Win7 - Tojaner gefunden und entfernt, aber immer noch Probleme mit Internet Explorer 11

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 10:53 on 08/02/2014 (**********)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...

-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-02-2014
Ran by ********** (administrator) on UEMMY-PC on 08-02-2014 10:57:14
Running from C:\Users\**********\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [608112 2011-03-29] (Alps Electric Co., Ltd.)
HKLM\...\Run: [QuickSet] - C:\Program Files\Dell\QuickSet\QuickSet.exe [3668336 2011-03-24] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-12] (Intel Corporation)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [PTNMWND] - C:\Program Files (x86)\Brother\ES Status Monitor\ptnmwnd.exe [745472 2009-10-19] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-12] (Geek Software GmbH)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-80934419-1304163211-804199478-1000\...\Run: [Google Update] - C:\Users\**********\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-01-23] (Google Inc.)
HKU\S-1-5-21-80934419-1304163211-804199478-1000\...\Run: [Iklsoft] - regsvr32.exe C:\Users\**********\AppData\Local\Iklsoft\MbSrv.dll <===== ATTENTION
HKU\S-1-5-21-80934419-1304163211-804199478-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-80934419-1304163211-804199478-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-80934419-1304163211-804199478-1000\...\MountPoints2: {fa804fc4-29a1-11e1-84af-806e6f6e6963} - D:\Kuran_CD_v1.exe
Startup: C:\Users\**********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Ekran Kırpıcı ve Başlatıcı.lnk
ShortcutTarget: OneNote 2007 Ekran Kırpıcı ve Başlatıcı.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKCU - {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Toolbar: HKCU - No Name - {C424171E-592A-415A-9EB1-DFD6D95D3530} -  No File
DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR Extension: (Google Wallet) - C:\Users\**********\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-09]
CHR StartMenuInternet: Google Chrome - C:\Users\**********\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-20] (Atheros)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-10-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-08 10:58 - 2014-02-08 10:58 - 00380416 _____ () C:\Users\**********\Desktop\Gmer-19357.exe
2014-02-08 10:57 - 2014-02-08 10:58 - 00009789 _____ () C:\Users\**********\Desktop\FRST.txt
2014-02-08 10:57 - 2014-02-08 10:57 - 00000000 ____D () C:\FRST
2014-02-08 10:55 - 2014-02-08 10:55 - 02079744 _____ (Farbar) C:\Users\**********\Desktop\FRST64.exe
2014-02-08 10:53 - 2014-02-08 10:54 - 00000484 _____ () C:\Users\**********\Desktop\defogger_disable.log
2014-02-08 10:53 - 2014-02-08 10:53 - 00050477 _____ () C:\Users\**********\Desktop\Defogger.exe
2014-02-08 10:53 - 2014-02-08 10:53 - 00000000 _____ () C:\Users\**********\defogger_reenable
2014-02-03 22:57 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2014-02-03 22:57 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2014-02-03 22:57 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbGD.sys
2014-02-03 22:57 - 2012-08-23 15:07 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2014-02-03 22:57 - 2012-08-23 14:47 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll
2014-02-03 22:57 - 2012-08-23 14:46 - 00016896 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll
2014-02-03 22:57 - 2012-08-23 14:41 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-03 22:57 - 2012-08-23 14:40 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-03 22:57 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2014-02-03 22:57 - 2012-08-23 14:20 - 00054272 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2014-02-03 22:57 - 2012-08-23 14:18 - 00037376 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2014-02-03 22:57 - 2012-08-23 14:17 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2014-02-03 22:57 - 2012-08-23 14:06 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2014-02-03 22:57 - 2012-08-23 13:52 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2014-02-03 22:57 - 2012-08-23 12:20 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2014-02-03 22:57 - 2012-08-23 12:15 - 00269312 _____ (Microsoft Corporation) C:\windows\SysWOW64\aaclient.dll
2014-02-03 22:57 - 2012-08-23 12:14 - 00384000 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2014-02-03 22:57 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpendp_winip.dll
2014-02-03 22:57 - 2012-08-23 11:54 - 00322560 _____ (Microsoft Corporation) C:\windows\system32\aaclient.dll
2014-02-03 22:57 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\rdpendp_winip.dll
2014-02-03 22:57 - 2012-08-23 11:39 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2014-02-03 22:57 - 2012-08-23 11:22 - 01123840 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2014-02-03 22:57 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-02-03 22:57 - 2012-08-23 09:19 - 04916224 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2014-02-03 22:57 - 2012-08-23 09:13 - 05773824 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-01-19 16:24 - 2014-01-19 16:24 - 00022300 _____ () C:\Users\**********\Desktop\hs_err_pid11804.log
2014-01-19 16:24 - 2014-01-19 16:24 - 00000000 ____D () C:\Users\**********\AppData\Local\Iklsoft
2014-01-19 16:05 - 2014-01-19 16:05 - 00001077 _____ () C:\Users\Public\Desktop\PDF24 Creator.lnk
2014-01-19 16:05 - 2014-01-19 16:05 - 00001057 _____ () C:\Users\Public\Desktop\PDF24 Fax.lnk
2014-01-19 15:51 - 2014-01-19 15:54 - 00000000 ___RD () C:\Users\**********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-01-16 21:33 - 2013-11-27 02:42 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2014-01-16 21:33 - 2013-11-27 02:42 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2014-01-16 21:33 - 2013-11-27 02:42 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2014-01-16 21:33 - 2013-11-27 02:42 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2014-01-16 21:33 - 2013-11-27 02:42 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2014-01-16 21:33 - 2013-11-27 02:42 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2014-01-16 21:33 - 2013-11-27 02:42 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2014-01-16 21:33 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2014-01-16 21:33 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-01-11 23:58 - 2014-01-11 23:58 - 00000047 _____ () C:\Users\Gast\Desktop\tel.txt

==================== One Month Modified Files and Folders =======

2014-02-08 10:58 - 2014-02-08 10:58 - 00380416 _____ () C:\Users\**********\Desktop\Gmer-19357.exe
2014-02-08 10:58 - 2014-02-08 10:57 - 00009789 _____ () C:\Users\**********\Desktop\FRST.txt
2014-02-08 10:57 - 2014-02-08 10:57 - 00000000 ____D () C:\FRST
2014-02-08 10:56 - 2009-07-14 05:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-08 10:56 - 2009-07-14 05:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-08 10:55 - 2014-02-08 10:55 - 02079744 _____ (Farbar) C:\Users\**********\Desktop\FRST64.exe
2014-02-08 10:54 - 2014-02-08 10:53 - 00000484 _____ () C:\Users\**********\Desktop\defogger_disable.log
2014-02-08 10:53 - 2014-02-08 10:53 - 00050477 _____ () C:\Users\**********\Desktop\Defogger.exe
2014-02-08 10:53 - 2014-02-08 10:53 - 00000000 _____ () C:\Users\**********\defogger_reenable
2014-02-08 10:53 - 2012-04-14 22:06 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-02-08 10:53 - 2011-12-21 14:22 - 00000000 ____D () C:\Users\**********
2014-02-08 10:52 - 2011-12-18 18:46 - 01277047 _____ () C:\windows\WindowsUpdate.log
2014-02-08 10:49 - 2012-07-13 21:53 - 00001114 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-08 10:49 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-02-08 10:48 - 2009-07-14 05:51 - 00069600 _____ () C:\windows\setupact.log
2014-02-08 10:27 - 2012-01-23 22:13 - 00001140 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-80934419-1304163211-804199478-1000UA.job
2014-02-08 10:19 - 2012-07-13 21:53 - 00001118 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-07 23:55 - 2011-12-18 20:35 - 00699666 _____ () C:\windows\system32\perfh007.dat
2014-02-07 23:55 - 2011-12-18 20:35 - 00149774 _____ () C:\windows\system32\perfc007.dat
2014-02-07 23:55 - 2009-07-14 06:13 - 01620612 _____ () C:\windows\system32\PerfStringBackup.INI
2014-02-07 23:52 - 2012-01-23 22:13 - 00001088 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-80934419-1304163211-804199478-1000Core.job
2014-02-04 22:58 - 2012-04-14 22:06 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-02-04 22:57 - 2012-04-14 22:06 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-02-04 22:57 - 2011-12-18 18:51 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-04 21:18 - 2012-01-23 22:15 - 00002386 _____ () C:\Users\**********\Desktop\Google Chrome.lnk
2014-02-04 21:10 - 2010-11-21 04:47 - 00326246 _____ () C:\windows\PFRO.log
2014-02-04 21:09 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2014-02-03 23:07 - 2011-11-16 20:25 - 01594892 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2014-02-02 22:31 - 2011-12-21 21:16 - 00000000 ____D () C:\Users\**********\AppData\Local\CrashDumps
2014-02-01 08:56 - 2013-12-10 22:36 - 00005176 _____ () C:\windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for **********-PC-********** **********-PC
2014-01-19 16:24 - 2014-01-19 16:24 - 00022300 _____ () C:\Users\**********\Desktop\hs_err_pid11804.log
2014-01-19 16:24 - 2014-01-19 16:24 - 00000000 ____D () C:\Users\**********\AppData\Local\Iklsoft
2014-01-19 16:13 - 2013-03-05 22:29 - 00000000 ____D () C:\Users\**********\Documents\Outlook-Dateien
2014-01-19 16:05 - 2014-01-19 16:05 - 00001077 _____ () C:\Users\Public\Desktop\PDF24 Creator.lnk
2014-01-19 16:05 - 2014-01-19 16:05 - 00001057 _____ () C:\Users\Public\Desktop\PDF24 Fax.lnk
2014-01-19 16:05 - 2012-02-12 10:29 - 00000000 ____D () C:\Program Files (x86)\PDF24
2014-01-19 16:00 - 2011-12-21 14:27 - 00000000 ____D () C:\Users\**********\Documents\Bluetooth Folder
2014-01-19 15:54 - 2014-01-19 15:51 - 00000000 ___RD () C:\Users\**********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-01-19 15:40 - 2011-12-25 21:52 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-01-19 08:33 - 2010-11-21 04:27 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-01-17 21:29 - 2009-07-14 05:45 - 00488488 _____ () C:\windows\system32\FNTCACHE.DAT
2014-01-16 22:04 - 2013-08-26 21:27 - 00000000 ____D () C:\windows\system32\MRT
2014-01-16 22:03 - 2011-12-21 14:49 - 86054176 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-01-16 21:51 - 2013-03-05 21:42 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-01-11 23:58 - 2014-01-11 23:58 - 00000047 _____ () C:\Users\Gast\Desktop\tel.txt

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\SkypeSetup.exe
C:\Users\**********\AppData\Local\Temp\AskSLib.dll
C:\Users\**********\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe
C:\Users\**********\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\**********\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\**********\AppData\Local\Temp\jre-6u38-windows-i586-iftw.exe
C:\Users\**********\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\**********\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\**********\AppData\Local\Temp\MSNB5BA.exe
C:\Users\**********\AppData\Local\Temp\OfficeSetup.exe
C:\Users\**********\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\**********\AppData\Local\Temp\photostage_1.0.0.1_1.5.0.67_update_all.exe
C:\Users\**********\AppData\Local\Temp\SkypeSetup.exe
C:\Users\**********\AppData\Local\Temp\stageremote_2.0.0.43_2.0.0.50_update_all.exe
C:\Users\**********\AppData\Local\Temp\Uninstall.exe
C:\Users\**********\AppData\Local\Temp\vsinit.dll
C:\Users\**********\AppData\Local\Temp\vsutil.dll
C:\Users\**********\AppData\Local\Temp\zauninst.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2012-12-31 00:27

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-02-2014
Ran by ********** at 2014-02-08 10:58:29
Running from C:\Users\**********\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (x32 Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.8.638 - Adobe Systems, Inc.)
Advanced Audio FX Engine (x32 Version: 1.12.05 - Creative Technology Ltd)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Bluetooth Win7 Suite (64) (Version: 7.2.0.83 - Atheros Communications)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Brother Driver Deployment Wizard (x32 Version: 1.09.000 - Brother)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell Driver Download Manager (HKCU Version: 3.0.0.0 - Dell Inc)
Dell Edoc Viewer (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (x32 Version: 1.00.0000 - Dell Inc.)
Dell PhotoStage (x32 Version: 1.5.0.67 - ArcSoft)
Dell Touchpad (Version: 7.1207.101.225 - ALPS ELECTRIC CO., LTD.)
Dell Webcam Central (x32 Version: 2.00.46 - Creative Technology Ltd)
Dell WLAN and Bluetooth Client Installation (x32 Version: 9.0 - Dell Inc.)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
ElsterFormular (x32 Version: 13.1.1.8479 - Landesfinanzdirektion Thüringen)
ES Status Monitor (x32 Version: 1.01.0011 - ) Hidden
Facebook Video Calling 2.0.0.447 (x32 Version: 2.0.447 - Skype Limited)
Google Chrome (HKCU Version: 32.0.1700.107 - Google Inc.)
Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
IDT Audio (x32 Version: 1.0.6341.0 - IDT)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2342 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004 - Intel Corporation)
iTunes (Version: 11.1.1.11 - Apple Inc.)
Java 7 Update 17 (x32 Version: 7.0.170 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 27 (64-bit) (Version: 6.0.270 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4551.1512 - Microsoft Corporation)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
My Dell (Version: 3.3.6280.92 - PC-Doctor, Inc.)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
OpenAL (x32 Version:  - )
PDF24 Creator 6.2.0 (x32 Version:  - PDF24.org)
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
Quickset64 (Version: 10.09.25 - Dell Inc.)
Ravensburger tiptoi (x32 Version:  - )
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek Ethernet Controller Driver (x32 Version: 7.45.516.2011 - Realtek)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
Roxio Activation Module (x32 Version: 1.0 - Roxio) Hidden
Roxio BackOnTrack (x32 Version: 1.3.3 - Roxio) Hidden
Roxio Burn (x32 Version: 1.8 - Roxio) Hidden
Roxio Creator Starter (x32 Version: 1.0.439 - Roxio) Hidden
Roxio Creator Starter (x32 Version: 12.1.77.0 - Roxio)
Roxio Creator Starter (x32 Version: 5.0.0 - Roxio) Hidden
Roxio Express Labeler 3 (x32 Version: 3.2.2 - Roxio) Hidden
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Skype™ 5.10 (x32 Version: 5.10.116 - Skype Technologies S.A.)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
SopCast 3.8.3 (x32 Version: 3.8.3 - www.sopcast.com)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.1.23.0 - Intel)
WinCDEmu (x32 Version: 3.6 - Bazis)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

11-01-2014 22:10:06 Windows Update
16-01-2014 20:45:47 Windows Update
16-01-2014 21:03:08 Windows Update
21-01-2014 08:40:16 Windows Update
24-01-2014 10:01:21 Windows Update
27-01-2014 20:37:08 Windows Update
31-01-2014 20:56:28 Windows Update
03-02-2014 21:46:49 Windows Update
03-02-2014 21:53:44 Windows Update
06-02-2014 23:18:29 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {03446789-F9D8-422E-B12A-79E5F9895A87} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-13] (Google Inc.)
Task: {0DBC232D-C8A4-4C89-9A8B-C7DE6DCC07A5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-11-13] (Microsoft Corporation)
Task: {1742CAB1-A0CA-4311-A8A4-5083A313886E} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-07-15] (PC-Doctor, Inc.)
Task: {2F97D60B-68F9-4C29-8985-0A3B387CF075} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-10-31] (Microsoft Corporation)
Task: {52305864-9C8F-4FE4-AA1F-8CE82A85B545} - System32\Tasks\Microsoft Office 15 Sync Maintenance for **********-PC-********** **********-PC => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-01-16] (Microsoft Corporation)
Task: {6C11B445-730B-438B-8844-CF766F22EDB5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-80934419-1304163211-804199478-1000UA => C:\Users\**********\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-23] (Google Inc.)
Task: {7EEDC833-8396-445B-BBA4-1CAE9CC6B9BD} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-80934419-1304163211-804199478-1000Core => C:\Users\**********\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-23] (Google Inc.)
Task: {8702C81C-11EF-422E-B455-9F7F111EC986} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-07-15] (PC-Doctor, Inc.)
Task: {9121D12C-F82B-467C-B304-8FF0259A420B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-11-13] (Microsoft Corporation)
Task: {B10B9E62-FDF0-4278-B0E5-C674CF2DDE88} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {DB3CDB67-1AA6-44EC-A09F-EDF4D830B6D9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-13] (Google Inc.)
Task: {E8E7B5EC-EF4B-49F9-AB31-52E4C01F1A7A} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-80934419-1304163211-804199478-1000Core.job => C:\Users\**********\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-80934419-1304163211-804199478-1000UA.job => C:\Users\**********\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-12-18 20:13 - 2011-03-26 02:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-09-13 18:51 - 2013-09-13 18:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 18:51 - 2013-09-13 18:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-08-30 13:08 - 2013-08-30 13:08 - 00169472 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9ab0e818cb3d1b6930eba54179f89300\IsdiInterop.ni.dll
2011-12-18 18:51 - 2011-01-12 16:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Faulty Device Manager Devices =============

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/08/2014 10:49:23 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/08/2014 09:08:50 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 287448

Error: (02/08/2014 09:08:50 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 287448

Error: (02/08/2014 09:08:50 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/08/2014 09:04:10 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7348

Error: (02/08/2014 09:04:10 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7348

Error: (02/08/2014 09:04:10 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/08/2014 09:04:09 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6318

Error: (02/08/2014 09:04:09 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6318

Error: (02/08/2014 09:04:09 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (02/08/2014 09:25:15 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (02/08/2014 09:25:15 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (02/08/2014 09:12:05 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (02/08/2014 09:12:05 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (02/08/2014 00:07:23 AM) (Source: DCOM) (User: UEMMY-PC)
Description: AnwendungsspezifischLokalAktivierung{8BC3F05E-D86B-11D0-A075-00C04FB68820}{8BC3F05E-D86B-11D0-A075-00C04FB68820}**********-PCGastS-1-5-21-80934419-1304163211-804199478-501LocalHost (unter Verwendung von LRPC)

Error: (02/07/2014 09:25:39 AM) (Source: DCOM) (User: )
Description: {DD522ACC-F821-461A-A407-50B198B896DC}

Error: (02/05/2014 09:17:17 AM) (Source: DCOM) (User: UEMMY-PC)
Description: AnwendungsspezifischLokalAktivierung{8BC3F05E-D86B-11D0-A075-00C04FB68820}{8BC3F05E-D86B-11D0-A075-00C04FB68820}**********-PCGastS-1-5-21-80934419-1304163211-804199478-501LocalHost (unter Verwendung von LRPC)

Error: (02/05/2014 09:04:42 AM) (Source: DCOM) (User: UEMMY-PC)
Description: AnwendungsspezifischLokalAktivierung{8BC3F05E-D86B-11D0-A075-00C04FB68820}{8BC3F05E-D86B-11D0-A075-00C04FB68820}**********-PCGastS-1-5-21-80934419-1304163211-804199478-501LocalHost (unter Verwendung von LRPC)

Error: (02/05/2014 09:04:33 AM) (Source: DCOM) (User: UEMMY-PC)
Description: AnwendungsspezifischLokalAktivierung{8BC3F05E-D86B-11D0-A075-00C04FB68820}{8BC3F05E-D86B-11D0-A075-00C04FB68820}**********-PCGastS-1-5-21-80934419-1304163211-804199478-501LocalHost (unter Verwendung von LRPC)

Error: (02/05/2014 09:04:33 AM) (Source: DCOM) (User: UEMMY-PC)
Description: AnwendungsspezifischLokalAktivierung{8BC3F05E-D86B-11D0-A075-00C04FB68820}{8BC3F05E-D86B-11D0-A075-00C04FB68820}**********-PCGastS-1-5-21-80934419-1304163211-804199478-501LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================
Error: (02/08/2014 10:49:23 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/08/2014 09:08:50 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 287448

Error: (02/08/2014 09:08:50 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 287448

Error: (02/08/2014 09:08:50 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/08/2014 09:04:10 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7348

Error: (02/08/2014 09:04:10 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7348

Error: (02/08/2014 09:04:10 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/08/2014 09:04:09 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6318

Error: (02/08/2014 09:04:09 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6318

Error: (02/08/2014 09:04:09 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second


CodeIntegrity Errors:
===================================
  Date: 2011-12-27 22:21:57.274
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-12-27 21:42:14.758
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-12-27 21:28:14.841
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-12-27 20:30:56.543
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-12-27 20:20:36.171
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-12-27 19:50:25.248
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-12-25 23:49:16.681
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-12-25 21:37:49.728
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-12-21 21:53:57.128
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-12-21 21:44:36.936
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 34%
Total physical RAM: 4004.27 MB
Available physical RAM: 2624.19 MB
Total Pagefile: 8006.73 MB
Available Pagefile: 6519.08 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:304.53 GB) (Free:246.62 GB) NTFS
Drive d: (elifba cd-rom) (CDROM) (Total:0.59 GB) (Free:0 GB) CDFS
Drive e: (DATEN) (Fixed) (Total:146.48 GB) (Free:125.7 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 9EA8B44F)
Partition 1: (Not Active) - (Size=100 MB) - (Type=DE)
Partition 2: (Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=305 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=146 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-02-08 11:14:32
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST950032 rev.D005 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\MMGLSM~1\AppData\Local\Temp\kgloapoc.sys


---- Registry - GMER 2.1 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0015007f6c3b                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c0cb38d054a8                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\e4d53da89b8c                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\e4d53da89b8c@a0f4500fefc9         0x1D 0xA0 0xA8 0x91 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\e4d53da89b8c@2421ab02b646         0x58 0x13 0xEF 0xC8 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\e4d53da89b8c@5001bb16e61f         0x42 0xDD 0xC1 0xF2 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0015007f6c3b (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c0cb38d054a8 (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\e4d53da89b8c (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\e4d53da89b8c@a0f4500fefc9             0x1D 0xA0 0xA8 0x91 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\e4d53da89b8c@2421ab02b646             0x58 0x13 0xEF 0xC8 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\e4d53da89b8c@5001bb16e61f             0x42 0xDD 0xC1 0xF2 ...

---- EOF - GMER 2.1 ----