Trojan.Agent.ED entfernen

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-01-2015 01
Ran by Rudi (administrator) on RUDI-PC on 25-01-2015 12:18:21
Running from C:\Users\Rudi\Desktop
Loaded Profiles: Rudi (Available profiles: Rudi & Bernd & Claudia & Gast & DefaultAppPool)
Platform: Windows 7 Professional Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
(Siber Systems) C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1856912 2015-01-20] (Bitdefender)
HKU\S-1-5-21-2797027529-1437328937-854131943-1000\...\Run: [RoboForm] => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110160 2014-11-28] (Siber Systems)
Startup: C:\Users\Rudi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\28634BB7F.lnk
ShortcutTarget: 28634BB7F.lnk -> C:\PROGRA~2\F7BB43682.cpp (No File)
BootExecute: "autocheck autochk * "

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-2797027529-1437328937-854131943-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-2797027529-1437328937-854131943-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://web.de/
SearchScopes: HKU\S-1-5-21-2797027529-1437328937-854131943-1000 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = https://www.google.com/search?q={searchTerms}&rlz=1I7GGHP_deDE476
SearchScopes: HKU\S-1-5-21-2797027529-1437328937-854131943-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2797027529-1437328937-854131943-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = https://www.google.com/search?q={searchTerms}&rlz=1I7GGHP_deDE476
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
Toolbar: HKU\S-1-5-21-2797027529-1437328937-854131943-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-2797027529-1437328937-854131943-1000 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKU\S-1-5-21-2797027529-1437328937-854131943-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {BAD4FE2C-503B-45CC-88CD-4B0574057D11} hxxp://clients.futuremark.com/calico/systeminfodeploy/FMSI_v460.cab
DPF: {E4CF4E86-D0DC-4864-8F0E-4F6EA2526334} https://img.ui-portal.de/webde/smartdrive/activex/mmwebde_osupload_2002.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\bdwteff [2014-07-23]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2014-07-23]
FF HKU\S-1-5-21-2797027529-1437328937-854131943-1000\...\Firefox\Extensions: [{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}] - C:\Users\Rudi\AppData\Roaming\14001.019
FF Extension: Java Link Helper - C:\Users\Rudi\AppData\Roaming\14001.019 [2012-08-30]
FF HKU\S-1-5-21-2797027529-1437328937-854131943-1000\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files\Siber Systems\AI RoboForm\Firefox [2012-02-08]

Chrome: 
=======
CHR HomePage: Default -> hxxp://google.de/
CHR StartupUrls: Default -> "hxxp://google.de/"
CHR Profile: C:\Users\Rudi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Rudi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-04]
CHR Extension: (YouTube) - C:\Users\Rudi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-05]
CHR Extension: (Google-Suche) - C:\Users\Rudi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-05]
CHR Extension: (Google Wallet) - C:\Users\Rudi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Google Mail) - C:\Users\Rudi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-05]
CHR Extension: (RoboForm) - C:\Users\Rudi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2014-02-08]
CHR HKLM\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - No Path
CHR HKLM\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-02-08]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [69880 2015-01-20] (Bitdefender)
S4 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-02-05] (Teruten) [File not signed]
R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [310272 2012-06-01] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [45272 2005-10-14] (Microsoft Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [786256 2014-07-15] (Nero AG)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [54424 2014-11-24] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1306416 2015-01-20] (Bitdefender)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 Winmgmt; C:\PROGRA~2\F7BB43682.cpp [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\System32\drivers\AsIO.sys [12400 2007-12-17] ()
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1073160 2014-11-24] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [244480 2014-11-24] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [528248 2014-08-27] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [77632 2013-11-13] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [93648 2012-10-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [108008 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [66832 2015-01-20] (BitDefender SRL)
R1 bdselfpr; C:\Program Files\Bitdefender\Bitdefender 2015\bdselfpr.sys [135600 2013-07-26] (BitDefender LLC)
R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [26248 2012-11-01] (EldoS Corporation)
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] () [File not signed]
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [File not signed]
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [169992 2015-01-20] (BitDefender LLC)
R3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [99968 2009-02-08] (Guillemot Corporation)
S3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [30360 2011-09-02] (Logitech, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2015-01-25] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-10-01] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [13216 2009-07-16] ()
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3482112 2009-04-22] ()
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [184192 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-09-13] (The OpenVPN Project)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [408280 2014-11-24] (BitDefender S.R.L.)
S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2012-12-13] (Apple, Inc.) [File not signed]
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam.sys [11520 2011-02-16] (Western Digital Technologies) [File not signed]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X]
S0 PxHelp20; System32\Drivers\PxHelp20.sys [X]
S0 TfFsMon; system32\drivers\TfFsMon.sys [X]
S3 TfNetMon; \??\C:\Windows\system32\drivers\TfNetMon.sys [X]
S0 TFSysMon; system32\drivers\TfSysMon.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-25 12:18 - 2015-01-25 12:18 - 00014538 _____ () C:\Users\Rudi\Desktop\FRST.txt
2015-01-25 12:18 - 2015-01-25 12:18 - 00000000 ____D () C:\FRST
2015-01-25 12:16 - 2015-01-25 12:16 - 01120768 _____ (Farbar) C:\Users\Rudi\Desktop\FRST.exe
2015-01-25 12:08 - 2015-01-25 12:08 - 00000242 _____ () C:\Users\Rudi\Desktop\defogger_enable.log
2015-01-25 12:07 - 2015-01-25 12:08 - 00000470 _____ () C:\Users\Rudi\Desktop\defogger_disable.log
2015-01-25 12:06 - 2015-01-25 12:06 - 00050477 _____ () C:\Users\Rudi\Desktop\Defogger.exe
2015-01-25 10:43 - 2015-01-25 10:43 - 01059840 _____ () C:\Users\Rudi\Downloads\MicrosoftFixit50981.msi
2015-01-25 09:51 - 2015-01-25 11:03 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-01-25 09:46 - 2015-01-25 11:03 - 00000000 ____D () C:\Users\Rudi\Desktop\mbar
2015-01-25 09:45 - 2015-01-25 09:45 - 16466552 _____ (Malwarebytes Corp.) C:\Users\Rudi\Downloads\mbar-1.08.3.1004.exe
2015-01-25 09:19 - 2015-01-25 09:19 - 00002936 _____ () C:\Users\Rudi\Desktop\startup.txt
2015-01-24 20:45 - 2015-01-24 01:21 - 520740162 _____ () C:\Users\Rudi\Downloads\Ouija - Spiel nicht mit dem Teufel.mkv
2015-01-24 20:28 - 2015-01-24 00:01 - 1538394580 _____ () C:\Users\Rudi\Downloads\pso-96.hours.web_sd.mkv
2015-01-21 21:46 - 2015-01-21 21:46 - 00000000 ____D () C:\ProgramData\ATI
2015-01-21 21:45 - 2015-01-25 11:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-21 21:45 - 2015-01-21 21:45 - 00054924 _____ () C:\Windows\system32\CCCInstall_201501212145483493.log
2015-01-21 21:30 - 2015-01-21 21:30 - 00051059 _____ () C:\Windows\system32\CCCInstall_201501212130448208.log
2015-01-21 19:57 - 2015-01-21 10:58 - 1521195008 _____ () C:\Users\Rudi\Downloads\GAmbLeR.de.avi
2015-01-20 17:12 - 2015-01-20 17:12 - 00074000 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2015-01-20 17:12 - 2015-01-20 17:12 - 00066832 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2015-01-20 17:12 - 2015-01-20 17:12 - 00026624 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2015-01-16 19:47 - 2015-01-13 21:48 - 904988692 _____ () C:\Users\Rudi\Downloads\Herz aus Stahl .mkv
2015-01-15 18:47 - 2014-12-11 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 22:12 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 22:12 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 22:12 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-01-14 22:12 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 22:12 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-13 17:37 - 2015-01-13 17:38 - 00000000 ____D () C:\Users\Rudi\Downloads\Sag, dass du mich liebst
2015-01-12 20:38 - 2015-01-12 20:39 - 07718224 _____ (TeamViewer GmbH) C:\Users\Claudia\Downloads\TeamViewer_Setup_de-hse.exe
2015-01-11 19:29 - 2014-08-25 17:27 - 00000000 ____D () C:\Users\Rudi\Downloads\Wildes.Land.S01E04.Tod.in.Montana.German.FS.BDRiP.x264-iFPD
2015-01-11 19:27 - 2014-08-25 16:59 - 00000000 ____D () C:\Users\Rudi\Downloads\Wildes.Land.S01E03.Das.Erbe.German.FS.BDRiP.x264-iFPD
2015-01-11 19:25 - 2014-08-25 16:25 - 00000000 ____D () C:\Users\Rudi\Downloads\Wildes.Land.S01E02.Zwischen.den.Fronten.German.FS.BDRiP.x264-iFPD
2015-01-11 19:24 - 2014-08-25 15:49 - 00000000 ____D () C:\Users\Rudi\Downloads\Wildes.Land.S01E01.Die.Vision.German.FS.BDRiP.x264-iFPD
2015-01-10 20:15 - 2015-01-03 17:43 - 910072837 _____ () C:\Users\Rudi\Downloads\Denk wie ein Mann 2.mkv
2015-01-10 20:04 - 2015-01-10 20:07 - 00000000 ____D () C:\Users\Rudi\Desktop\Khaolak 2015
2015-01-07 22:31 - 2015-01-07 14:15 - 1978832896 _____ () C:\Users\Rudi\Downloads\Hobbit.avi
2015-01-07 22:31 - 2014-09-26 03:22 - 00000000 ____D () C:\Users\Rudi\Downloads\Geheimnisse.Asiens.-.Die.schoensten.Nationalparks.E04.Thailands.abenteuerlicher.Sueden.GERMAN.DOKU.HDTVRip.x264-balu
2015-01-06 08:31 - 2015-01-06 08:35 - 00002175 _____ () C:\Users\Public\Desktop\SteuerSparErklärung 2014.lnk
2015-01-05 18:31 - 2015-01-05 18:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec
2015-01-05 18:31 - 2015-01-05 18:31 - 00000000 ____D () C:\Program Files\MyFree Codec
2015-01-05 14:44 - 2014-10-13 06:57 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2015-01-05 13:58 - 2014-10-13 06:57 - 00089856 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2015-01-01 13:19 - 2011-02-16 08:38 - 1381733346 _____ () C:\Users\Rudi\Downloads\Verrueckt.nach.Meer.E043.SAuf.den.Spuren.von.James.Bond.German.dTV.DivX.avi
2015-01-01 13:02 - 2015-01-01 13:08 - 00000000 ____D () C:\Users\Rudi\Downloads\JDownloader
2014-12-29 18:02 - 2014-12-06 20:49 - 765711168 _____ () C:\Users\Rudi\Downloads\rio-mountain.men.311-sd.mkv

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2098-01-01 00:59 - 2013-09-04 19:05 - 22711832 _____ () C:\Users\Rudi\Documents\Navigon Europe 4.9.1.apk
2015-01-25 12:18 - 2012-04-02 09:51 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-25 12:08 - 2012-02-08 15:33 - 00000000 ____D () C:\Users\Rudi
2015-01-25 11:52 - 2012-02-08 15:23 - 01657959 _____ () C:\Windows\WindowsUpdate.log
2015-01-25 11:51 - 2010-11-20 22:01 - 01856990 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-25 11:28 - 2014-12-06 13:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-25 11:21 - 2009-07-14 05:34 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-25 11:21 - 2009-07-14 05:34 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-25 11:16 - 2014-06-09 15:50 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2015-01-25 11:05 - 2013-09-13 15:48 - 00132650 _____ () C:\Windows\setupact.log
2015-01-25 11:05 - 2012-04-02 09:51 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-25 11:05 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-25 11:03 - 2014-12-09 17:39 - 00000000 ____D () C:\Program Files\AMD
2015-01-25 11:03 - 2013-12-10 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2015-01-25 11:03 - 2012-11-05 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-25 11:03 - 2012-02-23 20:54 - 00000000 ____D () C:\Users\Rudi\AppData\Roaming\vlc
2015-01-25 11:03 - 2012-02-08 20:35 - 00000000 ____D () C:\Program Files\Common Files\Nero
2015-01-25 11:03 - 2012-02-08 19:43 - 00000000 ____D () C:\Windows\system32\Macromed
2015-01-25 11:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2015-01-25 11:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-01-25 10:13 - 2014-06-09 15:52 - 00082648 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-25 10:10 - 2013-10-04 20:57 - 00158914 _____ () C:\Windows\PFRO.log
2015-01-25 10:10 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\L2Schemas
2015-01-25 10:06 - 2013-02-08 16:01 - 00000944 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2797027529-1437328937-854131943-1003UA.job
2015-01-25 09:28 - 2014-12-06 13:25 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-01-25 09:28 - 2014-12-06 13:25 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-25 09:09 - 2014-05-26 09:14 - 01244160 ___SH () C:\Users\Rudi\Desktop\Thumbs.db
2015-01-24 16:06 - 2013-02-08 16:01 - 00000922 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2797027529-1437328937-854131943-1003Core.job
2015-01-24 12:27 - 2012-02-14 09:21 - 00000000 ____D () C:\Users\Rudi\AppData\Roaming\Skype
2015-01-21 21:44 - 2014-12-07 09:01 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-01-21 21:42 - 2013-10-06 22:36 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-21 21:31 - 2012-03-14 15:40 - 00000000 ____D () C:\ProgramData\AMD
2015-01-20 17:11 - 2014-07-23 19:17 - 00169992 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2015-01-19 17:47 - 2012-01-26 21:54 - 00000000 ____D () C:\Users\Rudi\Documents\Steuerfälle
2015-01-19 17:46 - 2014-12-02 09:26 - 00002175 _____ () C:\Users\Public\Desktop\SteuerSparErklärung 2015.lnk
2015-01-17 13:58 - 2013-08-07 05:38 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2015-01-15 00:48 - 2013-07-10 17:45 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-15 00:46 - 2012-02-08 17:14 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-13 20:10 - 2012-04-19 18:14 - 00000000 ____D () C:\Users\Rudi\Documents\Claudia Bewerbung
2015-01-12 23:23 - 2014-06-09 14:41 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\TeamViewer
2015-01-11 13:37 - 2012-02-17 10:20 - 00000000 ____D () C:\Users\Rudi\AppData\Local\AAV
2015-01-10 12:38 - 2014-12-09 17:38 - 00000000 ____D () C:\AMD
2015-01-06 13:00 - 2012-01-28 14:19 - 00008682 _____ () C:\Users\Rudi\Documents\OuProxy.log
2015-01-06 08:31 - 2013-06-10 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steuertipps
2015-01-06 08:31 - 2012-02-17 10:13 - 00000000 ____D () C:\Program Files\Akademische Arbeitsgemeinschaft
2015-01-05 23:36 - 2013-07-14 20:22 - 00000000 ____D () C:\Users\Rudi\Documents\SelfMV
2015-01-05 18:31 - 2013-10-19 17:28 - 00001948 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2015-01-05 15:58 - 2012-02-13 09:09 - 00000000 ____D () C:\ProgramData\boost_interprocess
2015-01-05 14:44 - 2014-11-16 19:45 - 00001915 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk
2015-01-04 18:16 - 2014-04-30 09:14 - 00091648 ___SH () C:\Users\Rudi\Downloads\Thumbs.db
2014-12-26 15:03 - 2012-02-10 10:18 - 00000000 ____D () C:\Program Files\CCleaner

==================== Files in the root of some directories =======

2012-08-30 15:41 - 2012-08-31 12:05 - 0000048 _____ () C:\Users\Rudi\AppData\Roaming\AcroIEHelpe.txt
2012-08-30 11:54 - 2012-09-05 14:56 - 0000016 _____ () C:\Users\Rudi\AppData\Roaming\blckdom.res
2012-02-22 20:17 - 2013-04-16 21:57 - 0000100 _____ () C:\Users\Rudi\AppData\Roaming\default.pls
2012-09-05 06:32 - 2012-09-05 06:32 - 0000012 _____ () C:\Users\Rudi\AppData\Roaming\urhtps.dat
2013-01-06 13:57 - 2014-07-23 20:29 - 0035840 _____ () C:\Users\Rudi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-07-05 20:03 - 2013-07-05 20:03 - 0000001 _____ () C:\Users\Rudi\AppData\Local\llftool.4.25.agreement
2012-06-06 17:42 - 2013-04-06 05:28 - 0007594 _____ () C:\Users\Rudi\AppData\Local\Resmon.ResmonCfg
2012-10-06 09:50 - 2012-10-31 11:44 - 0000041 ___SH () C:\ProgramData\.zreglib
2013-01-02 20:37 - 2013-01-02 20:37 - 0499008 _____ () C:\ProgramData\1357155162.bdinstall.bin
2013-01-06 11:46 - 2013-01-06 11:47 - 0016983 _____ () C:\ProgramData\1357469208.2300.bin
2013-01-06 11:46 - 2013-01-06 11:46 - 0002253 _____ () C:\ProgramData\1357469208.3792.bin
2013-01-06 11:46 - 2013-01-06 11:46 - 0086278 _____ () C:\ProgramData\1357469208.5356.bin
2013-01-06 11:46 - 2013-01-06 11:47 - 0002229 _____ () C:\ProgramData\1357469208.5960.bin
2013-01-06 11:51 - 2013-01-06 11:51 - 0228621 _____ () C:\ProgramData\1357469380.bdinstall.bin
2013-01-06 11:59 - 2013-01-06 11:59 - 0423266 _____ () C:\ProgramData\1357469778.bdinstall.bin
2013-01-06 12:09 - 2013-01-06 12:09 - 0280291 _____ () C:\ProgramData\1357470549.bdinstall.bin
2013-01-06 12:14 - 2013-01-06 12:14 - 0430905 _____ () C:\ProgramData\1357470814.bdinstall.bin
2013-01-29 17:23 - 2013-01-29 17:23 - 0224620 _____ () C:\ProgramData\1359476564.bdinstall.bin
2013-01-29 17:28 - 2013-01-29 17:28 - 0447645 _____ () C:\ProgramData\1359476725.bdinstall.bin
2014-07-23 18:53 - 2014-07-23 18:53 - 0222972 _____ () C:\ProgramData\1406137915.bdinstall.bin
2014-07-23 19:01 - 2014-07-23 19:01 - 2015195 _____ () C:\ProgramData\1406138164.bdinstall.bin
2014-07-23 19:15 - 2014-07-23 19:15 - 0257706 _____ () C:\ProgramData\1406139240.bdinstall.bin
2014-07-23 19:23 - 2014-07-23 19:23 - 0000000 _____ () C:\ProgramData\1406139418.3612.bin
2014-07-23 19:24 - 2014-07-23 19:24 - 0495218 _____ () C:\ProgramData\1406139418.bdinstall.bin

Files to move or delete:
====================
C:\Users\Rudi\install_reader10_de_gtbp_mssd_aih.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2012-04-19 14:22

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 24-01-2015 01
Ran by Rudi at 2015-01-25 12:18:49
Running from C:\Users\Rudi\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)


==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AAVUpdateManager (HKLM\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{319271B3-E2AA-F623-928E-245C9EBF16F7}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.2.43 - Atheros Communications Inc.)
AVM FRITZ!Box Dokumentation (HKLM\...\AVMFBox) (Version:  - AVM Berlin)
AVM FRITZ!Box Druckeranschluss (HKLM\...\AVMFBoxPrinter) (Version:  - AVM Berlin)
Bitdefender Internet Security 2015 (HKLM\...\Bitdefender) (Version: 18.11.0.872 - Bitdefender)
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
DesignPro 5 (HKLM\...\InstallShield_{F82C6574-AD88-4B40-A432-970BC77F1BD2}) (Version: 5.5.708 - Avery Dennison)
DesignPro 5 (Version: 5.5.708 - Avery Dennison) Hidden
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - )
EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version:  - )
eReg (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Facebook Video Calling 1.2.0.287 (HKLM\...\{B92C5909-1D37-4C51-8397-A28BB28E5DC3}) (Version: 1.2.287 - Skype Limited)
Google Chrome (HKLM\...\Google Chrome) (Version: 40.0.2214.91 - Google Inc.)
Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Works 6-9 Converter (HKLM\...\{172423F9-522A-483A-AD65-03600CE4CA4F}) (Version: 9.7.0000 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Mozilla Thunderbird 31.4.0 (x86 de) (HKLM\...\Mozilla Thunderbird 31.4.0 (x86 de)) (Version: 31.4.0 - Mozilla)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-2797027529-1437328937-854131943-1000\...\MyFreeCodec) (Version:  - )
NAVIGON Fresh 3.5.1 (HKLM\...\NAVIGON Fresh) (Version: 3.5.1 - NAVIGON)
Nero 2014 (HKLM\...\{FC9D3C55-81BA-4F57-9750-17BC1C7A2CF3}) (Version: 15.0.03500 - Nero AG)
Nero 2014 Content Pack (HKLM\...\{204A26F0-01B8-4656-8607-5CCEDE820BC2}) (Version: 15.0.00200 - Nero AG)
Nero Prerequisite Installer 3.0 (HKLM\...\{929FAC65-06DD-4577-882C-E8A558C47B75}) (Version: 15.0.00900 - Nero AG)
OpenOffice 4.0.1 (HKLM\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
POIbase 1.071 (HKLM\...\POIbase_is1) (Version:  - POIbase)
Prerequisite installer (Version: 15.0.0010 - Nero AG) Hidden
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6402 - Realtek Semiconductor Corp.)
RoboForm 7-9-11-1 (HKU\S-1-5-21-2797027529-1437328937-854131943-1000\...\AI RoboForm) (Version: 7-9-11-1 - Siber Systems)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.2.13021_10 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.5.2.13021_10 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14113.3 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (Version: 3.2.14113.3 - Samsung Electronics Co., Ltd.) Hidden
Samsung Story Album Viewer (HKLM\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Shared C Run-time for x86 (Version: 10.0.0 - McAfee) Hidden
Skype™ 6.18 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
SteuerSparErklärung 2014 (HKLM\...\{A463EB06-22A6-47F5-9593-E52B291EF13E}) (Version: 19.12.92 - Akademische Arbeitsgemeinschaft)
SteuerSparErklärung 2015 (HKLM\...\{312C0E08-8F94-4536-AAF6-3413F784AC5F}) (Version: 20.25.123 - Akademische Arbeitsgemeinschaft)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WinRAR 4.10 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.10.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2797027529-1437328937-854131943-1000_Classes\CLSID\{2B11E9B0-9F09-11D0-9484-00A0C91110ED}\InprocServer32 -> C:\Windows\System32\msstdfmt.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2797027529-1437328937-854131943-1000_Classes\CLSID\{3D5C6BF2-69A3-11D0-B393-00A0C9055D8E}\InprocServer32 -> C:\Windows\system32\msderun.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2797027529-1437328937-854131943-1000_Classes\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32 -> C:\Windows\System32\msinet.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2797027529-1437328937-854131943-1000_Classes\CLSID\{59245250-7A2F-11D0-9482-00A0C91110ED}\InprocServer32 -> C:\Windows\system32\msbind.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2797027529-1437328937-854131943-1000_Classes\CLSID\{6D835690-900B-11D0-9484-00A0C91110ED}\InprocServer32 -> C:\Windows\System32\msstdfmt.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2797027529-1437328937-854131943-1000_Classes\CLSID\{99FF4677-FFC3-11D0-BD02-00C04FC2FB86}\InprocServer32 -> C:\Windows\System32\msstdfmt.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2797027529-1437328937-854131943-1000_Classes\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

==================== Restore Points  =========================

Could not list restore points.
Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2014-10-18 08:34 - 00000962 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 hxxp://www.driver-soft.com
127.0.0.1 www.driver-soft.com
127.0.0.1 hxxp://www.driver-soft.com
127.0.0.1 www.driver-soft.com


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {04B5F83E-E786-46F2-B587-84A557C121D7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {0758F466-1B82-44EF-B9AC-E0CB37A07B7B} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {1960F6C8-ABD8-49F6-80DA-5BBEF6D371CA} - System32\Tasks\{049339A7-1A47-4DAB-B635-F7E6D7ABA729} => C:\Users\Rudi\Downloads\LCVM_PCDrv_1_01_01.EXE
Task: {1B3066CE-5CF5-442E-AD5D-CFD919DD3A12} - System32\Tasks\{569FE437-7362-4BAB-AC2C-8622E741E046} => pcalua.exe -a C:\Users\Rudi\Downloads\LCVM_PCDrv_1_01_01.EXE -d C:\Users\Rudi\Downloads
Task: {266CE2AE-B70B-4227-875E-69951133B42B} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMLMMMJMGMJMOJLMKMCNHMHMHMNJCNLMIMGMGMCNHMIMNJIMCNMMLMMMKJKJGMGMGMIMLMLJJMJNJICMIMCNGMCNOMOMFMOMOMCNPMCNGMJMPMPMFMJMCNOMCNIMJMPMOMCNNMJNPICMOMFMEKMICNJJCKFMOMPMLMMMJNHICMMJBJKJLIMJJNBJCMNKKILJGJPNKLNIBJMILIJNKJCMNIKILJAJDJJJKJNIBJMILIPLIIKJNJBNLJKJJNNICMJNDJCMLJKJJNMJCMKMFMOMPMHMIMFMPMJNFICMGJLJKJBJLIGJLIGJKJMIBNKJHIKJ"
Task: {26F594B1-9DB5-42D5-B887-510A8091B535} - System32\Tasks\{119544DA-8334-474E-AE0D-D6A0A701363D} => C:\Users\Rudi\Downloads\LCVM_PCDrv_1_01_01.EXE
Task: {3717A16D-0237-4E8F-8850-0005C9A4E0C3} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {3ABCA74E-FEB0-4160-9255-51A69386B7B5} - System32\Tasks\{E9B33ADE-73CB-4287-8BEA-1F9C131BB3E3} => C:\Windows\twain_32\escndv\escndv.exe [2006-03-08] (SEIKO EPSON CORP.)
Task: {42E4A913-C02E-408B-85A8-2FB0463E62F9} - System32\Tasks\{B23F9DB4-A06D-4BF5-82D4-2C989DA739B3} => pcalua.exe -a C:\Users\Rudi\Downloads\LCVM_PCDRV_US_1_03_02.exe -d C:\Users\Rudi\Downloads
Task: {481094AE-E62D-4D3E-8B59-5032292C349E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-25] (Adobe Systems Incorporated)
Task: {54E28CCF-5824-40FF-A233-2D61FCCD1111} - System32\Tasks\{405DB44D-455C-46CD-9B3D-A19511345046} => C:\Windows\twain_32\escndv\escndv.exe [2006-03-08] (SEIKO EPSON CORP.)
Task: {56D4C7F7-8C18-4467-80D5-046923971993} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {5933E6F0-F0FF-4447-BFDF-52C4B2F72216} - System32\Tasks\{547B1E84-38E9-41F0-8252-7FF64EA73BD0} => C:\Windows\twain_32\escndv\escndv.exe [2006-03-08] (SEIKO EPSON CORP.)
Task: {5AFB480A-4E3C-4C18-86D3-287068FD3A69} - System32\Tasks\{2DBE932F-031B-4153-9844-7F9B72A7691A} => C:\Users\Rudi\Downloads\LCVM_PCDrv_1_01_01.EXE
Task: {649C981B-DED1-4714-865E-7549DF4A141F} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2014-11-28] (Siber Systems)
Task: {69B9CF8D-D553-45C8-A6F5-1B4499B5F1A3} - System32\Tasks\{D2EB6A9C-1D17-4A1B-9F8F-668578A8C1BA} => pcalua.exe -a C:\Windows\CtDrvIns.exe -d C:\Windows\system32 -c -uninstall -plugin V0220Pin.dll -pluginres CtCamPin.crl -script VF0220.uns -unsext NT -silent
Task: {7D85485A-951B-49DE-8C48-8841DEA619F3} - System32\Tasks\Go for FilesUpdate => C:\Program Files\GoforFiles\GFFUpdater.exe <==== ATTENTION
Task: {7E07C77C-DE04-4BCA-A887-64277091EE0A} - System32\Tasks\{C56D89D5-1BB0-47D0-9B04-9A190EE6FB12} => F:\MixSer\activatedevice.exe
Task: {8625F090-E6CE-4E45-8160-AFBD20C16540} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {8D0402C8-990E-4A19-988E-D6185963BEF2} - System32\Tasks\Microsoft_Hardware_Launch_devicecenter_exe => C:\Program Files\Microsoft Device Center\devicecenter.exe
Task: {96DA1D84-03A9-4658-9869-54229A141BAC} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2797027529-1437328937-854131943-1003Core => C:\Users\Bernd.Rudi-PC\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-08] (Facebook Inc.)
Task: {A8C4EAB6-5A0F-48BD-8649-4264B803C209} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {AA199088-5838-45DD-9A82-B350B25C5E32} - System32\Tasks\{19389981-6EB2-4753-81EE-80C9942AF1F4} => pcalua.exe -a E:\sources\SetupError.exe -d E:\ -c x64
Task: {AB3E4A76-68B2-4E0C-9325-F5481EC6F309} - System32\Tasks\Java(TM) Platform SE Auto Updater => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-09-26] (Oracle Corporation)
Task: {B1CFF170-B0E9-4277-8707-D676FD04DF2C} - System32\Tasks\{06CB584D-62B6-4243-B6E9-5CB37EBB5AAC} => C:\Users\Rudi\Downloads\LCVM_PCDRV_US_1_03_02 (1).exe
Task: {BB890C21-1DAA-4A39-B61A-9F90F5ECADA3} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {C0B7F0A3-90F9-4B55-B492-38A500659D27} - System32\Tasks\Nero\Nero Info => C:\Program Files\Common Files\Nero\Nero Info\NeroInfo.exe [2014-12-11] (Nero AG)
Task: {C29F5070-AAFF-4340-BCA9-729B2781605C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2797027529-1437328937-854131943-1003UA => C:\Users\Bernd.Rudi-PC\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-08] (Facebook Inc.)
Task: {CF3B34B9-AFF4-4E1A-B380-E1E234E3FB4E} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {D34D9EBB-C528-43C5-882F-1FB1741C4F70} - System32\Tasks\{7E5470A2-3E52-4894-B386-80187987F143} => C:\Windows\twain_32\escndv\escndv.exe [2006-03-08] (SEIKO EPSON CORP.)
Task: {D8CB8D88-24AD-4E31-B13E-F34FF812C5EA} - System32\Tasks\{4AE49F1F-CA27-4B0D-A67A-AD22CCA2358C} => C:\Users\Rudi\Downloads\LCVM_PCDRV_US_1_03_02.exe
Task: {F31B669B-472E-46D6-A350-977AF7F006AD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)
Task: {F37F4795-7F61-43A4-B4DE-E33A34640BBD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2797027529-1437328937-854131943-1003Core.job => C:\Users\Bernd.Rudi-PC\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2797027529-1437328937-854131943-1003UA.job => C:\Users\Bernd.Rudi-PC\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-10-02 16:07 - 2014-10-02 16:07 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll
2014-07-23 19:23 - 2013-09-03 13:29 - 00095088 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll
2014-07-23 19:23 - 2014-06-30 12:24 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui
2014-07-23 19:23 - 2012-10-29 14:22 - 00130656 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll
2014-07-24 16:09 - 2014-07-24 16:09 - 00676568 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00040_003\ashttpbr.mdl
2014-07-24 16:09 - 2014-07-24 16:09 - 00490144 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00040_003\ashttpdsp.mdl
2014-07-24 16:09 - 2014-07-24 16:09 - 02138096 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00040_003\ashttpph.mdl
2014-07-24 16:09 - 2014-07-24 16:09 - 01128744 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00040_003\ashttprbl.mdl
2008-10-24 15:35 - 2008-10-24 15:35 - 00128296 _____ () C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
2012-02-10 14:13 - 2012-01-09 19:44 - 00166912 _____ () D:\Program Files\WinRAR\rarext.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Windows:D578D8A8EB50607B
AlternateDataStreams: C:\ProgramData\TEMP:430C6D84
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
AlternateDataStreams: C:\Users\Claudia\Downloads\TeamViewer_Setup_de-ckc (1).exe:BDU
AlternateDataStreams: C:\Users\Claudia\Downloads\TeamViewer_Setup_de-ckc (2).exe:BDU
AlternateDataStreams: C:\Users\Claudia\Downloads\TeamViewer_Setup_de-ckc (3).exe:BDU
AlternateDataStreams: C:\Users\Claudia\Downloads\TeamViewer_Setup_de-ckc (4).exe:BDU
AlternateDataStreams: C:\Users\Claudia\Downloads\TeamViewer_Setup_de-hse.exe:BDU
AlternateDataStreams: C:\Users\Rudi\Desktop\Defogger.exe:BDU
AlternateDataStreams: C:\Users\Rudi\Desktop\FRST.exe:BDU
AlternateDataStreams: C:\Users\Rudi\Downloads\mbar-1.08.3.1004.exe:BDU
AlternateDataStreams: C:\Users\Rudi\Documents\Kündigung Ihrer McAfee Internet Security Suite - WEB.DE Edition.eml:OECustomProperty
AlternateDataStreams: C:\Users\Rudi\Documents\SCR-STAMMTISCH-ERLANGEN.wpp:SummaryInformation
AlternateDataStreams: C:\Users\Rudi\Documents\SCR-STAMMTISCH-ERLANGEN.wpp:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => 
MSCONFIG\startupreg: Bitdefender-Geldbörse-Agent => "C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe"
MSCONFIG\startupreg: iTunesHelper => 
MSCONFIG\startupreg: KiesPDLR.exe => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run
MSCONFIG\startupreg: KiesPreload => C:\Program Files\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s                                                                                                                                                                                                                       
MSCONFIG\startupreg: Windows Mobile-based device management => %WINDIR%\WindowsMobile\wmdcBase.exe

========================= Accounts: ==========================

Administrator (S-1-5-21-2797027529-1437328937-854131943-500 - Administrator - Disabled)
Bernd (S-1-5-21-2797027529-1437328937-854131943-1003 - Limited - Enabled) => C:\Users\Bernd.Rudi-PC
Claudia (S-1-5-21-2797027529-1437328937-854131943-1009 - Limited - Enabled) => C:\Users\Claudia
Gast (S-1-5-21-2797027529-1437328937-854131943-501 - Limited - Enabled) => C:\Users\Gast
Rudi (S-1-5-21-2797027529-1437328937-854131943-1000 - Administrator - Enabled) => C:\Users\Rudi

==================== Faulty Device Manager Devices =============

Could not list Devices. Check "winmgmt" service or repair WMI.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/25/2015 11:06:33 AM) (Source: System Restore) (EventID: 8210) (User: )
Description: Unbekannter Fehler bei der Systemwiederherstellung: (Windows Update). Zusätzliche Informationen: 0x80070005.

Error: (01/25/2015 10:46:52 AM) (Source: MsiInstaller) (EventID: 10005) (User: Rudi-PC)
Description: Produkt: Microsoft Fix it 50981 -- Dieses Microsoft-Fix it ist nicht für Ihr Betriebssystem oder Ihre Version der Anwendung vorgesehen.

Error: (01/25/2015 10:46:31 AM) (Source: MsiInstaller) (EventID: 10005) (User: Rudi-PC)
Description: Produkt: Microsoft Fix it 50981 -- Dieses Microsoft-Fix it ist nicht für Ihr Betriebssystem oder Ihre Version der Anwendung vorgesehen.

Error: (01/25/2015 10:44:29 AM) (Source: MsiInstaller) (EventID: 10005) (User: Rudi-PC)
Description: Produkt: Microsoft Fix it 50981 -- Dieses Microsoft-Fix it ist nicht für Ihr Betriebssystem oder Ihre Version der Anwendung vorgesehen.

Error: (01/25/2015 10:08:11 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {f34d4333-35d0-4645-9900-c74daedf272d}

Error: (01/25/2015 09:24:56 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/25/2015 09:10:22 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/25/2015 08:57:07 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/25/2015 08:57:07 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/25/2015 08:57:07 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (01/25/2015 00:21:02 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/25/2015 00:20:20 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/25/2015 00:19:49 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/25/2015 00:19:19 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/25/2015 00:18:49 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/25/2015 00:10:04 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/25/2015 00:07:14 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/25/2015 00:01:29 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/25/2015 00:00:59 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 
%%126

Error: (01/25/2015 00:00:29 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 
%%126


Microsoft Office Sessions:
=========================
Error: (01/25/2015 11:06:33 AM) (Source: System Restore) (EventID: 8210) (User: )
Description: Windows Update0x80070005

Error: (01/25/2015 10:46:52 AM) (Source: MsiInstaller) (EventID: 10005) (User: Rudi-PC)
Description: Produkt: Microsoft Fix it 50981 -- Dieses Microsoft-Fix it ist nicht für Ihr Betriebssystem oder Ihre Version der Anwendung vorgesehen.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/25/2015 10:46:31 AM) (Source: MsiInstaller) (EventID: 10005) (User: Rudi-PC)
Description: Produkt: Microsoft Fix it 50981 -- Dieses Microsoft-Fix it ist nicht für Ihr Betriebssystem oder Ihre Version der Anwendung vorgesehen.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/25/2015 10:44:29 AM) (Source: MsiInstaller) (EventID: 10005) (User: Rudi-PC)
Description: Produkt: Microsoft Fix it 50981 -- Dieses Microsoft-Fix it ist nicht für Ihr Betriebssystem oder Ihre Version der Anwendung vorgesehen.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/25/2015 10:08:11 AM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {f34d4333-35d0-4645-9900-c74daedf272d}

Error: (01/25/2015 09:24:56 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/25/2015 09:10:22 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/25/2015 08:57:07 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/25/2015 08:57:07 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/25/2015 08:57:07 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)


CodeIntegrity Errors:
===================================
  Date: 2013-01-30 18:46:06.016
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_003\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-30 18:30:07.488
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_003\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-30 18:09:07.968
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_003\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-30 18:01:16.347
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_003\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-30 17:38:34.374
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_003\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-30 17:31:22.343
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_003\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-30 17:05:10.308
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_003\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-30 16:55:38.364
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_003\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-30 14:40:05.343
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_003\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-30 14:07:00.516
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_003\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU E6850 @ 3.00GHz
Percentage of memory in use: 40%
Total physical RAM: 3583.12 MB
Available physical RAM: 2141.09 MB
Total Pagefile: 7164.52 MB
Available Pagefile: 5371.85 MB
Total Virtual: 2047.88 MB
Available Virtual: 1899.29 MB

==================== Drives ================================

Drive b: (Sicherrung) (Fixed) (Total:465.76 GB) (Free:142.41 GB) NTFS
Drive c: () (Fixed) (Total:238.18 GB) (Free:85.22 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Daten) (Fixed) (Total:227.58 GB) (Free:147.74 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 1D30D055)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3561AA9A)
Partition 1: (Active) - (Size=238.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=227.6 GB) - (Type=07 NTFS)

==================== End Of Log ============================