Hallo zusammen,

ich bräuchte dringend Hilfe. An unserem Familien-PC habe ich heute eine E-Mail von einem Rechtsanwalt mit vermeintlicher Rechnung im Anhang bekommen.
Habe dann, auf der GMX-Seite, vor lauter Panik die angehängte ZIP-Datei geöffnet. Es ist nichts passiert, worauf ich sie nochmal geöffnet habe und wieder nichts passiert ist.

Nun habe ich durch die Internetrecherche erfahren, dass ich mir da vielleicht einen Trojaner oder sonstigen Virus eingefangen habe.

Der Virus-Scan von Antivir hat allerdings keinen Virus sondern nur eine "versteckte Datei" gefunden. Allerdings kann Antivir damit nichts anfangen und gibt mir nur eine Meldung raus, dass sich dort vielleicht ein Virus verstecken könnte.

Wie soll ich nun weiter vorgehen??

Vielen Dank!

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hier die beiden txt Dateien:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-11-2014
Ran by Gerd_2 (ATTENTION: The logged in user is not administrator) on GERD-PC on 18-11-2014 12:38:01
Running from C:\Users\Gerd_2\Downloads
Loaded Profiles: Gerd & Gerd_2 & Mama & UpdatusUser (Available profiles: Gerd & Gerd_2 & Mama & UpdatusUser)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Hewlett-Packard) D:\Programme\Standart\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Hewlett-Packard Co.) D:\Programme\Standart\Digital Imaging\bin\hpqtra08.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard Co.) D:\Programme\Standart\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) D:\Programme\Standart\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) D:\Programme\Standart\Digital Imaging\bin\hpqgpc01.exe
(Mozilla Corporation) C:\Eigene Programme\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HP Software Update] => D:\Programme\Standart\HP\HP Software Update\HPWuSchd2.exe [54576 2009-11-18] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Eigene Programme\AdobeReader\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [CheckPoint Cleanup] => C:\Users\Gerd\AppData\Local\Temp\cpes_clean_launcher.exe C:\Users\Gerd\AppData\Local\Temp\cpes_clean.exe <===== ATTENTION
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> D:\Programme\Standart\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Gerd_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Gerd_2\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicyUsers\S-1-5-21-1485032287-1085400728-284724570-1001\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1485032287-1085400728-284724570-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA0A616433473CA01
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> D:\Programme\Standart\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> D:\Programme\Standart\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Gerd_2\AppData\Roaming\Mozilla\Firefox\Profiles\tafm9yaf.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader -> C:\Eigene Programme\AdobeReader\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Ghostery - C:\Users\Gerd_2\AppData\Roaming\Mozilla\Firefox\Profiles\tafm9yaf.default\Extensions\firefox@ghostery.com.xpi [2014-07-06]
FF Extension: Adblock Plus - C:\Users\Gerd_2\AppData\Roaming\Mozilla\Firefox\Profiles\tafm9yaf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-04-04]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - D:\Programme\Standart\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - D:\Programme\Standart\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-05-13]
FF StartMenuInternet: FIREFOX.EXE - C:\Eigene Programme\Mozilla Firefox\firefox.exe

Chrome: 
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2014-11-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [995064 2014-11-13] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [67360 2009-12-17] (NOS Microsystems Ltd.)
R3 hpqcxs08; D:\Programme\Standart\Digital Imaging\bin\hpqcxs08.dll [253568 2009-11-18] (Hewlett-Packard Co.)
R2 hpqddsvc; D:\Programme\Standart\Digital Imaging\bin\hpqddsvc.dll [137344 2009-11-18] (Hewlett-Packard Co.)
R2 HPSLPSVC; D:\Programme\Standart\Digital Imaging\bin\HPSLPSVC32.DLL [700032 2010-01-29] (Hewlett-Packard Co.)
R2 lmhosts; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [File not signed]
R2 NlaSvc; C:\Windows\System32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-13] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37384 2014-10-09] (Avira Operations GmbH & Co. KG)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [16768 2011-04-08] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-03-22] () [File not signed]
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-12-13] (Avira GmbH)
U3 a6qzo8yk; C:\Windows\system32\Drivers\a6qzo8yk.sys [0 ] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-18 12:38 - 2014-11-18 12:40 - 00010292 _____ () C:\Users\Gerd_2\Downloads\FRST.txt
2014-11-18 12:37 - 2014-11-18 12:38 - 00000000 ____D () C:\FRST
2014-11-18 12:36 - 2014-11-18 12:36 - 01108992 _____ (Farbar) C:\Users\Gerd_2\Downloads\FRST.exe
2014-11-12 18:52 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 18:52 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 18:52 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 18:51 - 2014-11-05 18:50 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 18:51 - 2014-11-05 18:50 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 18:51 - 2014-11-05 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 18:51 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 18:51 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 18:51 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 18:51 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 18:51 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 18:50 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 18:50 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 18:50 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 18:50 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 18:50 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 09:02 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 09:02 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 09:02 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 09:02 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 09:02 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 09:02 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 09:02 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 09:02 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 09:02 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 09:02 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 09:02 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 09:02 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 09:02 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 09:02 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 09:02 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 09:02 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 09:02 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 09:02 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 09:02 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 09:02 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 09:02 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 09:02 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 09:02 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 09:02 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 09:02 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 09:02 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 09:02 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 09:01 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 09:01 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 09:01 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-18 12:39 - 2009-07-14 05:34 - 00023152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-18 12:39 - 2009-07-14 05:34 - 00023152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-18 11:48 - 2014-01-24 08:37 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-18 10:19 - 2009-11-30 20:33 - 01266282 _____ () C:\Windows\WindowsUpdate.log
2014-11-18 08:36 - 2012-11-18 18:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-18 08:36 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-18 08:36 - 2009-07-14 05:39 - 00152372 _____ () C:\Windows\setupact.log
2014-11-16 17:23 - 2009-11-30 21:09 - 01648036 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-14 13:45 - 2014-08-15 08:07 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-14 13:44 - 2014-08-15 08:08 - 00001099 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-11-14 13:44 - 2013-12-13 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-14 13:44 - 2013-12-13 19:46 - 00000000 ____D () C:\Program Files\Avira
2014-11-14 08:42 - 2013-12-12 08:38 - 00000000 ____D () C:\Windows\rescache
2014-11-13 11:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-13 09:25 - 2009-07-14 05:33 - 00426200 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 09:22 - 2014-05-06 07:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-13 09:22 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-13 08:50 - 2012-11-12 17:07 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-13 08:32 - 2009-12-03 16:34 - 00113840 _____ () C:\Users\Gerd_2\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-12 18:56 - 2013-08-14 08:21 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 18:49 - 2009-12-01 20:18 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 18:35 - 2009-11-30 21:20 - 00000000 ____D () C:\Eigene Programme
2014-11-12 08:49 - 2012-07-09 04:30 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-12 08:49 - 2012-07-09 04:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-04 14:30 - 2009-11-30 21:20 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Some content of TEMP:
====================
C:\Users\Gerd_2\AppData\Local\Temp\AskSLib.dll
C:\Users\Gerd_2\AppData\Local\Temp\avgnt.exe
C:\Users\Gerd_2\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyiu12q.dll
C:\Users\Gerd_2\AppData\Local\Temp\DSP.dll
C:\Users\Gerd_2\AppData\Local\Temp\FileSystemView.dll
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate01.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate02.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate03.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate04.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate05.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate06.exe
C:\Users\Gerd_2\AppData\Local\Temp\FP_PL_PFS_INSTALLER-1.exe
C:\Users\Gerd_2\AppData\Local\Temp\FP_PL_PFS_INSTALLER-2.exe
C:\Users\Gerd_2\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe
C:\Users\Gerd_2\AppData\Local\Temp\jre-1.6.0_20-windows-i586-iftw.exe_90744722.exe
C:\Users\Gerd_2\AppData\Local\Temp\jre-6u20-windows-i586-jinstall_uac.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

--- --- ---


Addition:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-11-2014
Ran by Gerd_2 at 2014-11-18 12:41:40
Running from C:\Users\Gerd_2\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 6.1.2 - Hewlett-Packard) Hidden
ACDSee Pro 3 (HKLM\...\{1B280FAF-AE10-4E31-A41A-DB3917D651DC}) (Version: 3.0.386 - ACD Systems International Inc.)
Adobe Download Manager (HKLM\...\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}) (Version: 1.6.2.60 - NOS Microsystems Ltd.)
Adobe Flash Player 10 ActiveX (HKLM\...\{922E8525-AC7E-4294-ACAA-43712D4423C0}) (Version: 10.0.22.87 - Adobe Systems, Inc.)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Reader 9.5.4 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A95000000001}) (Version: 9.5.4 - Adobe Systems Incorporated)
Avira (HKLM\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
B209a-m (Version: 140.0.690.000 - Hewlett-Packard) Hidden
BufferChm (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Destinations (Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Die 15 beliebtesten Kartenspiele (HKLM\...\Die 15 beliebtesten Kartenspiele_is1) (Version:  - madcat Software GmbH)
Dropbox (HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
Free Audio CD Burner version 1.4 (HKLM\...\Free Audio CD Burner_is1) (Version:  - DVDVideoSoft Limited.)
Free YouTube to MP3 Converter version 3.8 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Limited.)
GPBaseService2 (Version: 140.0.211.000 - Hewlett-Packard) Hidden
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart Plus B209a-m All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{B2DAB009-8236-48A0-AD7F-E940F5AB1578}) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM\...\{74DC0593-6BC6-4001-AD5F-D810AFB68D86}) (Version: 5.002.002.002 - Hewlett-Packard)
HPPhotoGadget (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java(TM) 6 Update 33 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216032FF}) (Version: 6.0.330 - Oracle)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.1 (x86 de) (HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Firefox 4.0 (x86 de) (HKLM\...\Mozilla Firefox 4.0 (x86 de)) (Version: 4.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network (Version: 140.0.215.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Treiber 306.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 306.97 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA Grafiktreiber 306.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 306.97 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
PS_AIO_06_B209a-m_SW_Min (Version: 140.0.690.000 - Hewlett-Packard) Hidden
QuickTransfer (Version: 140.0.98.000 - Hewlett-Packard) Hidden
Scan (Version: 140.0.80.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SmartWebPrinting (Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Status (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Toolbox (Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
WebReg (Version: 140.0.212.017 - Hewlett-Packard) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)


(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?

==================== Loaded Modules (whitelisted) =============

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-11-12 08:54 - 2014-11-12 08:54 - 03649648 _____ () C:\Eigene Programme\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:C31F31E6

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Gerd^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.1.lnk => C:\Windows\pss\OpenOffice.org 3.1.lnk.Startup
MSCONFIG\startupreg: ICQ => "D:\Programme\Standart\ICQ7.0\ICQ.exe" silent loginmode=4

========================= Accounts: ==========================

Administrator (S-1-5-21-1485032287-1085400728-284724570-500 - Administrator - Disabled)
Gast (S-1-5-21-1485032287-1085400728-284724570-501 - Limited - Disabled)
Gerd (S-1-5-21-1485032287-1085400728-284724570-1000 - Administrator - Enabled) => C:\Users\Gerd
Gerd_2 (S-1-5-21-1485032287-1085400728-284724570-1001 - Limited - Enabled) => C:\Users\Gerd_2
Mama (S-1-5-21-1485032287-1085400728-284724570-1002 - Limited - Enabled) => C:\Users\Mama
UpdatusUser (S-1-5-21-1485032287-1085400728-284724570-1003 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============

Name: Photosmart Plus B209a-m
Description: Photosmart Plus B209a-m
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Plus B209a-m
Description: Photosmart Plus B209a-m
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Coprozessor
Description: Coprozessor
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/08/2014 03:45:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Name des fehlerhaften Moduls: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000795b
ID des fehlerhaften Prozesses: 0xe70
Startzeit der fehlerhaften Anwendung: 0xipmGui.exe0
Pfad der fehlerhaften Anwendung: ipmGui.exe1
Pfad des fehlerhaften Moduls: ipmGui.exe2
Berichtskennung: ipmGui.exe3

Error: (07/15/2014 05:04:57 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm EXCEL.EXE, Version 14.0.7128.5000 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 5c8

Startzeit: 01cf9fe13a16e270

Endzeit: 32

Anwendungspfad: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Berichts-ID: 269f9651-0bd5-11e4-84ac-db774bd44cac

Error: (05/04/2014 06:19:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 28.0.0.5186, Zeitstempel: 0x53240e37
Name des fehlerhaften Moduls: xul.dll, Version: 28.0.0.5186, Zeitstempel: 0x53240e04
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00184729
ID des fehlerhaften Prozesses: 0xe98
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (03/14/2014 08:35:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 27.0.1.5156, Zeitstempel: 0x52fc0faa
Name des fehlerhaften Moduls: xul.dll, Version: 27.0.1.5156, Zeitstempel: 0x52fc0f79
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001560c7
ID des fehlerhaften Prozesses: 0xd1c
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (03/03/2014 00:42:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 27.0.1.5156, Zeitstempel: 0x52fc0faa
Name des fehlerhaften Moduls: xul.dll, Version: 27.0.1.5156, Zeitstempel: 0x52fc0f79
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001560c7
ID des fehlerhaften Prozesses: 0xc04
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (02/18/2014 05:27:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 27.0.1.5156, Zeitstempel: 0x52fc0faa
Name des fehlerhaften Moduls: xul.dll, Version: 27.0.1.5156, Zeitstempel: 0x52fc0f79
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001560c7
ID des fehlerhaften Prozesses: 0x440
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (12/28/2013 04:33:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 26.0.0.5087, Zeitstempel: 0x52a0d273
Name des fehlerhaften Moduls: xul.dll, Version: 26.0.0.5087, Zeitstempel: 0x52a0d20a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0014e1a8
ID des fehlerhaften Prozesses: 0x74c
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (12/16/2013 03:46:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ACDSeePro3.exe, Version: 3.0.386.0, Zeitstempel: 0x4b0f2c14
Name des fehlerhaften Moduls: ACDSeePro3.exe, Version: 3.0.386.0, Zeitstempel: 0x4b0f2c14
Ausnahmecode: 0xc0000409
Fehleroffset: 0x00d93827
ID des fehlerhaften Prozesses: 0xaa4
Startzeit der fehlerhaften Anwendung: 0xACDSeePro3.exe0
Pfad der fehlerhaften Anwendung: ACDSeePro3.exe1
Pfad des fehlerhaften Moduls: ACDSeePro3.exe2
Berichtskennung: ACDSeePro3.exe3

Error: (12/10/2013 00:07:12 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 25.0.1.5064, Zeitstempel: 0x5282f204
Name des fehlerhaften Moduls: xul.dll, Version: 25.0.1.5064, Zeitstempel: 0x5282f10e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00118f87
ID des fehlerhaften Prozesses: 0x684
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (11/23/2013 03:11:14 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {896598b4-afb9-4b1b-af87-7dc00e6dbb80}


System errors:
=============
Error: (11/14/2014 08:40:22 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (11/13/2014 08:53:02 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800f0902 fehlgeschlagen: Sicherheitsupdate für Microsoft .NET Framework 3.5.1 unter Windows 7 SP1 x86 (KB2978120)

Error: (11/13/2014 08:32:36 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (11/08/2014 01:31:13 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (11/07/2014 00:26:12 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (10/24/2014 04:11:26 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (10/22/2014 02:45:01 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (10/19/2014 10:10:36 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Zeitgeber" wurde mit folgendem Fehler beendet: 
%%1115

Error: (10/18/2014 08:06:30 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (10/17/2014 04:09:10 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070420


Microsoft Office Sessions:
=========================
Error: (10/08/2014 03:45:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ipmGui.exe14.0.6.52253bec647ipmGui.exe14.0.6.52253bec647c00000050000795be7001cfe2f5b6e0c350C:\program files\avira\antivir desktop\ipmGui.exeC:\program files\avira\antivir desktop\ipmGui.exeb9c0a980-4ef9-11e4-a4c9-002268650eed

Error: (07/15/2014 05:04:57 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: EXCEL.EXE14.0.7128.50005c801cf9fe13a16e27032C:\Program Files\Microsoft Office\Office14\EXCEL.EXE269f9651-0bd5-11e4-84ac-db774bd44cac

Error: (05/04/2014 06:19:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: firefox.exe28.0.0.518653240e37xul.dll28.0.0.518653240e04c000000500184729e9801cf67b53db77340C:\Eigene Programme\Mozilla Firefox\firefox.exeC:\Eigene Programme\Mozilla Firefox\xul.dll38e242c0-d3b0-11e3-a184-ccb3b4aaa5a4

Error: (03/14/2014 08:35:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: firefox.exe27.0.1.515652fc0faaxul.dll27.0.1.515652fc0f79c0000005001560c7d1c01cf3f54efc9faa0C:\Eigene Programme\Mozilla Firefox\firefox.exeC:\Eigene Programme\Mozilla Firefox\xul.dll3d459ca0-ab4b-11e3-8621-bfdc4eedf4b0

Error: (03/03/2014 00:42:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: firefox.exe27.0.1.515652fc0faaxul.dll27.0.1.515652fc0f79c0000005001560c7c0401cf36cbcfbd7a20C:\Eigene Programme\Mozilla Firefox\firefox.exeC:\Eigene Programme\Mozilla Firefox\xul.dllef110db0-a2c8-11e3-a523-e3d348589fa4

Error: (02/18/2014 05:27:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: firefox.exe27.0.1.515652fc0faaxul.dll27.0.1.515652fc0f79c0000005001560c744001cf2cc6310c2cf0C:\Eigene Programme\Mozilla Firefox\firefox.exeC:\Eigene Programme\Mozilla Firefox\xul.dll90524000-98b9-11e3-bf3e-90be5faa37a9

Error: (12/28/2013 04:33:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: firefox.exe26.0.0.508752a0d273xul.dll26.0.0.508752a0d20ac00000050014e1a874c01cf03d9e8b81b40C:\Eigene Programme\Mozilla Firefox\firefox.exeC:\Eigene Programme\Mozilla Firefox\xul.dll70d427a0-6fd5-11e3-8144-8e000de998ab

Error: (12/16/2013 03:46:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ACDSeePro3.exe3.0.386.04b0f2c14ACDSeePro3.exe3.0.386.04b0f2c14c000040900d93827aa401cefa6b0d1f68d0D:\Programme\Standart\ACDSee\ACDSee Pro\3.0\ACDSeePro3.exeD:\Programme\Standart\ACDSee\ACDSee Pro\3.0\ACDSeePro3.exed22ee8b0-6660-11e3-bd3c-e618aa1086b4

Error: (12/10/2013 00:07:12 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: firefox.exe25.0.1.50645282f204xul.dll25.0.1.50645282f10ec000000500118f8768401cef52416f70bc0C:\Eigene Programme\Mozilla Firefox\firefox.exeC:\Eigene Programme\Mozilla Firefox\xul.dlla256f450-6126-11e3-b30f-bec93dd8dda9

Error: (11/23/2013 03:11:14 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {896598b4-afb9-4b1b-af87-7dc00e6dbb80}


==================== Memory info =========================== 

Processor: Intel(R) Atom(TM) CPU 230 @ 1.60GHz
Percentage of memory in use: 45%
Total physical RAM: 3071.18 MB
Available physical RAM: 1680.39 MB
Total Pagefile: 6140.64 MB
Available Pagefile: 4423.55 MB
Total Virtual: 2047.88 MB
Available Virtual: 1901.5 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:53.74 GB) (Free:14.72 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:80.65 GB) (Free:58.54 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================
         

Unsere Tools brauchen immer Adminrechte.

Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

schon mal vielen Dank im Voraus.

Laut dem Tool von Kaspersky wurden keine Threats gefunden.
Hier der Report dazu:

11:43:52.0458 0x176c  TDSS rootkit removing tool 3.0.0.41 Oct 28 2014 17:58:34
11:44:15.0038 0x176c  ============================================================
11:44:15.0038 0x176c  Current date / time: 2014/11/19 11:44:15.0038
11:44:15.0038 0x176c  SystemInfo:
11:44:15.0038 0x176c  
11:44:15.0038 0x176c  OS Version: 6.1.7601 ServicePack: 1.0
11:44:15.0038 0x176c  Product type: Workstation
11:44:15.0038 0x176c  ComputerName: GERD-PC
11:44:15.0038 0x176c  UserName: Gerd
11:44:15.0038 0x176c  Windows directory: C:\Windows
11:44:15.0038 0x176c  System windows directory: C:\Windows
11:44:15.0038 0x176c  Processor architecture: Intel x86
11:44:15.0038 0x176c  Number of processors: 2
11:44:15.0038 0x176c  Page size: 0x1000
11:44:15.0038 0x176c  Boot type: Normal boot
11:44:15.0038 0x176c  ============================================================
11:44:22.0916 0x176c  KLMD registered as C:\Windows\system32\drivers\25599586.sys
11:44:24.0040 0x176c  System UUID: {F49D43C5-B64E-C9B4-EF5C-88227D3FA16E}
11:44:26.0707 0x176c  Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 ( 149.05 Gb ), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
11:44:26.0785 0x176c  ============================================================
11:44:26.0785 0x176c  \Device\Harddisk0\DR0:
11:44:26.0816 0x176c  MBR partitions:
11:44:26.0816 0x176c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1D4F800, BlocksNum 0x6B7A800
11:44:26.0816 0x176c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x88CA000, BlocksNum 0xA14F000
11:44:26.0816 0x176c  ============================================================
11:44:27.0082 0x176c  C: <-> \Device\Harddisk0\DR0\Partition1
11:44:27.0238 0x176c  D: <-> \Device\Harddisk0\DR0\Partition2
11:44:27.0238 0x176c  ============================================================
11:44:27.0238 0x176c  Initialize success
11:44:27.0238 0x176c  ============================================================
11:45:29.0653 0x1238  ============================================================
11:45:29.0653 0x1238  Scan started
11:45:29.0653 0x1238  Mode: Manual; SigCheck; TDLFS; 
11:45:29.0653 0x1238  ============================================================
11:45:29.0653 0x1238  KSN ping started
11:45:32.0352 0x1238  KSN ping finished: true
11:45:52.0180 0x1238  ================ Scan system memory ========================
11:45:52.0180 0x1238  System memory - ok
11:45:52.0180 0x1238  ================ Scan services =============================
11:45:54.0098 0x1238  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
11:45:54.0691 0x1238  1394ohci - ok
11:45:55.0034 0x1238  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\Windows\system32\drivers\ACPI.sys
11:45:55.0331 0x1238  ACPI - ok
11:45:55.0378 0x1238  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
11:45:55.0877 0x1238  AcpiPmi - ok
11:45:56.0298 0x1238  [ D51145F6B0CE987850F13A61DAD5E531, 67CB6AB8C42781FA717CBEF81F3C658747E3B7814383056A56EDA99583FDBFD5 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
11:45:56.0501 0x1238  AdobeFlashPlayerUpdateSvc - ok
11:45:56.0906 0x1238  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
11:45:57.0234 0x1238  adp94xx - ok
11:45:57.0359 0x1238  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
11:45:57.0499 0x1238  adpahci - ok
11:45:57.0640 0x1238  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
11:45:57.0749 0x1238  adpu320 - ok
11:45:57.0842 0x1238  [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
11:45:58.0622 0x1238  AeLookupSvc - ok
11:45:59.0200 0x1238  [ D0B388DA1D111A34366E04EB4A5DD156, 60D226F027F4025CC032CAFF73A80FAFB5FA75445654FDCF80CA8C0419C6E938 ] AFD             C:\Windows\system32\drivers\afd.sys
11:45:59.0855 0x1238  AFD - ok
11:45:59.0886 0x1238  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\Windows\system32\drivers\agp440.sys
11:45:59.0980 0x1238  agp440 - ok
11:46:00.0042 0x1238  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\Windows\system32\DRIVERS\djsvs.sys
11:46:00.0136 0x1238  aic78xx - ok
11:46:00.0198 0x1238  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\Windows\System32\alg.exe
11:46:00.0307 0x1238  ALG - ok
11:46:00.0354 0x1238  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\drivers\aliide.sys
11:46:00.0416 0x1238  aliide - ok
11:46:00.0463 0x1238  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys
11:46:00.0775 0x1238  amdagp - ok
11:46:01.0025 0x1238  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\drivers\amdide.sys
11:46:01.0134 0x1238  amdide - ok
11:46:01.0212 0x1238  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
11:46:01.0337 0x1238  AmdK8 - ok
11:46:01.0384 0x1238  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
11:46:01.0508 0x1238  AmdPPM - ok
11:46:01.0571 0x1238  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
11:46:01.0680 0x1238  amdsata - ok
11:46:01.0727 0x1238  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
11:46:01.0852 0x1238  amdsbs - ok
11:46:01.0883 0x1238  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
11:46:02.0351 0x1238  amdxata - ok
11:46:03.0302 0x1238  [ 6F1BBF101B6DC9D34A564C2009D83B63, 1679D48C5A2CE6434E09F1D1330E616F8130C7A0ADF5C14D847CCEABDDA2950E ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
11:46:03.0505 0x1238  AntiVirSchedulerService - ok
11:46:03.0708 0x1238  [ 6F1BBF101B6DC9D34A564C2009D83B63, 1679D48C5A2CE6434E09F1D1330E616F8130C7A0ADF5C14D847CCEABDDA2950E ] AntiVirService  C:\Program Files\Avira\AntiVir Desktop\avguard.exe
11:46:03.0880 0x1238  AntiVirService - ok
11:46:04.0067 0x1238  [ E68A60DEFD150B73F9617A0537239449, 2DC780D677388E03936E9E99070C60A467D32145B3A02344D9F670714D71F5AF ] AntiVirWebService C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
11:46:04.0348 0x1238  AntiVirWebService - ok
11:46:04.0472 0x1238  [ E499E422412EF37576092A52648DB2B4, 95E9C11258CAF37060242BA4E1170CEDECF3376CF0A9A1E61D46706D7C7F36F8 ] AppID           C:\Windows\system32\drivers\appid.sys
11:46:04.0894 0x1238  AppID - ok
11:46:05.0050 0x1238  [ 89B6FA43B68A373B304DFB8F6776B255, 36ABD9AB89CBC7991DE9B04051B26014982953697862BC46EF8AE4ACC2404128 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
11:46:05.0190 0x1238  AppIDSvc - ok
11:46:05.0252 0x1238  [ EACFDF31921F51C097629F1F3C9129B4, 24138755D823E69760579ECBD672421192457CDC9941B2BC499C2D34D83E86C3 ] Appinfo         C:\Windows\System32\appinfo.dll
11:46:05.0471 0x1238  Appinfo - ok
11:46:05.0642 0x1238  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\Windows\system32\DRIVERS\arc.sys
11:46:05.0767 0x1238  arc - ok
11:46:05.0814 0x1238  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
11:46:05.0892 0x1238  arcsas - ok
11:46:06.0032 0x1238  [ 9D768C43FEF254DD50B1DBF8AD5C4C0B, A50854EA5C08605133B8BB4DFDC6090357C5665314AA72E0BFA1E07D4E451F09 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
11:46:06.0142 0x1238  aspnet_state - ok
11:46:06.0188 0x1238  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
11:46:06.0454 0x1238  AsyncMac - ok
11:46:06.0500 0x1238  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\Windows\system32\drivers\atapi.sys
11:46:06.0563 0x1238  atapi - ok
11:46:06.0890 0x1238  [ B01751CC563AECAC09BBE36AAA21FBEF, 453CAED322CC13155D3BD1F5BF9ABC9FA7F74D9C17E712DAEC63E9518F0E9229 ] athr            C:\Windows\system32\DRIVERS\athr.sys
11:46:07.0234 0x1238  athr - ok
11:46:07.0343 0x1238  [ F4157B3CECF19B1C266C83AFF051C97A, 26728B59B6003EB36BC322D189254574E94790CE23637228A669FAD6ED76ECE3 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
11:46:07.0530 0x1238  AudioEndpointBuilder - ok
11:46:07.0592 0x1238  [ F4157B3CECF19B1C266C83AFF051C97A, 26728B59B6003EB36BC322D189254574E94790CE23637228A669FAD6ED76ECE3 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
11:46:07.0717 0x1238  Audiosrv - ok
11:46:07.0811 0x1238  [ F581D2F3E30C1CA7206D660FB7689F98, 53647E017AE58788922F72285DD63E8CD2F9E922B31F7C6711E547BC6B360154 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
11:46:07.0904 0x1238  avgntflt - ok
11:46:07.0998 0x1238  [ A2EE407D6D3757A2FFD5095DD16AE1F2, BBFCC5DC116D6A3AF85591955541528DB0CB1FE81D353F717BE7CAD3F7F446F4 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
11:46:08.0185 0x1238  avipbb - ok
11:46:08.0310 0x1238  [ F21955927D1C99206A8B91DE2CCE85E1, 26A6155CF46123C489CBE19B5B3E3B0D9ED02C9388E57058724B0FFB7D7C08B5 ] Avira.OE.ServiceHost C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
11:46:08.0466 0x1238  Avira.OE.ServiceHost - ok
11:46:08.0716 0x1238  [ D8C712305F73CD34D1B344810E522728, 49A474FF6CA44E8427D7A8290B47395125B0148AF384CF2B3B1FA495A4718CBA ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
11:46:08.0856 0x1238  avkmgr - ok
11:46:08.0918 0x1238  [ 98FA7A438389DE905512774856B82BB8, E8BF7C4CA0F60D0F89CE9A8AD11CE77E8A7193D4D56A82E23D4CC1BE1E6B5A91 ] avnetflt        C:\Windows\system32\DRIVERS\avnetflt.sys
11:46:09.0043 0x1238  avnetflt - ok
11:46:09.0090 0x1238  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\Windows\System32\AxInstSV.dll
11:46:09.0262 0x0ab0  Object required for P2P: [ D51145F6B0CE987850F13A61DAD5E531 ] AdobeFlashPlayerUpdateSvc
11:46:09.0464 0x1238  AxInstSV - ok
11:46:09.0570 0x1238  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbdx.sys
11:46:09.0772 0x1238  b06bdrv - ok
11:46:09.0834 0x1238  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
11:46:09.0959 0x1238  b57nd60x - ok
11:46:10.0037 0x1238  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll
11:46:10.0193 0x1238  BDESVC - ok
11:46:10.0224 0x1238  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys
11:46:10.0380 0x1238  Beep - ok
11:46:10.0490 0x1238  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE             C:\Windows\System32\bfe.dll
11:46:10.0708 0x1238  BFE - ok
11:46:10.0802 0x1238  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\Windows\System32\qmgr.dll
11:46:11.0114 0x1238  BITS - ok
11:46:11.0145 0x1238  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
11:46:11.0301 0x1238  blbdrive - ok
11:46:11.0348 0x1238  [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
11:46:11.0488 0x1238  bowser - ok
11:46:11.0519 0x1238  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
11:46:11.0644 0x1238  BrFiltLo - ok
11:46:11.0691 0x1238  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
11:46:11.0800 0x1238  BrFiltUp - ok
11:46:11.0847 0x1238  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser         C:\Windows\System32\browser.dll
11:46:12.0003 0x1238  Browser - ok
11:46:12.0065 0x1238  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
11:46:12.0237 0x1238  Brserid - ok
11:46:12.0237 0x0ab0  Object send P2P result: true
11:46:12.0284 0x1238  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
11:46:12.0377 0x1238  BrSerWdm - ok
11:46:12.0408 0x1238  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
11:46:12.0502 0x1238  BrUsbMdm - ok
11:46:12.0580 0x1238  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
11:46:12.0720 0x1238  BrUsbSer - ok
11:46:12.0783 0x1238  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
11:46:12.0892 0x1238  BTHMODEM - ok
11:46:12.0954 0x1238  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\Windows\system32\bthserv.dll
11:46:13.0110 0x1238  bthserv - ok
11:46:13.0173 0x1238  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
11:46:13.0329 0x1238  cdfs - ok
11:46:13.0376 0x1238  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom           C:\Windows\system32\drivers\cdrom.sys
11:46:13.0547 0x1238  cdrom - ok
11:46:13.0656 0x1238  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc     C:\Windows\System32\certprop.dll
11:46:13.0828 0x1238  CertPropSvc - ok
11:46:13.0875 0x1238  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
11:46:13.0984 0x1238  circlass - ok
11:46:14.0062 0x1238  [ 635181E0E9BBF16871BF5380D71DB02D, 58D5150C6F3B9F1730FFDF3A8A2ABF5FF207F9785BD66C0C1E03A0F1C223A26A ] CLFS            C:\Windows\system32\CLFS.sys
11:46:14.0187 0x1238  CLFS - ok
11:46:14.0280 0x1238  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:46:14.0390 0x1238  clr_optimization_v2.0.50727_32 - ok
11:46:14.0468 0x1238  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
11:46:14.0748 0x1238  clr_optimization_v4.0.30319_32 - ok
11:46:14.0795 0x1238  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
11:46:14.0889 0x1238  CmBatt - ok
11:46:14.0951 0x1238  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
11:46:15.0014 0x1238  cmdide - ok
11:46:15.0154 0x1238  [ 85449EEBE8F8EBD6481EFBF0F352B4EB, E6FF04970C5A5BFDE7297A86C1C7B9BFE2E0F976A1A1AFB874CEB488DC6151CC ] CNG             C:\Windows\system32\Drivers\cng.sys
11:46:15.0513 0x1238  CNG - ok
11:46:15.0560 0x1238  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
11:46:15.0638 0x1238  Compbatt - ok
11:46:15.0700 0x1238  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
11:46:15.0809 0x1238  CompositeBus - ok
11:46:15.0840 0x1238  COMSysApp - ok
11:46:15.0887 0x1238  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
11:46:15.0950 0x1238  crcdisk - ok
11:46:16.0028 0x1238  [ 623E143F2DF17C0106A9988F5D7DC878, 9DA30262FF22FA9F1DB247CB3B4A2892D79730EF0ECC9589D399D24B4F58E565 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
11:46:16.0168 0x1238  CryptSvc - ok
11:46:16.0262 0x1238  [ 57D1DFC27D7B830461CE1EFDDD8A6668, D57F398B5DF73AA7E6C87C9A5A510FB03044A52A4B10775F292D4B937DC99783 ] dc3d            C:\Windows\system32\DRIVERS\dc3d.sys
11:46:16.0355 0x1238  dc3d - ok
11:46:16.0449 0x1238  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch      C:\Windows\system32\rpcss.dll
11:46:16.0620 0x1238  DcomLaunch - ok
11:46:16.0698 0x1238  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\Windows\System32\defragsvc.dll
11:46:16.0948 0x1238  defragsvc - ok
11:46:17.0057 0x1238  [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
11:46:17.0213 0x1238  DfsC - ok
11:46:17.0416 0x1238  [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
11:46:17.0525 0x1238  DfsC - ok
11:46:17.0681 0x1238  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\Windows\system32\dhcpcore.dll
11:46:17.0822 0x1238  Dhcp - ok
11:46:17.0868 0x1238  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys
11:46:18.0040 0x1238  discache - ok
11:46:18.0102 0x1238  [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
11:46:18.0227 0x1238  Disk - ok
11:46:18.0321 0x1238  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\Windows\System32\dnsrslvr.dll
11:46:18.0430 0x1238  Dnscache - ok
11:46:18.0570 0x1238  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc         C:\Windows\System32\dot3svc.dll
11:46:18.0945 0x1238  dot3svc - ok
11:46:19.0007 0x1238  [ B5E479EB83707DD698F66953E922042C, 82891A4699F180A20EB25A0EC49A7E008B007A374BAA3279483AC1C95D125FE8 ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys
11:46:19.0101 0x1238  Dot4 - ok
11:46:19.0179 0x1238  [ CAEFD09B6A6249C53A67D55A9A9FCABF, A76C951EA8A830E5BA22D8D393A946BBAEEDB76478539F647E58199B383F786B ] Dot4Print       C:\Windows\system32\drivers\Dot4Prt.sys
11:46:19.0272 0x1238  Dot4Print - ok
11:46:19.0304 0x1238  [ CF491FF38D62143203C065260567E2F7, 4315FD8FC88CF627EBE469A2DF0F280B17C95D3004FC7A93D6F8E47F0D91A037 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys
11:46:19.0397 0x1238  dot4usb - ok
11:46:19.0522 0x1238  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS             C:\Windows\system32\dps.dll
11:46:19.0756 0x1238  DPS - ok
11:46:19.0818 0x1238  [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
11:46:19.0896 0x1238  drmkaud - ok
11:46:20.0021 0x1238  [ 3583A5A8CC2E682BFFBD4630D0FEC08B, FD0F184B358FCECAA763444B414074BEF4E871EB7527D88385519FC158435C72 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
11:46:20.0162 0x1238  DXGKrnl - ok
11:46:20.0505 0x1238  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\Windows\System32\eapsvc.dll
11:46:20.0614 0x1238  EapHost - ok
11:46:22.0143 0x1238  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\Windows\system32\DRIVERS\evbdx.sys
11:46:23.0172 0x1238  ebdrv - ok
11:46:23.0266 0x1238  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] EFS             C:\Windows\System32\lsass.exe
11:46:23.0453 0x1238  EFS - ok
11:46:24.0140 0x1238  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
11:46:25.0701 0x1238  ehRecvr - ok
11:46:25.0904 0x1238  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\Windows\ehome\ehsched.exe
11:46:26.0044 0x1238  ehSched - ok
11:46:26.0403 0x1238  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
11:46:26.0590 0x1238  elxstor - ok
11:46:26.0715 0x1238  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
11:46:26.0949 0x1238  ErrDev - ok
11:46:27.0198 0x1238  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\Windows\system32\es.dll
11:46:27.0323 0x1238  EventSystem - ok
11:46:27.0682 0x1238  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat           C:\Windows\system32\drivers\exfat.sys
11:46:28.0041 0x1238  exfat - ok
11:46:28.0337 0x1238  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
11:46:28.0634 0x1238  fastfat - ok
11:46:29.0164 0x1238  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax             C:\Windows\system32\fxssvc.exe
11:46:29.0663 0x1238  Fax - ok
11:46:29.0850 0x1238  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
11:46:29.0928 0x1238  fdc - ok
11:46:30.0100 0x1238  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\Windows\system32\fdPHost.dll
11:46:30.0396 0x1238  fdPHost - ok
11:46:30.0521 0x1238  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll
11:46:30.0786 0x1238  FDResPub - ok
11:46:30.0911 0x1238  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
11:46:30.0974 0x1238  FileInfo - ok
11:46:31.0114 0x1238  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
11:46:31.0442 0x1238  Filetrace - ok
11:46:31.0566 0x1238  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
11:46:31.0660 0x1238  flpydisk - ok
11:46:31.0754 0x1238  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
11:46:32.0019 0x1238  FltMgr - ok
11:46:32.0222 0x1238  [ E12C4928B32ACE04610259647F072635, B71B9C2DF45F33C4DAC88435129B08B0BCDBBE82E8C3AD0A95F00137CC8B619F ] FontCache       C:\Windows\system32\FntCache.dll
11:46:32.0487 0x1238  FontCache - ok
11:46:32.0768 0x1238  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
11:46:32.0877 0x1238  FontCache3.0.0.0 - ok
11:46:32.0924 0x1238  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
11:46:33.0002 0x1238  FsDepends - ok
11:46:33.0048 0x1238  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
11:46:33.0111 0x1238  Fs_Rec - ok
11:46:33.0204 0x1238  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
11:46:33.0314 0x1238  fvevol - ok
11:46:33.0360 0x1238  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
11:46:33.0438 0x1238  gagp30kx - ok
11:46:33.0548 0x1238  [ 9599A713E1776B8F69300FC9008F33C1, 8C1836847319D492EA6DC5DE3D4C57DB580B903F8B2AEFCD13B5E6054CE6B722 ] getPlusHelper   C:\Program Files\NOS\bin\getPlus_Helper.dll
11:46:33.0735 0x1238  getPlusHelper - ok
11:46:33.0844 0x1238  [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc           C:\Windows\System32\gpsvc.dll
11:46:34.0125 0x1238  gpsvc - ok
11:46:34.0172 0x1238  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
11:46:34.0296 0x1238  hcw85cir - ok
11:46:34.0437 0x1238  [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
11:46:34.0593 0x1238  HdAudAddService - ok
11:46:34.0640 0x1238  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
11:46:34.0827 0x1238  HDAudBus - ok
11:46:34.0920 0x1238  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
11:46:35.0030 0x1238  HidBatt - ok
11:46:35.0076 0x1238  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
11:46:35.0170 0x1238  HidBth - ok
11:46:35.0217 0x1238  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
11:46:35.0326 0x1238  HidIr - ok
11:46:35.0373 0x1238  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\Windows\system32\hidserv.dll
11:46:35.0591 0x1238  hidserv - ok
11:46:35.0654 0x1238  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\Windows\system32\drivers\hidusb.sys
11:46:35.0778 0x1238  HidUsb - ok
11:46:35.0825 0x1238  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\Windows\system32\kmsvc.dll
11:46:35.0981 0x1238  hkmsvc - ok
11:46:36.0044 0x1238  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
11:46:36.0200 0x1238  HomeGroupListener - ok
11:46:36.0293 0x1238  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
11:46:36.0418 0x1238  HomeGroupProvider - ok
11:46:36.0574 0x1238  [ 5DA42D24712E00728CEA2342A65009B2, 73EC5250DCFD556525B24B3CA66C64AC7747E77652A2AD6119936A59A9E8562A ] hpqcxs08        D:\Programme\Standart\Digital Imaging\bin\hpqcxs08.dll
11:46:37.0572 0x1238  hpqcxs08 - ok
11:46:37.0713 0x1238  [ D86A39BF100069444D026D22D9A6E555, 7B24D48D5BA67704C88697FADB64364E0E64D26259408E3C219820C5404C5EEC ] hpqddsvc        D:\Programme\Standart\Digital Imaging\bin\hpqddsvc.dll
11:46:37.0791 0x1238  hpqddsvc - ok
11:46:37.0869 0x1238  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
11:46:38.0118 0x1238  HpSAMD - ok
11:46:38.0493 0x1238  [ A04F4AC48895774A2CF9D1C9EAAACEF0, 012F10DE086C3551D75716EF1F6DCC477C8C1E776267D9FC4073BEADAFD37C9C ] HPSLPSVC        D:\Programme\Standart\Digital Imaging\bin\HPSLPSVC32.DLL
11:46:38.0680 0x1238  HPSLPSVC - ok
11:46:38.0789 0x1238  [ 871917B07A141BFF43D76D8844D48106, 30C702008D0EE57D63F74864967DD19A55A268E77E42B5B3CC73037AD51D2987 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
11:46:39.0179 0x1238  HTTP - ok
11:46:39.0242 0x1238  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
11:46:39.0288 0x1238  hwpolicy - ok
11:46:39.0429 0x1238  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
11:46:39.0600 0x1238  i8042prt - ok
11:46:39.0678 0x1238  [ D483687EACE0C065EE772481A96E05F5, A22200E90C78DFE73FE0FBEED5331AB43CD7133651FD125595C4DB604AD71B29 ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
11:46:39.0803 0x1238  iaStor - ok
11:46:39.0959 0x1238  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
11:46:40.0193 0x1238  iaStorV - ok
11:46:40.0365 0x1238  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
11:46:40.0864 0x1238  idsvc - ok
11:46:41.0082 0x1238  IEEtwCollectorService - ok
11:46:41.0207 0x1238  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
11:46:41.0316 0x1238  iirsp - ok
11:46:41.0535 0x1238  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\Windows\System32\ikeext.dll
11:46:41.0878 0x1238  IKEEXT - ok
11:46:41.0940 0x1238  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\drivers\intelide.sys
11:46:42.0003 0x1238  intelide - ok
11:46:42.0050 0x1238  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
11:46:42.0252 0x1238  intelppm - ok
11:46:42.0330 0x1238  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
11:46:42.0518 0x1238  IPBusEnum - ok
11:46:42.0564 0x1238  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:46:42.0861 0x1238  IpFilterDriver - ok
11:46:43.0032 0x1238  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
11:46:43.0266 0x1238  iphlpsvc - ok
11:46:43.0313 0x1238  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
11:46:43.0407 0x1238  IPMIDRV - ok
11:46:43.0532 0x1238  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
11:46:43.0719 0x1238  IPNAT - ok
11:46:43.0797 0x1238  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys
11:46:43.0968 0x1238  IRENUM - ok
11:46:44.0046 0x1238  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
11:46:44.0124 0x1238  isapnp - ok
11:46:44.0312 0x1238  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
11:46:44.0483 0x1238  iScsiPrt - ok
11:46:44.0780 0x1238  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
11:46:45.0138 0x1238  kbdclass - ok
11:46:45.0357 0x1238  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
11:46:45.0669 0x1238  kbdhid - ok
11:46:45.0731 0x1238  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] KeyIso          C:\Windows\system32\lsass.exe
11:46:45.0856 0x1238  KeyIso - ok
11:46:45.0903 0x1238  [ 4120DA10AA42A9996F4575DB9E3E6E6E, 1C6E790772EA327ACB885D731A030408160534997DD56FEE4D6CEE6929873BB8 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
11:46:46.0152 0x1238  KSecDD - ok
11:46:46.0215 0x1238  [ 1E1845606C5A4579F7F3D95796CC1ED1, 26A478A0B5417CBC880A7F2D977AAC5FBF40EC4296426B757D6ACCBBC09486CC ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
11:46:46.0324 0x1238  KSecPkg - ok
11:46:46.0402 0x1238  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\Windows\system32\msdtckrm.dll
11:46:46.0605 0x1238  KtmRm - ok
11:46:46.0667 0x1238  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\Windows\system32\srvsvc.dll
11:46:46.0839 0x1238  LanmanServer - ok
11:46:46.0886 0x1238  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
11:46:47.0042 0x1238  LanmanWorkstation - ok
11:46:47.0120 0x1238  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
11:46:47.0276 0x1238  lltdio - ok
11:46:47.0354 0x1238  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
11:46:47.0510 0x1238  lltdsvc - ok
11:46:47.0541 0x1238  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\Windows\System32\lmhsvc.dll
11:46:47.0681 0x1238  lmhosts - ok
11:46:47.0744 0x1238  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
11:46:47.0822 0x1238  LSI_FC - ok
11:46:47.0868 0x1238  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
11:46:47.0946 0x1238  LSI_SAS - ok
11:46:47.0978 0x1238  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
11:46:48.0056 0x1238  LSI_SAS2 - ok
11:46:48.0087 0x1238  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
11:46:48.0165 0x1238  LSI_SCSI - ok
11:46:48.0196 0x1238  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv           C:\Windows\system32\drivers\luafv.sys
11:46:48.0336 0x1238  luafv - ok
11:46:48.0414 0x1238  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
11:46:48.0524 0x1238  Mcx2Svc - ok
11:46:48.0664 0x1238  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
11:46:48.0742 0x1238  megasas - ok
11:46:48.0789 0x1238  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
11:46:48.0898 0x1238  MegaSR - ok
11:46:49.0070 0x1238  Microsoft SharePoint Workspace Audit Service - ok
11:46:49.0163 0x1238  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\Windows\system32\mmcss.dll
11:46:49.0382 0x1238  MMCSS - ok
11:46:49.0413 0x1238  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\Windows\system32\drivers\modem.sys
11:46:49.0538 0x1238  Modem - ok
11:46:49.0584 0x1238  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
11:46:49.0694 0x1238  monitor - ok
11:46:49.0756 0x1238  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
11:46:49.0818 0x1238  mouclass - ok
11:46:49.0865 0x1238  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
11:46:49.0943 0x1238  mouhid - ok
11:46:50.0006 0x1238  [ FC8771F45ECCCFD89684E38842539B9B, 806DDF2B4830CA866582FE74A521BB7DF26CA0E19013DAF584D3677FB48CC77A ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
11:46:50.0084 0x1238  mountmgr - ok
11:46:50.0115 0x1238  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\Windows\system32\drivers\mpio.sys
11:46:50.0208 0x1238  mpio - ok
11:46:50.0240 0x1238  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
11:46:50.0396 0x1238  mpsdrv - ok
11:46:50.0505 0x1238  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\Windows\system32\mpssvc.dll
11:46:51.0035 0x1238  MpsSvc - ok
11:46:51.0098 0x1238  [ 21F4B24ACFC79A483515BD986DD9043F, 22681907E02E0B723ABE2CEF0602D36C8EF862E7E2B62A9B40A5EF582E58D7BA ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
11:46:51.0207 0x1238  MRxDAV - ok
11:46:51.0300 0x1238  [ 5D16C921E3671636C0EBA3BBAAC5FD25, 5BC107B95CAFC88F51FBB9F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
11:46:51.0441 0x1238  mrxsmb - ok
11:46:51.0488 0x1238  [ 6D17A4791ACA19328C685D256349FEFC, 012AA3D84EEAAF53780D06D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:46:51.0628 0x1238  mrxsmb10 - ok
11:46:51.0722 0x1238  [ B81F204D146000BE76651A50670A5E9E, 78193D0F967BE9829E53F9B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:46:51.0862 0x1238  mrxsmb20 - ok
11:46:51.0940 0x1238  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\Windows\system32\drivers\msahci.sys
11:46:52.0034 0x1238  msahci - ok
11:46:52.0096 0x1238  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
11:46:52.0205 0x1238  msdsm - ok
11:46:52.0268 0x1238  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\Windows\System32\msdtc.exe
11:46:52.0408 0x1238  MSDTC - ok
11:46:52.0486 0x1238  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys
11:46:52.0704 0x1238  Msfs - ok
11:46:52.0782 0x1238  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
11:46:52.0938 0x1238  mshidkmdf - ok
11:46:53.0126 0x1238  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
11:46:53.0204 0x1238  msisadrv - ok
11:46:53.0360 0x1238  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
11:46:53.0609 0x1238  MSiSCSI - ok
11:46:53.0625 0x1238  msiserver - ok
11:46:53.0687 0x1238  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
11:46:53.0890 0x1238  MSKSSRV - ok
11:46:54.0077 0x1238  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
11:46:54.0202 0x1238  MSPCLOCK - ok
11:46:54.0249 0x1238  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
11:46:54.0389 0x1238  MSPQM - ok
11:46:54.0452 0x1238  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
11:46:54.0545 0x1238  MsRPC - ok
11:46:54.0623 0x1238  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
11:46:54.0686 0x1238  mssmbios - ok
11:46:54.0857 0x1238  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
11:46:54.0951 0x1238  MSTEE - ok
11:46:55.0060 0x1238  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
11:46:55.0169 0x1238  MTConfig - ok
11:46:55.0278 0x1238  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup             C:\Windows\system32\Drivers\mup.sys
11:46:55.0341 0x1238  Mup - ok
11:46:55.0559 0x1238  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\Windows\system32\qagentRT.dll
11:46:55.0840 0x1238  napagent - ok
11:46:55.0934 0x1238  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
11:46:56.0090 0x1238  NativeWifiP - ok
11:46:56.0214 0x1238  [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS            C:\Windows\system32\drivers\ndis.sys
11:46:56.0339 0x1238  NDIS - ok
11:46:56.0402 0x1238  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
11:46:56.0558 0x1238  NdisCap - ok
11:46:56.0698 0x1238  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
11:46:56.0807 0x1238  NdisTapi - ok
11:46:56.0901 0x1238  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
11:46:57.0135 0x1238  Ndisuio - ok
11:46:57.0275 0x1238  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
11:46:57.0431 0x1238  NdisWan - ok
11:46:57.0525 0x1238  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
11:46:57.0665 0x1238  NDProxy - ok
11:46:57.0774 0x1238  [ 69C503C004F49AEE8B8E3067CC047BA7, 0E7A2FB0CC7669E6400EDA4D2220BBB1A85CF3D3529739DA5AE2C073FFA08313 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
11:46:57.0806 0x1238  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
11:47:00.0598 0x1238  Detect skipped due to KSN trusted
11:47:00.0598 0x1238  Net Driver HPZ12 - ok
11:47:00.0926 0x1238  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
11:47:01.0206 0x1238  NetBIOS - ok
11:47:01.0487 0x1238  [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
11:47:01.0628 0x1238  NetBT - ok
11:47:01.0690 0x1238  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] Netlogon        C:\Windows\system32\lsass.exe
11:47:01.0752 0x1238  Netlogon - ok
11:47:01.0830 0x1238  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll
11:47:02.0018 0x1238  Netman - ok
11:47:02.0111 0x1238  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
11:47:02.0283 0x1238  NetMsmqActivator - ok
11:47:02.0345 0x1238  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
11:47:02.0408 0x1238  NetPipeActivator - ok
11:47:02.0486 0x1238  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll
11:47:02.0735 0x1238  netprofm - ok
11:47:02.0938 0x1238  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
11:47:02.0985 0x1238  NetTcpActivator - ok
11:47:03.0125 0x1238  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
11:47:03.0188 0x1238  NetTcpPortSharing - ok
11:47:03.0390 0x1238  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
11:47:03.0468 0x1238  nfrd960 - ok
11:47:03.0562 0x1238  [ 374071043F9E4231EE43BE2BB48DD36D, C4FA3FC40CC49DBBB91901D14210A55D3831FAC9F9B3FF45FCA7F5CF242C9E92 ] NlaSvc          C:\Windows\System32\nlasvc.dll
11:47:03.0687 0x1238  NlaSvc - ok
11:47:03.0702 0x1238  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
11:47:03.0858 0x1238  Npfs - ok
11:47:03.0905 0x1238  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi             C:\Windows\system32\nsisvc.dll
11:47:04.0077 0x1238  nsi - ok
11:47:04.0108 0x1238  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
11:47:04.0264 0x1238  nsiproxy - ok
11:47:04.0638 0x1238  [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
11:47:05.0559 0x1238  Ntfs - ok
11:47:05.0637 0x1238  [ 28613C245D9F26190DCEE18430A4EBBE, 2FD93364B6E0673FB39941970A3BD8261CC4414DFAA879900EF980AB7C50CBF5 ] NuidFltr        C:\Windows\system32\DRIVERS\NuidFltr.sys
11:47:05.0746 0x1238  NuidFltr - ok
11:47:05.0777 0x1238  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys
11:47:05.0918 0x1238  Null - ok
11:47:06.0027 0x1238  [ B5E37E31C053BC9950455A257526514B, 16E2880621F3AA12BDADE71CD7682CA79E2A199D3C9E3E5927C49DCEF0F6183B ] NVENETFD        C:\Windows\system32\DRIVERS\nvm62x32.sys
11:47:06.0152 0x1238  NVENETFD - ok
11:47:07.0072 0x1238  [ 0A1B502CBC8230DA74BEFBAADDB58916, 14BDE0A5829D1CC7E93B60676243DD0641D5FA08CE46936450CD3A67F94EA560 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
11:47:08.0476 0x1238  nvlddmkm - ok
11:47:08.0960 0x1238  [ 1DE923088878B495CD4219E47BA34EB8, 68B8FF593E2972DC239BB9A9E2436A513DBDD16FAC071117AFD45285AD004EC1 ] NVNET           C:\Windows\system32\DRIVERS\nvmf6232.sys
11:47:09.0350 0x1238  NVNET - ok
11:47:09.0428 0x1238  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\Windows\system32\drivers\nvraid.sys
11:47:09.0521 0x1238  nvraid - ok
11:47:09.0552 0x1238  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
11:47:09.0646 0x1238  nvstor - ok
11:47:09.0833 0x1238  [ EB5A13F9139F20AD71ADF4BF79C3AA29, D473E03B3B69AC0A35FF1CD8B85C088DCCCBAA5DA52C18737B6AC873EF1F1BC7 ] nvsvc           C:\Windows\system32\nvvsvc.exe
11:47:10.0020 0x1238  nvsvc - ok
11:47:10.0161 0x1238  [ 0629259E3AF6BB0534FCECA208973404, E5DDA62D5D21D5D11A711BBFC5B839B59E336997C0C9A32A0B04AC9FBB6472D4 ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
11:47:10.0410 0x1238  nvUpdatusService - ok
11:47:10.0457 0x1238  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
11:47:10.0551 0x1238  nv_agp - ok
11:47:10.0769 0x1238  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
11:47:10.0956 0x1238  ohci1394 - ok
11:47:11.0409 0x1238  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:47:11.0487 0x1238  ose - ok
11:47:12.0080 0x1238  [ 358A9CCA612C68EB2F07DDAD4CE1D8D7, F342100E2E9001F11FDF93F856B50FA43F9B85D2C6B5706EC0433E77206498DA ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
11:47:12.0797 0x1238  osppsvc - ok
11:47:12.0922 0x1238  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
11:47:13.0047 0x1238  p2pimsvc - ok
11:47:13.0109 0x1238  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\Windows\system32\p2psvc.dll
11:47:13.0250 0x1238  p2psvc - ok
11:47:13.0296 0x1238  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\Windows\system32\DRIVERS\parport.sys
11:47:13.0390 0x1238  Parport - ok
11:47:13.0437 0x1238  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr         C:\Windows\system32\drivers\partmgr.sys
11:47:13.0530 0x1238  partmgr - ok
11:47:13.0577 0x1238  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
11:47:13.0655 0x1238  Parvdm - ok
11:47:13.0733 0x1238  [ 3A55D53687F16D9EF5BF307BBFEFCD9C, F1BB1B43442B151686500768C43A4D20CAA47427E78386953A42DDB42D9DDF0C ] PcaSvc          C:\Windows\System32\pcasvc.dll
11:47:13.0889 0x1238  PcaSvc - ok
11:47:13.0952 0x1238  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci             C:\Windows\system32\drivers\pci.sys
11:47:14.0045 0x1238  pci - ok
11:47:14.0092 0x1238  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\drivers\pciide.sys
11:47:14.0154 0x1238  pciide - ok
11:47:14.0232 0x1238  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
11:47:14.0326 0x1238  pcmcia - ok
11:47:14.0357 0x1238  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\Windows\system32\drivers\pcw.sys
11:47:14.0420 0x1238  pcw - ok
11:47:14.0529 0x1238  [ 344D1FA0438A967F1A2BAA42C86D6E19, E9CB31CBD9075B84BA771CF82A4C3AB5BF57ADEA3E76ABE8FE36FEACFD681D89 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
11:47:14.0685 0x1238  PEAUTH - ok
11:47:14.0934 0x1238  [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla             C:\Windows\system32\pla.dll
11:47:15.0278 0x1238  pla - ok
11:47:15.0356 0x1238  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
11:47:15.0496 0x1238  PlugPlay - ok
11:47:15.0590 0x1238  [ 12B4549D515CB26BB8D375038017CA65, B09ED2BED994D2B04862BBF62EF56F110235D3489D3B1762432F22A3A8F97BB8 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
11:47:15.0636 0x1238  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
11:47:18.0132 0x1238  Detect skipped due to KSN trusted
11:47:18.0132 0x1238  Pml Driver HPZ12 - ok
11:47:18.0195 0x1238  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
11:47:18.0288 0x1238  PNRPAutoReg - ok
11:47:18.0335 0x1238  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
11:47:18.0429 0x1238  PNRPsvc - ok
11:47:18.0522 0x1238  [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
11:47:18.0694 0x1238  PolicyAgent - ok
11:47:18.0756 0x1238  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power           C:\Windows\system32\umpo.dll
11:47:18.0897 0x1238  Power - ok
11:47:18.0944 0x1238  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
11:47:19.0131 0x1238  PptpMiniport - ok
11:47:19.0162 0x1238  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
11:47:19.0256 0x1238  Processor - ok
11:47:19.0318 0x1238  [ CADEFAC453040E370A1BDFF3973BE00D, 2E3DD8DA702468D8AB0F3CE27188B1991D4CB015FB36BAE4C6E7996B61CF49B8 ] ProfSvc         C:\Windows\system32\profsvc.dll
11:47:19.0443 0x1238  ProfSvc - ok
11:47:19.0474 0x1238  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] ProtectedStorage C:\Windows\system32\lsass.exe
11:47:19.0552 0x1238  ProtectedStorage - ok
11:47:19.0583 0x1238  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
11:47:19.0724 0x1238  Psched - ok
11:47:19.0895 0x1238  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
11:47:20.0192 0x1238  ql2300 - ok
11:47:20.0254 0x1238  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
11:47:20.0348 0x1238  ql40xx - ok
11:47:20.0410 0x1238  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\Windows\system32\qwave.dll
11:47:20.0535 0x1238  QWAVE - ok
11:47:20.0582 0x1238  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
11:47:20.0691 0x1238  QWAVEdrv - ok
11:47:20.0738 0x1238  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
11:47:20.0956 0x1238  RasAcd - ok
11:47:21.0050 0x1238  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
11:47:21.0206 0x1238  RasAgileVpn - ok
11:47:21.0268 0x1238  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\Windows\System32\rasauto.dll
11:47:21.0424 0x1238  RasAuto - ok
11:47:21.0502 0x1238  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
11:47:21.0705 0x1238  Rasl2tp - ok
11:47:21.0783 0x1238  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\Windows\System32\rasmans.dll
11:47:21.0970 0x1238  RasMan - ok
11:47:22.0032 0x1238  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
11:47:22.0173 0x1238  RasPppoe - ok
11:47:22.0251 0x1238  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
11:47:22.0407 0x1238  RasSstp - ok
11:47:22.0485 0x1238  [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
11:47:22.0656 0x1238  rdbss - ok
11:47:22.0719 0x1238  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
11:47:22.0812 0x1238  rdpbus - ok
11:47:22.0844 0x1238  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
11:47:22.0984 0x1238  RDPCDD - ok
11:47:23.0046 0x1238  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
11:47:23.0187 0x1238  RDPENCDD - ok
11:47:23.0234 0x1238  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
11:47:23.0390 0x1238  RDPREFMP - ok
11:47:23.0452 0x1238  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
11:47:23.0577 0x1238  RDPWD - ok
11:47:23.0655 0x1238  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
11:47:23.0764 0x1238  rdyboost - ok
11:47:23.0811 0x1238  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\Windows\System32\mprdim.dll
11:47:23.0951 0x1238  RemoteAccess - ok
11:47:23.0982 0x1238  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll
11:47:24.0107 0x1238  RemoteRegistry - ok
11:47:24.0170 0x1238  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
11:47:24.0310 0x1238  RpcEptMapper - ok
11:47:24.0357 0x1238  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe
11:47:24.0450 0x1238  RpcLocator - ok
11:47:24.0513 0x1238  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs           C:\Windows\system32\rpcss.dll
11:47:24.0669 0x1238  RpcSs - ok
11:47:24.0747 0x1238  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
11:47:24.0903 0x1238  rspndr - ok
11:47:24.0934 0x1238  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] SamSs           C:\Windows\system32\lsass.exe
11:47:25.0028 0x1238  SamSs - ok
11:47:25.0090 0x1238  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
11:47:25.0184 0x1238  sbp2port - ok
11:47:25.0230 0x1238  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
11:47:25.0386 0x1238  SCardSvr - ok
11:47:25.0418 0x1238  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
11:47:25.0558 0x1238  scfilter - ok
11:47:25.0698 0x1238  [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule        C:\Windows\system32\schedsvc.dll
11:47:25.0964 0x1238  Schedule - ok
11:47:26.0010 0x1238  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc     C:\Windows\System32\certprop.dll
11:47:26.0120 0x1238  SCPolicySvc - ok
11:47:26.0198 0x1238  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
11:47:26.0369 0x1238  SDRSVC - ok
11:47:26.0619 0x1238  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
11:47:26.0822 0x1238  secdrv - ok
11:47:26.0868 0x1238  [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon        C:\Windows\system32\seclogon.dll
11:47:27.0024 0x1238  seclogon - ok
11:47:27.0071 0x1238  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\System32\sens.dll
11:47:27.0212 0x1238  SENS - ok
11:47:27.0274 0x1238  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
11:47:27.0399 0x1238  SensrSvc - ok
11:47:27.0430 0x1238  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
11:47:27.0539 0x1238  Serenum - ok
11:47:27.0586 0x1238  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\DRIVERS\serial.sys
11:47:27.0695 0x1238  Serial - ok
11:47:27.0726 0x1238  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
11:47:27.0836 0x1238  sermouse - ok
11:47:27.0960 0x1238  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\Windows\system32\sessenv.dll
11:47:28.0116 0x1238  SessionEnv - ok
11:47:28.0194 0x1238  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
11:47:28.0304 0x1238  sffdisk - ok
11:47:28.0319 0x1238  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
11:47:28.0428 0x1238  sffp_mmc - ok
11:47:28.0460 0x1238  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
11:47:28.0569 0x1238  sffp_sd - ok
11:47:28.0896 0x1238  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
11:47:29.0099 0x1238  sfloppy - ok
11:47:29.0318 0x1238  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll
11:47:29.0848 0x1238  SharedAccess - ok
11:47:30.0082 0x1238  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
11:47:30.0300 0x1238  ShellHWDetection - ok
11:47:30.0347 0x1238  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\Windows\system32\drivers\sisagp.sys
11:47:30.0425 0x1238  sisagp - ok
11:47:30.0659 0x1238  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
11:47:30.0940 0x1238  SiSRaid2 - ok
11:47:31.0034 0x1238  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
11:47:31.0268 0x1238  SiSRaid4 - ok
11:47:31.0361 0x1238  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
11:47:31.0502 0x1238  Smb - ok
11:47:31.0564 0x1238  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
11:47:31.0658 0x1238  SNMPTRAP - ok
11:47:31.0704 0x1238  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\Windows\system32\drivers\spldr.sys
11:47:31.0829 0x1238  spldr - ok
11:47:31.0938 0x1238  [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler         C:\Windows\System32\spoolsv.exe
11:47:32.0141 0x1238  Spooler - ok
11:47:32.0734 0x1238  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\Windows\system32\sppsvc.exe
11:47:33.0280 0x1238  sppsvc - ok
11:47:33.0358 0x1238  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify     C:\Windows\system32\sppuinotify.dll
11:47:33.0498 0x1238  sppuinotify - ok
11:47:33.0717 0x1238  [ CDDDEC541BC3C96F91ECB48759673505, B030FFA02832317AC5626BF1BF8A4A95A5992C9A6E81BC1C002D5F4D667C27FB ] sptd            C:\Windows\system32\Drivers\sptd.sys
11:47:33.0717 0x1238  Suspicious file ( NoAccess ): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505, sha256: B030FFA02832317AC5626BF1BF8A4A95A5992C9A6E81BC1C002D5F4D667C27FB
11:47:33.0732 0x1238  sptd - detected LockedFile.Multi.Generic ( 1 )
11:47:36.0260 0x1238  Detect skipped due to KSN trusted
11:47:36.0260 0x1238  sptd - ok
11:47:36.0338 0x1238  [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv             C:\Windows\system32\DRIVERS\srv.sys
11:47:36.0509 0x1238  srv - ok
11:47:36.0868 0x1238  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
11:47:37.0227 0x1238  srv2 - ok
11:47:37.0258 0x1238  [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
11:47:37.0352 0x1238  srvnet - ok
11:47:37.0398 0x1238  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
11:47:37.0570 0x1238  SSDPSRV - ok
11:47:37.0710 0x1238  [ A36EE93698802CD899F98BFD553D8185, 224CFED921EA230FF8025D259E34968FD2C0FD34BB3A918FB4B9B8BA42BEA5D3 ] ssmdrv          C:\Windows\system32\DRIVERS\ssmdrv.sys
11:47:37.0757 0x1238  ssmdrv - ok
11:47:37.0804 0x1238  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\Windows\system32\sstpsvc.dll
11:47:37.0991 0x1238  SstpSvc - ok
11:47:38.0085 0x1238  [ F0359F7CE712D69ACEF0886BDB4792ED, 0E638A3F56B1C431A472469E2F47DABD0ABE1CC043FD1673B4CA6E984FE980CF ] Stereo Service  C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
11:47:38.0225 0x1238  Stereo Service - ok
11:47:38.0272 0x1238  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
11:47:38.0350 0x1238  stexstor - ok
11:47:38.0412 0x1238  [ EDB05BD63148796F23EA78506404A538, 8EBF623D3DEB6CCAC75AAFCF8B23271029A28BE29D459088E40FBF109E80AA17 ] StillCam        C:\Windows\system32\drivers\serscan.sys
11:47:38.0506 0x1238  StillCam - ok
11:47:39.0005 0x1238  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\Windows\System32\wiaservc.dll
11:47:39.0177 0x1238  StiSvc - ok
11:47:39.0208 0x1238  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\Windows\system32\drivers\swenum.sys
11:47:39.0286 0x1238  swenum - ok
11:47:39.0348 0x1238  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\Windows\System32\swprv.dll
11:47:39.0520 0x1238  swprv - ok
11:47:39.0723 0x1238  [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B3504E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain         C:\Windows\system32\sysmain.dll
11:47:39.0972 0x1238  SysMain - ok
11:47:40.0035 0x1238  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
11:47:40.0160 0x1238  TabletInputService - ok
11:47:40.0222 0x1238  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv         C:\Windows\System32\tapisrv.dll
11:47:40.0440 0x1238  TapiSrv - ok
11:47:40.0612 0x1238  [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS             C:\Windows\System32\tbssvc.dll
11:47:40.0799 0x1238  TBS - ok
11:47:41.0064 0x1238  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
11:47:41.0298 0x1238  Tcpip - ok
11:47:41.0532 0x1238  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
11:47:41.0704 0x1238  TCPIP6 - ok
11:47:41.0813 0x1238  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
11:47:42.0063 0x1238  tcpipreg - ok
11:47:42.0234 0x1238  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
11:47:42.0515 0x1238  TDPIPE - ok
11:47:42.0546 0x1238  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
11:47:42.0765 0x1238  TDTCP - ok
11:47:42.0827 0x1238  [ B459575348C20E8121D6039DA063C704, 1B4328A9EA39FF5A57F258E02254D04B73455F1DF7C997C13702A8B2F12D0347 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
11:47:42.0999 0x1238  tdx - ok
11:47:43.0030 0x1238  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\Windows\system32\drivers\termdd.sys
11:47:43.0139 0x1238  TermDD - ok
11:47:43.0280 0x1238  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService     C:\Windows\System32\termsrv.dll
11:47:43.0467 0x1238  TermService - ok
11:47:43.0498 0x1238  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll
11:47:43.0685 0x1238  Themes - ok
11:47:43.0763 0x1238  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\Windows\system32\mmcss.dll
11:47:43.0904 0x1238  THREADORDER - ok
11:47:44.0153 0x1238  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll
11:47:44.0309 0x1238  TrkWks - ok
11:47:44.0606 0x1238  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
11:47:44.0902 0x1238  TrustedInstaller - ok
11:47:44.0980 0x1238  [ 6C5139E4283249518F7743D7043775B3, 58684E8C90EBAC65459A97C905CDCFE3A915CFF7E8E96071DE1AC3489F85E67F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
11:47:45.0152 0x1238  tssecsrv - ok
11:47:45.0417 0x1238  [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
11:47:45.0510 0x1238  TsUsbFlt - ok
11:47:45.0916 0x1238  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
11:47:46.0166 0x1238  tunnel - ok
11:47:46.0228 0x1238  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
11:47:46.0322 0x1238  uagp35 - ok
11:47:46.0368 0x1238  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
11:47:46.0571 0x1238  udfs - ok
11:47:46.0634 0x1238  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\Windows\system32\UI0Detect.exe
11:47:46.0883 0x1238  UI0Detect - ok
11:47:46.0946 0x1238  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
11:47:47.0086 0x1238  uliagpkx - ok
11:47:47.0148 0x1238  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus           C:\Windows\system32\drivers\umbus.sys
11:47:47.0258 0x1238  umbus - ok
11:47:47.0336 0x1238  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
11:47:47.0414 0x1238  UmPass - ok
11:47:47.0554 0x1238  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll
11:47:47.0928 0x1238  upnphost - ok
11:47:47.0975 0x1238  [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp         C:\Windows\system32\drivers\usbccgp.sys
11:47:48.0131 0x1238  usbccgp - ok
11:47:48.0209 0x1238  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\Windows\system32\drivers\usbcir.sys
11:47:48.0350 0x1238  usbcir - ok
11:47:48.0396 0x1238  [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
11:47:48.0490 0x1238  usbehci - ok
11:47:48.0568 0x1238  [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
11:47:48.0724 0x1238  usbhub - ok
11:47:48.0740 0x1238  [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys
11:47:48.0833 0x1238  usbohci - ok
11:47:48.0880 0x1238  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
11:47:48.0974 0x1238  usbprint - ok
11:47:49.0005 0x1238  [ 576096CCBC07E7C4EA4F5E6686D6888F, 8C643F43BD0017979548389C4DB36A1EE872CCF19C86FAE3752A4989173E28ED ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
11:47:49.0098 0x1238  usbscan - ok
11:47:49.0130 0x1238  [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
11:47:49.0223 0x1238  USBSTOR - ok
11:47:49.0270 0x1238  [ 800AABFD625EEFF899F7E5496BDE37AB, 3EB7ED07760CB348FCA9A06C2B838EF79B51A83C5F70A9C9EAAEAE54480067E2 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
11:47:49.0332 0x1238  usbuhci - ok
11:47:49.0379 0x1238  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\Windows\System32\uxsms.dll
11:47:49.0520 0x1238  UxSms - ok
11:47:49.0613 0x1238  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] VaultSvc        C:\Windows\system32\lsass.exe
11:47:49.0676 0x1238  VaultSvc - ok
11:47:49.0847 0x1238  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
11:47:49.0988 0x1238  vdrvroot - ok
11:47:50.0175 0x1238  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds             C:\Windows\System32\vds.exe
11:47:50.0362 0x1238  vds - ok
11:47:50.0424 0x1238  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
11:47:50.0549 0x1238  vga - ok
11:47:50.0580 0x1238  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\Windows\System32\drivers\vga.sys
11:47:50.0799 0x1238  VgaSave - ok
11:47:50.0861 0x1238  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
11:47:51.0002 0x1238  vhdmp - ok
11:47:51.0033 0x1238  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\Windows\system32\drivers\viaagp.sys
11:47:51.0126 0x1238  viaagp - ok
11:47:51.0173 0x1238  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\Windows\system32\DRIVERS\viac7.sys
11:47:51.0329 0x1238  ViaC7 - ok
11:47:51.0376 0x1238  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\drivers\viaide.sys
11:47:51.0454 0x1238  viaide - ok
11:47:51.0485 0x1238  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
11:47:51.0594 0x1238  volmgr - ok
11:47:51.0766 0x1238  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
11:47:52.0281 0x1238  volmgrx - ok
11:47:52.0468 0x1238  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
11:47:52.0811 0x1238  volsnap - ok
11:47:52.0874 0x1238  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
11:47:52.0983 0x1238  vsmraid - ok
11:47:53.0123 0x1238  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS             C:\Windows\system32\vssvc.exe
11:47:53.0529 0x1238  VSS - ok
11:47:53.0638 0x1238  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
11:47:53.0810 0x1238  vwifibus - ok
11:47:53.0997 0x1238  [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
11:47:54.0200 0x1238  vwififlt - ok
11:47:54.0278 0x1238  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\Windows\system32\w32time.dll
11:47:54.0496 0x1238  W32Time - ok
11:47:54.0527 0x1238  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
11:47:54.0605 0x1238  WacomPen - ok
11:47:54.0683 0x1238  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
11:47:54.0824 0x1238  WANARP - ok
11:47:54.0839 0x1238  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
11:47:54.0964 0x1238  Wanarpv6 - ok
11:47:55.0136 0x1238  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\Windows\system32\wbengine.exe
11:47:55.0385 0x1238  wbengine - ok
11:47:55.0463 0x1238  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
11:47:55.0728 0x1238  WbioSrvc - ok
11:47:55.0900 0x1238  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc         C:\Windows\System32\wcncsvc.dll
11:47:56.0040 0x1238  wcncsvc - ok
11:47:56.0087 0x1238  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
11:47:56.0212 0x1238  WcsPlugInService - ok
11:47:56.0228 0x1238  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
11:47:56.0306 0x1238  Wd - ok
11:47:56.0399 0x1238  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
11:47:56.0571 0x1238  Wdf01000 - ok
11:47:56.0618 0x1238  [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiServiceHost  C:\Windows\system32\wdi.dll
11:47:56.0774 0x1238  WdiServiceHost - ok
11:47:56.0789 0x1238  [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiSystemHost   C:\Windows\system32\wdi.dll
11:47:56.0883 0x1238  WdiSystemHost - ok
11:47:56.0930 0x1238  [ 75E8EBD7040CE238684333F97014762A, 2CA0B267FBAEB303D1F8B639D733DC0DE17BA1276CC9096035B4F2BBBED3EF7F ] WebClient       C:\Windows\System32\webclnt.dll
11:47:57.0117 0x1238  WebClient - ok
11:47:57.0179 0x1238  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll
11:47:57.0351 0x1238  Wecsvc - ok
11:47:57.0398 0x1238  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
11:47:57.0522 0x1238  wercplsupport - ok
11:47:57.0694 0x1238  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll
11:47:57.0834 0x1238  WerSvc - ok
11:47:57.0928 0x1238  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
11:47:58.0053 0x1238  WfpLwf - ok
11:47:58.0084 0x1238  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
11:47:58.0162 0x1238  WIMMount - ok
11:47:58.0302 0x1238  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll
11:47:58.0521 0x1238  WinDefend - ok
11:47:58.0552 0x1238  WinHttpAutoProxySvc - ok
11:47:58.0677 0x1238  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
11:47:58.0833 0x1238  Winmgmt - ok
11:47:59.0020 0x1238  [ 1B91CD34EA3A90AB6A4EF0550174F4CC, 5B6618615EBFBA594C945AD35F5C68DA8C6053892B6D12D626BB6120910D80DC ] WinRM           C:\Windows\system32\WsmSvc.dll
11:47:59.0301 0x1238  WinRM - ok
11:47:59.0457 0x1238  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc         C:\Windows\System32\wlansvc.dll
11:47:59.0987 0x1238  Wlansvc - ok
11:48:00.0174 0x1238  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
11:48:00.0284 0x1238  WmiAcpi - ok
11:48:00.0362 0x1238  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
11:48:00.0486 0x1238  wmiApSrv - ok
11:48:00.0674 0x1238  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe
11:48:01.0017 0x1238  WMPNetworkSvc - ok
11:48:01.0064 0x1238  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
11:48:01.0173 0x1238  WPCSvc - ok
11:48:01.0235 0x1238  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
11:48:01.0391 0x1238  WPDBusEnum - ok
11:48:01.0469 0x1238  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
11:48:02.0156 0x1238  ws2ifsl - ok
11:48:02.0202 0x1238  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\System32\wscsvc.dll
11:48:02.0312 0x1238  wscsvc - ok
11:48:02.0327 0x1238  WSearch - ok
11:48:02.0592 0x1238  [ D9B0134913E5EF007AF82A418C503322, 7418DD28C8E968674382F8352AAFFC4DE77887E2B71B8844D615F19432B4C55A ] wuauserv        C:\Windows\system32\wuaueng.dll
11:48:02.0904 0x1238  wuauserv - ok
11:48:02.0967 0x1238  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
11:48:03.0170 0x1238  WudfPf - ok
11:48:03.0263 0x1238  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
11:48:03.0435 0x1238  WUDFRd - ok
11:48:03.0482 0x1238  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
11:48:03.0669 0x1238  wudfsvc - ok
11:48:03.0825 0x1238  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc         C:\Windows\System32\wwansvc.dll
11:48:04.0028 0x1238  WwanSvc - ok
11:48:04.0090 0x1238  ================ Scan global ===============================
11:48:04.0152 0x1238  [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\Windows\system32\basesrv.dll
11:48:04.0308 0x1238  [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
11:48:04.0589 0x1238  [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
11:48:04.0652 0x1238  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
11:48:04.0761 0x1238  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\Windows\system32\services.exe
11:48:04.0839 0x1238  [ Global ] - ok
11:48:04.0839 0x1238  ================ Scan MBR ==================================
11:48:04.0870 0x1238  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
11:48:06.0321 0x1238  \Device\Harddisk0\DR0 - ok
11:48:06.0321 0x1238  ================ Scan VBR ==================================
11:48:06.0352 0x1238  [ 97250044E8131D9E5EA3B424C2C47D24 ] \Device\Harddisk0\DR0\Partition1
11:48:06.0399 0x1238  \Device\Harddisk0\DR0\Partition1 - ok
11:48:06.0430 0x1238  [ FC209F93829EF727BCD5907839B74BF5 ] \Device\Harddisk0\DR0\Partition2
11:48:06.0461 0x1238  \Device\Harddisk0\DR0\Partition2 - ok
11:48:06.0461 0x1238  ================ Scan generic autorun ======================
11:48:06.0539 0x1238  [ 5516C26A6AF8EB4E2CAB48EC98A74398, 2BF161DE944090B3B3792AE8F5985FCB09744B3EE626E8253A3861D86284652D ] D:\Programme\Standart\HP\HP Software Update\HPWuSchd2.exe
11:48:06.0648 0x1238  HP Software Update - ok
11:48:06.0867 0x1238  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
11:48:07.0148 0x1238  Sidebar - ok
11:48:07.0241 0x1238  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
11:48:07.0366 0x1238  mctadmin - ok
11:48:07.0506 0x1238  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
11:48:07.0818 0x1238  Sidebar - ok
11:48:07.0865 0x1238  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
11:48:07.0943 0x1238  mctadmin - ok
11:48:08.0084 0x1238  [ 435F79D364B796A4EA0B5CAF24CA78BD, 770264724ADAECCEE8008B930327BC55D1F501FF48F4240B3C6DDFAF1738E248 ] D:\Programme\Standart\DAEMON Tools Lite\DTLite.exe
11:48:08.0770 0x1238  DAEMON Tools Lite - ok
11:48:08.0957 0x1238  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
11:48:09.0176 0x1238  Sidebar - ok
11:48:09.0207 0x1238  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
11:48:09.0332 0x1238  mctadmin - ok
11:48:09.0332 0x1238  Waiting for KSN requests completion. In queue: 203
11:48:10.0346 0x1238  Waiting for KSN requests completion. In queue: 203
11:48:11.0360 0x1238  Waiting for KSN requests completion. In queue: 203
11:48:12.0498 0x1238  AV detected via SS2: Avira Desktop, C:\Program Files\Avira\AntiVir Desktop\wsctool.exe ( 14.0.7.310 ), 0x41000 ( enabled : updated )
11:48:12.0514 0x1238  Win FW state via NFP2: enabled
11:48:15.0197 0x1238  ============================================================
11:48:15.0197 0x1238  Scan finished
11:48:15.0197 0x1238  ============================================================
11:48:15.0228 0x028c  Detected object count: 0
11:48:15.0228 0x028c  Actual detected object count: 0
         

Gruß Ratibona

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hier das Protokoll von mbam:

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 20.11.2014
Suchlauf-Zeit: 12:15:33
Logdatei: Anti-Malware Log.txt
Administrator: Ja

Version: 2.00.3.1025
Malware Datenbank: v2014.11.20.03
Rootkit Datenbank: v2014.11.18.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Gerd

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 432906
Verstrichene Zeit: 52 Min, 3 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 0
(Keine schädliche Elemente erkannt)

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 0
(Keine schädliche Elemente erkannt)

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
         

Hier die Log-Datei vom AW-Cleaner:

# AdwCleaner v4.101 - Bericht erstellt am 20/11/2014 um 13:40:37
# Aktualisiert 09/11/2014 von Xplode
# Database : 2014-11-16.1 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : Gerd - GERD-PC
# Gestartet von : C:\Users\Gerd\Desktop\AdwCleaner_4.101.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Gerd\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Gerd_2\AppData\LocalLow\HPAppData
Ordner Gelöscht : C:\Users\Gerd_2\AppData\Roaming\HPAppData
Ordner Gelöscht : C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\ouap97u5.default\Extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
Datei Gelöscht : C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\ouap97u5.default\user.js

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\dt soft\daemon tools toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v4.0 (de)


*************************

AdwCleaner[R0].txt - [1559 octets] - [20/11/2014 13:29:24]
AdwCleaner[S0].txt - [1480 octets] - [20/11/2014 13:40:37]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1540 octets] ##########
         

und der Bericht von JunkRemovaltool:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.9 (11.15.2014:2)
OS: Windows 7 Home Premium x86
Ran by Gerd on 20.11.2014 at 13:47:47,78
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.11.2014 at 13:54:00,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

und hier noch die FRST und Aditional Logs:


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-11-2014
Ran by Gerd (administrator) on GERD-PC on 20-11-2014 14:23:51
Running from C:\Users\Gerd\Desktop
Loaded Profiles: Gerd & Gerd_2 & Mama & UpdatusUser (Available profiles: Gerd & Gerd_2 & Mama & UpdatusUser)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Hewlett-Packard) D:\Programme\Standart\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Hewlett-Packard Co.) D:\Programme\Standart\Digital Imaging\bin\hpqtra08.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard Co.) D:\Programme\Standart\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) D:\Programme\Standart\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) D:\Programme\Standart\Digital Imaging\bin\hpqgpc01.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HP Software Update] => D:\Programme\Standart\HP\HP Software Update\HPWuSchd2.exe [54576 2009-11-18] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [CheckPoint Cleanup] => C:\Users\Gerd\AppData\Local\Temp\cpes_clean.exe [3948224 2010-06-28] (Check Point Software Technologies LTD) <===== ATTENTION
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKU\S-1-5-21-1485032287-1085400728-284724570-1000\...\Run: [DAEMON Tools Lite] => D:\Programme\Standart\DAEMON Tools Lite\DTLite.exe [369200 2009-10-30] (DT Soft Ltd)
HKU\S-1-5-21-1485032287-1085400728-284724570-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1485032287-1085400728-284724570-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1485032287-1085400728-284724570-1002\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1485032287-1085400728-284724570-1002\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> D:\Programme\Standart\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Gerd_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Gerd\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)
GroupPolicyUsers\S-1-5-21-1485032287-1085400728-284724570-1001\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1485032287-1085400728-284724570-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA0A616433473CA01
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> D:\Programme\Standart\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> D:\Programme\Standart\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\ouap97u5.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\ouap97u5.default\searchplugins\google-und-download-suche.xml
FF Extension: Adobe DLM (powered by getPlus(R)) - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\ouap97u5.default\Extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2010-01-22]
FF Extension: Adblock Plus - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\ouap97u5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-10-28]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - D:\Programme\Standart\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - D:\Programme\Standart\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-05-13]
FF StartMenuInternet: FIREFOX.EXE - C:\Eigene Programme\Mozilla Firefox\firefox.exe

Chrome: 
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2014-11-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [995064 2014-11-13] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [67360 2009-12-17] (NOS Microsystems Ltd.)
R3 hpqcxs08; D:\Programme\Standart\Digital Imaging\bin\hpqcxs08.dll [253568 2009-11-18] (Hewlett-Packard Co.)
R2 hpqddsvc; D:\Programme\Standart\Digital Imaging\bin\hpqddsvc.dll [137344 2009-11-18] (Hewlett-Packard Co.)
R2 HPSLPSVC; D:\Programme\Standart\Digital Imaging\bin\HPSLPSVC32.DLL [700032 2010-01-29] (Hewlett-Packard Co.)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-13] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37384 2014-10-09] (Avira Operations GmbH & Co. KG)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [16768 2011-04-08] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-03-22] () [File not signed]
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-12-13] (Avira GmbH)
U3 a8rylnb2; C:\Windows\system32\Drivers\a8rylnb2.sys [0 ] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-20 14:23 - 2014-11-20 14:25 - 00011144 _____ () C:\Users\Gerd\Desktop\FRST.txt
2014-11-20 13:54 - 2014-11-20 13:54 - 00000624 _____ () C:\Users\Gerd\Desktop\JRT.txt
2014-11-20 13:47 - 2014-11-20 13:47 - 00000000 ____D () C:\Windows\ERUNT
2014-11-20 13:44 - 2014-11-20 13:44 - 00001620 _____ () C:\Users\Gerd\Desktop\AdwCleaner[S0].txt
2014-11-20 13:29 - 2014-11-20 13:40 - 00000000 ____D () C:\AdwCleaner
2014-11-20 12:21 - 2014-11-20 14:23 - 00000000 ____D () C:\Users\Gerd\Desktop\antimalware
2014-11-20 12:15 - 2014-11-20 12:16 - 00000190 _____ () C:\Users\Gerd\Desktop\Forum.url
2014-11-20 12:14 - 2014-11-20 12:14 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-20 12:14 - 2014-11-20 12:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-20 12:14 - 2014-11-20 12:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-20 12:14 - 2014-11-20 12:14 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-11-20 12:14 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-20 12:14 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-20 12:14 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-19 11:52 - 2014-11-19 11:54 - 132469808 _____ (AVAST Software) C:\Users\Gerd\Downloads\avast_free_antivirus_setup_10.2208.712.exe
2014-11-19 11:46 - 2014-11-19 11:48 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-11-19 11:46 - 2014-11-19 11:46 - 00001993 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-11-19 11:45 - 2014-11-19 11:45 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-11-19 11:45 - 2014-11-19 11:45 - 00000000 ____D () C:\Program Files\Adobe
2014-11-19 11:45 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 11:45 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-18 12:37 - 2014-11-20 14:24 - 00000000 ____D () C:\FRST
2014-11-18 12:36 - 2014-11-18 12:36 - 01108992 _____ (Farbar) C:\Users\Gerd\Desktop\FRST.exe
2014-11-12 18:52 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 18:52 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 18:52 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 18:51 - 2014-11-05 18:50 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 18:51 - 2014-11-05 18:50 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 18:51 - 2014-11-05 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 18:51 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 18:51 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 18:51 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 18:51 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 18:51 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 18:50 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 18:50 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 18:50 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 18:50 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 18:50 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 09:02 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 09:02 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 09:02 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 09:02 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 09:02 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 09:02 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 09:02 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 09:02 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 09:02 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 09:02 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 09:02 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 09:02 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 09:02 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 09:02 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 09:02 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 09:02 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 09:02 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 09:02 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 09:02 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 09:02 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 09:02 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 09:02 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 09:02 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 09:02 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 09:02 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 09:02 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 09:02 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 09:01 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 09:01 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 09:01 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-20 13:50 - 2009-07-14 05:34 - 00023152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-20 13:50 - 2009-07-14 05:34 - 00023152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-20 13:49 - 2009-11-30 20:33 - 01351080 _____ () C:\Windows\WindowsUpdate.log
2014-11-20 13:48 - 2014-01-24 08:37 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-20 13:41 - 2012-11-18 18:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-20 13:41 - 2009-12-01 19:37 - 00074302 _____ () C:\Windows\PFRO.log
2014-11-20 13:41 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-20 13:41 - 2009-07-14 05:39 - 00152596 _____ () C:\Windows\setupact.log
2014-11-19 11:45 - 2010-01-22 11:56 - 00000000 ____D () C:\ProgramData\Adobe
2014-11-19 11:44 - 2009-11-30 21:20 - 00000000 ____D () C:\Eigene Programme
2014-11-19 11:42 - 2010-09-25 11:01 - 00000000 ____D () C:\Users\Gerd\AppData\Local\Adobe
2014-11-19 11:32 - 2010-01-18 16:10 - 00113840 _____ () C:\Users\Gerd\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-16 17:23 - 2009-11-30 21:09 - 01648036 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-14 13:45 - 2014-08-15 08:07 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-14 13:44 - 2014-08-15 08:08 - 00001099 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-11-14 13:44 - 2013-12-13 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-14 13:44 - 2013-12-13 19:46 - 00000000 ____D () C:\Program Files\Avira
2014-11-14 08:42 - 2013-12-12 08:38 - 00000000 ____D () C:\Windows\rescache
2014-11-13 11:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-13 11:32 - 2010-01-22 14:37 - 00113840 _____ () C:\Users\Mama\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-13 09:25 - 2009-07-14 05:33 - 00426200 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 09:22 - 2014-05-06 07:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-13 09:22 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-13 08:50 - 2012-11-12 17:07 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-13 08:32 - 2009-12-03 16:34 - 00113840 _____ () C:\Users\Gerd_2\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-12 18:56 - 2013-08-14 08:21 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 18:49 - 2009-12-01 20:18 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 08:49 - 2012-07-09 04:30 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-12 08:49 - 2012-07-09 04:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-04 14:30 - 2009-11-30 21:20 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Files to move or delete:
====================
C:\Users\Gerd\AppData\Local\Temp\cpes_clean.exe


Some content of TEMP:
====================
C:\Users\Gerd\AppData\Local\Temp\AskSLib.dll
C:\Users\Gerd\AppData\Local\Temp\avgnt.exe
C:\Users\Gerd\AppData\Local\Temp\cpes_clean.exe
C:\Users\Gerd\AppData\Local\Temp\cpes_clean_launcher.exe
C:\Users\Gerd\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe
C:\Users\Gerd\AppData\Local\Temp\IPx86_1031.exe
C:\Users\Gerd\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\Gerd\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe
C:\Users\Gerd\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Gerd\AppData\Local\Temp\ose00000.exe
C:\Users\Gerd\AppData\Local\Temp\Quarantine.exe
C:\Users\Gerd\AppData\Local\Temp\sqlite3.dll
C:\Users\Gerd\AppData\Local\Temp\vsinit.dll
C:\Users\Gerd\AppData\Local\Temp\vsutil.dll
C:\Users\Gerd\AppData\Local\Temp\ytb.exe
C:\Users\Gerd\AppData\Local\Temp\zauninst.exe
C:\Users\Gerd_2\AppData\Local\Temp\AskSLib.dll
C:\Users\Gerd_2\AppData\Local\Temp\avgnt.exe
C:\Users\Gerd_2\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwtkwq9.dll
C:\Users\Gerd_2\AppData\Local\Temp\DSP.dll
C:\Users\Gerd_2\AppData\Local\Temp\FileSystemView.dll
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate01.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate02.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate03.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate04.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate05.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate06.exe
C:\Users\Gerd_2\AppData\Local\Temp\FP_PL_PFS_INSTALLER-1.exe
C:\Users\Gerd_2\AppData\Local\Temp\FP_PL_PFS_INSTALLER-2.exe
C:\Users\Gerd_2\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe
C:\Users\Gerd_2\AppData\Local\Temp\jre-1.6.0_20-windows-i586-iftw.exe_90744722.exe
C:\Users\Gerd_2\AppData\Local\Temp\jre-6u20-windows-i586-jinstall_uac.exe
C:\Users\Mama\AppData\Local\Temp\AskSLib.dll
C:\Users\Mama\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-15 11:45

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-11-2014
Ran by Gerd at 2014-11-20 14:25:55
Running from C:\Users\Gerd\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 6.1.2 - Hewlett-Packard) Hidden
ACDSee Pro 3 (HKLM\...\{1B280FAF-AE10-4E31-A41A-DB3917D651DC}) (Version: 3.0.386 - ACD Systems International Inc.)
Adobe Download Manager (HKLM\...\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}) (Version: 1.6.2.60 - NOS Microsystems Ltd.)
Adobe Flash Player 10 ActiveX (HKLM\...\{922E8525-AC7E-4294-ACAA-43712D4423C0}) (Version: 10.0.22.87 - Adobe Systems, Inc.)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Avira (HKLM\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
B209a-m (Version: 140.0.690.000 - Hewlett-Packard) Hidden
BufferChm (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Destinations (Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Die 15 beliebtesten Kartenspiele (HKLM\...\Die 15 beliebtesten Kartenspiele_is1) (Version:  - madcat Software GmbH)
Dropbox (HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
Free Audio CD Burner version 1.4 (HKLM\...\Free Audio CD Burner_is1) (Version:  - DVDVideoSoft Limited.)
Free YouTube to MP3 Converter version 3.8 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Limited.)
GPBaseService2 (Version: 140.0.211.000 - Hewlett-Packard) Hidden
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart Plus B209a-m All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{B2DAB009-8236-48A0-AD7F-E940F5AB1578}) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM\...\{74DC0593-6BC6-4001-AD5F-D810AFB68D86}) (Version: 5.002.002.002 - Hewlett-Packard)
HPPhotoGadget (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java(TM) 6 Update 33 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216032FF}) (Version: 6.0.330 - Oracle)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.1.1 (x86 de) (HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Mozilla Firefox 33.1.1 (x86 de)) (Version: 33.1.1 - Mozilla)
Mozilla Firefox 4.0 (x86 de) (HKLM\...\Mozilla Firefox 4.0 (x86 de)) (Version: 4.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network (Version: 140.0.215.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Treiber 306.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 306.97 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA Grafiktreiber 306.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 306.97 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
PS_AIO_06_B209a-m_SW_Min (Version: 140.0.690.000 - Hewlett-Packard) Hidden
QuickTransfer (Version: 140.0.98.000 - Hewlett-Packard) Hidden
Scan (Version: 140.0.80.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SmartWebPrinting (Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Status (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Toolbox (Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
WebReg (Version: 140.0.212.017 - Hewlett-Packard) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1485032287-1085400728-284724570-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Gerd_2\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1485032287-1085400728-284724570-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gerd_2\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1485032287-1085400728-284724570-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gerd_2\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1485032287-1085400728-284724570-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gerd_2\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1485032287-1085400728-284724570-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gerd_2\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Restore Points  =========================

19-11-2014 23:00:02 Geplanter Prüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {6A793A3D-F435-4FCD-90CF-4F33F415517B} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1485032287-1085400728-284724570-1002
Task: {9F953133-6851-44AC-8A61-2A9CE2DED29D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12] (Adobe Systems Incorporated)
Task: {F8FEBA44-E159-4779-8059-0C0D2FAD1E0E} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-11-18 18:38 - 2012-10-02 20:28 - 00079208 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:C31F31E6
AlternateDataStreams: C:\Users\Gerd\Desktop\Rechnung 2712.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Gerd\Desktop\Rechnung 2712.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Gerd^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.1.lnk => C:\Windows\pss\OpenOffice.org 3.1.lnk.Startup
MSCONFIG\startupreg: ICQ => "D:\Programme\Standart\ICQ7.0\ICQ.exe" silent loginmode=4

========================= Accounts: ==========================

Administrator (S-1-5-21-1485032287-1085400728-284724570-500 - Administrator - Disabled)
Gast (S-1-5-21-1485032287-1085400728-284724570-501 - Limited - Disabled)
Gerd (S-1-5-21-1485032287-1085400728-284724570-1000 - Administrator - Enabled) => C:\Users\Gerd
Gerd_2 (S-1-5-21-1485032287-1085400728-284724570-1001 - Limited - Enabled) => C:\Users\Gerd_2
Mama (S-1-5-21-1485032287-1085400728-284724570-1002 - Limited - Enabled) => C:\Users\Mama
UpdatusUser (S-1-5-21-1485032287-1085400728-284724570-1003 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============

Name: Photosmart Plus B209a-m
Description: Photosmart Plus B209a-m
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Plus B209a-m
Description: Photosmart Plus B209a-m
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Coprozessor
Description: Coprozessor
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: Intel(R) Atom(TM) CPU 230 @ 1.60GHz
Percentage of memory in use: 27%
Total physical RAM: 3071.18 MB
Available physical RAM: 2240.71 MB
Total Pagefile: 6140.64 MB
Available Pagefile: 4929.47 MB
Total Virtual: 2047.88 MB
Available Virtual: 1913.38 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:53.74 GB) (Free:14 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:80.65 GB) (Free:58.54 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: F66F8B5B)
Partition 1: (Not Active) - (Size=14.7 GB) - (Type=27)
Partition 2: (Active) - (Size=53.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=80.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Hallo....

erschreckenderweise hat der ESET Scanner 134 Bedrohungen gefunden.

Hier der ESET log:

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=4a33f7af5d3e5a489adcca512264ca4b
# engine=21194
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-21 01:50:01
# local_time=2014-11-21 02:50:01 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 101595 161077020 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 93244 168208992 0 0
# scanned=167941
# found=134
# cleaned=0
# scan_time=11284
sh=AE8DF95EC574A676A9BCD790BBE9801D00B9FC6E ft=1 fh=663a38c3ba98c3e7 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-1485032287-1085400728-284724570-1000\$ROPWKIG.exe"
sh=C9352C798D66F96D4F894C2BC2CDAD192B662D62 ft=1 fh=7209dc7ad243ecb3 vn="Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-1485032287-1085400728-284724570-1001\$R13VDD9.exe"
sh=6994FC133F3D99F1B1257370C9BC01BD54AF5D30 ft=1 fh=d1eb868415c0b931 vn="Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-1485032287-1085400728-284724570-1001\$R2YGETA.exe"
sh=C9352C798D66F96D4F894C2BC2CDAD192B662D62 ft=1 fh=7209dc7ad243ecb3 vn="Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-1485032287-1085400728-284724570-1001\$RMJDMK2.exe"
sh=C9352C798D66F96D4F894C2BC2CDAD192B662D62 ft=1 fh=7209dc7ad243ecb3 vn="Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-1485032287-1085400728-284724570-1001\$RU78HXW.exe"
sh=55DAEE851310E29238A6DDDE5A1119FAE21B1C08 ft=1 fh=7b83a162c3066e12 vn="Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd\AppData\Local\Temp\061111111234\ZAFFSetup.exe"
sh=C9352C798D66F96D4F894C2BC2CDAD192B662D62 ft=1 fh=7209dc7ad243ecb3 vn="Variante von Win32/Toolbar.Conduit.AI evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\+8jrqHGk.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\+coupGJd.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\+r4B5Que.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\00TMsK9n.exe.part"
sh=CDF78456BC8BF322B7FB4E4FBED3DDDDA59F8508 ft=1 fh=03a040e36938398e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\0biI0nrI.exe.part"
sh=CA93F551F47686F132C9F17E0247E4068DCB2CB1 ft=1 fh=e47c41f0d041cd21 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\1LMKlHAN.exe.part"
sh=CA93F551F47686F132C9F17E0247E4068DCB2CB1 ft=1 fh=e47c41f0d041cd21 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\1LwgNSzL.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\1rpxrs1b.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\269__ugw.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\3dvSlwg7.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\3IjFf59x.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\3SmBAlyP.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\50Sg8d39.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\5WMlHV0x.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\6a1owbVY.exe.part"
sh=CA93F551F47686F132C9F17E0247E4068DCB2CB1 ft=1 fh=e47c41f0d041cd21 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\80ke6xkB.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\8LubaEV+.exe.part"
sh=CA93F551F47686F132C9F17E0247E4068DCB2CB1 ft=1 fh=e47c41f0d041cd21 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\95JuArjz.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\AGmbgeui.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\aIZhbY3P.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\BAnDgfZM.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\bRlfGmgt.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\c2W3NVSZ.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\CbwDFJV3.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\cC7AYsfd.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\cmZ+7DYc.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\cW+APz5D.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\D0+XDtzz.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\DR1v7DgV.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\eTqCMwdO.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\fuQFLST3.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\gdSnJjjM.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\Ghy4mzIX.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\h1ixmSjr.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\HadCsGRB.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\Hasosqiz.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\hfvrCQ9Q.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\hQ2tBL0r.exe.part"
sh=CA93F551F47686F132C9F17E0247E4068DCB2CB1 ft=1 fh=e47c41f0d041cd21 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\IMPkEWnQ.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\J2IapJAg.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\JKuxKAdR.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\KdZJW2To.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\knM3UCV_.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\moQItCZg.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\moZAD0Ko.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\MsuV7QeK.exe.part"
sh=CA93F551F47686F132C9F17E0247E4068DCB2CB1 ft=1 fh=e47c41f0d041cd21 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\n7Sb+bRd.exe.part"
sh=106331229BB0E6926354AA973913843E09C71E78 ft=1 fh=e5343e9e04c1f21e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\nBunq5TL.exe.part"
sh=DAE30C6C24C408BC0B6CCBBEE7BF27197608F877 ft=1 fh=3d940944e8e63d8c vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\nk4cRHsw.exe.part"
sh=238B76E136A032D4601301E567760EC10C814124 ft=1 fh=f14483085eb0dc09 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\nx9S+uWb.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\oGAXOacS.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\poBLDe6n.exe.part"
sh=238B76E136A032D4601301E567760EC10C814124 ft=1 fh=f14483085eb0dc09 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\q6cCTG_z.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\QaowQjms.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\qiIlWAJK.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\ql1DFepk.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\qlgMdTR5.exe.part"
sh=36C096FDF91560EFB213C6E4800297F86E3BDCF3 ft=1 fh=9c2cc4d736e436ba vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\qvqEih07.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\Ru6xXVHd.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\SlOh4dYL.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\svpBFgIJ.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\t3LIkJRq.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\t4QNP_jj.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\tfcTa9_I.exe.part"
sh=CA93F551F47686F132C9F17E0247E4068DCB2CB1 ft=1 fh=e47c41f0d041cd21 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\U5GMloMJ.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\uCB6ixW8.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\ul+gvcSG.exe.part"
sh=238B76E136A032D4601301E567760EC10C814124 ft=1 fh=f14483085eb0dc09 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\uoD4oxAr.exe.part"
sh=DAE30C6C24C408BC0B6CCBBEE7BF27197608F877 ft=1 fh=3d940944e8e63d8c vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\ut6YV+k3.exe.part"
sh=CA93F551F47686F132C9F17E0247E4068DCB2CB1 ft=1 fh=e47c41f0d041cd21 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\uv8J6LLC.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\V1ZNlDHu.exe.part"
sh=BFE27BFF21344ABA1229E803503C944587432BF5 ft=1 fh=19232b53dd4d43b2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\VBrok9Iq.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\vGxqXuT9.exe.part"
sh=238B76E136A032D4601301E567760EC10C814124 ft=1 fh=f14483085eb0dc09 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\WI0stSJN.exe.part"
sh=86C5672288CFE1937664C80FDE9D663F14FB4E2C ft=1 fh=52119f29e55a4c50 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\wMjEk+DA.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\womDLnYY.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\wV60ttVl.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\X5rCjqv7.exe.part"
sh=26FC5C874D07F687C4B8A1137A05345AE54C4628 ft=1 fh=1ca35f8b9ff0a84f vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\XfGUiuDl.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\xoGBgDi+.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\Y24wufVg.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\YkxEax5J.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\yNyC4sE3.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\yOHWz7RV.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\yQM4N7mT.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\YVZ8OHQx.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\z4Pm0gaL.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\Z6uF_H_Y.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\zfNi0YZF.exe.part"
sh=DAE30C6C24C408BC0B6CCBBEE7BF27197608F877 ft=1 fh=3d940944e8e63d8c vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\ZR6wcs+2.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\_+gMrviH.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gerd_2\AppData\Local\Temp\_JzdkCky.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\+oSJyt9R.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\14XGSxbl.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\3JnCuI_n.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\3o5lTRpN.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\4_SMGXIT.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\60j9BvtA.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\7A33ZzOj.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\AOl+EnUD.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\a_BkTaRa.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\BsZlilcW.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\DRIWPX71.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\Emdg7Ag+.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\f91v+opn.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\FfU2qg1i.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\g_eK1wQx.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\HZx3i2cx.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\jkLbFLzA.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\JpD4MECY.exe.part"
sh=CA93F551F47686F132C9F17E0247E4068DCB2CB1 ft=1 fh=e47c41f0d041cd21 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\KBXHvqCo.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\kopxN1ee.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\l3t3jqgO.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\lwF_EN5O.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\LxzoIYsH.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\PeXlBBbr.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\pSJfGeUu.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\pZtdiWlG.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\q5qIByQm.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\RGG5fLnG.exe.part"
sh=DAE30C6C24C408BC0B6CCBBEE7BF27197608F877 ft=1 fh=3d940944e8e63d8c vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\S2JxgPQI.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\SB0hJVQI.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\VZTyZUX8.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\xsdQp2k4.exe.part"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\zjIQpr1d.exe.part"
sh=ED7355A316782251BCDBD3DEEDBF63CA9E2B4ADF ft=1 fh=ce9ba4db6ccdbbb2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\_0TO+UZf.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\_FEQJG8E.exe.part"
sh=1319E43292A3A582B3B05DC5CF7F95656D475929 ft=1 fh=fd8d028f3e2fa43e vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Mama\AppData\Local\Temp\_pORc5N2.exe.part"
         

Hier des SecurityCheck Text:

 Results of screen317's Security Check version 0.99.90  
 Windows 7 Service Pack 1 x86   
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Java(TM) 6 Update 33  
 Java 7 Update 51  
 Java version out of Date! 
 Adobe Flash Player 10 Flash Player out of Date! 
 Adobe Flash Player 	15.0.0.223  
 Adobe Reader XI  
 Mozilla Firefox 4.0 Firefox out of Date!  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Und abschließend noch FRST log:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-11-2014
Ran by Gerd (administrator) on GERD-PC on 21-11-2014 15:20:57
Running from C:\Users\Gerd\Desktop
Loaded Profiles: Gerd & Gerd_2 & Mama & UpdatusUser (Available profiles: Gerd & Gerd_2 & Mama & UpdatusUser)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Hewlett-Packard) D:\Programme\Standart\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(DT Soft Ltd) D:\Programme\Standart\DAEMON Tools Lite\DTLite.exe
(Hewlett-Packard Co.) D:\Programme\Standart\Digital Imaging\bin\hpqtra08.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Hewlett-Packard Co.) D:\Programme\Standart\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) D:\Programme\Standart\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) D:\Programme\Standart\Digital Imaging\bin\hpqgpc01.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HP Software Update] => D:\Programme\Standart\HP\HP Software Update\HPWuSchd2.exe [54576 2009-11-18] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [CheckPoint Cleanup] => C:\Users\Gerd\AppData\Local\Temp\cpes_clean.exe [3948224 2010-06-28] (Check Point Software Technologies LTD) <===== ATTENTION
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKU\S-1-5-21-1485032287-1085400728-284724570-1000\...\Run: [DAEMON Tools Lite] => D:\Programme\Standart\DAEMON Tools Lite\DTLite.exe [369200 2009-10-30] (DT Soft Ltd)
HKU\S-1-5-21-1485032287-1085400728-284724570-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1485032287-1085400728-284724570-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1485032287-1085400728-284724570-1002\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1485032287-1085400728-284724570-1002\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> D:\Programme\Standart\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Gerd_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Gerd\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)
GroupPolicyUsers\S-1-5-21-1485032287-1085400728-284724570-1001\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1485032287-1085400728-284724570-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA0A616433473CA01
HKU\S-1-5-21-1485032287-1085400728-284724570-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> D:\Programme\Standart\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> D:\Programme\Standart\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\ouap97u5.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\ouap97u5.default\searchplugins\google-und-download-suche.xml
FF Extension: Adobe DLM (powered by getPlus(R)) - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\ouap97u5.default\Extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2010-01-22]
FF Extension: Adblock Plus - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\ouap97u5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-10-28]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - D:\Programme\Standart\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - D:\Programme\Standart\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-05-13]
FF StartMenuInternet: FIREFOX.EXE - C:\Eigene Programme\Mozilla Firefox\firefox.exe

Chrome: 
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2014-11-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [995064 2014-11-13] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [67360 2009-12-17] (NOS Microsystems Ltd.)
R3 hpqcxs08; D:\Programme\Standart\Digital Imaging\bin\hpqcxs08.dll [253568 2009-11-18] (Hewlett-Packard Co.)
R2 hpqddsvc; D:\Programme\Standart\Digital Imaging\bin\hpqddsvc.dll [137344 2009-11-18] (Hewlett-Packard Co.)
R2 HPSLPSVC; D:\Programme\Standart\Digital Imaging\bin\HPSLPSVC32.DLL [700032 2010-01-29] (Hewlett-Packard Co.)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-13] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37384 2014-10-09] (Avira Operations GmbH & Co. KG)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [16768 2011-04-08] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-03-22] () [File not signed]
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-12-13] (Avira GmbH)
U3 a5ucpzcz; C:\Windows\system32\Drivers\a5ucpzcz.sys [0 ] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-21 15:20 - 2014-11-21 15:22 - 00011210 _____ () C:\Users\Gerd\Desktop\FRST.txt
2014-11-21 15:20 - 2014-11-21 15:20 - 00000945 _____ () C:\Users\Gerd\Desktop\checkup.txt
2014-11-20 13:47 - 2014-11-20 13:47 - 00000000 ____D () C:\Windows\ERUNT
2014-11-20 13:29 - 2014-11-20 13:40 - 00000000 ____D () C:\AdwCleaner
2014-11-20 12:21 - 2014-11-21 15:20 - 00000000 ____D () C:\Users\Gerd\Desktop\antimalware
2014-11-20 12:15 - 2014-11-20 12:16 - 00000190 _____ () C:\Users\Gerd\Desktop\Forum.url
2014-11-20 12:14 - 2014-11-20 12:14 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-20 12:14 - 2014-11-20 12:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-20 12:14 - 2014-11-20 12:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-20 12:14 - 2014-11-20 12:14 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-11-20 12:14 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-20 12:14 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-20 12:14 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-19 11:52 - 2014-11-19 11:54 - 132469808 _____ (AVAST Software) C:\Users\Gerd\Downloads\avast_free_antivirus_setup_10.2208.712.exe
2014-11-19 11:46 - 2014-11-19 11:48 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-11-19 11:46 - 2014-11-19 11:46 - 00001993 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-11-19 11:45 - 2014-11-19 11:45 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-11-19 11:45 - 2014-11-19 11:45 - 00000000 ____D () C:\Program Files\Adobe
2014-11-19 11:45 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 11:45 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-18 12:37 - 2014-11-21 15:21 - 00000000 ____D () C:\FRST
2014-11-18 12:36 - 2014-11-18 12:36 - 01108992 _____ (Farbar) C:\Users\Gerd\Desktop\FRST.exe
2014-11-12 18:52 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 18:52 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 18:52 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 18:51 - 2014-11-05 18:50 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 18:51 - 2014-11-05 18:50 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 18:51 - 2014-11-05 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 18:51 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 18:51 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 18:51 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 18:51 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 18:51 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 18:51 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 18:51 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 18:50 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 18:50 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 18:50 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 18:50 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 18:50 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 09:02 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 09:02 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 09:02 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 09:02 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 09:02 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 09:02 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 09:02 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 09:02 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 09:02 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 09:02 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 09:02 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 09:02 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 09:02 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 09:02 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 09:02 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 09:02 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 09:02 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 09:02 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 09:02 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 09:02 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 09:02 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 09:02 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 09:02 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 09:02 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 09:02 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 09:02 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 09:02 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 09:01 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 09:01 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 09:01 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-21 14:48 - 2014-01-24 08:37 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-21 12:56 - 2009-11-30 20:33 - 01387995 _____ () C:\Windows\WindowsUpdate.log
2014-11-21 11:41 - 2009-07-14 05:34 - 00023152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-21 11:41 - 2009-07-14 05:34 - 00023152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-21 11:32 - 2012-11-18 18:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-21 11:32 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-21 11:32 - 2009-07-14 05:39 - 00152652 _____ () C:\Windows\setupact.log
2014-11-20 13:41 - 2009-12-01 19:37 - 00074302 _____ () C:\Windows\PFRO.log
2014-11-19 11:45 - 2010-01-22 11:56 - 00000000 ____D () C:\ProgramData\Adobe
2014-11-19 11:44 - 2009-11-30 21:20 - 00000000 ____D () C:\Eigene Programme
2014-11-19 11:42 - 2010-09-25 11:01 - 00000000 ____D () C:\Users\Gerd\AppData\Local\Adobe
2014-11-19 11:32 - 2010-01-18 16:10 - 00113840 _____ () C:\Users\Gerd\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-16 17:23 - 2009-11-30 21:09 - 01648036 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-14 13:45 - 2014-08-15 08:07 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-14 13:44 - 2014-08-15 08:08 - 00001099 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-11-14 13:44 - 2013-12-13 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-14 13:44 - 2013-12-13 19:46 - 00000000 ____D () C:\Program Files\Avira
2014-11-14 08:42 - 2013-12-12 08:38 - 00000000 ____D () C:\Windows\rescache
2014-11-13 11:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-13 11:32 - 2010-01-22 14:37 - 00113840 _____ () C:\Users\Mama\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-13 09:25 - 2009-07-14 05:33 - 00426200 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 09:22 - 2014-05-06 07:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-13 09:22 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-13 08:50 - 2012-11-12 17:07 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-13 08:32 - 2009-12-03 16:34 - 00113840 _____ () C:\Users\Gerd_2\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-12 18:56 - 2013-08-14 08:21 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 18:49 - 2009-12-01 20:18 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 08:49 - 2012-07-09 04:30 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-12 08:49 - 2012-07-09 04:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-04 14:30 - 2009-11-30 21:20 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Files to move or delete:
====================
C:\Users\Gerd\AppData\Local\Temp\cpes_clean.exe


Some content of TEMP:
====================
C:\Users\Gerd\AppData\Local\Temp\AskSLib.dll
C:\Users\Gerd\AppData\Local\Temp\avgnt.exe
C:\Users\Gerd\AppData\Local\Temp\cpes_clean.exe
C:\Users\Gerd\AppData\Local\Temp\cpes_clean_launcher.exe
C:\Users\Gerd\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe
C:\Users\Gerd\AppData\Local\Temp\IPx86_1031.exe
C:\Users\Gerd\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\Gerd\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe
C:\Users\Gerd\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Gerd\AppData\Local\Temp\ose00000.exe
C:\Users\Gerd\AppData\Local\Temp\Quarantine.exe
C:\Users\Gerd\AppData\Local\Temp\sqlite3.dll
C:\Users\Gerd\AppData\Local\Temp\vsinit.dll
C:\Users\Gerd\AppData\Local\Temp\vsutil.dll
C:\Users\Gerd\AppData\Local\Temp\ytb.exe
C:\Users\Gerd\AppData\Local\Temp\zauninst.exe
C:\Users\Gerd_2\AppData\Local\Temp\AskSLib.dll
C:\Users\Gerd_2\AppData\Local\Temp\avgnt.exe
C:\Users\Gerd_2\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwtkwq9.dll
C:\Users\Gerd_2\AppData\Local\Temp\DSP.dll
C:\Users\Gerd_2\AppData\Local\Temp\FileSystemView.dll
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate01.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate02.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate03.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate04.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate05.exe
C:\Users\Gerd_2\AppData\Local\Temp\FlashPlayerUpdate06.exe
C:\Users\Gerd_2\AppData\Local\Temp\FP_PL_PFS_INSTALLER-1.exe
C:\Users\Gerd_2\AppData\Local\Temp\FP_PL_PFS_INSTALLER-2.exe
C:\Users\Gerd_2\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe
C:\Users\Gerd_2\AppData\Local\Temp\jre-1.6.0_20-windows-i586-iftw.exe_90744722.exe
C:\Users\Gerd_2\AppData\Local\Temp\jre-6u20-windows-i586-jinstall_uac.exe
C:\Users\Mama\AppData\Local\Temp\AskSLib.dll
C:\Users\Mama\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-15 11:45

==================== End Of Log ============================
         

--- --- ---


und das Additional Log:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-11-2014
Ran by Gerd at 2014-11-21 15:23:05
Running from C:\Users\Gerd\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 6.1.2 - Hewlett-Packard) Hidden
ACDSee Pro 3 (HKLM\...\{1B280FAF-AE10-4E31-A41A-DB3917D651DC}) (Version: 3.0.386 - ACD Systems International Inc.)
Adobe Download Manager (HKLM\...\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}) (Version: 1.6.2.60 - NOS Microsystems Ltd.)
Adobe Flash Player 10 ActiveX (HKLM\...\{922E8525-AC7E-4294-ACAA-43712D4423C0}) (Version: 10.0.22.87 - Adobe Systems, Inc.)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Avira (HKLM\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
B209a-m (Version: 140.0.690.000 - Hewlett-Packard) Hidden
BufferChm (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Destinations (Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Die 15 beliebtesten Kartenspiele (HKLM\...\Die 15 beliebtesten Kartenspiele_is1) (Version:  - madcat Software GmbH)
Dropbox (HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
Free Audio CD Burner version 1.4 (HKLM\...\Free Audio CD Burner_is1) (Version:  - DVDVideoSoft Limited.)
Free YouTube to MP3 Converter version 3.8 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Limited.)
GPBaseService2 (Version: 140.0.211.000 - Hewlett-Packard) Hidden
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart Plus B209a-m All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{B2DAB009-8236-48A0-AD7F-E940F5AB1578}) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM\...\{74DC0593-6BC6-4001-AD5F-D810AFB68D86}) (Version: 5.002.002.002 - Hewlett-Packard)
HPPhotoGadget (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java(TM) 6 Update 33 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216032FF}) (Version: 6.0.330 - Oracle)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.1.1 (x86 de) (HKU\S-1-5-21-1485032287-1085400728-284724570-1001\...\Mozilla Firefox 33.1.1 (x86 de)) (Version: 33.1.1 - Mozilla)
Mozilla Firefox 4.0 (x86 de) (HKLM\...\Mozilla Firefox 4.0 (x86 de)) (Version: 4.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network (Version: 140.0.215.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Treiber 306.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 306.97 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA Grafiktreiber 306.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 306.97 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
PS_AIO_06_B209a-m_SW_Min (Version: 140.0.690.000 - Hewlett-Packard) Hidden
QuickTransfer (Version: 140.0.98.000 - Hewlett-Packard) Hidden
Scan (Version: 140.0.80.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SmartWebPrinting (Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Status (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Toolbox (Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
WebReg (Version: 140.0.212.017 - Hewlett-Packard) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1485032287-1085400728-284724570-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Gerd_2\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1485032287-1085400728-284724570-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gerd_2\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1485032287-1085400728-284724570-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gerd_2\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1485032287-1085400728-284724570-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gerd_2\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1485032287-1085400728-284724570-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gerd_2\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Restore Points  =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {6A793A3D-F435-4FCD-90CF-4F33F415517B} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1485032287-1085400728-284724570-1002
Task: {9F953133-6851-44AC-8A61-2A9CE2DED29D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12] (Adobe Systems Incorporated)
Task: {F8FEBA44-E159-4779-8059-0C0D2FAD1E0E} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-11-18 18:38 - 2012-10-02 20:28 - 00079208 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:C31F31E6
AlternateDataStreams: C:\Users\Gerd\Desktop\Rechnung 2712.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Gerd\Desktop\Rechnung 2712.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Gerd^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.1.lnk => C:\Windows\pss\OpenOffice.org 3.1.lnk.Startup
MSCONFIG\startupreg: ICQ => "D:\Programme\Standart\ICQ7.0\ICQ.exe" silent loginmode=4

========================= Accounts: ==========================

Administrator (S-1-5-21-1485032287-1085400728-284724570-500 - Administrator - Disabled)
Gast (S-1-5-21-1485032287-1085400728-284724570-501 - Limited - Disabled)
Gerd (S-1-5-21-1485032287-1085400728-284724570-1000 - Administrator - Enabled) => C:\Users\Gerd
Gerd_2 (S-1-5-21-1485032287-1085400728-284724570-1001 - Limited - Enabled) => C:\Users\Gerd_2
Mama (S-1-5-21-1485032287-1085400728-284724570-1002 - Limited - Enabled) => C:\Users\Mama
UpdatusUser (S-1-5-21-1485032287-1085400728-284724570-1003 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============

Name: Photosmart Plus B209a-m
Description: Photosmart Plus B209a-m
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Plus B209a-m
Description: Photosmart Plus B209a-m
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Coprozessor
Description: Coprozessor
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (11/21/2014 01:47:00 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: Intel(R) Atom(TM) CPU 230 @ 1.60GHz
Percentage of memory in use: 33%
Total physical RAM: 3071.18 MB
Available physical RAM: 2031.07 MB
Total Pagefile: 6140.64 MB
Available Pagefile: 4895.52 MB
Total Virtual: 2047.88 MB
Available Virtual: 1913.39 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:53.74 GB) (Free:14.61 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:80.65 GB) (Free:58.54 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: F66F8B5B)
Partition 1: (Not Active) - (Size=14.7 GB) - (Type=27)
Partition 2: (Active) - (Size=53.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=80.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Java, Flash und Firefox updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\$Recycle.Bin
Emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Damit sind die ESET Funde weg. Noch Probleme?

Hi,

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 23-11-2014
Ran by Gerd at 2014-11-24 13:39:51 Run:1
Running from C:\Users\Gerd\Desktop
Loaded Profiles: Gerd & UpdatusUser (Available profiles: Gerd & Gerd_2 & Mama & UpdatusUser)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
C:\$Recycle.Bin
Emptytemp:
*****************

C:\$Recycle.Bin => Moved successfully.
EmptyTemp: => Removed 3 GB temporary data.


The system needed a reboot. 

==== End of Fixlog ====
         

Danke soweit keine Probleme mehr. Updates hab ich auch alle gemacht. Des einzige was streikt is JAVA. Hier will ich immer das update herunterladen und installieren. Entweder wird mir angezeigt, dass die aktuelle Version bereits installiert ist oder es kommt der Hinweis dass nichts heruntergeladen werden kann.

Java komplett deinstallieren, dann die aktuelle Version 8 installieren.


Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Hallo Schrauber,

soweit alles wieder deinstalliert und geupdatet. Vielen Dank für deine schnelle und kompetente Hilfe.

Gruß

Rati

Gern Geschehen