Hallo liebes Trojaner-Board,

auf dem PC meines Vaters hat Bitdefender heute einen Virus blockiert und desinfiziert (ein paar Minuten nach dem booten, beim checken von Mails in Thunderbird, allerdings wurden nur zwei Anhänge mit pdfs von vertrauenswürdigen Quellen geöffnet, die auch geprüft habe).

Virusname
GenVariant.Jaik.462

Zugriff durch
rundll32.exe

Adresse
C:\Program Files(x86)\Zarb 4\Zarb.exe


Zarb ist ein Programm für Word mit dem man Arbeitsblätter erstellen kann.

Ein Tiefenscan hat anschließend nichts gefunden, ich traue dem Braten aber nicht ganz. Daher würde ich gerne wissen, was ich noch prüfen soll, damit ich (relativ) sicher sein kann, dass der PC sauber ist.

bitfedender log:

BitDefender Protokolldatei 


Produkt BitDefender Internet Security 2011
Prüfaufgabe: Tiefensystem-Scan
Berichtsdatum: Dienstag, 4. Februar 2014 21:22:13
Berichtspfad: C:\ProgramData\BitDefender\Desktop\Profiles\Logs\dcf483c4-26d0-4e6f-ba28-6a53a00adae1\1391541061_1_01.xml

 
Prüfpfad: 
Pfad : C:\
Pfad : D:\
Pfad : I:\
Pfad : M:\
 

[-]Zusammenfassung Scan-Ergebnisse 

[-]Nicht geprüfte Objekte: 
Objektpfad Grund: Abschluss Status 

Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_04einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: D:\Eigene Dokumente\Telekom\2007_05einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_05einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: D:\Eigene Dokumente\Telekom\2007_06einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_06einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: D:\Eigene Dokumente\Telekom\2007_07einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_07einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: D:\Eigene Dokumente\Telekom\2007_08einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_08einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: D:\Eigene Dokumente\Telekom\2007_10einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: D:\Eigene Dokumente\Telekom\2007_09einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: D:\Eigene Dokumente\Telekom\2006_11einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_10einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_09einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2006_11einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: D:\Eigene Dokumente\Telekom\2007_02einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: D:\Eigene Dokumente\Telekom\2006_12einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_02einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2006_12einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
Datei: D:\Eigene Dokumente\Telekom\2007_04einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 
 

[-]Ausführliche Scan-Zusammenfassung 

[-]Standard 
Geprüfte Objekte: 688143
Infizierte Objekte: 0 (es wurden keine infizierten Objekte gefunden)
Verdächtige Objekte: 0 (es wurden keine verdächtigen Objekte gefunden)
Geklärte Objekte: 0 (keine Bedrohungen während des Prüfvorgangs gefunden)
Ungeklärte Objekte: 0 (keine ungelösten Probleme)
 
[-]Erweitert 
Vergangene Zeit: 01: 11: 11
Dateien pro Sekunde: 161
Übersprungene Objekte: 218135
Passwortgeschützte Objekte: 20
Überkomprimierte Objekte: 0
Geprüfte Archive: 2243
Input-Output Fehler: 58
Geprüfte Boot-Sektoren: 8
Geprüfte Prozesse: 4860
Infizierte Prozesse: 0
Geprüfte Registry Schlüssel: 4722
Infizierte Registry Schlüssel: 0
Geprüfte Cookies: 75
Infizierte Cookies: 0
         

FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2014
Ran by *** (administrator) on *** on 04-02-2014 22:18:04
Running from C:\Users\***\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\pchooklaunch64.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\Antispam32\pchooklaunch32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
() C:\Windows\SysWOW64\XSrvSetup.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(CANON INC.) C:\Program Files (x86)\Canon\MyPrinter\BJMYPRT.EXE
(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
() C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Logitech, Inc.) C:\Program Files (x86)\Logitech\SetPoint\SetPoint.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
(Dropbox, Inc.) C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\Logitech\SetPoint\x86\SetPoint32.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NANotify.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2009-12-08] (Realtek Semiconductor)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files (x86)\Canon\MyPrinter\BJMyPrt.exe [2710856 2009-11-02] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)
HKLM\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2011\ieshow.exe [109344 2011-06-02] (BitDefender S.R.L.)
HKLM\...\Run: [BDAgent] - C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe [2026680 2011-07-11] (BitDefender S.R.L.)
HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] - C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2011\Antispam32\ieshow.exe [92352 2011-06-02] (BitDefender S.R.L.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [WD Drive Unlocker] - C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1688008 2012-06-13] (Western Digital)
HKLM-x32\...\Run: [WD Quick View] - C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5237256 2012-12-20] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [Remote Control Editor] - C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1689088 2010-06-09] (Elgato Systems)
HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [dradio-RecorderTimer] - C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [385024 2010-05-04] (AMD)
HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [FileHippo.com] - C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\MountPoints2: {162a9588-c8b7-11df-97db-6cf049e199b3} - G:\setup.EXE /AUTORUN
Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x44C531B77941CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -  No File
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Bitdefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2011\IEToolbar.dll (BitDefender S.R.L.)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - Bitdefender Toolbar - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2011\Antispam32\IEToolbar.dll (BitDefender S.R.L.)
Toolbar: HKLM-x32 - No Name - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} -  No File
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=1.1.11 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: TVU Web Player - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\firefox@tvunetworks.com [2010-08-14]
FF Extension: TCAST Plugin - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\tcastv1@tom.com [2010-08-14]
FF Extension: WOT - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-26]
FF Extension: DownloadHelper - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]
FF Extension: Flash and Video Download - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-01-23]
FF Extension: Ghostery - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\firefox@ghostery.com.xpi [2013-08-18]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014-01-19]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Adblock Plus - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-30]
FF HKLM\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\
FF Extension: BitDefender Antiphishing Toolbar - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\ []
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\
FF Extension: bdToolbar - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\ []
FF HKLM-x32\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\
FF Extension: BitDefender Antiphishing Toolbar - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\ []
FF HKLM-x32\...\Firefox\Extensions: [{09F060FA-566D-42D7-BF79-97AB30863433}] - C:\Program Files (x86)\Steganos Privacy Suite 12\pfplugin
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 12\spmplugin3
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\
FF Extension: bdToolbar - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\ []

Chrome: 
=======
CHR HomePage: about:blank
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll No File
CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Nitro PDF Plug-In) - C:\Program Files\Nitro PDF Reader\npnitromozilla.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-04-28]
CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-04-28]
CHR Extension: (WOT) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2013-04-28]
CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-28]
CHR Extension: (Google-Suche) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-28]
CHR Extension: (AdBlock) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-04-28]
CHR Extension: (Ghostery) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2013-04-28]
CHR Extension: (Google Wallet) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-28]
CHR Extension: (Google Mail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-28]

==================== Services (Whitelisted) =================

R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [65536 2009-08-06] ()
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-03-26] (Nitro PDF Software)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [271760 2009-04-15] ()
S3 Update Server; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [467248 2010-11-30] (BitDefender)
R2 Updatesrv; C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe [53224 2011-06-02] (BitDefender S.R.L.)
R2 VSSERV; C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe [2660624 2011-07-11] (BitDefender S.R.L.)
S2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1155088 2012-12-20] (Western Digital )
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [248248 2012-09-06] (Western Digital)
S2 WDRulesService; C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe [1178128 2012-12-20] (Western Digital )
S2 Secunia Update Agent; "C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service [X]

==================== Drivers (Whitelisted) ====================

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138872 2011-07-28] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138872 2011-07-28] (SlySoft, Inc.)
S3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [591968 2010-11-29] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [1186272 2010-11-29] (BitDefender)
R3 BDFM; C:\Windows\System32\DRIVERS\bdfm.sys [162896 2010-05-13] (BitDefender S.R.L. Bucharest, ROMANIA)
R1 Bdfndisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [88144 2010-08-20] (BitDefender)
R0 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [431176 2011-04-01] (BitDefender)
R1 bdfwfpf; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [99408 2010-08-20] (BitDefender)
R3 MTSBDA; C:\Windows\System32\DRIVERS\MtsBda.sys [348224 2009-11-09] (TerraTec Provide)
R3 MtsHID; C:\Windows\System32\DRIVERS\MtsHid.sys [25664 2009-11-09] (TerraTec Provide)
R1 SLEE_17_DRIVER; C:\Windows\Sleen1764.sys [108256 2011-09-12] (Softwareentwicklung Remus - ArchiCrypt - )
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-10-19] (Duplex Secure Ltd.)
R1 STGMFEngine64; C:\Windows\system32\drivers\STGMFEngine64.sys [28576 2011-09-12] (Softwareentwicklung Remus - ArchiCrypt.com)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-04 22:18 - 2014-02-04 22:18 - 00021880 _____ () C:\Users\***\Downloads\FRST.txt
2014-02-04 22:17 - 2014-02-04 22:18 - 00000000 ____D () C:\FRST
2014-02-04 22:16 - 2014-02-04 22:16 - 00380416 _____ () C:\Users\***\Downloads\gqsfq858.exe
2014-02-04 22:15 - 2014-02-04 22:16 - 02080256 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe
2014-02-04 22:15 - 2014-02-04 22:15 - 00000000 _____ () C:\Users\***\AppData\Roaming\.NANotifyHere
2014-02-04 22:08 - 2014-02-04 22:08 - 00000584 _____ () C:\Users\***\Downloads\defogger_disable.log
2014-02-04 22:08 - 2014-02-04 22:08 - 00000020 _____ () C:\Users\***\defogger_reenable
2014-02-04 22:07 - 2014-02-04 22:07 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe
2014-02-03 20:10 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-02-02 21:06 - 2014-02-03 10:05 - 00000000 ____D () C:\Users\***\Desktop\Wohnungen
2014-01-22 18:10 - 2014-01-22 19:03 - 00000000 ____D () C:\Users\***\AppData\Roaming\vlc
2014-01-22 18:07 - 2014-01-22 18:07 - 24097311 _____ () C:\Users\***\Downloads\vlc-2.1.2-win32.exe
2014-01-21 10:32 - 2014-01-21 18:00 - 00000000 ____D () C:\Users\***\AppData\Local\Nero
2014-01-21 10:32 - 2014-01-21 10:33 - 00000000 ____D () C:\Users\***\AppData\Roaming\Nero
2014-01-21 10:24 - 2014-01-21 10:24 - 00000000 ____D () C:\Windows\System32\Tasks\Nero
2014-01-21 09:54 - 2014-01-21 10:06 - 288310920 _____ (Nero AG) C:\Users\***\Downloads\Nero2014-15.0.07100_trial.exe
2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Roaming\Ashampoo
2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Local\ashampoo
2014-01-21 09:51 - 2014-01-21 09:52 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-21 09:45 - 2014-01-21 09:48 - 92789928 _____ (Ashampoo GmbH & Co. KG ) C:\Users\***\Downloads\ashampoo_burning_studio_2014_12.0.5_15376.exe
2014-01-19 11:35 - 2014-01-19 11:18 - 139448593 _____ () C:\Users\***\Desktop\Afrika TV.flv
2014-01-19 10:52 - 2014-01-19 11:02 - 93897148 _____ () C:\Users\***\Desktop\WissensWerte_ Migration - YouTube [720p].mp4
2014-01-18 15:35 - 2014-01-18 15:35 - 00000000 ____D () C:\Users\***\Desktop\Wohnungsgedöns
2014-01-15 20:14 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\***\AppData\Roaming\Foxit Software
2014-01-15 20:12 - 2014-01-15 20:13 - 23867560 _____ (Mozilla) C:\Users\***\Downloads\Firefox_Setup_26.0.exe
2014-01-15 20:11 - 2014-01-15 20:14 - 32747816 _____ (Nero AG) C:\Users\***\Downloads\Nero_BurnLite-10.0.10600.exe
2014-01-15 19:53 - 2014-01-15 19:53 - 03765592 _____ () C:\Users\***\Downloads\Paint.NET.3.5.11.Install.exe
2014-01-15 19:51 - 2014-01-15 19:53 - 33440584 _____ (Foxit Corporation ) C:\Users\***\Downloads\FoxitReader612.1224_enu_Setup.exe
2014-01-15 19:46 - 2014-01-15 19:46 - 01977432 _____ () C:\Users\***\Downloads\winrar-x64-501.exe
2014-01-15 19:45 - 2014-01-15 19:45 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-15 19:45 - 2014-01-15 19:44 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-15 19:44 - 2014-01-15 19:44 - 00000000 ____D () C:\Program Files\Java
2014-01-15 19:13 - 2014-01-15 19:15 - 50837888 _____ (Adobe Systems Incorporated) C:\Users\***\Downloads\AdbeRdr11006_en_US.exe
2014-01-15 19:13 - 2014-01-15 19:15 - 30796712 _____ (Oracle Corporation) C:\Users\***\Downloads\jre-7u51-windows-x64.exe
2014-01-15 10:00 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 10:00 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 10:00 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-05 19:56 - 2014-01-05 19:56 - 00000000 ____D () C:\Users\***\dwhelper

==================== One Month Modified Files and Folders =======

2014-02-04 22:18 - 2014-02-04 22:18 - 00021880 _____ () C:\Users\***\Downloads\FRST.txt
2014-02-04 22:18 - 2014-02-04 22:17 - 00000000 ____D () C:\FRST
2014-02-04 22:16 - 2014-02-04 22:16 - 00380416 _____ () C:\Users\***\Downloads\gqsfq858.exe
2014-02-04 22:16 - 2014-02-04 22:15 - 02080256 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe
2014-02-04 22:16 - 2010-08-13 11:37 - 01485345 _____ () C:\Windows\WindowsUpdate.log
2014-02-04 22:15 - 2014-02-04 22:15 - 00000000 _____ () C:\Users\***\AppData\Roaming\.NANotifyHere
2014-02-04 22:13 - 2013-02-25 19:21 - 00000000 ____D () C:\Users\***\AppData\Roaming\Dropbox
2014-02-04 22:11 - 2013-04-28 09:34 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-04 22:11 - 2010-08-14 16:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Sunbird
2014-02-04 22:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-04 22:10 - 2009-07-14 05:51 - 00143414 _____ () C:\Windows\setupact.log
2014-02-04 22:09 - 2009-07-14 05:45 - 00015344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-04 22:09 - 2009-07-14 05:45 - 00015344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-04 22:08 - 2014-02-04 22:08 - 00000584 _____ () C:\Users\***\Downloads\defogger_disable.log
2014-02-04 22:08 - 2014-02-04 22:08 - 00000020 _____ () C:\Users\***\defogger_reenable
2014-02-04 22:08 - 2010-08-13 11:42 - 00000000 ____D () C:\Users\***
2014-02-04 22:07 - 2014-02-04 22:07 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe
2014-02-04 21:42 - 2013-12-11 16:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-04 21:42 - 2013-12-11 16:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-04 20:49 - 2013-12-12 19:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-04 19:54 - 2010-09-20 16:48 - 00000000 ____D () C:\Program Files (x86)\Zarb 4
2014-02-04 19:42 - 2013-12-11 16:41 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-04 19:05 - 2013-04-28 09:34 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-03 20:10 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-02-03 20:10 - 2014-01-15 20:14 - 00000000 ____D () C:\Users\***\AppData\Roaming\Foxit Software
2014-02-03 10:05 - 2014-02-02 21:06 - 00000000 ____D () C:\Users\***\Desktop\Wohnungen
2014-02-03 10:04 - 2010-08-14 14:04 - 00000000 ____D () C:\Users\***\AppData\Roaming\Canon
2014-01-29 16:52 - 2010-08-14 14:04 - 00044085 _____ () C:\Users\***\Sti_Trace.log
2014-01-27 16:49 - 2010-08-13 11:58 - 00100752 _____ () C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-27 16:48 - 2009-07-14 05:45 - 00388096 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-26 11:01 - 2013-06-21 16:04 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-22 19:03 - 2014-01-22 18:10 - 00000000 ____D () C:\Users\***\AppData\Roaming\vlc
2014-01-22 18:07 - 2014-01-22 18:07 - 24097311 _____ () C:\Users\***\Downloads\vlc-2.1.2-win32.exe
2014-01-22 17:12 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-01-21 20:36 - 2013-12-11 16:41 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-21 19:11 - 2010-08-13 13:08 - 00000000 ____D () C:\ProgramData\CyberLink
2014-01-21 18:00 - 2014-01-21 10:32 - 00000000 ____D () C:\Users\***\AppData\Local\Nero
2014-01-21 15:47 - 2010-08-13 12:35 - 00647274 _____ () C:\Windows\PFRO.log
2014-01-21 10:33 - 2014-01-21 10:32 - 00000000 ____D () C:\Users\***\AppData\Roaming\Nero
2014-01-21 10:32 - 2010-08-26 12:52 - 00000000 ____D () C:\ProgramData\Nero
2014-01-21 10:24 - 2014-01-21 10:24 - 00000000 ____D () C:\Windows\System32\Tasks\Nero
2014-01-21 10:24 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Cursors
2014-01-21 10:23 - 2010-08-26 12:52 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-01-21 10:06 - 2014-01-21 09:54 - 288310920 _____ (Nero AG) C:\Users\***\Downloads\Nero2014-15.0.07100_trial.exe
2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Roaming\Ashampoo
2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Local\ashampoo
2014-01-21 09:52 - 2014-01-21 09:51 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-21 09:48 - 2014-01-21 09:45 - 92789928 _____ (Ashampoo GmbH & Co. KG ) C:\Users\***\Downloads\ashampoo_burning_studio_2014_12.0.5_15376.exe
2014-01-19 11:34 - 2009-07-14 18:58 - 00654150 _____ () C:\Windows\system32\perfh007.dat
2014-01-19 11:34 - 2009-07-14 18:58 - 00130022 _____ () C:\Windows\system32\perfc007.dat
2014-01-19 11:34 - 2009-07-14 06:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-01-19 11:18 - 2014-01-19 11:35 - 139448593 _____ () C:\Users\***\Desktop\Afrika TV.flv
2014-01-19 11:02 - 2014-01-19 10:52 - 93897148 _____ () C:\Users\***\Desktop\WissensWerte_ Migration - YouTube [720p].mp4
2014-01-18 15:35 - 2014-01-18 15:35 - 00000000 ____D () C:\Users\***\Desktop\Wohnungsgedöns
2014-01-18 10:37 - 2013-02-25 19:21 - 00000000 ____D () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-18 10:37 - 2010-08-13 11:42 - 00000000 ___RD () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-15 20:19 - 2013-07-16 21:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 20:17 - 2010-08-13 12:22 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 20:14 - 2014-01-15 20:11 - 32747816 _____ (Nero AG) C:\Users\***\Downloads\Nero_BurnLite-10.0.10600.exe
2014-01-15 20:14 - 2013-12-22 10:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-15 20:14 - 2012-05-12 13:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-15 20:14 - 2010-08-14 14:16 - 00000000 ____D () C:\Program Files (x86)\Foxit Software
2014-01-15 20:13 - 2014-01-15 20:12 - 23867560 _____ (Mozilla) C:\Users\***\Downloads\Firefox_Setup_26.0.exe
2014-01-15 19:56 - 2010-08-14 14:18 - 00000000 ____D () C:\Program Files (x86)\Paint.net
2014-01-15 19:55 - 2010-08-14 14:17 - 00000000 ____D () C:\Users\***\AppData\Local\Paint.NET
2014-01-15 19:54 - 2013-07-14 22:05 - 00000000 ____D () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-01-15 19:54 - 2011-07-14 16:27 - 00000000 ____D () C:\Program Files\Winrar
2014-01-15 19:53 - 2014-01-15 19:53 - 03765592 _____ () C:\Users\***\Downloads\Paint.NET.3.5.11.Install.exe
2014-01-15 19:53 - 2014-01-15 19:51 - 33440584 _____ (Foxit Corporation ) C:\Users\***\Downloads\FoxitReader612.1224_enu_Setup.exe
2014-01-15 19:46 - 2014-01-15 19:46 - 01977432 _____ () C:\Users\***\Downloads\winrar-x64-501.exe
2014-01-15 19:45 - 2014-01-15 19:45 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-15 19:44 - 2014-01-15 19:45 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-15 19:44 - 2014-01-15 19:44 - 00000000 ____D () C:\Program Files\Java
2014-01-15 19:15 - 2014-01-15 19:13 - 50837888 _____ (Adobe Systems Incorporated) C:\Users\***\Downloads\AdbeRdr11006_en_US.exe
2014-01-15 19:15 - 2014-01-15 19:13 - 30796712 _____ (Oracle Corporation) C:\Users\***\Downloads\jre-7u51-windows-x64.exe
2014-01-05 19:56 - 2014-01-05 19:56 - 00000000 ____D () C:\Users\***\dwhelper

Some content of TEMP:
====================
C:\Users\***\AppData\Local\Temp\AskSLib.dll
C:\Users\***\AppData\Local\Temp\DE_de_Avery_AW31.exe
C:\Users\***\AppData\Local\Temp\DTLite4454-0316.exe
C:\Users\***\AppData\Local\Temp\DTLite4461-0327.exe
C:\Users\***\AppData\Local\Temp\DTLite4471-0333.exe
C:\Users\***\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe
C:\Users\***\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe
C:\Users\***\AppData\Local\Temp\jre-6u22-windows-i586-iftw-rv.exe
C:\Users\***\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\***\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\***\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe
C:\Users\***\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\***\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe
C:\Users\***\AppData\Local\Temp\nitro_pdf_reader_x64.exe
C:\Users\***\AppData\Local\Temp\nitro_reader3_x64.exe
C:\Users\***\AppData\Local\Temp\ose00000.exe
C:\Users\***\AppData\Local\Temp\TerraTec_Home_Cinema_6.11.05.exe
C:\Users\***\AppData\Local\Temp\TerraTec_Home_Cinema_6.15.11.exe
C:\Users\***\AppData\Local\Temp\uninstall-temp.exe
C:\Users\***\AppData\Local\Temp\vlc-2.0.4-win32.exe
C:\Users\***\AppData\Local\Temp\vlc-2.0.5-win32.exe
C:\Users\***\AppData\Local\Temp\vlc-2.1.2-win64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-29 08:36

==================== End Of Log ============================
         

Defogger hab ich benutzt, der hat aber kein log erstellt.
Die restlichen logs gibt's in neuen Beiträgen, da sonst der Text zu lang ist.

Tausend Dank im Voraus!

addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2014
Ran by *** at 2014-02-04 22:19:13
Running from C:\Users\***\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: BitDefender Antivirus (Enabled - Up to date) {50909708-FF80-02AF-F814-B28405891E92}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: BitDefender AntiSpyware (Enabled - Up to date) {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F}
FW: BitDefender Firewall (Enabled) {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9}

==================== Installed Programs ======================

Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Photoshop Elements 2.0 (x32 Version: 2.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) (x32 Version: 11.0.06 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - ATI Technologies Inc.) Hidden
AnyDVD (x32 Version: 6.8.5.0 - SlySoft)
ArcSoft PhotoStudio 5.5 (x32 Version:  - ArcSoft)
ATI AVIVO64 Codecs (Version: 11.1.0.50504 - ATI Technologies Inc.) Hidden
Avery Wizard 3.1 (x32 Version: 3.1.8 - Avery)
BitDefender Internet Security 2011 (Version: 14.0.29 - BitDefender)
BitDefender Internet Security 2011 (Version: 14.0.29 - BitDefender) Hidden
Canon CanoScan Toolbox 4.9 (x32 Version:  - )
Canon Utilities Easy-PhotoPrint EX (x32 Version:  - )
Canon Utilities My Printer (x32 Version:  - )
Canon Utilities Solution Menu (x32 Version:  - )
CanoScan LiDE 200 Scanner Driver (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CDDRV_Installer (Version: 4.60 - Logitech) Hidden
Cinergy S2 PCI V1.01.01.901 (x32 Version: 1.01.01.901 - )
CloneDVD2 (x32 Version: 2.9.3.0 - Elaborate Bytes)
CloudReading (x32 Version: 1.1.47.1220 - Foxit Corporation)
Cuttermaran 1.70 (x32 Version: 1.7.0 - to***)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)
dradio-Recorder Version 3.02.6 (x32 Version:  - )
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
erLT (x32 Version: 1.20.0137 - Logitech, Inc.) Hidden
FileHippo.com Update Checker (x32 Version:  - )
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Foxit Reader (x32 Version: 6.1.2.1224 - Foxit Corporation)
Free Video Dub version 1.8 (x32 Version:  - DVDVideoSoft Limited.)
Free YouTube Download version 3.1.30.627 (x32 Version: 3.1.30.627 - DVDVideoSoft Ltd.)
Gigabyte Raid Cinfigurer (x32 Version: 1.00.0001 - GIGABYTE Technologies, Inc.)
Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HashTab 4.0.0.1 (Version: 4.0.0.1 - Implbits Software)
HydraVision (x32 Version: 4.2.162.0 - ATI Technologies Inc.) Hidden
ImgBurn (x32 Version: 2.5.5.0 - LIGHTNING UK!)
Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle)
KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden
LG CyberLink Power2Go (x32 Version: 6.2.3325 - CyberLink Corp.)
LG CyberLink Power2Go (x32 Version: 6.2.3325 - CyberLink Corp.) Hidden
LG CyberLink PowerBackup (x32 Version: 2.5.5529 - CyberLink Corp.)
LG CyberLink PowerDVD (x32 Version: 8.0.2815d - CyberLink Corp.)
LG CyberLink PowerDVD (x32 Version: 8.0.2815d - CyberLink Corp.) Hidden
LG CyberLink PowerProducer (x32 Version: 5.0.2.2130 - CyberLink Corp.)
LG CyberLink PowerProducer (x32 Version: 5.0.2.2130 - CyberLink Corp.) Hidden
LG Power Tools (x32 Version: 6.0.3316 - CyberLink Corp.)
LG Power Tools (x32 Version: 6.0.3316 - CyberLink Corp.) Hidden
Logitech SetPoint (x32 Version: 4.80 - Logitech)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Manual CanoScan 8400F (x32 Version:  - )
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2000 Premium (x32 Version: 9.00.2816 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
MozBackup 1.4.10 (x32 Version:  - Pavel Cvrcek)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0 - NEC Electronics Corporation) Hidden
Nero 2014 (x32 Version: 15.0.07100 - Nero AG)
Nero 7 Premium (x32 Version: 7.02.6445 - Nero AG)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20064 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden
Nero Burning Core (x32 Version: 15.0.25001 - Nero AG) Hidden
Nero Burning ROM (x32 Version: 15.0.25001 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.16700 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.23200 - Nero AG) Hidden
Nero Device Updates (x32 Version: 15.0.1002 - Nero AG) Hidden
Nero Disc Menus Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Disc to Device (x32 Version: 15.0.12032 - Nero AG) Hidden
Nero Effects Basic (x32 Version: 15.0.10011 - Nero AG) Hidden
Nero Express (x32 Version: 15.0.25001 - Nero AG) Hidden
Nero Express Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero Info (x32 Version: 15.1.0030 - Nero AG)
Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Launcher (x32 Version: 15.0.12000 - Nero AG) Hidden
Nero MediaHome (x32 Version: 1.22.3600 - Nero AG) Hidden
Nero MediaHome Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero PiP Effects Basic (x32 Version: 15.0.10008 - Nero AG) Hidden
Nero Recode (x32 Version: 15.0.25000 - Nero AG) Hidden
Nero Recode Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 15.0.2000 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden
Nero SharedVideoCodecs (x32 Version: 1.0.15005 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.13300.42.0 - Nero AG) Hidden
Nero Video (x32 Version: 15.0.23000 - Nero AG) Hidden
Nero Video Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nitro Reader 3 (Version: 3.5.2.10 - Nitro)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation)
Paint.NET v3.5.11 (Version: 3.61.0 - dotPDN LLC)
PDFCreator (x32 Version: 1.2.1 - Frank Heindörfer, Philip Chinery)
PDF-Viewer (Version: 2.5.208.0 - Tracker Software Products Ltd)
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Prerequisite installer (x32 Version: 15.0.0005 - Nero AG) Hidden
Realtek Ethernet Controller Driver For Windows Vista and Later (x32 Version: 1.00.0009 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5998 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.93 (x32 Version: 1.93 - VS Revo Group)
ScanSoft OmniPage SE 4 (x32 Version: 15.2.0020 - Nuance Communications, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
StreamTransport version: 1.0.2.2171 (x32 Version:  - )
SUPER © Version 2010.bld.38 (May 2, 2010) (x32 Version: Version 2010.bld.38 (May 2, 2010) - eRightSoft)
TerraTec Home Cinema (x32 Version: 6.15.11 - )
TerraTec Remote Control (x32 Version: 5.28 - )
TrueCrypt (x32 Version: 7.1a - TrueCrypt Foundation)
Ugrib RC1 (x32 Version: Release Candidate 0.2.4 - GRIB.US)
Uninstall 1.0.0.1 (x32 Version:  - )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
WD Drive Utilities (x32 Version: 1.0.1.5 - Western Digital)
WD Security (x32 Version: 1.0.3.3 - Western Digital Technologies, Inc.)
WD SmartWare (Version: 1.6.5.2 - Western Digital Technologies, Inc.)
WDR RadioRecorder (x32 Version:  - Tobit.Software)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 5.01 (64-bit) (Version: 5.01.0 - win.rar GmbH)
Yahoo! Detect (x32 Version:  - )
Zarb 4.1 (x32 Version: 4.1 - Hans Zybura Software)

==================== Restore Points  =========================

26-01-2014 09:58:31 Configured Microsoft Office Home and Student 2010
02-02-2014 16:47:10 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {22C59227-92C9-4552-9C68-71BBA9E2E998} - System32\Tasks\{7B66487D-722B-402D-AE0D-3084BD5C555C} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {3E503BE1-A33F-4D0C-9FDC-187DFE3B59A8} - System32\Tasks\{B90E5441-29D9-4A1C-9C50-1F51E93D821D} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {46024402-51FB-42C5-8660-53E049A23C6B} - System32\Tasks\{657291B0-0BFD-4A3A-9A1F-F5889CB08446} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {47708429-E7F9-4D15-B33C-44C88F04735F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-04] (Adobe Systems Incorporated)
Task: {4FD4F9A5-4534-4D21-9086-8E2CEDDBA845} - System32\Tasks\{3D85CAF6-E721-4BA9-9617-33BAC2333FC3} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {5DE738D0-0838-4610-A126-1C779BE1914A} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2013-10-16] (Nero AG)
Task: {6E974F43-8706-41CC-B826-36F116E96B7D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-28] (Google Inc.)
Task: {89EAB45E-892D-4159-BD8A-E146DBA9DDCD} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {8F27EFB3-D478-470A-8DEB-B0ABF5657D89} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {9AA10EF2-71A7-4F21-8FE7-6073CCD2EFA4} - System32\Tasks\{993C17D7-C415-40E6-9475-E9E72F17CA20} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {ADEF4491-09C4-4D59-8231-2EBC0F1B87B4} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)
Task: {C96BDE44-BDDC-4AEB-A314-DDD871F4E6C8} - System32\Tasks\{D0D1ACEA-CF31-41CC-B365-C41803D46BE7} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {CEC4AD92-6D96-49D7-81D6-7D0DB2142127} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {D67B1C9B-58C5-4C69-8748-D88A65E53FE1} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {DB762D46-CEE1-49C4-A09A-8EA9B65D9C51} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-28] (Google Inc.)
Task: {EB220798-E1B2-4E61-A157-BE1F39ACAE40} - System32\Tasks\{B9BD9FF2-6B43-4239-9C88-E1FD1F07544C} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-06-02 16:23 - 2011-06-02 16:23 - 00239648 _____ () C:\Program Files\BitDefender\BitDefender 2011\txmlutil.dll
2011-06-02 16:22 - 2011-06-02 16:22 - 00161368 _____ () C:\Program Files\BitDefender\BitDefender 2011\connector.dll
2011-07-11 19:19 - 2011-07-11 19:19 - 00245328 _____ () C:\Program Files\BitDefender\BitDefender 2011\framework.dll
2010-09-06 17:05 - 2009-07-20 11:35 - 00018960 _____ () C:\Program Files (x86)\Logitech\SetPoint\khalwrapper.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\***\AppData\Roaming\Dropbox\bin\libcef.dll
2013-12-22 10:46 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/04/2014 07:53:26 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (02/04/2014 07:52:50 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/03/2014 06:33:28 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (02/03/2014 06:32:56 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/02/2014 05:43:19 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (02/02/2014 05:42:50 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/30/2014 08:32:09 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (01/30/2014 08:31:38 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/28/2014 08:42:09 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (01/28/2014 08:41:40 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.


System errors:
=============
Error: (02/04/2014 10:11:38 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WD Backup" ist vom Dienst "WD Rules" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1053

Error: (02/04/2014 10:11:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WD Rules" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/04/2014 10:11:34 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst WD Rules erreicht.

Error: (02/04/2014 10:11:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/04/2014 06:57:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WD Backup" ist vom Dienst "WD Rules" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1053

Error: (02/04/2014 06:57:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WD Rules" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/04/2014 06:57:03 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst WD Rules erreicht.

Error: (02/04/2014 06:56:30 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/03/2014 10:24:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/03/2014 05:57:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (02/04/2014 07:53:26 PM) (Source: SideBySide)(User: )
Description: assemblyIdentitylanguage*c:\program files (x86)\mozbackup\dll\DelZip179.dllc:\program files (x86)\mozbackup\dll\DelZip179.dll8

Error: (02/04/2014 07:52:50 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\dradio-recorder\phonostar.exe

Error: (02/03/2014 06:33:28 PM) (Source: SideBySide)(User: )
Description: assemblyIdentitylanguage*c:\program files (x86)\mozbackup\dll\DelZip179.dllc:\program files (x86)\mozbackup\dll\DelZip179.dll8

Error: (02/03/2014 06:32:56 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\dradio-recorder\phonostar.exe

Error: (02/02/2014 05:43:19 PM) (Source: SideBySide)(User: )
Description: assemblyIdentitylanguage*c:\program files (x86)\mozbackup\dll\DelZip179.dllc:\program files (x86)\mozbackup\dll\DelZip179.dll8

Error: (02/02/2014 05:42:50 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\dradio-recorder\phonostar.exe

Error: (01/30/2014 08:32:09 AM) (Source: SideBySide)(User: )
Description: assemblyIdentitylanguage*c:\program files (x86)\mozbackup\dll\DelZip179.dllc:\program files (x86)\mozbackup\dll\DelZip179.dll8

Error: (01/30/2014 08:31:38 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\dradio-recorder\phonostar.exe

Error: (01/28/2014 08:42:09 AM) (Source: SideBySide)(User: )
Description: assemblyIdentitylanguage*c:\program files (x86)\mozbackup\dll\DelZip179.dllc:\program files (x86)\mozbackup\dll\DelZip179.dll8

Error: (01/28/2014 08:41:40 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\dradio-recorder\phonostar.exe


CodeIntegrity Errors:
===================================
  Date: 2014-02-04 22:17:24.495
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-04 22:08:19.249
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-04 22:02:36.308
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-04 21:45:14.964
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-04 21:36:16.950
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-04 20:26:11.371
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-04 20:06:18.436
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-04 19:45:35.404
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-04 19:25:36.310
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-03 20:10:01.127
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 58%
Total physical RAM: 4091.49 MB
Available physical RAM: 1713.35 MB
Total Pagefile: 8181.16 MB
Available Pagefile: 5344.24 MB
Total Virtual: 8192 MB
Available Virtual: 8191.69 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.56 GB) (Free:32.4 GB) NTFS
Drive d: () (Fixed) (Total:833.85 GB) (Free:745.01 GB) NTFS
Drive i: (My Passport) (Fixed) (Total:931.48 GB) (Free:916.86 GB) NTFS
Drive m: (Medien HDD) (Fixed) (Total:1863.01 GB) (Free:1213.15 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A133C234)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=98 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=834 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: D574F000)
Partition 1: (Not Active) - (Size=-198626508800) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 931 GB) (Disk ID: 00023F15)
Partition 1: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

gmer.txt
im Archiv (hoffe, das ist ok, auch wenn mich noch keiner dazu aufgefordert hat)

So, das wäre erstmal alles, was ich habe.
Gruß!

Riecht nach Fehlalarm...

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Genial, wie schnell ihr seid!

mbar log:

Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.02.05.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
*** :: *** [administrator]

05.02.2014 13:26:26
mbar-log-2014-02-05 (13-26-26).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 253056
Time elapsed: 22 minute(s), 31 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Sieht gut aus, ne?

Jup machen wir noch evtl Adware weg

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

So, hier schon mal die logs von adwcleaner und JRT:

adwcleaner
AdwCleaner Logfile:

# AdwCleaner v3.018 - Bericht erstellt am 05/02/2014 um 15:24:05
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : *** - ***
# Gestartet von : C:\Users\***\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Users\***\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\***\AppData\Roaming\dvdvideosoftiehelpers

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v27.0 (de)

[ Datei : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\prefs.js ]


-\\ Google Chrome v32.0.1700.107

[ Datei : C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1881 octets] - [05/02/2014 15:22:13]
AdwCleaner[S0].txt - [1700 octets] - [05/02/2014 15:24:05]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1760 octets] ##########
         

--- --- ---


JRT
JRT Logfile:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by *** on 05.02.2014 at 15:29:34,17
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dt soft\daemon tools toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASMANCS



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\jv1exzom.default\minidumps [19 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 05.02.2014 at 17:00:27,05
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

--- --- ---


Mache jetzt noch nen frisches Log mit FRST.

frisches FRST:


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2014
Ran by *** (administrator) on *** on 05-02-2014 17:14:31
Running from C:\Users\***\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Windows\SysWOW64\XSrvSetup.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\pchooklaunch64.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\Antispam32\pchooklaunch32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(CANON INC.) C:\Program Files (x86)\Canon\MyPrinter\BJMYPRT.EXE
(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
() C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Logitech, Inc.) C:\Program Files (x86)\Logitech\SetPoint\SetPoint.exe
(Dropbox, Inc.) C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\Logitech\SetPoint\x86\SetPoint32.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2009-12-08] (Realtek Semiconductor)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files (x86)\Canon\MyPrinter\BJMyPrt.exe [2710856 2009-11-02] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)
HKLM\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2011\ieshow.exe [109344 2011-06-02] (BitDefender S.R.L.)
HKLM\...\Run: [BDAgent] - C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe [2026680 2011-07-11] (BitDefender S.R.L.)
HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] - C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2011\Antispam32\ieshow.exe [92352 2011-06-02] (BitDefender S.R.L.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [WD Drive Unlocker] - C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1688008 2012-06-13] (Western Digital)
HKLM-x32\...\Run: [WD Quick View] - C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5237256 2012-12-20] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [Remote Control Editor] - C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1689088 2010-06-09] (Elgato Systems)
HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [dradio-RecorderTimer] - C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [385024 2010-05-04] (AMD)
HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [FileHippo.com] - C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\MountPoints2: {162a9588-c8b7-11df-97db-6cf049e199b3} - G:\setup.EXE /AUTORUN
Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x44C531B77941CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -  No File
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Bitdefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2011\IEToolbar.dll (BitDefender S.R.L.)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - Bitdefender Toolbar - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2011\Antispam32\IEToolbar.dll (BitDefender S.R.L.)
Toolbar: HKLM-x32 - No Name - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} -  No File
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=1.1.11 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: TVU Web Player - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\firefox@tvunetworks.com [2010-08-14]
FF Extension: TCAST Plugin - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\tcastv1@tom.com [2010-08-14]
FF Extension: WOT - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-26]
FF Extension: DownloadHelper - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]
FF Extension: Flash and Video Download - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-01-23]
FF Extension: Ghostery - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\firefox@ghostery.com.xpi [2013-08-18]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014-01-19]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Adblock Plus - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-30]
FF HKLM\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\
FF Extension: BitDefender Antiphishing Toolbar - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\ []
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\
FF Extension: bdToolbar - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\ []
FF HKLM-x32\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\
FF Extension: BitDefender Antiphishing Toolbar - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\ []
FF HKLM-x32\...\Firefox\Extensions: [{09F060FA-566D-42D7-BF79-97AB30863433}] - C:\Program Files (x86)\Steganos Privacy Suite 12\pfplugin
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 12\spmplugin3
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\
FF Extension: bdToolbar - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\ []

Chrome: 
=======
CHR HomePage: about:blank
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll No File
CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Nitro PDF Plug-In) - C:\Program Files\Nitro PDF Reader\npnitromozilla.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-04-28]
CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-04-28]
CHR Extension: (WOT) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2013-04-28]
CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-28]
CHR Extension: (Google-Suche) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-28]
CHR Extension: (AdBlock) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-04-28]
CHR Extension: (Ghostery) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2013-04-28]
CHR Extension: (Google Wallet) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-28]
CHR Extension: (Google Mail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-28]

==================== Services (Whitelisted) =================

R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [65536 2009-08-06] ()
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-03-26] (Nitro PDF Software)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [271760 2009-04-15] ()
S3 Update Server; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [467248 2010-11-30] (BitDefender)
R2 Updatesrv; C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe [53224 2011-06-02] (BitDefender S.R.L.)
R2 VSSERV; C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe [2660624 2011-07-11] (BitDefender S.R.L.)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1155088 2012-12-20] (Western Digital )
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [248248 2012-09-06] (Western Digital)
R2 WDRulesService; C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe [1178128 2012-12-20] (Western Digital )
S2 Secunia Update Agent; "C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service [X]

==================== Drivers (Whitelisted) ====================

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138872 2011-07-28] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138872 2011-07-28] (SlySoft, Inc.)
S3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [591968 2010-11-29] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [1186272 2010-11-29] (BitDefender)
R3 BDFM; C:\Windows\System32\DRIVERS\bdfm.sys [162896 2010-05-13] (BitDefender S.R.L. Bucharest, ROMANIA)
R1 Bdfndisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [88144 2010-08-20] (BitDefender)
R0 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [431176 2011-04-01] (BitDefender)
R1 bdfwfpf; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [99408 2010-08-20] (BitDefender)
R3 MTSBDA; C:\Windows\System32\DRIVERS\MtsBda.sys [348224 2009-11-09] (TerraTec Provide)
R3 MtsHID; C:\Windows\System32\DRIVERS\MtsHid.sys [25664 2009-11-09] (TerraTec Provide)
R1 SLEE_17_DRIVER; C:\Windows\Sleen1764.sys [108256 2011-09-12] (Softwareentwicklung Remus - ArchiCrypt - )
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-10-19] (Duplex Secure Ltd.)
R1 STGMFEngine64; C:\Windows\system32\drivers\STGMFEngine64.sys [28576 2011-09-12] (Softwareentwicklung Remus - ArchiCrypt.com)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-05 17:14 - 2014-02-04 22:16 - 02080256 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2014-02-05 17:00 - 2014-02-05 17:00 - 00001466 _____ () C:\Users\***\Desktop\JRT.txt
2014-02-05 15:29 - 2014-02-05 15:29 - 00001818 _____ () C:\Users\***\Desktop\AdwCleaner[S0].txt
2014-02-05 15:29 - 2014-02-05 15:29 - 00000000 ____D () C:\Windows\ERUNT
2014-02-05 15:22 - 2014-02-05 15:24 - 00000000 ____D () C:\AdwCleaner
2014-02-05 15:21 - 2014-02-05 15:21 - 01037530 _____ (Thisisu) C:\Users\***\Desktop\JRT.exe
2014-02-05 15:20 - 2014-02-05 15:20 - 01166132 _____ () C:\Users\***\Desktop\adwcleaner.exe
2014-02-05 13:55 - 2014-02-05 13:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-05 13:26 - 2014-02-05 14:16 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-02-05 13:26 - 2014-02-05 13:26 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-02-05 13:25 - 2014-02-05 14:16 - 00000000 ____D () C:\Users\***\Desktop\mbar
2014-02-05 13:25 - 2014-02-05 13:25 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-02-05 13:24 - 2014-02-05 13:25 - 12589848 _____ (Malwarebytes Corp.) C:\Users\***\Downloads\mbar-1.07.0.1009.exe
2014-02-05 13:08 - 2014-02-05 13:08 - 00237800 _____ () C:\Users\***\Desktop\gmer.rar
2014-02-04 23:00 - 2014-02-04 23:01 - 00308144 _____ () C:\Users\***\Desktop\asd.txt
2014-02-04 22:56 - 2014-02-04 22:57 - 00237728 _____ () C:\Users\***\Desktop\gmer.log
2014-02-04 22:32 - 2014-02-05 13:04 - 00039609 _____ () C:\Users\***\Desktop\Addition.txt
2014-02-04 22:27 - 2014-02-05 17:14 - 00021928 _____ () C:\Users\***\Desktop\FRST.txt
2014-02-04 22:19 - 2014-02-04 22:19 - 00039621 _____ () C:\Users\***\Downloads\Addition.txt
2014-02-04 22:18 - 2014-02-05 17:13 - 00019017 _____ () C:\Users\***\Downloads\FRST.txt
2014-02-04 22:17 - 2014-02-05 17:13 - 00000000 ____D () C:\FRST
2014-02-04 22:16 - 2014-02-04 22:16 - 00380416 _____ () C:\Users\***\Downloads\gqsfq858.exe
2014-02-04 22:15 - 2014-02-04 22:16 - 02080256 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe
2014-02-04 22:08 - 2014-02-04 22:08 - 00000584 _____ () C:\Users\***\Downloads\defogger_disable.log
2014-02-04 22:08 - 2014-02-04 22:08 - 00000020 _____ () C:\Users\***\defogger_reenable
2014-02-04 22:07 - 2014-02-04 22:07 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe
2014-02-03 20:10 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-02-02 21:06 - 2014-02-03 10:05 - 00000000 ____D () C:\Users\***\Desktop\Wohnungen
2014-01-22 18:10 - 2014-01-22 19:03 - 00000000 ____D () C:\Users\***\AppData\Roaming\vlc
2014-01-22 18:07 - 2014-01-22 18:07 - 24097311 _____ () C:\Users\***\Downloads\vlc-2.1.2-win32.exe
2014-01-21 10:32 - 2014-01-21 18:00 - 00000000 ____D () C:\Users\***\AppData\Local\Nero
2014-01-21 10:32 - 2014-01-21 10:33 - 00000000 ____D () C:\Users\***\AppData\Roaming\Nero
2014-01-21 10:24 - 2014-01-21 10:24 - 00000000 ____D () C:\Windows\System32\Tasks\Nero
2014-01-21 09:54 - 2014-01-21 10:06 - 288310920 _____ (Nero AG) C:\Users\***\Downloads\Nero2014-15.0.07100_trial.exe
2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Roaming\Ashampoo
2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Local\ashampoo
2014-01-21 09:51 - 2014-01-21 09:52 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-21 09:45 - 2014-01-21 09:48 - 92789928 _____ (Ashampoo GmbH & Co. KG ) C:\Users\***\Downloads\ashampoo_burning_studio_2014_12.0.5_15376.exe
2014-01-19 11:35 - 2014-01-19 11:18 - 139448593 _____ () C:\Users\***\Desktop\Afrika TV.flv
2014-01-19 10:52 - 2014-01-19 11:02 - 93897148 _____ () C:\Users\***\Desktop\WissensWerte_ Migration - YouTube [720p].mp4
2014-01-18 15:35 - 2014-01-18 15:35 - 00000000 ____D () C:\Users\***\Desktop\Wohnungsgedöns
2014-01-15 20:14 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\***\AppData\Roaming\Foxit Software
2014-01-15 20:12 - 2014-01-15 20:13 - 23867560 _____ (Mozilla) C:\Users\***\Downloads\Firefox_Setup_26.0.exe
2014-01-15 20:11 - 2014-01-15 20:14 - 32747816 _____ (Nero AG) C:\Users\***\Downloads\Nero_BurnLite-10.0.10600.exe
2014-01-15 19:53 - 2014-01-15 19:53 - 03765592 _____ () C:\Users\***\Downloads\Paint.NET.3.5.11.Install.exe
2014-01-15 19:51 - 2014-01-15 19:53 - 33440584 _____ (Foxit Corporation ) C:\Users\***\Downloads\FoxitReader612.1224_enu_Setup.exe
2014-01-15 19:46 - 2014-01-15 19:46 - 01977432 _____ () C:\Users\***\Downloads\winrar-x64-501.exe
2014-01-15 19:45 - 2014-01-15 19:45 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-15 19:45 - 2014-01-15 19:44 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-15 19:44 - 2014-01-15 19:44 - 00000000 ____D () C:\Program Files\Java
2014-01-15 19:13 - 2014-01-15 19:15 - 50837888 _____ (Adobe Systems Incorporated) C:\Users\***\Downloads\AdbeRdr11006_en_US.exe
2014-01-15 19:13 - 2014-01-15 19:15 - 30796712 _____ (Oracle Corporation) C:\Users\***\Downloads\jre-7u51-windows-x64.exe
2014-01-15 10:00 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 10:00 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 10:00 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 10:00 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-02-05 17:14 - 2014-02-04 22:27 - 00021928 _____ () C:\Users\***\Desktop\FRST.txt
2014-02-05 17:13 - 2014-02-04 22:18 - 00019017 _____ () C:\Users\***\Downloads\FRST.txt
2014-02-05 17:13 - 2014-02-04 22:17 - 00000000 ____D () C:\FRST
2014-02-05 17:05 - 2013-04-28 09:34 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-05 17:00 - 2014-02-05 17:00 - 00001466 _____ () C:\Users\***\Desktop\JRT.txt
2014-02-05 16:42 - 2013-12-11 16:41 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-05 15:34 - 2009-07-14 05:45 - 00015344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-05 15:34 - 2009-07-14 05:45 - 00015344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-05 15:29 - 2014-02-05 15:29 - 00001818 _____ () C:\Users\***\Desktop\AdwCleaner[S0].txt
2014-02-05 15:29 - 2014-02-05 15:29 - 00000000 ____D () C:\Windows\ERUNT
2014-02-05 15:29 - 2010-08-13 11:37 - 01600496 _____ () C:\Windows\WindowsUpdate.log
2014-02-05 15:28 - 2013-02-25 19:21 - 00000000 ____D () C:\Users\***\AppData\Roaming\Dropbox
2014-02-05 15:27 - 2010-08-14 16:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Sunbird
2014-02-05 15:25 - 2013-04-28 09:34 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-05 15:25 - 2012-05-12 13:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-05 15:25 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-05 15:25 - 2009-07-14 05:51 - 00143638 _____ () C:\Windows\setupact.log
2014-02-05 15:24 - 2014-02-05 15:22 - 00000000 ____D () C:\AdwCleaner
2014-02-05 15:21 - 2014-02-05 15:21 - 01037530 _____ (Thisisu) C:\Users\***\Desktop\JRT.exe
2014-02-05 15:20 - 2014-02-05 15:20 - 01166132 _____ () C:\Users\***\Desktop\adwcleaner.exe
2014-02-05 14:16 - 2014-02-05 13:26 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-02-05 14:16 - 2014-02-05 13:25 - 00000000 ____D () C:\Users\***\Desktop\mbar
2014-02-05 13:55 - 2014-02-05 13:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-05 13:26 - 2014-02-05 13:26 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-02-05 13:25 - 2014-02-05 13:25 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-02-05 13:25 - 2014-02-05 13:24 - 12589848 _____ (Malwarebytes Corp.) C:\Users\***\Downloads\mbar-1.07.0.1009.exe
2014-02-05 13:08 - 2014-02-05 13:08 - 00237800 _____ () C:\Users\***\Desktop\gmer.rar
2014-02-05 13:04 - 2014-02-04 22:32 - 00039609 _____ () C:\Users\***\Desktop\Addition.txt
2014-02-05 06:50 - 2013-12-12 19:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-05 06:36 - 2010-09-20 16:48 - 00000000 ____D () C:\Program Files (x86)\Zarb 4
2014-02-04 23:09 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-04 23:01 - 2014-02-04 23:00 - 00308144 _____ () C:\Users\***\Desktop\asd.txt
2014-02-04 22:57 - 2014-02-04 22:56 - 00237728 _____ () C:\Users\***\Desktop\gmer.log
2014-02-04 22:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-04 22:19 - 2014-02-04 22:19 - 00039621 _____ () C:\Users\***\Downloads\Addition.txt
2014-02-04 22:16 - 2014-02-05 17:14 - 02080256 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2014-02-04 22:16 - 2014-02-04 22:16 - 00380416 _____ () C:\Users\***\Downloads\gqsfq858.exe
2014-02-04 22:16 - 2014-02-04 22:15 - 02080256 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe
2014-02-04 22:08 - 2014-02-04 22:08 - 00000584 _____ () C:\Users\***\Downloads\defogger_disable.log
2014-02-04 22:08 - 2014-02-04 22:08 - 00000020 _____ () C:\Users\***\defogger_reenable
2014-02-04 22:08 - 2010-08-13 11:42 - 00000000 ____D () C:\Users\***
2014-02-04 22:07 - 2014-02-04 22:07 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe
2014-02-04 21:42 - 2013-12-11 16:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-04 21:42 - 2013-12-11 16:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-03 20:10 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-02-03 20:10 - 2014-01-15 20:14 - 00000000 ____D () C:\Users\***\AppData\Roaming\Foxit Software
2014-02-03 10:05 - 2014-02-02 21:06 - 00000000 ____D () C:\Users\***\Desktop\Wohnungen
2014-02-03 10:04 - 2010-08-14 14:04 - 00000000 ____D () C:\Users\***\AppData\Roaming\Canon
2014-01-29 16:52 - 2010-08-14 14:04 - 00044085 _____ () C:\Users\***\Sti_Trace.log
2014-01-27 16:49 - 2010-08-13 11:58 - 00100752 _____ () C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-27 16:48 - 2009-07-14 05:45 - 00388096 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-26 11:01 - 2013-06-21 16:04 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-22 19:03 - 2014-01-22 18:10 - 00000000 ____D () C:\Users\***\AppData\Roaming\vlc
2014-01-22 18:07 - 2014-01-22 18:07 - 24097311 _____ () C:\Users\***\Downloads\vlc-2.1.2-win32.exe
2014-01-22 17:12 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-01-21 20:36 - 2013-12-11 16:41 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-21 19:11 - 2010-08-13 13:08 - 00000000 ____D () C:\ProgramData\CyberLink
2014-01-21 18:00 - 2014-01-21 10:32 - 00000000 ____D () C:\Users\***\AppData\Local\Nero
2014-01-21 15:47 - 2010-08-13 12:35 - 00647274 _____ () C:\Windows\PFRO.log
2014-01-21 10:33 - 2014-01-21 10:32 - 00000000 ____D () C:\Users\***\AppData\Roaming\Nero
2014-01-21 10:32 - 2010-08-26 12:52 - 00000000 ____D () C:\ProgramData\Nero
2014-01-21 10:24 - 2014-01-21 10:24 - 00000000 ____D () C:\Windows\System32\Tasks\Nero
2014-01-21 10:24 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Cursors
2014-01-21 10:23 - 2010-08-26 12:52 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-01-21 10:06 - 2014-01-21 09:54 - 288310920 _____ (Nero AG) C:\Users\***\Downloads\Nero2014-15.0.07100_trial.exe
2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Roaming\Ashampoo
2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Local\ashampoo
2014-01-21 09:52 - 2014-01-21 09:51 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-21 09:48 - 2014-01-21 09:45 - 92789928 _____ (Ashampoo GmbH & Co. KG ) C:\Users\***\Downloads\ashampoo_burning_studio_2014_12.0.5_15376.exe
2014-01-19 11:34 - 2009-07-14 18:58 - 00654150 _____ () C:\Windows\system32\perfh007.dat
2014-01-19 11:34 - 2009-07-14 18:58 - 00130022 _____ () C:\Windows\system32\perfc007.dat
2014-01-19 11:34 - 2009-07-14 06:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-01-19 11:18 - 2014-01-19 11:35 - 139448593 _____ () C:\Users\***\Desktop\Afrika TV.flv
2014-01-19 11:02 - 2014-01-19 10:52 - 93897148 _____ () C:\Users\***\Desktop\WissensWerte_ Migration - YouTube [720p].mp4
2014-01-18 15:35 - 2014-01-18 15:35 - 00000000 ____D () C:\Users\***\Desktop\Wohnungsgedöns
2014-01-18 10:37 - 2013-02-25 19:21 - 00000000 ____D () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-18 10:37 - 2010-08-13 11:42 - 00000000 ___RD () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-15 20:19 - 2013-07-16 21:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 20:17 - 2010-08-13 12:22 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 20:14 - 2014-01-15 20:11 - 32747816 _____ (Nero AG) C:\Users\***\Downloads\Nero_BurnLite-10.0.10600.exe
2014-01-15 20:14 - 2010-08-14 14:16 - 00000000 ____D () C:\Program Files (x86)\Foxit Software
2014-01-15 20:13 - 2014-01-15 20:12 - 23867560 _____ (Mozilla) C:\Users\***\Downloads\Firefox_Setup_26.0.exe
2014-01-15 19:56 - 2010-08-14 14:18 - 00000000 ____D () C:\Program Files (x86)\Paint.net
2014-01-15 19:55 - 2010-08-14 14:17 - 00000000 ____D () C:\Users\***\AppData\Local\Paint.NET
2014-01-15 19:54 - 2013-07-14 22:05 - 00000000 ____D () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-01-15 19:54 - 2011-07-14 16:27 - 00000000 ____D () C:\Program Files\Winrar
2014-01-15 19:53 - 2014-01-15 19:53 - 03765592 _____ () C:\Users\***\Downloads\Paint.NET.3.5.11.Install.exe
2014-01-15 19:53 - 2014-01-15 19:51 - 33440584 _____ (Foxit Corporation ) C:\Users\***\Downloads\FoxitReader612.1224_enu_Setup.exe
2014-01-15 19:46 - 2014-01-15 19:46 - 01977432 _____ () C:\Users\***\Downloads\winrar-x64-501.exe
2014-01-15 19:45 - 2014-01-15 19:45 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-15 19:44 - 2014-01-15 19:45 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-15 19:44 - 2014-01-15 19:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-15 19:44 - 2014-01-15 19:44 - 00000000 ____D () C:\Program Files\Java
2014-01-15 19:15 - 2014-01-15 19:13 - 50837888 _____ (Adobe Systems Incorporated) C:\Users\***\Downloads\AdbeRdr11006_en_US.exe
2014-01-15 19:15 - 2014-01-15 19:13 - 30796712 _____ (Oracle Corporation) C:\Users\***\Downloads\jre-7u51-windows-x64.exe

Some content of TEMP:
====================
C:\Users\***\AppData\Local\Temp\AskSLib.dll
C:\Users\***\AppData\Local\Temp\DE_de_Avery_AW31.exe
C:\Users\***\AppData\Local\Temp\DTLite4454-0316.exe
C:\Users\***\AppData\Local\Temp\DTLite4461-0327.exe
C:\Users\***\AppData\Local\Temp\DTLite4471-0333.exe
C:\Users\***\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe
C:\Users\***\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe
C:\Users\***\AppData\Local\Temp\jre-6u22-windows-i586-iftw-rv.exe
C:\Users\***\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\***\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\***\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe
C:\Users\***\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\***\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe
C:\Users\***\AppData\Local\Temp\nitro_pdf_reader_x64.exe
C:\Users\***\AppData\Local\Temp\nitro_reader3_x64.exe
C:\Users\***\AppData\Local\Temp\ose00000.exe
C:\Users\***\AppData\Local\Temp\Quarantine.exe
C:\Users\***\AppData\Local\Temp\TerraTec_Home_Cinema_6.11.05.exe
C:\Users\***\AppData\Local\Temp\TerraTec_Home_Cinema_6.15.11.exe
C:\Users\***\AppData\Local\Temp\uninstall-temp.exe
C:\Users\***\AppData\Local\Temp\vlc-2.0.4-win32.exe
C:\Users\***\AppData\Local\Temp\vlc-2.0.5-win32.exe
C:\Users\***\AppData\Local\Temp\vlc-2.1.2-win64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-29 08:36

==================== End Of Log ============================
         

--- --- ---

--- --- ---


und die addtion.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2014
Ran by *** at 2014-02-05 17:15:18
Running from C:\Users\***\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: BitDefender Antivirus (Enabled - Up to date) {50909708-FF80-02AF-F814-B28405891E92}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: BitDefender AntiSpyware (Enabled - Up to date) {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F}
FW: BitDefender Firewall (Enabled) {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9}

==================== Installed Programs ======================

Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Photoshop Elements 2.0 (x32 Version: 2.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) (x32 Version: 11.0.06 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - ATI Technologies Inc.) Hidden
AnyDVD (x32 Version: 6.8.5.0 - SlySoft)
ArcSoft PhotoStudio 5.5 (x32 Version:  - ArcSoft)
ATI AVIVO64 Codecs (Version: 11.1.0.50504 - ATI Technologies Inc.) Hidden
Avery Wizard 3.1 (x32 Version: 3.1.8 - Avery)
BitDefender Internet Security 2011 (Version: 14.0.29 - BitDefender)
BitDefender Internet Security 2011 (Version: 14.0.29 - BitDefender) Hidden
Canon CanoScan Toolbox 4.9 (x32 Version:  - )
Canon Utilities Easy-PhotoPrint EX (x32 Version:  - )
Canon Utilities My Printer (x32 Version:  - )
Canon Utilities Solution Menu (x32 Version:  - )
CanoScan LiDE 200 Scanner Driver (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CDDRV_Installer (Version: 4.60 - Logitech) Hidden
Cinergy S2 PCI V1.01.01.901 (x32 Version: 1.01.01.901 - )
CloneDVD2 (x32 Version: 2.9.3.0 - Elaborate Bytes)
CloudReading (x32 Version: 1.1.47.1220 - Foxit Corporation)
Cuttermaran 1.70 (x32 Version: 1.7.0 - to***)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)
dradio-Recorder Version 3.02.6 (x32 Version:  - )
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
erLT (x32 Version: 1.20.0137 - Logitech, Inc.) Hidden
FileHippo.com Update Checker (x32 Version:  - )
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Foxit Reader (x32 Version: 6.1.2.1224 - Foxit Corporation)
Free Video Dub version 1.8 (x32 Version:  - DVDVideoSoft Limited.)
Free YouTube Download version 3.1.30.627 (x32 Version: 3.1.30.627 - DVDVideoSoft Ltd.)
Gigabyte Raid Cinfigurer (x32 Version: 1.00.0001 - GIGABYTE Technologies, Inc.)
Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HashTab 4.0.0.1 (Version: 4.0.0.1 - Implbits Software)
HydraVision (x32 Version: 4.2.162.0 - ATI Technologies Inc.) Hidden
ImgBurn (x32 Version: 2.5.5.0 - LIGHTNING UK!)
Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle)
KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden
LG CyberLink Power2Go (x32 Version: 6.2.3325 - CyberLink Corp.)
LG CyberLink Power2Go (x32 Version: 6.2.3325 - CyberLink Corp.) Hidden
LG CyberLink PowerBackup (x32 Version: 2.5.5529 - CyberLink Corp.)
LG CyberLink PowerDVD (x32 Version: 8.0.2815d - CyberLink Corp.)
LG CyberLink PowerDVD (x32 Version: 8.0.2815d - CyberLink Corp.) Hidden
LG CyberLink PowerProducer (x32 Version: 5.0.2.2130 - CyberLink Corp.)
LG CyberLink PowerProducer (x32 Version: 5.0.2.2130 - CyberLink Corp.) Hidden
LG Power Tools (x32 Version: 6.0.3316 - CyberLink Corp.)
LG Power Tools (x32 Version: 6.0.3316 - CyberLink Corp.) Hidden
Logitech SetPoint (x32 Version: 4.80 - Logitech)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Manual CanoScan 8400F (x32 Version:  - )
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2000 Premium (x32 Version: 9.00.2816 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
MozBackup 1.4.10 (x32 Version:  - Pavel Cvrcek)
Mozilla Firefox 27.0 (x86 de) (x32 Version: 27.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 27.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0 - NEC Electronics Corporation) Hidden
Nero 2014 (x32 Version: 15.0.07100 - Nero AG)
Nero 7 Premium (x32 Version: 7.02.6445 - Nero AG)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20064 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden
Nero Burning Core (x32 Version: 15.0.25001 - Nero AG) Hidden
Nero Burning ROM (x32 Version: 15.0.25001 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.16700 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.23200 - Nero AG) Hidden
Nero Device Updates (x32 Version: 15.0.1002 - Nero AG) Hidden
Nero Disc Menus Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Disc to Device (x32 Version: 15.0.12032 - Nero AG) Hidden
Nero Effects Basic (x32 Version: 15.0.10011 - Nero AG) Hidden
Nero Express (x32 Version: 15.0.25001 - Nero AG) Hidden
Nero Express Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero Info (x32 Version: 15.1.0030 - Nero AG)
Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Launcher (x32 Version: 15.0.12000 - Nero AG) Hidden
Nero MediaHome (x32 Version: 1.22.3600 - Nero AG) Hidden
Nero MediaHome Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero PiP Effects Basic (x32 Version: 15.0.10008 - Nero AG) Hidden
Nero Recode (x32 Version: 15.0.25000 - Nero AG) Hidden
Nero Recode Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 15.0.2000 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden
Nero SharedVideoCodecs (x32 Version: 1.0.15005 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.13300.42.0 - Nero AG) Hidden
Nero Video (x32 Version: 15.0.23000 - Nero AG) Hidden
Nero Video Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nitro Reader 3 (Version: 3.5.2.10 - Nitro)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation)
Paint.NET v3.5.11 (Version: 3.61.0 - dotPDN LLC)
PDFCreator (x32 Version: 1.2.1 - Frank Heindörfer, Philip Chinery)
PDF-Viewer (Version: 2.5.208.0 - Tracker Software Products Ltd)
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Prerequisite installer (x32 Version: 15.0.0005 - Nero AG) Hidden
Realtek Ethernet Controller Driver For Windows Vista and Later (x32 Version: 1.00.0009 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5998 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.93 (x32 Version: 1.93 - VS Revo Group)
ScanSoft OmniPage SE 4 (x32 Version: 15.2.0020 - Nuance Communications, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
StreamTransport version: 1.0.2.2171 (x32 Version:  - )
SUPER © Version 2010.bld.38 (May 2, 2010) (x32 Version: Version 2010.bld.38 (May 2, 2010) - eRightSoft)
TerraTec Home Cinema (x32 Version: 6.15.11 - )
TerraTec Remote Control (x32 Version: 5.28 - )
TrueCrypt (x32 Version: 7.1a - TrueCrypt Foundation)
Ugrib RC1 (x32 Version: Release Candidate 0.2.4 - GRIB.US)
Uninstall 1.0.0.1 (x32 Version:  - )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
WD Drive Utilities (x32 Version: 1.0.1.5 - Western Digital)
WD Security (x32 Version: 1.0.3.3 - Western Digital Technologies, Inc.)
WD SmartWare (Version: 1.6.5.2 - Western Digital Technologies, Inc.)
WDR RadioRecorder (x32 Version:  - Tobit.Software)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 5.01 (64-bit) (Version: 5.01.0 - win.rar GmbH)
Yahoo! Detect (x32 Version:  - )
Zarb 4.1 (x32 Version: 4.1 - Hans Zybura Software)

==================== Restore Points  =========================

26-01-2014 09:58:31 Configured Microsoft Office Home and Student 2010
02-02-2014 16:47:10 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {22C59227-92C9-4552-9C68-71BBA9E2E998} - System32\Tasks\{7B66487D-722B-402D-AE0D-3084BD5C555C} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {3E503BE1-A33F-4D0C-9FDC-187DFE3B59A8} - System32\Tasks\{B90E5441-29D9-4A1C-9C50-1F51E93D821D} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {46024402-51FB-42C5-8660-53E049A23C6B} - System32\Tasks\{657291B0-0BFD-4A3A-9A1F-F5889CB08446} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {47708429-E7F9-4D15-B33C-44C88F04735F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-04] (Adobe Systems Incorporated)
Task: {4FD4F9A5-4534-4D21-9086-8E2CEDDBA845} - System32\Tasks\{3D85CAF6-E721-4BA9-9617-33BAC2333FC3} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {5DE738D0-0838-4610-A126-1C779BE1914A} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2013-10-16] (Nero AG)
Task: {6E974F43-8706-41CC-B826-36F116E96B7D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-28] (Google Inc.)
Task: {89EAB45E-892D-4159-BD8A-E146DBA9DDCD} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {8F27EFB3-D478-470A-8DEB-B0ABF5657D89} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {9AA10EF2-71A7-4F21-8FE7-6073CCD2EFA4} - System32\Tasks\{993C17D7-C415-40E6-9475-E9E72F17CA20} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {ADEF4491-09C4-4D59-8231-2EBC0F1B87B4} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)
Task: {C96BDE44-BDDC-4AEB-A314-DDD871F4E6C8} - System32\Tasks\{D0D1ACEA-CF31-41CC-B365-C41803D46BE7} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: {CEC4AD92-6D96-49D7-81D6-7D0DB2142127} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {D67B1C9B-58C5-4C69-8748-D88A65E53FE1} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {DB762D46-CEE1-49C4-A09A-8EA9B65D9C51} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-28] (Google Inc.)
Task: {EB220798-E1B2-4E61-A157-BE1F39ACAE40} - System32\Tasks\{B9BD9FF2-6B43-4239-9C88-E1FD1F07544C} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-06-02 16:23 - 2011-06-02 16:23 - 00239648 _____ () C:\Program Files\BitDefender\BitDefender 2011\txmlutil.dll
2011-06-02 16:22 - 2011-06-02 16:22 - 00161368 _____ () C:\Program Files\BitDefender\BitDefender 2011\connector.dll
2011-07-11 19:19 - 2011-07-11 19:19 - 00245328 _____ () C:\Program Files\BitDefender\BitDefender 2011\framework.dll
2010-09-06 17:05 - 2009-07-20 11:35 - 00018960 _____ () C:\Program Files (x86)\Logitech\SetPoint\khalwrapper.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\***\AppData\Roaming\Dropbox\bin\libcef.dll
2014-02-05 13:55 - 2014-02-05 13:55 - 03583600 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-02-05 17:10:19.873
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-05 15:40:58.920
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-05 15:21:00.336
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-05 14:17:02.595
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-05 13:25:22.271
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-05 13:03:13.503
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-05 12:57:56.682
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-05 06:51:14.564
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-04 22:56:30.382
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-04 22:39:50.198
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 49%
Total physical RAM: 4091.49 MB
Available physical RAM: 2076.82 MB
Total Pagefile: 8181.16 MB
Available Pagefile: 5496.9 MB
Total Virtual: 8192 MB
Available Virtual: 8191.69 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.56 GB) (Free:30.72 GB) NTFS
Drive d: () (Fixed) (Total:833.85 GB) (Free:745.01 GB) NTFS
Drive i: (My Passport) (Fixed) (Total:931.48 GB) (Free:916.86 GB) NTFS
Drive m: (Medien HDD) (Fixed) (Total:1863.01 GB) (Free:1213.15 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A133C234)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=98 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=834 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: D574F000)
Partition 1: (Not Active) - (Size=-198626508800) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 931 GB) (Disk ID: 00023F15)
Partition 1: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

MBAM hat 3 PUP gefunden. Löschen lassen?

Log:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.06.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
*** :: *** [Administrator]

06.02.2014 08:28:01
MBAM-log-2014-02-06 (10-47-37).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 227644
Laufzeit: 11 Minute(n), 11 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
C:\Users\***\AppData\Local\Temp\DTLite4454-0316.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\***\AppData\Local\Temp\DTLite4461-0327.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\***\AppData\Local\Temp\DTLite4471-0333.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

(Ende)
         

Ist nur tmp, löschen

Der ESET Scanner braucht Jahre...
Ich melde mich wieder, wenn er endlich fertig ist.

An diesem Punkte aber noch mal ein dickes Dankeschön!

So.

ESET Log:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=49403b17ad091b459aaa7b50dc501223
# engine=16991
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-08 03:01:50
# local_time=2014-02-08 04:01:50 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 18163480 143501560 0 0
# scanned=259046
         

Was steht jetzt noch an? Oder war's das?

TFC - Temp File Cleaner

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

• Öffne die TFC.exe.
  Vista und Win 7 User mit Rechtsklick "als Administrator starten".
• Schließe alle anderen Programme.
• Drücke auf den Button Start.
• Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Sieht soweit ok aus

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?