Antivir wird durch eine Gruppenrichtlinie blockiert.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:01-06-2014
Ran by MO (administrator) on MO-PC on 01-06-2014 15:37:49
Running from C:\Users\MO\Desktop
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Users\MO\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Super-Charger] => C:\Program Files\MSI\Super-Charger\StartSuperCharger.exe
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10025576 2011-01-18] (Realtek Semiconductor)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-24] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-09-27] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696 2012-01-18] (Sun Microsystems, Inc.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [ApnUpdater] => C:\Program Files\Ask.com\Updater\Updater.exe [1644680 2013-02-08] (Ask)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-22] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION
HKU\S-1-5-21-1861541343-3280913995-1608049641-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\MO\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-1861541343-3280913995-1608049641-1000\...\Run: [mlfpyomj] => regsvr32.exe "C:\ProgramData\mlfpyomj.dat"
HKU\S-1-5-21-1861541343-3280913995-1608049641-1000\...\MountPoints2: {ba5b111b-ecc3-11e2-8b10-6c626d2723d4} - K:\iStudio.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6244C2AB5496CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
SearchScopes: HKCU - {D4781CA2-F259-43FE-841C-910559CBC647} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=ae9a9ed5-c256-42af-aaa6-ecf01b0fd1e6&apn_sauid=989FA788-22CF-41FD-B8C4-FE6FD8461B40
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\ANDI 2014\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_34-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_34-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_34-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=1.6.0_34 - C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\MO\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

Chrome: 
=======
CHR Extension: (Google Wallet) - C:\Users\MO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-21]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1039440 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG)
R3 MBfilt; C:\Windows\System32\drivers\MBfilt32.sys [24664 2009-11-18] (Creative Technology Ltd.)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-25] (Avira GmbH)
S3 MSICDSetup; \??\E:\CDriver.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-01 15:37 - 2014-06-01 15:38 - 00009511 _____ () C:\Users\MO\Desktop\FRST.txt
2014-06-01 15:37 - 2014-06-01 15:37 - 00000000 ____D () C:\FRST
2014-06-01 15:36 - 2014-06-01 15:36 - 01057792 _____ (Farbar) C:\Users\MO\Desktop\FRST.exe
2014-06-01 12:13 - 2014-06-01 12:13 - 00000000 ____D () C:\Users\MO\AppData\Local\WinZip
2014-05-31 08:54 - 2014-05-31 08:54 - 00000000 ____D () C:\Users\MO\Desktop\2014-05-31 g 31.05
2014-05-24 09:06 - 2014-05-24 09:06 - 00000000 ____D () C:\Users\MO\Desktop\2014-05-24 auswertung
2014-05-24 08:57 - 2014-05-24 08:57 - 00000000 ____D () C:\Users\MO\Desktop\2014-05-24 wohnung 24.5
2014-05-22 06:27 - 2014-05-22 06:27 - 04536336 _____ (Avira Operations GmbH & Co. KG) C:\Users\MO\Downloads\avira_de_av___ws.exe
2014-05-22 06:17 - 2014-05-22 06:27 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-05-22 06:17 - 2014-05-22 06:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-22 06:16 - 2014-05-22 06:16 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-21 17:37 - 2014-06-01 15:10 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-21 17:37 - 2014-05-21 17:37 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-18 14:53 - 2014-05-25 19:12 - 00264817 _____ (Microsoft Corporation) C:\ProgramData\mlfpyomj.dat
2014-05-18 09:54 - 2014-05-18 09:54 - 00000000 ____D () C:\Windows\system32\WDZ1
2014-05-13 10:20 - 2014-05-13 10:20 - 00002222 _____ () C:\Users\Public\Desktop\ANDI 2014.lnk
2014-05-13 10:20 - 2014-05-13 10:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ANDI 2014
2014-05-13 10:16 - 2014-05-13 10:20 - 00000000 ____D () C:\Program Files\ANDI 2014

==================== One Month Modified Files and Folders =======

2014-06-01 15:38 - 2014-06-01 15:37 - 00009511 _____ () C:\Users\MO\Desktop\FRST.txt
2014-06-01 15:38 - 2011-10-13 22:32 - 00000000 ____D () C:\Users\MO\AppData\Local\Temp
2014-06-01 15:37 - 2014-06-01 15:37 - 00000000 ____D () C:\FRST
2014-06-01 15:36 - 2014-06-01 15:36 - 01057792 _____ (Farbar) C:\Users\MO\Desktop\FRST.exe
2014-06-01 15:31 - 2011-10-13 22:33 - 01328863 _____ () C:\Windows\WindowsUpdate.log
2014-06-01 15:23 - 2011-10-21 09:40 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-01 15:10 - 2014-05-21 17:37 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-01 12:21 - 2011-10-13 22:34 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-01 12:13 - 2014-06-01 12:13 - 00000000 ____D () C:\Users\MO\AppData\Local\WinZip
2014-06-01 11:47 - 2009-07-14 06:34 - 00014944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-01 11:47 - 2009-07-14 06:34 - 00014944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-01 11:40 - 2011-10-21 09:40 - 00001086 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-01 11:39 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-01 11:39 - 2009-07-14 06:39 - 00087610 _____ () C:\Windows\setupact.log
2014-05-31 08:54 - 2014-05-31 08:54 - 00000000 ____D () C:\Users\MO\Desktop\2014-05-31 g 31.05
2014-05-31 08:54 - 2013-02-25 19:34 - 00000189 _____ () C:\Users\MO\Desktop\WEB.DE - E-Mail-Adresse kostenlos, FreeMail, Nachrichten & Services.url
2014-05-25 19:12 - 2014-05-18 14:53 - 00264817 _____ (Microsoft Corporation) C:\ProgramData\mlfpyomj.dat
2014-05-24 09:06 - 2014-05-24 09:06 - 00000000 ____D () C:\Users\MO\Desktop\2014-05-24 auswertung
2014-05-24 08:57 - 2014-05-24 08:57 - 00000000 ____D () C:\Users\MO\Desktop\2014-05-24 wohnung 24.5
2014-05-22 15:56 - 2011-10-21 09:40 - 00000000 ____D () C:\Program Files\Google
2014-05-22 14:48 - 2013-02-25 15:16 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-22 14:48 - 2013-02-25 15:16 - 00093528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-22 06:27 - 2014-05-22 06:27 - 04536336 _____ (Avira Operations GmbH & Co. KG) C:\Users\MO\Downloads\avira_de_av___ws.exe
2014-05-22 06:27 - 2014-05-22 06:17 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-05-22 06:17 - 2014-05-22 06:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-22 06:17 - 2013-02-25 15:16 - 00000000 ____D () C:\Program Files\Avira
2014-05-22 06:16 - 2014-05-22 06:16 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-22 06:16 - 2011-10-15 11:33 - 00000000 ____D () C:\ProgramData\Avira
2014-05-22 05:48 - 2011-10-15 13:32 - 00180140 _____ () C:\Windows\PFRO.log
2014-05-21 17:39 - 2011-10-21 09:42 - 00000000 ____D () C:\Users\MO\AppData\Local\Adobe
2014-05-21 17:39 - 2011-10-21 09:40 - 00000000 ____D () C:\Users\MO\AppData\Local\Google
2014-05-21 17:37 - 2014-05-21 17:37 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-21 17:37 - 2011-10-15 16:28 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-05-19 14:02 - 2013-05-12 12:01 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-18 09:54 - 2014-05-18 09:54 - 00000000 ____D () C:\Windows\system32\WDZ1
2014-05-18 09:54 - 2011-10-21 09:41 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-13 10:35 - 2011-10-14 13:45 - 00074240 _____ () C:\Users\MO\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-13 10:31 - 2009-07-14 06:33 - 00317832 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-13 10:29 - 2011-10-21 09:40 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-13 10:20 - 2014-05-13 10:20 - 00002222 _____ () C:\Users\Public\Desktop\ANDI 2014.lnk
2014-05-13 10:20 - 2014-05-13 10:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ANDI 2014
2014-05-13 10:20 - 2014-05-13 10:16 - 00000000 ____D () C:\Program Files\ANDI 2014
2014-05-07 16:26 - 2012-02-15 21:37 - 00000000 ____D () C:\ProgramData\tmp
2014-05-07 16:25 - 2012-08-17 18:32 - 00000000 ____D () C:\Users\MO\Documents\My Book Uploader 3 Files
2014-05-06 20:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-05 22:48 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

Files to move or delete:
====================
C:\ProgramData\ism_0_llatsni.pad
C:\ProgramData\mlfpyomj.dat
C:\ProgramData\rgbrgebrbewg.pad


Some content of TEMP:
====================
C:\Users\MO\AppData\Local\Temp\AskSLib.dll
C:\Users\MO\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-29 23:03

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version:01-06-2014
Ran by MO at 2014-06-01 15:38:29
Running from C:\Users\MO\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Amazon MP3-Downloader 1.0.9 (HKLM\...\Amazon MP3-Downloader) (Version:  - )
AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden
ANDI 2011 (HKLM\...\{08C919D4-4993-482C-ABC6-781962BB3618}) (Version: 3.0.3 - LGLN Hannover)
ANDI 2012 (HKLM\...\{7598E3D8-48DE-4C7B-9E8E-945B6ADB071A}) (Version: 4.0.3 - LGLN Hannover)
ANDI 2013 (HKLM\...\{21E3464C-EE59-4EA2-B3E1-4FCE000B8722}) (Version: 5.0.5 - LGLN Hannover)
ANDI 2014 (HKLM\...\{116F568D-E478-4569-B8FA-964C43A73E1A}) (Version: 6.0.3 - LGLN Hannover)
Apple Application Support (HKLM\...\{A83279FD-CA4B-4206-9535-90974DE76654}) (Version: 2.1.5 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ask Toolbar (HKLM\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.15.18.0 - Ask.com) <==== ATTENTION
ASUS VGA Driver (Version: 3.0.0.1 - Ihr Firmenname) Hidden
ATI AVIVO Codecs (Version: 11.6.0.10524 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{2E46D5AD-6B32-78E0-61E1-12A51284A21F}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
Avira (HKLM\...\{68e29fba-92b1-4f6f-a604-1d8679da3a9f}) (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Book Uploader 3 (HKLM\...\Photobook) (Version: 1.0.3.5 - Silverwire AG)
Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center (Version: 2011.0524.2352.41027 - Ihr Firmenname) Hidden
Catalyst Control Center InstallProxy (Version: 2011.0524.2352.41027 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2011.0524.2352.41027 - ATI) Hidden
Catalyst Control Center Profiles Desktop (Version: 2011.0524.2352.41027 - ATI) Hidden
CCC Help German (Version: 2011.0524.2351.41027 - ATI) Hidden
ccc-utility (Version: 2011.0524.2352.41027 - ATI) Hidden
Die ersten 10 Jahre (HKLM\...\{1C12B0B2-91FB-439A-A64D-1A239F0B7FAB}) (Version: 1.00.0000 - )
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden
HydraVision (Version: 4.2.206.0 - ATI Technologies Inc.) Hidden
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Java Auto Updater (Version: 2.0.7.1 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 34 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216034FF}) (Version: 6.0.340 - Oracle)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
OnlineFotoservice (HKLM\...\OnlineFotoservice) (Version:  - )
QuickTime (HKLM\...\{7BE15435-2D3E-4B58-867F-9C75BED0208C}) (Version: 7.71.80.42 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6293 - Realtek Semiconductor Corp.)
RGS Schullaufbahnempfehlung GS NI (HKLM\...\{A1C1C8B1-F906-48D2-B4A0-428C6319B2C9}_is1) (Version: 1.9.4 - Rorig Software)
RGS Schulzeugnis 6 (HKLM\...\{053C6667-5F5F-4F6E-B922-2B3096A4F298}_is1) (Version: 6.8.2 - Rorig Software)
Schroedel Arbeitsblätter (HKLM\...\Schroedel Arbeitsblätter) (Version:  - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{620E77C0-CDFE-4C14-AAEB-830ABB65864C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8153EC80-C988-4336-8DAF-6D99C0D26E0C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Welt der Zahl 1 (HKLM\...\Welt der Zahl 1) (Version:  - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)
WinZip 16.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D2}) (Version: 16.5.10095 - WinZip Computing, S.L. )

==================== Restore Points  =========================

21-05-2014 15:21:15 Windows Update
21-05-2014 15:24:32 Windows-Sicherung
21-05-2014 21:06:02 Windows Update
22-05-2014 04:09:19 Windows Update
22-05-2014 04:44:14 Windows Update
22-05-2014 05:33:10 Windows Update
22-05-2014 17:16:40 Windows Update
22-05-2014 18:10:51 Windows Update
24-05-2014 07:00:09 Windows Update
24-05-2014 10:45:42 Windows Update
24-05-2014 13:02:21 Windows Update
25-05-2014 17:12:22 Windows-Sicherung
25-05-2014 21:08:22 Windows Update
26-05-2014 22:35:04 Windows Update
27-05-2014 20:45:05 Windows Update
28-05-2014 12:24:38 Windows Update
28-05-2014 13:35:27 Windows Update
28-05-2014 13:36:56 Windows Update
29-05-2014 01:00:27 Windows Update
29-05-2014 21:06:13 Windows Update
30-05-2014 07:43:35 Windows Update
30-05-2014 18:59:59 Windows Update
30-05-2014 19:06:27 Windows Update
30-05-2014 21:53:09 Windows Update
31-05-2014 06:56:50 Windows Update
31-05-2014 16:32:44 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1C72F27C-7D1B-4E98-BC0D-F72D18F3D635} - System32\Tasks\{40012DCC-1C8A-4161-9B27-89E438B77A6F} => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [2014-05-14] (Avira Operations GmbH & Co. KG)
Task: {30197BBB-2972-45A2-B4F3-17963492295F} - System32\Tasks\{94D8E2F0-FBF5-46D0-97DB-1655AA7A18A7} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe [2014-05-22] (Avira Operations GmbH & Co. KG)
Task: {37039DA3-B8FB-4307-8F57-4C2453BDEA40} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-21] (Adobe Systems Incorporated)
Task: {6B6C2C07-6B07-4C57-AA8F-2517B050D2FF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-10-21] (Google Inc.)
Task: {73FC1A5D-EC5A-489B-8013-C13A92169F5E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {834E2D40-0423-4AA7-96EF-73600F85E662} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2013-02-08] () <==== ATTENTION
Task: {877E0F83-8AED-4039-8BF0-F3104C827DE8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-10-21] (Google Inc.)
Task: {ECB465B4-B303-4C18-B719-20CCE4B7F3FE} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {FC90D7EF-5102-4E89-BB2E-7F970450F152} - System32\Tasks\{E55989A7-83CB-4475-8A59-3A8351165D19} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe [2014-05-22] (Avira Operations GmbH & Co. KG)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-05-14 14:27 - 2014-05-14 14:27 - 00137296 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-14 14:27 - 2014-05-14 14:27 - 00065616 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2013-05-22 20:50 - 2013-05-22 20:50 - 00400704 _____ () C:\Users\MO\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
2011-03-14 14:20 - 2011-03-14 14:20 - 00430080 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-03-14 14:20 - 2011-03-14 14:20 - 00032768 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Branding\BrandingResources.dll
2011-05-24 23:50 - 2011-05-24 23:50 - 00243712 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^Users^MO^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ctfmon.lnk => C:\Windows\pss\ctfmon.lnk.Startup

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/31/2014 06:24:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 9.0.8112.16464, Zeitstempel: 0x50ec971b
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00344acc
ID des fehlerhaften Prozesses: 0x830
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (05/31/2014 08:58:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe, Version: 1.1.13.24161, Zeitstempel: 0x537360b2
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b60
Ausnahmecode: 0xc0000420
Fehleroffset: 0x000c380b
ID des fehlerhaften Prozesses: 0x7c0
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.ServiceHost.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe1
Pfad des fehlerhaften Moduls: Avira.OE.ServiceHost.exe2
Berichtskennung: Avira.OE.ServiceHost.exe3


System errors:
=============
Error: (06/01/2014 00:20:17 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk6\DR7 gefunden.

Error: (06/01/2014 00:20:17 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk6\DR7 gefunden.

Error: (06/01/2014 00:20:15 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk6\DR7 gefunden.

Error: (05/31/2014 06:32:41 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (05/31/2014 08:58:18 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/30/2014 11:53:03 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (05/30/2014 09:01:32 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Computerbrowser" wurde mit folgendem Fehler beendet: 
%%1115

Error: (05/30/2014 09:01:32 PM) (Source: BROWSER) (EventID: 8017) (User: )
Description: Der Suchdienst konnte nicht starten, da der abhängige Dienst "LanmanWorkstation" den ungültigen Status "1970438481䱌浔ﻈſﻴſ㤱〷㌴㐸ㄸ" aufwies.
Status             Bedeutung
  1              Angehalten

  2              Warten begonnen

  3              Warten beendet

  4              Wird ausgeführt

  5              Warten fortgesetzt

  6              Warten unterbrochen

  7              Unterbrochen

Error: (05/30/2014 08:51:52 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎30.‎05.‎2014 um 20:50:01 unerwartet heruntergefahren.

Error: (05/29/2014 11:06:10 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}


Microsoft Office Sessions:
=========================
Error: (12/23/2011 00:53:42 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 806 seconds with 300 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 28%
Total physical RAM: 3062.64 MB
Available physical RAM: 2184.78 MB
Total Pagefile: 6123.57 MB
Available Pagefile: 4760.33 MB
Total Virtual: 2047.88 MB
Available Virtual: 1864.93 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:292.87 GB) (Free:231.02 GB) NTFS
Drive d: () (Fixed) (Total:638.54 GB) (Free:553.55 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E225212F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=293 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=639 GB) - (Type=07 NTFS)

==================== End Of Log ============================