pokki löschen wegen Systembelastung

ewes-Ltd · 10.05.2014, 08:36

Hallo Schrauber,

das Gerät läuft seit ca.13:00 Uhr mit dem ESET Scan. Ich bin bei 35% und habe vier Trojaner bisher.
Von 31% - 33% hat das Programm drei Stunden gebraucht. Jetzt scheint es wieder zu laufen.

Ich werde mich peinlich genau an Deine Anweisungen halten und hoffe, dass das Gerät heute noch fertig wird.
Morgen früh solltest Du alles in Deinem Postfach haben.

Ich wünsche Dir auf jeden Fall ein schönes Wochenende

herzlichst

Ewes

Nachtrag

Hallo Schrauber,

das Gerät läuft jetzt 11 Std und ist bei 63% und 6 Trojanern.

Es ist alles sehr mühsam. Ich hoffe aber auf Dich und Dein Wissen und Deine großartige Arbeit. Dann bekommen wir dieses Arbeitsgerät in den Griff.
Danke für Deine Geduld

Weiterhin ein schönes Wochenende wünscht

ewes

Hallo Schrauber,

ein Teil hat schon mal geklappt. Hier ist die log-datei von ESET.

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=e89e134ceb4afa46ac5e1ee857a7f53b
# engine=18195
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-05-10 02:29:14
# local_time=2014-05-10 04:29:14 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 802660 151318804 0 0
# scanned=598011
# found=9
# cleaned=0
# scan_time=52300
sh=9B9062CBBF49751BFC7BC3B1D11C3CD58402E08F ft=0 fh=0000000000000000 vn="LNK/URL.B Trojaner" ac=I fn="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RAR File Open Knife - Free Opener\RAR File Open Knife - Free Opener Updates.lnk"
sh=9B9062CBBF49751BFC7BC3B1D11C3CD58402E08F ft=0 fh=0000000000000000 vn="LNK/URL.B Trojaner" ac=I fn="C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\RAR File Open Knife - Free Opener\RAR File Open Knife - Free Opener Updates.lnk"
sh=4ED6D40AB3E6A6E40E68FA684A63C53686D1E365 ft=1 fh=0b067602e1e65369 vn="Variante von Win32/Kryptik.BWJC Trojaner" ac=I fn="C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\25.09.2011\Eig.Bilder\Eigene Bilder-ges\Gold\ZipExtractorSetup.exe"
sh=91B68C32A95F3EEBE3EC0F87E13EEFB0A1C9888A ft=1 fh=f8749750d7bae848 vn="Variante von Win32/Adware.RegRevive.A Anwendung" ac=I fn="C:\Users\Wolfgang Dorn\Mediencenter\Computer\Reguse_Installer.exe"
sh=D22F6ADC776FFC93895C74001A07B813A205235B ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.iBryte.D Anwendung" ac=I fn="E:\EWES2000\Backup Set 2014-04-22 221349\Backup Files 2014-04-22 221349\Backup files 5.zip"
sh=22FB370B89E82A34CC7A91BB7C730DC13053F1E3 ft=0 fh=0000000000000000 vn="Variante von Win32/Kryptik.BWJC Trojaner" ac=I fn="E:\EWES2000\Backup Set 2014-04-22 221349\Backup Files 2014-04-22 221349\Backup files 39.zip"
sh=A97D88521D1B4453F23C50CC903A8C87F58639CA ft=1 fh=c71c0011556e1eeb vn="Variante von Win32/TrojanDownloader.FakeNSIS.A Trojaner" ac=I fn="K:\Wolfgang Dorn\ZipExtractorSetup.exe"
sh=4ED6D40AB3E6A6E40E68FA684A63C53686D1E365 ft=1 fh=0b067602e1e65369 vn="Variante von Win32/Kryptik.BWJC Trojaner" ac=I fn="K:\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\25.09.2011\Eig.Bilder\Eigene Bilder-ges\Gold\ZipExtractorSetup.exe"
sh=91B68C32A95F3EEBE3EC0F87E13EEFB0A1C9888A ft=1 fh=f8749750d7bae848 vn="Variante von Win32/Adware.RegRevive.A Anwendung" ac=I fn="K:\Wolfgang Dorn\Mediencenter\Computer\Reguse_Installer.exe"

Das war jetzt ne reine Nervensache. Obwohl ich im System war, sollte ich zurück drücken - und logischerweise war mein Bericht erst mal weg.
Jetzt schicke ich ihn sofort los, bevor ich weitermache und Dir den Rest schicke.

Die Meldung war jetzt, dass der Arbeitsspeicher voll ist. Trotzdem, dass ich das ignoriert habe, hat das Gerät die offenen Fenster geschlossen.

Also; Teil-2 kommt in Kürze

MfG - ewes

Teil-2

Hallo Schrauber!

Das ist jetzt der Security-Check - ohne dass ich irgendetwas gelöscht habe.
D.h., dass die Bedrohungen noch nicht entfernt wurden - oder?

Ich habe bei ESET keine Möglichkeit gefunden, irgendetwas in Quarantäne zu verschieben, oder zu löschen!
Muss ich da jetzt etwas machen, oder machst Du das aus der Ferne?

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.82  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
AVG AntiVirus Free Edition 2014   
Microsoft Security Essentials     
 Antivirus out of date!  
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 TuneUp Utilities 2013   
 TuneUp Utilities Language Pack (de-DE) 
 Java 7 Update 55  
 Adobe Flash Player 13.0.0.206  
 Adobe Reader 10.1.9 Adobe Reader out of Date!  
 Mozilla Firefox (28.0) 
 Google Chrome 34.0.1847.116  
 Google Chrome 34.0.1847.131  
 Google Chrome Plugins...  
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials msseces.exe 
 Windows Defender MSMpEng.exe 
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 AVG avgwdsvc.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

und jetzt versuche ich noch eine frische FRST-log zu liefern.

defogger habe ich nicht vorher laufen lassen !!!

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2014 01
Ran by Wolfgang Dorn (administrator) on EWES2000 on 10-05-2014 08:04:38
Running from C:\Downloads\Software
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NCH Software) C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(NCH Software) C:\Program Files (x86)\NCH Software\Fling\fling.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(Microsoft Corporation) C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Google) C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
() C:\Program Files (x86)\Greenshot\Greenshot.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
() C:\Downloads\Software\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(FreeDownloadManager.ORG) C:\Program Files (x86)\Free Download Manager\fdm.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5670448 2013-02-05] (VIA)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5180432 2014-04-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Google Desktop Search] => C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Fling] => C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
HKLM-x32\...\Run: [FileFort] => C:\Program Files (x86)\NCH Software\FileFort\filefort.exe [1391144 2013-08-24] (NCH Software)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Player\DelayPluginI.exe [1960008 2013-09-28] ()
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [32D4EFD63E3776D01E26F2FB20F229EDFF05E6BE._service_run] => C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [SkyDrive] => C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-04-15] (Microsoft Corporation)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [1&1_1&1 Upload-Manager] => C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE [989264 2011-11-21] (1&1 Internet AG)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Google Update] => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-30] (Google Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [831488 2013-12-13] (ZONER software)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\RunOnce: [Uninstall C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"
IFEO\davsrv.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\filefort.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\lgux.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\strato hidrive.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tomtomhome.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\uninstall tomtom home.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.2.1:80
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Wondershare Player 1.6.0 - {43D9786F-A485-683B-9B5B-ACC97ABC17FC} - C:\ProgramData\Wondershare\Player\WSBrowserAppMgr.dll (Wondershare)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro PDF\Professional 7\npnitromozilla.dll ( )
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: samsung.com/SamsungLinkPCPlugin - C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll (Samsung)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Wolfgang Dorn\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-26]
FF Extension: Ghostery - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\firefox@ghostery.com.xpi [2014-04-26]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKLM-x32\...\Firefox\Extensions: [Player@Wondershare.com] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\
FF Extension: No Name - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\ []
FF HKCU\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR StartupUrls: "hxxp://www.google.de/"
CHR Extension: (GMX MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\camnampocfohlcgbajligmemmabnljcm [2014-03-03]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-03-03]
CHR Extension: (Learn Spanish with LoMÃ*sTv) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejdepbibpmpfkeokhhnlidhfgmpapnm [2013-11-05]
CHR Extension: (Skype Click to Call) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-04-22]
CHR Extension: (AVG Secure Search) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2014-03-13]
CHR Extension: (DVDVideoSoft) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2014-01-25]
CHR Extension: (Google Wallet) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Learn Spanish - QuÃ© Onda) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmcdjmebmeoobmdghjbjhbifoocbcmaj [2013-11-05]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [bkdegagmpemadclljncealhmmkojfoam] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR StartMenuInternet: Google Chrome - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

S4 AllShare Framework DMS; C:\PROGRAM FILES\SAMSUNG\ALLSHARE FRAMEWORK DMS\1.3.21\ALLSHAREFRAMEWORKMANAGERDMS.EXE [404360 2013-10-11] (Samsung)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3645456 2014-04-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [291912 2014-03-27] (AVG Technologies CZ, s.r.o.)
R2 BroadCamService; C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe [2563808 2012-12-19] (NCH Software)
S4 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\DfSdkS64.exe [548704 2010-03-13] (mst software GmbH, Germany)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 FlingService; C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
S3 GSService; C:\Windows\SysWOW64\GSService.exe [443080 2013-12-16] ()
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] ()
U2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-09-04] (Nitro PDF Software)
R2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [229392 2012-09-13] (Nitro PDF Software)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [605768 2013-10-30] (Copyright 2013 SAMSUNG)
S4 STRATO HiDrive Service; C:\Program Files (x86)\STRATO AG\STRATO HiDrive\STRATO HiDrive Service.exe [32768 2011-11-15] (STRATO)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2412344 2014-01-28] (TuneUp Software)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-12] (VIA Technologies, Inc.)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [X]

==================== Drivers (Whitelisted) ====================

S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus64.sys [19456 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag64.sys [27648 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps64.sys [27136 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem64.sys [34304 2012-03-02] (LG Electronics Inc.)
S3 androidusb; C:\Windows\System32\Drivers\lgandadb.sys [31744 2010-08-02] (Google Inc)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [237336 2014-04-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192792 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [236824 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [324376 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [130840 2014-03-31] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [32536 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [274200 2014-03-31] (AVG Technologies CZ, s.r.o.)
R3 HaozipVirtualCDBus; C:\Windows\System32\DRIVERS\HaoZipVirtualCDBus.sys [204888 2012-07-24] (Shanghai RuiChuang)
S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37248 2012-05-22] (Abelssoft GmbH)
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2010-07-16] (CACE Technologies, Inc.)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-04-26] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-08-28] (TuneUp Software)
R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)
R1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [102664 2013-12-12] ()
R1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25992 2013-12-12] ()
R1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [700680 2013-12-12] ()
R3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare)
S3 cpuz134; \??\C:\Users\WOLFGA~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
S3 VBoxDrv; \??\C:\Program Files\Oracle\VirtualBox\VBoxDrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-07 19:48 - 2014-05-07 19:48 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-07 18:18 - 2014-05-07 18:35 - 129058304 _____ () C:\Users\Wolfgang Dorn\paragon-drive-copy-professional-14-bootcd-builder.msi
2014-05-07 17:58 - 2014-05-07 17:58 - 00002350 _____ () C:\Users\Public\Desktop\Paragon Drive Copy™ 14 Professional.lnk
2014-05-07 17:58 - 2014-05-07 17:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Drive Copy™ 14 Professional
2014-05-07 17:56 - 2014-05-07 17:56 - 00000000 ____D () C:\Program Files\Paragon Software
2014-05-06 20:43 - 2014-05-06 20:43 - 00137837 _____ () C:\Users\Wolfgang Dorn\Desktop\JRT.txt
2014-05-06 20:33 - 2014-05-06 20:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-06 20:25 - 2014-05-06 20:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 20:00 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-06 19:59 - 2014-05-06 20:13 - 00000000 ____D () C:\AdwCleaner
2014-05-06 19:03 - 2014-05-06 19:03 - 00001073 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-06 19:03 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-06 18:58 - 2014-05-06 18:58 - 00002155 _____ () C:\Users\Wolfgang Dorn\Desktop\ Malwarebytes Anti-Malware  - CHIP Downloader.lnk
2014-05-06 17:04 - 2014-05-06 19:44 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-06 16:38 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-06 16:38 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-04 23:57 - 2012-06-01 07:39 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll
2014-05-04 23:57 - 2012-06-01 07:36 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll
2014-05-04 23:57 - 2012-06-01 07:36 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll
2014-05-04 23:57 - 2012-06-01 07:35 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll
2014-05-04 23:57 - 2012-06-01 07:34 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll
2014-05-04 23:57 - 2012-06-01 07:33 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe
2014-05-04 23:57 - 2012-06-01 06:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wamregps.dll
2014-05-04 23:57 - 2012-06-01 06:37 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisRtl.dll
2014-05-04 23:57 - 2012-06-01 06:37 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisrstap.dll
2014-05-04 23:57 - 2012-06-01 06:35 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admwprox.dll
2014-05-04 23:57 - 2012-06-01 06:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ahadmin.dll
2014-05-04 23:57 - 2012-06-01 06:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisreset.exe
2014-05-04 21:24 - 2014-05-04 21:24 - 00000000 _____ () C:\Users\Wolfgang Dorn\defogger_reenable
2014-05-04 21:05 - 2014-05-10 08:04 - 00000000 ____D () C:\FRST
2014-05-04 19:41 - 2014-05-10 07:43 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-04 19:09 - 2014-05-05 09:22 - 00044948 _____ () C:\Windows\iis7.log
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-02 23:00 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-02 23:00 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-02 23:00 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-02 23:00 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-01 21:07 - 2014-05-08 16:08 - 00001174 _____ () C:\Windows\PFRO.log
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:42 - 2014-05-09 13:20 - 00001400 _____ () C:\Windows\setupact.log
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-26 22:10 - 2014-04-26 22:16 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 21:17 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-04-23 21:17 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-04-22 19:04 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-04-22 19:04 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-04-22 19:04 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-04-22 19:04 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-04-22 19:04 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-04-22 19:04 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-04-22 19:04 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-04-22 19:03 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 19:02 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 19:02 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 19:02 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 19:02 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 19:02 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 19:02 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 19:02 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 19:02 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 19:02 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 19:02 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 19:02 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 18:59 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-04-22 18:59 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:42 - 2014-04-21 23:43 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-05-08 03:25 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-05-04 21:03 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-04-21 18:10 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 13:56 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-21 13:56 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-21 13:56 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-21 13:56 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-21 13:56 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-21 13:55 - 2014-04-21 13:56 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-20 01:05 - 2014-04-20 01:11 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2013-12-16 20:31 - 00443080 _____ () C:\Windows\SysWOW64\GSService.exe
2014-04-19 23:58 - 2014-04-28 19:12 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-04-19 23:55 - 2013-08-22 19:09 - 00256088 _____ () C:\Windows\system32\unrar64.dll
2014-04-19 23:55 - 2013-08-22 19:09 - 00217176 _____ () C:\Windows\SysWOW64\unrar.dll
2014-04-19 23:53 - 2014-04-20 01:05 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:24 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-19 14:24 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-19 14:24 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-19 14:23 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-19 14:23 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-19 14:23 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-19 14:22 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-19 14:04 - 2014-04-19 14:59 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-19 23:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 01:55 - 2014-04-19 23:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-17 01:47 - 2014-04-28 19:12 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-04-17 01:47 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-17 01:46 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-17 01:46 - 2014-04-23 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-16 23:17 - 2014-04-16 23:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-16 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 12:35 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:21 - 2014-05-04 16:26 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-04-15 15:21 - 2014-05-04 16:26 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-04-12 19:28 - 2014-04-12 19:28 - 00000000 ____D () C:\ProgramData\TomTom
2014-04-10 00:13 - 2014-04-14 22:56 - 00008817 _____ () C:\Users\Wolfgang Dorn\Sti_Trace.log

==================== One Month Modified Files and Folders =======

2014-05-10 08:04 - 2014-05-04 21:05 - 00000000 ____D () C:\FRST
2014-05-10 08:04 - 2013-11-29 21:19 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\HaoZip
2014-05-10 07:50 - 2011-09-28 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Skype
2014-05-10 07:44 - 2011-09-20 13:44 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-10 07:43 - 2014-05-04 19:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-10 07:37 - 2012-07-12 18:34 - 00668160 ___SH () C:\Users\Wolfgang Dorn\Desktop\Thumbs.db
2014-05-10 07:22 - 2012-11-30 14:09 - 00001152 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA.job
2014-05-10 07:14 - 2012-07-15 20:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-09 19:22 - 2012-11-30 14:09 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core.job
2014-05-09 13:51 - 2014-03-19 02:42 - 01457200 _____ () C:\Windows\WindowsUpdate.log
2014-05-09 13:44 - 2011-09-20 13:44 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-09 13:39 - 2011-09-20 13:44 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-09 13:39 - 2011-09-20 13:44 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-09 13:33 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-09 13:33 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-09 13:32 - 2012-08-14 09:42 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-05-09 13:29 - 2009-07-14 19:58 - 00748396 _____ () C:\Windows\system32\perfh007.dat
2014-05-09 13:29 - 2009-07-14 19:58 - 00163768 _____ () C:\Windows\system32\perfc007.dat
2014-05-09 13:29 - 2009-07-14 07:13 - 01737134 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-09 13:24 - 2013-11-25 20:53 - 00000000 ___RD () C:\Users\Wolfgang Dorn\SkyDrive
2014-05-09 13:23 - 2011-09-29 01:20 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Nitro PDF
2014-05-09 13:20 - 2014-05-01 11:42 - 00001400 _____ () C:\Windows\setupact.log
2014-05-09 13:20 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-09 10:19 - 2014-01-08 02:11 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\CrashDumps
2014-05-09 09:48 - 2012-08-14 01:05 - 00000000 ____D () C:\ProgramData\MFAData
2014-05-08 16:08 - 2014-05-01 21:07 - 00001174 _____ () C:\Windows\PFRO.log
2014-05-08 03:25 - 2014-04-21 18:12 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-05-07 19:48 - 2014-05-07 19:48 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-07 18:35 - 2014-05-07 18:18 - 129058304 _____ () C:\Users\Wolfgang Dorn\paragon-drive-copy-professional-14-bootcd-builder.msi
2014-05-07 18:35 - 2011-09-08 14:18 - 00000000 ____D () C:\Users\Wolfgang Dorn
2014-05-07 17:58 - 2014-05-07 17:58 - 00002350 _____ () C:\Users\Public\Desktop\Paragon Drive Copy™ 14 Professional.lnk
2014-05-07 17:58 - 2014-05-07 17:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Drive Copy™ 14 Professional
2014-05-07 17:56 - 2014-05-07 17:56 - 00000000 ____D () C:\Program Files\Paragon Software
2014-05-07 17:52 - 2013-06-13 11:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Downloaded Installations
2014-05-07 12:17 - 2013-01-22 04:26 - 00000000 ___RD () C:\Users\Wolfgang Dorn\Mediencenter
2014-05-06 20:43 - 2014-05-06 20:43 - 00137837 _____ () C:\Users\Wolfgang Dorn\Desktop\JRT.txt
2014-05-06 20:33 - 2014-05-06 20:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-06 20:25 - 2014-05-06 20:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 20:13 - 2014-05-06 19:59 - 00000000 ____D () C:\AdwCleaner
2014-05-06 19:44 - 2014-05-06 17:04 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-06 19:44 - 2011-10-04 21:56 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-05-06 19:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-06 19:41 - 2013-09-19 23:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-05-06 19:17 - 2012-11-30 14:09 - 00004138 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA
2014-05-06 19:17 - 2012-11-30 14:09 - 00003742 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core
2014-05-06 19:03 - 2014-05-06 19:03 - 00001073 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-06 18:58 - 2014-05-06 18:58 - 00002155 _____ () C:\Users\Wolfgang Dorn\Desktop\ Malwarebytes Anti-Malware  - CHIP Downloader.lnk
2014-05-06 00:37 - 2012-07-12 14:49 - 00403968 ___SH () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Thumbs.db
2014-05-06 00:13 - 2011-09-26 12:31 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Winamp
2014-05-05 16:25 - 2014-03-21 00:59 - 00008192 _____ () C:\Users\Wolfgang Dorn\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-05 09:22 - 2014-05-04 19:09 - 00044948 _____ () C:\Windows\iis7.log
2014-05-05 09:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\inetsrv
2014-05-05 09:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-05-04 21:24 - 2014-05-04 21:24 - 00000000 _____ () C:\Users\Wolfgang Dorn\defogger_reenable
2014-05-04 21:03 - 2014-04-21 18:10 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-05-04 19:23 - 2012-01-18 11:07 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-04 16:26 - 2014-04-15 15:21 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-04 16:26 - 2014-04-15 15:21 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-04 14:18 - 2014-03-24 18:26 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\.oit
2014-05-01 21:07 - 2014-03-19 02:38 - 00424632 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-01 20:39 - 2014-03-27 10:13 - 00111336 _____ () C:\Users\Wolfgang Dorn\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 20:21 - 2012-02-22 18:53 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:52 - 2013-12-09 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\GMX Application {sync-000021}
2014-05-01 11:31 - 2011-09-26 12:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2014-05-01 11:24 - 2011-09-26 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-01 11:08 - 2014-04-02 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-05-01 11:08 - 2013-09-27 18:42 - 00000941 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:45 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-30 22:33 - 2011-12-10 16:20 - 00000000 ____D () C:\Windows\pss
2014-04-30 20:47 - 2014-01-18 23:05 - 00000000 ____D () C:\Program Files (x86)\CheckDrive
2014-04-30 19:18 - 2012-01-08 19:33 - 00002400 _____ () C:\Users\Wolfgang Dorn\Desktop\Google Chrome.lnk
2014-04-29 16:01 - 2014-05-02 23:00 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-02 23:00 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 11:14 - 2011-09-20 14:20 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 09:40 - 2011-09-19 01:32 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-04-28 19:46 - 2011-09-27 10:48 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic
2014-04-28 19:12 - 2014-04-19 23:58 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-04-28 19:12 - 2014-04-17 01:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-04-28 17:45 - 2011-12-30 20:08 - 00000000 ____D () C:\Program Files (x86)\ubuntuone
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-27 19:46 - 2013-12-03 20:35 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-04-26 23:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-26 23:35 - 2013-05-29 14:45 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-04-26 23:04 - 2011-09-19 01:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-26 22:16 - 2014-04-26 22:10 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 12:18 - 2011-09-27 11:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Paint.NET
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 22:06 - 2014-04-21 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-23 22:06 - 2014-04-21 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-23 22:06 - 2014-04-17 01:47 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-23 22:06 - 2014-04-17 01:46 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-23 22:06 - 2013-08-07 13:31 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-04-23 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-04-23 22:05 - 2014-04-17 01:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-23 22:05 - 2011-09-26 17:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla
2014-04-23 09:52 - 2012-03-11 17:40 - 00000000 ____D () C:\Users\Wolfgang Dorn\Tracing
2014-04-22 19:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-22 17:53 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:43 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:43 - 2011-09-28 23:55 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 15:11 - 2013-10-23 12:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-21 13:56 - 2014-04-21 13:55 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-21 13:56 - 2012-07-02 08:43 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-20 22:49 - 2013-12-06 20:48 - 00000000 ____D () C:\Users\Wolfgang Dorn\Bavaria Holiday Enterprises, Inc
2014-04-20 11:26 - 2011-09-19 01:59 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Microsoft Help
2014-04-20 01:11 - 2014-04-20 01:05 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2014-04-19 23:53 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-20 00:24 - 2012-02-22 18:54 - 00000000 ____D () C:\ProgramData\InstallShield
2014-04-20 00:24 - 2011-09-19 02:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-20 00:23 - 2011-09-19 01:29 - 00000000 ____D () C:\ProgramData\Brother
2014-04-19 23:55 - 2014-04-17 01:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-19 23:55 - 2014-04-17 01:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 23:35 - 2013-05-29 14:44 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:12 - 2011-09-26 12:15 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-04-19 15:09 - 2012-06-10 18:28 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\RealNetworks
2014-04-19 15:09 - 2012-01-16 10:55 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Real
2014-04-19 15:00 - 2013-08-14 18:05 - 00000000 ____D () C:\ProgramData\Wondershare Player
2014-04-19 15:00 - 2013-02-27 16:23 - 00000000 ____D () C:\ProgramData\Wondershare
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Program Files (x86)\Winamp Detect
2014-04-19 15:00 - 2011-09-26 12:07 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\vlc
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2014-04-19 14:04 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2012-01-16 10:55 - 00000000 ____D () C:\ProgramData\Real
2014-04-19 14:46 - 2013-08-15 16:51 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-19 14:33 - 2012-07-05 00:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla Firefox
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-17 00:06 - 2012-12-22 02:49 - 00003398 _____ () C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:41 - 2014-04-16 23:17 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-16 20:32 - 2011-09-26 19:13 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-04-16 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 20:31 - 2013-11-25 21:01 - 00001334 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-04-16 20:31 - 2011-09-26 19:14 - 00001450 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-04-16 20:30 - 2011-09-26 19:13 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-04-16 20:29 - 2011-09-26 19:12 - 00000000 ____D () C:\Program Files\Windows Live
2014-04-16 14:39 - 2013-08-07 13:30 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Wondershare Video Converter Ultimate
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-04-16 14:02 - 2012-01-08 19:33 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-16 14:02 - 2011-12-20 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2014-04-16 01:54 - 2014-01-30 22:17 - 00007601 _____ () C:\Users\Wolfgang Dorn\AppData\Local\resmon.resmoncfg
2014-04-15 23:23 - 2014-03-24 17:58 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Epson Drucker
2014-04-15 22:53 - 2014-03-24 17:10 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-04-15 21:28 - 2014-01-18 23:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Abelssoft
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:23 - 2014-01-18 23:06 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-04-15 15:23 - 2011-12-20 23:25 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\TomTom
2014-04-15 15:23 - 2011-12-20 23:24 - 00000000 ____D () C:\Program Files (x86)\TomTom HOME 2
2014-04-15 15:23 - 2011-09-26 12:31 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-04-15 15:22 - 2011-09-26 17:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\25.09.2011
2014-04-14 22:56 - 2014-04-10 00:13 - 00008817 _____ () C:\Users\Wolfgang Dorn\Sti_Trace.log
2014-04-14 20:13 - 2014-04-21 13:56 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-14 20:05 - 2014-04-21 13:56 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-14 20:05 - 2014-04-21 13:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-14 20:04 - 2014-04-21 13:56 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-14 12:06 - 2014-03-24 17:12 - 00000279 _____ () C:\Users\Public\Desktop\Epson Benutzerhandbuch WF-2540 Series.url
2014-04-14 12:06 - 2014-03-24 17:12 - 00000256 _____ () C:\Users\Public\Desktop\Anleitung für Epson Connect.url
2014-04-14 04:24 - 2014-05-06 16:38 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-05-06 16:38 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-04-12 19:28 - 2014-04-12 19:28 - 00000000 ____D () C:\ProgramData\TomTom

Files to move or delete:
====================
C:\Users\Wolfgang Dorn\FileViewPro_2014.exe
C:\Users\Wolfgang Dorn\gimp-2.8.10-setup.exe
C:\Users\Wolfgang Dorn\haozip_v3.0.multi.exe
C:\Users\Wolfgang Dorn\pdf24-creator-6.0.1.exe
C:\Users\Wolfgang Dorn\RevoUninProSetup.exe
C:\Users\Wolfgang Dorn\setup.exe
C:\Users\Wolfgang Dorn\sysrc_trial_3267_3965405.exe
C:\Users\Wolfgang Dorn\WEB.DE_MailCheck_chrome_setup.exe
C:\Users\Wolfgang Dorn\winamp565_full_emusic-7plus_de-de.exe
C:\Users\Wolfgang Dorn\ZipExtractorSetup.exe


Some content of TEMP:
====================
C:\Users\Wolfgang Dorn\AppData\Local\Temp\Quarantine.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\shutdown1398699937.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is33D2.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is6B6C.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is80AF.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is8B30.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_isE209.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-04 17:01

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Was ist jetzt meine Aufgabe?

Kann und soll ich normal weiterarbeiten? Und was mache ich mit der vollen Arbeitsspeichermeldung, die sich ständig dazwischendrängt und meine Fenster schließt?

Egal wie - aber ich wünsche Dir jetzt ein schönes Wochenende!

Herzlichst

ewes

***

Hallo Schrauber,

sorry, dass ich mich nochmal melde, aber es ist relativ schwierig geworden zu arbeiten.

1. Obwohl ich nichts auf und nichts angeschlossen habe, außer Drucker, Maus und Tastatur kommt die Meldung:
"Der Computer hat nicht genügend Arbeitsspeicher"
Damit die Programme ordnungsgemäß ausgeführt werden, müssen Sie den erforderlichen Arbeitsspeicher wiederherstellen, indem Sie alle Dateien speichern und dann alle geöffneten Programme schließen und neu starten.

2. jetzt: Bildschirm schwarz
dann Meldung: Windows-Fehler in Anwendung
X - Die Ausnahme "unknown software exception" (0x40000015) ist in der Anwendung an der Stelle 0x00f6b90a aufgetreten.
Klicken Sie auf "ok", um das Programm zu beenden.

Was mache ich nun? Hast Du einen Vorschlag für mich?

MfG - ewes

schrauber · 11.05.2014, 06:24

Hast Du den Rechner mal neu gestartet?

Die FUnde von ESET kannst Du manuell löschen, das ist dein Backup sowie die Daten im Programme Ordner auf dem Desktop.

Adobe updaten.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

Zitat:

ProxyServer: 192.168.2.1:80

Proxy hast Du gesetzt? Und ich würde mal mit dem TUneUp aufhören.

ewes-Ltd · 12.05.2014, 00:32

Danke Schrauber,

die Dateien habe ich gelöscht. Dies war erstmal nicht so einfach, weil das Suchprogramm die Bezeichnungen nicht gefunden hat. Aber es ist jetzt hoffentlich geschafft.

Das mit dem TFC erledige ich im Laufe des Tages.

TunUp werde ich ebenfalls zumindest deaktivieren, oder ganz löschen - gemäß Deinem Ratschlag.

Das mit dem Proxy Server ist mir noch nicht klar. Sobald ich die Zeit finde, werde ich mich damit beschäftigen.

Ich hoffe, dass ich dann die Meldung: "zu wenig Arbeitsspeicher" auch weg bekomme. Denn ich fahre jedesmal runter. D.h., dass ich das Gerät mit Sicherheit schon 10x deswegen ausgeschaltet und wieder hochgefahren habe.

Um 23:00 Uhr wollte ich unser Portal "Trojanerboard" öffnen, aber es kam ein schwarzer Bildschirm. Also habe ich den berühmten Knopf gedrückt und dem Gerät den Saft entzogen.
Dann ist das Gerät einwandfrei wieder hochgefahren - allerdings sehr langsam.
Zuerst waren alle ICON's wieder da, dann kam die Meldung: " Malwarebytes Anti-Malware " nicht aktiv. Als ich es wegdrücken wollte, ging es von selbst und alle ICON's verblassten wieder. Danach baute sich der Bildschirm von allein wieder langsam auf.

Ich melde mich wieder, sobald ich meine Hausaufgaben gemacht habe.

Im Moment erstmal wieder großes DANKE

MfG - ewes

schrauber · 12.05.2014, 16:27

Ändern der Größe des virtuellen Arbeitsspeichers - Hilfe zu Microsoft*Windows
Virtuellen Speicher bitte mal einstellen:
Start 1,33 Mal die Größe deines RAM
Max auf 3 Mal RAM

Öffne mal bitte FRST, setz nen Haken bei Additional und scanne, poste beide Logfiles.

ewes-Ltd · 12.05.2014, 23:44

Hallo Schrauber

wie gewünscht -

hier kommt additional von FRST:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2014 01
Ran by Wolfgang Dorn at 2014-05-13 00:06:34
Running from C:\Downloads\Software
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
1&1 EasyLogin (HKLM-x32\...\1&1 EasyLogin) (Version:  - )
1&1 Upload-Manager (HKLM-x32\...\1&1 Upload-Manager) (Version: 2.0.676 - 1&1 Internet AG)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.2090 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.7.0.2090 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 3.10.142.72249 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 3.10.142.72249 - Alcor Micro Corp.) Hidden
AllShare Framework DMS (HKLM\...\{BF01E7C5-918C-4AAB-8099-2D4411E6E6F4}) (Version: 1.3.21 - Samsung)
AnyMedia Player 4.5.1 (HKLM-x32\...\{1959CCD2-1227-4de4-97E7-04F29D526762}_is1) (Version: 4.5.1 - cyan soft ltd)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio 11 v.11.0.4 (HKLM-x32\...\Ashampoo Burning Studio 11_is1) (Version: 11.0.4 - Ashampoo GmbH & Co. KG)
Ashampoo ClipFinder HD v.2.3.3 (HKLM-x32\...\Ashampoo ClipFinder HD_is1) (Version: 2.3.3 - Ashampoo GmbH & Co. KG)
Ashampoo ClipFinder HD v.2.3.5 (HKLM-x32\...\{0A11EA01-36EF-0070-F54C-E06E25BC1924}_is1) (Version: 2.3.5 - Ashampoo GmbH & Co. KG)
Ashampoo GetBack Photo v.1.0.1 (HKLM-x32\...\Ashampoo GetBack Photo_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo Movie Studio v.1.0.9 (HKLM-x32\...\{91B33C97-54B3-9CEB-E911-246EDA9BDC9A}_is1) (Version: 1.0.9 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 10 v.10.2.1 (HKLM-x32\...\{C92AB6F1-4B66-808A-D77C-25EF81C0176A}_is1) (Version: 10.2.1 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 11 v.11.0.3 (HKLM-x32\...\{C92AB6F1-0F9C-8526-5DF1-0A2FD0FB33D9}_is1) (Version: 11.0.3 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 9 v.9.4.3 (HKLM-x32\...\Ashampoo Photo Commander 9_is1) (Version: 9.4.3 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer 3 v.3.13 (HKLM-x32\...\Ashampoo Photo Optimizer 3_is1) (Version: 3.1.3 - Ashampoo Technology GmbH & Co. KG)
Ashampoo Photo Optimizer 4 4.0.3 (HKLM-x32\...\Ashampoo Photo Optimizer 4_is1) (Version: 4.0.3 - Ashampoo GmbH & Co. KG)
Ashampoo UnInstaller 4 v.4.20 (HKLM-x32\...\Ashampoo UnInstaller 4_is1) (Version: 4.2.0 - Ashampoo GmbH & Co. KG)
Audials (HKLM-x32\...\{D928A4B7-126D-47B6-AD76-9848E51E1426}) (Version: 10.2.14807.700 - Audials AG)
AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4577 - AVG Technologies)
AVG 2014 (Version: 14.0.3931 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4577 - AVG Technologies) Hidden
BenVista PhotoZoom Internet 4.0 (HKCU\...\PhotoZoom Express 4) (Version: 4.0 - BenVista Ltd.)
Biet-O-Matic v2.14.8 (HKLM-x32\...\Biet-O-Matic v2.14.8) (Version: 2.14.8 - BOM Development Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BookScan&Whiteboard Suite (HKLM-x32\...\{F4933D9F-89CC-4CA9-B5B0-CF32968890C7}) (Version: 1.0 - Reallusion)
BroadCam Video Streaming Server (HKLM-x32\...\BroadCam) (Version:  - NCH Software)
Brother MFL-Pro Suite MFC-250C (HKLM-x32\...\{48D082B9-18F6-4426-AFAC-8B6A3E7021B1}) (Version: 1.0.1.0 - Brother Industries, Ltd.)
CheckDrive (HKLM-x32\...\{B83513EC-2E4D-4621-816D-4CCF397BE702}_is1) (Version: 4.4 - Abelssoft)
Cinema HD*2.0 (HKLM-x32\...\{4BC051E5-5521-4F01-0001-6DCA22CA4A7F}) (Version: 2.09.654 - Engelmann Media GmbH)
Citrix Online Launcher (HKLM-x32\...\{AC7E7905-8C59-4806-A96D-30936A2B1FC5}) (Version: 1.0.168 - Citrix)
Classic FTP (HKLM-x32\...\ClassicFTP) (Version: 2.30 - NCH Software)
COMPUTERBILD-Abzockschutz (HKLM-x32\...\{B451B75F-358C-4902-9477-4B30B68CFF49}) (Version: 1.0.34 - J3S)
concept/design Video Jukebox (HKLM-x32\...\{37569A10-CB38-4615-8B32-0BF9FF5D887D}_is1) (Version: 1.3.0.0 - concept/design GmbH)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Debut Videorekorder (HKLM-x32\...\Debut) (Version:  - NCH Software)
DruckStudio Poster Drucker (HKLM-x32\...\{7ACDDDDC-3304-404A-A7F8-9F63E9201C3B}) (Version:  - )
Epson Benutzerhandbuch WF-2540 Series (HKLM-x32\...\WF-2540 Series Useg) (Version:  - )
Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version:  - )
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.31.00 - SEIKO EPSON CORPORATION)
Epson Netzwerkhandbuch WF-2540 Series (HKLM-x32\...\WF-2540 Series Netg) (Version:  - )
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON WF-2540 Series Printer Uninstall (HKLM\...\EPSON WF-2540 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Express Burn (HKLM-x32\...\ExpressBurn) (Version:  - NCH Software)
Express Rip (HKLM-x32\...\ExpressRip) (Version: 1.94 - NCH Software)
Express Zip (HKLM-x32\...\ExpressZip) (Version: 2.18 - NCH Software)
FileFort Backup (HKLM-x32\...\FileFort) (Version: 3.27 - NCH Software)
FileZilla Client 3.7.4.1 (HKLM-x32\...\FileZilla Client) (Version: 3.7.4.1 - Tim Kosse)
Fling Dateiübertragung (HKLM-x32\...\Fling) (Version: 2.33 - NCH Software)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FoxTab FLV Player (HKCU\...\FoxTab FLV Player) (Version:  - ) <==== ATTENTION
Framing Studio 1.91 (HKLM-x32\...\Framing Studio_is1) (Version:  - AMS Software)
FRANZIS onlineTV 8 (HKLM-x32\...\{CBC88F0E-1960-4AC3-8C38-8BAD44E3F6E3}_is1) (Version: 8.4.0.0 - FRANZIS Verlag GmbH)
Free Download Manager 3.9.3 (HKLM-x32\...\Free Download Manager_is1) (Version:  - FreeDownloadManager.ORG)
Free YouTube Download version 3.2.20.1230 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.20.1230 - DVDVideoSoft Ltd.)
GIMP 2.6.8 (HKLM\...\WinGimp-2.0_is1) (Version:  - )
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
GMX MediaCenter 1.6.2863.0 (HKCU\...\GMX Application {sync-000021}) (Version: 1.6.2863.0 - 1&1 Mail & Media GmbH)
GMX Softwareaktualisierung (HKLM-x32\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.0.55 - 1&1 Mail & Media GmbH)
GMX Softwareaktualisierung CE (HKCU\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.1.0 - 1&1 Mail & Media GmbH)
Google Chrome (HKCU\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Desktop (HKLM-x32\...\Google Desktop) (Version: 5.9.1005.12335 - Google)
Google Drive (HKLM-x32\...\{418BAAD1-754D-48B4-B078-46EF4F25AF42}) (Version: 1.15.6556.8063 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
GoToMeeting 6.0.0.1259 (HKCU\...\GoToMeeting) (Version: 6.0.0.1259 - CitrixOnline)
Greenshot (HKLM-x32\...\Greenshot_is1) (Version:  - )
HaoZip (HKLM\...\HaoZip) (Version: v3.0 - Ruichuang Network Technology Co.,Ltd)
HOAI Schnellrechner (HKLM\...\{B8E190A3-94F9-4085-A1B9-6A0B6A056516}) (Version: 4.0.3 - BauerSoftware)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Inkjet Printer/Scanner Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )
Ipswitch WS_FTP 12 (HKLM-x32\...\{AD88355B-A4E0-4DA1-BAC3-EA4FEA930691}) (Version: 12.4 - Ipswitch)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
K-Lite Mega Codec Pack 10.0.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.0.5 - )
LG Bluetooth Drivers (HKLM-x32\...\{AC7EE5F1-0DE4-4256-8E43-92B73C8E6019}) (Version: 1.1 - LG Electronics)
LG On-Screen Phone (HKLM-x32\...\LG On-Screen Phone) (Version: 0.4.26.20110517 - LG Electronics)
LG PC Suite (HKLM-x32\...\LG PC Suite) (Version: 5.2.33.20130406 - LG Electronics)
LG PC Suite IV (HKLM-x32\...\LG PC Suite IV) (Version: 4.3.80.20121017 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{5DB849D6-9392-4FB7-9ABB-87ED433152E5}) (Version: 3.8.1 - LG Electronics)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Mediencenter 3.8.9799.6 (HKCU\...\Mediencenter) (Version: 3.8.9799.6 - Deutsche Telekom AG)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works 6-9 Converter (HKLM-x32\...\{95140000-0137-0407-0000-0000000FF1CE}) (Version: 14.0.6120.5002 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
Nitro Pro 7 (HKLM\...\{E43F57EB-3464-47FD-9272-D16AAB0B01A1}) (Version: 7.5.0.29 - Nitro PDF Software)
Nitro Reader 2 (HKLM\...\{E9ABE702-55E6-40E4-B3BD-99D70BB3DF24}) (Version: 2.5.0.45 - Nitro PDF Software)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5896 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA ForceWare Network Access Manager (HKLM-x32\...\{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version: 1.00.7325.0 - NVIDIA Corporation)
NVIDIA Grafiktreiber 307.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.83 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.109.706 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 307.83 (Version: 307.83 - NVIDIA Corporation) Hidden
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
One Click Wipe  Basic (HKLM-x32\...\Stepok's One Click Wipe  Basic_is1) (Version:  - Stepok Image Lab.)
One Click Wipe 3 (HKLM-x32\...\Stepok's One Click Wipe und Recomposit_is1) (Version:  - Stepok Image Lab.)
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Paragon Drive Copy™ 14 Professional (HKLM\...\{24371D30-7CFF-11DE-B053-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Photo Collage Maker 1.51 (HKLM-x32\...\Photo Collage Maker_is1) (Version:  - AMS Software)
Photo Collage Printer (HKLM-x32\...\{2B5F72F2-523C-4413-9313-DAD174A09162}) (Version:  - )
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photomizer Retro (HKLM-x32\...\{41B5224D-7853-4EA5-0001-C8949A33B608}) (Version: 2.0.12.925 - Engelmann Media GmbH)
PhotoPad Foto-Editor (HKLM-x32\...\PhotoPad) (Version: 2.36 - NCH Software)
Pixillion Imagedatei-Konverter (HKLM-x32\...\Pixillion) (Version:  - NCH Software)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
Presto! PageManager 9.03 SE (HKLM-x32\...\{04AF7536-446D-4F5A-8920-B4E885E4581B}) (Version: 9.03.06 - Newsoft Technology Corporation)
Prism Videodatei-Konverter (HKLM-x32\...\Prism) (Version:  - NCH Software)
Private Fotos (HKLM-x32\...\{871122A8-EEC8-4D0E-A0A5-472FFA1FC9CD}) (Version: 1.00.0000 - Franzis Verlag GmbH)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
Qtrax Connection Manager (HKCU\...\Qtrax Connection Manager) (Version: 20.13.07.02 - Qtrax Inc)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Recuva (HKLM\...\Recuva) (Version: 1.43 - Piriform)
RipTiger 4.5.1 (HKLM-x32\...\{AFD4597D-56CC-447F-AA68-C1BF1AEA448E}_is1) (Version: 4.5.1 - cyan soft ltd)
RipTiger Extras 4.5.1 (HKLM-x32\...\{2EE6D53B-957E-48d1-801B-0B7DE81BACED}_is1) (Version: 4.5.1 - cyan soft ltd)
roomeon 3D-Planer (HKLM-x32\...\{0D55297D-C424-4A2F-BE94-BEAE479EBBB8}) (Version: 1.3.1 - roomeon GmbH)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.13114.22 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.13114.22 - Samsung Electronics Co., Ltd.) Hidden
Samsung Link 1.7.0.1310302230 (HKLM\...\8474-7877-9059-0204) (Version: 1.7.0.1310302230 - Copyright 2013 SAMSUNG)
Screenshot Director 3 (3.0.12) (HKLM-x32\...\Screenshot Director 3_is1) (Version:  - )
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.3.11079 - Skype Technologies S.A.)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Snap.Do (HKLM-x32\...\{6E82BCC5-F92D-4AE9-AF5A-CB01213D6AD0}) (Version: 1.161.1.12411 - ReSoft Ltd.) <==== ATTENTION
Snap.Do Engine (HKCU\...\{f3b37686-f3c9-4037-b7c3-3e8f939f6bb3}) (Version: 1.161.1.12411 - ReSoft Ltd.) <==== ATTENTION
SoundTaxi Media Suite 4.4.9 (HKLM-x32\...\{EF4C657F-632F-4CED-A220-F4C1C724241C}_is1) (Version: 4.4.9 - cyan soft ltd)
Stellar Phoenix Photo Recovery (HKLM-x32\...\Stellar Phoenix Photo Recovery_is1) (Version: 4.0.0.0 - Stellar Information Systems Ltd)
STRATO HiDrive (remove only) (HKLM-x32\...\STRATO HiDrive) (Version:  - STRATO AG)
Switch Audiodatei-Konverter (HKLM-x32\...\Switch) (Version:  - NCH Software)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
TomTom HOME 2.8.3.2458 (HKLM-x32\...\TomTom HOME) (Version: 2.8.3.2458 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
TuneUp Utilities 2013 (HKLM-x32\...\TuneUp Utilities 2013) (Version: 13.0.4000.245 - TuneUp Software)
TuneUp Utilities 2013 (x32 Version: 13.0.4000.245 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.73 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.4000.245 - TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_PROPLUS_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_PROPLUS_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_PROPLUS_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_PROPLUS_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Vasco da Gama 5 HDPro (HKLM-x32\...\{067D2172-F8F3-477D-B4EE-0B0AA967D544}) (Version: 5.20.0000 - MotionStudios)
Vertus Bling! It 1.1.5 (HKLM-x32\...\VertusBlingIt) (Version: 1.1.5 - )
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
VideoPad Videobearbeitungs-Software (HKLM-x32\...\VideoPad) (Version:  - NCH Software)
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
Wireless Keyboard Driver (HKLM-x32\...\{186C2C57-BD0C-457B-B8C2-F3897406D97F}) (Version: 1.00.0000 - Author)
Wondershare PDF to Word (Build 2.0.1) (HKLM-x32\...\{A0A6B577-9AB9-4B69-8EAE-EAAFD55676F0}_is1) (Version:  - Wondershare Software)
Wondershare PDF to Word (Build 4.0.1) (HKLM-x32\...\{90599D63-1879-4B90-BE4F-051CE70FA576}_is1) (Version: 4.0.1 - Wondershare Software)
YTD Video Downloader 4.1 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.1 - GreenTree Applications SRL) <==== ATTENTION
Zoner Photo Studio 13 FREE (HKLM-x32\...\ZonerPhotoStudio13_DE_is1) (Version: 13.0.1.7 - ZONER software)
Zoner Photo Studio 16 (HKLM\...\ZonerPhotoStudio16_DE_is1) (Version: 16.0.1.5 - ZONER software)

==================== Restore Points  =========================

04-05-2014 17:07:50 Windows Modules Installer
04-05-2014 22:52:05 Windows Update
06-05-2014 07:48:20 Windows Update
06-05-2014 18:24:58 Windows Update
07-05-2014 15:55:06 Installiert Paragon Drive Copy™ 14 Professional.
10-05-2014 07:25:01 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00FA4D85-A4C2-45F0-8CB2-F42B2D6012E7} - System32\Tasks\{2D180A68-80CF-41F0-A055-46F623EE8BAA} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {05EDBC5F-35DB-443F-99FF-70BCB37419CC} - System32\Tasks\{847C5971-C0C4-40A3-B222-B9B3216D3F79} => C:\Program Files (x86)\Wondershare\PDF2Word\PDFtoWord.exe [2012-10-23] (Wondershare)
Task: {06001375-A979-4C4A-BDC7-628BCF6953A2} - System32\Tasks\SuperEasyDriverUpdaterRunAtStartup => C:\Program Files (x86)\SuperEasy Software\SuperEasy Driver Updater\supereasydu.exe
Task: {0B976EE6-8781-4D1F-BE89-8B581109F148} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {19B1126A-4013-4CF5-9271-39CAB85A0E6B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1BE0C82C-6D3D-4A83-8C57-4EA37E94F254} - System32\Tasks\{32F166E1-9B2B-4848-9E52-C4F323F4CB16} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {1DA14C4D-5DF9-4772-81F7-7721ED24D011} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe
Task: {225D78AF-670D-4723-BFE4-A84FB09D73F5} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2014-01-28] (TuneUp Software)
Task: {2940E446-FF86-4241-8F64-A7A7A0CA79B9} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {2CD1598B-49AC-4D03-9B2A-C7B068E54E7F} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {3379D20C-A76E-421C-9DB6-6FFA22338DD1} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {3403483C-4F9E-4F4B-96B5-19087787C21F} - System32\Tasks\{BB346820-7025-4238-B1E7-7386DCA93CCD} => C:\Program Files (x86)\Wondershare\PDF2Word\PDFtoWord.exe [2012-10-23] (Wondershare)
Task: {3ADB2616-56C7-4A08-B294-D38565868B26} - System32\Tasks\{73191D68-729E-4630-9092-F75F765B129E} => C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LGUX.exe [2012-11-10] (Mobile Leader Co.,Ltd.)
Task: {411C9376-E81D-4AAE-9B36-DA05629294F0} - System32\Tasks\{D53C7441-4CD7-4886-B113-C5485BCC65AA} => C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LGUX.exe [2012-11-10] (Mobile Leader Co.,Ltd.)
Task: {430E30CD-1A97-43EA-8379-FF2A32880DEC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-20] (Google Inc.)
Task: {5A2BDED1-3D0D-4A4E-8B65-CA089C6D7633} - System32\Tasks\{5EC925E4-2947-4F89-9E40-C5197464EB6C} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {5BDF6F8D-47D7-47A1-9EC2-E7C825E9CA80} - System32\Tasks\{22C825DA-CD50-473C-9D52-C2B6A3CBF9F1} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {5CE264FA-4D39-4F91-86D3-031696C3DBCA} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {5DBD3D5E-C70D-4884-9AE5-A05FE4066D64} - System32\Tasks\{1F74351E-43D0-4006-8286-2890296C401A} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {603BCBAC-14CB-4E7C-9F9B-AE9FE08C202E} - System32\Tasks\{5EDC4E18-88AB-4D19-9F71-7FE0461B3183} => C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LGUX.exe [2012-11-10] (Mobile Leader Co.,Ltd.)
Task: {6149AF98-479E-4F9A-8324-9982376341D0} - System32\Tasks\Abelssoft\CheckDriveBackgroundGuard => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe [2014-01-28] (Abelssoft)
Task: {6283B680-CD4D-40E8-86A0-53BD10AC034A} - System32\Tasks\{DFD590BB-AD9E-43B1-A481-BC9D4E457D19} => C:\Program Files (x86)\1&amp;1 Surf-Stick\UIMain.exe
Task: {62B20968-18DE-4F51-98BD-7E61F9E4309B} - System32\Tasks\{DFAFC72E-C4D4-4154-871F-3B21F3F507B0} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {69D9B933-1AE8-4398-9221-29B0269EE59B} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2013-06-18] (1&1 Mail & Media GmbH)
Task: {6AD2410C-2EB6-47BF-B49E-E55416A056C6} - System32\Tasks\ROC_REG_JAN_DELETE => C:\ProgramData\AVG January 2013 Campaign\ROC.exe [2013-01-16] ()
Task: {6D086FB6-06EA-4FCF-A8B6-122359E34E5A} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {79DB01E5-9FDC-4854-AFA9-697923B7267C} - System32\Tasks\{F3D355EC-70BA-4135-BC36-4C57CBD648AF} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {7AF5EDF2-EC3E-4EC6-BC27-719D7FAE9028} - System32\Tasks\Aufgaben der Ereignisanzeige\eef7037d-984a-4271-9b16-a28d7569ef4e => Wscript.exe "C:\Users\Wolfgang Dorn\AppData\Local\Temp\tmp9C35.vbs"
Task: {7D637691-AA4A-43BA-9911-A72B68AE1AA3} - System32\Tasks\{11969140-9EEC-4D05-9F47-5C86795FC611} => C:\Program Files (x86)\Wondershare\PDF2Word\PDFtoWord.exe [2012-10-23] (Wondershare)
Task: {81BC4221-B24C-45B8-BD4C-70885DEE21BC} - System32\Tasks\{A83B017E-7756-45F2-BFBF-217307C07F00} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {854C0BF3-971E-492D-A4BD-2FE019A03C90} - System32\Tasks\{33985910-9BE3-46E4-BD6E-13FF79FC4597} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {8BDE0975-3FE5-4B98-B10C-D731DBBFBCFA} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
Task: {8F686DEA-4980-4273-8C0F-A809C13D0BBE} - System32\Tasks\{69060157-91C0-4C76-A58D-ACCB3349153F} => C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LGUX.exe [2012-11-10] (Mobile Leader Co.,Ltd.)
Task: {903DCFFA-DA92-4CA4-AC03-63C9191DCA09} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {949A0E9E-254B-4631-B128-90C0BC78B170} - \EPUpdater No Task File <==== ATTENTION
Task: {A01E3768-6CCD-468C-9209-DE2F24A31F43} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-30] (Google Inc.)
Task: {A45E32C1-7837-4035-9128-41939497E6FB} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {A5378959-6C03-4400-99FD-FC56E983FC60} - \BonanzaDealsUpdate No Task File <==== ATTENTION
Task: {A6C08353-30C4-4F88-A85F-DB46F6D13258} - System32\Tasks\{04F47939-F9C7-48CC-8DC5-F2F02D41F5AA} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {A7DA125F-7043-41F5-B12F-60CE15B151F7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-20] (Google Inc.)
Task: {AB08466F-947E-48EA-B76E-7A8E04C77347} - System32\Tasks\{9490E70E-9A7D-473A-A575-B4ED0F1964BA} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {AE9DB6AB-C167-4C93-BD39-1A0C8D23D129} - System32\Tasks\ScanSoft Background Update => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe
Task: {B2825A89-0C03-4E57-A072-EE577F02F012} - System32\Tasks\{A0E062C2-10E5-445F-828B-12B352A1C8A7} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {B3CA7E10-0906-42FF-A253-984323EF5C16} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-30] (Google Inc.)
Task: {B500F0F4-8D12-4691-9C49-A85F93A60F7B} - System32\Tasks\{FC9C53E6-DD91-46C3-8EE0-EA552962AC8F} => C:\Program Files (x86)\Wondershare\PDF2Word\PDFtoWord.exe [2012-10-23] (Wondershare)
Task: {B514BE02-C65B-4698-AC64-52F12066E8E7} - System32\Tasks\{D9767913-02E2-479D-A058-72AF869DEB44} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {B55AF5BF-B6BC-496C-A8D2-51C41FCBA495} - System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72} => C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {B77990A0-E659-41DB-9574-2C4886D0B39E} - System32\Tasks\NCH Software\FlingDowngrade => C:\Program Files (x86)\NCH Software\Fling\fling.exe [2013-07-31] (NCH Software)
Task: {B79C18EE-F7D9-4E61-8D39-5E5943E31C85} - System32\Tasks\{99AD014D-B6C5-4C5F-B667-C86EF89CB77E} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {C8366A87-654E-46CA-A0B7-790E845DCA64} - \RegClean Pro No Task File <==== ATTENTION
Task: {C876CBF3-F415-47CB-A049-8373A2BA3B27} - System32\Tasks\{F344863E-1A4F-4D43-A570-F2820310AC89} => C:\Program Files (x86)\1&amp;1 Surf-Stick\UIMain.exe
Task: {CE350911-130F-44C4-B4CB-B62DB3995EF0} - System32\Tasks\{376387C6-F400-49C8-A321-D1B56978DB5D} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {CEF1CE99-60A3-4923-B751-15C020E01C05} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {CF9D1616-7EC1-49CA-A1B3-E8A8753C1EBA} - System32\Tasks\{F6928024-6024-4E93-9F4B-FE88249FA0BB} => C:\Program Files (x86)\1&amp;1 Surf-Stick\UIMain.exe
Task: {D2CF7A21-F7F5-40D9-99FF-6CEE81B6A8B5} - \DealPly No Task File <==== ATTENTION
Task: {D34196D7-5379-4DF3-AB4B-E0B424C072FF} - System32\Tasks\{3BA57946-3C40-4D18-A95C-29C4EA766ACE} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {D4714F26-3A4E-429E-B76C-6059C07F9344} - System32\Tasks\{997B84E9-6F98-4B32-AA5F-8783321849B4} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {D6827165-7B27-4264-AB31-F426D5B90DD8} - System32\Tasks\{4A560301-2DC7-4FE9-84AF-DCE65D861FBC} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {DC5B6244-80FC-4752-A246-124FF5792D47} - \QtraxPlayer No Task File <==== ATTENTION
Task: {DEEDBED1-EBFA-45F6-A305-B2D154BD97CD} - \LaunchApp No Task File <==== ATTENTION
Task: {DFC8C3C7-9EF6-4F20-B6E3-08625A09900F} - System32\Tasks\{9BC17ABC-F0EA-47B4-8443-B9A8AD6AF698} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {E0229F42-DBD8-4B48-9BCD-D5B401934B19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29] (Adobe Systems Incorporated)
Task: {E54F21EB-5E20-42A2-9BE0-15BFB31DC7EC} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {ED10A544-584A-4A21-98C6-A611F1F6B4E2} - System32\Tasks\Google Updater and Installer => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-30] (Google Inc.)
Task: {ED9D5C6D-332F-486D-AFC3-7064336E6C4B} - System32\Tasks\{B9FCCD6D-E5D9-4778-8F3A-46D83F727EF1} => C:\Program Files (x86)\Wondershare\PDF2Word\PDFtoWord.exe [2012-10-23] (Wondershare)
Task: {F173F0BF-113C-4586-944B-5691CF394152} - System32\Tasks\{D2136E81-8964-49E0-A579-451F896CF77B} => C:\Program Files (x86)\1&amp;1 Surf-Stick\UIMain.exe
Task: {F6868244-C564-4A46-ADD0-8EBCBE296FBC} - System32\Tasks\NCH Software\SwitchReminder => C:\Program Files (x86)\NCH Software\Switch\Switch.exe [2013-04-04] (NCH Software)
Task: {F72F4562-9ED0-47AD-B7F0-FB7DE2C2E872} - System32\Tasks\B2CNotiAgent => C:\ProgramData\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe [2013-06-28] (LG Electronics)
Task: {F7AE6CC3-B07F-48B3-8BED-DF3F9D2A4DE7} - System32\Tasks\{5E704403-B3F4-4C95-BEBB-CC77E3889D87} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core.job => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA.job => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ROC_REG_JAN_DELETE.job => C:\ProgramData\AVG January 2013 Campaign\ROC.exe

==================== Loaded Modules (whitelisted) =============

2012-09-23 13:54 - 2013-01-31 11:25 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-01-18 23:05 - 2014-01-28 18:33 - 00019744 _____ () C:\Program Files (x86)\CheckDrive\AbStartManager.dll
2014-01-18 23:05 - 2014-01-28 18:33 - 00014112 _____ () C:\Program Files (x86)\CheckDrive\AbMessages.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-09-27 22:57 - 2012-10-12 16:39 - 06620752 _____ () C:\Program Files\ipswitch\WS_FTP 12\res0407.dll
2013-09-29 18:08 - 2013-07-30 17:16 - 00941992 _____ () C:\Windows\SysWOW64\WPShellExt64.dll
2013-09-10 12:08 - 2013-09-10 12:08 - 00088576 _____ () C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll
2013-08-20 12:51 - 2008-01-22 19:35 - 00103808 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2013-06-13 12:14 - 2012-11-14 22:22 - 00078456 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2013-06-13 12:14 - 2012-11-14 22:22 - 00386168 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2013-11-04 22:41 - 2013-10-30 23:31 - 00012800 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll
2014-04-09 10:03 - 2014-04-09 10:03 - 00515584 ____N () C:\Windows\Temp\sqlite-3.7.2-sqlitejdbc.dll
2013-11-04 22:41 - 2013-10-30 23:31 - 01394176 _____ () C:\Program Files\Samsung\Samsung Link\scone_proxy.dll
2013-11-04 22:41 - 2013-10-30 23:31 - 01435648 _____ () C:\Program Files\Samsung\Samsung Link\scone_stub.dll
2013-10-11 16:34 - 2013-10-11 16:34 - 00036864 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\JNIInterface.dll
2013-10-11 16:35 - 2013-10-11 16:35 - 00144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\ASFAPI.dll
2013-10-11 16:36 - 2013-10-11 16:36 - 00018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\MediaDB_Manager.dll
2013-10-01 11:09 - 2013-10-01 11:09 - 00030720 _____ () C:\Windows\system32\MediaDB64.dll
2013-10-01 11:09 - 2013-10-01 11:09 - 00908800 _____ () C:\Windows\system32\ContentDirectoryPresenter64.dll
2013-10-11 16:35 - 2013-10-11 16:35 - 00521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\DMS_Manager.dll
2013-07-23 20:19 - 2013-07-23 20:19 - 00049152 _____ () C:\Windows\system32\boost_date_time-vc90-mt-1_47.dll
2013-07-23 20:19 - 2013-07-23 20:19 - 00016896 _____ () C:\Windows\system32\boost_system-vc90-mt-1_47.dll
2013-07-23 20:19 - 2013-07-23 20:19 - 00058880 _____ () C:\Windows\system32\boost_thread-vc90-mt-1_47.dll
2013-07-23 20:19 - 2013-07-23 20:19 - 00299520 _____ () C:\Windows\system32\boost_serialization-vc90-mt-1_47.dll
2014-01-28 10:37 - 2014-01-28 10:37 - 00741176 _____ () C:\Program Files (x86)\TuneUp Utilities 2013\avgrepliba.dll
2011-10-27 00:12 - 2010-07-01 21:41 - 00540672 _____ () C:\Program Files (x86)\Greenshot\Greenshot.exe
2014-04-20 01:05 - 2013-12-16 20:31 - 00443080 _____ () C:\Windows\SysWOW64\GSService.exe
2014-04-20 01:05 - 2013-12-16 21:50 - 00756224 _____ () C:\Program Files (x86)\RipTiger\RTMPUrlFinder.exe
2014-04-20 01:05 - 2013-12-16 21:50 - 00752640 _____ () C:\Program Files (x86)\RipTiger\HookUrlFinder.exe
2014-04-20 01:05 - 2013-12-16 21:49 - 00430080 _____ () C:\Program Files (x86)\RipTiger\HookController.exe
2014-04-20 01:05 - 2013-12-16 21:49 - 00510976 _____ () C:\Program Files (x86)\RipTiger\RipController.exe
2014-04-20 01:05 - 2013-12-16 21:15 - 00673792 _____ () C:\Program Files (x86)\RipTiger\WMEncoderC.exe
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 00065352 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2014-04-20 01:05 - 2013-12-16 22:08 - 00007680 _____ () C:\Program Files (x86)\RipTiger\MediaAgent.inj
2014-04-20 01:05 - 2013-12-16 22:08 - 00008192 _____ () C:\Program Files (x86)\RipTiger\inpsniffer.inj
2014-04-20 01:05 - 2013-12-16 21:49 - 00571392 _____ () C:\Program Files (x86)\RipTiger\inpsniffer.dll
2011-09-26 12:21 - 2011-09-26 12:22 - 00034816 _____ () C:\Program Files (x86)\Google\Google Desktop Search\gzlib.dll
2014-01-07 18:23 - 2009-02-27 17:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2011-10-27 00:12 - 2010-07-01 21:41 - 00024576 _____ () C:\Program Files (x86)\Greenshot\GreenshotPlugin.dll
2013-07-10 18:07 - 2013-07-10 18:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2014-04-20 01:05 - 2013-12-16 20:40 - 01172480 _____ () C:\Program Files (x86)\RipTiger\CommonDialogs.dll
2014-04-19 23:57 - 2013-12-16 20:18 - 00100352 _____ () C:\Program Files (x86)\RipTiger\boost_filesystem-vc120-mt-1_55.dll
2014-04-19 23:57 - 2013-12-16 20:18 - 00016896 _____ () C:\Program Files (x86)\RipTiger\boost_system-vc120-mt-1_55.dll
2014-04-20 01:05 - 2013-12-16 21:50 - 02550784 _____ () C:\Program Files (x86)\RipTiger\EngineWV.dll
2014-04-20 01:05 - 2013-12-16 22:08 - 01811968 _____ () C:\Program Files (x86)\RipTiger\MediaAgent.dll
2014-04-19 23:57 - 2013-12-16 20:18 - 00080896 _____ () C:\Program Files (x86)\RipTiger\boost_thread-vc120-mt-1_55.dll
2014-04-19 23:57 - 2013-12-16 20:18 - 00025600 _____ () C:\Program Files (x86)\RipTiger\boost_chrono-vc120-mt-1_55.dll
2014-04-20 01:05 - 2013-12-16 20:37 - 04809216 _____ () C:\Program Files (x86)\RipTiger\MediaProcessor.dll
2014-04-20 01:11 - 2013-12-16 20:18 - 01868800 _____ () C:\Program Files (x86)\RipTiger\mfc120e.dll
2014-04-20 01:05 - 2013-12-16 20:23 - 01024000 _____ () C:\Program Files (x86)\RipTiger\ACE.dll
2014-02-11 21:29 - 2014-02-11 21:29 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 00674632 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\libglesv2.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 00093000 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\libegl.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 04081480 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 00390472 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 01647432 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\ProgramData\Temp:5C162581
AlternateDataStreams: C:\ProgramData\Temp:AD022376

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: Norton PC Checkup Application Launcher => 2
MSCONFIG\startupreg: FUFAXSTM => "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe"
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: PMSpeed => C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.EXE
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Samsung Link => "C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: WinampAgent => "C:\Program Files (x86)\Winamp\winampa.exe"
MSCONFIG\startupreg: WrtMon.exe => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/12/2014 10:42:26 PM) (Source: Brother BrLog) (User: ) (EventID: 1001)
Description: TWN BrtTWN: [2014/05/12 22:42:26.448]: [00146604]: Initialize TwdsMain Class failed!

Error: (05/12/2014 10:42:26 PM) (Source: Brother BrLog) (User: ) (EventID: 1001)
Description: TWN BrtTWN: [2014/05/12 22:42:26.448]: [00146604]: ##### Fatal ERROR!! Create STI-device failed! #####

Error: (05/12/2014 08:28:38 PM) (Source: Chrome) (User: EWES2000) (EventID: 1)
Description: Chrome has encountered a fatal error.
ver=34.0.1847.131;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\Wolfgang Dorn\AppData\Local\Google\CrashReports\39cc1fc5-71b7-4a61-9ff9-dac069cddf79.dmp

Error: (05/12/2014 07:01:31 PM) (Source: Application Error) (User: ) (EventID: 1000)
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.131, Zeitstempel: 0x535824c4
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0x18dc
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3

Error: (05/12/2014 04:04:51 PM) (Source: Brother BrLog) (User: ) (EventID: 1001)
Description: TWN BrtTWN: [2014/05/12 16:04:51.550]: [00003416]: Initialize TwdsMain Class failed!

Error: (05/12/2014 04:04:51 PM) (Source: Brother BrLog) (User: ) (EventID: 1001)
Description: TWN BrtTWN: [2014/05/12 16:04:51.550]: [00003416]: ##### Fatal ERROR!! Create STI-device failed! #####

Error: (05/12/2014 09:31:48 AM) (Source: Brother BrLog) (User: ) (EventID: 1001)
Description: TWN BrtTWN: [2014/05/12 09:31:48.862]: [00003424]: Initialize TwdsMain Class failed!

Error: (05/12/2014 09:31:48 AM) (Source: Brother BrLog) (User: ) (EventID: 1001)
Description: TWN BrtTWN: [2014/05/12 09:31:48.862]: [00003424]: ##### Fatal ERROR!! Create STI-device failed! #####

Error: (05/12/2014 01:13:13 AM) (Source: SideBySide) (User: ) (EventID: 80)
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/12/2014 00:08:15 AM) (Source: SideBySide) (User: ) (EventID: 80)
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.


System errors:
=============
Error: (05/12/2014 04:09:34 PM) (Source: Service Control Manager) (User: ) (EventID: 7000)
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (05/12/2014 04:09:34 PM) (Source: Service Control Manager) (User: ) (EventID: 7038)
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (05/12/2014 04:07:32 PM) (Source: Service Control Manager) (User: ) (EventID: 7022)
Description: Der Dienst "RIP-Überwachung" wurde nicht richtig gestartet.

Error: (05/12/2014 04:05:34 PM) (Source: Service Control Manager) (User: ) (EventID: 7000)
Description: Der Dienst "TeamViewer 9" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/12/2014 04:05:34 PM) (Source: Service Control Manager) (User: ) (EventID: 7009)
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst TeamViewer 9 erreicht.

Error: (05/12/2014 04:04:22 PM) (Source: Service Control Manager) (User: ) (EventID: 7000)
Description: Der Dienst "JetDrive WindowsClosingService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/12/2014 04:04:22 PM) (Source: Service Control Manager) (User: ) (EventID: 7009)
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst JetDrive WindowsClosingService erreicht.

Error: (05/12/2014 04:03:52 PM) (Source: IPRIP) (User: ) (EventID: 29048)
Description: Fehler bei der Installation des RIP-Listenerdiensts

Error: (05/12/2014 04:02:54 PM) (Source: volmgr) (User: ) (EventID: 46)
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (05/12/2014 09:36:18 AM) (Source: Service Control Manager) (User: ) (EventID: 7000)
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069


Microsoft Office Sessions:
=========================
Error: (05/08/2014 04:38:08 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 32696 seconds with 240 seconds of active time.  This session ended with a crash.

Error: (04/04/2014 10:54:11 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 277 seconds with 240 seconds of active time.  This session ended with a crash.

Error: (04/04/2014 02:09:44 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 17562 seconds with 6480 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 76%
Total physical RAM: 3839.3 MB
Available physical RAM: 914.62 MB
Total Pagefile: 3837.48 MB
Available Pagefile: 533.73 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:368.15 GB) (Free:93.57 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 009B94D1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=368 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=98 GB) - (Type=05)

==================== End Of Log ============================

Dies war's erstmal. Der Rest kommt später.

MfG - ewes

ewes-Ltd · 12.05.2014, 23:48

Hallo Schrauber,

die gesamte Datei war zu groß.

Jetzt kommt FRST normal:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014 01
Ran by Wolfgang Dorn (administrator) on EWES2000 on 13-05-2014 00:10:48
Running from C:\Downloads\Software
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Abelssoft) C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NCH Software) C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(NCH Software) C:\Program Files (x86)\NCH Software\Fling\fling.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(Microsoft Corporation) C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Google) C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Program Files (x86)\Greenshot\Greenshot.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
( ) C:\Program Files (x86)\RipTiger\RipTiger.exe
() C:\Windows\SysWOW64\GSService.exe
() C:\Program Files (x86)\RipTiger\RTMPUrlFinder.exe
() C:\Program Files (x86)\RipTiger\HookUrlFinder.exe
() C:\Program Files (x86)\RipTiger\HookController.exe
() C:\Program Files (x86)\RipTiger\RipController.exe
() C:\Program Files (x86)\RipTiger\WMEncoderC.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\RipTiger\WMEncoderC.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\RipTiger\WMEncoderC.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Ipswitch) C:\Program Files (x86)\Ipswitch\WS_FTP 12\WsftpCOMHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Ipswitch) C:\Program Files (x86)\Ipswitch\WS_FTP 12\WsftpCOMHelper.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5670448 2013-02-05] (VIA)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5180432 2014-04-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Google Desktop Search] => C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Fling] => C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
HKLM-x32\...\Run: [FileFort] => C:\Program Files (x86)\NCH Software\FileFort\filefort.exe [1391144 2013-08-24] (NCH Software)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Player\DelayPluginI.exe [1960008 2013-09-28] ()
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [32D4EFD63E3776D01E26F2FB20F229EDFF05E6BE._service_run] => C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [SkyDrive] => C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-04-15] (Microsoft Corporation)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [1&1_1&1 Upload-Manager] => C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE [989264 2011-11-21] (1&1 Internet AG)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Google Update] => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-30] (Google Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [831488 2013-12-13] (ZONER software)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\RunOnce: [Uninstall C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"
IFEO\davsrv.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\filefort.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\lgux.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\strato hidrive.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tomtomhome.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\uninstall tomtom home.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.2.1:80
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Wondershare Player 1.6.0 - {43D9786F-A485-683B-9B5B-ACC97ABC17FC} - C:\ProgramData\Wondershare\Player\WSBrowserAppMgr.dll (Wondershare)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro PDF\Professional 7\npnitromozilla.dll ( )
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: samsung.com/SamsungLinkPCPlugin - C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll (Samsung)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Wolfgang Dorn\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-26]
FF Extension: Ghostery - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\firefox@ghostery.com.xpi [2014-04-26]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKLM-x32\...\Firefox\Extensions: [Player@Wondershare.com] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\
FF Extension: No Name - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\ []
FF HKCU\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR StartupUrls: "hxxp://www.google.de/"
CHR Extension: (GMX MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\camnampocfohlcgbajligmemmabnljcm [2014-03-03]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-03-03]
CHR Extension: (Learn Spanish with LoMÃ*sTv) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejdepbibpmpfkeokhhnlidhfgmpapnm [2013-11-05]
CHR Extension: (Skype Click to Call) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-04-22]
CHR Extension: (AVG Secure Search) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2014-03-13]
CHR Extension: (DVDVideoSoft) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2014-01-25]
CHR Extension: (Google Wallet) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Learn Spanish - QuÃ© Onda) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmcdjmebmeoobmdghjbjhbifoocbcmaj [2013-11-05]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [bkdegagmpemadclljncealhmmkojfoam] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR StartMenuInternet: Google Chrome - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

S4 AllShare Framework DMS; C:\PROGRAM FILES\SAMSUNG\ALLSHARE FRAMEWORK DMS\1.3.21\ALLSHAREFRAMEWORKMANAGERDMS.EXE [404360 2013-10-11] (Samsung)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3645456 2014-04-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [291912 2014-03-27] (AVG Technologies CZ, s.r.o.)
R2 BroadCamService; C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe [2563808 2012-12-19] (NCH Software)
S4 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\DfSdkS64.exe [548704 2010-03-13] (mst software GmbH, Germany)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 FlingService; C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
R3 GSService; C:\Windows\SysWOW64\GSService.exe [443080 2013-12-16] ()
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] ()
U2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-09-04] (Nitro PDF Software)
R2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [229392 2012-09-13] (Nitro PDF Software)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [605768 2013-10-30] (Copyright 2013 SAMSUNG)
S4 STRATO HiDrive Service; C:\Program Files (x86)\STRATO AG\STRATO HiDrive\STRATO HiDrive Service.exe [32768 2011-11-15] (STRATO)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2412344 2014-01-28] (TuneUp Software)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-12] (VIA Technologies, Inc.)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [X]

==================== Drivers (Whitelisted) ====================

S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus64.sys [19456 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag64.sys [27648 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps64.sys [27136 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem64.sys [34304 2012-03-02] (LG Electronics Inc.)
S3 androidusb; C:\Windows\System32\Drivers\lgandadb.sys [31744 2010-08-02] (Google Inc)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [237336 2014-04-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192792 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [236824 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [324376 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [130840 2014-03-31] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [32536 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [274200 2014-03-31] (AVG Technologies CZ, s.r.o.)
R3 HaozipVirtualCDBus; C:\Windows\System32\DRIVERS\HaoZipVirtualCDBus.sys [204888 2012-07-24] (Shanghai RuiChuang)
S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37248 2012-05-22] (Abelssoft GmbH)
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2010-07-16] (CACE Technologies, Inc.)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-04-26] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-08-28] (TuneUp Software)
R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)
R1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [102664 2013-12-12] ()
R1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25992 2013-12-12] ()
R1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [700680 2013-12-12] ()
R3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare)
S3 cpuz134; \??\C:\Users\WOLFGA~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
S3 VBoxDrv; \??\C:\Program Files\Oracle\VirtualBox\VBoxDrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-12 17:28 - 2014-05-12 17:59 - 00000000 ____D () C:\Users\Wolfgang Dorn\www.ewes-Ltd
2014-05-07 19:48 - 2014-05-07 19:48 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-07 18:18 - 2014-05-07 18:35 - 129058304 _____ () C:\Users\Wolfgang Dorn\paragon-drive-copy-professional-14-bootcd-builder.msi
2014-05-07 17:58 - 2014-05-07 17:58 - 00002350 _____ () C:\Users\Public\Desktop\Paragon Drive Copy™ 14 Professional.lnk
2014-05-07 17:58 - 2014-05-07 17:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Drive Copy™ 14 Professional
2014-05-07 17:56 - 2014-05-07 17:56 - 00000000 ____D () C:\Program Files\Paragon Software
2014-05-06 20:43 - 2014-05-06 20:43 - 00137837 _____ () C:\Users\Wolfgang Dorn\Desktop\JRT.txt
2014-05-06 20:33 - 2014-05-06 20:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-06 20:25 - 2014-05-06 20:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 20:00 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-06 19:59 - 2014-05-06 20:13 - 00000000 ____D () C:\AdwCleaner
2014-05-06 18:58 - 2014-05-06 18:58 - 00002155 _____ () C:\Users\Wolfgang Dorn\Desktop\ Malwarebytes Anti-Malware  - CHIP Downloader.lnk
2014-05-06 17:04 - 2014-05-06 19:44 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-06 16:38 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-06 16:38 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-04 23:57 - 2012-06-01 07:39 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll
2014-05-04 23:57 - 2012-06-01 07:36 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll
2014-05-04 23:57 - 2012-06-01 07:36 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll
2014-05-04 23:57 - 2012-06-01 07:35 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll
2014-05-04 23:57 - 2012-06-01 07:34 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll
2014-05-04 23:57 - 2012-06-01 07:33 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe
2014-05-04 23:57 - 2012-06-01 06:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wamregps.dll
2014-05-04 23:57 - 2012-06-01 06:37 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisRtl.dll
2014-05-04 23:57 - 2012-06-01 06:37 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisrstap.dll
2014-05-04 23:57 - 2012-06-01 06:35 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admwprox.dll
2014-05-04 23:57 - 2012-06-01 06:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ahadmin.dll
2014-05-04 23:57 - 2012-06-01 06:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisreset.exe
2014-05-04 21:24 - 2014-05-04 21:24 - 00000000 _____ () C:\Users\Wolfgang Dorn\defogger_reenable
2014-05-04 21:05 - 2014-05-13 00:10 - 00000000 ____D () C:\FRST
2014-05-04 19:41 - 2014-05-13 00:09 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-04 19:09 - 2014-05-05 09:22 - 00044948 _____ () C:\Windows\iis7.log
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-02 23:00 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-02 23:00 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-02 23:00 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-02 23:00 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-01 21:07 - 2014-05-08 16:08 - 00001174 _____ () C:\Windows\PFRO.log
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:42 - 2014-05-12 16:03 - 00001736 _____ () C:\Windows\setupact.log
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-26 22:10 - 2014-04-26 22:16 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 21:17 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-04-23 21:17 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-04-22 19:04 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-04-22 19:04 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-04-22 19:04 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-04-22 19:04 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-04-22 19:04 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-04-22 19:04 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-04-22 19:04 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-04-22 19:03 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 19:02 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 19:02 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 19:02 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 19:02 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 19:02 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 19:02 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 19:02 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 19:02 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 19:02 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 19:02 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 19:02 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 18:59 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-04-22 18:59 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:42 - 2014-04-21 23:43 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-05-08 03:25 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-05-04 21:03 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-04-21 18:10 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 13:56 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-21 13:56 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-21 13:56 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-21 13:56 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-21 13:56 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-21 13:55 - 2014-04-21 13:56 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-20 01:05 - 2014-04-20 01:11 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2013-12-16 20:31 - 00443080 _____ () C:\Windows\SysWOW64\GSService.exe
2014-04-19 23:58 - 2014-05-12 19:01 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-04-19 23:55 - 2013-08-22 19:09 - 00256088 _____ () C:\Windows\system32\unrar64.dll
2014-04-19 23:55 - 2013-08-22 19:09 - 00217176 _____ () C:\Windows\SysWOW64\unrar.dll
2014-04-19 23:53 - 2014-04-20 01:05 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:24 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-19 14:24 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-19 14:24 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-19 14:23 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-19 14:23 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-19 14:23 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-19 14:22 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-19 14:04 - 2014-04-19 14:59 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-19 23:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 01:55 - 2014-04-19 23:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-17 01:47 - 2014-05-12 19:01 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-04-17 01:47 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-17 01:46 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-17 01:46 - 2014-04-23 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-16 23:17 - 2014-04-16 23:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-16 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 12:35 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:21 - 2014-05-04 16:26 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-04-15 15:21 - 2014-05-04 16:26 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk

==================== One Month Modified Files and Folders =======

2014-05-13 00:10 - 2014-05-04 21:05 - 00000000 ____D () C:\FRST
2014-05-13 00:10 - 2013-11-29 21:19 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\HaoZip
2014-05-13 00:09 - 2014-05-04 19:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-13 00:07 - 2011-09-28 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Skype
2014-05-12 23:44 - 2011-09-20 13:44 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-12 23:22 - 2012-11-30 14:09 - 00001152 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA.job
2014-05-12 23:14 - 2012-07-15 20:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-12 23:00 - 2014-03-19 02:42 - 01603188 _____ () C:\Windows\WindowsUpdate.log
2014-05-12 21:25 - 2012-07-12 14:49 - 00403968 ___SH () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Thumbs.db
2014-05-12 19:22 - 2012-11-30 14:09 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core.job
2014-05-12 19:01 - 2014-04-19 23:58 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-05-12 19:01 - 2014-04-17 01:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-05-12 19:01 - 2014-01-08 02:11 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\CrashDumps
2014-05-12 18:11 - 2013-10-31 21:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\inc-2010
2014-05-12 17:59 - 2014-05-12 17:28 - 00000000 ____D () C:\Users\Wolfgang Dorn\www.ewes-Ltd
2014-05-12 17:44 - 2012-08-14 01:05 - 00000000 ____D () C:\ProgramData\MFAData
2014-05-12 17:29 - 2011-09-08 14:18 - 00000000 ____D () C:\Users\Wolfgang Dorn
2014-05-12 17:23 - 2013-11-02 22:16 - 00000000 ____D () C:\Users\Wolfgang Dorn\BHE-INC.info
2014-05-12 17:20 - 2013-11-02 22:18 - 00000000 ____D () C:\Users\Wolfgang Dorn\action-team-world-net
2014-05-12 16:14 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-12 16:14 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-12 16:05 - 2013-11-25 20:53 - 00000000 ___RD () C:\Users\Wolfgang Dorn\SkyDrive
2014-05-12 16:05 - 2011-09-29 01:20 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Nitro PDF
2014-05-12 16:04 - 2011-09-20 13:44 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-12 16:03 - 2014-05-01 11:42 - 00001736 _____ () C:\Windows\setupact.log
2014-05-12 16:03 - 2012-08-14 09:42 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-05-12 16:03 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-11 23:08 - 2011-09-19 01:59 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Microsoft Help
2014-05-10 23:04 - 2012-07-12 18:34 - 00696832 ___SH () C:\Users\Wolfgang Dorn\Desktop\Thumbs.db
2014-05-09 13:39 - 2011-09-20 13:44 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-09 13:39 - 2011-09-20 13:44 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-09 13:29 - 2009-07-14 19:58 - 00748396 _____ () C:\Windows\system32\perfh007.dat
2014-05-09 13:29 - 2009-07-14 19:58 - 00163768 _____ () C:\Windows\system32\perfc007.dat
2014-05-09 13:29 - 2009-07-14 07:13 - 01737134 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-08 16:08 - 2014-05-01 21:07 - 00001174 _____ () C:\Windows\PFRO.log
2014-05-08 03:25 - 2014-04-21 18:12 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-05-07 19:48 - 2014-05-07 19:48 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-07 18:35 - 2014-05-07 18:18 - 129058304 _____ () C:\Users\Wolfgang Dorn\paragon-drive-copy-professional-14-bootcd-builder.msi
2014-05-07 17:58 - 2014-05-07 17:58 - 00002350 _____ () C:\Users\Public\Desktop\Paragon Drive Copy™ 14 Professional.lnk
2014-05-07 17:58 - 2014-05-07 17:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Drive Copy™ 14 Professional
2014-05-07 17:56 - 2014-05-07 17:56 - 00000000 ____D () C:\Program Files\Paragon Software
2014-05-07 17:52 - 2013-06-13 11:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Downloaded Installations
2014-05-07 12:17 - 2013-01-22 04:26 - 00000000 ___RD () C:\Users\Wolfgang Dorn\Mediencenter
2014-05-06 20:43 - 2014-05-06 20:43 - 00137837 _____ () C:\Users\Wolfgang Dorn\Desktop\JRT.txt
2014-05-06 20:33 - 2014-05-06 20:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-06 20:25 - 2014-05-06 20:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 20:13 - 2014-05-06 19:59 - 00000000 ____D () C:\AdwCleaner
2014-05-06 19:44 - 2014-05-06 17:04 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-06 19:44 - 2011-10-04 21:56 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-05-06 19:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-06 19:41 - 2013-09-19 23:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-05-06 19:17 - 2012-11-30 14:09 - 00004138 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA
2014-05-06 19:17 - 2012-11-30 14:09 - 00003742 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core
2014-05-06 18:58 - 2014-05-06 18:58 - 00002155 _____ () C:\Users\Wolfgang Dorn\Desktop\ Malwarebytes Anti-Malware  - CHIP Downloader.lnk
2014-05-06 00:13 - 2011-09-26 12:31 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Winamp
2014-05-05 16:25 - 2014-03-21 00:59 - 00008192 _____ () C:\Users\Wolfgang Dorn\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-05 09:22 - 2014-05-04 19:09 - 00044948 _____ () C:\Windows\iis7.log
2014-05-05 09:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\inetsrv
2014-05-05 09:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-05-04 21:24 - 2014-05-04 21:24 - 00000000 _____ () C:\Users\Wolfgang Dorn\defogger_reenable
2014-05-04 21:03 - 2014-04-21 18:10 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-05-04 19:23 - 2012-01-18 11:07 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-04 16:26 - 2014-04-15 15:21 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-04 16:26 - 2014-04-15 15:21 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-04 14:18 - 2014-03-24 18:26 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\.oit
2014-05-01 21:07 - 2014-03-19 02:38 - 00424632 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-01 20:39 - 2014-03-27 10:13 - 00111336 _____ () C:\Users\Wolfgang Dorn\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 20:21 - 2012-02-22 18:53 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:52 - 2013-12-09 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\GMX Application {sync-000021}
2014-05-01 11:31 - 2011-09-26 12:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2014-05-01 11:24 - 2011-09-26 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-01 11:08 - 2014-04-02 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-05-01 11:08 - 2013-09-27 18:42 - 00000941 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:45 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-30 22:33 - 2011-12-10 16:20 - 00000000 ____D () C:\Windows\pss
2014-04-30 20:47 - 2014-01-18 23:05 - 00000000 ____D () C:\Program Files (x86)\CheckDrive
2014-04-30 19:18 - 2012-01-08 19:33 - 00002400 _____ () C:\Users\Wolfgang Dorn\Desktop\Google Chrome.lnk
2014-04-29 16:01 - 2014-05-02 23:00 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-02 23:00 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 11:14 - 2011-09-20 14:20 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 09:40 - 2011-09-19 01:32 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-04-28 19:46 - 2011-09-27 10:48 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic
2014-04-28 17:45 - 2011-12-30 20:08 - 00000000 ____D () C:\Program Files (x86)\ubuntuone
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-27 19:46 - 2013-12-03 20:35 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-04-26 23:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-26 23:35 - 2013-05-29 14:45 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-04-26 23:04 - 2011-09-19 01:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-26 22:16 - 2014-04-26 22:10 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 12:18 - 2011-09-27 11:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Paint.NET
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 22:06 - 2014-04-21 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-23 22:06 - 2014-04-21 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-23 22:06 - 2014-04-17 01:47 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-23 22:06 - 2014-04-17 01:46 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-23 22:06 - 2013-08-07 13:31 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-04-23 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-04-23 22:05 - 2014-04-17 01:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-23 22:05 - 2011-09-26 17:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla
2014-04-23 09:52 - 2012-03-11 17:40 - 00000000 ____D () C:\Users\Wolfgang Dorn\Tracing
2014-04-22 19:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-22 17:53 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:43 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:43 - 2011-09-28 23:55 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 15:11 - 2013-10-23 12:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-21 13:56 - 2014-04-21 13:55 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-21 13:56 - 2012-07-02 08:43 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-20 22:49 - 2013-12-06 20:48 - 00000000 ____D () C:\Users\Wolfgang Dorn\Bavaria Holiday Enterprises, Inc
2014-04-20 01:11 - 2014-04-20 01:05 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2014-04-19 23:53 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-20 00:24 - 2012-02-22 18:54 - 00000000 ____D () C:\ProgramData\InstallShield
2014-04-20 00:24 - 2011-09-19 02:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-20 00:23 - 2011-09-19 01:29 - 00000000 ____D () C:\ProgramData\Brother
2014-04-19 23:55 - 2014-04-17 01:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-19 23:55 - 2014-04-17 01:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 23:35 - 2013-05-29 14:44 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:12 - 2011-09-26 12:15 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-04-19 15:09 - 2012-06-10 18:28 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\RealNetworks
2014-04-19 15:09 - 2012-01-16 10:55 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Real
2014-04-19 15:00 - 2013-08-14 18:05 - 00000000 ____D () C:\ProgramData\Wondershare Player
2014-04-19 15:00 - 2013-02-27 16:23 - 00000000 ____D () C:\ProgramData\Wondershare
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Program Files (x86)\Winamp Detect
2014-04-19 15:00 - 2011-09-26 12:07 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\vlc
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2014-04-19 14:04 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2012-01-16 10:55 - 00000000 ____D () C:\ProgramData\Real
2014-04-19 14:46 - 2013-08-15 16:51 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-19 14:33 - 2012-07-05 00:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla Firefox
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-17 00:06 - 2012-12-22 02:49 - 00003398 _____ () C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:41 - 2014-04-16 23:17 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-16 20:32 - 2011-09-26 19:13 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-04-16 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 20:31 - 2013-11-25 21:01 - 00001334 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-04-16 20:31 - 2011-09-26 19:14 - 00001450 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-04-16 20:30 - 2011-09-26 19:13 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-04-16 20:29 - 2011-09-26 19:12 - 00000000 ____D () C:\Program Files\Windows Live
2014-04-16 14:39 - 2013-08-07 13:30 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Wondershare Video Converter Ultimate
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-04-16 14:02 - 2012-01-08 19:33 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-16 14:02 - 2011-12-20 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2014-04-16 01:54 - 2014-01-30 22:17 - 00007601 _____ () C:\Users\Wolfgang Dorn\AppData\Local\resmon.resmoncfg
2014-04-15 23:23 - 2014-03-24 17:58 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Epson Drucker
2014-04-15 22:53 - 2014-03-24 17:10 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-04-15 21:28 - 2014-01-18 23:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Abelssoft
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:23 - 2014-01-18 23:06 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-04-15 15:23 - 2011-12-20 23:25 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\TomTom
2014-04-15 15:23 - 2011-12-20 23:24 - 00000000 ____D () C:\Program Files (x86)\TomTom HOME 2
2014-04-15 15:23 - 2011-09-26 12:31 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-04-15 15:22 - 2011-09-26 17:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\25.09.2011
2014-04-14 22:56 - 2014-04-10 00:13 - 00008817 _____ () C:\Users\Wolfgang Dorn\Sti_Trace.log
2014-04-14 20:13 - 2014-04-21 13:56 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-14 20:05 - 2014-04-21 13:56 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-14 20:05 - 2014-04-21 13:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-14 20:04 - 2014-04-21 13:56 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-14 12:06 - 2014-03-24 17:12 - 00000279 _____ () C:\Users\Public\Desktop\Epson Benutzerhandbuch WF-2540 Series.url
2014-04-14 12:06 - 2014-03-24 17:12 - 00000256 _____ () C:\Users\Public\Desktop\Anleitung für Epson Connect.url
2014-04-14 04:24 - 2014-05-06 16:38 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-05-06 16:38 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Files to move or delete:
====================
C:\Users\Wolfgang Dorn\FileViewPro_2014.exe
C:\Users\Wolfgang Dorn\gimp-2.8.10-setup.exe
C:\Users\Wolfgang Dorn\haozip_v3.0.multi.exe
C:\Users\Wolfgang Dorn\pdf24-creator-6.0.1.exe
C:\Users\Wolfgang Dorn\RevoUninProSetup.exe
C:\Users\Wolfgang Dorn\setup.exe
C:\Users\Wolfgang Dorn\sysrc_trial_3267_3965405.exe
C:\Users\Wolfgang Dorn\WEB.DE_MailCheck_chrome_setup.exe
C:\Users\Wolfgang Dorn\winamp565_full_emusic-7plus_de-de.exe


Some content of TEMP:
====================
C:\Users\Wolfgang Dorn\AppData\Local\Temp\Quarantine.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\shutdown1398699937.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is33D2.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is6B6C.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is80AF.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is8B30.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_isE209.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-11 13:04

==================== End Of Log ============================

--- --- ---

Das war's erstmal. In der Frühe geht es weiter.

Einen schönen Tag wünscht

ewes

schrauber · 13.05.2014, 15:48

Adware & Co. deinstallieren

Lade Dir bitte von hier Revo Uninstaller herunter.
Installiere und starte das Programm.
Suche im Uninstallerfeld nach den Programmen, die unter:

diesen Zusatz haben:
Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

ProxyServer: 192.168.2.1:80

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Und ich würde mal TuneUp und RipTiger entfernen. TuneUp vor allem, bevor du den Rechner damit komplett getoastet hast...

ewes-Ltd · 14.05.2014, 21:54

Hallo Schrauber,

danke für Deine Anleitung!
Ich habe jetzt möglichst alle Programme gelöscht mit "attention" - Vermerk.

Unter TASK sind noch ein paar "attention" übrig, bei denen ich nicht weiß, was ich mit denen machen soll.

Den Proxy-Server habe ich noch nicht installiert, weil mir da irgendwie ein paar Zahlen und Codes fehlen.

Dies ist das Resultat nach der Proxy-Server-Suche:

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-05-2014 01
Ran by Wolfgang Dorn at 2014-05-13 20:22:38 Run:2
Running from C:\Downloads\Software
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
ProxyServer: 192.168.2.1:80
*****************

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.

==== End of Fixlog ====

TuneUp habe ich erstmal eingestellt gemäß Deinem Ratschlag. Wenn ich es komplett löschen soll, dann sieht das recht umfangreich aus. Ich müsste wohl hinterher ein Kontroll- und Reinigungsprogramm durchführen. Soll ich alle Komponenten entfernen?

Den virtuellen Speicher habe ich vergrößert. Dies war wohl die Ursache für die Arbeitsspeichermeldung.

Der Internetexplorer bringt mir keine unqualifizierte Werbung mehr. Allerdings habe ich da noch ein paar Anwendungsprobleme. Also arbeite ich mit Google-Chrome erstmal weiter.

Somit sollten wir langsam auf dem aktuellen Stand sein. Irgendwie habe ich immer das Gefühl, dass ich gleichzeitig mit zwei Programmen arbeite, weil einiges erstmal aufgeht, kurz flackert und dann wieder normal weiterläuft. Aber es läuft erstmal.

Was soll ich nun machen? Hast Du noch ne Aufgabe für mich?

Herzlichst

ewes

*****

Hallo Schrauber,

sorry - es tut mir leid! Aber das alte Problem beim Dateien abspeichern ist wieder aufgetaucht.

Also: ich lege eine Datei an, benenne sie und will sie öffnen, um hineinzuschreiben, oder hineinzukopieren.
Dann beginnt die "Überlegungsphase" des Gerätes, die ca. ne halbe Minute dauert. Danach kommt das gelbe Schild von Microsoft Office Word 2007.
Jetzt dauert es nochmals 1/2 bis 1 Minute, dann kommt die Meldung mit der Pfadzeile oben: "Bei der Weitergabe des Befehls an das Programm ist ein Fehler aufgetreten."
Nun kann ich machen was ich will. Letztendlich hilft nur komplett ausschalten und wieder hochfahren.
Danach funktioniert wieder alles einwandfrei - auch die Geschwindigkeit, die bei der ersten Aktion sehr reduziert war.

Was kann ich, oder was soll ich machen?

Sorry, aber es hört nicht auf. Der einzige Erfolg ist, dass Pokki weg ist.

herzlichst

ewes

*****

Hallo Schrauber,

nachdem ich TunUp ausgeschaltet hatte, hat sich das Programm wieder selbständig eingeschaltet. Jetzt ist es gelöscht - hoffentlich komplett.

Wenn ich den PC zum Erstenmal jeweils hochfahre, bin ich der Meinung, dass er langsam ist und irgendwie einiges im Hintergrund abarbeitet. Wenn mich "Word" dann zwingt, wieder abzuschalten, bzw, das Gerät herunterzufahren, dann läuft der PC nach dem Neustart wesentlich schneller und "leichter." Natürlich habe ich dafür keine Erklärung.

Dies ist der neueste Stand.

Danke für Deine bisherige umfangreiche Arbeit und Deine übergroße Geduld! Ich hoffe, dass wir jetzt das WORD-Problem auch noch lösen können. Dann sollte die Kiste wieder in Ordnung sein. Ich habe - dank Deiner Hilfe - ein komplett neues System.

Aber mir ist es schleierhaft, wie es zu diesen Fehlern kommen konnte. Ohne Dich wäre ich total aufgeschmissen gewesen. Ich werde versuchen, in Zukunft noch besser aufzupassen - wenn dies überhaupt möglich ist.

Danke erstmal - und bis später - oder so!

herzlichst

ewes

schrauber · 15.05.2014, 19:50

Versuch das mal:
http://www.trojaner-board.de/126216-...epair-aio.html

Ansonsten bleibt nur Neuinstallation von Office.

ewes-Ltd · 19.05.2014, 02:21

Hallo Schrauber,

ich habe jetzt drei Versuche gestartet, um mit tweaking.com zu einem Ende zu kommen.
Aber:
1. das System hat dreimal bei 41% gestoppt und
2. beim letzten Versuch blieb das Signal weg.

Ich habe jetzt keine log-datei, die ich übertragen könnte.

Ich hätte jetzt ein edb.log in ca. 32 kb "verpackt", aber ich bekomme es hier nicht hereinkopiert.

Nun werde ich heute oder morgen das Ganze nochmal durchlaufen lassen, sobald ich irgendwie die Zeit dazu finde.
Heute versuche ich mit dem Gerät zu arbeiten und werde dann darüber berichten.

Einen schönen und erfolgreichen Tag wünscht

ewes

schrauber · 19.05.2014, 18:21

Ok. Wen es nicht geht Office mal neu installieren.

ewes-Ltd · 20.05.2014, 10:15

Hallo Schrauber,

ich hoffe, dass dies die richtige Log-Datei ist im Anhang.
Zumindest war dies die einzige, die im Titel "Windows_repair_log" hatte mit dem neuesten Datum - 20.05.2014.

Weitere kann ich noch liefern mit folgenden Bezeichnungen:
repair_icons, repair_windows_updates, repair_WMI, repair_winsock_and DNS-Cache und noch einige weitere, falls sie nicht irgendwie gelöscht werden.
Zusätzlich habe ich noch 8 Stück von gestern, davon auch eine "windows_repair_log" Datei.

Alle wurden von mir gefunden, als ich den Begriff "windows_repair_log" eingab.

Um den Überblick nicht zu verlieren, ist das hier die Neueste:

Code:

ATTFilter

 System Variables
--------------------------------------------------------------------------------
OS: Windows 7 Home Premium
OS Architecture: 64-bit
OS Version: 6.1.7601
OS Service Pack: Service Pack 1
Computer Name: EWES2000
Windows Drive: C:\
Windows Path: C:\Windows
Current Profile: C:\Users\Wolfgang Dorn
Current Profile SID: S-1-5-21-1710860145-1155721231-3359118018-1000
Current Profile Classes: S-1-5-21-1710860145-1155721231-3359118018-1000_Classes
Profiles Location: C:\Users
Profiles Location 2: C:\Windows\ServiceProfiles
Local Settings AppData: C:\Users\Wolfgang Dorn\AppData\Local
--------------------------------------------------------------------------------

System Information
--------------------------------------------------------------------------------
System Up Time: 0 Days 00:37:56

Process Count: 110
Commit Total: 2,37 GB
Commit Limit: 9,61 GB
Commit Peak: 2,44 GB
Handle Count: 31993
Kernel Total: 533,29 MB
Kernel Paged: 435,07 MB
Kernel Non Paged: 98,22 MB
System Cache: 1,68 GB
Thread Count: 1308
--------------------------------------------------------------------------------

Memory Before Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 3,75 GB
Memory Used: 2,15 GB(57,3488%)
Memory Avail.: 1,60 GB
--------------------------------------------------------------------------------

Cleaning Memory Before Starting Repairs...

Memory After Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 3,75 GB
Memory Used: 1,78 GB(47,4242%)
Memory Avail.: 1,97 GB
--------------------------------------------------------------------------------

Starting Repairs...
   Start (19.05.2014 22:52:13)

01 - Reset Registry Permissions 01/03
   HKEY_CURRENT_USER & Sub Keys
   Start (19.05.2014 22:52:15)
   Running Repair Under Current User Account
   Done (19.05.2014 22:53:38)

01 - Reset Registry Permissions 02/03
   HKEY_LOCAL_MACHINE & Sub Keys
   Start (19.05.2014 22:53:38)
   Running Repair Under System Account
   Done (19.05.2014 23:03:08)

01 - Reset Registry Permissions 03/03
   HKEY_CLASSES_ROOT & Sub Keys
   Start (19.05.2014 23:03:08)
   Running Repair Under System Account
   Done (19.05.2014 23:06:24)

03 - Reset Service Permissions
   Start (19.05.2014 23:06:24)
   Running Repair Under System Account
   Done (19.05.2014 23:06:37)

04 - Register System Files
   Start (19.05.2014 23:06:37)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:07:15)

05 - Repair WMI
   Start (19.05.2014 23:07:15)

   Starting Security Center So We Can Export The Security Info.

   Exporting Antivirus Info...
   AVG AntiVirus Free Edition 2014 Exported.
   Microsoft Security Essentials Exported.

   Exporting AntiSpyware Info...
   Windows Defender Exported.
   AVG AntiVirus Free Edition 2014 Exported.
   Microsoft Security Essentials Exported.

   Exporting 3rd Party Firewall Info...
   No Firewall Products Reported.

   Running Repair Under Current User Account
   Done (19.05.2014 23:14:37)

06 - Repair Windows Firewall
   Start (19.05.2014 23:14:37)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:15:11)

07 - Repair Internet Explorer
   Start (19.05.2014 23:15:11)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:15:47)

08 - Repair MDAC/MS Jet
   Start (19.05.2014 23:15:47)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:16:02)

09 - Repair Hosts File
   Start (19.05.2014 23:16:02)
   Running Repair Under System Account
   Done (19.05.2014 23:16:05)

10 - Remove Policies Set By Infections
   Start (19.05.2014 23:16:05)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:16:09)

11 - Repair Start Menu Icons Removed By Infections
   Start (19.05.2014 23:16:10)
   Running Repair Under System Account
   Done (19.05.2014 23:16:12)

12 - Repair Icons
   Start (19.05.2014 23:16:12)
   Running Repair Under Current User Account
   Done (19.05.2014 23:16:14)

13 - Repair Winsock & DNS Cache
   Start (19.05.2014 23:16:14)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:16:40)

15 - Repair Proxy Settings
   Start (19.05.2014 23:16:41)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:16:45)

17 - Repair Windows Updates
   Start (19.05.2014 23:16:45)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:17:19)

18 - Repair CD/DVD Missing/Not Working
   Start (19.05.2014 23:17:19)
   iTunes not found, not applying UpperFilters iTunes Reg Key
   Done (19.05.2014 23:17:19)

19 - Repair Volume Shadow Copy Service
   Start (19.05.2014 23:17:19)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:17:35)

21 - Repair MSI (Windows Installer)
   Start (19.05.2014 23:17:35)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:17:52)

23.01 - Repair bat Association
   Start (19.05.2014 23:17:52)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:17:57)

23.02 - Repair cmd Association
   Start (19.05.2014 23:17:57)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:02)

23.03 - Repair com Association
   Start (19.05.2014 23:18:02)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:06)

23.04 - Repair Directory Association
   Start (19.05.2014 23:18:06)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:11)

23.05 - Repair Drive Association
   Start (19.05.2014 23:18:11)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:16)

23.06 - Repair exe Association
   Start (19.05.2014 23:18:16)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:21)

23.07 - Repair Folder Association
   Start (19.05.2014 23:18:21)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:26)

23.08 - Repair inf Association
   Start (19.05.2014 23:18:26)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:30)

23.09 - Repair lnk (Shortcuts) Association
   Start (19.05.2014 23:18:30)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:35)

23.10 - Repair msc Association
   Start (19.05.2014 23:18:35)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:40)

23.11 - Repair reg Association
   Start (19.05.2014 23:18:40)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:45)

23.12 - Repair scr Association
   Start (19.05.2014 23:18:45)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:50)

24 - Repair Windows Safe Mode
   Start (19.05.2014 23:18:50)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:18:54)

25 - Repair Print Spooler
   Start (19.05.2014 23:18:55)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:19:16)

26 - Restore Important Windows Services
   Start (19.05.2014 23:19:16)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:19:33)

27 - Set Windows Services To Default Startup
   Start (19.05.2014 23:19:33)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (19.05.2014 23:19:44)

   Skipping Repair.
   Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
   Current version: 6.1

   Skipping Repair.
   Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
   Current version: 6.1

   Skipping Repair.
   Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
   Current version: 6.1

Cleaning up empty logs...

All Selected Repairs Done.
   Done (19.05.2014 23:19:44)
   Total Repair Time: 00:27:33


...YOU MUST RESTART YOUR SYSTEM...
   Running Repair Under Current User Account

Dies sollte es gewesen sein vor der Neuinstallation von Office.

Ich hoffe, dass wir damit weiterkommen und nun Dein fachmännischer Verstand die Fehler erkennt und wir diese beheben können.

Das Abspeichern von Windows-Dateien war jetzt relativ schwierig - bis unmöglich - geworden. Zum Schluss ließen sich nicht mal mehr neue, leere Windows-Dateien öffnen.

Viel Spaß bei der Analyse und einen schönen Tag

mfG - ewes

*** !!! ***

Hallo Schrauber,

nach mittlerweile 7 Stunden und "normaler" Arbeit, fasse ich zusammen, dass alles irgendwie leichter läuft und anscheinend funktioniert - bis auf

Word-2007

Fehlermeldung aktuell: "Bei der Weitergabe des Befehls an das Programm ist ein Fehler aufgetreten"

Um arbeiten zu können, muss ich das Programm runterfahren, ausschalten, neu starten - und bei Word einfach den Bildschirm kopieren und diese Kopie abspeichern.

Fällt Dir bei der Durchsicht der log-Datei noch etwas ein, was ich unternehmen kann, oder ausprobieren sollte.

MfG - ewes

schrauber · 21.05.2014, 07:40

Wenn sollte das Programm das alles behoben haben. Also dann bitte Office mal neu installieren.

ewes-Ltd · 21.05.2014, 15:27

Danke erstmal

MfG - ewes

Ich habe im Moment immer noch die gleiche Meldung:
Bei der Wiedergabe des Befehls an das Programm ist ein Fehler aufgetreten.
Da hilft nur abschalten und neu starten - usw. usw.

schrauber · 22.05.2014, 12:19

trotz Neuinstallation von office?

15.05.2014, 19:50	#24
schrauber /// the machine /// TB-Ausbilder	pokki löschen wegen Systembelastung Versuch das mal: http://www.trojaner-board.de/126216-...epair-aio.html Ansonsten bleibt nur Neuinstallation von Office. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

19.05.2014, 18:21	#26
schrauber /// the machine /// TB-Ausbilder	pokki löschen wegen Systembelastung Ok. Wen es nicht geht Office mal neu installieren. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

21.05.2014, 07:40	#28
schrauber /// the machine /// TB-Ausbilder	pokki löschen wegen Systembelastung Wenn sollte das Programm das alles behoben haben. Also dann bitte Office mal neu installieren. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

22.05.2014, 12:19	#30
schrauber /// the machine /// TB-Ausbilder	pokki löschen wegen Systembelastung trotz Neuinstallation von office? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

pokki löschen wegen Systembelastung

Log-Analyse und Auswertung: pokki löschen wegen Systembelastung