [27/01/2014 10:37:37]
AdwCleaner[S0].txt - [8343 octets] - [27/01/2014 11:00:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8403 octets] ##########
         

2. ADW-LOGFILE:

# AdwCleaner v3.017 - Bericht erstellt am 27/01/2014 um 10:37:37
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzername : VM - CK-PC
# Gestartet von : C:\Users\VM\Desktop\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\END
Datei Gefunden : C:\Windows\System32\Tasks\BrowserDefendert
Ordner Gefunden C:\Program Files\Common Files\DVDVideoSoft\TB
Ordner Gefunden C:\Program Files\FoxTab
Ordner Gefunden C:\Program Files\Mobogenie
Ordner Gefunden C:\Program Files\myfree codec
Ordner Gefunden C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Ordner Gefunden C:\ProgramData\NCH Software
Ordner Gefunden C:\Users\VM\AppData\Local\genienext
Ordner Gefunden C:\Users\VM\AppData\Local\Mobogenie
Ordner Gefunden C:\Users\VM\AppData\Local\PackageAware
Ordner Gefunden C:\Users\VM\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Ordner Gefunden C:\Users\VM\Documents\Mobogenie

***** [ Verkn黳fungen ] *****


***** [ Registrierungsdatenbank ] *****

Schl黶sel Gefunden : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB
Schl黶sel Gefunden : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB
Schl黶sel Gefunden : HKCU\Software\Conduit
Schl黶sel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Ask Toolbar_is1
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DVDVideoSoftTB Toolbar
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mobogenie
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyFreeCodec
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Optimizer Pro_is1
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PriceGong
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Schl黶sel Gefunden : HKCU\Software\Myfree Codec
Schl黶sel Gefunden : HKCU\Software\NCH Software
Schl黶sel Gefunden : HKCU\Software\Uniblue
Schl黶sel Gefunden : HKLM\Software\AskTBar
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\d
Schl黶sel Gefunden : HKLM\Software\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\speedupmypc
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{DB797681-40E0-11D2-9BD5-0060082AE372}
Schl黶sel Gefunden : HKLM\Software\Conduit
Schl黶sel Gefunden : HKLM\Software\DataMngr
Schl黶sel Gefunden : HKLM\Software\DivX\Install\Setup\WizardLayout\ConduitToolbar
Schl黶sel Gefunden : HKLM\Software\DVDVideoSoftTB
Schl黶sel Gefunden : HKLM\Software\DVDVideoSoftTB
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{98E94708-93C2-4C60-8F9C-ABECF0A1EDF0}
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E70EC461-31E1-4D56-B40F-B5FCE222BE5D}
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\BrowserDefendert
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{549E9554-DB95-4E78-B10B-69AF49034DE0}
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EC73EAE3-4B91-474E-AABE-6E96FB1B675F}
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schl黶sel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Schl黶sel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schl黶sel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Schl黶sel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schl黶sel Gefunden : HKLM\Software\Myfree Codec
Schl黶sel Gefunden : HKLM\Software\Speedchecker Limited
Schl黶sel Gefunden : HKLM\Software\Uniblue
Schl黶sel Gefunden : HKLM\Software\Uniblue\DriverScanner
Schl黶sel Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16526


-\\ Google Chrome v32.0.1700.76

[ Datei : C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gefunden : icon_url
Gefunden : search_url
Gefunden : suggest_url
Gefunden : keyword

*************************

AdwCleaner[R0].txt - [8815 octets] - [27/01/2014 10:37:37]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [8875 octets] ##########
         

Und das neueste Frst-Logfile :

[CODE]
FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-01-2014
Ran by VM (administrator) on CK-PC on 27-01-2014 12:42:20
Running from C:\Users\VM\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Safe Mode (minimal)


==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2012-10-12] (Synaptics Incorporated)
HKLM\...\Run: [eAudio] - C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [544768 2008-05-30] (Acer Incorporated)
HKLM\...\Run: [ArcadeDeluxeAgent] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-07-24] (CyberLink Corp.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [1468296 2009-06-01] (Microsoft Corporation)
HKLM\...\Run: [Lexmark Pro700 Series Fax Server] - C:\Program Files\Lexmark Pro700 Series\fm3032.exe [316072 2011-01-23] ()
HKLM\...\Run: [eDataSecurity Loader] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [526896 2008-07-29] (Egis Incorporated)
HKLM\...\Run: [ePower_DMC] - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [405504 2008-08-01] (Acer Inc.)
HKLM\...\Run: [PLFSetL] - C:\Windows\PLFSetL.exe [94208 2011-01-22] (sonix)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2008-06-30] ()
HKLM\...\Run: [eBayToolbar] - C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe [632048 2009-03-19] (eBay Inc.)
HKLM\...\Run: [EzPrint] - C:\Program Files\Lexmark Pro700 Series\ezprint.exe [139944 2010-01-18] ()
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [182808 2008-07-20] (Intel Corporation)
HKLM\...\Run: [CLMLServer] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [167936 2008-07-24] (CyberLink)
HKLM\...\Run: [lxeemon.exe] - C:\Program Files\Lexmark Pro700 Series\lxeemon.exe [770728 2011-01-23] ()
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1115728 2009-12-15] (Dritek System Inc.)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM\...\Run: [LexwareInfoService] - C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-10] (AVAST Software)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2011-11-04] (Realtek Semiconductor)
Winlogon\Notify\AWinNotifyVitaKey MC3000: C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll (Arachnoid Biometrics Identification Group Corp.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung)
HKCU\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKCU\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
HKCU\...\Runonce: [Report] - C:\AdwCleaner\AdwCleaner[S0].txt
MountPoints2: {745ab459-58af-11de-af2e-806e6f6e6963} - F:\SETUP.EXE
MountPoints2: {b2eaf739-9ee3-11df-9989-001e331dd3dc} - E:\autorun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default\...\Run: [ProductReg] - C:\Program Files\Acer\WR_PopUp\ProductReg.exe [ 2008-11-17] (Acer)
HKU\Default\...\RunOnce: [AcerScrSav] - C:\Windows\Acer\run_NB.exe [ 2007-08-21] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [ProductReg] - C:\Program Files\Acer\WR_PopUp\ProductReg.exe [ 2008-11-17] (Acer)
HKU\Default User\...\RunOnce: [AcerScrSav] - C:\Windows\Acer\run_NB.exe [ 2007-08-21] ()
Lsa: [Notification Packages] scecli C:\Program Files\Acer\Acer Bio Protection\PwdFilter
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files\PdaNet for Android\PdaNetPC.exe ()

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:7777
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.freenet.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
BHO: GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files\GfK Internet-Monitor\Gacela2.dll (GfK)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll (Egis)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
Toolbar: HKLM - eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} -  No File
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: haufereader - No CLSID Value - 
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.0.43.49 217.0.43.33 192.168.1.1

Chrome: 
=======
CHR Extension: (Dr.Web Anti-Virus Link Checker) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\aleggpabliehgbeagmfhnodcijcmbonb [2014-01-02]
CHR Extension: (WOT) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-01-02]
CHR Extension: (VTchromizer) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\efbjojhplkelaegfbieplglfidafgoka [2014-01-02]
CHR Extension: (AdBlock) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-02]
CHR Extension: (avast! Online Security) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-25]
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2013-02-25]
CHR Extension: (GfK Internet-Monitor) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef [2014-01-15]
CHR Extension: (Freemake Video Converter) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj [2013-06-08]
CHR Extension: (Google Wallet) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (NotScripts) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn [2014-01-02]
CHR Extension: (Gmail) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-02]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-25]
CHR HKLM\...\Chrome\Extension: [igkejcihojcegdmifcnlkhmnelneogef] - C:\Program Files\GfK Internet-Monitor\Chrome Extension\extension.crx [2014-01-15]
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-06-08]

========================== Services (Whitelisted) =================

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-10] (AVAST Software)
S2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [81504 2008-01-16] ()
S2 DeviceManager; C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe [40960 2009-05-25] ()
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [406016 2009-08-24] (mst software GmbH, Germany)
S2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-06-02] ()
S2 GfK-Proxy-Service; C:\Program Files\GfK-ProxyService\GfK-ProxyService.exe [45544 2013-11-28] ()
S2 GfK-Reporting-Service; C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe [3089384 2013-11-28] ()
S2 GfK-Update-Service; C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe [1376232 2013-11-28] ()
S2 IGBASVC; C:\Program Files\Acer\Acer Bio Protection\BASVC.exe [3520512 2009-06-14] ()
S2 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe [193192 2010-04-14] (Lexmark International, Inc.)
S2 lxee_device; C:\Windows\system32\lxeecoms.exe [598696 2010-04-14] ( )
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
S2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] ()
S2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
S2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
S2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] ()
S2 PLFlash DeviceIoControl Service; C:\Program Files\Nero\Nero BackItUp 4\IoctlSvc.exe [81920 2008-08-29] (Prolific Technology Inc.)
S2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [272024 2007-01-09] ()
S2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [233472 2008-07-19] (Acer Incorporated)
S2 Uniblue DiskRescue; C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe [229648 2008-09-10] (Uniblue)

==================== Drivers (Whitelisted) ====================

R0 AlfaFF; C:\Windows\System32\Drivers\AlfaFF.sys [43184 2009-06-14] (Alfa Corporation)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-10] (AVAST Software)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-01-10] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-12-25] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-01-10] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410528 2014-01-10] (AVAST Software)
S1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-01-10] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2014-01-10] ()
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [28048 2010-02-05] (CSR, plc)
S1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2010-01-01] (Elaborate Bytes AG)
S2 int15; C:\Windows\system32\drivers\int15.sys [69632 2007-01-26] ()
R3 itecir; C:\Windows\System32\DRIVERS\itecir.sys [62496 2011-11-04] (ITE Tech. Inc. )
S3 L1E; C:\Windows\System32\DRIVERS\L1E60x86.sys [54824 2012-10-12] (Atheros Communications, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 NETwNv32; C:\Windows\System32\DRIVERS\NETwNv32.sys [7346176 2012-10-12] (Intel Corporation)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation)
S3 pmkbdfltr; C:\Windows\System32\DRIVERS\pmkbdfltr.sys [15248 2012-10-12] (PenMount)
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [103552 2009-05-25] (TCT International Mobile Ltd)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [23608 2012-10-12] (Synaptics Incorporated)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1759744 2011-01-22] ()
S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-10-16] (Avira GmbH)
S1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2009-09-01] ()
S3 TelekomNM3; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys [35040 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [61424 2008-07-18] (Cyberlink Corp.)
S2 Aspi32; No ImagePath
S1 DritekPortIO; No ImagePath
S3 esgiguard; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x]
S3 S6U12Scanner; system32\drivers\usbscan.sys [x]
S3 usbscan; system32\DRIVERS\usbscan.sys [x]
U5 usbser; C:\Windows\System32\Drivers\usbser.sys [27648 2009-04-11] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-27 12:42 - 2014-01-27 12:42 - 00019298 _____ C:\Users\VM\Desktop\FRST.txt
2014-01-27 11:23 - 2014-01-27 11:23 - 00001162 _____ C:\Users\VM\Desktop\JRT.txt
2014-01-27 11:00 - 2014-01-27 11:00 - 00008483 _____ C:\Users\VM\Desktop\AdwCleaner[S0].txt
2014-01-27 10:37 - 2014-01-27 10:38 - 00008955 _____ C:\Users\VM\Desktop\AdwCleaner[R0].txt
2014-01-27 10:33 - 2014-01-27 10:33 - 00140112 _____ C:\Windows\Minidump\Mini012714-01.dmp
2014-01-27 10:30 - 2014-01-27 12:30 - 00000000 ____D C:\AdwCleaner
2014-01-24 22:04 - 2014-01-24 22:04 - 01236282 _____ C:\Users\VM\Desktop\adwcleaner.exe
2014-01-24 20:39 - 2014-01-24 20:40 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\VM\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-23 22:08 - 2014-01-23 22:08 - 00000000 ____D C:\FRST
2014-01-23 22:07 - 2014-01-23 22:07 - 01222144 _____ (Farbar) C:\Users\VM\Desktop\FRST.exe
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:43 - 00000000 ____D C:\Users\VM\.gimp-2.8
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\AppData\Local\gegl-0.2
2014-01-17 23:16 - 2014-01-23 22:26 - 00000000 ____D C:\Users\VM\Desktop\Mallorca
2014-01-16 21:10 - 2014-01-16 21:10 - 00000000 ____D C:\Windows\LastGood.Tmp
2014-01-16 21:03 - 2007-11-14 15:18 - 00000553 _____ C:\Windows\USetup.iss
2014-01-16 05:23 - 2014-01-16 05:53 - 00000000 ____D C:\Program Files\GfK-ProxyService
2014-01-15 21:48 - 2014-01-24 23:18 - 00000000 ____D C:\Program Files\GfK Internet-Monitor
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-09 23:54 - 2014-01-16 03:09 - 00000000 ____D C:\Program Files\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\cache
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\.android
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 _____ C:\Users\VM\daemonprocess.txt
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Image Converter
2014-01-05 22:37 - 2014-01-19 23:13 - 00000000 ____D C:\Users\VM\Desktop\Handybilder
2014-01-03 08:56 - 2014-01-03 08:56 - 00000427 _____ C:\Users\VM\Desktop\Dateien von CK.lnk
2014-01-02 22:46 - 2014-01-02 22:46 - 00000000 ____D C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-01-01 21:01 - 2014-01-01 21:05 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-01 20:51 - 2014-01-01 20:53 - 90396104 _____ (The GIMP Team                                               ) C:\Users\VM\Downloads\gimp-2.8.10-setup.exe
2013-12-30 20:35 - 2013-12-30 20:36 - 00000000 ____D C:\Program Files\QuickTime
2013-12-30 20:31 - 2013-12-30 20:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-30 20:30 - 2013-12-30 20:30 - 00000000 ____D C:\Program Files\Apple Software Update
2013-12-30 20:21 - 2013-12-30 20:22 - 41404760 _____ (Apple Inc.) C:\Users\VM\Downloads\QuickTimeInstaller.exe

==================== One Month Modified Files and Folders =======

2014-01-27 12:42 - 2014-01-27 12:42 - 00019298 _____ C:\Users\VM\Desktop\FRST.txt
2014-01-27 12:37 - 2011-02-07 20:19 - 00008592 _____ C:\Users\VM\AppData\Local\d3d9caps.dat
2014-01-27 12:30 - 2014-01-27 10:30 - 00000000 ____D C:\AdwCleaner
2014-01-27 12:23 - 2013-12-21 21:48 - 01194396 _____ C:\Windows\PFRO.log
2014-01-27 12:16 - 2006-11-02 13:47 - 00003344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-27 12:16 - 2006-11-02 13:47 - 00003344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-27 12:15 - 2009-02-02 13:15 - 00000147 _____ C:\Windows\system32\agent.log
2014-01-27 11:23 - 2014-01-27 11:23 - 00001162 _____ C:\Users\VM\Desktop\JRT.txt
2014-01-27 11:15 - 2006-11-02 13:47 - 00492008 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-27 11:00 - 2014-01-27 11:00 - 00008483 _____ C:\Users\VM\Desktop\AdwCleaner[S0].txt
2014-01-27 10:38 - 2014-01-27 10:37 - 00008955 _____ C:\Users\VM\Desktop\AdwCleaner[R0].txt
2014-01-27 10:33 - 2014-01-27 10:33 - 00140112 _____ C:\Windows\Minidump\Mini012714-01.dmp
2014-01-27 10:33 - 2013-12-25 17:05 - 305926989 _____ C:\Windows\MEMORY.DMP
2014-01-27 10:33 - 2010-01-11 00:25 - 00000000 ____D C:\Windows\Minidump
2014-01-25 20:54 - 2013-12-21 21:16 - 00009070 _____ C:\Windows\setupact.log
2014-01-25 20:54 - 2009-06-14 07:52 - 01206835 _____ C:\Windows\WindowsUpdate.log
2014-01-24 23:31 - 2009-06-14 08:05 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2014-01-24 23:18 - 2014-01-15 21:48 - 00000000 ____D C:\Program Files\GfK Internet-Monitor
2014-01-24 22:07 - 2009-07-02 00:19 - 00010652 _____ C:\Windows\bthservsdp.dat
2014-01-24 22:04 - 2014-01-24 22:04 - 01236282 _____ C:\Users\VM\Desktop\adwcleaner.exe
2014-01-24 21:25 - 2013-12-24 00:40 - 00000000 ___RD C:\Users\VM\Eigene Bilder
2014-01-24 20:40 - 2014-01-24 20:39 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\VM\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-24 20:40 - 2013-09-12 19:50 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-24 15:05 - 2009-06-28 19:17 - 00000000 ____D C:\Users\VM\AppData\Local\Microsoft Help
2014-01-24 09:45 - 2010-03-07 21:06 - 00400324 _____ C:\ProgramData\lxeeJSW.log
2014-01-24 09:45 - 2010-03-07 20:31 - 00000000 ____D C:\ProgramData\Lx_cats
2014-01-23 22:26 - 2014-01-17 23:16 - 00000000 ____D C:\Users\VM\Desktop\Mallorca
2014-01-23 22:08 - 2014-01-23 22:08 - 00000000 ____D C:\FRST
2014-01-23 22:07 - 2014-01-23 22:07 - 01222144 _____ (Farbar) C:\Users\VM\Desktop\FRST.exe
2014-01-20 14:58 - 2008-01-21 08:16 - 01596168 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-19 23:13 - 2014-01-05 22:37 - 00000000 ____D C:\Users\VM\Desktop\Handybilder
2014-01-17 23:43 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\.gimp-2.8
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\AppData\Local\gegl-0.2
2014-01-17 23:28 - 2009-06-28 17:16 - 00000000 ____D C:\Users\VM
2014-01-16 21:10 - 2014-01-16 21:10 - 00000000 ____D C:\Windows\LastGood.Tmp
2014-01-16 21:10 - 2010-03-07 20:25 - 00226419 _____ C:\ProgramData\lxeescan.log
2014-01-16 21:09 - 2009-02-02 12:21 - 00000000 ____D C:\Windows\system32\RTCOM
2014-01-16 21:02 - 2009-02-02 12:23 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-01-16 21:02 - 2009-02-02 12:17 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2014-01-16 14:25 - 2009-06-28 17:19 - 00000000 ____D C:\Users\VM\AppData\Local\Google
2014-01-16 14:24 - 2009-02-02 12:44 - 00000000 ____D C:\Program Files\Google
2014-01-16 05:53 - 2014-01-16 05:23 - 00000000 ____D C:\Program Files\GfK-ProxyService
2014-01-16 03:11 - 2013-07-22 23:17 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 03:09 - 2014-01-09 23:54 - 00000000 ____D C:\Program Files\McAfee Security Scan
2014-01-16 03:01 - 2006-11-02 11:24 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-10 00:07 - 2013-12-25 14:49 - 00000350 ____H C:\Windows\Tasks\avast! Emergency Update.job
2014-01-10 00:07 - 2013-12-25 14:43 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00180248 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2014-01-10 00:06 - 2013-12-25 14:43 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-10 00:06 - 2013-12-25 14:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee
2014-01-09 23:54 - 2011-06-02 21:31 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-01-09 23:54 - 2009-06-28 22:44 - 00000000 ____D C:\Users\VM\AppData\Local\Adobe
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\cache
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\.android
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 _____ C:\Users\VM\daemonprocess.txt
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Image Converter
2014-01-06 23:27 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2014-01-03 08:56 - 2014-01-03 08:56 - 00000427 _____ C:\Users\VM\Desktop\Dateien von CK.lnk
2014-01-02 22:46 - 2014-01-02 22:46 - 00000000 ____D C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-01-01 21:05 - 2014-01-01 21:01 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-01 20:53 - 2014-01-01 20:51 - 90396104 _____ (The GIMP Team                                               ) C:\Users\VM\Downloads\gimp-2.8.10-setup.exe
2013-12-31 14:06 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-12-30 20:36 - 2013-12-30 20:35 - 00000000 ____D C:\Program Files\QuickTime
2013-12-30 20:35 - 2009-10-27 01:02 - 00000000 ____D C:\ProgramData\Apple Computer
2013-12-30 20:31 - 2013-12-30 20:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-30 20:30 - 2013-12-30 20:30 - 00000000 ____D C:\Program Files\Apple Software Update
2013-12-30 20:30 - 2009-10-27 01:00 - 00000000 ____D C:\ProgramData\Apple
2013-12-30 20:22 - 2013-12-30 20:21 - 41404760 _____ (Apple Inc.) C:\Users\VM\Downloads\QuickTimeInstaller.exe
2013-12-29 21:57 - 2011-05-29 11:57 - 00000000 ____D C:\ProgramData\Netzmanager

Files to move or delete:
====================
C:\Users\VM\AppData\Roaming\desktop.ini


Some content of TEMP:
====================
C:\Users\VM\AppData\Local\Temp\18039uninstall.exe
C:\Users\VM\AppData\Local\Temp\avgnt.exe
C:\Users\VM\AppData\Local\Temp\ose00000.exe
C:\Users\VM\AppData\Local\Temp\Quarantine.exe
C:\Users\VM\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\VM\AppData\Local\Temp\Sqlite3.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-27 12:39

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Mal startet der PC im abgesicherten Modus, mal nicht, aber in beiden Fällen läuft er leider nicht. :-(

Okay, ich kann jetzt im abgesicherten Modus mit Netzwerktreibern wieder online gehen, weil ich nicht mehr über einen Proxyserver online gehe. Was immer das bedeutet. Jedenfalls geht es jetzt und ich warte DRINGENDST auf deine Antwort... *sorry*

Ach ja und MS-Office funktioniert leider auch nicht. Da bekomme ich immer folgende Fehlermeldung:
Siehe Anhang

Liebe Grüße

Claudia

P.S.: Jetzt läuft mein PC nicht, mein Tablet ist eingeschickt und mein Handy ist auch schrott, weil meine Hündin mir das durch einen kurzen aber heftigen Leinenruck aus der Hand geschleudert hat. Ich hab kein gutes Händchen gerade für elektronische Artikel wie es scheint... :'(

Jetzt reparieren wir erstmal, da scheint einiges verbogen:

Die Bilder sind etwas älter. Einfach jeden Schritt machen. Wenn einer nicht geht überspringen, wichtig ist am Schluss auf Start, dann die Häkchen setzen und nochmal start. Entgegen dem Bild alles anhaken! Das kann dauern.

Downloade dir bitte Windows Repair (All In One) von hier.

• Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
• Klicke auf Step 2 und drücke unter Check Disk auf Do It.
  
  
• Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.
  
  
• Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.
  
  
• Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
• Hake Restart System when Finished an.
• Drücke Start.
  
  

Es funktioniert einfach nicht, entweder hängt die Kiste sich beim booten auf, oder ich bin im abgesicherten Modus und dann klappt es nicht so richtig. .. * verzweifelt bin*

Hi Schrauber!

Ich hab alles so gemacht, wie du gesagt hast, aber es war sehr schwierig. Das Ergebnis ist gleich Null, denn die Office-Programme laufen immer noch nicht. :'(

Hab ich was falsch gemacht??

In erster Linie wäre mir aber wichtig, dass das Teil erst mal richtig hochfährt...

Guten Morgen, Schrauber!

Ich habe mir mal in der Systemsteuerung die Probleme angesehen, vielleicht hilft dir das ja bei der Lösungsfindung? Das Gerät zeigt an, dass aktuell die "SubInAcl" nicht funktioniert - was immer das sein mag... Außerdem funktionierte am 24.01. auch der "Windows Driver Foundation - Benutzermodus Treiberframework-Hostprozess" nicht.

Ich verstehe das alles gar nicht, denn der Rechner ist vorher eigentlich ganz gut gelaufen und wir haben doch nur Adware entfernt, oder?

Was soll ich denn jetzt als nächstes machen???

Liebe Grüße
Claudia

Dann versuchen wir jetzt was ganz andres:

Mach bitte mal eine Systemwiederherstellung auf einen Punkt vor dem Scan mit Malwarebytes.

Ähhh, okay. Und wie geht das?

Ah, okay . Ich habe es schon gefunden. Der Rechner arbeitet gerade daran. ..

Also, ich kann das ja nur im abgesicherten Modus starten. Wie lange dauert das denn so, das läuft jetzt schon ewig. .. Ist das okay so, oder hat sich der Rechner schon wieder aufgehängt? ??

Also, das funktioniert irgendwie alles nicht, auch nicht mit der F8-Taste. Da hat der PC zwar den Vorgang abgeschlossen, aber nach dem Neustart war alles beim alten, außer, dass er jetzt gar nicht mehr im normalen Modus hochfährt... Ich kriege noch die Pimpanellen... :'(

Die Kiste ist doch gelaufen... *grmpf*

Hast Du die DVD zur Hand? Bzw wird ein Computer reaprieren angeboten wenn Du F8 drückst (da woa uch der Safe Mode angezeigt wird)?