Windows Vista: Browser öffnet sich selbstständig

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-03-2014 02
Ran by **** (administrator) on ****-PC on 04-03-2014 21:25:22
Running from C:\Users\****\Downloads\Software zur Computeranalyse
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7302\Monitor.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe
() C:\Windows\system32\dmwu.exe
() C:\Windows\system32\PnkBstrA.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
() C:\Users\****\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe
() C:\Users\****\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe
(Microsoft Corporation) C:\Windows\system32\UI0Detect.exe
(Valve Corporation) C:\Program Files\Steam\Steam.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-18] (Microsoft Corporation)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-11-25] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [PAC7302_Monitor] - C:\Windows\PixArt\PAC7302\Monitor.exe [323584 2007-12-10] (PixArt Imaging Incorporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3077824167-3449787062-3371199529-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-18] (Microsoft Corporation)
HKU\S-1-5-21-3077824167-3449787062-3371199529-1000\...\MountPoints2: {faf7b47f-7320-11e3-b441-806e6f6e6963} - F:\iLinker.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=661ea083-af5d-45e9-b5c7-9c02bd7b05b2&searchtype=ds&q={searchTerms}&installDate=28/06/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=661ea083-af5d-45e9-b5c7-9c02bd7b05b2&searchtype=ds&q={searchTerms}&installDate=28/06/2013
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=4C2B0030840DAD40&affID=123620&tsp=5003
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.nation.com/?orig=HP
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=661ea083-af5d-45e9-b5c7-9c02bd7b05b2&searchtype=ds&q={searchTerms}&installDate=28/06/2013
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=661ea083-af5d-45e9-b5c7-9c02bd7b05b2&searchtype=ds&q={searchTerms}&installDate=28/06/2013
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2459} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=153&systemid=459&v=n8462-117&apn_uid=5429903032844325&apn_dtid=BND103&o=APN10652&apn_ptnrs=AGD&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=4C2B0030840DAD40&affID=123620&tsp=5003
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=661ea083-af5d-45e9-b5c7-9c02bd7b05b2&searchtype=ds&q={searchTerms}&installDate=28/06/2013
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=4C2B0030840DAD40&affID=123620&tsp=5003
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2459} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=153&systemid=459&v=n8462-117&apn_uid=5429903032844325&apn_dtid=BND103&o=APN10652&apn_ptnrs=AGD&q={searchTerms}
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/?a=6R8OqQYyjz&loc=skw&search={searchTerms}&i=26
BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.)
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: Music Toolbar (Dist. by Koyote-Lab, Inc.) - {30d489af-4a88-45dd-aacf-986cdbc7823a} - C:\Program Files\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Music Toolbar (Dist. by Koyote-Lab, Inc.) - {30d489af-4a88-45dd-aacf-986cdbc7823a} - C:\Program Files\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\pdf.dll ()
CHR Plugin: (SweetIM GC Helper) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.3.0.3_0\mgHelperGC.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\****\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (hxxp://www.totaljerkface.com/) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\acofpjmahanncjpdfmiidfafjjgkolfm [2013-07-16]
CHR Extension: (Google Docs) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-04-30]
CHR Extension: (Google Drive) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-04-30]
CHR Extension: (https://www.facebook.com/) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\celnaknmndcdcjcagffhbhciignkeokb [2013-07-16]
CHR Extension: (AdBlock) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-12-25]
CHR Extension: (hxxp://www.youtube.com/?feature=ytca) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijoffpmfcdnncgblkdnobhomnjnkofdm [2013-07-16]
CHR Extension: (hxxp://www.google.com/webhp?source=search_app) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpjmkngecpnnajkmdhplmeoelenkpgk [2013-07-16]
CHR Extension: (Google Wallet) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Google Mail) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-30]
CHR HKLM\...\Chrome\Extension: [aaaajjdggclgejkckppicefnelmoefjp] - C:\Users\****\AppData\Local\fuzezipmusictoolbardla\GC\toolbar.crx [2013-06-12]
CHR HKLM\...\Chrome\Extension: [anpiogajjmckmlehhpjnojhebaidkeod] - C:\Users\****\AppData\Local\CRE\anpiogajjmckmlehhpjnojhebaidkeod.crx [2013-06-12]
CHR HKLM\...\Chrome\Extension: [dleekdifoepfadaikncodjgnkkffkccd] - C:\Users\****\AppData\Local\BostonMarketOne.crx [2013-07-31]
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-07-31]
CHR HKLM\...\Chrome\Extension: [efbkdhmfnmnmfimllbjamfodcoanhmdd] - C:\Users\****\AppData\Local\WebToSave.crx [2013-09-01]
CHR HKLM\...\Chrome\Extension: [fmfnfnpmhcllokmkepffndflpnadjmma] - C:\Program Files\DealPly\DealPly.crx [2013-09-01]
CHR HKLM\...\Chrome\Extension: [jifflliplgeajjdhmkcfnngfpgbjonjg] - C:\Program Files\Perion\NewTab\NewTab.crx [2012-12-16]
CHR HKLM\...\Chrome\Extension: [niogeckbkdcabhnapjbkeiklablhjoca] - C:\Program Files\Perion\ChromeInfoBar\ChromeInfoBar.crx [2012-12-16]
CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2014-02-04]
CHR HKCU\...\Chrome\Extension: [anpiogajjmckmlehhpjnojhebaidkeod] - C:\Users\****\AppData\Local\CRE\anpiogajjmckmlehhpjnojhebaidkeod.crx [2014-02-04]
CHR HKCU\...\Chrome\Extension: [dleekdifoepfadaikncodjgnkkffkccd] - C:\Users\****\AppData\Local\BostonMarketOne.crx [2013-07-31]
CHR HKCU\...\Chrome\Extension: [efbkdhmfnmnmfimllbjamfodcoanhmdd] - C:\Users\****\AppData\Local\WebToSave.crx [2013-09-01]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2012-12-09]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 DatamngrCoordinator; C:\Program Files\Music Toolbar\Datamngr\DatamngrCoordinator.exe [3180592 2013-07-23] (Koyote-Lab Inc.)
R2 FSCLBaseUpdaterService; C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe [65536 2007-06-04] ()
R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1527600 2014-02-04] ()
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2013-12-28] ()

==================== Drivers (Whitelisted) ====================

R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdLH3.sys [97296 2010-11-17] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-30] (Avira Operations GmbH & Co. KG)
R3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [20992 2008-01-18] (Microsoft Corporation)
R3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [461952 2009-07-01] (PixArt Imaging Inc.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 vtany; \??\C:\Windows\vtany.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-04 21:19 - 2014-03-04 21:25 - 00000000 ____D () C:\FRST
2014-03-04 21:17 - 2014-03-04 21:25 - 00000000 ____D () C:\Users\****\Downloads\Software zur Computeranalyse
2014-03-04 21:06 - 2014-03-04 21:06 - 00000906 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-04 21:06 - 2014-03-04 21:06 - 00000000 ____D () C:\Users\****\Downloads\backups
2014-03-04 21:06 - 2014-03-04 21:06 - 00000000 ____D () C:\Users\****\AppData\Roaming\Malwarebytes
2014-03-04 21:06 - 2014-03-04 21:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-04 21:06 - 2014-03-04 21:06 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-04 21:06 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-04 20:12 - 2014-03-04 20:12 - 00000000 ____D () C:\Users\****\AppData\Roaming\JAM Software
2014-03-04 20:12 - 2014-03-04 20:12 - 00000000 ____D () C:\Program Files\JAM Software
2014-03-04 20:11 - 2014-03-04 20:11 - 02463272 _____ (JAM Software ) C:\Users\****\Downloads\TreeSizeFreeSetup_2000.exe
2014-03-04 19:59 - 2014-03-04 19:59 - 00000000 ____D () C:\Windows\LastGood
2014-03-04 18:46 - 2014-03-04 21:03 - 00000000 ____D () C:\Windows\system32\jmdp
2014-02-27 19:09 - 2014-02-27 19:09 - 05055088 _____ (Systweak Inc ) C:\Users\****\Downloads\rcpsetupdsnr_ds144969247.exe
2014-02-26 18:45 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-02-26 18:44 - 2014-02-26 18:44 - 00005384 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-02-26 18:44 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-02-26 18:44 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-26 18:44 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-23 12:52 - 2014-02-23 12:52 - 00002072 _____ () C:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk
2014-02-13 19:36 - 2014-02-05 09:58 - 12345344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 19:36 - 2014-02-05 09:56 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 19:36 - 2014-02-05 09:53 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 19:36 - 2014-02-05 09:51 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 19:36 - 2014-02-05 09:50 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 19:36 - 2014-02-05 09:49 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 19:36 - 2014-02-05 09:49 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-13 19:36 - 2014-02-05 09:48 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 19:36 - 2014-02-05 09:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-13 19:36 - 2014-02-05 09:48 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 19:36 - 2014-02-05 09:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 19:36 - 2014-02-05 09:48 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 19:36 - 2014-02-05 09:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 19:36 - 2014-02-05 09:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 19:36 - 2014-02-05 09:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-13 19:36 - 2014-02-05 09:46 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 19:20 - 2013-12-05 03:12 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-09 20:19 - 2014-02-09 20:19 - 00000000 ____D () C:\Users\****\AppData\Local\EdgeOfReality
2014-02-09 00:50 - 2014-03-04 20:50 - 00000288 _____ () C:\Windows\Tasks\Digital Sites.job
2014-02-09 00:50 - 2014-02-09 00:50 - 00000000 ____D () C:\Users\****\AppData\Roaming\DigitalSites
2014-02-08 21:35 - 2014-02-08 22:23 - 00000000 _____ () C:\dfu.log
2014-02-08 21:24 - 2014-02-08 21:25 - 00000000 ____D () C:\Users\****\Documents\Gameforge Live
2014-02-08 21:24 - 2014-02-08 21:24 - 20439920 _____ (Gameforge ) C:\Users\****\Downloads\SKILL_GameforgeLiveSetup.exe
2014-02-08 21:24 - 2014-02-08 21:24 - 00000000 ____D () C:\Users\****\AppData\Local\Gameforge4d
2014-02-08 21:24 - 2014-02-08 21:24 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-02-07 19:36 - 2014-02-07 19:36 - 00000000 ____D () C:\Users\****\AppData\Roaming\Artifex Mundi
2014-02-07 19:30 - 2014-02-07 19:30 - 00000000 ____D () C:\Users\****\AppData\Roaming\Happy Muffin Top
2014-02-03 20:30 - 2014-02-03 23:30 - 00000000 ____D () C:\Users\****\AppData\Roaming\GhostPainting
2014-02-03 20:29 - 2014-02-08 17:38 - 00000032 _____ () C:\Windows\Setup.INI

==================== One Month Modified Files and Folders =======

2014-03-04 21:25 - 2014-03-04 21:19 - 00000000 ____D () C:\FRST
2014-03-04 21:25 - 2014-03-04 21:17 - 00000000 ____D () C:\Users\****\Downloads\Software zur Computeranalyse
2014-03-04 21:22 - 2006-11-02 13:47 - 00004048 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-04 21:22 - 2006-11-02 13:47 - 00004048 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-04 21:06 - 2014-03-04 21:06 - 00000906 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-04 21:06 - 2014-03-04 21:06 - 00000000 ____D () C:\Users\****\Downloads\backups
2014-03-04 21:06 - 2014-03-04 21:06 - 00000000 ____D () C:\Users\****\AppData\Roaming\Malwarebytes
2014-03-04 21:06 - 2014-03-04 21:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-04 21:06 - 2014-03-04 21:06 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-04 21:03 - 2014-03-04 18:46 - 00000000 ____D () C:\Windows\system32\jmdp
2014-03-04 20:51 - 2013-07-27 15:50 - 00000290 _____ () C:\Users\****\AppData\Roaming\WB.CFG
2014-03-04 20:50 - 2014-02-09 00:50 - 00000288 _____ () C:\Windows\Tasks\Digital Sites.job
2014-03-04 20:50 - 2013-07-19 18:50 - 00000282 _____ () C:\Windows\Tasks\DSite.job
2014-03-04 20:43 - 2013-05-05 09:54 - 00000000 ____D () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-04 20:33 - 2012-11-12 22:29 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-04 20:27 - 2013-03-10 18:14 - 01997978 _____ () C:\Windows\WindowsUpdate.log
2014-03-04 20:23 - 2013-05-05 09:44 - 00000000 ____D () C:\Program Files\Steam
2014-03-04 20:23 - 2012-12-09 16:01 - 00000804 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-04 20:23 - 2012-12-09 16:01 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-04 20:12 - 2014-03-04 20:12 - 00000000 ____D () C:\Users\****\AppData\Roaming\JAM Software
2014-03-04 20:12 - 2014-03-04 20:12 - 00000000 ____D () C:\Program Files\JAM Software
2014-03-04 20:11 - 2014-03-04 20:11 - 02463272 _____ (JAM Software ) C:\Users\****\Downloads\TreeSizeFreeSetup_2000.exe
2014-03-04 20:08 - 2012-12-05 23:07 - 00014740 _____ () C:\ProgramData\hpzinstall.log
2014-03-04 20:06 - 2014-01-20 19:01 - 00159533 _____ () C:\Windows\hpoins14.dat
2014-03-04 19:59 - 2014-03-04 19:59 - 00000000 ____D () C:\Windows\LastGood
2014-03-04 19:43 - 2012-11-12 22:30 - 00001963 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-04 19:33 - 2013-10-15 14:48 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cec9ad4bf9c03c.job
2014-03-04 19:29 - 2006-11-02 11:33 - 01614244 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-04 19:22 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-04 18:46 - 2006-11-02 14:01 - 00032534 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-04 18:42 - 2013-04-19 14:54 - 00000000 ____D () C:\Windows\system32\WNLT
2014-03-04 18:42 - 2013-04-19 14:54 - 00000000 ____D () C:\Windows\system32\ARFC
2014-02-27 19:09 - 2014-02-27 19:09 - 05055088 _____ (Systweak Inc ) C:\Users\****\Downloads\rcpsetupdsnr_ds144969247.exe
2014-02-26 19:01 - 2013-09-12 19:55 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-26 18:53 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-26 18:44 - 2014-02-26 18:44 - 00005384 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-02-26 18:44 - 2013-09-12 19:53 - 00000000 ____D () C:\Program Files\Java
2014-02-23 12:52 - 2014-02-23 12:52 - 00002072 _____ () C:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk
2014-02-21 23:25 - 2013-07-31 13:27 - 00000000 ____D () C:\Users\****\AppData\Local\PMB Files
2014-02-21 23:25 - 2013-07-31 13:27 - 00000000 ____D () C:\ProgramData\PMB Files
2014-02-21 23:06 - 2012-11-13 14:17 - 00000000 ____D () C:\Users\****\AppData\Roaming\Skype
2014-02-13 19:43 - 2013-07-11 14:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-13 19:41 - 2006-11-02 11:24 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-02-13 19:23 - 2006-11-02 13:37 - 00000000 ____D () C:\Windows\twain_32
2014-02-13 19:21 - 2012-12-05 23:06 - 00000000 ____D () C:\ProgramData\HP
2014-02-13 19:02 - 2006-11-02 11:23 - 00000254 _____ () C:\Windows\win.ini
2014-02-09 20:19 - 2014-02-09 20:19 - 00000000 ____D () C:\Users\****\AppData\Local\EdgeOfReality
2014-02-09 00:50 - 2014-02-09 00:50 - 00000000 ____D () C:\Users\****\AppData\Roaming\DigitalSites
2014-02-08 22:23 - 2014-02-08 21:35 - 00000000 _____ () C:\dfu.log
2014-02-08 21:25 - 2014-02-08 21:24 - 00000000 ____D () C:\Users\****\Documents\Gameforge Live
2014-02-08 21:24 - 2014-02-08 21:24 - 20439920 _____ (Gameforge ) C:\Users\****\Downloads\SKILL_GameforgeLiveSetup.exe
2014-02-08 21:24 - 2014-02-08 21:24 - 00000000 ____D () C:\Users\****\AppData\Local\Gameforge4d
2014-02-08 21:24 - 2014-02-08 21:24 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-02-08 17:38 - 2014-02-03 20:29 - 00000032 _____ () C:\Windows\Setup.INI
2014-02-08 17:35 - 2013-11-03 18:31 - 00000000 ____D () C:\Windows\pss
2014-02-07 19:36 - 2014-02-07 19:36 - 00000000 ____D () C:\Users\****\AppData\Roaming\Artifex Mundi
2014-02-07 19:30 - 2014-02-07 19:30 - 00000000 ____D () C:\Users\****\AppData\Roaming\Happy Muffin Top
2014-02-05 09:58 - 2014-02-13 19:36 - 12345344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-05 09:56 - 2014-02-13 19:36 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-05 09:53 - 2014-02-13 19:36 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-05 09:51 - 2014-02-13 19:36 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-05 09:50 - 2014-02-13 19:36 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-05 09:49 - 2014-02-13 19:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-05 09:49 - 2014-02-13 19:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-05 09:48 - 2014-02-13 19:36 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-05 09:48 - 2014-02-13 19:36 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-05 09:48 - 2014-02-13 19:36 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-05 09:48 - 2014-02-13 19:36 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-05 09:48 - 2014-02-13 19:36 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-05 09:47 - 2014-02-13 19:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-05 09:47 - 2014-02-13 19:36 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-05 09:47 - 2014-02-13 19:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-05 09:46 - 2014-02-13 19:36 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-04 17:35 - 2013-04-19 14:54 - 01527600 _____ () C:\Windows\system32\dmwu.exe
2014-02-04 17:30 - 2013-04-19 14:54 - 00027136 _____ (IncrediMail, Ltd.) C:\Windows\system32\ImHttpComm.dll
2014-02-04 09:39 - 2012-12-16 18:34 - 00632656 _____ (Microsoft Corporation) C:\Windows\system32\msvcr80.dll
2014-02-04 09:39 - 2012-12-16 18:34 - 00554832 _____ (Microsoft Corporation) C:\Windows\system32\msvcp80.dll
2014-02-04 09:39 - 2012-12-16 18:34 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\msvcm80.dll
2014-02-04 09:39 - 2012-12-16 18:34 - 00001870 _____ () C:\Windows\system32\Microsoft.VC80.CRT.manifest
2014-02-03 23:30 - 2014-02-03 20:30 - 00000000 ____D () C:\Users\****\AppData\Roaming\GhostPainting

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.5244.dll


Some content of TEMP:
====================
C:\Users\****\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-04 19:34

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-03-2014 02
Ran by **** at 2014-03-04 21:25:42
Running from C:\Users\****\Downloads\Software zur Computeranalyse
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 1.0.0 - Hewlett-Packard) Hidden
Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Reader 6.0.1 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A00000000001}) (Version: 006.000.001 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
ATI Catalyst Install Manager (HKLM\...\{4B52E7BC-28A6-F68C-A12F-BC7581BE344C}) (Version: 3.0.804.0 - ATI Technologies, Inc.)
ATI Catalyst Registration (Version: 3.00.0000 - ATI Technologies Inc.) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira)
BufferChm (Version: 90.0.146.000 - Hewlett-Packard) Hidden
Bundled software uninstaller (HKLM\...\bi_uninstaller) (Version:  - ) <==== ATTENTION
CANYON USB PC CAMERA (HKLM\...\{A59AB961-BE82-41E0-B0FB-648DFA6DDEA4}) (Version: 1.0.20 - ANC)
Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2010.1125.2142.38865 - ATI) Hidden
Catalyst Control Center InstallProxy (Version: 2010.1125.2142.38865 - ATI Technologies, Inc.) Hidden
CCC Help English (Version: 2010.1125.2141.38865 - ATI) Hidden
ccc-core-static (Version: 2010.1125.2142.38865 - Ihr Firmenname) Hidden
ccc-utility (Version: 2010.1125.2142.38865 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
Die Schlacht um Mittelerde™ II (HKLM\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version:  - )
EAX4 Unified Redist (HKLM\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
Facebook Video Calling 1.2.0.287 (HKLM\...\{B92C5909-1D37-4C51-8397-A28BB28E5DC3}) (Version: 1.2.287 - Skype Limited)
FLV Player (HKCU\...\FLV Player) (Version:  - )
Free YouTube to MP3 Converter version 3.11.36.1201 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.36.1201 - DVDVideoSoft Ltd.)
FSCLounge (HKLM\...\{9A3BC157-B94F-4EFD-ABA9-1E56DEB00655}) (Version: 1.0.0 - Fujitsu Siemens Computers)
Gameforge Live 1.10.0 "Legend" (HKLM\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.10.0 - Gameforge)
GamersFirst LIVE! (HKCU\...\GamersFirst LIVE!) (Version:  - GamersFirst)
Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden
HP Deskjet All-In-One Software 9.0 (HKLM\...\{FA8A44D7-3E8A-4034-9C4F-088FA6B72BC4}) (Version: 9.0 - HP)
HP Smart Web Printing (HKLM\...\{415CDA53-9100-476F-A7B2-476691E117C7}) (Version: 2.15.7.0 - Ihr Firmenname)
HP Update (HKLM\...\{AB40272D-92AB-4F30-B36B-22EDE16F8FE5}) (Version: 4.000.006.003 - Hewlett-Packard)
HPSSupply (HKLM\...\{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}) (Version: 2.2.0.0000 - Ihr Firmenname)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
League of Legends (HKLM\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (Version: 3.0.1 - Riot Games ) Hidden
Loadout (HKLM\...\Steam App 208090) (Version:  - Edge of Reality)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE (HKLM\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}) (Version: 3.1.99.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Music Toolbar for Chrome (Dist. by Koyote-Lab, Inc.) (HKLM\...\fuzezipmusictoolbardlaGC) (Version: 1.5.0.0 - APN LLC) <==== ATTENTION
Music Toolbar for Internet Explorer (Dist. by Koyote-Lab, Inc.) (HKLM\...\fuzezipmusictoolbardlaIE) (Version: 1.5.0.0 - APN LLC) <==== ATTENTION
No More Room in Hell (HKLM\...\Steam App 224260) (Version:  - No More Room in Hell Team)
NVIDIA PhysX (HKLM\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenAL (HKLM\...\OpenAL) (Version:  - )
Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PC Camera(0028.2010.0804.1040) (HKLM\...\{B2920232-19DA-44FC-835F-68E427EAE2CE}) (Version: 0028.2010.0804.1040 - PixArt)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
SweetIM Bundle by SweetPacks (Version: 1.0.0.0 - SweetPacks LTD) Hidden <==== ATTENTION
SweetIM for Messenger 3.7 (Version: 3.7.0007 - SweetIM Technologies Ltd.) Hidden <==== ATTENTION
SweetPacks Updater (HKLM\...\WNLT) (Version: 5.0.3.5 - ) <==== ATTENTION
The Lord of the Rings FREE Trial  (Version: 1.00.0000 - ATI Technologies Inc.) Hidden
TreeSize Free V2.4 (HKLM\...\TreeSize Free_is1) (Version: 2.4 - JAM Software)
Ubisoft Game Launcher (HKLM\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
UnloadSupport (Version: 9.0.0 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Image Editor (HKCU\...\DSite) (Version:  - ) <==== ATTENTION
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{128A5449-CF71-4DA4-A746-F49E3B5DB584}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

==================== Restore Points  =========================

23-02-2014 11:52:12 DirectX wurde installiert
25-02-2014 17:39:34 Windows Update
26-02-2014 08:46:32 Windows Update
26-02-2014 13:33:15 Windows Update
26-02-2014 17:43:47 Installed Java 7 Update 51
27-02-2014 18:09:47 Geplanter Prüfpunkt
28-02-2014 09:31:00 Windows Update
02-03-2014 17:20:45 Geplanter Prüfpunkt
04-03-2014 18:26:18 Windows Update

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2A60416A-CA6C-4BFE-98B9-821E27D7E10C} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {30145926-38BE-4295-A3BD-DF34F936D988} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3077824167-3449787062-3371199529-1000Core => C:\Users\****\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-13] (Facebook Inc.)
Task: {355F210C-CAA3-4BEA-B7BE-DF4BCC266D0D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-12] (Google Inc.)
Task: {3681E64F-EAAE-4EF0-B0E1-7DD780790F5C} - System32\Tasks\DSite => C:\Users\****\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-07-19] () <==== ATTENTION
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {409B29AA-F2E1-4BE8-9C43-0EC7D20DE139} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11] (Hewlett-Packard Co.)
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-18] (Microsoft Corporation)
Task: {486D535B-ED13-4569-9EE2-33E614F4B60B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {50A12364-5AF9-44A0-8D98-A6807DE9E50D} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {9279F13A-DC7A-473C-AE42-F15F2CB7405F} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\VistaSP1CEIP => C:\Windows\servicing\vsp1ceip.exe [2008-01-18] (Microsoft Corporation)
Task: {9A9A3F05-CA21-4ACB-B28F-882E21855C8D} - System32\Tasks\BitGuard => Sc.exe start BitGuard <==== ATTENTION
Task: {A3B8F12B-953A-4C50-AE5C-924FA4C2BA7A} - System32\Tasks\GoogleUpdateTaskMachineCore1cec9ad4bf9c03c => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-12] (Google Inc.)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => Rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntries
Task: {C1D2A3C3-474A-44FB-AF41-7A63B1D7933F} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3077824167-3449787062-3371199529-1000UA => C:\Users\****\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-13] (Facebook Inc.)
Task: {D3FC6969-B613-4715-932F-DCA5D71F5DA6} - System32\Tasks\Digital Sites => C:\Users\****\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {D4FBFFE7-E70C-4916-A96D-0DCE60937A95} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {DDB5D41B-9A3E-4064-8BA0-DC92239298DA} - System32\Tasks\DealPly => C:\Users\****\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe [2013-02-27] () <==== ATTENTION
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2012-11-05] ()
Task: {E7DF6919-401A-471B-AD61-8C0C84E64D38} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-12] (Google Inc.)
Task: {E7EC28CD-A9B8-4774-8866-59F08D171563} - System32\Tasks\QtraxPlayer => C:\Program Files\Microsoft Silverlight\sllauncher.exe [2013-09-13] (Microsoft Corporation)
Task: {EA246CC0-C53F-4763-B4E0-79C0FF523407} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\****\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\DSite.job => C:\Users\****\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\EPUpdater.job => C:\Users\****\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe <==== ATTENTION
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3077824167-3449787062-3371199529-1000Core.job => C:\Users\****\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3077824167-3449787062-3371199529-1000UA.job => C:\Users\****\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cec9ad4bf9c03c.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-11-05 18:44 - 2012-09-19 19:17 - 00397088 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2011-10-12 22:11 - 2010-11-26 03:15 - 00023040 _____ () C:\Windows\system32\atitmpxx.dll
2010-11-25 21:41 - 2010-11-25 21:41 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2007-06-04 15:20 - 2007-06-04 15:20 - 00065536 _____ () C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe
2007-08-27 10:54 - 2007-08-27 10:54 - 00155648 _____ () C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWUpdater\0.18\FSCWUpdater.dll
2014-01-07 14:13 - 2014-03-04 19:23 - 00176128 _____ () C:\Windows\assembly\GAC_MSIL\FSCWCOM\1.0.0.0__8a33c55e43c2707f\FSCWCOM.dll
2014-01-07 14:13 - 2014-03-04 19:23 - 05881856 _____ () C:\Windows\assembly\GAC_MSIL\FSCWorld\6.0.6000.0__8a33c55e43c2707f\FSCWorld.dll
2014-01-07 14:13 - 2014-03-04 19:23 - 00040960 _____ () C:\Windows\assembly\GAC_MSIL\iFSCWTransfer\1.0.0.0__8a33c55e43c2707f\iFSCWTransfer.dll
2013-04-19 14:54 - 2014-02-04 17:35 - 01527600 _____ () C:\Windows\system32\dmwu.exe
2013-07-29 14:22 - 2013-12-28 19:24 - 00075136 _____ () C:\Windows\system32\PnkBstrA.exe
2013-04-12 15:10 - 2013-04-12 15:10 - 00113152 _____ () C:\Users\****\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe
2013-07-19 18:50 - 2013-07-19 18:50 - 00094208 _____ () C:\Users\****\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe
2014-01-12 14:54 - 2013-12-12 23:19 - 00142848 _____ () C:\Program Files\Steam\libavresample-1.dll
2014-01-12 14:54 - 2013-11-05 02:12 - 00890592 _____ () C:\Program Files\Steam\libavutil-52.dll
2013-03-25 13:23 - 2014-01-11 00:33 - 00717312 _____ () C:\Program Files\Steam\SDL2.dll
2013-04-19 12:10 - 2014-01-27 20:02 - 01138088 _____ () C:\Program Files\Steam\bin\chromehtml.dll
2013-03-26 15:16 - 2014-01-11 00:33 - 20625832 _____ () C:\Program Files\Steam\bin\libcef.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files\Steam\bin\avcodec-53.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files\Steam\bin\avutil-51.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files\Steam\bin\avformat-53.dll
2014-03-04 19:43 - 2014-03-02 03:35 - 00051016 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll
2014-02-04 17:35 - 2014-02-04 17:35 - 01225520 _____ () C:\Windows\System32\jmdp\lmrn.dll
2014-03-04 19:43 - 2014-03-02 03:35 - 04061000 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\pdf.dll
2014-03-04 19:43 - 2014-03-02 03:35 - 00394568 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll
2014-03-04 19:43 - 2014-03-02 03:35 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:9BAC4211
AlternateDataStreams: C:\ProgramData\TEMP:A02025CE

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^****^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^GamersFirst LIVE!.lnk => C:\Windows\pss\GamersFirst LIVE!.lnk.Startup
MSCONFIG\startupreg: Facebook Update => "C:\Users\****\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Steam => "C:\Program Files\Steam\steam.exe" -silent
MSCONFIG\startupreg: SweetIM => C:\Program Files\SweetIM\Messenger\SweetIM.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/04/2014 08:23:12 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/04/2014 08:15:38 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/26/2014 09:52:12 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06

Error: (02/26/2014 09:52:12 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06

Error: (02/26/2014 09:52:12 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06

Error: (02/26/2014 09:52:12 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06

Error: (02/26/2014 09:52:11 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06

Error: (02/26/2014 09:52:11 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06

Error: (02/26/2014 09:52:11 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06

Error: (02/26/2014 09:52:11 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06


System errors:
=============
Error: (03/02/2014 00:25:53 PM) (Source: Print) (User: NT-AUTORITÄT)
Description: Der Druckspooler konnte den Drucker HP Deskjet F4100 series nicht unter dem Namen HP Deskjet F4100 series freigeben. Fehler: 2114. Der Drucker kann nicht von anderen Benutzern im Netzwerk verwendet werden.

Error: (02/28/2014 04:13:02 PM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 192.168.1.3 für die Netzwerkkarte mit der Netzwerkadresse 0030840DAD40 wurde durch den DHCP-Server 192.168.1.1 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).

Error: (02/26/2014 09:16:53 AM) (Source: Print) (User: NT-AUTORITÄT)
Description: Der Druckspooler konnte den Drucker HP Deskjet F4100 series nicht unter dem Namen HP Deskjet F4100 series freigeben. Fehler: 2114. Der Drucker kann nicht von anderen Benutzern im Netzwerk verwendet werden.

Error: (02/17/2014 07:25:30 PM) (Source: Print) (User: NT-AUTORITÄT)
Description: Der Druckspooler konnte den Drucker HP Deskjet F4100 series nicht unter dem Namen HP Deskjet F4100 series freigeben. Fehler: 2114. Der Drucker kann nicht von anderen Benutzern im Netzwerk verwendet werden.

Error: (02/16/2014 02:34:02 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 16.02.2014 um 14:32:45 unerwartet heruntergefahren.

Error: (02/13/2014 08:16:10 PM) (Source: Print) (User: NT-AUTORITÄT)
Description: Das Dokument Microsoft Word - FÄCHER konnte nicht gedruckt werden und wurde aufgrund einer Beschädigung an der gespoolten Datei gelöscht. Der zugewiesene Treiber ist "HP Deskjet F4100 series". Versuchen Sie erneut, das Dokument zu drucken.

Error: (01/28/2014 02:48:31 PM) (Source: Service Control Manager) (User: )
Description: Steam Client Service%%1053

Error: (01/28/2014 02:48:31 PM) (Source: Service Control Manager) (User: )
Description: 30000Steam Client Service

Error: (01/16/2014 06:04:39 PM) (Source: Service Control Manager) (User: )
Description: Windows Search%%1053

Error: (01/16/2014 06:04:39 PM) (Source: Service Control Manager) (User: )
Description: 30000Windows Search


Microsoft Office Sessions:
=========================
Error: (06/23/2013 03:34:57 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 111 seconds with 0 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-01-05 15:37:15.969
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-05 15:37:15.876
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-05 15:37:15.782
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-05 15:37:15.688
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-05 15:37:15.595
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 20:31:58.912
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\BROWSE~1\261339~1.144\{C16C1~1\BROWSE~1.DLL" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 18:51:46.858
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\BROWSE~1\261339~1.144\{C16C1~1\BROWSE~1.DLL" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 14:06:59.405
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\BROWSE~1\261339~1.144\{C16C1~1\BROWSE~1.DLL" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 11:27:26.811
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\BROWSE~1\261339~1.144\{C16C1~1\BROWSE~1.DLL" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-12 17:47:23.185
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\PROGRA~2\BROWSE~1\261339~1.144\{C16C1~1\BROWSE~1.DLL" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 48%
Total physical RAM: 3326.26 MB
Available physical RAM: 1709.78 MB
Total Pagefile: 6899.05 MB
Available Pagefile: 5066.31 MB
Total Virtual: 2047.88 MB
Available Virtual: 1915.14 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:148.1 GB) (Free:55.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:73.07 GB) (Free:30.86 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: 1B683193)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=148 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=73 GB) - (Type=07 NTFS)

==================== End Of Log ============================