Zunehmende Verzögerung im Seitenaufbau mit Firefox

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 21:04 on 13/02/2015 (Admin)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-02-2015
Ran by Heinz-Willi (ATTENTION: The logged in user is not administrator) on HEINZ-WILLI-PC on 13-02-2015 21:07:28
Running from C:\Users\Heinz-Willi\Downloads
Loaded Profiles: Heinz-Willi & Admin (Available profiles: Heinz-Willi & Admin)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

Failed to access process -> smss.exe
Failed to access process -> csrss.exe
Failed to access process -> wininit.exe
Failed to access process -> csrss.exe
Failed to access process -> services.exe
Failed to access process -> lsass.exe
Failed to access process -> lsm.exe
Failed to access process -> winlogon.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> AvastSvc.exe
Failed to access process -> spoolsv.exe
Failed to access process -> svchost.exe
Failed to access process -> armsvc.exe
Failed to access process -> E_S50ST7.EXE
Failed to access process -> E_S50RP7.EXE
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> WUDFHost.exe
Failed to access process -> AvastVBoxSVC.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> taskeng.exe
Failed to access process -> GoogleUpdate.exe
Failed to access process -> GoogleCrashHandler.exe
Failed to access process -> VSSVC.exe
Failed to access process -> svchost.exe
Failed to access process -> SearchIndexer.exe
Failed to access process -> wmpnetwk.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
Failed to access process -> svchost.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
Failed to access process -> svchost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Failed to access process -> OSPPSVC.EXE
Failed to access process -> SearchProtocolHost.exe
Failed to access process -> SearchFilterHost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-26] (AVAST Software)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12111576 2000-01-01] (Realtek Semiconductor)
HKU\S-1-5-21-724745677-1146776812-3954023175-1001\...\Run: [EPSON BX305 Series] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGJE.EXE [200704 2009-09-13] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-724745677-1146776812-3954023175-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5496600 2015-01-20] (Piriform Ltd)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-10-03] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-724745677-1146776812-3954023175-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
URLSearchHook: [S-1-5-21-724745677-1146776812-3954023175-1003] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Heinz-Willi\AppData\Roaming\Mozilla\Firefox\Profiles\5t753svr.default-1414089825985
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: WEB.DE MailCheck - C:\Users\Heinz-Willi\AppData\Roaming\Mozilla\Firefox\Profiles\5t753svr.default-1414089825985\Extensions\toolbar@web.de [2014-10-24]
FF Extension: Referrer Control - C:\Users\Heinz-Willi\AppData\Roaming\Mozilla\Firefox\Profiles\5t753svr.default-1414089825985\Extensions\referrercontrol@qixinglu.com.xpi [2014-12-19]
FF Extension: Adblock Plus - C:\Users\Heinz-Willi\AppData\Roaming\Mozilla\Firefox\Profiles\5t753svr.default-1414089825985\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-06]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-01]

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Heinz-Willi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Heinz-Willi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-14]
CHR Extension: (Google Docs) - C:\Users\Heinz-Willi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-14]
CHR Extension: (Google Drive) - C:\Users\Heinz-Willi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-14]
CHR Extension: (YouTube) - C:\Users\Heinz-Willi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-14]
CHR Extension: (Google-Suche) - C:\Users\Heinz-Willi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-14]
CHR Extension: (Google Tabellen) - C:\Users\Heinz-Willi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-14]
CHR Extension: (avast! Online Security) - C:\Users\Heinz-Willi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-14]
CHR Extension: (Google Wallet) - C:\Users\Heinz-Willi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-14]
CHR Extension: (Google Mail) - C:\Users\Heinz-Willi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-14]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-02]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-02] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3192344 2014-12-02] (Avast Software)
R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [153600 2009-09-13] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [121856 2009-09-13] (SEIKO EPSON CORPORATION)
R2 lmhosts; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-12-02] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2014-12-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-12-02] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-12-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2014-12-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2014-12-02] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2014-12-02] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2014-12-02] ()
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [11232 2015-02-11] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [218192 2014-12-02] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 21:07 - 2015-02-13 21:07 - 00012211 _____ () C:\Users\Heinz-Willi\Downloads\FRST.txt
2015-02-13 21:07 - 2015-02-13 21:07 - 00000000 ____D () C:\FRST
2015-02-13 21:06 - 2015-02-13 21:06 - 01125376 _____ (Farbar) C:\Users\Heinz-Willi\Downloads\FRST.exe
2015-02-13 21:05 - 2015-02-13 21:05 - 00050477 _____ () C:\Users\Heinz-Willi\Downloads\Defogger(1).exe
2015-02-13 21:03 - 2015-02-13 21:04 - 00000472 _____ () C:\Users\Heinz-Willi\Downloads\defogger_disable.log
2015-02-13 21:03 - 2015-02-13 21:03 - 00000000 _____ () C:\Users\Admin\defogger_reenable
2015-02-13 21:01 - 2015-02-13 21:01 - 00050477 _____ () C:\Users\Heinz-Willi\Downloads\Defogger.exe
2015-02-13 20:49 - 2015-02-13 20:49 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Adobe
2015-02-13 20:49 - 2015-02-13 20:49 - 00000000 ____D () C:\Users\Default\AppData\Local\Adobe
2015-02-13 20:49 - 2015-02-13 20:49 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Adobe
2015-02-13 20:49 - 2015-02-13 20:49 - 00000000 ____D () C:\Users\Default User\AppData\Local\Adobe
2015-02-13 20:43 - 2015-02-13 20:43 - 00000197 _____ () C:\Windows\system32\2015-02-13-19-43-00.060-AvastVBoxSVC.exe-2128.log
2015-02-13 16:41 - 2015-02-13 16:41 - 00000197 _____ () C:\Windows\system32\2015-02-13-15-41-33.018-AvastVBoxSVC.exe-2456.log
2015-02-13 14:28 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-13 14:28 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-13 14:23 - 2015-02-13 14:23 - 00000197 _____ () C:\Windows\system32\2015-02-13-13-23-38.053-AvastVBoxSVC.exe-2512.log
2015-02-12 21:50 - 2015-02-12 21:51 - 00000197 _____ () C:\Windows\system32\2015-02-12-20-50-56.080-AvastVBoxSVC.exe-2196.log
2015-02-12 18:35 - 2015-02-12 18:35 - 00000197 _____ () C:\Windows\system32\2015-02-12-17-35-02.049-AvastVBoxSVC.exe-3348.log
2015-02-12 14:21 - 2015-02-12 14:21 - 00000197 _____ () C:\Windows\system32\2015-02-12-13-21-21.046-AvastVBoxSVC.exe-2076.log
2015-02-12 11:23 - 2015-02-12 11:23 - 00000197 _____ () C:\Windows\system32\2015-02-12-10-23-21.090-AvastVBoxSVC.exe-2116.log
2015-02-12 10:59 - 2015-02-12 10:59 - 00000197 _____ () C:\Windows\system32\2015-02-12-09-59-23.031-AvastVBoxSVC.exe-2904.log
2015-02-12 00:37 - 2015-02-12 00:37 - 00000197 _____ () C:\Windows\system32\2015-02-11-23-37-12.070-AvastVBoxSVC.exe-2088.log
2015-02-11 22:19 - 2015-02-11 22:19 - 00011856 _____ () C:\Users\Heinz-Willi\Downloads\artmedic_wissensquiz.zip
2015-02-11 21:19 - 2015-02-11 21:19 - 00000197 _____ () C:\Windows\system32\2015-02-11-20-19-02.014-AvastVBoxSVC.exe-2428.log
2015-02-11 19:55 - 2015-02-11 19:55 - 00000197 _____ () C:\Windows\system32\2015-02-11-18-55-12.077-AvastVBoxSVC.exe-2124.log
2015-02-11 15:54 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 15:54 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 15:54 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 15:54 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 15:54 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 15:54 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 15:54 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 15:53 - 2015-01-15 08:46 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 15:53 - 2015-01-15 08:46 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 15:53 - 2015-01-15 08:43 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 15:53 - 2015-01-15 08:43 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 15:53 - 2015-01-15 08:42 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 15:53 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 15:53 - 2015-01-15 08:42 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 15:53 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 15:53 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 15:53 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 15:53 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 15:53 - 2015-01-15 05:21 - 00369968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 15:53 - 2015-01-09 02:45 - 02380288 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 15:53 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 15:53 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 15:53 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-02-11 15:52 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-02-11 15:52 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 15:52 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 15:52 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 15:52 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 15:52 - 2015-01-12 03:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 15:52 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 15:52 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 15:52 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 15:52 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 15:52 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 15:52 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 15:52 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 15:52 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 15:52 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 15:52 - 2015-01-12 02:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 15:52 - 2015-01-12 02:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 15:52 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 15:52 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 15:52 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 15:52 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 15:52 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 15:52 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 15:52 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 15:52 - 2015-01-12 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 15:52 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 15:52 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 15:52 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 15:52 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 15:52 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 15:51 - 2015-02-04 03:54 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 15:51 - 2015-02-04 03:53 - 00767488 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 15:51 - 2015-02-04 03:53 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 15:51 - 2015-02-04 03:53 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 15:51 - 2015-02-04 03:53 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 15:51 - 2015-02-04 03:53 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 15:51 - 2015-02-04 03:49 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 15:51 - 2015-01-28 00:36 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 15:49 - 2015-02-11 15:49 - 00000197 _____ () C:\Windows\system32\2015-02-11-14-49-02.070-AvastVBoxSVC.exe-2108.log
2015-02-11 14:10 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 14:10 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 14:10 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 14:10 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 14:10 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 11:54 - 2015-02-11 11:54 - 00000197 _____ () C:\Windows\system32\2015-02-11-10-54-39.085-AvastVBoxSVC.exe-2056.log
2015-02-11 02:25 - 2015-02-11 02:25 - 00000197 _____ () C:\Windows\system32\2015-02-11-01-25-14.050-AvastVBoxSVC.exe-2652.log
2015-02-11 02:20 - 2015-02-11 02:20 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2015-02-11 02:20 - 2015-02-11 02:20 - 00000000 ____D () C:\Windows\system32\RTCOM
2015-02-11 02:19 - 2000-01-01 01:00 - 71040000 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2015-02-11 02:19 - 2000-01-01 01:00 - 13789440 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 11878656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2015-02-11 02:19 - 2000-01-01 01:00 - 04713224 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 03343832 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2015-02-11 02:19 - 2000-01-01 01:00 - 02588888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 02513264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 02354544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2015-02-11 02:19 - 2000-01-01 01:00 - 01823320 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 01783056 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 01443340 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-02-11 02:19 - 2000-01-01 01:00 - 01379760 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 01053208 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00966904 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00948336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00945456 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00927448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00844192 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00818936 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00818000 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00606968 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00386072 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00359768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00345328 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00326680 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00219896 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00214368 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00185584 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00173296 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00170840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00140528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00134584 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00074080 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00068960 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00064856 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00058264 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TepeqAPO.dll
2015-02-11 02:19 - 2000-01-01 01:00 - 00013416 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll
2015-02-11 02:18 - 2015-02-11 02:20 - 00000000 ___HD () C:\Program Files\Temp
2015-02-11 02:18 - 2015-02-11 02:18 - 00000000 ____D () C:\Program Files\Realtek
2015-02-11 02:18 - 2000-01-01 01:00 - 06177624 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 01509480 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 01490264 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 01468608 _____ (Conexant Systems Inc.) C:\Windows\system32\CX32APO.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 01292904 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 01220200 _____ (DTS) C:\Windows\system32\DTSBoostDLL.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 01175888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 01145600 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00966744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00654952 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00631400 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00601704 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00519368 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00458344 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00389736 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00375400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00357712 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00276128 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00274264 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00232792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00221528 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPONS.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPO.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00218216 _____ (DTS) C:\Windows\system32\DTSLFXAPO.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00132368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00095840 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2015-02-11 02:18 - 2000-01-01 01:00 - 00087864 _____ () C:\Windows\system32\audioLibVc.dll
2015-02-11 02:11 - 2015-02-11 02:11 - 00000000 ____D () C:\ProgramData\SlimWare Utilities, Inc
2015-02-11 02:08 - 2015-02-13 20:42 - 00000386 _____ () C:\Windows\Tasks\SlimDrivers Startup.job
2015-02-11 02:08 - 2015-02-11 02:08 - 00011232 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2015-02-11 02:08 - 2015-02-11 02:08 - 00002455 _____ () C:\Users\Public\Desktop\SlimDrivers.lnk
2015-02-11 02:08 - 2015-02-11 02:08 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2015-02-11 02:07 - 2015-02-11 02:07 - 00858432 _____ (SlimWare Utilities, Inc.) C:\Users\Heinz-Willi\Downloads\slimdrivers-setup.exe
2015-02-11 02:03 - 2015-02-11 02:05 - 26012864 _____ () C:\Users\Heinz-Willi\Downloads\GoogleEarthProWin.exe
2015-02-10 22:44 - 2015-02-10 22:44 - 00000197 _____ () C:\Windows\system32\2015-02-10-21-44-52.058-AvastVBoxSVC.exe-2596.log
2015-02-10 18:48 - 2015-02-10 18:48 - 00000197 _____ () C:\Windows\system32\2015-02-10-17-48-01.028-AvastVBoxSVC.exe-2288.log
2015-02-10 16:12 - 2015-02-10 16:12 - 00000197 _____ () C:\Windows\system32\2015-02-10-15-12-34.022-AvastVBoxSVC.exe-2088.log
2015-02-10 11:02 - 2015-02-10 11:02 - 00000197 _____ () C:\Windows\system32\2015-02-10-10-02-32.012-AvastVBoxSVC.exe-2152.log
2015-02-09 23:30 - 2015-02-09 23:31 - 00000197 _____ () C:\Windows\system32\2015-02-09-22-30-23.042-AvastVBoxSVC.exe-2476.log
2015-02-09 20:29 - 2015-02-09 20:29 - 00000197 _____ () C:\Windows\system32\2015-02-09-19-29-35.048-AvastVBoxSVC.exe-2684.log
2015-02-09 19:28 - 2015-02-09 19:29 - 00000197 _____ () C:\Windows\system32\2015-02-09-18-28-52.046-AvastVBoxSVC.exe-2752.log
2015-02-09 12:00 - 2015-02-09 12:00 - 00000197 _____ () C:\Windows\system32\2015-02-09-11-00-11.092-AvastVBoxSVC.exe-2244.log
2015-02-08 18:56 - 2015-02-08 18:56 - 00000197 _____ () C:\Windows\system32\2015-02-08-17-56-04.058-AvastVBoxSVC.exe-2224.log
2015-02-08 00:45 - 2015-02-08 00:45 - 00000197 _____ () C:\Windows\system32\2015-02-07-23-45-39.008-AvastVBoxSVC.exe-2128.log
2015-02-07 21:46 - 2015-02-07 21:46 - 00000197 _____ () C:\Windows\system32\2015-02-07-20-46-27.068-AvastVBoxSVC.exe-2532.log
2015-02-07 17:06 - 2015-02-07 17:06 - 00000197 _____ () C:\Windows\system32\2015-02-07-16-06-02.080-AvastVBoxSVC.exe-3008.log
2015-02-07 15:45 - 2015-02-07 15:45 - 00000197 _____ () C:\Windows\system32\2015-02-07-14-45-38.065-AvastVBoxSVC.exe-3964.log
2015-02-07 12:11 - 2015-02-07 12:12 - 00000197 _____ () C:\Windows\system32\2015-02-07-11-11-59.093-AvastVBoxSVC.exe-1776.log
2015-02-07 06:00 - 2015-02-07 06:00 - 00000197 _____ () C:\Windows\system32\2015-02-07-05-00-20.040-AvastVBoxSVC.exe-2084.log
2015-02-07 03:25 - 2015-02-07 03:26 - 00000197 _____ () C:\Windows\system32\2015-02-07-02-25-54.086-AvastVBoxSVC.exe-1192.log
2015-02-06 23:20 - 2015-02-06 23:21 - 00000197 _____ () C:\Windows\system32\2015-02-06-22-20-57.083-AvastVBoxSVC.exe-1236.log
2015-02-06 19:18 - 2015-02-06 19:19 - 00000197 _____ () C:\Windows\system32\2015-02-06-18-18-59.064-AvastVBoxSVC.exe-2624.log
2015-02-06 17:00 - 2015-02-06 17:00 - 00000197 _____ () C:\Windows\system32\2015-02-06-16-00-39.077-AvastVBoxSVC.exe-2216.log
2015-02-06 11:16 - 2015-02-06 11:16 - 00000197 _____ () C:\Windows\system32\2015-02-06-10-16-52.000-AvastVBoxSVC.exe-2064.log
2015-02-05 19:04 - 2015-02-05 19:04 - 00000197 _____ () C:\Windows\system32\2015-02-05-18-04-03.080-AvastVBoxSVC.exe-2172.log
2015-02-05 16:02 - 2015-02-05 16:02 - 00000197 _____ () C:\Windows\system32\2015-02-05-15-02-06.084-AvastVBoxSVC.exe-2156.log
2015-02-05 01:57 - 2015-02-05 01:57 - 00000197 _____ () C:\Windows\system32\2015-02-05-00-57-05.041-AvastVBoxSVC.exe-2256.log
2015-02-04 23:06 - 2015-02-04 23:06 - 00000197 _____ () C:\Windows\system32\2015-02-04-22-06-41.043-AvastVBoxSVC.exe-2188.log
2015-02-04 19:45 - 2015-02-04 19:45 - 00000197 _____ () C:\Windows\system32\2015-02-04-18-45-36.057-AvastVBoxSVC.exe-2188.log
2015-02-04 17:33 - 2015-02-04 17:34 - 00000197 _____ () C:\Windows\system32\2015-02-04-16-33-52.045-AvastVBoxSVC.exe-2248.log
2015-02-04 04:15 - 2015-02-04 04:15 - 00000197 _____ () C:\Windows\system32\2015-02-04-03-15-30.000-AvastVBoxSVC.exe-2164.log
2015-02-03 18:22 - 2015-02-03 18:22 - 00000197 _____ () C:\Windows\system32\2015-02-03-17-22-52.088-AvastVBoxSVC.exe-2124.log
2015-02-03 16:06 - 2015-02-03 16:06 - 00000197 _____ () C:\Windows\system32\2015-02-03-15-06-04.054-AvastVBoxSVC.exe-2456.log
2015-02-03 12:21 - 2015-02-03 12:22 - 00000197 _____ () C:\Windows\system32\2015-02-03-11-21-23.021-AvastVBoxSVC.exe-1368.log
2015-02-03 00:32 - 2015-02-03 00:32 - 00000197 _____ () C:\Windows\system32\2015-02-02-23-32-38.035-AvastVBoxSVC.exe-1284.log
2015-02-02 21:35 - 2015-02-02 21:36 - 00000197 _____ () C:\Windows\system32\2015-02-02-20-35-31.055-AvastVBoxSVC.exe-2272.log
2015-02-02 17:01 - 2015-02-02 17:01 - 00000197 _____ () C:\Windows\system32\2015-02-02-16-01-45.075-AvastVBoxSVC.exe-2124.log
2015-02-01 23:52 - 2015-02-01 23:52 - 00000197 _____ () C:\Windows\system32\2015-02-01-22-52-42.025-AvastVBoxSVC.exe-2348.log
2015-02-01 18:22 - 2015-02-01 18:22 - 00000197 _____ () C:\Windows\system32\2015-02-01-17-22-12.012-AvastVBoxSVC.exe-2612.log
2015-02-01 13:43 - 2015-02-01 13:44 - 00000197 _____ () C:\Windows\system32\2015-02-01-12-43-31.060-AvastVBoxSVC.exe-2272.log
2015-02-01 04:08 - 2015-02-01 04:08 - 00000197 _____ () C:\Windows\system32\2015-02-01-03-08-32.065-AvastVBoxSVC.exe-2196.log
2015-01-31 21:40 - 2015-01-31 21:40 - 00000247 _____ () C:\Windows\system32\2015-01-31-20-40-48.099-aswFe.exe-668.log
2015-01-31 21:35 - 2015-01-31 21:40 - 00000247 _____ () C:\Windows\system32\2015-01-31-20-35-54.040-aswFe.exe-1852.log
2015-01-31 21:35 - 2015-01-31 21:35 - 00000197 _____ () C:\Windows\system32\2015-01-31-20-35-51.005-AvastVBoxSVC.exe-3968.log
2015-01-31 16:05 - 2015-01-31 16:05 - 00000197 _____ () C:\Windows\system32\2015-01-31-15-05-54.017-AvastVBoxSVC.exe-2384.log
2015-01-31 16:02 - 2015-01-31 16:02 - 00777920 _____ (Aff) C:\Users\Heinz-Willi\Downloads\FlvPlayerSetup.exe
2015-01-31 15:54 - 2015-01-31 15:54 - 00808512 _____ (CoinisRS) C:\Users\Heinz-Willi\Downloads\adobe_flash_setup.exe
2015-01-31 15:54 - 2015-01-31 15:54 - 00808512 _____ (CoinisRS) C:\Users\Heinz-Willi\Downloads\adobe_flash_setup(1).exe
2015-01-31 13:39 - 2015-01-31 13:39 - 00000197 _____ () C:\Windows\system32\2015-01-31-12-39-22.048-AvastVBoxSVC.exe-2212.log
2015-01-31 11:56 - 2015-01-31 11:56 - 00000197 _____ () C:\Windows\system32\2015-01-31-10-56-04.067-AvastVBoxSVC.exe-2588.log
2015-01-31 04:12 - 2015-01-31 04:12 - 00000197 _____ () C:\Windows\system32\2015-01-31-03-12-46.022-AvastVBoxSVC.exe-2216.log
2015-01-30 23:20 - 2015-01-30 23:20 - 00000197 _____ () C:\Windows\system32\2015-01-30-22-20-07.012-AvastVBoxSVC.exe-2088.log
2015-01-30 22:33 - 2015-01-30 22:33 - 00000197 _____ () C:\Windows\system32\2015-01-30-21-33-04.032-AvastVBoxSVC.exe-1216.log
2015-01-30 17:29 - 2015-01-30 17:30 - 00000197 _____ () C:\Windows\system32\2015-01-30-16-29-52.017-AvastVBoxSVC.exe-2508.log
2015-01-30 15:36 - 2015-01-30 15:36 - 00000197 _____ () C:\Windows\system32\2015-01-30-14-36-58.096-AvastVBoxSVC.exe-2112.log
2015-01-30 09:25 - 2015-01-30 09:25 - 00000197 _____ () C:\Windows\system32\2015-01-30-08-25-38.049-AvastVBoxSVC.exe-2912.log
2015-01-30 06:43 - 2015-01-30 06:43 - 00000197 _____ () C:\Windows\system32\2015-01-30-05-43-11.006-AvastVBoxSVC.exe-2356.log
2015-01-29 21:30 - 2015-01-29 21:30 - 00000197 _____ () C:\Windows\system32\2015-01-29-20-30-09.097-AvastVBoxSVC.exe-2664.log
2015-01-29 20:07 - 2015-02-13 20:42 - 00004807 _____ () C:\Windows\setupact.log
2015-01-29 20:07 - 2015-01-29 20:07 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-29 17:07 - 2015-01-29 17:08 - 05325208 _____ (Piriform Ltd) C:\Users\Heinz-Willi\Downloads\ccsetup502.exe
2015-01-29 14:45 - 2015-01-29 14:45 - 00000197 _____ () C:\Windows\system32\2015-01-29-13-45-29.081-AvastVBoxSVC.exe-1576.log
2015-01-29 09:36 - 2015-01-29 09:36 - 00000197 _____ () C:\Windows\system32\2015-01-29-08-36-01.063-AvastVBoxSVC.exe-2536.log
2015-01-29 01:07 - 2015-01-29 01:07 - 00000197 _____ () C:\Windows\system32\2015-01-29-00-07-05.082-AvastVBoxSVC.exe-2148.log
2015-01-28 22:34 - 2015-01-28 22:35 - 00000197 _____ () C:\Windows\system32\2015-01-28-21-34-59.061-AvastVBoxSVC.exe-2124.log
2015-01-28 13:12 - 2015-01-28 13:13 - 00000197 _____ () C:\Windows\system32\2015-01-28-12-12-55.026-AvastVBoxSVC.exe-2192.log
2015-01-28 08:21 - 2015-01-28 08:21 - 00000197 _____ () C:\Windows\system32\2015-01-28-07-21-34.087-AvastVBoxSVC.exe-2592.log
2015-01-28 01:51 - 2015-01-28 01:51 - 00000197 _____ () C:\Windows\system32\2015-01-28-00-51-30.070-AvastVBoxSVC.exe-1356.log
2015-01-27 19:47 - 2015-01-27 19:48 - 00000197 _____ () C:\Windows\system32\2015-01-27-18-47-55.084-AvastVBoxSVC.exe-1636.log
2015-01-27 16:00 - 2015-01-27 16:00 - 00000197 _____ () C:\Windows\system32\2015-01-27-15-00-42.022-AvastVBoxSVC.exe-2092.log
2015-01-27 13:03 - 2015-01-27 13:03 - 00000197 _____ () C:\Windows\system32\2015-01-27-12-03-42.002-AvastVBoxSVC.exe-2156.log
2015-01-27 10:52 - 2015-01-27 10:52 - 00000197 _____ () C:\Windows\system32\2015-01-27-09-52-19.078-AvastVBoxSVC.exe-1144.log
2015-01-27 05:46 - 2015-01-27 05:46 - 00000197 _____ () C:\Windows\system32\2015-01-27-04-46-41.029-AvastVBoxSVC.exe-2056.log
2015-01-27 04:15 - 2015-01-27 04:15 - 00000197 _____ () C:\Windows\system32\2015-01-27-03-15-39.087-AvastVBoxSVC.exe-1324.log
2015-01-26 22:26 - 2015-01-26 22:27 - 00000197 _____ () C:\Windows\system32\2015-01-26-21-26-55.049-AvastVBoxSVC.exe-2244.log
2015-01-26 20:04 - 2015-01-26 20:04 - 00000197 _____ () C:\Windows\system32\2015-01-26-19-04-11.025-AvastVBoxSVC.exe-2152.log
2015-01-26 16:29 - 2015-01-26 16:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-01-26 16:29 - 2015-01-26 16:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-26 16:28 - 2015-01-26 16:29 - 06958304 _____ (Microsoft Corporation) C:\Users\Heinz-Willi\Downloads\Silverlight.exe
2015-01-26 16:19 - 2015-01-26 16:19 - 00000197 _____ () C:\Windows\system32\2015-01-26-15-19-37.043-AvastVBoxSVC.exe-2188.log
2015-01-26 14:23 - 2015-01-26 14:23 - 00000197 _____ () C:\Windows\system32\2015-01-26-13-23-27.082-AvastVBoxSVC.exe-464.log
2015-01-26 11:57 - 2015-01-26 11:57 - 00000247 _____ () C:\Windows\system32\2015-01-26-10-57-17.041-aswFe.exe-2984.log
2015-01-26 11:53 - 2015-01-26 11:57 - 00000247 _____ () C:\Windows\system32\2015-01-26-10-53-28.059-aswFe.exe-2596.log
2015-01-26 11:53 - 2015-01-26 11:53 - 00000197 _____ () C:\Windows\system32\2015-01-26-10-53-25.052-AvastVBoxSVC.exe-2116.log
2015-01-25 21:46 - 2015-01-25 21:46 - 00000197 _____ () C:\Windows\system32\2015-01-25-20-46-28.076-AvastVBoxSVC.exe-2248.log
2015-01-25 20:59 - 2015-01-25 20:59 - 00000197 _____ () C:\Windows\system32\2015-01-25-19-59-40.038-AvastVBoxSVC.exe-2268.log
2015-01-25 17:22 - 2015-01-25 17:22 - 00000197 _____ () C:\Windows\system32\2015-01-25-16-22-37.041-AvastVBoxSVC.exe-1976.log
2015-01-25 11:49 - 2015-01-25 11:49 - 00000197 _____ () C:\Windows\system32\2015-01-25-10-49-26.054-AvastVBoxSVC.exe-1108.log
2015-01-25 08:26 - 2015-01-25 08:26 - 00000197 _____ () C:\Windows\system32\2015-01-25-07-26-07.049-AvastVBoxSVC.exe-2268.log
2015-01-25 05:15 - 2015-01-25 05:15 - 00000197 _____ () C:\Windows\system32\2015-01-25-04-15-17.020-AvastVBoxSVC.exe-2316.log
2015-01-24 20:21 - 2015-01-24 20:21 - 00000197 _____ () C:\Windows\system32\2015-01-24-19-21-48.009-AvastVBoxSVC.exe-1136.log
2015-01-24 18:54 - 2015-01-24 18:54 - 00000197 _____ () C:\Windows\system32\2015-01-24-17-54-14.022-AvastVBoxSVC.exe-2508.log
2015-01-24 16:50 - 2015-01-24 16:50 - 00000197 _____ () C:\Windows\system32\2015-01-24-15-50-04.027-AvastVBoxSVC.exe-2848.log
2015-01-24 13:48 - 2015-01-24 13:48 - 00000197 _____ () C:\Windows\system32\2015-01-24-12-48-16.074-AvastVBoxSVC.exe-2084.log
2015-01-24 03:47 - 2015-01-24 03:47 - 00000197 _____ () C:\Windows\system32\2015-01-24-02-47-36.009-AvastVBoxSVC.exe-2532.log
2015-01-23 22:50 - 2015-01-23 22:50 - 00000197 _____ () C:\Windows\system32\2015-01-23-21-50-02.086-AvastVBoxSVC.exe-1528.log
2015-01-23 22:26 - 2015-01-23 22:26 - 00000197 _____ () C:\Windows\system32\2015-01-23-21-26-28.025-AvastVBoxSVC.exe-348.log
2015-01-23 19:50 - 2015-01-23 19:50 - 00000197 _____ () C:\Windows\system32\2015-01-23-18-50-19.086-AvastVBoxSVC.exe-2408.log
2015-01-23 18:14 - 2015-01-23 18:14 - 00000197 _____ () C:\Windows\system32\2015-01-23-17-14-16.023-AvastVBoxSVC.exe-3256.log
2015-01-23 16:22 - 2015-01-23 16:22 - 00000197 _____ () C:\Windows\system32\2015-01-23-15-22-26.052-AvastVBoxSVC.exe-1576.log
2015-01-23 14:14 - 2015-01-23 14:15 - 00000197 _____ () C:\Windows\system32\2015-01-23-13-14-40.022-AvastVBoxSVC.exe-3456.log
2015-01-23 11:28 - 2015-01-23 11:29 - 00000197 _____ () C:\Windows\system32\2015-01-23-10-28-54.065-AvastVBoxSVC.exe-1564.log
2015-01-23 05:06 - 2015-01-23 05:06 - 00000197 _____ () C:\Windows\system32\2015-01-23-04-06-04.073-AvastVBoxSVC.exe-2512.log
2015-01-22 19:38 - 2015-01-22 19:38 - 00000197 _____ () C:\Windows\system32\2015-01-22-18-38-28.058-AvastVBoxSVC.exe-2172.log
2015-01-22 16:38 - 2015-01-22 16:38 - 00000197 _____ () C:\Windows\system32\2015-01-22-15-38-01.045-AvastVBoxSVC.exe-1172.log
2015-01-22 14:48 - 2015-01-22 14:48 - 00000197 _____ () C:\Windows\system32\2015-01-22-13-48-37.003-AvastVBoxSVC.exe-1304.log
2015-01-22 13:17 - 2015-01-22 13:18 - 00000197 _____ () C:\Windows\system32\2015-01-22-12-17-39.029-AvastVBoxSVC.exe-1344.log
2015-01-22 05:49 - 2015-01-22 05:49 - 00000197 _____ () C:\Windows\system32\2015-01-22-04-49-41.001-AvastVBoxSVC.exe-2392.log
2015-01-21 22:04 - 2015-01-21 22:05 - 00000197 _____ () C:\Windows\system32\2015-01-21-21-04-37.090-AvastVBoxSVC.exe-2224.log
2015-01-21 17:55 - 2015-01-21 17:55 - 00000197 _____ () C:\Windows\system32\2015-01-21-16-55-23.040-AvastVBoxSVC.exe-3248.log
2015-01-21 14:02 - 2015-01-21 14:03 - 00000197 _____ () C:\Windows\system32\2015-01-21-13-02-51.040-AvastVBoxSVC.exe-2056.log
2015-01-21 11:16 - 2015-01-21 11:16 - 00000197 _____ () C:\Windows\system32\2015-01-21-10-16-09.075-AvastVBoxSVC.exe-356.log
2015-01-21 05:12 - 2015-01-21 05:12 - 00000197 _____ () C:\Windows\system32\2015-01-21-04-12-08.006-AvastVBoxSVC.exe-2076.log
2015-01-20 22:40 - 2015-01-20 22:40 - 00000197 _____ () C:\Windows\system32\2015-01-20-21-40-54.055-AvastVBoxSVC.exe-1316.log
2015-01-20 19:25 - 2015-01-20 19:26 - 00000197 _____ () C:\Windows\system32\2015-01-20-18-25-49.073-AvastVBoxSVC.exe-2332.log
2015-01-20 16:03 - 2015-01-20 16:03 - 00000197 _____ () C:\Windows\system32\2015-01-20-15-03-24.050-AvastVBoxSVC.exe-2408.log
2015-01-20 13:16 - 2015-01-20 13:17 - 00000197 _____ () C:\Windows\system32\2015-01-20-12-16-38.071-AvastVBoxSVC.exe-2084.log
2015-01-20 08:48 - 2015-01-20 08:48 - 00000197 _____ () C:\Windows\system32\2015-01-20-07-48-54.039-AvastVBoxSVC.exe-2084.log
2015-01-20 07:14 - 2015-01-20 07:14 - 00000197 _____ () C:\Windows\system32\2015-01-20-06-14-04.094-AvastVBoxSVC.exe-1528.log
2015-01-20 05:50 - 2015-01-20 05:50 - 00000197 _____ () C:\Windows\system32\2015-01-20-04-50-45.057-AvastVBoxSVC.exe-2228.log
2015-01-19 21:10 - 2015-01-19 21:11 - 00000197 _____ () C:\Windows\system32\2015-01-19-20-10-59.073-AvastVBoxSVC.exe-2152.log
2015-01-19 19:56 - 2015-01-19 19:56 - 00000197 _____ () C:\Windows\system32\2015-01-19-18-56-49.087-AvastVBoxSVC.exe-1244.log
2015-01-19 19:25 - 2015-01-19 19:25 - 00000197 _____ () C:\Windows\system32\2015-01-19-18-25-51.008-AvastVBoxSVC.exe-2516.log
2015-01-19 13:01 - 2015-01-19 13:01 - 00000197 _____ () C:\Windows\system32\2015-01-19-12-01-23.080-AvastVBoxSVC.exe-1368.log
2015-01-19 09:05 - 2015-01-19 09:05 - 00000197 _____ () C:\Windows\system32\2015-01-19-08-05-40.055-AvastVBoxSVC.exe-2192.log
2015-01-19 00:14 - 2015-01-19 00:14 - 00000197 _____ () C:\Windows\system32\2015-01-18-23-14-45.028-AvastVBoxSVC.exe-1792.log
2015-01-18 20:33 - 2015-01-18 20:34 - 00000197 _____ () C:\Windows\system32\2015-01-18-19-33-46.064-AvastVBoxSVC.exe-2432.log
2015-01-18 17:29 - 2015-01-18 17:29 - 00000197 _____ () C:\Windows\system32\2015-01-18-16-29-02.071-AvastVBoxSVC.exe-2384.log
2015-01-18 14:32 - 2015-01-18 14:32 - 00000197 _____ () C:\Windows\system32\2015-01-18-13-32-11.033-AvastVBoxSVC.exe-2336.log
2015-01-18 11:30 - 2015-01-18 11:30 - 00000197 _____ () C:\Windows\system32\2015-01-18-10-30-38.046-AvastVBoxSVC.exe-1852.log
2015-01-18 08:14 - 2015-01-18 08:14 - 00000197 _____ () C:\Windows\system32\2015-01-18-07-14-10.066-AvastVBoxSVC.exe-2904.log
2015-01-17 20:46 - 2015-01-17 20:46 - 00000247 _____ () C:\Windows\system32\2015-01-17-19-46-26.045-aswFe.exe-1068.log
2015-01-17 20:42 - 2015-01-17 20:46 - 00000247 _____ () C:\Windows\system32\2015-01-17-19-42-13.075-aswFe.exe-672.log
2015-01-17 16:38 - 2015-01-17 16:38 - 00000197 _____ () C:\Windows\system32\2015-01-17-15-38-21.056-AvastVBoxSVC.exe-2152.log
2015-01-17 15:57 - 2015-01-17 15:57 - 00000197 _____ () C:\Windows\system32\2015-01-17-14-57-41.090-AvastVBoxSVC.exe-356.log
2015-01-17 14:32 - 2015-01-17 14:33 - 00000197 _____ () C:\Windows\system32\2015-01-17-13-32-49.027-AvastVBoxSVC.exe-2784.log
2015-01-17 12:00 - 2015-01-17 12:00 - 00000197 _____ () C:\Windows\system32\2015-01-17-11-00-16.009-AvastVBoxSVC.exe-2364.log
2015-01-17 08:03 - 2015-01-17 08:03 - 00000197 _____ () C:\Windows\system32\2015-01-17-07-03-46.085-AvastVBoxSVC.exe-2076.log
2015-01-16 19:52 - 2015-01-16 19:52 - 00000197 _____ () C:\Windows\system32\2015-01-16-18-52-38.036-AvastVBoxSVC.exe-2128.log
2015-01-16 18:45 - 2015-01-16 18:45 - 00000197 _____ () C:\Windows\system32\2015-01-16-17-45-40.013-AvastVBoxSVC.exe-2488.log
2015-01-16 15:31 - 2015-01-16 15:31 - 00000197 _____ () C:\Windows\system32\2015-01-16-14-31-39.064-AvastVBoxSVC.exe-2172.log
2015-01-16 12:27 - 2015-01-16 12:27 - 00000197 _____ () C:\Windows\system32\2015-01-16-11-27-24.068-AvastVBoxSVC.exe-2052.log
2015-01-16 07:08 - 2015-01-16 07:08 - 00000197 _____ () C:\Windows\system32\2015-01-16-06-08-48.021-AvastVBoxSVC.exe-2364.log
2015-01-16 04:23 - 2015-01-16 04:23 - 00000197 _____ () C:\Windows\system32\2015-01-16-03-23-22.040-AvastVBoxSVC.exe-2296.log
2015-01-16 02:58 - 2015-01-16 02:58 - 00000197 _____ () C:\Windows\system32\2015-01-16-01-58-00.056-AvastVBoxSVC.exe-2736.log
2015-01-15 20:35 - 2015-01-15 20:35 - 00000197 _____ () C:\Windows\system32\2015-01-15-19-35-22.069-AvastVBoxSVC.exe-2644.log
2015-01-15 17:33 - 2015-01-15 17:33 - 00000197 _____ () C:\Windows\system32\2015-01-15-16-33-51.000-AvastVBoxSVC.exe-2308.log
2015-01-15 16:07 - 2015-01-15 16:07 - 00000197 _____ () C:\Windows\system32\2015-01-15-15-07-34.060-AvastVBoxSVC.exe-2304.log
2015-01-15 12:54 - 2015-01-15 12:54 - 00000197 _____ () C:\Windows\system32\2015-01-15-11-54-48.071-AvastVBoxSVC.exe-2644.log
2015-01-15 10:03 - 2015-01-15 10:03 - 00000197 _____ () C:\Windows\system32\2015-01-15-09-03-09.029-AvastVBoxSVC.exe-2756.log
2015-01-15 08:12 - 2015-01-15 08:12 - 00000197 _____ () C:\Windows\system32\2015-01-15-07-12-54.037-AvastVBoxSVC.exe-2456.log
2015-01-15 06:16 - 2015-01-15 06:16 - 00000197 _____ () C:\Windows\system32\2015-01-15-05-16-09.043-AvastVBoxSVC.exe-2496.log
2015-01-14 23:46 - 2015-01-14 23:46 - 00000197 _____ () C:\Windows\system32\2015-01-14-22-46-03.080-AvastVBoxSVC.exe-2156.log
2015-01-14 20:15 - 2015-01-14 20:15 - 00000197 _____ () C:\Windows\system32\2015-01-14-19-15-01.044-AvastVBoxSVC.exe-2172.log
2015-01-14 17:33 - 2015-01-14 17:33 - 00000197 _____ () C:\Windows\system32\2015-01-14-16-33-06.092-AvastVBoxSVC.exe-2352.log
2015-01-14 14:24 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 14:24 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 14:24 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 14:24 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 14:17 - 2015-01-14 14:18 - 00000197 _____ () C:\Windows\system32\2015-01-14-13-17-48.084-AvastVBoxSVC.exe-2156.log
2015-01-14 03:56 - 2015-01-14 03:56 - 00000197 _____ () C:\Windows\system32\2015-01-14-02-56-39.069-AvastVBoxSVC.exe-2376.log
2015-01-14 01:55 - 2015-01-14 01:55 - 00000197 _____ () C:\Windows\system32\2015-01-14-00-55-31.019-AvastVBoxSVC.exe-2216.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 21:03 - 2014-10-01 17:39 - 00000000 ____D () C:\Users\Admin
2015-02-13 20:49 - 2014-11-12 00:26 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2015-02-13 20:49 - 2009-07-14 05:34 - 00023168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-13 20:49 - 2009-07-14 05:34 - 00023168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-13 20:45 - 2014-10-02 18:26 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-13 20:45 - 2014-10-01 17:25 - 01821852 _____ () C:\Windows\WindowsUpdate.log
2015-02-13 20:42 - 2014-10-01 21:22 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-13 20:42 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-13 02:18 - 2014-10-13 22:32 - 00000000 ___RD () C:\Users\Heinz-Willi\Documents\HP Melsbach neu
2015-02-12 23:04 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2015-02-12 15:04 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-02-12 12:59 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-02-11 19:54 - 2009-07-14 05:33 - 00433048 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-11 19:52 - 2014-12-11 10:29 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-11 19:52 - 2014-10-02 12:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-11 19:52 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-02-11 18:13 - 2014-10-15 15:09 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 18:07 - 2014-10-23 14:01 - 113756392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-11 14:12 - 2014-10-01 17:50 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-11 14:12 - 2009-07-14 03:04 - 00000580 _____ () C:\Windows\win.ini
2015-02-11 02:18 - 2014-10-03 22:27 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-02-09 13:28 - 2014-10-01 23:10 - 00000000 ___RD () C:\Users\Heinz-Willi\Documents\HP Melsbach
2015-02-05 20:45 - 2014-10-02 18:26 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-05 20:45 - 2014-10-02 18:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-02-05 16:06 - 2014-10-01 21:22 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-03 23:12 - 2014-07-20 15:28 - 00000000 ____D () C:\Users\Heinz-Willi\Desktop\Homepage Schalke
2015-01-29 17:09 - 2014-10-14 21:50 - 00000000 ____D () C:\Program Files\CCleaner
2015-01-27 06:07 - 2014-10-01 17:39 - 01591896 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-27 02:56 - 2014-10-23 17:34 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-01-26 16:25 - 2014-11-05 20:55 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-26 16:25 - 2014-11-05 20:54 - 00000000 ____D () C:\Program Files\Java
2015-01-26 16:24 - 2014-12-04 18:01 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-01-26 02:54 - 2014-10-02 02:42 - 00000000 ____D () C:\Users\Heinz-Willi\AppData\Local\Microsoft Games
2015-01-24 03:45 - 2009-07-14 05:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-19 01:01 - 2014-10-01 21:11 - 00000000 ____D () C:\Users\Heinz-Willi\Desktop\Sicherheitsprogramme
2015-01-19 00:18 - 2014-11-06 01:33 - 00000000 ____D () C:\Users\Admin\Downloads\backups
2015-01-19 00:11 - 2014-11-05 22:26 - 00000000 ____D () C:\ProgramData\ddc24aa9-6c5d-44d0-8c40-9bed83bb2ab7
2015-01-19 00:00 - 2014-11-07 17:19 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-18 23:59 - 2014-11-07 17:18 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2015-01-18 02:39 - 2014-11-02 02:18 - 00000000 ____D () C:\Users\Heinz-Willi\Documents\50plus
2015-01-16 14:12 - 2014-11-26 23:49 - 00000000 ____D () C:\Users\Heinz-Willi\Documents\Computer Bild

==================== Files in the root of some directories =======

2014-11-08 20:43 - 2014-11-08 20:43 - 0002212 _____ () C:\Users\Heinz-Willi\AppData\Local\recently-used.xbel
2015-02-11 02:20 - 2015-02-11 02:20 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\Heinz-Willi\AppData\Local\Temp\jre-8u31-windows-au.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-02-2015
Ran by Heinz-Willi at 2015-02-13 21:08:26
Running from C:\Users\Heinz-Willi\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

4 Elements II (HKLM\...\4 Elements II_is1) (Version: 1.0 - MyPlayCity, Inc.)
7-Zip 9.34 alpha (HKLM\...\7-Zip) (Version:  - )
Adobe AIR (HKLM\...\Adobe AIR) (Version: 16.0.0.273 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Ahnenblatt 2.85 (HKLM\...\Ahnenblatt_is1) (Version: 2.85.0.1 - Dirk Böttcher)
Amazing Pyramids (HKLM\...\Amazing Pyramids_is1) (Version: 1.0 - MyPlayCity, Inc.)
Anka (HKLM\...\Anka_is1) (Version: 1.0 - MyPlayCity, Inc.)
Astro Avenger 2 (HKLM\...\Astro Avenger 2_is1) (Version: 1.0 - MyPlayCity, Inc.)
Atlantis Quest (HKLM\...\Atlantis Quest_is1) (Version: 1.0 - MyPlayCity, Inc.)
Avast Free Antivirus (HKLM\...\Avast) (Version: 10.0.2208 - AVAST Software)
Bato (HKLM\...\Bato_is1) (Version: 1.0 - MyPlayCity, Inc.)
Beetle Bug 3 (HKLM\...\Beetle Bug 3_is1) (Version: 1.0 - MyPlayCity, Inc.)
Boulder Crash version 1.0 (HKLM\...\{3359B4FC-E557-451E-AB7F-982197E5454D}}_is1) (Version: 1.0 - Aleksey Taranov)
Brickshooter Egypt (HKLM\...\Brickshooter Egypt_is1) (Version: 1.0 - MyPlayCity, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)
Christmas Griddlers (HKLM\...\Christmas Griddlers_is1) (Version: 1.0 - MyPlayCity, Inc.)
Clutter II - He Said, She Said (HKLM\...\Clutter II - He Said, She Said_is1) (Version: 1.0 - MyPlayCity, Inc.)
Cradle of Rome (HKLM\...\Cradle of Rome_is1) (Version: 1.0 - MyPlayCity, Inc.)
EaseUS Data Recovery Wizard 8.5 (HKLM\...\EaseUS Data Recovery Wizard 8.5_is1) (Version:  - EaseUS)
Farm Frenzy - Gone Fishing (HKLM\...\Farm Frenzy - Gone Fishing_is1) (Version: 1.0 - MyPlayCity, Inc.)
Free QuizMaker 6 (HKLM\...\{2291F7F8-69DD-4B4F-B843-BA5B57999918}) (Version: 6.2.0 - iSpring Solutions Inc.)
Google Chrome (HKLM\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden
Griddlers - Ted and PET (HKLM\...\Griddlers - Ted and PET_is1) (Version: 1.0 - MyPlayCity, Inc.)
Incredi Basketball (HKLM\...\Incredi Basketball_is1) (Version: 1.0 - MyPlayCity, Inc.)
Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Jewel Quest II (HKLM\...\Jewel Quest II_is1) (Version: 1.0 - MyPlayCity, Inc.)
Jurassic Mahjong (HKLM\...\Jurassic Mahjong_is1) (Version: 1.0 - MyPlayCity, Inc.)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 35.0.1 (x86 de) (HKLM\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
Olympus Griddlers (HKLM\...\Olympus Griddlers_is1) (Version: 1.0 - MyPlayCity, Inc.)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Rainbow Web 2 (HKLM\...\Rainbow Web 2_is1) (Version: 1.0 - MyPlayCity, Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7373 - Realtek Semiconductor Corp.)
Rise of Mythos (HKLM\...\Rise of Mythos_is1) (Version: 1.0 - MyPlayCity, Inc.)
Scratch 2 Offline Editor (HKLM\...\edu.media.mit.Scratch2Editor) (Version: 428 - MIT Media Lab)
Scratch 2 Offline Editor (Version: 255 - MIT Media Lab) Hidden
Season Match - Curse of the Witch Crow (HKLM\...\Season Match - Curse of the Witch Crow_is1) (Version: 1.0 - MyPlayCity, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SlimDrivers (HKLM\...\{03E312F7-8697-4BC4-A90F-33D34EECE18C}) (Version: 2.2.44488 - SlimWare Utilities, Inc.)
Snowy - Treasure Hunter 3 (HKLM\...\Snowy - Treasure Hunter 3_is1) (Version: 1.0 - MyPlayCity, Inc.)
Star Defender 4 (HKLM\...\Star Defender 4_is1) (Version: 1.0 - MyPlayCity, Inc.)
Turtix (HKLM\...\Turtix_is1) (Version: 1.0 - MyPlayCity, Inc.)
Woolies Adventure (HKLM\...\Woolies Adventure_is1) (Version:  - My Real Games Ltd)
ZOODomino (HKLM\...\ZOODomino_is1) (Version: 1.0 - MyPlayCity, Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

ATTENTION: System Restore is disabled.
Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)


(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ?
Task: C:\Windows\Tasks\SlimDrivers Startup.job => ?

==================== Loaded Modules (whitelisted) ==============

2013-09-04 23:14 - 2013-09-04 23:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-12-02 20:36 - 2014-12-02 20:36 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-10-23 17:34 - 2015-01-27 02:56 - 03925104 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2015-01-21 03:06 - 2015-01-21 03:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2013-09-04 23:14 - 2013-09-04 23:14 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-724745677-1146776812-3954023175-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Heinz-Willi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Admin (S-1-5-21-724745677-1146776812-3954023175-1003 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-724745677-1146776812-3954023175-500 - Administrator - Disabled)
Gast (S-1-5-21-724745677-1146776812-3954023175-501 - Limited - Disabled)
Heinz-Willi (S-1-5-21-724745677-1146776812-3954023175-1001 - Limited - Enabled) => C:\Users\Heinz-Willi
HomeGroupUser$ (S-1-5-21-724745677-1146776812-3954023175-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/11/2015 05:17:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 35.0.1.5500, Zeitstempel: 0x54c1f9f3
Name des fehlerhaften Moduls: mozalloc.dll, Version: 35.0.1.5500, Zeitstempel: 0x54c1f224
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0x1738
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (02/11/2015 02:10:45 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {f8dd1ff7-2b51-4235-861d-7da59deb8c36}

Error: (02/07/2015 10:54:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 35.0.1.5500, Zeitstempel: 0x54c1f9f3
Name des fehlerhaften Moduls: mozalloc.dll, Version: 35.0.1.5500, Zeitstempel: 0x54c1f224
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0x368
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (01/28/2015 04:39:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 35.0.1.5500, Zeitstempel: 0x54c1f9f3
Name des fehlerhaften Moduls: mozalloc.dll, Version: 35.0.1.5500, Zeitstempel: 0x54c1f224
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0xe74
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (01/21/2015 02:40:54 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.


Vorgang:
   Für die Sicherung initialisieren

Error: (01/21/2015 02:40:54 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.


Vorgang:
   Für die Sicherung initialisieren

Error: (01/15/2015 02:04:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mspaint.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc683
Name des fehlerhaften Moduls: mspaint.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc683
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003e401
ID des fehlerhaften Prozesses: 0x70c
Startzeit der fehlerhaften Anwendung: 0xmspaint.exe0
Pfad der fehlerhaften Anwendung: mspaint.exe1
Pfad des fehlerhaften Moduls: mspaint.exe2
Berichtskennung: mspaint.exe3

Error: (01/12/2015 05:11:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm gimp-2.8.exe, Version 2.8.14.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: e98

Startzeit: 01d02e825b19c5aa

Endzeit: 10

Anwendungspfad: C:\Program Files\GIMP 2\bin\gimp-2.8.exe

Berichts-ID: a10c9e87-9a75-11e4-ad99-002268670f8a

Error: (01/06/2015 05:09:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Hot-Potatoes-lnstall.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 718

Startzeit: 01d029ca97151b94

Endzeit: 33

Anwendungspfad: C:\Users\Heinz-Willi\Downloads\Hot-Potatoes-lnstall.exe

Berichts-ID: 653e1047-95be-11e4-af6b-002268670f8a

Error: (01/05/2015 00:51:59 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm gimp-2.8.exe, Version 2.8.14.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 96c

Startzeit: 01d028ddefba41db

Endzeit: 16

Anwendungspfad: C:\Program Files\GIMP 2\bin\gimp-2.8.exe

Berichts-ID: 3d650b90-94d1-11e4-941f-002268670f8a


System errors:
=============
Error: (02/13/2015 05:10:17 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{26B1CF8F-910E-4374-8C2A-F51B9ACC0D-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (02/13/2015 02:50:30 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{26B1CF8F-910E-4374-8C2A-F51B9ACC0D-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (02/12/2015 07:52:43 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{26B1CF8F-910E-4374-8C2A-F51B9ACC0D-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (02/12/2015 06:37:46 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{26B1CF8F-910E-4374-8C2A-F51B9ACC0D-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (02/12/2015 06:33:16 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{26B1CF8F-910E-4374-8C2A-F51B9ACC0D-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (02/12/2015 01:50:40 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{26B1CF8F-910E-4374-8C2A-F51B9ACC0D-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (02/11/2015 09:45:53 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{26B1CF8F-910E-4374-8C2A-F51B9ACC0D-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (02/11/2015 05:00:16 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{26B1CF8F-910E-4374-8C2A-F51B9ACC0D-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (02/11/2015 01:04:20 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{26B1CF8F-910E-4374-8C2A-F51B9ACC0D-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (02/10/2015 00:45:12 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{26B1CF8F-910E-4374-8C2A-F51B9ACC0D-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.


Microsoft Office Sessions:
=========================
Error: (02/11/2015 05:17:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe35.0.1.550054c1f9f3mozalloc.dll35.0.1.550054c1f2248000000300001425173801d046159ec40cf3C:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\Mozilla Firefox\mozalloc.dll7e5ff979-b209-11e4-ad14-002268670f8a

Error: (02/11/2015 02:10:45 AM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {f8dd1ff7-2b51-4235-861d-7da59deb8c36}

Error: (02/07/2015 10:54:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe35.0.1.550054c1f9f3mozalloc.dll35.0.1.550054c1f224800000030000142536801d043173a7be1eaC:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\Mozilla Firefox\mozalloc.dllde4328d5-af13-11e4-8cfe-002268670f8a

Error: (01/28/2015 04:39:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe35.0.1.550054c1f9f3mozalloc.dll35.0.1.550054c1f2248000000300001425e7401d03b10227870d6C:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\Mozilla Firefox\mozalloc.dlle5e7b1de-a703-11e4-b4b5-002268670f8a

Error: (01/21/2015 02:40:54 AM) (Source: VSS) (EventID: 8193) (User: )
Description: OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)0x8007045b, Der Computer wird heruntergefahren.


Vorgang:
   Für die Sicherung initialisieren

Error: (01/21/2015 02:40:54 AM) (Source: VSS) (EventID: 8193) (User: )
Description: OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)0x8007045b, Der Computer wird heruntergefahren.


Vorgang:
   Für die Sicherung initialisieren

Error: (01/15/2015 02:04:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mspaint.exe6.1.7600.163854a5bc683mspaint.exe6.1.7600.163854a5bc683c00000050003e40170c01d0305f10a9c33fC:\Windows\system32\mspaint.exeC:\Windows\system32\mspaint.exe7ea1f964-9c52-11e4-9c3d-002268670f8a

Error: (01/12/2015 05:11:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: gimp-2.8.exe2.8.14.0e9801d02e825b19c5aa10C:\Program Files\GIMP 2\bin\gimp-2.8.exea10c9e87-9a75-11e4-ad99-002268670f8a

Error: (01/06/2015 05:09:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Hot-Potatoes-lnstall.exe0.0.0.071801d029ca97151b9433C:\Users\Heinz-Willi\Downloads\Hot-Potatoes-lnstall.exe653e1047-95be-11e4-af6b-002268670f8a

Error: (01/05/2015 00:51:59 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: gimp-2.8.exe2.8.14.096c01d028ddefba41db16C:\Program Files\GIMP 2\bin\gimp-2.8.exe3d650b90-94d1-11e4-941f-002268670f8a


CodeIntegrity Errors:
===================================
  Date: 2014-10-23 14:43:25.746
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptsp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-10-23 14:43:25.574
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptsp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-10-23 14:43:25.371
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptsp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-10-23 14:43:25.200
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptsp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-10-23 14:43:25.013
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptsp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-10-23 14:43:24.841
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptsp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-10-23 14:43:24.654
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptsp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-10-23 14:43:24.467
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptsp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-10-23 14:43:24.279
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptsp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-10-23 14:43:24.077
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptsp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: AMD Athlon(tm) Dual Core Processor 5050e
Percentage of memory in use: 43%
Total physical RAM: 2815.18 MB
Available physical RAM: 1580.03 MB
Total Pagefile: 5628.65 MB
Available Pagefile: 4339.06 MB
Total Virtual: 2047.88 MB
Available Virtual: 1905.14 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:290.78 GB) (Free:118.58 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Eigene Dateien) (Fixed) (Total:53.71 GB) (Free:52.22 GB) NTFS
Drive e: (Sonstige Programme) (Fixed) (Total:102.54 GB) (Free:94.66 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-02-13 21:36:39
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD6400AAKS-22A7B2 rev.01.03B01 596,17GB
Running: Gmer-19357.exe; Driver: C:\Users\Admin\AppData\Local\Temp\ffliauod.sys


---- System - GMER 2.1 ----

SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwAddBootEntry [0x8FE2EAC4]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                  ZwAllocateVirtualMemory [0x8FEEA0BA]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwAssignProcessToJobObject [0x8FE2F5A2]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwCreateEvent [0x8FE3B63C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwCreateEventPair [0x8FE3B688]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwCreateIoCompletion [0x8FE3B822]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwCreateMutant [0x8FE3B5AA]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                  ZwCreateSection [0x8FEEA494]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwCreateSemaphore [0x8FE3B5F2]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                  ZwCreateThread [0x8FEEA724]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                  ZwCreateThreadEx [0x8FEEA80E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwCreateTimer [0x8FE3B7DC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwDebugActiveProcess [0x8FE30390]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwDeleteBootEntry [0x8FE2EB2A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwDuplicateObject [0x8FE33B86]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwLoadDriver [0x8FE2E716]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                  ZwMapViewOfSection [0x8FEEA574]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwModifyBootEntry [0x8FE2EB90]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwNotifyChangeKey [0x8FE33F7C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwNotifyChangeMultipleKeys [0x8FE30E78]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwOpenEvent [0x8FE3B666]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwOpenEventPair [0x8FE3B6AA]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwOpenIoCompletion [0x8FE3B846]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwOpenMutant [0x8FE3B5D0]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwOpenProcess [0x8FE3347E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwOpenSection [0x8FE3B75A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwOpenSemaphore [0x8FE3B61A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwOpenThread [0x8FE3386A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwOpenTimer [0x8FE3B800]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                  ZwProtectVirtualMemory [0x8FEEA312]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwQueryObject [0x8FE30CEC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwQueueApcThreadEx [0x8FE309FA]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwSetBootEntryOrder [0x8FE2EBF6]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwSetBootOptions [0x8FE2EC5C]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                  ZwSetContextThread [0x8FEEA670]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwSetSystemInformation [0x8FE2E7B0]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwSetSystemPowerState [0x8FE2E982]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwShutdownSystem [0x8FE2E910]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwSuspendProcess [0x8FE3055A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwSuspendThread [0x8FE306BC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwSystemDebugControl [0x8FE2EA0A]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                  ZwTerminateProcess [0x8FEEA3E0]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwTerminateThread [0x8FE301EA]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                                                 ZwVdmControl [0x8FE2ECC2]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                                                  ZwWriteVirtualMemory [0x8FEEA244]

---- Kernel code sections - GMER 2.1 ----

.text  ntkrnlpa.exe!ZwRequestWaitReplyPort + 1495                                                                              82C819E5 1 Byte  [06]
.text  ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                                                  82CBB312 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 10CB                                                                                     82CC2550 4 Bytes  JMP C42D8FE2 
.text  ntkrnlpa.exe!KeRemoveQueueEx + 10F3                                                                                     82CC2578 4 Bytes  [BA, A0, EE, 8F]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1153                                                                                     82CC25D8 4 Bytes  [A2, F5, E2, 8F]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11A7                                                                                     82CC262C 8 Bytes  [3C, B6, E3, 8F, 88, B6, E3, ...]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11B3                                                                                     82CC2638 4 Bytes  [22, B8, E3, 8F]
.text  ...                                                                                                                     
PAGE   ntkrnlpa.exe!ZwReplyWaitReceivePortEx + 108                                                                             82E7E61D 4 Bytes  CALL 8FE3155F \SystemRoot\system32\drivers\aswSnx.sys
PAGE   ntkrnlpa.exe!ZwAlpcSendWaitReceivePort + 122                                                                            82E98483 4 Bytes  CALL 8FE31575 \SystemRoot\system32\drivers\aswSnx.sys
.text  C:\Windows\system32\drivers\atikmdag.sys                                                                                section is writeable [0x91031000, 0x227A14, 0xE8000020]

---- User code sections - GMER 2.1 ----

.text  C:\Program Files\Microsoft Office\Office14\WINWORD.EXE[304] kernel32.dll!SetUnhandledExceptionFilter                    762BF5AB 5 Bytes  JMP 5D3A7765 C:\Program Files\Common Files\Microsoft Shared\office14\mso.dll
.text  C:\Program Files\Microsoft Office\Office14\WINWORD.EXE[304] ole32.dll!OleLoadFromStream                                 77B36143 5 Bytes  JMP 5E0BA10A C:\Program Files\Common Files\Microsoft Shared\office14\mso.dll
.text  C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1332] kernel32.dll!SetUnhandledExceptionFilter                       762BF5AB 8 Bytes  [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
.text  C:\Program Files\AVAST Software\Avast\avastui.exe[3672] kernel32.dll!SetUnhandledExceptionFilter                        762BF5AB 8 Bytes  [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] ntdll.dll!NtCreateFile                                               77D85608 5 Bytes  JMP 65379AE0 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] ntdll.dll!NtFlushBuffersFile                                         77D85998 5 Bytes  JMP 6535C434 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] ntdll.dll!NtQueryFullAttributesFile                                  77D86028 5 Bytes  JMP 6535C150 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] ntdll.dll!NtReadFile                                                 77D862F8 5 Bytes  JMP 6535C330 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] ntdll.dll!NtReadFileScatter                                          77D86308 5 Bytes  JMP 65D7F60F C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] ntdll.dll!NtWriteFile                                                77D86AA8 5 Bytes  JMP 6537A9F0 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] ntdll.dll!NtWriteFileGather                                          77D86AB8 5 Bytes  JMP 65D7F5BE C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] ntdll.dll!LdrUnloadDll                                               77D9C8DE 5 Bytes  JMP 000E03FC 
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] ntdll.dll!LdrLoadDll                                                 77DA22AE 5 Bytes  JMP 6B4D1F42 C:\Program Files\Mozilla Firefox\mozglue.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] KERNEL32.dll!K32GetDeviceDriverBaseNameW + 5D                        762B94E6 7 Bytes  JMP 65CA4AA0 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] KERNEL32.dll!QueryPerformanceCounter + 13                            762BC4E5 7 Bytes  JMP 65CA4AC3 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] KERNEL32.dll!LoadAppInitDlls + 355                                   762BF5A6 7 Bytes  JMP 653763D0 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] user32.dll!GetWindowInfo                                             77EB4B5E 5 Bytes  JMP 65B9B991 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3700] GDI32.dll!GetViewportOrgEx + 26C                                     7699884B 7 Bytes  JMP 65CA4A21 C:\Program Files\Mozilla Firefox\xul.dll

---- Registry - GMER 2.1 ----

Reg    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active                                      
Reg    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active@A8D78A47                             703
Reg    HKLM\SOFTWARE\Microsoft\Windows Search\UsnNotifier\Windows\Catalogs\SystemIndex@{2289287D-4987-11E4-BE0F-806E6F6E6963}  8356843696

---- EOF - GMER 2.1 ----
         

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 00:14:19, on 19.01.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\Admin\Downloads\hijackthis_29344.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] "C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe" "C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware "
O4 - HKCU\..\Run: [EPSON BX305 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGJE.EXE /FU "C:\Windows\TEMP\E_SC754.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: EPSON V5 Service4(04) (EPSON_EB_RPCV4_04) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE
O23 - Service: EPSON V3 Service4(04) (EPSON_PM_RPCV4_04) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE
O23 - Service: Google Update-Dienst (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-Dienst (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

--
End of file - 5284 bytes