Ein kleines Problemkind

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by admin (administrator) on LÄPPI on 01-04-2014 18:11:36
Running from C:\Users\admin\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
(TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe
(TOSHIBA Corporation) c:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) c:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe
(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Primax Electronics Ltd.) C:\Windows\System32\ico.exe
(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
() C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
(Primax Electronics Ltd.) C:\Windows\System32\Pelmiced.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4911104 2008-01-29] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1348904 2008-08-14] (Synaptics, Inc.)
HKLM\...\Run: [Skytel] - C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Mouse Suite 98 Daemon] - C:\Windows\system32\ICO.EXE [53248 2008-04-02] (Primax Electronics Ltd.)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [39792 2008-10-15] (Adobe Systems Incorporated)
HKLM\...\Run: [MobileConnect] - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe [2403840 2009-09-11] (Vodafone)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-03-08] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-2143647401-3525167305-736155862-1002\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-2143647401-3525167305-736155862-1002\...\Run: [TOSCDSPD] - C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [430080 2008-01-29] ()
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de
SearchScopes: HKLM - DefaultScope {3C39D742-1559-48F0-AD3F-890F3E7533C0} URL = hxxp://www.google.de/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;
SearchScopes: HKLM - {3C39D742-1559-48F0-AD3F-890F3E7533C0} URL = hxxp://www.google.de/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;
SearchScopes: HKCU - DefaultScope {3C39D742-1559-48F0-AD3F-890F3E7533C0} URL = 
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 09 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 10 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 11 bmnet.dll File Not found ()
Winsock: Catalog9 12 bmnet.dll File Not found ()
Winsock: Catalog9 13 bmnet.dll File Not found ()
Winsock: Catalog9 24 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.11.1

FireFox:
========
FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\0fyk5cqw.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2014-04-01]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} [2014-04-01]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\addon\
FF Extension: Bytemobile Optimization Client - C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\addon\ []

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-03-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-03-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-03-08] (Avira Operations GmbH & Co. KG)
R2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2007-12-25] (TOSHIBA CORPORATION)
S4 Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [150528 2011-02-10] (Avanquest Software)
R2 TOSHIBA SMART Log Service; c:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [126976 2007-12-03] (TOSHIBA Corporation)
R2 VMCService; C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [9216 2009-09-11] (Vodafone)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-01] (Avira Operations GmbH & Co. KG)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [25280 2008-12-27] (LogMeIn, Inc.)
S3 hwusbfake; C:\Windows\System32\DRIVERS\ewusbfake.sys [102912 2009-06-29] (Huawei Technologies Co., Ltd.)
S3 pelmouse; C:\Windows\System32\DRIVERS\pelmouse.sys [17792 2009-06-16] (Primax Electronics Ltd.)
S3 pelusblf; C:\Windows\System32\DRIVERS\pelusblf.sys [17536 2009-06-16] (Primax Electronics Ltd.)
S3 RT73; C:\Windows\System32\DRIVERS\Dr71WU.sys [245504 2005-11-03] (Ralink Technology, Corp.)
R3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [290304 2007-12-26] (Realtek Semiconductor Corporation                           )
R1 RtlProt; C:\Windows\System32\DRIVERS\rtlprot.sys [25896 2007-04-23] (Windows (R) Codename Longhorn DDK provider)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [124016 2010-03-01] (MCCI Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2008-10-05] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-07-19] (Avira GmbH)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 USBAAPL; System32\Drivers\usbaapl.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-01 18:11 - 2014-04-01 18:12 - 00013269 _____ () C:\Users\admin\Desktop\FRST.txt
2014-04-01 18:11 - 2014-04-01 18:11 - 00000000 ____D () C:\FRST
2014-04-01 18:10 - 2014-04-01 18:10 - 01145856 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe
2014-04-01 18:10 - 2014-04-01 18:10 - 01145856 _____ (Farbar) C:\Users\admin\Desktop\FRST.exe
2014-04-01 17:53 - 2014-04-01 17:53 - 00222600 _____ (TOSHIBA Europe GmbH) C:\Users\admin\Downloads\TOSHIBA-94-detector.exe
2014-04-01 17:52 - 2014-04-01 17:52 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Macromedia
2014-04-01 17:52 - 2014-04-01 17:52 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Adobe
2014-04-01 17:52 - 2014-04-01 17:52 - 00000000 ____D () C:\Users\admin\AppData\Local\Macromedia
2014-04-01 17:51 - 2014-04-01 17:51 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-01 17:35 - 2014-04-01 17:35 - 00000000 ____D () C:\Users\admin\AppData\Roaming\InstallShield
2014-03-31 18:41 - 2014-03-31 18:42 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Mozilla
2014-03-31 18:41 - 2014-03-31 18:41 - 00000000 ____D () C:\Users\admin\AppData\Local\Mozilla
2014-03-31 17:38 - 2014-03-31 17:38 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Avira
2014-03-31 17:34 - 2014-03-31 17:34 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Vodafone
2014-03-31 17:34 - 2014-03-31 17:34 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Bytemobile
2014-03-31 17:33 - 2014-03-31 17:33 - 00087848 _____ () C:\Users\admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-31 17:33 - 2014-03-31 17:33 - 00000954 _____ () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-31 17:33 - 2014-03-31 17:33 - 00000949 _____ () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-03-31 17:33 - 2014-03-31 17:33 - 00000920 _____ () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2014-03-31 17:33 - 2014-03-31 17:33 - 00000000 ____D () C:\Users\admin\AppData\Local\VirtualStore
2014-03-31 17:32 - 2014-03-31 17:33 - 00000000 ____D () C:\Users\admin
2014-03-31 17:32 - 2014-03-31 17:32 - 00000020 ___SH () C:\Users\admin\ntuser.ini
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\Startmenü
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\Netzwerkumgebung
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\Druckumgebung
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\Documents\Eigene Musik
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\Documents\Eigene Bilder
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\AppData\Local\Verlauf
2014-03-31 17:32 - 2008-01-21 04:42 - 00000000 ___RD () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-03-31 17:32 - 2008-01-21 04:42 - 00000000 ___RD () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-03-08 16:43 - 2014-03-31 18:07 - 00001374 _____ () C:\Windows\PFRO.log
2014-03-08 15:48 - 2014-03-08 15:48 - 00162010 _____ () C:\Users\Marian\Downloads\DIAG_MATS_NETWORK_global.DiagCab
2014-03-08 15:46 - 2014-03-08 15:46 - 00347816 _____ (Microsoft Corporation) C:\Users\Marian\Downloads\MicrosoftFixit.wu.LB.19631771415933384.1.1.Run.exe
2014-03-08 15:44 - 2014-03-08 17:17 - 00004722 _____ () C:\Windows\IE9_main.log
2014-03-08 14:59 - 2014-03-08 15:12 - 00000000 ____D () C:\Users\Marian\Desktop\MS
2014-03-08 12:41 - 2014-03-08 12:41 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-08 12:40 - 2013-12-18 22:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-03-08 12:40 - 2013-12-18 22:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-08 12:40 - 2013-12-18 22:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-08 12:40 - 2013-12-18 22:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-08 12:39 - 2014-03-08 12:40 - 00005355 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-03-06 21:58 - 2014-03-06 21:59 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-03-06 20:00 - 2014-04-01 18:05 - 00805859 _____ () C:\Windows\WindowsUpdate.log

==================== One Month Modified Files and Folders =======

2014-04-01 18:12 - 2014-04-01 18:11 - 00013269 _____ () C:\Users\admin\Desktop\FRST.txt
2014-04-01 18:12 - 2012-11-06 10:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-01 18:11 - 2014-04-01 18:11 - 00000000 ____D () C:\FRST
2014-04-01 18:10 - 2014-04-01 18:10 - 01145856 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe
2014-04-01 18:10 - 2014-04-01 18:10 - 01145856 _____ (Farbar) C:\Users\admin\Desktop\FRST.exe
2014-04-01 18:05 - 2014-03-06 20:00 - 00805859 _____ () C:\Windows\WindowsUpdate.log
2014-04-01 17:53 - 2014-04-01 17:53 - 00222600 _____ (TOSHIBA Europe GmbH) C:\Users\admin\Downloads\TOSHIBA-94-detector.exe
2014-04-01 17:52 - 2014-04-01 17:52 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Macromedia
2014-04-01 17:52 - 2014-04-01 17:52 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Adobe
2014-04-01 17:52 - 2014-04-01 17:52 - 00000000 ____D () C:\Users\admin\AppData\Local\Macromedia
2014-04-01 17:51 - 2014-04-01 17:51 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-01 17:51 - 2012-04-25 21:49 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-01 17:46 - 2008-01-21 09:16 - 01567488 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-01 17:41 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\tracing
2014-04-01 17:40 - 2009-05-01 17:30 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-04-01 17:40 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-01 17:40 - 2006-11-02 14:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-01 17:40 - 2006-11-02 14:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-01 17:38 - 2006-11-02 15:01 - 00032558 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-01 17:35 - 2014-04-01 17:35 - 00000000 ____D () C:\Users\admin\AppData\Roaming\InstallShield
2014-04-01 17:35 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system
2014-04-01 17:15 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\rescache
2014-03-31 18:42 - 2014-03-31 18:41 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Mozilla
2014-03-31 18:41 - 2014-03-31 18:41 - 00000000 ____D () C:\Users\admin\AppData\Local\Mozilla
2014-03-31 18:07 - 2014-03-08 16:43 - 00001374 _____ () C:\Windows\PFRO.log
2014-03-31 17:41 - 2011-07-21 19:33 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-03-31 17:38 - 2014-03-31 17:38 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Avira
2014-03-31 17:34 - 2014-03-31 17:34 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Vodafone
2014-03-31 17:34 - 2014-03-31 17:34 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Bytemobile
2014-03-31 17:33 - 2014-03-31 17:33 - 00087848 _____ () C:\Users\admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-31 17:33 - 2014-03-31 17:33 - 00000954 _____ () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-31 17:33 - 2014-03-31 17:33 - 00000949 _____ () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-03-31 17:33 - 2014-03-31 17:33 - 00000920 _____ () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2014-03-31 17:33 - 2014-03-31 17:33 - 00000000 ____D () C:\Users\admin\AppData\Local\VirtualStore
2014-03-31 17:33 - 2014-03-31 17:32 - 00000000 ____D () C:\Users\admin
2014-03-31 17:32 - 2014-03-31 17:32 - 00000020 ___SH () C:\Users\admin\ntuser.ini
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\Startmenü
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\Netzwerkumgebung
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\Druckumgebung
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\Documents\Eigene Musik
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\Documents\Eigene Bilder
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-31 17:32 - 2014-03-31 17:32 - 00000000 _SHDL () C:\Users\admin\AppData\Local\Verlauf
2014-03-08 17:18 - 2006-11-02 13:18 - 00000000 ___RD () C:\Windows\Offline Web Pages
2014-03-08 17:18 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\de-DE
2014-03-08 17:17 - 2014-03-08 15:44 - 00004722 _____ () C:\Windows\IE9_main.log
2014-03-08 17:15 - 2006-11-02 08:32 - 00008798 _____ () C:\Windows\system32\icrav03.rat
2014-03-08 17:15 - 2006-11-02 08:32 - 00001988 _____ () C:\Windows\system32\ticrf.rat
2014-03-08 16:59 - 2010-09-30 21:30 - 00000851 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-08 15:48 - 2014-03-08 15:48 - 00162010 _____ () C:\Users\Marian\Downloads\DIAG_MATS_NETWORK_global.DiagCab
2014-03-08 15:46 - 2014-03-08 15:46 - 00347816 _____ (Microsoft Corporation) C:\Users\Marian\Downloads\MicrosoftFixit.wu.LB.19631771415933384.1.1.Run.exe
2014-03-08 15:12 - 2014-03-08 14:59 - 00000000 ____D () C:\Users\Marian\Desktop\MS
2014-03-08 13:27 - 2008-09-03 19:19 - 00000954 _____ () C:\Users\Marian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-08 13:27 - 2008-09-03 19:18 - 00000920 _____ () C:\Users\Marian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2014-03-08 12:41 - 2014-03-08 12:41 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-08 12:40 - 2014-03-08 12:39 - 00005355 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-03-08 12:40 - 2013-11-08 18:45 - 00000000 ____D () C:\Program Files\Java
2014-03-08 12:11 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-03-08 12:10 - 2008-09-03 19:04 - 00000000 ____D () C:\Users\Marian
2014-03-08 12:10 - 2006-11-02 14:37 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-03-08 12:10 - 2006-11-02 12:22 - 54525952 _____ () C:\Windows\system32\config\system_previous
2014-03-08 12:10 - 2006-11-02 12:22 - 42729472 _____ () C:\Windows\system32\config\software_previous
2014-03-08 12:10 - 2006-11-02 12:22 - 38797312 _____ () C:\Windows\system32\config\components_previous
2014-03-08 12:10 - 2006-11-02 12:22 - 00524288 _____ () C:\Windows\system32\config\default_previous
2014-03-08 12:10 - 2006-11-02 12:22 - 00053248 _____ () C:\Windows\system32\config\sam_previous
2014-03-08 12:10 - 2006-11-02 12:22 - 00024576 _____ () C:\Windows\system32\config\security_previous
2014-03-08 12:09 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\registration
2014-03-06 21:59 - 2014-03-06 21:58 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-03-06 21:29 - 2013-07-19 17:50 - 00000000 ____D () C:\ProgramData\Avira
2014-03-06 21:26 - 2013-12-11 10:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox(190)
2014-03-06 20:00 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\LogFiles

Files to move or delete:
====================
C:\Users\Marian\AppData\Roaming\desktop.ini


Some content of TEMP:
====================
C:\Users\admin\AppData\Local\Temp\avgnt.exe
C:\Users\Marian\AppData\Local\Temp\avgnt.exe
C:\Users\Marian\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-01 17:46

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014  01
Ran by admin at 2014-04-01 18:12:44
Running from C:\Users\admin\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.45.2 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Reader 8.1.3 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A81300000003}) (Version: 8.1.3 - Adobe Systems Incorporated)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
CD/DVD Drive Acoustic Silencer (HKLM\...\{9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}) (Version: 2.02.01 - TOSHIBA)
Choice Guard (Version: 1.2.87.0 - Microsoft Corporation) Hidden
CrystalWhite Mouse Driver (HKLM\...\MouseSuite98) (Version: 1.0 - TRUST)
Haushaltskassenbuch (HKLM\...\Haushaltskassenbuch) (Version:  - )
HDAUDIO Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: 7.80.2.0 - Conexant Systems)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version:  - )
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - )
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
MahJongg Master (HKLM\...\MahJongg Master) (Version:  - )
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft XML Parser (Version: 8.0.7820.0 - Microsoft Corporation) Hidden
Microsoft XML Parser (Version: 8.20.8730.4 - Microsoft Corporation) Hidden
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OpenOffice.org 3.2 (HKLM\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5559 - Realtek Semiconductor Corp.)
REALTEK RTL8187B Wireless LAN Driver (HKLM\...\{895722FE-25FE-4854-95AC-B0C42F9DBEDA}) (Version: Package:1.00.0026 Driver:6.1116.1226.2007 - REALTEK Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version:  - Realtek Semiconductor Corp.)
Realtek WiFi Protected Setup Library (HKLM\...\{02CA24DD-C8B0-4280-BE53-7862869C2EB1}) (Version: Package:1.00.0026 - REALTEK Semiconductor Corp.)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.1.13105_6 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.6.1.13105_6 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Softwarenetz Kassenbuch4 (HKLM\...\Kassenbuch4) (Version:  - Softwarenetz)
Sony Ericsson PC Companion 2.01.149 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.01.149 - Sony Ericsson)
Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.11.4.11 - Sony Ericsson Mobile Communications AB)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 11.2.4.0 - Synaptics)
TOSHIBA Assist (HKLM\...\{12B3A009-A080-4619-9A2A-C6DB151D8D67}) (Version: 2.01.04 - TOSHIBA)
TOSHIBA Benutzerhandbücher (HKLM\...\{56995235-B76E-44A6-BA17-8FF13D3F907A}) (Version: 7.35 - TOSHIBA)
TOSHIBA ConfigFree (HKLM\...\{78C6A78A-8B03-48C8-A47C-78BA1FCA2307}) (Version: 7.1.27 - TOSHIBA Corporation)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.0.1.1.a - TOSHIBA Corporation)
TOSHIBA DVD PLAYER (HKLM\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 1.20.10 - TOSHIBA Corporation)
TOSHIBA Extended Tiles for Windows Mobility Center (HKLM\...\InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}) (Version: 1.01.00 - Toshiba)
TOSHIBA Extended Tiles for Windows Mobility Center (Version: 1.01.00 - Toshiba) Hidden
TOSHIBA Hardware Setup (HKLM\...\{2883F6F5-0509-43F3-868C-D50330DD9DD3}) (Version: 2.00.06 - )
Toshiba Online Product Information (HKLM\...\{2290A680-4083-410A-ADCC-7092C67FC052}) (Version: 1.00.0012 - TOSHIBA)
TOSHIBA Recovery Disc Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.0.0.1b - TOSHIBA)
TOSHIBA Supervisor Password (HKLM\...\{4B1E87C3-00DE-4898-8E39-E390AAEF2391}) (Version: 2.00.03 - )
TOSHIBA Value Added Package (HKLM\...\InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}) (Version: 1.1.14 - TOSHIBA Corporation)
TOSHIBA Value Added Package (Version: 1.1.14 - TOSHIBA Corporation) Hidden
TRDCReminder (HKLM\...\InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}) (Version: 1.00.0014 - TOSHIBA)
TRDCReminder (Version: 1.00.0014 - TOSHIBA) Hidden
TRORDCLauncher (HKLM\...\InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}) (Version: 1.0.0.1 - TOSHIBA)
TRORDCLauncher (Version: 1.0.0.1 - TOSHIBA) Hidden
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
VLC media player 1.1.11 (HKLM\...\VLC media player) (Version: 1.1.11 - VideoLAN)
Vodafone Mobile Connect Lite (HKLM\...\{79A64F98-1796-4FA2-B5FF-C90F83D8BACD}) (Version: 9.4.3.17550 - Vodafone)
Windows Live Anmelde-Assistent (HKLM\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8064.0206 - Microsoft Corporation)
Windows Live Essentials (Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Media Encoder 9-Reihe (HKLM\...\Windows Media Encoder 9) (Version:  - )
Windows Media Encoder 9-Reihe (Version: 9.00.3374 - Microsoft Corporation) Hidden
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
Yahoo! Detect (HKLM\...\YTdetect) (Version:  - )

==================== Restore Points  =========================

09-02-2014 21:27:55 Geplanter Prüfpunkt
10-02-2014 09:56:44 Geplanter Prüfpunkt
12-02-2014 10:43:23 Geplanter Prüfpunkt
13-02-2014 10:51:12 Geplanter Prüfpunkt
14-02-2014 08:26:16 Geplanter Prüfpunkt
14-02-2014 22:02:45 Geplanter Prüfpunkt
15-02-2014 14:01:14 Geplanter Prüfpunkt
17-02-2014 18:12:05 Geplanter Prüfpunkt
06-03-2014 18:19:45 Wiederherstellungsvorgang
06-03-2014 19:56:42 Windows Update
08-03-2014 10:04:26 Wiederherstellungsvorgang
08-03-2014 10:39:09 Installed Java 7 Update 51
08-03-2014 14:10:03 Windows-Modulinstallation
08-03-2014 14:14:08 Windows-Modulinstallation
08-03-2014 15:14:18 Windows-Modulinstallation
08-03-2014 15:16:10 Windows Update
01-04-2014 15:35:28 Installiert REALTEK RTL8187B Wireless LAN Driver

==================== Hosts content: ==========================

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {06ACA985-3206-459B-88E9-5E3012223684} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2DF8E6AF-FE1E-4EA6-87A6-85C800F8EA4C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {78D6D0EB-D267-4121-A77D-359C3404CC7C} - System32\Tasks\{D1FCAA16-FD83-4914-A75D-2469D1593C81} => C:\Program Files\Skype\\Phone\Skype.exe
Task: {B74EC196-5113-4CBA-87F4-AA97EF5BCB27} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-07-19 17:50 - 2013-07-19 17:48 - 00394824 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2008-02-18 16:55 - 2007-09-13 15:11 - 00249856 _____ () C:\Windows\system32\igfxTMM.dll
2009-01-04 20:41 - 2008-09-16 21:18 - 00132608 _____ () C:\Program Files\WinRAR\rarext.dll
2009-09-24 15:13 - 2009-04-11 08:28 - 00368640 _____ () C:\Windows\system32\msjetoledb40.dll
2008-02-18 17:40 - 2008-01-29 17:00 - 00430080 _____ () C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
2014-04-01 17:51 - 2014-04-01 17:51 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Sony Ericsson PCCompanion => 3
MSCONFIG\startupfolder: C:^Users^Marian^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^hamachi.lnk => C:\Windows\pss\hamachi.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Marian^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk => C:\Windows\pss\OpenOffice.org 3.2.lnk.Startup
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: DAEMON Tools => "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
MSCONFIG\startupreg: ISUSPM => "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: MobileConnect.EXE => C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.EXE
MSCONFIG\startupreg: MsnMsgr => "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
MSCONFIG\startupreg: NDSTray.exe => NDSTray.exe
MSCONFIG\startupreg: Picasa Media Detector => C:\Program Files\Picasa2\PicasaMediaDetector.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: SmoothView => %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
MSCONFIG\startupreg: Sony Ericsson PC Companion => "C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Java\jre6\bin\jusched.exe"
MSCONFIG\startupreg: swg => C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
MSCONFIG\startupreg: TkBellExe => "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
MSCONFIG\startupreg: topi => C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
MSCONFIG\startupreg: TOSCDSPD => TOSCDSPD.EXE
MSCONFIG\startupreg: TQ566808 => "F:\Setup.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/01/2014 05:44:07 PM) (Source: Microsoft-Windows-SpoolerSpoolss) (User: NT-AUTORITÄT)
Description: 0x80072afb

Error: (04/01/2014 05:42:30 PM) (Source: Microsoft-Windows-SpoolerSpoolss) (User: NT-AUTORITÄT)
Description: 0x80072afb

Error: (04/01/2014 05:41:38 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2014 05:40:28 PM) (Source: Microsoft-Windows-SpoolerSpoolss) (User: NT-AUTORITÄT)
Description: 0x80072afb

Error: (04/01/2014 05:40:11 PM) (Source: VMCService) (User: )
Description: conflictManagerTypeValue

Error: (04/01/2014 05:35:22 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {02e25742-00a7-4190-a102-8d233cb2eab7}

Error: (04/01/2014 05:24:03 PM) (Source: Microsoft-Windows-SpoolerSpoolss) (User: NT-AUTORITÄT)
Description: 0x80072afb

Error: (04/01/2014 05:21:03 PM) (Source: Microsoft-Windows-SpoolerSpoolss) (User: NT-AUTORITÄT)
Description: 0x80072afb

Error: (04/01/2014 05:18:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2014 05:17:31 PM) (Source: Microsoft-Windows-SpoolerSpoolss) (User: NT-AUTORITÄT)
Description: 0x80072afb


System errors:
=============
Error: (04/01/2014 05:44:07 PM) (Source: Service Control Manager) (User: )
Description: Druckwarteschlange3

Error: (04/01/2014 05:42:32 PM) (Source: Service Control Manager) (User: )
Description: Druckwarteschlange2600001Neustart des Diensts

Error: (04/01/2014 05:41:38 PM) (Source: Service Control Manager) (User: )
Description: Druckwarteschlange1600001Neustart des Diensts

Error: (04/01/2014 05:41:37 PM) (Source: netbt) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (04/01/2014 05:24:04 PM) (Source: Service Control Manager) (User: )
Description: Druckwarteschlange3

Error: (04/01/2014 05:21:03 PM) (Source: Service Control Manager) (User: )
Description: Druckwarteschlange2600001Neustart des Diensts

Error: (04/01/2014 05:18:41 PM) (Source: Service Control Manager) (User: )
Description: Druckwarteschlange1600001Neustart des Diensts

Error: (04/01/2014 05:04:53 PM) (Source: Service Control Manager) (User: )
Description: Druckwarteschlange3

Error: (04/01/2014 05:01:53 PM) (Source: Service Control Manager) (User: )
Description: Druckwarteschlange2600001Neustart des Diensts

Error: (04/01/2014 05:00:09 PM) (Source: Service Control Manager) (User: )
Description: Druckwarteschlange1600001Neustart des Diensts


Microsoft Office Sessions:
=========================
Error: (04/01/2014 05:44:07 PM) (Source: Microsoft-Windows-SpoolerSpoolss)(User: NT-AUTORITÄT)
Description: 0x80072afb

Error: (04/01/2014 05:42:30 PM) (Source: Microsoft-Windows-SpoolerSpoolss)(User: NT-AUTORITÄT)
Description: 0x80072afb

Error: (04/01/2014 05:41:38 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2014 05:40:28 PM) (Source: Microsoft-Windows-SpoolerSpoolss)(User: NT-AUTORITÄT)
Description: 0x80072afb

Error: (04/01/2014 05:40:11 PM) (Source: VMCService)(User: )
Description: conflictManagerTypeValue

Error: (04/01/2014 05:35:22 PM) (Source: VSS)(User: )
Description: 0x80070005

Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {02e25742-00a7-4190-a102-8d233cb2eab7}

Error: (04/01/2014 05:24:03 PM) (Source: Microsoft-Windows-SpoolerSpoolss)(User: NT-AUTORITÄT)
Description: 0x80072afb

Error: (04/01/2014 05:21:03 PM) (Source: Microsoft-Windows-SpoolerSpoolss)(User: NT-AUTORITÄT)
Description: 0x80072afb

Error: (04/01/2014 05:18:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2014 05:17:31 PM) (Source: Microsoft-Windows-SpoolerSpoolss)(User: NT-AUTORITÄT)
Description: 0x80072afb


==================== Memory info =========================== 

Percentage of memory in use: 57%
Total physical RAM: 2037.22 MB
Available physical RAM: 856.13 MB
Total Pagefile: 4315.65 MB
Available Pagefile: 2951.05 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.86 MB

==================== Drives ================================

Drive c: (Vista) (Fixed) (Total:148.97 GB) (Free:94.36 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (Data) (Fixed) (Total:147.65 GB) (Free:142.71 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: B4ECF4B8)

Partition: GPT Partition Type.

==================== End Of Log ============================