Hallo !

Die Telekom (abuse Team) schrieb mir eine Mail, dass von meinem Account Viren oder Trojaner versendet werden. Ich habe nichts gemerkt oder gesehen.

An dem Anschluss hängen 2 PC's und sporadisch 2 Tablets. Zu der in der Mail genannten Zeit war eigentlich nur 1 Rechner online.

Ich nutze ich den Virenscanner von avast. Dieser hat nicht Alarm geschlagen. Der Scan mit Malwarebytes und Antivir hat auch nichts gebracht.

Ich habe einen Ausschnitt der Mail vom Provider und Logs von Frst zunächst vom "Hauptrechner" angehängt.

Weiß jemand Rat ?

Ausschnitt Mail:

Sehr geehrte Kundin,
sehr geehrter Kunde,

wir müssen leider davon ausgehen, dass von Ihrem Internet-Anschluss
Schadsoftware, wie zum Beispiel Viren oder Trojaner, versendet werden.
Möglicherweise wird Ihr Internet-Zugang dazu ohne Ihr Wissen von
Dritten genutzt.

Den Hinweis auf Ihren Anschluss und diese IP-Adresse haben wir von
externen Sicherheitsexperten erhalten, mit denen wir zusammenarbeiten,
um unsere Kunden zu schützen.

Die folgende IP-Adresse war zu dem genannten Zeitpunkt Ihrer
Zugangsnummer zugeordnet

IP-Adresse: xx
Zeitangabe: xx

Wichtig: Bitte prüfen Sie Ihre Computer und beheben Sie umgehend die
Ursache der missbräuchlichen Nutzung. Außerdem raten wir Ihnen
dringend, sämtliche Passwörter zu ändern. Eine Passwortänderung darf
nur von einem Computer aus erfolgen, der garantiert frei von Viren und
Trojanern ist, sonst können die neuen Passwörter direkt wieder von
Dritten ausgelesen werden. Ändern Sie auch die Passwörter für Ihren
Router, für alle E-Mail-Adressen sowie Online-Banking, Ebay, Amazon
usw. Passwörter von Telekom Diensten und Services können Sie zentral
und einfach im Kundencenter unter https://kundencenter.telekom.de
ändern.

Ausschnitt Ende -----------------------------------------------------------------------------------


FRST

can result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-02-2014
Ran by CS (administrator) on C-BASE on 08-02-2014 22:16:56
Running from C:\Users\CS\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices64.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9600.16422_x64__8wekyb3d8bbwe\glcnd.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices64.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9600.16422_x64__8wekyb3d8bbwe\glcnd.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [VizorHtmlDialog.exe] - "C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe" "DEF" "EULA" "C:\Program Files\Trend Micro\Titanium\www\Installer.cmpt\resources\common.lproj\preinstall_01_welcome_trial.html" "DEF" "DEF" "DEF"
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUS Easy Update] - C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [195200 2012-05-24] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2012-12-11] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-03-24] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [StatusAlerts] - C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [309120 2012-02-02] (Hewlett-Packard Company)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-18] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
HKU\S-1-5-21-711126146-96304740-1225841664-1001\...\MountPoints2: {e9d9e0d0-35b6-11e3-be6f-60a44c231837} - "G:\Autorun.exe"

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - No File
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\CS\AppData\Roaming\Mozilla\Firefox\Profiles\k8w39gh5.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @TrendMicro.com/FFExtension - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\Profiles\k8w39gh5.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi [2013-12-20]
FF Extension: Adblock Plus - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\Profiles\k8w39gh5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-15]
FF HKLM\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1107\7.5.1107\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1107\7.5.1107\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-10-15]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-18] (AVAST Software)
R2 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2011-10-17] (Hewlett-Packard Company)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [72512 2013-12-09] (IObit)
R2 TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [248640 2012-07-25] (Trend Micro Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-18] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-15] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-15] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-18] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-18] (AVAST Software)
S3 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [79672 2014-01-18] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-18] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [71680 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-08 22:16 - 2014-02-08 22:17 - 00019678 _____ () C:\Users\CS\Desktop\FRST.txt
2014-02-08 22:16 - 2014-02-08 22:16 - 00000000 ____D () C:\FRST
2014-02-08 22:13 - 2014-02-08 22:13 - 02079744 _____ (Farbar) C:\Users\CS\Desktop\FRST64.exe
2014-02-08 22:09 - 2014-02-08 22:11 - 00000466 _____ () C:\Users\CS\Downloads\defogger_disable.log
2014-02-08 22:09 - 2014-02-08 22:09 - 00000000 _____ () C:\Users\CS\defogger_reenable
2014-02-08 22:08 - 2014-02-08 22:08 - 00050477 _____ () C:\Users\CS\Downloads\Defogger.exe
2014-02-08 19:43 - 2014-02-08 19:43 - 00014092 _____ () C:\Users\Carsten\Desktop\AVIRA.txt
2014-02-08 13:44 - 2014-02-08 13:44 - 00000000 ____D () C:\Users\CS\AppData\Roaming\Avira
2014-02-08 13:44 - 2014-02-08 13:44 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Avira
2014-02-08 13:44 - 2014-02-08 13:44 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-02-08 13:44 - 2014-02-08 13:44 - 00000000 ____D () C:\ProgramData\APN
2014-02-08 13:44 - 2014-02-08 13:44 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2014-02-08 13:43 - 2014-02-08 13:43 - 00002085 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-02-08 13:43 - 2014-02-08 13:43 - 00000000 ____D () C:\ProgramData\Avira
2014-02-08 13:43 - 2014-02-08 13:43 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-08 13:43 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2014-02-08 13:43 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2014-02-08 13:43 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2014-02-08 13:43 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2014-02-08 13:11 - 2014-02-08 13:16 - 129598176 _____ () C:\Users\Carsten\Downloads\avira_free344_antivirus_de.exe
2014-02-07 15:25 - 2014-02-07 15:25 - 00003086 _____ () C:\WINDOWS\System32\Tasks\Microsoft SkyDrive Auto Update Task-S-1-5-21-711126146-96304740-1225841664-1001
2014-02-07 15:16 - 2014-02-07 15:16 - 00000000 ____D () C:\Users\CS\AppData\Roaming\Thunderbird
2014-02-07 15:16 - 2014-02-07 15:16 - 00000000 ____D () C:\Users\CS\AppData\Local\Thunderbird
2014-02-07 14:23 - 2014-02-07 14:23 - 00000729 _____ () C:\Users\Carsten\Documents\Desktop - Verknüpfung.lnk
2014-02-07 12:26 - 2014-02-07 12:26 - 02677457 _____ () C:\Users\Carsten\Downloads\lightning-2.6.4-sm+tb-windows(1).xpi
2014-02-06 13:18 - 2014-02-06 13:18 - 00000909 _____ () C:\Users\Carsten\Desktop\Bilder - Verknüpfung.lnk
2014-02-06 09:02 - 2014-02-06 09:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-05 16:49 - 2014-02-05 19:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-01-29 20:45 - 2014-01-29 20:45 - 00000466 _____ () C:\Users\Carsten\Desktop\Data (D) - Verknüpfung.lnk
2014-01-28 21:23 - 2014-01-28 21:23 - 00000000 ____D () C:\Fotos
2014-01-28 10:27 - 2014-01-28 10:28 - 00039936 ___SH () C:\Users\Carsten\Documents\Thumbs.db
2014-01-28 10:26 - 2014-01-28 10:26 - 00314542 ____T () C:\Users\Carsten\Documents\Auszahlungsschein 23.01.14 S2.oxps
2014-01-28 10:25 - 2014-01-28 10:25 - 00400484 ____T () C:\Users\Carsten\Documents\Auszahlungsschein 23.01.14 S1.oxps
2014-01-28 10:24 - 2014-01-28 10:24 - 00694830 ____T () C:\Users\Carsten\Documents\KK Erklärung bzgl Geldleistungen 28.01.14.oxps
2014-01-27 17:58 - 2014-01-27 17:58 - 02677457 _____ () C:\Users\Carsten\Downloads\lightning-2.6.4-sm+tb-windows.xpi
2014-01-27 17:47 - 2014-02-05 16:33 - 00000000 ____D () C:\Users\Carsten\AppData\Local\Thunderbird
2014-01-27 17:47 - 2014-01-27 17:47 - 00002101 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-01-27 17:47 - 2014-01-27 17:47 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Thunderbird
2014-01-27 17:46 - 2014-01-27 17:46 - 21981704 _____ (Mozilla) C:\Users\Carsten\Downloads\Thunderbird Setup 24.2.0.exe
2014-01-25 20:36 - 2014-01-25 20:36 - 00335662 _____ () C:\Users\Carsten\Downloads\Keramag-204000-Katalogzeichnung.dwg
2014-01-25 19:01 - 2014-01-25 19:01 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\HpUpdate
2014-01-23 20:27 - 2014-01-26 09:55 - 00000000 ____D () C:\ProgramData\FStat3
2014-01-23 20:27 - 2014-01-23 20:27 - 00001056 _____ () C:\Users\Public\Desktop\Fresh Minder 3.lnk
2014-01-23 20:27 - 2014-01-23 20:27 - 00000000 ____D () C:\ProgramData\FreshMinder3
2014-01-23 20:24 - 2014-01-23 20:24 - 00000000 ____D () C:\Program Files (x86)\Fresh Minder
2014-01-23 20:23 - 2014-01-26 09:58 - 00001151 _____ () C:\Users\CS\Documents\FreshMinder3Installation.log
2014-01-22 07:39 - 2014-02-08 12:00 - 00000000 ___RD () C:\Users\Carsten\Desktop\Augen
2014-01-21 09:36 - 2014-02-08 22:06 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{71EC796B-D87D-405C-928A-DD546A38FCCE}
2014-01-20 14:13 - 2014-01-20 14:13 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\OpenOffice
2014-01-20 13:58 - 2014-01-20 13:58 - 00000000 ____D () C:\Users\Carsten\AppData\Local\Adobe
2014-01-20 12:32 - 2014-02-04 21:15 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Canon
2014-01-20 12:32 - 2014-01-20 12:32 - 00000000 _____ () C:\Users\Carsten\Sti_Trace.log
2014-01-19 19:52 - 2014-02-08 21:13 - 00083968 ___SH () C:\Users\Carsten\Desktop\Thumbs.db
2014-01-19 18:15 - 2014-01-19 18:15 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Macromedia
2014-01-19 18:15 - 2014-01-19 18:15 - 00000000 ____D () C:\Users\Carsten\AppData\Local\Macromedia
2014-01-19 18:12 - 2014-02-08 21:39 - 00003592 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-711126146-96304740-1225841664-1007
2014-01-19 18:10 - 2014-01-19 18:10 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Mozilla
2014-01-19 18:10 - 2014-01-19 18:10 - 00000000 ____D () C:\Users\Carsten\AppData\Local\Mozilla
2014-01-19 18:07 - 2014-01-20 13:58 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Adobe
2014-01-19 18:07 - 2014-01-19 18:07 - 00001453 _____ () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-19 18:07 - 2014-01-19 18:07 - 00000000 ___RD () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-19 18:07 - 2014-01-19 18:07 - 00000000 ___RD () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-19 18:07 - 2014-01-19 18:07 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\AVAST Software
2014-01-19 18:07 - 2014-01-19 18:07 - 00000000 ____D () C:\Users\Carsten\AppData\Local\Packages
2014-01-19 18:06 - 2014-01-20 12:32 - 00000000 ____D () C:\Users\Carsten
2014-01-19 18:06 - 2014-01-19 18:06 - 00000020 ___SH () C:\Users\Carsten\ntuser.ini
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Vorlagen
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Startmenü
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Netzwerkumgebung
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Lokale Einstellungen
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Eigene Dateien
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Druckumgebung
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Documents\Eigene Musik
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Documents\Eigene Bilder
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\AppData\Local\Verlauf
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\AppData\Local\Anwendungsdaten
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Anwendungsdaten
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 ____D () C:\Users\Carsten\AppData\Local\VirtualStore
2014-01-19 18:06 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-19 18:06 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-19 18:06 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-01-19 18:06 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-19 16:05 - 2014-02-08 21:35 - 00165659 _____ () C:\MyXML.xml
2014-01-19 09:06 - 2014-01-19 09:06 - 07039808 _____ (IObit ) C:\Users\CS\Downloads\startmenu-setup.exe
2014-01-18 21:02 - 2014-01-18 21:02 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-01-18 21:02 - 2014-01-18 21:02 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-01-18 21:02 - 2014-01-18 21:02 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-01-18 21:02 - 2014-01-18 21:02 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-01-18 21:02 - 2014-01-18 21:02 - 00000000 ____D () C:\ProgramData\Sun
2014-01-18 21:02 - 2014-01-18 21:02 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-18 21:02 - 2014-01-18 21:02 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-18 20:05 - 2014-01-18 20:05 - 00921000 _____ (Oracle Corporation) C:\Users\CS\Downloads\jxpiinstall.exe
2014-01-18 18:23 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-18 18:23 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-18 18:23 - 2013-11-27 11:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-18 18:23 - 2013-11-27 10:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-18 18:23 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-18 18:23 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-18 18:23 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-18 18:23 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-18 18:23 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-18 18:23 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-18 18:22 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-18 18:20 - 2014-01-18 18:20 - 00079672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys

==================== One Month Modified Files and Folders =======

2014-02-08 22:17 - 2014-02-08 22:16 - 00019678 _____ () C:\Users\CS\Desktop\FRST.txt
2014-02-08 22:16 - 2014-02-08 22:16 - 00000000 ____D () C:\FRST
2014-02-08 22:13 - 2014-02-08 22:13 - 02079744 _____ (Farbar) C:\Users\CS\Desktop\FRST64.exe
2014-02-08 22:11 - 2014-02-08 22:09 - 00000466 _____ () C:\Users\CS\Downloads\defogger_disable.log
2014-02-08 22:09 - 2014-02-08 22:09 - 00000000 _____ () C:\Users\CS\defogger_reenable
2014-02-08 22:09 - 2013-10-18 20:38 - 00000000 ____D () C:\Users\CS
2014-02-08 22:08 - 2014-02-08 22:08 - 00050477 _____ () C:\Users\CS\Downloads\Defogger.exe
2014-02-08 22:06 - 2014-01-21 09:36 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{71EC796B-D87D-405C-928A-DD546A38FCCE}
2014-02-08 22:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-08 21:40 - 2013-10-15 17:37 - 00003592 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-711126146-96304740-1225841664-1001
2014-02-08 21:39 - 2014-01-19 18:12 - 00003592 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-711126146-96304740-1225841664-1007
2014-02-08 21:35 - 2014-01-19 16:05 - 00165659 _____ () C:\MyXML.xml
2014-02-08 21:35 - 2013-10-18 21:01 - 00000000 __RDO () C:\Users\CS\SkyDrive
2014-02-08 21:30 - 2013-10-18 20:34 - 01257610 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-08 21:16 - 2013-09-30 05:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-08 21:16 - 2013-09-30 04:56 - 00764340 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-08 21:16 - 2013-09-30 04:56 - 00159160 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-08 21:13 - 2014-01-19 19:52 - 00083968 ___SH () C:\Users\Carsten\Desktop\Thumbs.db
2014-02-08 21:12 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-08 21:11 - 2013-09-29 20:04 - 00102110 _____ () C:\WINDOWS\PFRO.log
2014-02-08 20:27 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-08 19:43 - 2014-02-08 19:43 - 00014092 _____ () C:\Users\Carsten\Desktop\AVIRA.txt
2014-02-08 19:07 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-02-08 13:44 - 2014-02-08 13:44 - 00000000 ____D () C:\Users\CS\AppData\Roaming\Avira
2014-02-08 13:44 - 2014-02-08 13:44 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Avira
2014-02-08 13:44 - 2014-02-08 13:44 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-02-08 13:44 - 2014-02-08 13:44 - 00000000 ____D () C:\ProgramData\APN
2014-02-08 13:44 - 2014-02-08 13:44 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2014-02-08 13:43 - 2014-02-08 13:43 - 00002085 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-02-08 13:43 - 2014-02-08 13:43 - 00000000 ____D () C:\ProgramData\Avira
2014-02-08 13:43 - 2014-02-08 13:43 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-08 13:36 - 2012-12-11 11:45 - 00000000 ____D () C:\ProgramData\Trend Micro
2014-02-08 13:16 - 2014-02-08 13:11 - 129598176 _____ () C:\Users\Carsten\Downloads\avira_free344_antivirus_de.exe
2014-02-08 12:00 - 2014-01-22 07:39 - 00000000 ___RD () C:\Users\Carsten\Desktop\Augen
2014-02-07 15:25 - 2014-02-07 15:25 - 00003086 _____ () C:\WINDOWS\System32\Tasks\Microsoft SkyDrive Auto Update Task-S-1-5-21-711126146-96304740-1225841664-1001
2014-02-07 15:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-07 15:16 - 2014-02-07 15:16 - 00000000 ____D () C:\Users\CS\AppData\Roaming\Thunderbird
2014-02-07 15:16 - 2014-02-07 15:16 - 00000000 ____D () C:\Users\CS\AppData\Local\Thunderbird
2014-02-07 15:16 - 2013-11-01 12:49 - 00003910 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{F94E67EA-8E03-4E4A-8024-29C861252089}
2014-02-07 15:11 - 2013-11-13 14:22 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-02-07 14:23 - 2014-02-07 14:23 - 00000729 _____ () C:\Users\Carsten\Documents\Desktop - Verknüpfung.lnk
2014-02-07 12:26 - 2014-02-07 12:26 - 02677457 _____ () C:\Users\Carsten\Downloads\lightning-2.6.4-sm+tb-windows(1).xpi
2014-02-07 10:32 - 2013-10-15 18:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-06 13:18 - 2014-02-06 13:18 - 00000909 _____ () C:\Users\Carsten\Desktop\Bilder - Verknüpfung.lnk
2014-02-06 11:50 - 2012-12-11 11:41 - 00002046 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk
2014-02-06 09:02 - 2014-02-06 09:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-05 19:13 - 2014-02-05 16:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-05 16:33 - 2014-01-27 17:47 - 00000000 ____D () C:\Users\Carsten\AppData\Local\Thunderbird
2014-02-04 21:15 - 2014-01-20 12:32 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Canon
2014-01-30 21:47 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-30 21:47 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-29 20:45 - 2014-01-29 20:45 - 00000466 _____ () C:\Users\Carsten\Desktop\Data (D) - Verknüpfung.lnk
2014-01-29 20:44 - 2013-08-22 15:46 - 00298194 _____ () C:\WINDOWS\setupact.log
2014-01-28 21:23 - 2014-01-28 21:23 - 00000000 ____D () C:\Fotos
2014-01-28 10:28 - 2014-01-28 10:27 - 00039936 ___SH () C:\Users\Carsten\Documents\Thumbs.db
2014-01-28 10:26 - 2014-01-28 10:26 - 00314542 ____T () C:\Users\Carsten\Documents\Auszahlungsschein 23.01.14 S2.oxps
2014-01-28 10:25 - 2014-01-28 10:25 - 00400484 ____T () C:\Users\Carsten\Documents\Auszahlungsschein 23.01.14 S1.oxps
2014-01-28 10:24 - 2014-01-28 10:24 - 00694830 ____T () C:\Users\Carsten\Documents\KK Erklärung bzgl Geldleistungen 28.01.14.oxps
2014-01-27 17:58 - 2014-01-27 17:58 - 02677457 _____ () C:\Users\Carsten\Downloads\lightning-2.6.4-sm+tb-windows.xpi
2014-01-27 17:47 - 2014-01-27 17:47 - 00002101 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-01-27 17:47 - 2014-01-27 17:47 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Thunderbird
2014-01-27 17:46 - 2014-01-27 17:46 - 21981704 _____ (Mozilla) C:\Users\Carsten\Downloads\Thunderbird Setup 24.2.0.exe
2014-01-26 18:17 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2014-01-26 09:58 - 2014-01-23 20:23 - 00001151 _____ () C:\Users\CS\Documents\FreshMinder3Installation.log
2014-01-26 09:55 - 2014-01-23 20:27 - 00000000 ____D () C:\ProgramData\FStat3
2014-01-25 20:36 - 2014-01-25 20:36 - 00335662 _____ () C:\Users\Carsten\Downloads\Keramag-204000-Katalogzeichnung.dwg
2014-01-25 19:01 - 2014-01-25 19:01 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\HpUpdate
2014-01-23 20:27 - 2014-01-23 20:27 - 00001056 _____ () C:\Users\Public\Desktop\Fresh Minder 3.lnk
2014-01-23 20:27 - 2014-01-23 20:27 - 00000000 ____D () C:\ProgramData\FreshMinder3
2014-01-23 20:24 - 2014-01-23 20:24 - 00000000 ____D () C:\Program Files (x86)\Fresh Minder
2014-01-20 14:13 - 2014-01-20 14:13 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\OpenOffice
2014-01-20 13:59 - 2012-12-11 11:40 - 00000000 ____D () C:\ProgramData\Adobe
2014-01-20 13:58 - 2014-01-20 13:58 - 00000000 ____D () C:\Users\Carsten\AppData\Local\Adobe
2014-01-20 13:58 - 2014-01-19 18:07 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Adobe
2014-01-20 12:32 - 2014-01-20 12:32 - 00000000 _____ () C:\Users\Carsten\Sti_Trace.log
2014-01-20 12:32 - 2014-01-19 18:06 - 00000000 ____D () C:\Users\Carsten
2014-01-19 18:15 - 2014-01-19 18:15 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Macromedia
2014-01-19 18:15 - 2014-01-19 18:15 - 00000000 ____D () C:\Users\Carsten\AppData\Local\Macromedia
2014-01-19 18:10 - 2014-01-19 18:10 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\Mozilla
2014-01-19 18:10 - 2014-01-19 18:10 - 00000000 ____D () C:\Users\Carsten\AppData\Local\Mozilla
2014-01-19 18:08 - 2013-10-16 18:30 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-19 18:07 - 2014-01-19 18:07 - 00001453 _____ () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-19 18:07 - 2014-01-19 18:07 - 00000000 ___RD () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-19 18:07 - 2014-01-19 18:07 - 00000000 ___RD () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-19 18:07 - 2014-01-19 18:07 - 00000000 ____D () C:\Users\Carsten\AppData\Roaming\AVAST Software
2014-01-19 18:07 - 2014-01-19 18:07 - 00000000 ____D () C:\Users\Carsten\AppData\Local\Packages
2014-01-19 18:06 - 2014-01-19 18:06 - 00000020 ___SH () C:\Users\Carsten\ntuser.ini
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Vorlagen
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Startmenü
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Netzwerkumgebung
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Lokale Einstellungen
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Eigene Dateien
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Druckumgebung
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Documents\Eigene Musik
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Documents\Eigene Bilder
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\AppData\Local\Verlauf
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\AppData\Local\Anwendungsdaten
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 _SHDL () C:\Users\Carsten\Anwendungsdaten
2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 ____D () C:\Users\Carsten\AppData\Local\VirtualStore
2014-01-19 16:05 - 2013-10-21 14:47 - 00002072 _____ () C:\Users\Public\Desktop\Start Menu 8.lnk
2014-01-19 16:05 - 2013-10-20 21:02 - 00003154 _____ () C:\WINDOWS\System32\Tasks\StartMenuAutoupdate
2014-01-19 09:06 - 2014-01-19 09:06 - 07039808 _____ (IObit ) C:\Users\CS\Downloads\startmenu-setup.exe
2014-01-18 22:43 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-18 21:22 - 2013-11-01 12:48 - 00000000 ____D () C:\Users\CS\AppData\Local\Windows Live
2014-01-18 21:02 - 2014-01-18 21:02 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-01-18 21:02 - 2014-01-18 21:02 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-01-18 21:02 - 2014-01-18 21:02 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-01-18 21:02 - 2014-01-18 21:02 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-01-18 21:02 - 2014-01-18 21:02 - 00000000 ____D () C:\ProgramData\Sun
2014-01-18 21:02 - 2014-01-18 21:02 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-18 21:02 - 2014-01-18 21:02 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-18 20:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-01-18 20:05 - 2014-01-18 20:05 - 00921000 _____ (Oracle Corporation) C:\Users\CS\Downloads\jxpiinstall.exe
2014-01-18 18:20 - 2014-01-18 18:20 - 00079672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-01-18 18:20 - 2013-10-15 18:57 - 01034464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-18 18:20 - 2013-10-15 18:57 - 00422216 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2014-01-18 18:20 - 2013-10-15 18:57 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-18 18:20 - 2013-10-15 18:57 - 00207904 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-18 18:20 - 2013-10-15 18:57 - 00078648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-18 18:20 - 2013-10-15 18:57 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-18 18:20 - 2013-10-15 18:57 - 00001989 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk

Some content of TEMP:
====================
C:\Users\Carsten\AppData\Local\Temp\avgnt.exe
C:\Users\Carsten\AppData\Local\Temp\fm3Update333.exe
C:\Users\CS\AppData\Local\Temp\avgnt.exe
C:\Users\CS\AppData\Local\Temp\Offercast_AVIRAV7_.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-01 23:33

==================== End Of Log ============================


==================== Event log errors: =========================

Application errors:
==================
Error: (02/08/2014 07:44:14 PM) (Source: Windows Search Service) (User: )
Description: Fehler beim Erstellen des neuen Suchindex durch Windows Search. Interner Fehler <2, 0x8e5e04c0, Fehler beim Hinzufügen des Plug-Ins: Search.TripoliIndexer>.

Error: (02/08/2014 07:44:14 PM) (Source: Windows Search Service) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
Der Inhaltsindexkatalog ist fehlerhaft. 0xc0041801 (0xc0041801)

Error: (02/08/2014 07:44:14 PM) (Source: Windows Search Service) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (167)} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
0x8e5e04c0 (0x8e5e04c0)

Error: (02/08/2014 07:44:14 PM) (Source: ESENT) (User: )
Description: SearchIndexer (9108) Windows: Bei Datenbankwiederherstellung trat ein unerwarteter Fehler -1216 auf.

Error: (02/08/2014 07:44:14 PM) (Source: ESENT) (User: )
Description: SearchIndexer (9108) Windows: Bei der Datenbankwiederherstellung ist ein Fehler aufgetreten (Fehler -1216), da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht mehr vorhanden ist. Die Datenbank wurde nicht sauber heruntergefahren, bevor sie entfernt (oder möglicherweise verschoben oder umbenannt) wurde. Das Datenbankmodul lässt den Abschluss der Wiederherstellung für diese Instanz erst dann zu, wenn die fehlende Datenbank wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar oder nicht mehr erforderlich ist, finden Sie Informationen zum Beheben dieses Fehlers in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.

Error: (02/08/2014 07:44:13 PM) (Source: ESENT) (User: )
Description: SearchIndexer (9108) Windows: Versuch, Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb.chk" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (02/08/2014 07:44:03 PM) (Source: ESENT) (User: )
Description: SearchIndexer (9108) Windows: Versuch, Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb.chk" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (02/08/2014 07:43:49 PM) (Source: ESENT) (User: )
Description: SearchIndexer (3436) Windows: Das Datenbankmodul hat die Instanz (0) mit einem Fehler (-1090) beendet.



Interne Zeitsteuerungsabfolge: [1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.016, [7] 0.000, [8] 0.000, [9] 0.015, [10] 0.000, [11] 0.000, [12] 0.000, [13] 0.000, [14] 0.000, [15] 0.000.

Error: (02/08/2014 07:43:47 PM) (Source: ESENT) (User: )
Description: SearchIndexer (3436) Windows: Rollback von Operation #1749 für Datenbank C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb konnte nicht durchgeführt werden. Fehler: -510. Alle zukünftigen Datenbankaktualisierungen werden zurückgewiesen.

Error: (02/08/2014 07:43:47 PM) (Source: Windows Search Service) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
Der Inhaltsindexkatalog ist fehlerhaft. 0xc0041801 (0xc0041801)


System errors:
=============
Error: (02/08/2014 09:34:33 PM) (Source: DCOM) (User: C-BASE)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (02/08/2014 09:20:04 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (02/08/2014 07:45:53 PM) (Source: DCOM) (User: C-BASE)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (02/08/2014 07:44:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/08/2014 07:44:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%2388526272

Error: (02/08/2014 07:44:23 PM) (Source: DCOM) (User: C-BASE)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (02/08/2014 07:42:53 PM) (Source: DCOM) (User: C-BASE)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (02/08/2014 07:40:31 PM) (Source: DCOM) (User: C-BASE)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (02/08/2014 10:00:00 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (02/08/2014 08:05:46 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar


Microsoft Office Sessions:
=========================
Error: (02/08/2014 07:44:14 PM) (Source: Windows Search Service)(User: )
Description: 20x8e5e04c0Fehler beim Hinzufügen des Plug-Ins: Search.TripoliIndexer

Error: (02/08/2014 07:44:14 PM) (Source: Windows Search Service)(User: )
Description:
Details:
Der Inhaltsindexkatalog ist fehlerhaft. 0xc0041801 (0xc0041801)
The catalog is corrupt

Error: (02/08/2014 07:44:14 PM) (Source: Windows Search Service)(User: )
Description:
Details:
0x8e5e04c0 (0x8e5e04c0)
4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (167)

Error: (02/08/2014 07:44:14 PM) (Source: ESENT)(User: )
Description: SearchIndexer9108Windows: -1216

Error: (02/08/2014 07:44:14 PM) (Source: ESENT)(User: )
Description: SearchIndexer9108Windows: -1216C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb

Error: (02/08/2014 07:44:13 PM) (Source: ESENT)(User: )
Description: SearchIndexer9108Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb.chk-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (02/08/2014 07:44:03 PM) (Source: ESENT)(User: )
Description: SearchIndexer9108Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb.chk-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (02/08/2014 07:43:49 PM) (Source: ESENT)(User: )
Description: SearchIndexer3436Windows: 0-1090[1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.016, [7] 0.000, [8] 0.000, [9] 0.015, [10] 0.000, [11] 0.000, [12] 0.000, [13] 0.000, [14] 0.000, [15] 0.000.

Error: (02/08/2014 07:43:47 PM) (Source: ESENT)(User: )
Description: SearchIndexer3436Windows: 1749C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb-510

Error: (02/08/2014 07:43:47 PM) (Source: Windows Search Service)(User: )
Description:
Details:
Der Inhaltsindexkatalog ist fehlerhaft. 0xc0041801 (0xc0041801)
The catalog is corrupt


==================== Memory info ===========================

Percentage of memory in use: 26%
Total physical RAM: 8145.57 MB
Available physical RAM: 5977.34 MB
Total Pagefile: 9425.57 MB
Available Pagefile: 3696.35 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:149.66 GB) (Free:112.35 GB) NTFS
Drive d: (Data) (Fixed) (Total:764.35 GB) (Free:607.69 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 159BC108)

Partition: GPT Partition Type
==================== End Of Log ============================

hi,

Rechner ist sauber. Ändere mal das Passwort des Mail Accounts.