Windows 7: compatibilitycheck.exe erscheint unaufgefordert und nutzt PC Leistung

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-01-2015
Ran by David Engel (administrator) on DAVID on 21-01-2015 21:25:34
Running from C:\Users\David Engel\Desktop
Loaded Profiles: David Engel (Available profiles: David Engel)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(T-Systems International GmbH) C:\Program Files\T-Home\Dialerschutz-Software\DFInject.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
() C:\FRST\Quarantine\C\Users\Default\AppData\Roaming\Compatibility Verifier\compatibilitychecksvc.exe.xBAD
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(T-Systems International GmbH) C:\Program Files\T-Home\Dialerschutz-Software\Defender.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Spotify Ltd) C:\Users\David Engel\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Dropbox, Inc.) C:\Users\David Engel\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [T-Home Dialerschutz-Software] => C:\Program Files\T-Home\Dialerschutz-Software\Defender.exe [1411720 2010-03-29] (T-Systems International GmbH)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6814240 2009-02-13] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-02-13] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AppleSyncNotifier] => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\Run: [RocketDock] => "C:\Program Files\RocketDock\RocketDock.exe"
HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.)
HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\Run: [MobileDocuments] => C:\Program Files\Common Files\Apple\Internet Services\ubd.exe
HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\Run: [Spotify Web Helper] => C:\Users\David Engel\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-13] (Spotify Ltd)
HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\MountPoints2: {7b16325e-30b4-11e1-9eb1-00265eb087d7} - F:\Autorun.exe
HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\MountPoints2: {8052ec9d-f8b4-11df-8b29-00265eb087d7} - F:\LaunchU3.exe -a
HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\MountPoints2: {8d6e4b71-f4d4-11df-9935-806e6f6e6963} - E:\AutoRun.exe
Startup: C:\Users\David Engel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\David Engel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000 -> {241EC647-646E-4DDF-9263-2F5111F019F6} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000 -> {34AEBC21-74EA-4AF2-9473-630C7A0F5BB7} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{58A12B80-1895-4C95-9F28-3D8660E0C185}: [NameServer] 223.0.0.0

FireFox:
========
FF ProfilePath: C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: 
FF NetworkProxy: "autoconfig_url", "data:application/x-ns-proxy-autoconfig;base64,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"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2508884068-3804397540-1067786986-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\David Engel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2508884068-3804397540-1067786986-1000: electronicarts.com/GameFacePlugin -> C:\Users\David Engel\AppData\Roaming\Electronic Arts\Game Face\npGameFacePlugin.dll (Electronic Arts)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default\Extensions\adblockpopups@jessehakanen.net.xpi [2014-12-09]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default\Extensions\elemhidehelper@adblockplus.org.xpi [2014-12-09]
FF Extension: MEGA - C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default\Extensions\firefox@mega.co.nz.xpi [2014-12-23]
FF Extension: ProxTube - C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default\Extensions\ich@maltegoetz.de.xpi [2014-09-11]
FF Extension: convert2mp3.net YouTube2MP3 Converter - C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default\Extensions\info@convert2mp3.net.xpi [2014-06-22]
FF Extension: NoScript - C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-12-09]
FF Extension: Flash Block - C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default\Extensions\{95ab36d4-fb6f-47b0-8b8d-e5f3bd547953}.xpi [2014-12-09]
FF Extension: Adblock Plus - C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-22]
FF Extension: Adblock Edge - C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-12-09]

Chrome: 
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 CouponarificService; C:\Program Files\0892CCEA-3029-46F2-BD98-F3177431F5F8\xtloowpkjv.exe [161280 2014-11-19] () [File not signed]
R2 DFSVC; C:\Program Files\T-Home\Dialerschutz-Software\DFInject.exe [288768 2009-10-21] (T-Systems International GmbH) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
R2 Themes; C:\Windows\system32\themeservice.dll [37376 2011-05-16] (Microsoft Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 OO SSD Migration Kit; "C:\Program Files\OO Software\SSD Migration Kit\oosmkag.exe" [X]
R2 Verifies and fixes application compatibility issues; C:\Users\Default\AppData\Roaming\Compatibility Verifier\compatibilitychecksvc.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 DFSYS; C:\Program Files\T-Home\Dialerschutz-Software\DFSYS.SYS [14624 2009-10-15] (T-Systems International GmbH)
S3 dsiarhwprog; C:\Windows\System32\Drivers\dsiarhwprog.sys [29184 2007-02-08] (Thesycon GmbH, Germany)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2010-02-03] (LogMeIn, Inc.)
R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2008-08-12] (SAMSUNG ELECTRONICS CO., LTD.)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [82648 2015-01-21] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R1 MpKslb5c991d7; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{175C28DB-FB44-4E1F-BB75-A33BF1418175}\MpKslb5c991d7.sys [39464 2015-01-21] (Microsoft Corporation)
R3 SipIMNDI; C:\Windows\System32\DRIVERS\SipIMNDI.sys [24352 2009-10-15] (T-Systems International GmbH)
R3 VMC326; C:\Windows\System32\Drivers\VMC326.sys [238464 2008-11-21] (Vimicro Corporation)
S3 BioNTDrv; \??\C:\Program Files\Paragon Software\Migrate OS to SSD 4.0\program\BioNTDrv.SYS [X]
S1 netfilter2; system32\drivers\netfilter2.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-21 20:44 - 2015-01-21 20:44 - 00005375 _____ () C:\Users\David Engel\Desktop\fixlist.txt
2015-01-21 20:16 - 2015-01-21 20:16 - 00002620 _____ () C:\Users\David Engel\Desktop\JRT.txt
2015-01-21 20:00 - 2015-01-21 20:00 - 00000000 ____D () C:\Windows\ERUNT
2015-01-21 19:59 - 2015-01-21 19:59 - 01707939 _____ (Thisisu) C:\Users\David Engel\Desktop\JRT.exe
2015-01-21 19:54 - 2015-01-21 19:54 - 00000000 ____D () C:\Program Files\Couponarific
2015-01-21 19:50 - 2015-01-21 19:52 - 00000000 ____D () C:\AdwCleaner
2015-01-21 19:49 - 2015-01-21 19:49 - 02186752 _____ () C:\Users\David Engel\Desktop\AdwCleaner_4.108.exe
2015-01-21 16:53 - 2015-01-21 18:13 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-01-21 16:53 - 2015-01-21 18:03 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-21 16:53 - 2015-01-21 16:53 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-21 16:52 - 2015-01-21 16:52 - 00082648 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-21 16:51 - 2015-01-21 18:13 - 00000000 ____D () C:\Users\David Engel\Desktop\mbar
2015-01-21 16:47 - 2015-01-21 19:53 - 00001316 _____ () C:\Windows\PFRO.log
2015-01-21 13:29 - 2015-01-21 13:29 - 16466552 _____ (Malwarebytes Corp.) C:\Users\David Engel\Desktop\mbar-1.08.3.1004.exe
2015-01-21 11:13 - 2015-01-21 11:13 - 00004734 _____ () C:\Users\David Engel\Desktop\Gmer.log
2015-01-21 11:00 - 2015-01-21 11:00 - 00380416 _____ () C:\Users\David Engel\Desktop\Gmer-19357.exe
2015-01-21 10:54 - 2015-01-21 20:29 - 00024681 _____ () C:\Users\David Engel\Desktop\Addition.txt
2015-01-21 10:52 - 2015-01-21 21:25 - 00013197 _____ () C:\Users\David Engel\Desktop\FRST.txt
2015-01-21 10:52 - 2015-01-21 21:25 - 00000000 ____D () C:\FRST
2015-01-21 10:51 - 2015-01-21 10:51 - 01118208 _____ (Farbar) C:\Users\David Engel\Desktop\FRST.exe
2015-01-21 10:49 - 2015-01-21 11:21 - 00000486 _____ () C:\Users\David Engel\Desktop\defogger_disable.log
2015-01-21 10:49 - 2015-01-21 10:49 - 00000000 _____ () C:\Users\David Engel\defogger_reenable
2015-01-21 10:47 - 2015-01-21 10:47 - 00050477 _____ () C:\Users\David Engel\Desktop\Defogger.exe
2015-01-21 10:22 - 2015-01-21 19:53 - 00000392 _____ () C:\Windows\setupact.log
2015-01-21 10:22 - 2015-01-21 10:22 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-20 17:30 - 2015-01-21 16:47 - 00000000 ____D () C:\Program Files\Avira
2015-01-17 12:12 - 2015-01-17 12:13 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-01-14 12:05 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 12:05 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 12:05 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-01-14 12:05 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 12:05 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 12:05 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-11 17:59 - 2015-01-11 17:59 - 00000641 _____ () C:\Users\David Engel\Desktop\Bilder.lnk
2015-01-10 20:21 - 2015-01-10 20:21 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Adobe
2015-01-10 20:21 - 2015-01-10 20:21 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Adobe
2015-01-08 13:32 - 2015-01-21 13:08 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-08 13:30 - 2015-01-21 20:56 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Compatibility Verifier
2015-01-08 13:30 - 2015-01-21 20:56 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Compatibility Verifier
2014-12-25 15:49 - 2014-12-25 15:49 - 00000000 ____D () C:\Users\David Engel\AppData\Roaming\EurekaLab s.a.s
2014-12-23 21:17 - 2014-12-23 21:17 - 00000320 _____ () C:\Users\David Engel\Desktop\Magic The Gathering Online .appref-ms
2014-12-23 21:17 - 2014-12-23 21:17 - 00000000 ____D () C:\Users\David Engel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wizards of the Coast
2014-12-23 21:17 - 2014-12-23 21:17 - 00000000 ____D () C:\Users\David Engel\AppData\Local\Wizards of the Coast
2014-12-23 21:17 - 2014-12-23 21:17 - 00000000 ____D () C:\ProgramData\Gibraltar
2014-12-23 21:14 - 2014-12-30 22:43 - 00000000 ____D () C:\Users\David Engel\AppData\Local\Deployment

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-21 20:44 - 2013-10-19 17:40 - 00000000 ____D () C:\Users\David Engel\AppData\Local\CRE
2015-01-21 20:44 - 2010-11-25 22:29 - 00000000 ____D () C:\Users\David Engel\AppData\Roaming\DVDVideoSoft
2015-01-21 20:44 - 2010-11-20 19:58 - 00000000 ____D () C:\Users\David Engel
2015-01-21 20:28 - 2013-11-04 19:39 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-21 20:02 - 2009-07-14 05:34 - 00023392 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-21 20:02 - 2009-07-14 05:34 - 00023392 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-21 20:00 - 2012-07-07 22:42 - 00000000 ____D () C:\Users\David Engel\AppData\Roaming\Dropbox
2015-01-21 19:58 - 2010-11-20 19:55 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-21 19:58 - 2010-11-20 19:36 - 01906315 _____ () C:\Windows\WindowsUpdate.log
2015-01-21 19:53 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-21 19:49 - 2011-01-01 20:36 - 00000000 ____D () C:\Users\David Engel\AppData\Roaming\vlc
2015-01-21 17:47 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\addins
2015-01-21 12:33 - 2012-08-02 11:31 - 00000000 ____D () C:\Users\David Engel\AppData\Roaming\Spotify
2015-01-21 10:22 - 2009-07-14 05:33 - 00496744 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-20 17:52 - 2010-11-20 20:57 - 00155032 _____ () C:\Users\David Engel\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-20 17:10 - 2010-11-21 20:48 - 00000000 ____D () C:\Users\David Engel\AppData\Roaming\WD
2015-01-20 17:10 - 2010-11-21 20:48 - 00000000 ____D () C:\Program Files\Common Files\Memeo
2015-01-19 22:16 - 2011-07-31 12:54 - 00000000 ____D () C:\Users\David Engel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-01-19 19:25 - 2012-08-02 11:31 - 00000000 ____D () C:\Users\David Engel\AppData\Local\Spotify
2015-01-17 16:27 - 2014-06-22 13:27 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-01-15 14:20 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-01-15 12:28 - 2012-03-30 13:30 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-01-15 12:28 - 2011-05-20 05:59 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-14 13:14 - 2013-08-15 15:42 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 13:10 - 2010-11-20 21:57 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-12 18:25 - 2010-12-11 19:19 - 00000000 ____D () C:\Program Files\Magic Workstation
2015-01-12 18:24 - 2010-11-20 21:27 - 00000000 ____D () C:\Program Files\CyberLink
2015-01-12 18:24 - 2010-11-20 20:51 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-01-12 18:18 - 2010-11-20 21:26 - 00000000 ____D () C:\ProgramData\CyberLink
2015-01-12 18:10 - 2010-12-03 22:03 - 00000000 ____D () C:\Users\David Engel\AppData\Roaming\CyberLink
2015-01-11 18:21 - 2010-12-28 14:37 - 00000000 ____D () C:\Users\David Engel\AppData\Local\Google
2015-01-11 18:21 - 2010-12-28 14:37 - 00000000 ____D () C:\Program Files\Google
2015-01-09 10:23 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-31 12:13 - 2010-11-20 20:24 - 00249488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-12-25 14:42 - 2009-07-14 05:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-12-23 21:14 - 2011-01-27 20:43 - 00000000 ____D () C:\Users\David Engel\AppData\Local\Apps\2.0

==================== Files in the root of some directories =======
2011-08-31 16:21 - 2011-09-04 19:09 - 0000000 ____H () C:\Users\David Engel\AppData\Roaming\windrvconfig.txt
2011-11-19 20:02 - 2011-11-26 16:50 - 0010240 _____ () C:\Users\David Engel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-21 23:24 - 2011-07-21 23:24 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2011-08-26 21:06 - 2011-08-27 13:32 - 0007246 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-16 21:02

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 19-01-2015
Ran by David Engel at 2015-01-21 21:26:00
Running from C:\Users\David Engel\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

2007 Microsoft Office system (HKLM\...\PROHYBRIDR) (Version: 12.0.6612.1000 - Microsoft Corporation)
32 Bit HP CIO Components Installer (Version: 6.1.1 - Hewlett-Packard) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 2.3 - Samsung Electronics Co., Ltd.)
Easy Network Manager (HKLM\...\{A7581D39-EA20-4883-A480-80C21047052B}) (Version: 4.0.2 - Samsung)
Free Video to iPhone Converter version 3.2.12 (HKLM\...\Free Video to iPhone Converter_is1) (Version:  - DVDVideoSoft Limited.)
Free YouTube Download version 3.1.37.918 (HKLM\...\Free YouTube Download_is1) (Version: 3.1.37.918 - DVDVideoSoft Ltd.)
iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Magic The Gathering Online  (HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\35c9d60442fbb010) (Version: 3.4.83.467 - Wizards of the Coast)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
MobileMe Control Panel (HKLM\...\{926BD0E8-24A3-41D2-AF9B-340F1A37ED12}) (Version: 3.1.8.0 - Apple Inc.)
Mozilla Firefox 35.0 (x86 de) (HKLM\...\Mozilla Firefox 35.0 (x86 de)) (Version: 35.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Namuga 1.3M Webcam (HKLM\...\{71A51B59-E7D3-11DB-A386-005056C00008}) (Version: 1.00.0000 - Vimicro Corporation)
Opera 12.17 (HKLM\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5791 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung Recovery Solution III (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 3.0.0.8 - Samsung)
Samsung Update Plus (HKLM\...\InstallShield_{A5F483F0-2D79-4FCA-AE09-D0D96E23EBF7}) (Version: 2.0 - Samsung Electronics Co., LTD)
Samsung Update Plus (Version: 2.0 - Samsung Electronics Co., LTD) Hidden
Spotify (HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
T-Home Dialerschutz-Software (HKLM\...\{E8C5BD56-F5D8-41D3-8A71-273468FE256A}) (Version:  - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WD Discovery Software (HKLM\...\{324F388E-4F28-42D6-ADD1-9AB27D249523}) (Version: 1.70 - Western Digital)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\David Engel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\David Engel\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{CBD32ACD-3033-5DC4-AF3E-A32955785032}\InprocServer32 -> C:\Users\David Engel\AppData\Roaming\Electronic Arts\Game Face\npGameFacePlugin.dll (Electronic Arts)
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David Engel\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David Engel\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David Engel\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David Engel\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David Engel\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David Engel\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David Engel\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2508884068-3804397540-1067786986-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David Engel\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

18-01-2015 13:12:32 Windows Update
20-01-2015 17:43:26 Avira System Speedup 1.5
21-01-2015 17:45:37 Malwarebytes Anti-Rootkit Restore Point
21-01-2015 18:22:54 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-01-21 20:45 - 2015-01-21 20:45 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {019E612F-B8F3-415B-8EAD-4AC47C01275C} - System32\Tasks\{E00C48C4-87C3-49CA-B00D-268CB9C644A1} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files\Datel\Action Replay Code Manager\ActionReplayCodeManager.exe"
Task: {1CC0017D-A4BA-4373-BC62-1C80719E4D4A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {8B268604-D0B2-477C-BE61-BA0AEB68A949} - System32\Tasks\{26F5BD3E-F422-4FAA-9FD1-D56CAAF3AD57} => pcalua.exe -a "C:\Program Files\Common Files\DVDVideoSoft\Uninstall.exe"
Task: {A03FF811-E18E-48D3-8B7E-A45553F7B140} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-15] (Adobe Systems Incorporated)
Task: {CA5E6FDD-DEE3-472B-A779-DC221523F209} - System32\Tasks\{A36728D1-C91B-49A3-8728-BABA5743CED5} => pcalua.exe -a "D:\Sonstiges\European Code Manager PC software\Setup.exe" -d "D:\Sonstiges\European Code Manager PC software"
Task: {D3F11C58-6191-4441-B9CD-A3DD00302089} - System32\Tasks\{44221F18-D3DE-4777-9286-F3A22E0BBC24} => C:\Program Files\Skype\\Phone\Skype.exe
Task: {EA27474F-86DD-43D8-A893-780467D1161C} - System32\Tasks\{2BF3C3A4-A032-46D5-8E6C-20C23974797E} => c:\program files\opera\opera.exe [2014-04-27] (Opera Software)
Task: {EF961023-A4AB-4ACC-BC3D-B1DB17149720} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2009-05-15] (Samsung Electronics Co., Ltd.)
Task: {F514247D-FC72-4E10-99A0-DBBE91B7BE72} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2008-12-03] ()

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-08-19 21:09 - 2010-06-17 20:56 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2009-09-01 05:31 - 2009-09-01 05:31 - 00022723 _____ () C:\Windows\System32\ssp2ml3.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 12:05 - 2014-10-11 12:05 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2010-11-21 02:01 - 2006-08-12 12:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00750080 _____ () C:\Users\David Engel\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00047616 _____ () C:\Users\David Engel\AppData\Roaming\Dropbox\bin\libEGL.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00863744 _____ () C:\Users\David Engel\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00200704 _____ () C:\Users\David Engel\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2010-11-21 02:20 - 2009-12-12 15:12 - 00141824 _____ () C:\Program Files\WinRAR\rarext.dll
2015-01-17 12:12 - 2015-01-17 12:13 - 03925104 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-2508884068-3804397540-1067786986-500 - Administrator - Disabled)
David Engel (S-1-5-21-2508884068-3804397540-1067786986-1000 - Administrator - Enabled) => C:\Users\David Engel
Gast (S-1-5-21-2508884068-3804397540-1067786986-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2508884068-3804397540-1067786986-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2015-01-21 17:32:07.272
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-20 18:10:24.050
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-14 12:05:07.496
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-13 21:48:54.378
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-13 20:44:39.625
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-13 20:12:56.550
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-13 20:01:59.492
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-12 17:27:42.457
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-09 10:11:24.501
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-07 13:47:45.441
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\T-Home\Dialerschutz-Software\df.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU T6400 @ 2.00GHz
Percentage of memory in use: 34%
Total physical RAM: 3036.61 MB
Available physical RAM: 2002.36 MB
Total Pagefile: 6069.46 MB
Available Pagefile: 4678.73 MB
Total Virtual: 2047.88 MB
Available Virtual: 1900.51 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:142.09 GB) (Free:47.51 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Volume) (Fixed) (Total:96.38 GB) (Free:10.76 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 238.5 GB) (Disk ID: 91AC48D6)
Partition 1: (Active) - (Size=142.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=96.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================