Mbam startet nicht; alle 13 Chameleons erfolglos

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 08:21 on 10/06/2014 (Markus *****)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-06-2014
Ran by Markus ****** (administrator) on MARKUS******PC on 10-06-2014 08:28:32
Running from C:\Users\Markus ******\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY InfoPoisk LLC) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
( ) C:\Windows\System32\lxeecoms.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\PLFSetI.exe
(sonix) C:\Windows\PLFSetL.exe
() C:\Windows\snuvcdsm.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(sonix) C:\Windows\PLFSetL.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Dropbox, Inc.) C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\hh.exe
(MalwareBytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\mbam-chameleon.pif
() C:\Users\Markus ******\Desktop\Defogger (1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13656792 2013-10-04] (Realtek Semiconductor)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2010-11-17] ()
HKLM\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [99712 2010-01-13] (sonix)
HKLM\...\Run: [SNUVCDSM] => C:\Windows\snuvcdsm.exe [30080 2010-01-13] ()
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-11] (Dritek System Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-15] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [99712 2010-01-13] (sonix)
HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY Production LLC)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-05-09] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-3706524009-4250397638-3171320869-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-11-16] (Google Inc.)
HKU\S-1-5-21-3706524009-4250397638-3171320869-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-11-16] (Google Inc.)
HKU\S-1-5-21-3706524009-4250397638-3171320869-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-11-16] (Google Inc.)
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\businesscardreader.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\express.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\finecmd.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\images2pdf.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\pdf architect.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PHOTOfunSTUDIO 9.1 PE.lnk
ShortcutTarget: PHOTOfunSTUDIO 9.1 PE.lnk -> C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe (Panasonic Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://meteo.srf.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.meteocentrale.ch/de/europa/schweiz/wetter-zuerich/details/N-3518042/
hxxp://www.nzz.ch/wetter/radarbild/
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {3A08CD5B-FF07-4DCB-809E-8A916279267C} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
SearchScopes: HKCU - {CD10120B-C165-4f8d-8C74-639629E238FF} URL = hxxp://mystart.magentic.com/?search={searchTerms}&loc=search_box
SearchScopes: HKCU - {F757135D-0CDC-4514-AC7F-C7E7284BCAF7} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10262&src=kw&q={searchTerms}&locale=de_CH&apn_ptnrs=^AGT&apn_dtid=^YYYYYY^YY^CH&apn_uid=e03eee1c-e153-4d97-a2da-0885b8125138&apn_sauid=D157CB26-7450-4F55-9CA6-149BCFEC1E7F
BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} -  No File
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {8AE3BCD6-ADBC-42E5-91BB-BF81E65B5911} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://oas.support.microsoft.com/ActiveX/MSDcode.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (NPLastPass) - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File
CHR Extension: (Google Docs) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-16]
CHR Extension: (Google Drive) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-16]
CHR Extension: (WOT) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-05-22]
CHR Extension: (YouTube) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-08-27]
CHR Extension: (Google-Suche) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-08-27]
CHR Extension: (Avira Browser Safety) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-05-01]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-06-09]
CHR Extension: (Google Wallet) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-16]
CHR Extension: (Google Mail) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-08-27]

==================== Services (Whitelisted) =================

S4 ABBYY.Licensing.BCR.Windows.2.0; C:\Program Files (x86)\NetworkLicenseServer.exe [821808 2012-04-28] (ABBYY)
R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY InfoPoisk LLC)
R2 ABBYY.Licensing.PDFTransformer.Classic.4.0; C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe [959184 2014-04-03] (ABBYY Production LLC)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [811088 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [124496 2014-05-05] (Avira Operations GmbH & Co. KG)
S3 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S4 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxeeserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [1052328 2010-01-07] ( )
R2 lxee_device; C:\Windows\SysWOW64\lxeecoms.exe [598696 2010-01-07] ( )
S4 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
S4 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S4 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [272024 2006-12-19] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1223704 2013-02-07] (Secunia)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-05-09] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [295800 2014-05-09] (Western Digital Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-04-29] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-04-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-19] (Avira Operations GmbH & Co. KG)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-02-07] (Secunia)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SjtWinIo; C:\Windows\System32\DRIVERS\SjtWinIo.sys [9216 2011-05-08] (SpeedJet Technology INC.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806592 2010-01-13] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 AVFSFilter; system32\DRIVERS\avfsfilter.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-10 08:28 - 2014-06-10 08:29 - 00023207 _____ () C:\Users\Markus ******\Desktop\FRST.txt
2014-06-10 08:28 - 2014-06-10 08:28 - 00000000 ____D () C:\FRST
2014-06-10 08:26 - 2014-06-10 08:26 - 02080768 _____ (Farbar) C:\Users\Markus ******\Desktop\FRST64.exe
2014-06-10 08:21 - 2014-06-10 08:21 - 00000490 _____ () C:\Users\Markus ******\Desktop\defogger_disable.log
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus ******\Desktop\Defogger (1).exe
2014-06-10 08:18 - 2014-06-10 08:19 - 00000490 _____ () C:\Users\Markus ******\Downloads\defogger_disable.log
2014-06-10 08:18 - 2014-06-10 08:18 - 00000000 _____ () C:\Users\Markus ******\defogger_reenable
2014-06-10 08:17 - 2014-06-10 08:17 - 00050477 _____ () C:\Users\Markus ******\Downloads\Defogger.exe
2014-06-09 13:17 - 2014-06-10 08:29 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-09 13:17 - 2014-06-09 13:17 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-09 13:17 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-09 13:16 - 2014-06-09 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (5).exe
2014-06-09 12:04 - 2014-06-09 12:05 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (4).exe
2014-06-09 12:00 - 2014-06-09 12:00 - 00128904 _____ () C:\Users\Markus ******\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-09 11:53 - 2014-06-10 07:44 - 00000224 _____ () C:\Windows\setupact.log
2014-06-09 11:53 - 2014-06-09 11:53 - 00498384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00007236 _____ () C:\Windows\PFRO.log
2014-06-09 11:53 - 2014-06-09 11:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-09 11:48 - 2014-06-09 11:48 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (3).exe
2014-06-09 11:31 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-09 11:30 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-09 11:17 - 2014-06-09 11:18 - 00000000 ____D () C:\Program Files (x86)\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00001198 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:15 - 2014-06-09 11:15 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64 (1).exe
2014-06-09 10:40 - 2014-06-09 10:41 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\PDFCreator
2014-06-09 09:52 - 2014-06-10 07:48 - 00000000 ___RD () C:\Users\Markus ******\Dropbox
2014-06-09 09:52 - 2014-06-09 09:52 - 00001059 _____ () C:\Users\Markus ******\Desktop\Dropbox.lnk
2014-06-09 09:51 - 2014-06-09 09:51 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (2).exe
2014-06-09 09:16 - 2014-06-09 09:17 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 08:54 - 2014-06-09 11:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\pdfforge
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Program Files\PDFCreator
2014-06-09 08:54 - 2014-04-17 19:36 - 00110776 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-06-09 08:48 - 2014-06-09 08:49 - 25055960 _____ (pdfforge ) C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe
2014-06-08 13:11 - 2014-06-09 10:03 - 00000000 ____D () C:\Users\Markus ******\Desktop\Mueti Teneriffa 2014
2014-06-01 09:40 - 2014-06-01 09:40 - 00000000 ____H () C:\Users\Markus ******\Documents\Default.rdp
2014-05-28 07:10 - 2014-06-10 07:48 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\DropboxMaster
2014-05-28 07:10 - 2014-06-09 09:52 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-28 07:06 - 2014-06-09 09:52 - 00000692 _____ () C:\Windows\wininit.ini
2014-05-28 07:06 - 2014-05-28 07:06 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (1).exe
2014-05-28 07:05 - 2014-06-10 07:48 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Dropbox
2014-05-28 07:05 - 2014-05-28 07:05 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller.exe
2014-05-27 08:42 - 2014-05-27 08:42 - 00000000 ____D () C:\Analytics
2014-05-27 08:41 - 2014-05-27 08:41 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-05-26 09:58 - 2014-05-26 09:59 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64.exe
2014-05-24 00:03 - 2014-05-24 00:03 - 00000731 _____ () C:\Users\Markus ******\Downloads\vcard-MarcelR-Saluz.vcf
2014-05-23 09:17 - 2014-06-09 10:43 - 00000000 ____D () C:\Users\Markus ******\Desktop\Ferien Portugal
2014-05-22 23:16 - 2014-05-22 23:16 - 00000000 ____D () C:\Windows\TEMPDIR
2014-05-22 10:29 - 2014-05-22 10:29 - 00000000 ____D () C:\Users\Küde\AppData\Roaming\com.wd.WDMyCloud
2014-05-21 17:55 - 2014-06-10 07:46 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-05-20 08:43 - 2014-05-20 08:43 - 00001218 _____ () C:\Users\Markus ******\Desktop\WD Quick View.lnk
2014-05-20 08:41 - 2014-05-20 08:41 - 04398333 _____ () C:\Users\Markus ******\Downloads\WD_Quick_View_Setup_for_Windows.zip
2014-05-20 08:40 - 2014-05-20 08:40 - 00001172 _____ () C:\Users\Markus ******\Desktop\WD SmartWare.lnk
2014-05-20 08:17 - 2014-05-20 08:18 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader (1).zip
2014-05-20 08:08 - 2014-05-20 08:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 08:07 - 2014-05-20 08:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 08:07 - 2014-05-20 08:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55.exe
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55 (1).exe
2014-05-18 22:28 - 2014-05-18 22:28 - 00013312 ___SH () C:\Users\Markus ******\Downloads\Thumbs.db
2014-05-18 22:17 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western_Digital_Technolog
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-05-18 22:14 - 2014-05-18 22:14 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader.zip
2014-05-16 23:05 - 2014-05-18 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-05-16 23:05 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-05-16 23:05 - 2014-05-16 23:06 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\com.wd.WDMyCloud
2014-05-16 23:05 - 2014-05-16 23:05 - 00001157 _____ () C:\Users\Public\Desktop\WD My Cloud.lnk
2014-05-16 23:04 - 2014-05-18 22:15 - 00000000 ____D () C:\ProgramData\Western Digital
2014-05-16 23:04 - 2014-05-16 23:04 - 00000204 _____ () C:\Users\Markus ******\Desktop\Lerncenter WD My Cloud.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000156 _____ () C:\Users\Markus ******\Desktop\WD My Cloud – Öffentliche Freigabe.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000152 _____ () C:\Users\Markus ******\Desktop\WD My Cloud-Dashboard.url
2014-05-16 23:00 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western Digital
2014-05-16 22:59 - 2014-05-16 23:00 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup (1).exe
2014-05-16 22:58 - 2014-05-16 22:59 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup.exe
2014-05-15 23:58 - 2014-05-15 23:58 - 09518328 _____ () C:\Users\Markus ******\Downloads\avira_secure_backup_int.exe
2014-05-15 00:25 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 00:25 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 00:25 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 00:25 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 00:25 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 00:25 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 23:58 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 23:58 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 23:58 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 23:58 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 23:58 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 23:58 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 23:58 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 23:58 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 23:58 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 23:58 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 23:58 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 23:58 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 23:58 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 23:58 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 23:58 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 23:58 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 23:58 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-14 07:35 - 2014-05-14 07:35 - 17352880 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-12 23:32 - 2014-05-12 23:32 - 02171144 _____ (IncrediMail ) C:\Users\Markus ******\Downloads\protectioncenter.exe

==================== One Month Modified Files and Folders =======

2014-06-10 08:29 - 2014-06-10 08:28 - 00023207 _____ () C:\Users\Markus ******\Desktop\FRST.txt
2014-06-10 08:29 - 2014-06-09 13:17 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-10 08:29 - 2011-02-11 19:52 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Temp
2014-06-10 08:28 - 2014-06-10 08:28 - 00000000 ____D () C:\FRST
2014-06-10 08:26 - 2014-06-10 08:26 - 02080768 _____ (Farbar) C:\Users\Markus ******\Desktop\FRST64.exe
2014-06-10 08:21 - 2014-06-10 08:21 - 00000490 _____ () C:\Users\Markus ******\Desktop\defogger_disable.log
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus ******\Desktop\Defogger (1).exe
2014-06-10 08:19 - 2014-06-10 08:18 - 00000490 _____ () C:\Users\Markus ******\Downloads\defogger_disable.log
2014-06-10 08:18 - 2014-06-10 08:18 - 00000000 _____ () C:\Users\Markus ******\defogger_reenable
2014-06-10 08:18 - 2011-02-11 19:52 - 00000000 ____D () C:\Users\Markus ******
2014-06-10 08:17 - 2014-06-10 08:17 - 00050477 _____ () C:\Users\Markus ******\Downloads\Defogger.exe
2014-06-10 07:53 - 2009-07-14 06:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-10 07:53 - 2009-07-14 06:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-10 07:49 - 2010-11-17 03:10 - 01941757 _____ () C:\Windows\WindowsUpdate.log
2014-06-10 07:48 - 2014-06-09 09:52 - 00000000 ___RD () C:\Users\Markus ******\Dropbox
2014-06-10 07:48 - 2014-05-28 07:10 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\DropboxMaster
2014-06-10 07:48 - 2014-05-28 07:05 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Dropbox
2014-06-10 07:46 - 2014-05-21 17:55 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-06-10 07:45 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-10 07:44 - 2014-06-09 11:53 - 00000224 _____ () C:\Windows\setupact.log
2014-06-10 07:28 - 2013-04-19 09:35 - 00000000 ____D () C:\Users\Küde\AppData\Local\temp
2014-06-09 22:35 - 2013-12-15 14:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-09 13:17 - 2014-06-09 13:17 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-09 13:16 - 2014-06-09 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (5).exe
2014-06-09 12:05 - 2014-06-09 12:04 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (4).exe
2014-06-09 12:00 - 2014-06-09 12:00 - 00128904 _____ () C:\Users\Markus ******\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00498384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00007236 _____ () C:\Windows\PFRO.log
2014-06-09 11:53 - 2014-06-09 11:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-09 11:48 - 2014-06-09 11:48 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (3).exe
2014-06-09 11:31 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-09 11:31 - 2014-06-09 11:30 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-09 11:18 - 2014-06-09 11:17 - 00000000 ____D () C:\Program Files (x86)\LastPass
2014-06-09 11:18 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:17 - 2014-06-09 11:17 - 00001198 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2011-02-24 01:39 - 00000000 ___RD () C:\Users\Internetdummy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:17 - 2011-02-11 23:58 - 00000000 ___RD () C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:15 - 2014-06-09 11:15 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64 (1).exe
2014-06-09 11:14 - 2014-06-09 08:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-09 10:44 - 2011-03-12 11:11 - 00003696 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-06-09 10:43 - 2014-05-23 09:17 - 00000000 ____D () C:\Users\Markus ******\Desktop\Ferien Portugal
2014-06-09 10:41 - 2014-06-09 10:40 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\PDFCreator
2014-06-09 10:03 - 2014-06-08 13:11 - 00000000 ____D () C:\Users\Markus ******\Desktop\Mueti Teneriffa 2014
2014-06-09 09:52 - 2014-06-09 09:52 - 00001059 _____ () C:\Users\Markus ******\Desktop\Dropbox.lnk
2014-06-09 09:52 - 2014-05-28 07:10 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-09 09:52 - 2014-05-28 07:06 - 00000692 _____ () C:\Windows\wininit.ini
2014-06-09 09:52 - 2011-02-11 20:00 - 00000000 ___RD () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 09:51 - 2014-06-09 09:51 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (2).exe
2014-06-09 09:17 - 2014-06-09 09:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\pdfforge
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Program Files\PDFCreator
2014-06-09 08:49 - 2014-06-09 08:48 - 25055960 _____ (pdfforge ) C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe
2014-06-09 08:47 - 2012-01-16 12:03 - 00000000 ____D () C:\Users\Markus ******\Desktop\Infos Ferien Teneriffa
2014-06-07 09:52 - 2010-11-17 03:50 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-06-07 09:52 - 2010-11-17 03:50 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-06-07 09:52 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-07 07:15 - 2011-03-18 22:39 - 00000000 ____D () C:\ProgramData\Lx_cats
2014-06-05 14:02 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-01 09:40 - 2014-06-01 09:40 - 00000000 ____H () C:\Users\Markus ******\Documents\Default.rdp
2014-05-30 17:42 - 2013-02-18 23:42 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-05-30 12:18 - 2014-01-28 00:53 - 00013954 _____ () C:\Users\Markus ******\Desktop\Telefonliste MA AURORA.xlsx
2014-05-30 08:51 - 2013-09-11 17:53 - 00000000 ____D () C:\Users\Markus ******\Desktop\Unterlagen Liquidation für Mario
2014-05-29 09:13 - 2011-02-11 20:28 - 00000000 ____D () C:\Users\Markus ******\Documents\Kundennummern und Zugangscodes
2014-05-28 07:06 - 2014-05-28 07:06 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (1).exe
2014-05-28 07:05 - 2014-05-28 07:05 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller.exe
2014-05-27 08:42 - 2014-05-27 08:42 - 00000000 ____D () C:\Analytics
2014-05-27 08:41 - 2014-05-27 08:41 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-05-26 09:59 - 2014-05-26 09:58 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64.exe
2014-05-24 00:03 - 2014-05-24 00:03 - 00000731 _____ () C:\Users\Markus ******\Downloads\vcard-MarcelR-Saluz.vcf
2014-05-22 23:16 - 2014-05-22 23:16 - 00000000 ____D () C:\Windows\TEMPDIR
2014-05-22 10:29 - 2014-05-22 10:29 - 00000000 ____D () C:\Users\Küde\AppData\Roaming\com.wd.WDMyCloud
2014-05-20 08:43 - 2014-05-20 08:43 - 00001218 _____ () C:\Users\Markus ******\Desktop\WD Quick View.lnk
2014-05-20 08:41 - 2014-05-20 08:41 - 04398333 _____ () C:\Users\Markus ******\Downloads\WD_Quick_View_Setup_for_Windows.zip
2014-05-20 08:40 - 2014-05-20 08:40 - 00001172 _____ () C:\Users\Markus ******\Desktop\WD SmartWare.lnk
2014-05-20 08:18 - 2014-05-20 08:17 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader (1).zip
2014-05-20 08:08 - 2014-05-20 08:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 08:07 - 2014-05-20 08:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 08:07 - 2014-05-20 08:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 08:07 - 2013-02-18 19:24 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55.exe
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55 (1).exe
2014-05-18 22:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-18 22:28 - 2014-05-18 22:28 - 00013312 ___SH () C:\Users\Markus ******\Downloads\Thumbs.db
2014-05-18 22:21 - 2013-04-17 07:48 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-18 22:17 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western_Digital_Technolog
2014-05-18 22:17 - 2014-05-16 23:00 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western Digital
2014-05-18 22:16 - 2014-05-16 23:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-05-18 22:15 - 2014-05-16 23:05 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-05-18 22:15 - 2014-05-16 23:04 - 00000000 ____D () C:\ProgramData\Western Digital
2014-05-18 22:15 - 2013-03-15 00:20 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-18 22:14 - 2014-05-18 22:14 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader.zip
2014-05-16 23:06 - 2014-05-16 23:05 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\com.wd.WDMyCloud
2014-05-16 23:05 - 2014-05-16 23:05 - 00001157 _____ () C:\Users\Public\Desktop\WD My Cloud.lnk
2014-05-16 23:04 - 2014-05-16 23:04 - 00000204 _____ () C:\Users\Markus ******\Desktop\Lerncenter WD My Cloud.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000156 _____ () C:\Users\Markus ******\Desktop\WD My Cloud – Öffentliche Freigabe.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000152 _____ () C:\Users\Markus ******\Desktop\WD My Cloud-Dashboard.url
2014-05-16 23:00 - 2014-05-16 22:59 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup (1).exe
2014-05-16 22:59 - 2014-05-16 22:58 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup.exe
2014-05-16 08:30 - 2011-02-16 00:39 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-16 00:17 - 2011-02-11 23:39 - 00000000 ___DC () C:\Users\Markus ******\AppData\Local\MigWiz
2014-05-15 23:58 - 2014-05-15 23:58 - 09518328 _____ () C:\Users\Markus ******\Downloads\avira_secure_backup_int.exe
2014-05-15 12:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 11:53 - 2011-02-11 23:58 - 00000000 ___RD () C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 09:05 - 2011-02-11 20:00 - 00000000 ___RD () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 08:59 - 2014-05-07 16:43 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 00:28 - 2011-02-11 22:34 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 00:24 - 2013-08-15 02:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 00:21 - 2011-02-12 11:56 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 08:24 - 2011-03-18 22:11 - 00559534 _____ () C:\ProgramData\lxeescan.log
2014-05-14 07:35 - 2014-05-14 07:35 - 17352880 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-14 07:35 - 2013-12-15 14:04 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 07:35 - 2013-12-15 14:04 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 07:35 - 2013-12-15 14:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-13 08:04 - 2011-02-13 10:45 - 00000000 ____D () C:\Users\Küde\AppData\Local\IM
2014-05-13 08:03 - 2011-02-11 23:59 - 00128904 _____ () C:\Users\Küde\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-13 00:07 - 2014-04-10 23:14 - 00001077 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-05-12 23:59 - 2011-02-11 22:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-12 23:55 - 2010-09-16 02:19 - 00000000 ____D () C:\Windows\ShellNew
2014-05-12 23:33 - 2013-01-28 12:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail
2014-05-12 23:33 - 2011-02-12 12:26 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\IM
2014-05-12 23:32 - 2014-05-12 23:32 - 02171144 _____ (IncrediMail ) C:\Users\Markus ******\Downloads\protectioncenter.exe
2014-05-12 13:04 - 2013-04-30 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-12 13:04 - 2012-12-17 09:11 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-05-12 07:26 - 2014-06-09 13:17 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-09 13:17 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-11 06:43 - 2011-02-11 20:29 - 00000000 ____D () C:\Users\Markus ******\Documents\Vereinsleben

Some content of TEMP:
====================
C:\Users\Internetdummy\AppData\Local\Temp\avgnt.exe
C:\Users\Küde\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe
C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkl7yak.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-09 13:58

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-06-2014
Ran by Markus ******* at 2014-06-10 08:30:15
Running from C:\Users\Markus *******\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

ABBYY Business Card Reader 2.0 (HKLM-x32\...\{BC200000-0001-0000-0000-074957833700}) (Version: 2.0.55 - ABBYY)
ABBYY FineReader 11 (HKLM-x32\...\{F11000FE-0010-0000-0000-074957833700}) (Version: 11.11.194 - ABBYY Production LLC)
ABBYY PDF Transformer+ (HKLM\...\{FA400000-0001-6400-0000-074957833700}) (Version: 4.1.159 - ABBYY Production LLC)
Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.68 - NewTech Infosystems)
Acer Crystal Eye webcam Ver:1.1.192.810 (HKLM-x32\...\{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}) (Version: 1.1.192.810 - Chicony Electronics Co.,Ltd.)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3005 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0423.2010 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated)
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{DD89CE29-BC88-40C6-A845-E2548682C5D6}) (Version: 1.9.17.06019 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.9.17.06019 - Alcor Micro Corp.) Hidden
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros)
ATI Catalyst Install Manager (HKLM\...\{75FDB05A-C1C2-CD17-35CE-3C1A454CC79F}) (Version: 3.0.778.0 - ATI Technologies, Inc.)
Avery Wizard 4.0 (HKLM-x32\...\{F5D84887-8A6F-4993-8560-B3AA44CB620D}) (Version: 4.0.201 - Avery)
Avira (HKLM-x32\...\{70a79d1f-686d-4d5c-962b-07aa1294eae0}) (Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG) Hidden
Avira Internet Security Suite (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Backup Manager Basic (x32 Version: 2.0.0.68 - NewTech Infosystems) Hidden
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 15.0.7.1 - Broadcom Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0825.2205.37769 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help English (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help French (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help German (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
ccc-utility64 (Version: 2010.0825.2205.37769 - ATI) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3814.50 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.3814.50 - CyberLink Corp.) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version:  - Microsoft)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.3 - Dropbox, Inc.)
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version:  - DVD Shrink)
DVDStyler v2.7.2 (HKLM-x32\...\DVDStyler_is1) (Version:  - )
Elevated Installer (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
FileAlyzer 2 (HKLM-x32\...\{29D3773E-54F4-23C2-D523-236A4453B845}_is1) (Version: 2.0.0.10 - Safer Networking Limited)
Free Disc Burner version 3.0.7.1206 (HKLM-x32\...\Free Disc Burner_is1) (Version:  - DVDVideoSoft Ltd.)
Free MP4 Video Converter version 5.0.20.1031 (HKLM-x32\...\Free MP4 Video Converter_is1) (Version: 5.0.20.1031 - DVDVideoSoft Ltd.)
Free Studio version 5.9.0.1212 (HKLM-x32\...\Free Studio_is1) (Version: 5.9.0.1212 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.1.40.1031 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.1.40.1031 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.10.11.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Ltd.)
Garmin Express (HKLM-x32\...\{9471d6bd-67a9-40f6-a420-2ae4f08ef003}) (Version: 2.3.14.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin WebUpdater (HKLM-x32\...\{AE1EC58E-B2AC-4959-A4C2-C38202A25239}) (Version: 2.5.6 - Garmin Ltd or its subsidiaries)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated)
IncrediBackup (x32 Version: 1.0.0.1039 - IncrediMail) Hidden
IncrediMail (x32 Version: 6.3.9.5274 - IncrediMail) Hidden
IncrediMail 2.0 (HKLM-x32\...\IncrediMail) (Version: 6.3.9.5274 - IncrediMail Ltd.)
IncrediMail Protection Center (HKLM-x32\...\Protection Center) (Version: 6001076 - IncrediMail Ltd.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1002 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.6 - Intel)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Kochtopf Easy (HKLM-x32\...\{FF8FB99F-1C60-4220-976B-4940D39F7941}) (Version: 14.11.2006 - Carosoft, 8733 Eschenbach)
LastPass (Nur deinstallieren) (HKLM-x32\...\LastPass) (Version:  - LastPass)
Lexmark  (HKLM-x32\...\{D2C5E510-BE6D-42CC-9F61-E4F939078474}) (Version: 1.0.0.0 - )
Lexmark Pro700 Series (HKLM\...\Lexmark Pro700 Series) (Version:  - Lexmark International, Inc.)
Lexmark Tools for Office (HKLM-x32\...\{10812DE7-2E57-4740-B226-6B3BE34AF9D7}) (Version: 1.41.0.0 - )
LibreOffice 4.2.4.2 (HKLM-x32\...\{6B4977CB-5B9F-4B24-8310-3BA527A8AF22}) (Version: 4.2.4.2 - The Document Foundation)
LoiLoScope 2 (HKLM-x32\...\{CAB75FFC-2377-4B95-A8FA-C9234B812A92}_is1) (Version: 2.5.3.2 - LoiLo inc)
LoiLoScope Herunterladen (HKLM-x32\...\{C2A254F4-AC74-482F-8F09-DB2843AC2AAE}_is1) (Version: 2.0 - LoiLo inc)
LUMIX Map Tool (HKLM-x32\...\InstallShield_{7DCF5B1D-79C2-4F24-9746-511436EBC6B4}) (Version: 1.1.0 - Panasonic Corporation)
LUMIX Map Tool (x32 Version: 1.1.0 - Panasonic Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.145.0 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (Version: 2.3.145.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSVC80_x64 (Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86 (x32 Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.9.3 - pdfforge)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - Ihr Firmenname) Hidden
PHOTOfunSTUDIO 9.1 PE (HKLM-x32\...\{C13FE7DE-D34D-48CC-9FA3-8DB9A3621B98}) (Version: 9.01.709 - Panasonic Corporation)
PowerDirector (HKLM-x32\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version:  - )
PowerProducer (HKLM-x32\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version:  - )
Private Tax 2012 2.0 (HKLM-x32\...\6753-7911-9438-6061) (Version: 2.0 - Information Factory AG)
Private Tax 2013 1.4.0 (HKLM-x32\...\0579-4231-5684-8562) (Version: 1.4.0 - Information Factory AG)
Protection Center (x32 Version: 6.0.0.1076 - IncrediMail) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7058 - Realtek Semiconductor Corp.)
Secunia PSI (3.0.0.6005) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.6005 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.6.0 - Synaptics Incorporated)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.296 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4410.1 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.2160.11 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
WavePurity (HKLM-x32\...\WavePurity) (Version:  - )
WD My Cloud (HKLM\...\{8F19C800-80A5-4636-B560-39A58112D45B}) (Version: 1.0.4.37 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{9A265E7E-5602-44DB-8B4D-A25C58D02489}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{0CADB637-714E-4F47-83C7-F11FEFC930D6}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM-x32\...\{9af08980-8d36-4304-a8d0-53dc0c7d93a5}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WebCam (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.54.007 - Sonix)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3004 - Acer Incorporated)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows-Treiberpaket - ATI Technologies Inc. (amdkmdap) Display  (06/13/2011 8.840.7.4000) (HKLM\...\1DE0DA68FB9DE6759FF33A74F6DF5523389FA513) (Version: 06/13/2011 8.840.7.4000 - ATI Technologies Inc.)
Windows-Treiberpaket - Broadcom (k57nd60a) Net  (10/15/2012 15.6.0.2) (HKLM\...\04AD368CB9CF50B30DB1552B0C6653E2EFFC7966) (Version: 10/15/2012 15.6.0.2 - Broadcom)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\03558EE026C7D1019B4A138DD4B58B8AE39211C4) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\BF1AD0105EBDCA6E730BE93DE583343339830A7A) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\CAC45647A959F237CE25C052FDB9A4A914C34830) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel USB  (07/25/2013 9.1.9.1005) (HKLM\...\A86AAC18EC59E9369A037083AC25A97B89713EC8) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Realtek Semiconductor Corp. HD Audio Driver (10/07/2013 6.0.1.7058) (HKLM\...\DE7597D60A9A5CE6DE9AAA75BF05E6A6722AE298) (Version: 10/07/2013 6.0.1.7058 - Realtek Semiconductor Corp.)
WOT für Internet Explorer (HKLM\...\{DCAEC601-735C-41AE-B84F-D792F09FB7D1}) (Version: 12.8.2.0 - WOT Services Oy)

==================== Restore Points  =========================

25-05-2014 11:31:03 Geplanter Prüfpunkt
01-06-2014 16:01:36 Geplanter Prüfpunkt
09-06-2014 08:59:30 Removed Bonjour
09-06-2014 09:00:25 Removed Bonjour-Druckdienste

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-04-15 00:25 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {07FE6F92-D444-42C0-889F-68C95941C05F} - System32\Tasks\launchspotflux => C:\Program Files (x86)\spotflux\.\spotflux.exe
Task: {0A1F5F73-36C4-4F05-93CB-2712CE5C6598} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: {30652F9D-91E4-4C1F-9F33-BF0A4710BD9F} - System32\Tasks\{206A70D1-01F2-4196-9221-000636522535} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {3F021A4B-D233-483E-BB52-D8F629426F17} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-09-04] (Microsoft)
Task: {3F541924-9B98-4CA8-B2D7-C486F018B83B} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {67F5CC37-E497-4647-9CF9-5E76CE6AEF97} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
Task: {6C7F0A50-412C-4B03-951E-ABBE5DC6F204} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {74674AC7-0F42-4191-B092-B0E4D39D9280} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {7F55709A-034E-4914-A27F-40CE690C591B} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3706524009-4250397638-3171320869-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {81D7756B-58DC-4B7F-9103-984D1AA7B320} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {850AFB24-18F3-45DD-A2EA-AE87484F849E} - System32\Tasks\FGRun => C:\Users\Markus
Task: {9637B875-BEC4-452E-B587-5F3D14DE8820} - System32\Tasks\Google Updater and Installer => C:\Users\Markus *******\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {983283BC-F494-4178-91F4-39E933087691} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3706524009-4250397638-3171320869-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {9C5F10B0-804B-4A4D-8857-64BD5409C01E} - System32\Tasks\Western Digital\SmartWare\____Volume_edd7a140_f1e6_11df_b892_806e6f6e6963__dropbox_c0de6ce1_5657_41e8_800c_858feb0a3768_dropbox_ => C:\Program Files (x86)\Western Digital\WD SmartWare\BackupTask.exe [2014-05-09] (Western Digital Technologies, Inc.)
Task: {9E0E5119-43FD-407D-BD05-1A59E915EEE6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: {A73C02F3-4334-41C1-8E95-D72E83DBC766} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {AC3F5984-5C73-4BDC-8EF7-075138133231} - System32\Tasks\{4E9B0226-A400-466C-A753-64E3F9F604E9} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {B82F9D1F-6BC9-435E-A1C8-41AEF458729A} - System32\Tasks\{969DD5E3-8FD4-4B20-BE2B-29A1165A141E} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {C76FB41A-69E8-4107-9CAC-83450B2DD022} - System32\Tasks\{E75F870D-0780-4A2A-AFDC-53CAC00B717E} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {CF84C6B6-AC15-463F-95C4-D94C94325191} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {EC68C63E-3DC5-4E8E-899B-4BC13A49C2F2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {F48A4817-33A4-4EE2-BC73-662FE8B7F715} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {FCF6100D-2F42-4507-9A1B-22DA1193953D} - System32\Tasks\{E2596B35-B99D-40DF-80DD-684E1D3224FA} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {FEBC2A27-5244-4EFC-84A4-C4F933910FBA} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2014-04-15] (TuneUp Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-03-18 22:10 - 2009-11-04 14:18 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxeedrpp.dll
2014-04-15 15:59 - 2014-04-15 15:59 - 00675640 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2010-11-17 03:18 - 2010-11-17 03:18 - 00206208 _____ () C:\Windows\PLFSetI.exe
2013-12-16 08:12 - 2010-01-13 11:55 - 00030080 _____ () C:\Windows\snuvcdsm.exe
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus *******\Desktop\Defogger (1).exe
2010-06-29 00:20 - 2010-06-29 00:20 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-06-29 00:12 - 2010-06-29 00:12 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00138320 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-06-07 07:08 - 2014-05-05 10:37 - 00049744 _____ () C:\Users\Markus *******\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-06-10 07:47 - 2014-06-10 07:47 - 00043008 _____ () C:\Users\Markus *******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkl7yak.dll
2014-05-28 07:10 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Markus *******\AppData\Roaming\Dropbox\bin\libcef.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
2014-06-09 13:17 - 2014-05-12 07:24 - 01181496 _____ () C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\mbam-killer.exe

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:288D55E3

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/10/2014 08:29:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xfb8
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/10/2014 08:18:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xc30
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/10/2014 08:09:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1590
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/10/2014 08:02:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xad4
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/10/2014 08:00:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x94c
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/10/2014 07:47:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LManager.exe, Version: 4.0.14.854, Zeitstempel: 0x4c611672
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xe70
Startzeit der fehlerhaften Anwendung: 0xLManager.exe0
Pfad der fehlerhaften Anwendung: LManager.exe1
Pfad des fehlerhaften Moduls: LManager.exe2
Berichtskennung: LManager.exe3

Error: (06/10/2014 07:15:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LManager.exe, Version: 4.0.14.854, Zeitstempel: 0x4c611672
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xc3c
Startzeit der fehlerhaften Anwendung: 0xLManager.exe0
Pfad der fehlerhaften Anwendung: LManager.exe1
Pfad des fehlerhaften Moduls: LManager.exe2
Berichtskennung: LManager.exe3

Error: (06/09/2014 10:44:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xae0
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/09/2014 10:36:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x234
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/09/2014 10:36:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1768
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3


System errors:
=============
Error: (06/10/2014 08:29:43 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/10/2014 08:29:43 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/10/2014 08:28:37 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/10/2014 08:28:38 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/10/2014 08:22:47 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/10/2014 08:22:48 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/10/2014 08:21:49 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/10/2014 08:21:50 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/10/2014 08:15:52 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/10/2014 08:15:52 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422


Microsoft Office Sessions:
=========================
Error: (06/10/2014 08:29:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdfb801cf8475460b22bfC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll84511957-f068-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 08:18:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdc3001cf8473dc0c9525C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll1affe547-f067-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 08:09:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd159001cf8472950a13deC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dlld3330c29-f065-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 08:02:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdad401cf847199d3c236C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dlld8d40ad8-f064-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 08:00:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd94c01cf84714c419901C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll8a223c9d-f064-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 07:47:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: LManager.exe4.0.14.8544c611672unknown0.0.0.000000000c000000500000000e7001cf846f5e6f05e7C:\Program Files (x86)\Launch Manager\LManager.exeunknowna6123aaf-f062-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 07:15:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: LManager.exe4.0.14.8544c611672unknown0.0.0.000000000c000000500000000c3c01cf846ad38eefb7C:\Program Files (x86)\Launch Manager\LManager.exeunknown31df1598-f05e-11e3-9684-206a8a1c06e5

Error: (06/09/2014 10:44:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdae001cf84239294ecb0C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dlld18c56d6-f016-11e3-b003-206a8a1c06e5

Error: (06/09/2014 10:36:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd23401cf84228cd80902C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dllcaa385c6-f015-11e3-b003-206a8a1c06e5

Error: (06/09/2014 10:36:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd176801cf842287a30665C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dllc682a2c8-f015-11e3-b003-206a8a1c06e5


CodeIntegrity Errors:
===================================
  Date: 2014-02-08 08:25:44.964
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 08:25:44.792
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 01:40:37.359
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 01:40:37.094
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:58:46.384
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:58:46.212
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:49:05.878
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:49:05.628
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:19:16.318
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:19:16.147
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 54%
Total physical RAM: 3956.43 MB
Available physical RAM: 1797.52 MB
Total Pagefile: 7911.05 MB
Available Pagefile: 5210.78 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:685.35 GB) (Free:430.76 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: EDA0EDA0)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=685 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-06-10 08:48:30
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD75 rev.01.0 698.64GB
Running: Gmer-19357.exe; Driver: C:\Users\MARKUS~1\AppData\Local\Temp\afkyypog.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                                                                                                               fffff800031ef000 45 bytes [00, 00, 00, 00, 00, 00, 00, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575                                                                                                                                                               fffff800031ef02f 16 bytes [00, 00, 00, 00, 00, 00, 00, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe[2472] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                    0000000075e61465 2 bytes [E6, 75]
.text     C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe[2472] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                   0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
.text     C:\Program Files (x86)\Secunia\PSI\PSIA.exe[2532] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                        0000000075e61465 2 bytes [E6, 75]
.text     C:\Program Files (x86)\Secunia\PSI\PSIA.exe[2532] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                       0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
.text     C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe[2208] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                     0000000075e61465 2 bytes [E6, 75]
.text     C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe[2208] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                    0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\ksuser.dll!KsCreatePin + 35                                                                                                                                                    000000006b6011a8 2 bytes [60, 6B]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\ksuser.dll!KsCreateAllocator + 21                                                                                                                                              000000006b6013a8 2 bytes [60, 6B]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\ksuser.dll!KsCreateClock + 21                                                                                                                                                  000000006b601422 2 bytes [60, 6B]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\ksuser.dll!KsCreateTopologyNode + 19                                                                                                                                           000000006b601498 2 bytes [60, 6B]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 195                                                                                                                                000000006a781b41 2 bytes [78, 6A]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 362                                                                                                                                000000006a781be8 2 bytes [78, 6A]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 418                                                                                                                                000000006a781c20 2 bytes [78, 6A]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 596                                                                                                                                000000006a781cd2 2 bytes [78, 6A]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 628                                                                                                                                000000006a781cf2 2 bytes [78, 6A]
.text     C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe[3936] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69                                                                                                         0000000075e61465 2 bytes [E6, 75]
.text     C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe[3936] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155                                                                                                        0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
.text     C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[4564] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                    0000000075e61465 2 bytes [E6, 75]
.text     C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[4564] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                   0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
.text     C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe[4584] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 69                                                                                                    0000000075e61465 2 bytes [E6, 75]
.text     C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe[4584] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 155                                                                                                   0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
---- Processes - GMER 2.1 ----

Library   C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe [4584](2014-05-28 05:10:30)                                          0000000004030000
Library   c:\users\markus~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkl7yak.dll (*** suspicious ***) @ C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe [4584](2014-06-10 05:47:46)  0000000003eb0000
Library   C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe [4584](2014-05-28 05:10:30)                                                000000005e0b0000
Library   C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe [4584] (ICU Data DLL/The ICU Project)(2014-05-28 05:10:30)                  000000005ca60000

---- EOF - GMER 2.1 ----