Trojaner-Board - Vista: APPL/BProtector.Gen in C:\ProgramDat\BrowserProtect\...\BrowserProtect.dll

Hallo,

mein Virenscanner hat gestern auf das Programm APPL/BProtector.Gen angeschlagen.
Nach Recherche bin ich auf euer Forum gestoßen.
Einen Scan mit FRST habe ich gerade eben schon durchgeführt.
Anbei die Daten.
Außerdem habe ich noch das Logfile von meinem Virenscanner eingefügt.
Bitte helft mir weiter. Ich weiß nicht so genau, wie schlimm das Ganze ist und wie ich genau vorgehen muss. Ich hatte bisher immer Glück und wurde verschont.

Vielen Dank schon mal für jede Hilfe.
Smorvi

FRST.txt:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-09-2013

Ran by Simone Petry (administrator) on SIMONEPETRY-PC on 16-09-2013 16:56:47

Running from C:\Users\Simone Petry\Downloads

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe

(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\NDSTray.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

() C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

() C:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe

(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

() C:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe

(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe

(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\system32\conime.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [NDSTray.exe] - NDSTray.exe

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [90112 2006-11-10] ()

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-11-29] (Synaptics, Inc.)

HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [431456 2008-01-17] (TOSHIBA Corporation)

HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [54608 2007-10-31] (TOSHIBA Corporation)

HKLM\...\Run: [SmoothView] - C:\Program Files\Toshiba\SmoothView\SmoothView.exe [509816 2008-01-25] (TOSHIBA Corporation)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-05] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

Winlogon\Notify\igfxcui: igfxdev.dll [X]

HKCU\...\Run: [TOSCDSPD] - TOSCDSPD.EXE

HKCU\...\Run: [Google Update] - C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-12-14] (Google Inc.)

MountPoints2: {d595702f-8fe8-11dd-9b88-001e68c53ee1} - D:\LaunchU3.exe -a

HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Default\...\Run: [TOSCDSPD] - C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2007-12-29] ()

HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Default User\...\Run: [TOSCDSPD] - C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2007-12-29] ()

Startup: C:\ProgramData\1912 Titanic Mystery ()

Startup: C:\ProgramData\Absolutist ()

Startup: C:\ProgramData\Adobe ()

Startup: C:\ProgramData\Advanced Chemistry Development ()

Startup: C:\ProgramData\AirportMania ()

Startup: C:\ProgramData\Alawar ()

Startup: C:\ProgramData\Alawar Entertainment ()

Startup: C:\ProgramData\Alawar Stargaze ()

Startup: C:\ProgramData\AlawarEntertainment ()

Startup: C:\ProgramData\AlawarSouthpoint ()

Startup: C:\ProgramData\Alex Gordon ()

Startup: C:\ProgramData\Aliasworlds ()

Startup: C:\ProgramData\Anwendungsdaten ()

Startup: C:\ProgramData\Apple ()

Startup: C:\ProgramData\Apple Computer ()

Startup: C:\ProgramData\Application Data ()

Startup: C:\ProgramData\Arcade Lab ()

Startup: C:\ProgramData\Arizona Rose ()

Startup: C:\ProgramData\Artist Colony ()

Startup: C:\ProgramData\Ashtons Family Resort ()

Startup: C:\ProgramData\Astar Games ()

Startup: C:\ProgramData\ATI ()

Startup: C:\ProgramData\Avira ()

Startup: C:\ProgramData\Awem ()

Startup: C:\ProgramData\Babylon ()

Startup: C:\ProgramData\Balls ()

Startup: C:\ProgramData\BC Soft Games ()

Startup: C:\ProgramData\Becky Brogan 2 ()

Startup: C:\ProgramData\Big Fish Games ()

Startup: C:\ProgramData\BigFish ()

Startup: C:\ProgramData\Bilbo ()

Startup: C:\ProgramData\Black Blob Studios ()

Startup: C:\ProgramData\blg ()

Startup: C:\ProgramData\BlitPop ()

Startup: C:\ProgramData\BrowserProtect ()

Startup: C:\ProgramData\CannyGames ()

Startup: C:\ProgramData\Canon IJ Network Tool ()

Startup: C:\ProgramData\CanonBJ ()

Startup: C:\ProgramData\CanonEPP ()

Startup: C:\ProgramData\CanonIJEGV ()

Startup: C:\ProgramData\CanonIJEPPEX2 ()

Startup: C:\ProgramData\CanonIJMSetup ()

Startup: C:\ProgramData\CanonIJScan ()

Startup: C:\ProgramData\CanonIJWSpt ()

Startup: C:\ProgramData\casualArts ()

Startup: C:\ProgramData\Cateia Games ()

Startup: C:\ProgramData\cerasus.media ()

Startup: C:\ProgramData\Colibri Games ()

Startup: C:\ProgramData\Common Files ()

Startup: C:\ProgramData\CrioGames ()

Startup: C:\ProgramData\CropBusters ()

Startup: C:\ProgramData\Crown ()

Startup: C:\ProgramData\Deadtime Stories ()

Startup: C:\ProgramData\Deep Shadows ()

Startup: C:\ProgramData\Desktop ()

Startup: C:\ProgramData\DivoGames ()

Startup: C:\ProgramData\Documents ()

Startup: C:\ProgramData\Dokumente ()

Startup: C:\ProgramData\Dress-up-pups ()

Startup: C:\ProgramData\Electronic Arts ()

Startup: C:\ProgramData\Elephant Games ()

Startup: C:\ProgramData\Escape From Paradise ()

Startup: C:\ProgramData\ezsidmv.dat ()

Startup: C:\ProgramData\Far Mills ()

Startup: C:\ProgramData\Farm Fishes ()

Startup: C:\ProgramData\FarmFrenzy2 ()

Startup: C:\ProgramData\FarmFrenzy3 ()

Startup: C:\ProgramData\FarmFrenzy3_America ()

Startup: C:\ProgramData\FarmFrenzy3_Arctica ()

Startup: C:\ProgramData\FarmFrenzy3_Madagascar ()

Startup: C:\ProgramData\FarmFrenzy3_Russia ()

Startup: C:\ProgramData\FarmFrenzy_Rome ()

Startup: C:\ProgramData\FarmFrenzy_Vikings ()

Startup: C:\ProgramData\Favoriten ()

Startup: C:\ProgramData\Favorites ()

Startup: C:\ProgramData\Fenomen Games ()

Startup: C:\ProgramData\Fitn17 ()

Startup: C:\ProgramData\Flood Light Games ()

Startup: C:\ProgramData\Floodlight Games ()

Startup: C:\ProgramData\FloodLightGames ()

Startup: C:\ProgramData\FreshGames ()

Startup: C:\ProgramData\Friday's games ()

Startup: C:\ProgramData\Friends Games ()

Startup: C:\ProgramData\Fugazo ()

Startup: C:\ProgramData\fullscreen=true ()

Startup: C:\ProgramData\Funny Bear Studio ()

Startup: C:\ProgramData\GAMEON ()

Startup: C:\ProgramData\GameXzone ()

Startup: C:\ProgramData\Gogii ()

Startup: C:\ProgramData\Gogii Games ()

Startup: C:\ProgramData\Google ()

Startup: C:\ProgramData\Hewlett-Packard ()

Startup: C:\ProgramData\HideAndSecret3 ()

Startup: C:\ProgramData\HipSoft ()

Startup: C:\ProgramData\HoverBee Studios ()

Startup: C:\ProgramData\HP ()

Startup: C:\ProgramData\hps ()

Startup: C:\ProgramData\HPSSUPPLY ()

Startup: C:\ProgramData\hpzinstall.log ()

Startup: C:\ProgramData\HTC ()

Startup: C:\ProgramData\IBUpdaterService ()

Startup: C:\ProgramData\Intenium ()

Startup: C:\ProgramData\InterAction studios ()

Startup: C:\ProgramData\Islands ()

Startup: C:\ProgramData\Jewelleria ()

Startup: C:\ProgramData\JollyBear ()

Startup: C:\ProgramData\JuliettesFashionEmpire ()

Startup: C:\ProgramData\Kingdom ()

Startup: C:\ProgramData\KranX ()

Startup: C:\ProgramData\Kreuzworträtsel - Kalender Edition ()

Startup: C:\ProgramData\LittleGamesCompany ()

Startup: C:\ProgramData\LoadHelper ()

Startup: C:\ProgramData\Lost Treasures of El Dorado ()

Startup: C:\ProgramData\MAGIX ()

Startup: C:\ProgramData\Maximize Games ()

Startup: C:\ProgramData\McAfee ()

Startup: C:\ProgramData\Mean Hamster ()

Startup: C:\ProgramData\Media Center Programs ()

Startup: C:\ProgramData\MeinEigenesCafé ()

Startup: C:\ProgramData\Meridian93 ()

Startup: C:\ProgramData\Merscom ()

Startup: C:\ProgramData\Microsoft ()

Startup: C:\ProgramData\Microsoft Help ()

Startup: C:\ProgramData\Motorola ()

Startup: C:\ProgramData\MumboJumbo ()

Startup: C:\ProgramData\mxfilerelatedcache.mxc2 ()

Startup: C:\ProgramData\MythPeople ()

Startup: C:\ProgramData\NannyMania ()

Startup: C:\ProgramData\Nevosoft-Breeze ()

Startup: C:\ProgramData\Office Genuine Advantage ()

Startup: C:\ProgramData\Particles ()

Startup: C:\ProgramData\Perfect-Tree ()

Startup: C:\ProgramData\Pets Fun House ()

Startup: C:\ProgramData\PlayFirst ()

Startup: C:\ProgramData\PlayfulAge ()

Startup: C:\ProgramData\Playrix Entertainment ()

Startup: C:\ProgramData\PoBros ()

Startup: C:\ProgramData\PuzzlesByJoe ()

Startup: C:\ProgramData\QuickTime ()

Startup: C:\ProgramData\RescueFrenzy ()

Startup: C:\ProgramData\rionix ()

Startup: C:\ProgramData\Rumbic Studio ()

Startup: C:\ProgramData\Sandlot Games ()

Startup: C:\ProgramData\ScreenSeven ()

Startup: C:\ProgramData\Skype ()

Startup: C:\ProgramData\SpinTop Games ()

Startup: C:\ProgramData\SpookyMall ()

Startup: C:\ProgramData\Sprouts Adventure ()

Startup: C:\ProgramData\Start Menu ()

Startup: C:\ProgramData\Startmenü ()

Startup: C:\ProgramData\SugarGames ()

Startup: C:\ProgramData\SulusGames ()

Startup: C:\ProgramData\Sun ()

Startup: C:\ProgramData\TEMP ()

Startup: C:\ProgramData\Templates ()

Startup: C:\ProgramData\TERMINAL Studio ()

Startup: C:\ProgramData\Terrafarmers ()

Startup: C:\ProgramData\The Game Equation ()

Startup: C:\ProgramData\The Mirror Mysteries ()

Startup: C:\ProgramData\TheFallTrilogyEp3-BF ()

Startup: C:\ProgramData\TheRace_dev ()

Startup: C:\ProgramData\tmp ()

Startup: C:\ProgramData\Toshiba ()

Startup: C:\ProgramData\ToshibaEurope ()

Startup: C:\ProgramData\Try2 ()

Startup: C:\ProgramData\Trymedia ()

Startup: C:\ProgramData\TuneUp Software ()

Startup: C:\ProgramData\UClick ()

Startup: C:\ProgramData\Ulead Systems ()

Startup: C:\ProgramData\Venus DS ()

Startup: C:\ProgramData\VirtualFarm ()

Startup: C:\ProgramData\VirtualFarm2 ()

Startup: C:\ProgramData\Vogelpiraten ()

Startup: C:\ProgramData\Vogue Tales ()

Startup: C:\ProgramData\Vorlagen ()

Startup: C:\ProgramData\WeatherLord ()

Startup: C:\ProgramData\WEBREG ()

Startup: C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} ()

Startup: C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} ()

Startup: C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} ()

Startup: C:\Users\Default\Anwendungsdaten ()

Startup: C:\Users\Default\AppData ()

Startup: C:\Users\Default\Application Data ()

Startup: C:\Users\Default\Cookies ()

Startup: C:\Users\Default\Desktop ()

Startup: C:\Users\Default\Documents ()

Startup: C:\Users\Default\Downloads ()

Startup: C:\Users\Default\Druckumgebung ()

Startup: C:\Users\Default\Eigene Dateien ()

Startup: C:\Users\Default\Favorites ()

Startup: C:\Users\Default\Links ()

Startup: C:\Users\Default\Local Settings ()

Startup: C:\Users\Default\Lokale Einstellungen ()

Startup: C:\Users\Default\Music ()

Startup: C:\Users\Default\My Documents ()

Startup: C:\Users\Default\NetHood ()

Startup: C:\Users\Default\Netzwerkumgebung ()

Startup: C:\Users\Default\NTUSER.DAT ()

Startup: C:\Users\Default\NTUSER.DAT.LOG ()

Startup: C:\Users\Default\ntuser.dat.LOG1 ()

Startup: C:\Users\Default\ntuser.dat.LOG2 ()

Startup: C:\Users\Default\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf ()

Startup: C:\Users\Default\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Default\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Default\Pictures ()

Startup: C:\Users\Default\PrintHood ()

Startup: C:\Users\Default\Recent ()

Startup: C:\Users\Default\Saved Games ()

Startup: C:\Users\Default\SendTo ()

Startup: C:\Users\Default\Start Menu ()

Startup: C:\Users\Default\Startmenü ()

Startup: C:\Users\Default\Templates ()

Startup: C:\Users\Default\Videos ()

Startup: C:\Users\Default\Vorlagen ()

Startup: C:\Users\Public\Desktop ()

Startup: C:\Users\Public\Documents ()

Startup: C:\Users\Public\Downloads ()

Startup: C:\Users\Public\DRM ()

Startup: C:\Users\Public\Favorites ()

Startup: C:\Users\Public\Music ()

Startup: C:\Users\Public\mxfilerelatedcache.mxc2 ()

Startup: C:\Users\Public\NTUSER.DAT ()

Startup: C:\Users\Public\NTUSER.DAT.LOG1 ()

Startup: C:\Users\Public\NTUSER.DAT.LOG2 ()

Startup: C:\Users\Public\NTUSER.DAT{1b382e45-9943-11dd-a307-001e68c53ee1}.TM.blf ()

Startup: C:\Users\Public\NTUSER.DAT{1b382e45-9943-11dd-a307-001e68c53ee1}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Public\NTUSER.DAT{1b382e45-9943-11dd-a307-001e68c53ee1}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Public\NTUSER.DAT{8c9f9ea2-9395-11dd-a473-001e68c53ee1}.TM.blf ()

Startup: C:\Users\Public\NTUSER.DAT{8c9f9ea2-9395-11dd-a473-001e68c53ee1}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Public\NTUSER.DAT{8c9f9ea2-9395-11dd-a473-001e68c53ee1}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Public\Pictures ()

Startup: C:\Users\Public\Recorded TV ()

Startup: C:\Users\Public\Videos ()

Startup: C:\Users\Simone Petry\Anwendungsdaten ()

Startup: C:\Users\Simone Petry\AppData ()

Startup: C:\Users\Simone Petry\Briefe ()

Startup: C:\Users\Simone Petry\Contacts ()

Startup: C:\Users\Simone Petry\Cookies ()

Startup: C:\Users\Simone Petry\Desktop ()

Startup: C:\Users\Simone Petry\Documents ()

Startup: C:\Users\Simone Petry\Downloads ()

Startup: C:\Users\Simone Petry\Druckumgebung ()

Startup: C:\Users\Simone Petry\Eigene Dateien ()

Startup: C:\Users\Simone Petry\Favorites ()

Startup: C:\Users\Simone Petry\geogebra ()

Startup: C:\Users\Simone Petry\Geschenke, Gutscheine ()

Startup: C:\Users\Simone Petry\Haus ()

Startup: C:\Users\Simone Petry\Links ()

Startup: C:\Users\Simone Petry\Lokale Einstellungen ()

Startup: C:\Users\Simone Petry\Material Chemie ()

Startup: C:\Users\Simone Petry\Music ()

Startup: C:\Users\Simone Petry\mxfilerelatedcache.mxc2 ()

Startup: C:\Users\Simone Petry\Netzwerkumgebung ()

Startup: C:\Users\Simone Petry\NTUSER.DAT ()

Startup: C:\Users\Simone Petry\ntuser.dat.LOG1 ()

Startup: C:\Users\Simone Petry\ntuser.dat.LOG2 ()

Startup: C:\Users\Simone Petry\NTUSER.DAT_tureg_new.LOG1 ()

Startup: C:\Users\Simone Petry\NTUSER.DAT_tureg_new.LOG2 ()

Startup: C:\Users\Simone Petry\NTUSER.DAT_tureg_old ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{4e79ca56-24f7-11de-8326-001e68c53ee1}.TM.blf ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{4e79ca56-24f7-11de-8326-001e68c53ee1}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{4e79ca56-24f7-11de-8326-001e68c53ee1}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{58ce7e24-af1d-11e2-8ed4-806e6f6e6963}.TM.blf ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{58ce7e24-af1d-11e2-8ed4-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{58ce7e24-af1d-11e2-8ed4-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{d275a980-59d0-11e2-94c9-806e6f6e6963}.TM.blf ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{d275a980-59d0-11e2-94c9-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{d275a980-59d0-11e2-94c9-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Simone Petry\ntuser.ini ()

Startup: C:\Users\Simone Petry\Organisation Schulen ()

Startup: C:\Users\Simone Petry\Pictures ()

Startup: C:\Users\Simone Petry\Recent ()

Startup: C:\Users\Simone Petry\Saved Games ()

Startup: C:\Users\Simone Petry\Schule (Aushilfe, Praktikum) ()

Startup: C:\Users\Simone Petry\Searches ()

Startup: C:\Users\Simone Petry\SendTo ()

Startup: C:\Users\Simone Petry\Startmenü ()

Startup: C:\Users\Simone Petry\Studienseminar ()

Startup: C:\Users\Simone Petry\Unterricht ()

Startup: C:\Users\Simone Petry\Versuch Natrium in Wasser.docx ()

Startup: C:\Users\Simone Petry\Videos ()

Startup: C:\Users\Simone Petry\Vorlagen ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.claro-search.com/?affID=114506&tt=0313_5&babsrc=HP_clro&mntrId=6ca2817200000000000000215c358511

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de

HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.claro-search.com/?affID=114506&tt=0313_5&babsrc=HP_clro&mntrId=6ca2817200000000000000215c358511

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de

SearchScopes: HKLM - DefaultScope {CA0D91C8-F9EC-4B40-997E-02F8BA3728F4} URL = hxxp://www.google.de/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;

SearchScopes: HKLM - {CA0D91C8-F9EC-4B40-997E-02F8BA3728F4} URL = hxxp://www.google.de/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;

SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=114506&tt=0313_5&babsrc=SP_clro&mntrId=6ca2817200000000000000215c358511

SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=114506&tt=0313_5&babsrc=SP_clro&mntrId=6ca2817200000000000000215c358511

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

DPF: {CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_10-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_10-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/

CHR RestoreOnStartup: "hxxp://www.google.de/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File

CHR Plugin: (Shockwave Flash) - C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\gcswf32.dll No File

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\QuickTime\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Java Deployment Toolkit 7.0.70.10) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File

CHR Plugin: (Unity Player) - C:\Users\Simone Petry\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

CHR Plugin: (Google Update) - C:\Users\Simone Petry\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File

CHR Plugin: (Move Streaming Media Player) - C:\Users\Simone Petry\AppData\Roaming\Move Networks\plugins\npqmp071505000010.dll (Move Networks)

CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Extension: (Chrome In-App Payments service) - C:\Users\SIMONE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-05] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-05] (Avira Operations GmbH & Co. KG)

R2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2554472 2013-01-04] ()

R2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2007-12-25] (TOSHIBA CORPORATION)

S4 HTCMonitorService; C:\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2012-10-26] (Nero AG)

S4 o2flash; C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe [65536 2007-02-12] (O2Micro International)

S4 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2012-10-08] ()

S4 TOSHIBA SMART Log Service; C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [126976 2007-12-03] (TOSHIBA Corporation)

S2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1724192 2013-01-28] (TuneUp Software)
 

==================== Drivers (Whitelisted) ====================
 

R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [277544 2009-01-19] (Protect Software GmbH)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2010-04-01] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-28] (Avira Operations GmbH & Co. KG)

R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)

R3 CnxtHdAudAddService; C:\Windows\System32\drivers\CHDART.sys [187904 2008-02-01] (Conexant Systems Inc.)

S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)

S4 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2010-04-01] ()

R3 QIOMem; C:\Windows\System32\DRIVERS\QIOMem.sys [8192 2007-04-09] (TOSHIBA)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)

R3 UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [18432 2007-12-17] (Chicony Electronics Co., Ltd.)

S3 igfx; system32\DRIVERS\igdkmd32.sys [x]

S3 IntcHdmiAddService; system32\drivers\IntcHdmi.sys [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S3 Tosrfcom; No ImagePath
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-16 16:56 - 2013-09-16 16:56 - 00000000 ____D C:\FRST

2013-09-16 16:39 - 2013-09-16 16:39 - 01084083 _____ (Farbar) C:\Users\Simone Petry\Downloads\FRST.exe

2013-09-13 07:57 - 2013-09-13 07:57 - 04751752 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe

2013-09-12 22:55 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-12 22:55 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-12 22:55 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-12 22:55 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-12 22:55 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-09-12 22:55 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-12 22:55 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-09-12 22:55 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-12 22:55 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-12 22:55 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-09-12 22:55 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-09-12 22:55 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-12 22:55 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-12 22:55 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-12 22:55 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-09-12 22:55 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-12 22:01 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-12 22:01 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll

2013-09-04 21:02 - 2013-09-04 21:03 - 00315392 _____ C:\Users\Simone Petry\Downloads\ZentraleMFB_Ueberblic_0d_0a_k_1 (1).ppt

2013-09-01 16:21 - 2013-09-01 16:20 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-08-28 20:28 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
 

==================== One Month Modified Files and Folders =======
 

2013-09-16 16:57 - 2012-04-07 16:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-16 16:56 - 2013-09-16 16:56 - 00000000 ____D C:\FRST

2013-09-16 16:39 - 2013-09-16 16:39 - 01084083 _____ (Farbar) C:\Users\Simone Petry\Downloads\FRST.exe

2013-09-16 16:37 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-16 16:37 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-16 16:26 - 2008-10-01 17:57 - 01816898 _____ C:\Windows\WindowsUpdate.log

2013-09-16 16:20 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-15 23:08 - 2006-11-02 15:01 - 00032510 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-09-15 23:03 - 2011-12-14 17:56 - 00001148 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000UA.job

2013-09-15 23:02 - 2012-11-19 18:51 - 00000000 ____D C:\Users\Simone Petry\Studienseminar

2013-09-15 22:03 - 2011-12-14 17:56 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000Core.job

2013-09-15 18:51 - 2013-02-03 16:44 - 00000000 ____D C:\Users\Simone Petry\Unterricht

2013-09-15 18:39 - 2013-07-09 09:55 - 00006978 _____ C:\Windows\PFRO.log

2013-09-15 12:53 - 2008-10-03 16:20 - 00000000 ____D C:\Users\Simone Petry\AppData\Local\Microsoft Help

2013-09-14 08:09 - 2008-02-26 15:40 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-13 16:12 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-09-13 07:57 - 2013-09-13 07:57 - 04751752 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe

2013-09-13 07:57 - 2012-04-07 16:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2013-09-13 07:57 - 2011-05-17 11:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2013-09-13 07:19 - 2013-07-01 09:42 - 00326720 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-12 22:48 - 2013-08-15 12:12 - 00000000 ____D C:\Windows\system32\MRT

2013-09-12 22:45 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-09-05 20:34 - 2013-01-02 16:54 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-05 20:34 - 2013-01-02 16:54 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-09-04 21:03 - 2013-09-04 21:02 - 00315392 _____ C:\Users\Simone Petry\Downloads\ZentraleMFB_Ueberblic_0d_0a_k_1 (1).ppt

2013-09-04 20:26 - 2008-01-21 09:16 - 01560216 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-01 16:20 - 2013-09-01 16:21 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-09-01 16:20 - 2012-08-31 08:25 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll

2013-09-01 16:20 - 2010-07-06 21:46 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll

2013-09-01 15:30 - 2010-05-18 15:10 - 00000000 ____D C:\Program Files\DEUTSCHLAND SPIELT
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-16 16:28
 

==================== End Of Log ============================

Addition.txt:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-09-2013

Ran by Simone Petry at 2013-09-16 16:58:35

Running from C:\Users\Simone Petry\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

 Update for Microsoft Office 2007 (KB2508958)

32 Bit HP CIO Components Installer (Version: 1.0.0)

ABI-TOUR

ACD/Labs Software in C:\Program Files\ACDFREE12\ (Version: v12.00, FREE)

Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)

Adobe Flash Player 11 ActiveX (Version: 11.8.800.174)

Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8)

Adobe Shockwave Player 11.6 (Version: 11.6.4.634)

Apple Application Support (Version: 2.3)

Apple Software Update (Version: 2.1.3.127)

ATI Catalyst Install Manager (Version: 3.0.657.0)

Avira Free Antivirus (Version: 13.0.0.4052)

Big Fish Games: Game Manager (Version: 3.0.1.60)

Bluetooth Stack for Windows by Toshiba (Version: v6.10.02(T))

BrowserProtect

Camera Assistant Software for Toshiba (Version: 1.7.175.0123)

Canon Easy-PhotoPrint EX

Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data

Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data

Canon IJ Network Scan Utility

Canon IJ Network Tool

Canon MG6100 series Benutzerregistrierung

Canon MG6100 series MP Drivers

Canon MP Navigator EX 4.0

Canon My Printer

Canon Solution Menu EX

Catalyst Control Center - Branding (Version: 1.00.0000)

Catalyst Control Center Core Implementation (Version: 2008.0130.1509.26922)

Catalyst Control Center Graphics Full Existing (Version: 2008.0130.1509.26922)

Catalyst Control Center Graphics Full New (Version: 2008.0130.1509.26922)

Catalyst Control Center Graphics Light (Version: 2008.0130.1509.26922)

Catalyst Control Center Graphics Previews Vista (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Chinese Standard (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Chinese Traditional (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Dutch (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization French (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization German (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Italian (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Japanese (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Korean (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Portuguese (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Spanish (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Swedish (Version: 2008.0130.1509.26922)

CCC Help Chinese Standard (Version: 2008.0130.1508.26922)

CCC Help Chinese Traditional (Version: 2008.0130.1508.26922)

CCC Help Dutch (Version: 2008.0130.1508.26922)

CCC Help English (Version: 2008.0130.1508.26922)

CCC Help French (Version: 2008.0130.1508.26922)

CCC Help German (Version: 2008.0130.1508.26922)

CCC Help Italian (Version: 2008.0130.1508.26922)

CCC Help Japanese (Version: 2008.0130.1508.26922)

CCC Help Korean (Version: 2008.0130.1508.26922)

CCC Help Portuguese (Version: 2008.0130.1508.26922)

CCC Help Spanish (Version: 2008.0130.1508.26922)

CCC Help Swedish (Version: 2008.0130.1508.26922)

ccc-core-static (Version: 2008.0130.1509.26922)

ccc-utility (Version: 2008.0130.1509.26922)

CCleaner (Version: 4.02)

CD/DVD Drive Acoustic Silencer (Version: 2.02.00)

Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)

Conexant HD Audio (Version: 4.36.6.0)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

DEUTSCHLAND SPIELT GAME CENTER (Version: 1.0.0.46)

Die Siedler II - Die nächste Generation

dm-Fotowelt (Version: 5.0.4)

EAX Unified

Farm Tribe 2: Jetzt wird geackert! (Version: 1.0.0.0)

Foto Paradies

GeoGebra (Version: 4.0.41.0)

GeoGebra WebStart

Google Chrome (HKCU Version: 29.0.1547.66)

HDAUDIO Soft Data Fax Modem with SmartCP

HDMI Control Manager (Version: 1.6)

HessGISS 2012-2013 (Version: 17.0)

HP Update (Version: 5.002.007.004)

HPSSupply (Version: 2.1.3.0000)

HTC Driver Installer (Version: 4.0.0.009)

HTC Sync Manager (Version: 1.1.66.0)

Intel® Matrix Storage Manager

InterVideo AVControlSDK

Java 7 Update 25 (Version: 7.0.250)

Java Auto Updater (Version: 2.1.9.5)

Marvell Miniport Driver (Version: 10.51.4.3)

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft Access Runtime 2010 (Version: 14.0.7015.1000)

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access Runtime 2010 (Version: 14.0.7015.1000)

Microsoft Office Access Runtime MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)

Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)

Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Works (Version: 9.7.0621)

Microsoft XML Parser (Version: 8.0.7820.0)

Microsoft XML Parser (Version: 8.20.8730.4)

Move Media Player

MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)

MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)

NetWaiting (Version: 2.5.52)

NVIDIA PhysX (Version: 9.09.0203)

O2Micro Flash Memory Card Reader Driver (x86) (Version: 3.19.1)

OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)

OpenAL

PokerStars.net

ProtectDisc Driver, Version 11 (Version: 11.0.0.12)

QuickTime (Version: 7.73.80.64)

Risen (Version: 1.00.0000)

Samsung Master (Version: 1.1.11)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition

Sid Meier's Civilization 4 (Version: 1.00.0000)

Sid Meier's Civilization 4 (Version: 1.74)

Skins (Version: 2008.0130.1509.26922)

Skype™ 5.10 (Version: 5.10.116)

Star Wars(TM): Knights of the Old Republic (TM)

Steam (Version: 1.0.0.0)

swMSM (Version: 12.0.0.1)

Synaptics Pointing Device Driver (Version: 10.1.7.0)

The Witcher: Enhanced Edition

TOSHIBA Assist (Version: 2.01.04)

TOSHIBA Benutzerhandbücher (Version: 7.33)

TOSHIBA ConfigFree (Version: 7.1.26)

TOSHIBA Disc Creator (Version: 2.0.1.1.a)

TOSHIBA DVD PLAYER (Version: 1.20.10)

TOSHIBA Extended Tiles for Windows Mobility Center (Version: 1.01.00)

TOSHIBA Hardware Setup (Version: 3.00.01.00)

Toshiba Online Product Information (Version: 1.00.0012)

TOSHIBA Recovery Disc Creator (Version: 2.0.0.1b)

TOSHIBA SD Memory Utilities (Version: 1.8.1.1)

TOSHIBA Supervisor Password (Version: 3.00.01.00)

TOSHIBA Value Added Package (Version: 1.1.14)

TRDCReminder (Version: 1.00.0014)

TRORDCLauncher (Version: 1.0.0.1)

TuneUp Utilities 2013 (Version: 13.0.3020.2)

TuneUp Utilities Language Pack (de-DE) (Version: 13.0.3020.2)

Unity Web Player (HKCU Version: )

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition

Update für Microsoft Office Excel 2007 Help (KB963678)

Update für Microsoft Office Powerpoint 2007 Help (KB963669)

Update für Microsoft Office Word 2007 Help (KB963665)

VLC media player 1.0.3 (Version: 1.0.3)

Windows Media Encoder 9-Reihe

Windows Media Encoder 9-Reihe (Version: 9.00.3374)
 

==================== Restore Points  =========================
 

03-09-2013 12:38:26 Windows Update

04-09-2013 16:39:47 Geplanter Prüfpunkt

10-09-2013 13:58:30 Windows Update

12-09-2013 20:44:42 Windows Update

13-09-2013 08:39:17 Windows Update

13-09-2013 13:55:15 Windows Update

13-09-2013 14:03:03 Windows Update

13-09-2013 14:41:31 Windows Update

13-09-2013 15:10:08 Windows Update

13-09-2013 15:17:27 Windows Update

13-09-2013 15:32:32 Windows Update

14-09-2013 06:04:04 Windows Update
 

==================== Hosts content: ==========================
 

2006-11-02 12:23 - 2006-09-18 23:41 - 00000736 ____A C:\Windows\system32\Drivers\etc\hosts

::1             localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {03FE9E06-9BED-4ECE-825D-7569A2EA4C0A} - System32\Tasks\{61F8E5DD-1D83-40B4-8CB0-C89D5E23647C} => C:\Program Files\Skype\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)

Task: {11A9B218-E1FC-4F88-82EB-1522A1B09F5C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000Core => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-14] (Google Inc.)

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM

Task: {1D3AD10B-481B-4F54-839A-256D1AFFB347} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-13] (Adobe Systems Incorporated)

Task: {246B0DB0-0D73-42C6-98EF-0C30CF48B70B} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-21] (Microsoft Corp.)

Task: {28912FAB-CA72-4BD3-842C-AB81111E6D96} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)

Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI

Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages

Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)

Task: {470A6904-C848-4284-BBCF-B1CBAC31345A} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)

Task: {6B6262DF-EFFF-432C-9850-9023BA49143C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000UA => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-14] (Google Inc.)

Task: {9CFCB40E-6BE6-4A52-B834-49CF0E188B06} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2013-01-28] (TuneUp Software)

Task: {A3EB06D8-297E-411E-8D88-3C2009D033A5} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)

Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)

Task: {AC09D2B6-7091-4776-BDC4-6C1999933A6E} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)

Task: {B06AAE5C-F475-477D-8FE7-C458535C4C07} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect

Task: {CBDF8DD4-48D3-49D7-AC62-89826B0D9891} - System32\Tasks\{4F6BAA77-A8BF-46A1-A07A-697634734F94} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.0.124.259/en/abandoninstall?page=tsPlugin&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled

Task: {D5F77ED5-B41B-4259-BE73-E83CB2099B8A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()

Task: {F7A5F634-5266-471C-B72A-F68601FDC9EC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)

Task: {F882764E-68E4-45ED-8A86-708FCE72E6C4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000Core.job => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000UA.job => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2008-02-15 18:22 - 2008-01-30 16:30 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll

2007-12-25 14:02 - 2007-12-25 14:02 - 00040960 _____ (TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFUPNP.dll

2007-12-25 14:03 - 2007-12-25 14:03 - 00061440 _____ (TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFP2API.dll

2007-12-25 14:03 - 2007-12-25 14:03 - 00069632 _____ (TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\OpenProp.dll

2007-12-25 14:01 - 2007-12-25 14:01 - 00086016 _____ (TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\IpAdrSet.dll

2008-01-17 23:34 - 2008-01-17 23:34 - 00266240 _____ (TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\NDSAPI.dll

2007-12-25 14:01 - 2007-12-25 14:01 - 00053248 _____ (TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFWLAPI.dll

2007-12-25 14:04 - 2007-12-25 14:04 - 01884160 _____ (TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\NDSParts.dll

2007-12-25 14:02 - 2007-12-25 14:02 - 00022016 _____ (TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\NDSNLS.dll

2007-11-16 21:10 - 2007-11-16 21:10 - 00172032 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TosBtAPI.dll

2007-12-03 18:57 - 2007-12-03 18:57 - 00131072 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TosBdAPI.dll

2008-02-15 18:29 - 2007-11-29 18:18 - 00163840 _____ (Synaptics, Inc.) C:\Windows\system32\SynCOM.dll

2008-02-15 18:29 - 2007-11-29 18:30 - 00147456 _____ (Synaptics, Inc.) C:\Windows\system32\SynTPAPI.dll

2013-09-04 08:14 - 2013-09-02 22:34 - 47074256 _____ (Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\chrome.dll

2013-09-04 08:14 - 2013-09-02 22:35 - 09962960 _____ (The ICU Project) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\icudt.dll

2013-09-04 08:14 - 2013-09-02 22:35 - 04053456 _____ () C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll

2013-09-04 08:14 - 2013-09-02 22:35 - 00410576 _____ () C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll

2013-09-04 08:14 - 2013-09-02 22:35 - 02110928 _____ (Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\libpeerconnection.dll

2013-09-04 08:14 - 2013-09-02 22:35 - 01604560 _____ () C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll

2013-09-04 08:14 - 2013-09-02 22:35 - 13599184 _____ () C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) ==========
 

AlternateDataStreams: C:\ProgramData\TEMP:025DF3DE

AlternateDataStreams: C:\ProgramData\TEMP:02F30776

AlternateDataStreams: C:\ProgramData\TEMP:03A039A3

AlternateDataStreams: C:\ProgramData\TEMP:03D08225

AlternateDataStreams: C:\ProgramData\TEMP:0406003C

AlternateDataStreams: C:\ProgramData\TEMP:041ED421

AlternateDataStreams: C:\ProgramData\TEMP:073139EC

AlternateDataStreams: C:\ProgramData\TEMP:07D64CD9

AlternateDataStreams: C:\ProgramData\TEMP:084612C9

AlternateDataStreams: C:\ProgramData\TEMP:0915A718

AlternateDataStreams: C:\ProgramData\TEMP:0968E571

AlternateDataStreams: C:\ProgramData\TEMP:09708CB7

AlternateDataStreams: C:\ProgramData\TEMP:0AE2C68F

AlternateDataStreams: C:\ProgramData\TEMP:102394C6

AlternateDataStreams: C:\ProgramData\TEMP:10873493

AlternateDataStreams: C:\ProgramData\TEMP:10B970A9

AlternateDataStreams: C:\ProgramData\TEMP:10D45FC3

AlternateDataStreams: C:\ProgramData\TEMP:12383CAE

AlternateDataStreams: C:\ProgramData\TEMP:12D21A9A

AlternateDataStreams: C:\ProgramData\TEMP:13019F4B

AlternateDataStreams: C:\ProgramData\TEMP:13765436

AlternateDataStreams: C:\ProgramData\TEMP:13CDB0E0

AlternateDataStreams: C:\ProgramData\TEMP:14362DF8

AlternateDataStreams: C:\ProgramData\TEMP:160ADF0B

AlternateDataStreams: C:\ProgramData\TEMP:164561C8

AlternateDataStreams: C:\ProgramData\TEMP:169E7AC5

AlternateDataStreams: C:\ProgramData\TEMP:1709732A

AlternateDataStreams: C:\ProgramData\TEMP:18A25CF1

AlternateDataStreams: C:\ProgramData\TEMP:1A8BB29B

AlternateDataStreams: C:\ProgramData\TEMP:1B3549F2

AlternateDataStreams: C:\ProgramData\TEMP:1B47CB83

AlternateDataStreams: C:\ProgramData\TEMP:1B96CF22

AlternateDataStreams: C:\ProgramData\TEMP:206470A5

AlternateDataStreams: C:\ProgramData\TEMP:217A2A36

AlternateDataStreams: C:\ProgramData\TEMP:2211E7A0

AlternateDataStreams: C:\ProgramData\TEMP:22741C1F

AlternateDataStreams: C:\ProgramData\TEMP:258D2F8B

AlternateDataStreams: C:\ProgramData\TEMP:26499772

AlternateDataStreams: C:\ProgramData\TEMP:2652902F

AlternateDataStreams: C:\ProgramData\TEMP:27F44544

AlternateDataStreams: C:\ProgramData\TEMP:28819F45

AlternateDataStreams: C:\ProgramData\TEMP:2979C892

AlternateDataStreams: C:\ProgramData\TEMP:29C0641D

AlternateDataStreams: C:\ProgramData\TEMP:2ABB51D4

AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9

AlternateDataStreams: C:\ProgramData\TEMP:2B856118

AlternateDataStreams: C:\ProgramData\TEMP:2B9555D8

AlternateDataStreams: C:\ProgramData\TEMP:2C250258

AlternateDataStreams: C:\ProgramData\TEMP:2C86E2AD

AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F

AlternateDataStreams: C:\ProgramData\TEMP:2CED8825

AlternateDataStreams: C:\ProgramData\TEMP:2EB79F01

AlternateDataStreams: C:\ProgramData\TEMP:2F70C0B4

AlternateDataStreams: C:\ProgramData\TEMP:3118E26B

AlternateDataStreams: C:\ProgramData\TEMP:34C443B4

AlternateDataStreams: C:\ProgramData\TEMP:363E775E

AlternateDataStreams: C:\ProgramData\TEMP:36608448

AlternateDataStreams: C:\ProgramData\TEMP:36A39835

AlternateDataStreams: C:\ProgramData\TEMP:371A321E

AlternateDataStreams: C:\ProgramData\TEMP:375FC7E7

AlternateDataStreams: C:\ProgramData\TEMP:3766E957

AlternateDataStreams: C:\ProgramData\TEMP:3B07E6F4

AlternateDataStreams: C:\ProgramData\TEMP:3CAE2A70

AlternateDataStreams: C:\ProgramData\TEMP:404908B5

AlternateDataStreams: C:\ProgramData\TEMP:413E2927

AlternateDataStreams: C:\ProgramData\TEMP:425759C6

AlternateDataStreams: C:\ProgramData\TEMP:436BE28C

AlternateDataStreams: C:\ProgramData\TEMP:45912F61

AlternateDataStreams: C:\ProgramData\TEMP:46A2F27B

AlternateDataStreams: C:\ProgramData\TEMP:471AD3D0

AlternateDataStreams: C:\ProgramData\TEMP:483AC68A

AlternateDataStreams: C:\ProgramData\TEMP:4AC7B5C1

AlternateDataStreams: C:\ProgramData\TEMP:4B244549

AlternateDataStreams: C:\ProgramData\TEMP:4C6F9D77

AlternateDataStreams: C:\ProgramData\TEMP:4F852702

AlternateDataStreams: C:\ProgramData\TEMP:553056F1

AlternateDataStreams: C:\ProgramData\TEMP:56C66609

AlternateDataStreams: C:\ProgramData\TEMP:58E38390

AlternateDataStreams: C:\ProgramData\TEMP:59A6876B

AlternateDataStreams: C:\ProgramData\TEMP:5A2E8BBF

AlternateDataStreams: C:\ProgramData\TEMP:5A437AC3

AlternateDataStreams: C:\ProgramData\TEMP:5A8F8A0C

AlternateDataStreams: C:\ProgramData\TEMP:5B4686D7

AlternateDataStreams: C:\ProgramData\TEMP:5C0940F1

AlternateDataStreams: C:\ProgramData\TEMP:5CE65446

AlternateDataStreams: C:\ProgramData\TEMP:5DB36C47

AlternateDataStreams: C:\ProgramData\TEMP:5F85EE30

AlternateDataStreams: C:\ProgramData\TEMP:6294B369

AlternateDataStreams: C:\ProgramData\TEMP:6423D635

AlternateDataStreams: C:\ProgramData\TEMP:66AA0486

AlternateDataStreams: C:\ProgramData\TEMP:678C1866

AlternateDataStreams: C:\ProgramData\TEMP:6896CCCE

AlternateDataStreams: C:\ProgramData\TEMP:68A41423

AlternateDataStreams: C:\ProgramData\TEMP:6A0A47E7

AlternateDataStreams: C:\ProgramData\TEMP:6DDFD746

AlternateDataStreams: C:\ProgramData\TEMP:6E2D80C8

AlternateDataStreams: C:\ProgramData\TEMP:6E65510A

AlternateDataStreams: C:\ProgramData\TEMP:6EA64886

AlternateDataStreams: C:\ProgramData\TEMP:6EE8565A

AlternateDataStreams: C:\ProgramData\TEMP:6FD26134

AlternateDataStreams: C:\ProgramData\TEMP:706B1D1A

AlternateDataStreams: C:\ProgramData\TEMP:70E897B5

AlternateDataStreams: C:\ProgramData\TEMP:72A1B66A

AlternateDataStreams: C:\ProgramData\TEMP:75798D9A

AlternateDataStreams: C:\ProgramData\TEMP:762408BA

AlternateDataStreams: C:\ProgramData\TEMP:7A032A04

AlternateDataStreams: C:\ProgramData\TEMP:7BB20DE8

AlternateDataStreams: C:\ProgramData\TEMP:7BE5BAAB

AlternateDataStreams: C:\ProgramData\TEMP:7BFAAE70

AlternateDataStreams: C:\ProgramData\TEMP:7C8AA9A6

AlternateDataStreams: C:\ProgramData\TEMP:7CEDF9F3

AlternateDataStreams: C:\ProgramData\TEMP:7EABF26C

AlternateDataStreams: C:\ProgramData\TEMP:7EF55396

AlternateDataStreams: C:\ProgramData\TEMP:85376176

AlternateDataStreams: C:\ProgramData\TEMP:87A3A233

AlternateDataStreams: C:\ProgramData\TEMP:8AC20936

AlternateDataStreams: C:\ProgramData\TEMP:8AED9359

AlternateDataStreams: C:\ProgramData\TEMP:8C12CFCD

AlternateDataStreams: C:\ProgramData\TEMP:8CCDAB14

AlternateDataStreams: C:\ProgramData\TEMP:902C848D

AlternateDataStreams: C:\ProgramData\TEMP:908A1B53

AlternateDataStreams: C:\ProgramData\TEMP:922DA2DB

AlternateDataStreams: C:\ProgramData\TEMP:92DB4653

AlternateDataStreams: C:\ProgramData\TEMP:943971F5

AlternateDataStreams: C:\ProgramData\TEMP:952245B1

AlternateDataStreams: C:\ProgramData\TEMP:9547F1DB

AlternateDataStreams: C:\ProgramData\TEMP:97995ED4

AlternateDataStreams: C:\ProgramData\TEMP:9857FAE3

AlternateDataStreams: C:\ProgramData\TEMP:993185CB

AlternateDataStreams: C:\ProgramData\TEMP:99C301D0

AlternateDataStreams: C:\ProgramData\TEMP:9C3AAD57

AlternateDataStreams: C:\ProgramData\TEMP:9C8D5426

AlternateDataStreams: C:\ProgramData\TEMP:9CF728A6

AlternateDataStreams: C:\ProgramData\TEMP:9E3E060F

AlternateDataStreams: C:\ProgramData\TEMP:9F3CEEE6

AlternateDataStreams: C:\ProgramData\TEMP:9FCF32A8

AlternateDataStreams: C:\ProgramData\TEMP:A42FABF7

AlternateDataStreams: C:\ProgramData\TEMP:A561576B

AlternateDataStreams: C:\ProgramData\TEMP:A6F30843

AlternateDataStreams: C:\ProgramData\TEMP:A76A1B1B

AlternateDataStreams: C:\ProgramData\TEMP:A8606E6E

AlternateDataStreams: C:\ProgramData\TEMP:A9562832

AlternateDataStreams: C:\ProgramData\TEMP:A9ABA3FF

AlternateDataStreams: C:\ProgramData\TEMP:AE8FDB48

AlternateDataStreams: C:\ProgramData\TEMP:AE9351E0

AlternateDataStreams: C:\ProgramData\TEMP:AED4A2B7

AlternateDataStreams: C:\ProgramData\TEMP:AF54CFFD

AlternateDataStreams: C:\ProgramData\TEMP:B139DDF3

AlternateDataStreams: C:\ProgramData\TEMP:B285A50E

AlternateDataStreams: C:\ProgramData\TEMP:B6D84F71

AlternateDataStreams: C:\ProgramData\TEMP:B8791731

AlternateDataStreams: C:\ProgramData\TEMP:BACD3198

AlternateDataStreams: C:\ProgramData\TEMP:BCFEA004

AlternateDataStreams: C:\ProgramData\TEMP:BD8010FE

AlternateDataStreams: C:\ProgramData\TEMP:BE0654D6

AlternateDataStreams: C:\ProgramData\TEMP:BEACE4C8

AlternateDataStreams: C:\ProgramData\TEMP:BEF18713

AlternateDataStreams: C:\ProgramData\TEMP:BF6C4AAC

AlternateDataStreams: C:\ProgramData\TEMP:C0BCE04B

AlternateDataStreams: C:\ProgramData\TEMP:C2F24DB5

AlternateDataStreams: C:\ProgramData\TEMP:C3AD9507

AlternateDataStreams: C:\ProgramData\TEMP:C3C72D5F

AlternateDataStreams: C:\ProgramData\TEMP:C4288847

AlternateDataStreams: C:\ProgramData\TEMP:C43C957E

AlternateDataStreams: C:\ProgramData\TEMP:C48905F4

AlternateDataStreams: C:\ProgramData\TEMP:C6920A5D

AlternateDataStreams: C:\ProgramData\TEMP:C7857F06

AlternateDataStreams: C:\ProgramData\TEMP:C9B27A06

AlternateDataStreams: C:\ProgramData\TEMP:CBAF0C30

AlternateDataStreams: C:\ProgramData\TEMP:CF1334B0

AlternateDataStreams: C:\ProgramData\TEMP:CFF6B3FF

AlternateDataStreams: C:\ProgramData\TEMP:D02FBAEC

AlternateDataStreams: C:\ProgramData\TEMP:D2397415

AlternateDataStreams: C:\ProgramData\TEMP:D36E068F

AlternateDataStreams: C:\ProgramData\TEMP:D3A82449

AlternateDataStreams: C:\ProgramData\TEMP:D4558A0B

AlternateDataStreams: C:\ProgramData\TEMP:D696AA12

AlternateDataStreams: C:\ProgramData\TEMP:D987CB43

AlternateDataStreams: C:\ProgramData\TEMP:D999FFD5

AlternateDataStreams: C:\ProgramData\TEMP:DB2748F7

AlternateDataStreams: C:\ProgramData\TEMP:DF5ABA3D

AlternateDataStreams: C:\ProgramData\TEMP:E0888117

AlternateDataStreams: C:\ProgramData\TEMP:E0A09032

AlternateDataStreams: C:\ProgramData\TEMP:E1D818F7

AlternateDataStreams: C:\ProgramData\TEMP:E21433CE

AlternateDataStreams: C:\ProgramData\TEMP:E222F217

AlternateDataStreams: C:\ProgramData\TEMP:E2CB42C9

AlternateDataStreams: C:\ProgramData\TEMP:E2DDFA62

AlternateDataStreams: C:\ProgramData\TEMP:E402E439

AlternateDataStreams: C:\ProgramData\TEMP:E40AB54F

AlternateDataStreams: C:\ProgramData\TEMP:E4EE99EF

AlternateDataStreams: C:\ProgramData\TEMP:E5496666

AlternateDataStreams: C:\ProgramData\TEMP:E5B07840

AlternateDataStreams: C:\ProgramData\TEMP:E5BA9ADD

AlternateDataStreams: C:\ProgramData\TEMP:E5F8E280

AlternateDataStreams: C:\ProgramData\TEMP:E6708F08

AlternateDataStreams: C:\ProgramData\TEMP:E6BEADB7

AlternateDataStreams: C:\ProgramData\TEMP:E6CDFB4A

AlternateDataStreams: C:\ProgramData\TEMP:E87AB4E3

AlternateDataStreams: C:\ProgramData\TEMP:E9900C74

AlternateDataStreams: C:\ProgramData\TEMP:EB68CA55

AlternateDataStreams: C:\ProgramData\TEMP:EC0279DC

AlternateDataStreams: C:\ProgramData\TEMP:EC7C9796

AlternateDataStreams: C:\ProgramData\TEMP:ECF3C50F

AlternateDataStreams: C:\ProgramData\TEMP:ED2D63E4

AlternateDataStreams: C:\ProgramData\TEMP:ED9B661E

AlternateDataStreams: C:\ProgramData\TEMP:EE198B1F

AlternateDataStreams: C:\ProgramData\TEMP:EFF3C3C8

AlternateDataStreams: C:\ProgramData\TEMP:F1F936DF

AlternateDataStreams: C:\ProgramData\TEMP:F26F5952

AlternateDataStreams: C:\ProgramData\TEMP:F2AF86D9

AlternateDataStreams: C:\ProgramData\TEMP:F3029A65

AlternateDataStreams: C:\ProgramData\TEMP:F3591DDB

AlternateDataStreams: C:\ProgramData\TEMP:F3A185AE

AlternateDataStreams: C:\ProgramData\TEMP:F53B274A

AlternateDataStreams: C:\ProgramData\TEMP:F5FC5DCE

AlternateDataStreams: C:\ProgramData\TEMP:F67AAFC5

AlternateDataStreams: C:\ProgramData\TEMP:F6A0889A

AlternateDataStreams: C:\ProgramData\TEMP:F760FD47

AlternateDataStreams: C:\ProgramData\TEMP:F9689B72

AlternateDataStreams: C:\ProgramData\TEMP:F9F58B80

AlternateDataStreams: C:\ProgramData\TEMP:FD11E093

AlternateDataStreams: C:\ProgramData\TEMP:FD786DCA

AlternateDataStreams: C:\ProgramData\TEMP:FECEF728
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/16/2013 04:22:18 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2013 04:20:53 PM) (Source: Application Error) (User: )

Description: Fehlerhafte Anwendung TuneUpUtilitiesService32.exe, Version 13.0.3020.2, Zeitstempel 0x51067abd, fehlerhaftes Modul TuneUpUtilitiesService32.exe, Version 13.0.3020.2, Zeitstempel 0x51067abd, Ausnahmecode 0xc0000005, Fehleroffset 0x00017c6d,

Prozess-ID 0x9bc, Anwendungsstartzeit TuneUpUtilitiesService32.exe0.
 

Error: (09/15/2013 11:08:16 PM) (Source: EventSystem) (User: )

Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
 

Error: (09/15/2013 10:52:00 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/15/2013 06:40:45 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/15/2013 00:36:53 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/15/2013 08:49:04 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/14/2013 09:39:15 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/14/2013 05:40:02 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/14/2013 04:04:19 PM) (Source: EventSystem) (User: )

Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
 
 

System errors:

=============

Error: (09/16/2013 04:22:19 PM) (Source: Service Control Manager) (User: )

Description: TuneUp Utilities Service1
 

Error: (09/16/2013 04:22:19 PM) (Source: Service Control Manager) (User: )

Description: Parallel port driver%%1058
 

Error: (09/15/2013 11:08:16 PM) (Source: DCOM) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (09/15/2013 10:52:01 PM) (Source: Service Control Manager) (User: )

Description: Parallel port driver%%1058
 

Error: (09/15/2013 10:40:41 PM) (Source: DCOM) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (09/15/2013 10:20:13 PM) (Source: bowser) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MORVILIUS",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{E7E88C90-98B1-4BE3-91E5-17D823C9-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (09/15/2013 09:44:13 PM) (Source: bowser) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MORVILIUS",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{E7E88C90-98B1-4BE3-91E5-17D823C9-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (09/15/2013 08:44:00 PM) (Source: bowser) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MORVILIUS",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{E7E88C90-98B1-4BE3-91E5-17D823C9-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (09/15/2013 06:40:46 PM) (Source: Service Control Manager) (User: )

Description: Parallel port driver%%1058
 

Error: (09/15/2013 01:57:50 PM) (Source: DCOM) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 
 

Microsoft Office Sessions:

=========================

Error: (09/02/2013 07:13:54 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 8985 seconds with 6780 seconds of active time.  This session ended with a crash.
 

Error: (03/26/2010 02:42:51 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 127 seconds with 120 seconds of active time.  This session ended with a crash.
 

Error: (03/11/2010 00:11:05 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 892 seconds with 780 seconds of active time.  This session ended with a crash.
 

Error: (10/25/2008 03:40:05 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6308.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 189 seconds with 180 seconds of active time.  This session ended with a crash.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 39%

Total physical RAM: 3069.67 MB

Available physical RAM: 1853.36 MB

Total Pagefile: 6343.65 MB

Available Pagefile: 5022.47 MB

Total Virtual: 2047.88 MB

Available Virtual: 1903.59 MB
 

==================== Drives ================================
 

Drive c: (Vista) (Fixed) (Total:117.54 GB) (Free:22.17 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive e: (Data) (Fixed) (Total:113.88 GB) (Free:101.87 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: 22741035)

Partition 1: (Not Active) - (Size=1 GB) - (Type=27)

Partition 2: (Active) - (Size=118 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=114 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

AVSCAN-20130915-225742-8AC0C784.LOG.txt:

Code:

Licensee        : Avira Free Antivirus

Serial number   : 0000149996-ADJIE-0000001

Platform        : Windows Vista (TM) Home Premium

Windows version : (Service Pack 2)  [6.0.6002]

Boot mode       : Normally booted

Username        : SYSTEM

Computer name   : SIMONEPETRY-PC
 

Version information:

BUILD.DAT       : 13.0.0.4052    55009 Bytes  29.08.2013 18:03:00

AVSCAN.EXE      : 13.6.20.2100   639032 Bytes  05.09.2013 18:33:30

AVSCANRC.DLL    : 13.6.20.2174    52280 Bytes  05.09.2013 18:33:30

LUKE.DLL        : 13.6.20.2174    65080 Bytes  05.09.2013 18:34:13

AVSCPLR.DLL     : 13.6.20.2174    92216 Bytes  05.09.2013 18:33:30

AVREG.DLL       : 13.6.20.2174   250424 Bytes  05.09.2013 18:33:28

avlode.dll      : 13.6.20.2174   497720 Bytes  05.09.2013 18:33:26

avlode.rdf      : 13.0.1.42      26846 Bytes  28.08.2013 19:05:37

VBASE000.VDF    : 7.11.70.0   66736640 Bytes  04.04.2013 20:29:11

VBASE001.VDF    : 7.11.74.226  2201600 Bytes  30.04.2013 19:09:16

VBASE002.VDF    : 7.11.80.60   2751488 Bytes  28.05.2013 15:36:28

VBASE003.VDF    : 7.11.85.214  2162688 Bytes  21.06.2013 18:48:31

VBASE004.VDF    : 7.11.91.176  3903488 Bytes  23.07.2013 09:29:32

VBASE005.VDF    : 7.11.98.186  6822912 Bytes  29.08.2013 07:24:09

VBASE006.VDF    : 7.11.98.187     2048 Bytes  29.08.2013 07:24:09

VBASE007.VDF    : 7.11.98.188     2048 Bytes  29.08.2013 07:24:09

VBASE008.VDF    : 7.11.98.189     2048 Bytes  29.08.2013 07:24:09

VBASE009.VDF    : 7.11.98.190     2048 Bytes  29.08.2013 07:24:09

VBASE010.VDF    : 7.11.98.191     2048 Bytes  29.08.2013 07:24:10

VBASE011.VDF    : 7.11.98.192     2048 Bytes  29.08.2013 07:24:10

VBASE012.VDF    : 7.11.98.193     2048 Bytes  29.08.2013 07:24:10

VBASE013.VDF    : 7.11.99.52    270848 Bytes  30.08.2013 11:26:33

VBASE014.VDF    : 7.11.99.167   210944 Bytes  02.09.2013 13:38:42

VBASE015.VDF    : 7.11.100.3    265216 Bytes  03.09.2013 17:33:56

VBASE016.VDF    : 7.11.100.95   220160 Bytes  04.09.2013 17:33:55

VBASE017.VDF    : 7.11.100.197   143872 Bytes  05.09.2013 18:33:13

VBASE018.VDF    : 7.11.101.11   227840 Bytes  06.09.2013 18:33:00

VBASE019.VDF    : 7.11.101.79   148480 Bytes  07.09.2013 19:05:26

VBASE020.VDF    : 7.11.101.169   305664 Bytes  10.09.2013 13:53:12

VBASE021.VDF    : 7.11.102.9    253440 Bytes  12.09.2013 17:43:45

VBASE022.VDF    : 7.11.102.151   282624 Bytes  15.09.2013 19:38:55

VBASE023.VDF    : 7.11.102.152     2048 Bytes  15.09.2013 19:38:55

VBASE024.VDF    : 7.11.102.153     2048 Bytes  15.09.2013 19:38:55

VBASE025.VDF    : 7.11.102.154     2048 Bytes  15.09.2013 19:38:55

VBASE026.VDF    : 7.11.102.155     2048 Bytes  15.09.2013 19:38:55

VBASE027.VDF    : 7.11.102.156     2048 Bytes  15.09.2013 19:38:55

VBASE028.VDF    : 7.11.102.157     2048 Bytes  15.09.2013 19:38:55

VBASE029.VDF    : 7.11.102.158     2048 Bytes  15.09.2013 19:38:55

VBASE030.VDF    : 7.11.102.159     2048 Bytes  15.09.2013 19:38:55

VBASE031.VDF    : 7.11.102.160    51712 Bytes  15.09.2013 19:38:56

Engine version  : 8.2.12.120

AEVDF.DLL       : 8.1.3.4       102774 Bytes  13.06.2013 18:57:15

AESCRIPT.DLL    : 8.1.4.148     516478 Bytes  06.09.2013 18:33:08

AESCN.DLL       : 8.1.10.4      131446 Bytes  27.03.2013 08:14:40

AESBX.DLL       : 8.2.16.26    1245560 Bytes  23.08.2013 14:55:56

AERDL.DLL       : 8.2.0.128     688504 Bytes  13.06.2013 18:57:14

AEPACK.DLL      : 8.3.2.28      749945 Bytes  13.09.2013 17:43:41

AEOFFICE.DLL    : 8.1.2.76      205181 Bytes  08.08.2013 18:31:35

AEHEUR.DLL      : 8.1.4.630    6164858 Bytes  13.09.2013 17:43:40

AEHELP.DLL      : 8.1.27.6      266617 Bytes  27.08.2013 19:05:39

AEGEN.DLL       : 8.1.7.14      446839 Bytes  06.09.2013 18:33:02

AEEXP.DLL       : 8.4.1.62      328055 Bytes  13.09.2013 17:43:41

AEEMU.DLL       : 8.1.3.2       393587 Bytes  19.09.2012 13:42:55

AECORE.DLL      : 8.1.32.0      201081 Bytes  23.08.2013 14:55:46

AEBB.DLL        : 8.1.1.4        53619 Bytes  05.11.2012 14:00:38

AVWINLL.DLL     : 13.6.20.2174    23608 Bytes  05.09.2013 18:33:12

AVPREF.DLL      : 13.6.20.2174    48184 Bytes  05.09.2013 18:33:28

AVREP.DLL       : 13.6.20.2174   175672 Bytes  05.09.2013 18:33:29

AVARKT.DLL      : 13.6.20.2174   258104 Bytes  05.09.2013 18:33:17

AVEVTLOG.DLL    : 13.6.20.2174   165432 Bytes  05.09.2013 18:33:20

SQLITE3.DLL     : 3.7.0.1       397088 Bytes  19.09.2012 17:17:40

AVSMTP.DLL      : 13.6.20.2174    60472 Bytes  05.09.2013 18:33:30

NETNT.DLL       : 13.6.20.2174    13368 Bytes  05.09.2013 18:34:13

RCIMAGE.DLL     : 13.6.20.2174  4788792 Bytes  05.09.2013 18:33:12

RCTEXT.DLL      : 13.6.20.2175    66616 Bytes  05.09.2013 18:33:12
 

Configuration settings for the scan:

Jobname.............................: AVGuardAsyncScan

Configuration file..................: C:\ProgramData\Avira\AntiVir Desktop\TEMP\AVGUARD_52361dc0\guard_slideup.avp

Reporting...........................: default

Primary action......................: Repair

Secondary action....................: Quarantine

Scan master boot sector.............: on

Scan boot sector....................: off

Process scan........................: on

Scan registry.......................: off

Search for rootkits.................: off

Integrity checking of system files..: off

Scan all files......................: All files

Scan archives.......................: on

Limit recursion depth...............: 20

Smart extensions....................: on

Macrovirus heuristic................: on

File heuristic......................: Complete

Deviating risk categories...........: +APPL,+PCK,+SPR,
 

Start of the scan: Sonntag, 15. September 2013  22:57

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccleaner.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hpqssupply.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\htcsyncmanager.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ipsecdialer.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pcdiag.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setmtu.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\skype.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\smoothview.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tacsprop.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tfcconf.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tfcrst.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\todisc.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\toshddvd.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tosramutil.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\uninst.exe\Debugger> was removed successfully.

The registration entry <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_Dlls> was removed successfully.
 

The scan of running processes will be started:

Scan process 'avscan.exe' - '94' Module(s) have been scanned

Scan process 'wmiprvse.exe' - '43' Module(s) have been scanned

Scan process 'svchost.exe' - '21' Module(s) have been scanned

Scan process 'SynTPHelper.exe' - '14' Module(s) have been scanned

Scan process 'wmpnetwk.exe' - '64' Module(s) have been scanned

Scan process 'wmpnscfg.exe' - '29' Module(s) have been scanned

Scan process 'avshadow.exe' - '26' Module(s) have been scanned

Scan process 'CFSwMgr.exe' - '74' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'TuneUpUtilitiesApp32.exe' - '27' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'taskeng.exe' - '52' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'xaudio.exe' - '22' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '7' Module(s) have been scanned

Scan process 'TuneUpUtilitiesService32.exe' - '75' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '45' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '45' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '28' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '28' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'BrowserProtect.exe' - '29' Module(s) have been scanned

Scan process 'CFSvcs.exe' - '72' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'BrowserProtect.exe' - '34' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'avguard.exe' - '98' Module(s) have been scanned

Scan process 'armsvc.exe' - '27' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'TOSCDSPD.exe' - '22' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'avgnt.exe' - '77' Module(s) have been scanned

Scan process 'SynTPEnh.exe' - '39' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'NDSTray.exe' - '93' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'MSASCui.exe' - '43' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '61' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'sched.exe' - '48' Module(s) have been scanned

Scan process 'taskeng.exe' - '81' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'spoolsv.exe' - '94' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'Explorer.EXE' - '128' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'Dwm.exe' - '37' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '94' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'Ati2evxx.exe' - '39' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '79' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'SLsvc.exe' - '23' Module(s) have been scanned

Scan process 'svchost.exe' - '43' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '152' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '114' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '66' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'Ati2evxx.exe' - '34' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '49' Module(s) have been scanned

Scan process 'svchost.exe' - '38' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'PresentationFontCache.exe' - '35' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'svchost.exe' - '45' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'winlogon.exe' - '39' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'lsm.exe' - '30' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'lsass.exe' - '66' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'services.exe' - '40' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'csrss.exe' - '14' Module(s) have been scanned

Scan process 'wininit.exe' - '34' Module(s) have been scanned

  Module is infected -> <c:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll>

  [DETECTION] Contains recognition pattern of the APPL/BProtector.Gen application

  [WARNING]   The file was ignored.

Scan process 'csrss.exe' - '14' Module(s) have been scanned

Scan process 'smss.exe' - '2' Module(s) have been scanned

Scan process 'avscan.exe' - '88' Module(s) have been scanned

Scan process 'EXCEL.EXE' - '76' Module(s) have been scanned

Scan process 'svchost.exe' - '30' Module(s) have been scanned

Scan process 'vssvc.exe' - '49' Module(s) have been scanned

Scan process 'avscan.exe' - '101' Module(s) have been scanned
 
 

End of the scan: Sonntag, 15. September 2013  23:08

Used time: 10:06 Minute(s)
 

The scan has been done completely.
 

      0 Scanned directories

   4003 Files were scanned

      3 Viruses and/or unwanted programs were found

      0 Files were classified as suspicious

      0 Files were deleted

      0 Viruses and unwanted programs were repaired

      0 Files were moved to quarantine

      0 Files were renamed

      0 Files cannot be scanned

   4000 Files not concerned

     33 Archives were scanned

     37 Warnings

      0 Notes

Okay.

Kontrollscan ist durchgeführt und Dateien wieder angehängt.

FRST.txt:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-09-2013 03

Ran by Simone Petry (administrator) on SIMONEPETRY-PC on 17-09-2013 21:13:24

Running from C:\Users\Simone Petry\Downloads

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe

(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\NDSTray.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

() C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe

(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe

(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe

(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe

(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [NDSTray.exe] - NDSTray.exe

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [90112 2006-11-10] ()

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-11-29] (Synaptics, Inc.)

HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [431456 2008-01-17] (TOSHIBA Corporation)

HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [54608 2007-10-31] (TOSHIBA Corporation)

HKLM\...\Run: [SmoothView] - C:\Program Files\Toshiba\SmoothView\SmoothView.exe [509816 2008-01-25] (TOSHIBA Corporation)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-05] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

Winlogon\Notify\igfxcui: igfxdev.dll [X]

HKCU\...\Run: [TOSCDSPD] - TOSCDSPD.EXE

HKCU\...\Run: [Google Update] - C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-12-14] (Google Inc.)

MountPoints2: {d595702f-8fe8-11dd-9b88-001e68c53ee1} - D:\LaunchU3.exe -a

HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Default\...\Run: [TOSCDSPD] - C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2007-12-29] ()

HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Default User\...\Run: [TOSCDSPD] - C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2007-12-29] ()

Startup: C:\ProgramData\1912 Titanic Mystery ()

Startup: C:\ProgramData\Absolutist ()

Startup: C:\ProgramData\Adobe ()

Startup: C:\ProgramData\Advanced Chemistry Development ()

Startup: C:\ProgramData\AirportMania ()

Startup: C:\ProgramData\Alex Gordon ()

Startup: C:\ProgramData\Aliasworlds ()

Startup: C:\ProgramData\Anwendungsdaten ()

Startup: C:\ProgramData\Apple ()

Startup: C:\ProgramData\Apple Computer ()

Startup: C:\ProgramData\Application Data ()

Startup: C:\ProgramData\Arcade Lab ()

Startup: C:\ProgramData\Arizona Rose ()

Startup: C:\ProgramData\Artist Colony ()

Startup: C:\ProgramData\Ashtons Family Resort ()

Startup: C:\ProgramData\Astar Games ()

Startup: C:\ProgramData\ATI ()

Startup: C:\ProgramData\Avira ()

Startup: C:\ProgramData\Awem ()

Startup: C:\ProgramData\Balls ()

Startup: C:\ProgramData\BC Soft Games ()

Startup: C:\ProgramData\Becky Brogan 2 ()

Startup: C:\ProgramData\BigFish ()

Startup: C:\ProgramData\Bilbo ()

Startup: C:\ProgramData\Black Blob Studios ()

Startup: C:\ProgramData\blg ()

Startup: C:\ProgramData\BlitPop ()

Startup: C:\ProgramData\CannyGames ()

Startup: C:\ProgramData\Canon IJ Network Tool ()

Startup: C:\ProgramData\CanonBJ ()

Startup: C:\ProgramData\CanonEPP ()

Startup: C:\ProgramData\CanonIJEGV ()

Startup: C:\ProgramData\CanonIJEPPEX2 ()

Startup: C:\ProgramData\CanonIJMSetup ()

Startup: C:\ProgramData\CanonIJScan ()

Startup: C:\ProgramData\CanonIJWSpt ()

Startup: C:\ProgramData\casualArts ()

Startup: C:\ProgramData\Cateia Games ()

Startup: C:\ProgramData\cerasus.media ()

Startup: C:\ProgramData\Colibri Games ()

Startup: C:\ProgramData\Common Files ()

Startup: C:\ProgramData\CrioGames ()

Startup: C:\ProgramData\CropBusters ()

Startup: C:\ProgramData\Crown ()

Startup: C:\ProgramData\Deadtime Stories ()

Startup: C:\ProgramData\Deep Shadows ()

Startup: C:\ProgramData\Desktop ()

Startup: C:\ProgramData\DivoGames ()

Startup: C:\ProgramData\Documents ()

Startup: C:\ProgramData\Dokumente ()

Startup: C:\ProgramData\Dress-up-pups ()

Startup: C:\ProgramData\Electronic Arts ()

Startup: C:\ProgramData\Elephant Games ()

Startup: C:\ProgramData\Escape From Paradise ()

Startup: C:\ProgramData\ezsidmv.dat ()

Startup: C:\ProgramData\Far Mills ()

Startup: C:\ProgramData\Farm Fishes ()

Startup: C:\ProgramData\FarmFrenzy2 ()

Startup: C:\ProgramData\FarmFrenzy3 ()

Startup: C:\ProgramData\FarmFrenzy3_America ()

Startup: C:\ProgramData\FarmFrenzy3_Arctica ()

Startup: C:\ProgramData\FarmFrenzy3_Madagascar ()

Startup: C:\ProgramData\FarmFrenzy3_Russia ()

Startup: C:\ProgramData\FarmFrenzy_Rome ()

Startup: C:\ProgramData\FarmFrenzy_Vikings ()

Startup: C:\ProgramData\Favoriten ()

Startup: C:\ProgramData\Favorites ()

Startup: C:\ProgramData\Fenomen Games ()

Startup: C:\ProgramData\Fitn17 ()

Startup: C:\ProgramData\Flood Light Games ()

Startup: C:\ProgramData\Floodlight Games ()

Startup: C:\ProgramData\FloodLightGames ()

Startup: C:\ProgramData\FreshGames ()

Startup: C:\ProgramData\Friday's games ()

Startup: C:\ProgramData\Friends Games ()

Startup: C:\ProgramData\Fugazo ()

Startup: C:\ProgramData\fullscreen=true ()

Startup: C:\ProgramData\Funny Bear Studio ()

Startup: C:\ProgramData\GAMEON ()

Startup: C:\ProgramData\GameXzone ()

Startup: C:\ProgramData\Gogii ()

Startup: C:\ProgramData\Gogii Games ()

Startup: C:\ProgramData\Google ()

Startup: C:\ProgramData\Hewlett-Packard ()

Startup: C:\ProgramData\HideAndSecret3 ()

Startup: C:\ProgramData\HipSoft ()

Startup: C:\ProgramData\HoverBee Studios ()

Startup: C:\ProgramData\HP ()

Startup: C:\ProgramData\hps ()

Startup: C:\ProgramData\HPSSUPPLY ()

Startup: C:\ProgramData\hpzinstall.log ()

Startup: C:\ProgramData\HTC ()

Startup: C:\ProgramData\Intenium ()

Startup: C:\ProgramData\InterAction studios ()

Startup: C:\ProgramData\Islands ()

Startup: C:\ProgramData\Jewelleria ()

Startup: C:\ProgramData\JollyBear ()

Startup: C:\ProgramData\JuliettesFashionEmpire ()

Startup: C:\ProgramData\Kingdom ()

Startup: C:\ProgramData\KranX ()

Startup: C:\ProgramData\Kreuzworträtsel - Kalender Edition ()

Startup: C:\ProgramData\LittleGamesCompany ()

Startup: C:\ProgramData\LoadHelper ()

Startup: C:\ProgramData\Lost Treasures of El Dorado ()

Startup: C:\ProgramData\MAGIX ()

Startup: C:\ProgramData\Malwarebytes ()

Startup: C:\ProgramData\Maximize Games ()

Startup: C:\ProgramData\McAfee ()

Startup: C:\ProgramData\Mean Hamster ()

Startup: C:\ProgramData\Media Center Programs ()

Startup: C:\ProgramData\MeinEigenesCafé ()

Startup: C:\ProgramData\Meridian93 ()

Startup: C:\ProgramData\Merscom ()

Startup: C:\ProgramData\Microsoft ()

Startup: C:\ProgramData\Microsoft Help ()

Startup: C:\ProgramData\Motorola ()

Startup: C:\ProgramData\MumboJumbo ()

Startup: C:\ProgramData\mxfilerelatedcache.mxc2 ()

Startup: C:\ProgramData\MythPeople ()

Startup: C:\ProgramData\NannyMania ()

Startup: C:\ProgramData\Nevosoft-Breeze ()

Startup: C:\ProgramData\Office Genuine Advantage ()

Startup: C:\ProgramData\Particles ()

Startup: C:\ProgramData\Perfect-Tree ()

Startup: C:\ProgramData\Pets Fun House ()

Startup: C:\ProgramData\PlayFirst ()

Startup: C:\ProgramData\PlayfulAge ()

Startup: C:\ProgramData\Playrix Entertainment ()

Startup: C:\ProgramData\PoBros ()

Startup: C:\ProgramData\PuzzlesByJoe ()

Startup: C:\ProgramData\QuickTime ()

Startup: C:\ProgramData\RescueFrenzy ()

Startup: C:\ProgramData\rionix ()

Startup: C:\ProgramData\Rumbic Studio ()

Startup: C:\ProgramData\Sandlot Games ()

Startup: C:\ProgramData\ScreenSeven ()

Startup: C:\ProgramData\Skype ()

Startup: C:\ProgramData\SpinTop Games ()

Startup: C:\ProgramData\SpookyMall ()

Startup: C:\ProgramData\Sprouts Adventure ()

Startup: C:\ProgramData\Start Menu ()

Startup: C:\ProgramData\Startmenü ()

Startup: C:\ProgramData\SugarGames ()

Startup: C:\ProgramData\SulusGames ()

Startup: C:\ProgramData\Sun ()

Startup: C:\ProgramData\TEMP ()

Startup: C:\ProgramData\Templates ()

Startup: C:\ProgramData\TERMINAL Studio ()

Startup: C:\ProgramData\Terrafarmers ()

Startup: C:\ProgramData\The Game Equation ()

Startup: C:\ProgramData\The Mirror Mysteries ()

Startup: C:\ProgramData\TheFallTrilogyEp3-BF ()

Startup: C:\ProgramData\TheRace_dev ()

Startup: C:\ProgramData\tmp ()

Startup: C:\ProgramData\Toshiba ()

Startup: C:\ProgramData\ToshibaEurope ()

Startup: C:\ProgramData\Try2 ()

Startup: C:\ProgramData\TuneUp Software ()

Startup: C:\ProgramData\UClick ()

Startup: C:\ProgramData\Ulead Systems ()

Startup: C:\ProgramData\Venus DS ()

Startup: C:\ProgramData\VirtualFarm ()

Startup: C:\ProgramData\VirtualFarm2 ()

Startup: C:\ProgramData\Vogelpiraten ()

Startup: C:\ProgramData\Vogue Tales ()

Startup: C:\ProgramData\Vorlagen ()

Startup: C:\ProgramData\WeatherLord ()

Startup: C:\ProgramData\WEBREG ()

Startup: C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} ()

Startup: C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} ()

Startup: C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} ()

Startup: C:\Users\Default\Anwendungsdaten ()

Startup: C:\Users\Default\AppData ()

Startup: C:\Users\Default\Application Data ()

Startup: C:\Users\Default\Cookies ()

Startup: C:\Users\Default\Desktop ()

Startup: C:\Users\Default\Documents ()

Startup: C:\Users\Default\Downloads ()

Startup: C:\Users\Default\Druckumgebung ()

Startup: C:\Users\Default\Eigene Dateien ()

Startup: C:\Users\Default\Favorites ()

Startup: C:\Users\Default\Links ()

Startup: C:\Users\Default\Local Settings ()

Startup: C:\Users\Default\Lokale Einstellungen ()

Startup: C:\Users\Default\Music ()

Startup: C:\Users\Default\My Documents ()

Startup: C:\Users\Default\NetHood ()

Startup: C:\Users\Default\Netzwerkumgebung ()

Startup: C:\Users\Default\NTUSER.DAT ()

Startup: C:\Users\Default\NTUSER.DAT.LOG ()

Startup: C:\Users\Default\ntuser.dat.LOG1 ()

Startup: C:\Users\Default\ntuser.dat.LOG2 ()

Startup: C:\Users\Default\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf ()

Startup: C:\Users\Default\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Default\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Default\Pictures ()

Startup: C:\Users\Default\PrintHood ()

Startup: C:\Users\Default\Recent ()

Startup: C:\Users\Default\Saved Games ()

Startup: C:\Users\Default\SendTo ()

Startup: C:\Users\Default\Start Menu ()

Startup: C:\Users\Default\Startmenü ()

Startup: C:\Users\Default\Templates ()

Startup: C:\Users\Default\Videos ()

Startup: C:\Users\Default\Vorlagen ()

Startup: C:\Users\Public\Desktop ()

Startup: C:\Users\Public\Documents ()

Startup: C:\Users\Public\Downloads ()

Startup: C:\Users\Public\DRM ()

Startup: C:\Users\Public\Favorites ()

Startup: C:\Users\Public\Music ()

Startup: C:\Users\Public\mxfilerelatedcache.mxc2 ()

Startup: C:\Users\Public\NTUSER.DAT ()

Startup: C:\Users\Public\NTUSER.DAT.LOG1 ()

Startup: C:\Users\Public\NTUSER.DAT.LOG2 ()

Startup: C:\Users\Public\NTUSER.DAT{1b382e45-9943-11dd-a307-001e68c53ee1}.TM.blf ()

Startup: C:\Users\Public\NTUSER.DAT{1b382e45-9943-11dd-a307-001e68c53ee1}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Public\NTUSER.DAT{1b382e45-9943-11dd-a307-001e68c53ee1}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Public\NTUSER.DAT{8c9f9ea2-9395-11dd-a473-001e68c53ee1}.TM.blf ()

Startup: C:\Users\Public\NTUSER.DAT{8c9f9ea2-9395-11dd-a473-001e68c53ee1}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Public\NTUSER.DAT{8c9f9ea2-9395-11dd-a473-001e68c53ee1}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Public\Pictures ()

Startup: C:\Users\Public\Recorded TV ()

Startup: C:\Users\Public\Videos ()

Startup: C:\Users\Simone Petry\Anwendungsdaten ()

Startup: C:\Users\Simone Petry\AppData ()

Startup: C:\Users\Simone Petry\Briefe ()

Startup: C:\Users\Simone Petry\Contacts ()

Startup: C:\Users\Simone Petry\Cookies ()

Startup: C:\Users\Simone Petry\Desktop ()

Startup: C:\Users\Simone Petry\Documents ()

Startup: C:\Users\Simone Petry\Downloads ()

Startup: C:\Users\Simone Petry\Druckumgebung ()

Startup: C:\Users\Simone Petry\Eigene Dateien ()

Startup: C:\Users\Simone Petry\Favorites ()

Startup: C:\Users\Simone Petry\geogebra ()

Startup: C:\Users\Simone Petry\Geschenke, Gutscheine ()

Startup: C:\Users\Simone Petry\Haus ()

Startup: C:\Users\Simone Petry\Links ()

Startup: C:\Users\Simone Petry\Lokale Einstellungen ()

Startup: C:\Users\Simone Petry\Material Chemie ()

Startup: C:\Users\Simone Petry\Music ()

Startup: C:\Users\Simone Petry\mxfilerelatedcache.mxc2 ()

Startup: C:\Users\Simone Petry\Netzwerkumgebung ()

Startup: C:\Users\Simone Petry\NTUSER.DAT ()

Startup: C:\Users\Simone Petry\ntuser.dat.LOG1 ()

Startup: C:\Users\Simone Petry\ntuser.dat.LOG2 ()

Startup: C:\Users\Simone Petry\NTUSER.DAT_tureg_new.LOG1 ()

Startup: C:\Users\Simone Petry\NTUSER.DAT_tureg_new.LOG2 ()

Startup: C:\Users\Simone Petry\NTUSER.DAT_tureg_old ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{4e79ca56-24f7-11de-8326-001e68c53ee1}.TM.blf ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{4e79ca56-24f7-11de-8326-001e68c53ee1}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{4e79ca56-24f7-11de-8326-001e68c53ee1}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{58ce7e24-af1d-11e2-8ed4-806e6f6e6963}.TM.blf ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{58ce7e24-af1d-11e2-8ed4-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{58ce7e24-af1d-11e2-8ed4-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{d275a980-59d0-11e2-94c9-806e6f6e6963}.TM.blf ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{d275a980-59d0-11e2-94c9-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms ()

Startup: C:\Users\Simone Petry\NTUSER.DAT{d275a980-59d0-11e2-94c9-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms ()

Startup: C:\Users\Simone Petry\ntuser.ini ()

Startup: C:\Users\Simone Petry\Organisation Schulen ()

Startup: C:\Users\Simone Petry\Pictures ()

Startup: C:\Users\Simone Petry\Recent ()

Startup: C:\Users\Simone Petry\Saved Games ()

Startup: C:\Users\Simone Petry\Schule (Aushilfe, Praktikum) ()

Startup: C:\Users\Simone Petry\Searches ()

Startup: C:\Users\Simone Petry\SendTo ()

Startup: C:\Users\Simone Petry\Startmenü ()

Startup: C:\Users\Simone Petry\Studienseminar ()

Startup: C:\Users\Simone Petry\Unterricht ()

Startup: C:\Users\Simone Petry\Versuch Natrium in Wasser.docx ()

Startup: C:\Users\Simone Petry\Videos ()

Startup: C:\Users\Simone Petry\Vorlagen ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKLM - {CA0D91C8-F9EC-4B40-997E-02F8BA3728F4} URL = hxxp://www.google.de/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

DPF: {CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_10-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_10-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

Chrome: 

=======

CHR Extension: (Chrome In-App Payments service) - C:\Users\SIMONE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-05] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-05] (Avira Operations GmbH & Co. KG)

R2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2007-12-25] (TOSHIBA CORPORATION)

S4 HTCMonitorService; C:\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2012-10-26] (Nero AG)

S4 o2flash; C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe [65536 2007-02-12] (O2Micro International)

S4 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2012-10-08] ()

S4 TOSHIBA SMART Log Service; C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [126976 2007-12-03] (TOSHIBA Corporation)

R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1724192 2013-01-28] (TuneUp Software)
 

==================== Drivers (Whitelisted) ====================
 

R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [277544 2009-01-19] (Protect Software GmbH)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2010-04-01] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-28] (Avira Operations GmbH & Co. KG)

R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)

R3 CnxtHdAudAddService; C:\Windows\System32\drivers\CHDART.sys [187904 2008-02-01] (Conexant Systems Inc.)

S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)

S4 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2010-04-01] ()

R3 QIOMem; C:\Windows\System32\DRIVERS\QIOMem.sys [8192 2007-04-09] (TOSHIBA)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)

R3 UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [18432 2007-12-17] (Chicony Electronics Co., Ltd.)

S3 igfx; system32\DRIVERS\igdkmd32.sys [x]

S3 IntcHdmiAddService; system32\drivers\IntcHdmi.sys [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S3 Tosrfcom; No ImagePath
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-17 21:11 - 2013-09-17 21:12 - 01083437 _____ (Farbar) C:\Users\Simone Petry\Downloads\FRST.exe

2013-09-16 18:15 - 2013-09-16 18:15 - 00000911 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\Users\Simone Petry\AppData\Roaming\Malwarebytes

2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-09-16 18:15 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-09-16 18:11 - 2013-09-16 18:11 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Simone Petry\Downloads\mbam-setup-1.75.0.1300.exe

2013-09-16 18:09 - 2013-09-16 18:09 - 00000982 _____ C:\Users\Simone Petry\Desktop\JRT.txt

2013-09-16 18:04 - 2013-09-16 18:04 - 01029675 _____ (Thisisu) C:\Users\Simone Petry\Downloads\JRT.exe

2013-09-16 18:04 - 2013-09-16 18:04 - 00000000 ____D C:\Windows\ERUNT

2013-09-16 17:55 - 2013-09-16 17:58 - 00000000 ____D C:\AdwCleaner

2013-09-16 17:53 - 2013-09-16 17:53 - 01039554 _____ C:\Users\Simone Petry\Downloads\adwcleaner.exe

2013-09-16 16:58 - 2013-09-16 17:00 - 00036992 _____ C:\Users\Simone Petry\Downloads\Addition.txt

2013-09-16 16:56 - 2013-09-16 16:56 - 00000000 ____D C:\FRST

2013-09-13 07:57 - 2013-09-13 07:57 - 04751752 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe

2013-09-12 22:55 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-12 22:55 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-12 22:55 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-12 22:55 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-12 22:55 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-09-12 22:55 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-12 22:55 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-09-12 22:55 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-12 22:55 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-12 22:55 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-09-12 22:55 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-09-12 22:55 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-12 22:55 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-12 22:55 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-12 22:55 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-09-12 22:55 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-12 22:01 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-12 22:01 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll

2013-09-04 21:02 - 2013-09-04 21:03 - 00315392 _____ C:\Users\Simone Petry\Downloads\ZentraleMFB_Ueberblic_0d_0a_k_1 (1).ppt

2013-09-01 16:21 - 2013-09-01 16:20 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-08-28 20:28 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
 

==================== One Month Modified Files and Folders =======
 

2013-09-17 21:12 - 2013-09-17 21:11 - 01083437 _____ (Farbar) C:\Users\Simone Petry\Downloads\FRST.exe

2013-09-17 21:03 - 2011-12-14 17:56 - 00001148 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000UA.job

2013-09-17 20:57 - 2012-04-07 16:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-17 20:55 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-17 20:55 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-17 18:59 - 2008-10-01 17:57 - 01857459 _____ C:\Windows\WindowsUpdate.log

2013-09-17 18:55 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-17 15:46 - 2006-11-02 15:01 - 00032510 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-09-16 22:10 - 2011-12-14 17:56 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000Core.job

2013-09-16 20:19 - 2008-10-03 16:20 - 00000000 ____D C:\Users\Simone Petry\AppData\Local\Microsoft Help

2013-09-16 18:15 - 2013-09-16 18:15 - 00000911 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\Users\Simone Petry\AppData\Roaming\Malwarebytes

2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-09-16 18:11 - 2013-09-16 18:11 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Simone Petry\Downloads\mbam-setup-1.75.0.1300.exe

2013-09-16 18:09 - 2013-09-16 18:09 - 00000982 _____ C:\Users\Simone Petry\Desktop\JRT.txt

2013-09-16 18:04 - 2013-09-16 18:04 - 01029675 _____ (Thisisu) C:\Users\Simone Petry\Downloads\JRT.exe

2013-09-16 18:04 - 2013-09-16 18:04 - 00000000 ____D C:\Windows\ERUNT

2013-09-16 17:58 - 2013-09-16 17:55 - 00000000 ____D C:\AdwCleaner

2013-09-16 17:53 - 2013-09-16 17:53 - 01039554 _____ C:\Users\Simone Petry\Downloads\adwcleaner.exe

2013-09-16 17:00 - 2013-09-16 16:58 - 00036992 _____ C:\Users\Simone Petry\Downloads\Addition.txt

2013-09-16 16:56 - 2013-09-16 16:56 - 00000000 ____D C:\FRST

2013-09-15 23:02 - 2012-11-19 18:51 - 00000000 ____D C:\Users\Simone Petry\Studienseminar

2013-09-15 18:51 - 2013-02-03 16:44 - 00000000 ____D C:\Users\Simone Petry\Unterricht

2013-09-15 18:39 - 2013-07-09 09:55 - 00006978 _____ C:\Windows\PFRO.log

2013-09-14 08:09 - 2008-02-26 15:40 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-13 16:12 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-09-13 07:57 - 2013-09-13 07:57 - 04751752 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe

2013-09-13 07:57 - 2012-04-07 16:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2013-09-13 07:57 - 2011-05-17 11:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2013-09-13 07:19 - 2013-07-01 09:42 - 00326720 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-12 22:48 - 2013-08-15 12:12 - 00000000 ____D C:\Windows\system32\MRT

2013-09-12 22:45 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-09-05 20:34 - 2013-01-02 16:54 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-05 20:34 - 2013-01-02 16:54 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-09-04 21:03 - 2013-09-04 21:02 - 00315392 _____ C:\Users\Simone Petry\Downloads\ZentraleMFB_Ueberblic_0d_0a_k_1 (1).ppt

2013-09-04 20:26 - 2008-01-21 09:16 - 01560216 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-01 16:20 - 2013-09-01 16:21 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-09-01 16:20 - 2013-09-01 16:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-09-01 16:20 - 2012-08-31 08:25 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll

2013-09-01 16:20 - 2010-07-06 21:46 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll

2013-09-01 15:30 - 2010-05-18 15:10 - 00000000 ____D C:\Program Files\DEUTSCHLAND SPIELT
 

Some content of TEMP:

====================

C:\Users\Simone Petry\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-17 19:02
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Addition.txt:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-09-2013 03

Ran by Simone Petry at 2013-09-17 21:14:12

Running from C:\Users\Simone Petry\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

 Update for Microsoft Office 2007 (KB2508958)

32 Bit HP CIO Components Installer (Version: 1.0.0)

ABI-TOUR

ACD/Labs Software in C:\Program Files\ACDFREE12\ (Version: v12.00, FREE)

Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)

Adobe Flash Player 11 ActiveX (Version: 11.8.800.174)

Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8)

Adobe Shockwave Player 11.6 (Version: 11.6.4.634)

Apple Application Support (Version: 2.3)

Apple Software Update (Version: 2.1.3.127)

ATI Catalyst Install Manager (Version: 3.0.657.0)

Avira Free Antivirus (Version: 13.0.0.4052)

Big Fish Games: Game Manager (Version: 3.0.1.60)

Bluetooth Stack for Windows by Toshiba (Version: v6.10.02(T))

Camera Assistant Software for Toshiba (Version: 1.7.175.0123)

Canon Easy-PhotoPrint EX

Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data

Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data

Canon IJ Network Scan Utility

Canon IJ Network Tool

Canon MG6100 series Benutzerregistrierung

Canon MG6100 series MP Drivers

Canon MP Navigator EX 4.0

Canon My Printer

Canon Solution Menu EX

Catalyst Control Center - Branding (Version: 1.00.0000)

Catalyst Control Center Core Implementation (Version: 2008.0130.1509.26922)

Catalyst Control Center Graphics Full Existing (Version: 2008.0130.1509.26922)

Catalyst Control Center Graphics Full New (Version: 2008.0130.1509.26922)

Catalyst Control Center Graphics Light (Version: 2008.0130.1509.26922)

Catalyst Control Center Graphics Previews Vista (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Chinese Standard (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Chinese Traditional (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Dutch (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization French (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization German (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Italian (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Japanese (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Korean (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Portuguese (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Spanish (Version: 2008.0130.1509.26922)

Catalyst Control Center Localization Swedish (Version: 2008.0130.1509.26922)

CCC Help Chinese Standard (Version: 2008.0130.1508.26922)

CCC Help Chinese Traditional (Version: 2008.0130.1508.26922)

CCC Help Dutch (Version: 2008.0130.1508.26922)

CCC Help English (Version: 2008.0130.1508.26922)

CCC Help French (Version: 2008.0130.1508.26922)

CCC Help German (Version: 2008.0130.1508.26922)

CCC Help Italian (Version: 2008.0130.1508.26922)

CCC Help Japanese (Version: 2008.0130.1508.26922)

CCC Help Korean (Version: 2008.0130.1508.26922)

CCC Help Portuguese (Version: 2008.0130.1508.26922)

CCC Help Spanish (Version: 2008.0130.1508.26922)

CCC Help Swedish (Version: 2008.0130.1508.26922)

ccc-core-static (Version: 2008.0130.1509.26922)

ccc-utility (Version: 2008.0130.1509.26922)

CCleaner (Version: 4.02)

CD/DVD Drive Acoustic Silencer (Version: 2.02.00)

Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)

Conexant HD Audio (Version: 4.36.6.0)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

DEUTSCHLAND SPIELT GAME CENTER (Version: 1.0.0.46)

Die Siedler II - Die nächste Generation

dm-Fotowelt (Version: 5.0.4)

EAX Unified

Farm Tribe 2: Jetzt wird geackert! (Version: 1.0.0.0)

Foto Paradies

GeoGebra (Version: 4.0.41.0)

GeoGebra WebStart

Google Chrome (HKCU Version: 29.0.1547.66)

HDAUDIO Soft Data Fax Modem with SmartCP

HDMI Control Manager (Version: 1.6)

HessGISS 2012-2013 (Version: 17.0)

HP Update (Version: 5.002.007.004)

HPSSupply (Version: 2.1.3.0000)

HTC Driver Installer (Version: 4.0.0.009)

HTC Sync Manager (Version: 1.1.66.0)

Intel® Matrix Storage Manager

InterVideo AVControlSDK

Java 7 Update 25 (Version: 7.0.250)

Java Auto Updater (Version: 2.1.9.5)

Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)

Marvell Miniport Driver (Version: 10.51.4.3)

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft Access Runtime 2010 (Version: 14.0.7015.1000)

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access Runtime 2010 (Version: 14.0.7015.1000)

Microsoft Office Access Runtime MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)

Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)

Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Works (Version: 9.7.0621)

Microsoft XML Parser (Version: 8.0.7820.0)

Microsoft XML Parser (Version: 8.20.8730.4)

Move Media Player

MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)

MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)

NetWaiting (Version: 2.5.52)

NVIDIA PhysX (Version: 9.09.0203)

O2Micro Flash Memory Card Reader Driver (x86) (Version: 3.19.1)

OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)

OpenAL

PokerStars.net

ProtectDisc Driver, Version 11 (Version: 11.0.0.12)

QuickTime (Version: 7.73.80.64)

Risen (Version: 1.00.0000)

Samsung Master (Version: 1.1.11)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition

Sid Meier's Civilization 4 (Version: 1.00.0000)

Sid Meier's Civilization 4 (Version: 1.74)

Skins (Version: 2008.0130.1509.26922)

Skype™ 5.10 (Version: 5.10.116)

Star Wars(TM): Knights of the Old Republic (TM)

Steam (Version: 1.0.0.0)

swMSM (Version: 12.0.0.1)

Synaptics Pointing Device Driver (Version: 10.1.7.0)

The Witcher: Enhanced Edition

TOSHIBA Assist (Version: 2.01.04)

TOSHIBA Benutzerhandbücher (Version: 7.33)

TOSHIBA ConfigFree (Version: 7.1.26)

TOSHIBA Disc Creator (Version: 2.0.1.1.a)

TOSHIBA DVD PLAYER (Version: 1.20.10)

TOSHIBA Extended Tiles for Windows Mobility Center (Version: 1.01.00)

TOSHIBA Hardware Setup (Version: 3.00.01.00)

Toshiba Online Product Information (Version: 1.00.0012)

TOSHIBA Recovery Disc Creator (Version: 2.0.0.1b)

TOSHIBA SD Memory Utilities (Version: 1.8.1.1)

TOSHIBA Supervisor Password (Version: 3.00.01.00)

TOSHIBA Value Added Package (Version: 1.1.14)

TRDCReminder (Version: 1.00.0014)

TRORDCLauncher (Version: 1.0.0.1)

TuneUp Utilities 2013 (Version: 13.0.3020.2)

TuneUp Utilities Language Pack (de-DE) (Version: 13.0.3020.2)

Unity Web Player (HKCU Version: )

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition

Update für Microsoft Office Excel 2007 Help (KB963678)

Update für Microsoft Office Powerpoint 2007 Help (KB963669)

Update für Microsoft Office Word 2007 Help (KB963665)

VLC media player 1.0.3 (Version: 1.0.3)

Windows Media Encoder 9-Reihe

Windows Media Encoder 9-Reihe (Version: 9.00.3374)
 

==================== Restore Points  =========================
 

04-09-2013 16:39:47 Geplanter Prüfpunkt

10-09-2013 13:58:30 Windows Update

12-09-2013 20:44:42 Windows Update

13-09-2013 08:39:17 Windows Update

13-09-2013 13:55:15 Windows Update

13-09-2013 14:03:03 Windows Update

13-09-2013 14:41:31 Windows Update

13-09-2013 15:10:08 Windows Update

13-09-2013 15:17:27 Windows Update

13-09-2013 15:32:32 Windows Update

14-09-2013 06:04:04 Windows Update

17-09-2013 12:45:20 Windows Update
 

==================== Hosts content: ==========================
 

2006-11-02 12:23 - 2006-09-18 23:41 - 00000736 ____A C:\Windows\system32\Drivers\etc\hosts

::1             localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {03FE9E06-9BED-4ECE-825D-7569A2EA4C0A} - System32\Tasks\{61F8E5DD-1D83-40B4-8CB0-C89D5E23647C} => C:\Program Files\Skype\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)

Task: {11A9B218-E1FC-4F88-82EB-1522A1B09F5C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000Core => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-14] (Google Inc.)

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM

Task: {1D3AD10B-481B-4F54-839A-256D1AFFB347} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-13] (Adobe Systems Incorporated)

Task: {246B0DB0-0D73-42C6-98EF-0C30CF48B70B} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-21] (Microsoft Corp.)

Task: {28912FAB-CA72-4BD3-842C-AB81111E6D96} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)

Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI

Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages

Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)

Task: {470A6904-C848-4284-BBCF-B1CBAC31345A} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)

Task: {6B6262DF-EFFF-432C-9850-9023BA49143C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000UA => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-14] (Google Inc.)

Task: {9CFCB40E-6BE6-4A52-B834-49CF0E188B06} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2013-01-28] (TuneUp Software)

Task: {9E5B3551-C5A0-4334-A0C5-2D919CB3465B} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)

Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)

Task: {AC09D2B6-7091-4776-BDC4-6C1999933A6E} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)

Task: {CBDF8DD4-48D3-49D7-AC62-89826B0D9891} - System32\Tasks\{4F6BAA77-A8BF-46A1-A07A-697634734F94} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.0.124.259/en/abandoninstall?page=tsPlugin&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled

Task: {D5F77ED5-B41B-4259-BE73-E83CB2099B8A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()

Task: {F7A5F634-5266-471C-B72A-F68601FDC9EC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)

Task: {F882764E-68E4-45ED-8A86-708FCE72E6C4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000Core.job => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000UA.job => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2008-02-15 18:22 - 2008-01-30 16:30 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll

2008-01-08 08:15 - 2008-01-08 08:15 - 00688128 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll

2007-11-16 21:10 - 2007-11-16 21:10 - 00172032 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TosBtAPI.dll

2007-12-03 18:57 - 2007-12-03 18:57 - 00131072 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TosBdAPI.dll

2008-02-15 18:29 - 2007-11-29 18:18 - 00163840 _____ (Synaptics, Inc.) C:\Windows\system32\SynCOM.dll

2008-02-15 18:29 - 2007-11-29 18:30 - 00147456 _____ (Synaptics, Inc.) C:\Windows\system32\SynTPAPI.dll

2013-09-04 08:14 - 2013-09-02 22:34 - 47074256 _____ (Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\chrome.dll

2013-09-04 08:14 - 2013-09-02 22:35 - 09962960 _____ (The ICU Project) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\icudt.dll

2013-09-04 08:14 - 2013-09-02 22:35 - 04053456 _____ () C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll

2013-09-04 08:14 - 2013-09-02 22:35 - 00410576 _____ () C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll

2013-09-04 08:14 - 2013-09-02 22:35 - 02110928 _____ (Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\libpeerconnection.dll

2013-09-04 08:14 - 2013-09-02 22:35 - 01604560 _____ () C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
 

==================== Alternate Data Streams (whitelisted) ==========
 

AlternateDataStreams: C:\ProgramData\TEMP:025DF3DE

AlternateDataStreams: C:\ProgramData\TEMP:02F30776

AlternateDataStreams: C:\ProgramData\TEMP:03A039A3

AlternateDataStreams: C:\ProgramData\TEMP:03D08225

AlternateDataStreams: C:\ProgramData\TEMP:0406003C

AlternateDataStreams: C:\ProgramData\TEMP:041ED421

AlternateDataStreams: C:\ProgramData\TEMP:073139EC

AlternateDataStreams: C:\ProgramData\TEMP:07D64CD9

AlternateDataStreams: C:\ProgramData\TEMP:084612C9

AlternateDataStreams: C:\ProgramData\TEMP:0915A718

AlternateDataStreams: C:\ProgramData\TEMP:0968E571

AlternateDataStreams: C:\ProgramData\TEMP:09708CB7

AlternateDataStreams: C:\ProgramData\TEMP:0AE2C68F

AlternateDataStreams: C:\ProgramData\TEMP:102394C6

AlternateDataStreams: C:\ProgramData\TEMP:10873493

AlternateDataStreams: C:\ProgramData\TEMP:10B970A9

AlternateDataStreams: C:\ProgramData\TEMP:10D45FC3

AlternateDataStreams: C:\ProgramData\TEMP:12383CAE

AlternateDataStreams: C:\ProgramData\TEMP:12D21A9A

AlternateDataStreams: C:\ProgramData\TEMP:13019F4B

AlternateDataStreams: C:\ProgramData\TEMP:13765436

AlternateDataStreams: C:\ProgramData\TEMP:13CDB0E0

AlternateDataStreams: C:\ProgramData\TEMP:14362DF8

AlternateDataStreams: C:\ProgramData\TEMP:160ADF0B

AlternateDataStreams: C:\ProgramData\TEMP:164561C8

AlternateDataStreams: C:\ProgramData\TEMP:169E7AC5

AlternateDataStreams: C:\ProgramData\TEMP:1709732A

AlternateDataStreams: C:\ProgramData\TEMP:18A25CF1

AlternateDataStreams: C:\ProgramData\TEMP:1A8BB29B

AlternateDataStreams: C:\ProgramData\TEMP:1B3549F2

AlternateDataStreams: C:\ProgramData\TEMP:1B47CB83

AlternateDataStreams: C:\ProgramData\TEMP:1B96CF22

AlternateDataStreams: C:\ProgramData\TEMP:206470A5

AlternateDataStreams: C:\ProgramData\TEMP:217A2A36

AlternateDataStreams: C:\ProgramData\TEMP:2211E7A0

AlternateDataStreams: C:\ProgramData\TEMP:22741C1F

AlternateDataStreams: C:\ProgramData\TEMP:258D2F8B

AlternateDataStreams: C:\ProgramData\TEMP:26499772

AlternateDataStreams: C:\ProgramData\TEMP:2652902F

AlternateDataStreams: C:\ProgramData\TEMP:27F44544

AlternateDataStreams: C:\ProgramData\TEMP:28819F45

AlternateDataStreams: C:\ProgramData\TEMP:2979C892

AlternateDataStreams: C:\ProgramData\TEMP:29C0641D

AlternateDataStreams: C:\ProgramData\TEMP:2ABB51D4

AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9

AlternateDataStreams: C:\ProgramData\TEMP:2B856118

AlternateDataStreams: C:\ProgramData\TEMP:2B9555D8

AlternateDataStreams: C:\ProgramData\TEMP:2C250258

AlternateDataStreams: C:\ProgramData\TEMP:2C86E2AD

AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F

AlternateDataStreams: C:\ProgramData\TEMP:2CED8825

AlternateDataStreams: C:\ProgramData\TEMP:2EB79F01

AlternateDataStreams: C:\ProgramData\TEMP:2F70C0B4

AlternateDataStreams: C:\ProgramData\TEMP:3118E26B

AlternateDataStreams: C:\ProgramData\TEMP:34C443B4

AlternateDataStreams: C:\ProgramData\TEMP:363E775E

AlternateDataStreams: C:\ProgramData\TEMP:36608448

AlternateDataStreams: C:\ProgramData\TEMP:36A39835

AlternateDataStreams: C:\ProgramData\TEMP:371A321E

AlternateDataStreams: C:\ProgramData\TEMP:375FC7E7

AlternateDataStreams: C:\ProgramData\TEMP:3766E957

AlternateDataStreams: C:\ProgramData\TEMP:3B07E6F4

AlternateDataStreams: C:\ProgramData\TEMP:3CAE2A70

AlternateDataStreams: C:\ProgramData\TEMP:404908B5

AlternateDataStreams: C:\ProgramData\TEMP:413E2927

AlternateDataStreams: C:\ProgramData\TEMP:425759C6

AlternateDataStreams: C:\ProgramData\TEMP:436BE28C

AlternateDataStreams: C:\ProgramData\TEMP:45912F61

AlternateDataStreams: C:\ProgramData\TEMP:46A2F27B

AlternateDataStreams: C:\ProgramData\TEMP:471AD3D0

AlternateDataStreams: C:\ProgramData\TEMP:483AC68A

AlternateDataStreams: C:\ProgramData\TEMP:4AC7B5C1

AlternateDataStreams: C:\ProgramData\TEMP:4B244549

AlternateDataStreams: C:\ProgramData\TEMP:4C6F9D77

AlternateDataStreams: C:\ProgramData\TEMP:4F852702

AlternateDataStreams: C:\ProgramData\TEMP:553056F1

AlternateDataStreams: C:\ProgramData\TEMP:56C66609

AlternateDataStreams: C:\ProgramData\TEMP:58E38390

AlternateDataStreams: C:\ProgramData\TEMP:59A6876B

AlternateDataStreams: C:\ProgramData\TEMP:5A2E8BBF

AlternateDataStreams: C:\ProgramData\TEMP:5A437AC3

AlternateDataStreams: C:\ProgramData\TEMP:5A8F8A0C

AlternateDataStreams: C:\ProgramData\TEMP:5B4686D7

AlternateDataStreams: C:\ProgramData\TEMP:5C0940F1

AlternateDataStreams: C:\ProgramData\TEMP:5CE65446

AlternateDataStreams: C:\ProgramData\TEMP:5DB36C47

AlternateDataStreams: C:\ProgramData\TEMP:5F85EE30

AlternateDataStreams: C:\ProgramData\TEMP:6294B369

AlternateDataStreams: C:\ProgramData\TEMP:6423D635

AlternateDataStreams: C:\ProgramData\TEMP:66AA0486

AlternateDataStreams: C:\ProgramData\TEMP:678C1866

AlternateDataStreams: C:\ProgramData\TEMP:6896CCCE

AlternateDataStreams: C:\ProgramData\TEMP:68A41423

AlternateDataStreams: C:\ProgramData\TEMP:6A0A47E7

AlternateDataStreams: C:\ProgramData\TEMP:6DDFD746

AlternateDataStreams: C:\ProgramData\TEMP:6E2D80C8

AlternateDataStreams: C:\ProgramData\TEMP:6E65510A

AlternateDataStreams: C:\ProgramData\TEMP:6EA64886

AlternateDataStreams: C:\ProgramData\TEMP:6EE8565A

AlternateDataStreams: C:\ProgramData\TEMP:6FD26134

AlternateDataStreams: C:\ProgramData\TEMP:706B1D1A

AlternateDataStreams: C:\ProgramData\TEMP:70E897B5

AlternateDataStreams: C:\ProgramData\TEMP:72A1B66A

AlternateDataStreams: C:\ProgramData\TEMP:75798D9A

AlternateDataStreams: C:\ProgramData\TEMP:762408BA

AlternateDataStreams: C:\ProgramData\TEMP:7A032A04

AlternateDataStreams: C:\ProgramData\TEMP:7BB20DE8

AlternateDataStreams: C:\ProgramData\TEMP:7BE5BAAB

AlternateDataStreams: C:\ProgramData\TEMP:7BFAAE70

AlternateDataStreams: C:\ProgramData\TEMP:7C8AA9A6

AlternateDataStreams: C:\ProgramData\TEMP:7CEDF9F3

AlternateDataStreams: C:\ProgramData\TEMP:7EABF26C

AlternateDataStreams: C:\ProgramData\TEMP:7EF55396

AlternateDataStreams: C:\ProgramData\TEMP:85376176

AlternateDataStreams: C:\ProgramData\TEMP:87A3A233

AlternateDataStreams: C:\ProgramData\TEMP:8AC20936

AlternateDataStreams: C:\ProgramData\TEMP:8AED9359

AlternateDataStreams: C:\ProgramData\TEMP:8C12CFCD

AlternateDataStreams: C:\ProgramData\TEMP:8CCDAB14

AlternateDataStreams: C:\ProgramData\TEMP:902C848D

AlternateDataStreams: C:\ProgramData\TEMP:908A1B53

AlternateDataStreams: C:\ProgramData\TEMP:922DA2DB

AlternateDataStreams: C:\ProgramData\TEMP:92DB4653

AlternateDataStreams: C:\ProgramData\TEMP:943971F5

AlternateDataStreams: C:\ProgramData\TEMP:952245B1

AlternateDataStreams: C:\ProgramData\TEMP:9547F1DB

AlternateDataStreams: C:\ProgramData\TEMP:97995ED4

AlternateDataStreams: C:\ProgramData\TEMP:9857FAE3

AlternateDataStreams: C:\ProgramData\TEMP:993185CB

AlternateDataStreams: C:\ProgramData\TEMP:99C301D0

AlternateDataStreams: C:\ProgramData\TEMP:9C3AAD57

AlternateDataStreams: C:\ProgramData\TEMP:9C8D5426

AlternateDataStreams: C:\ProgramData\TEMP:9CF728A6

AlternateDataStreams: C:\ProgramData\TEMP:9E3E060F

AlternateDataStreams: C:\ProgramData\TEMP:9F3CEEE6

AlternateDataStreams: C:\ProgramData\TEMP:9FCF32A8

AlternateDataStreams: C:\ProgramData\TEMP:A42FABF7

AlternateDataStreams: C:\ProgramData\TEMP:A561576B

AlternateDataStreams: C:\ProgramData\TEMP:A6F30843

AlternateDataStreams: C:\ProgramData\TEMP:A76A1B1B

AlternateDataStreams: C:\ProgramData\TEMP:A8606E6E

AlternateDataStreams: C:\ProgramData\TEMP:A9562832

AlternateDataStreams: C:\ProgramData\TEMP:A9ABA3FF

AlternateDataStreams: C:\ProgramData\TEMP:AE8FDB48

AlternateDataStreams: C:\ProgramData\TEMP:AE9351E0

AlternateDataStreams: C:\ProgramData\TEMP:AED4A2B7

AlternateDataStreams: C:\ProgramData\TEMP:AF54CFFD

AlternateDataStreams: C:\ProgramData\TEMP:B139DDF3

AlternateDataStreams: C:\ProgramData\TEMP:B285A50E

AlternateDataStreams: C:\ProgramData\TEMP:B6D84F71

AlternateDataStreams: C:\ProgramData\TEMP:B8791731

AlternateDataStreams: C:\ProgramData\TEMP:BACD3198

AlternateDataStreams: C:\ProgramData\TEMP:BCFEA004

AlternateDataStreams: C:\ProgramData\TEMP:BD8010FE

AlternateDataStreams: C:\ProgramData\TEMP:BE0654D6

AlternateDataStreams: C:\ProgramData\TEMP:BEACE4C8

AlternateDataStreams: C:\ProgramData\TEMP:BEF18713

AlternateDataStreams: C:\ProgramData\TEMP:BF6C4AAC

AlternateDataStreams: C:\ProgramData\TEMP:C0BCE04B

AlternateDataStreams: C:\ProgramData\TEMP:C2F24DB5

AlternateDataStreams: C:\ProgramData\TEMP:C3AD9507

AlternateDataStreams: C:\ProgramData\TEMP:C3C72D5F

AlternateDataStreams: C:\ProgramData\TEMP:C4288847

AlternateDataStreams: C:\ProgramData\TEMP:C43C957E

AlternateDataStreams: C:\ProgramData\TEMP:C48905F4

AlternateDataStreams: C:\ProgramData\TEMP:C6920A5D

AlternateDataStreams: C:\ProgramData\TEMP:C7857F06

AlternateDataStreams: C:\ProgramData\TEMP:C9B27A06

AlternateDataStreams: C:\ProgramData\TEMP:CBAF0C30

AlternateDataStreams: C:\ProgramData\TEMP:CF1334B0

AlternateDataStreams: C:\ProgramData\TEMP:CFF6B3FF

AlternateDataStreams: C:\ProgramData\TEMP:D02FBAEC

AlternateDataStreams: C:\ProgramData\TEMP:D2397415

AlternateDataStreams: C:\ProgramData\TEMP:D36E068F

AlternateDataStreams: C:\ProgramData\TEMP:D3A82449

AlternateDataStreams: C:\ProgramData\TEMP:D4558A0B

AlternateDataStreams: C:\ProgramData\TEMP:D696AA12

AlternateDataStreams: C:\ProgramData\TEMP:D987CB43

AlternateDataStreams: C:\ProgramData\TEMP:D999FFD5

AlternateDataStreams: C:\ProgramData\TEMP:DB2748F7

AlternateDataStreams: C:\ProgramData\TEMP:DF5ABA3D

AlternateDataStreams: C:\ProgramData\TEMP:E0888117

AlternateDataStreams: C:\ProgramData\TEMP:E0A09032

AlternateDataStreams: C:\ProgramData\TEMP:E1D818F7

AlternateDataStreams: C:\ProgramData\TEMP:E21433CE

AlternateDataStreams: C:\ProgramData\TEMP:E222F217

AlternateDataStreams: C:\ProgramData\TEMP:E2CB42C9

AlternateDataStreams: C:\ProgramData\TEMP:E2DDFA62

AlternateDataStreams: C:\ProgramData\TEMP:E402E439

AlternateDataStreams: C:\ProgramData\TEMP:E40AB54F

AlternateDataStreams: C:\ProgramData\TEMP:E4EE99EF

AlternateDataStreams: C:\ProgramData\TEMP:E5496666

AlternateDataStreams: C:\ProgramData\TEMP:E5B07840

AlternateDataStreams: C:\ProgramData\TEMP:E5BA9ADD

AlternateDataStreams: C:\ProgramData\TEMP:E5F8E280

AlternateDataStreams: C:\ProgramData\TEMP:E6708F08

AlternateDataStreams: C:\ProgramData\TEMP:E6BEADB7

AlternateDataStreams: C:\ProgramData\TEMP:E6CDFB4A

AlternateDataStreams: C:\ProgramData\TEMP:E87AB4E3

AlternateDataStreams: C:\ProgramData\TEMP:E9900C74

AlternateDataStreams: C:\ProgramData\TEMP:EB68CA55

AlternateDataStreams: C:\ProgramData\TEMP:EC0279DC

AlternateDataStreams: C:\ProgramData\TEMP:EC7C9796

AlternateDataStreams: C:\ProgramData\TEMP:ECF3C50F

AlternateDataStreams: C:\ProgramData\TEMP:ED2D63E4

AlternateDataStreams: C:\ProgramData\TEMP:ED9B661E

AlternateDataStreams: C:\ProgramData\TEMP:EE198B1F

AlternateDataStreams: C:\ProgramData\TEMP:EFF3C3C8

AlternateDataStreams: C:\ProgramData\TEMP:F1F936DF

AlternateDataStreams: C:\ProgramData\TEMP:F26F5952

AlternateDataStreams: C:\ProgramData\TEMP:F2AF86D9

AlternateDataStreams: C:\ProgramData\TEMP:F3029A65

AlternateDataStreams: C:\ProgramData\TEMP:F3591DDB

AlternateDataStreams: C:\ProgramData\TEMP:F3A185AE

AlternateDataStreams: C:\ProgramData\TEMP:F53B274A

AlternateDataStreams: C:\ProgramData\TEMP:F5FC5DCE

AlternateDataStreams: C:\ProgramData\TEMP:F67AAFC5

AlternateDataStreams: C:\ProgramData\TEMP:F6A0889A

AlternateDataStreams: C:\ProgramData\TEMP:F760FD47

AlternateDataStreams: C:\ProgramData\TEMP:F9689B72

AlternateDataStreams: C:\ProgramData\TEMP:F9F58B80

AlternateDataStreams: C:\ProgramData\TEMP:FD11E093

AlternateDataStreams: C:\ProgramData\TEMP:FD786DCA

AlternateDataStreams: C:\ProgramData\TEMP:FECEF728
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/17/2013 06:57:16 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/17/2013 02:40:36 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/17/2013 06:25:04 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2013 10:28:35 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2013 08:12:54 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (09/17/2013 06:57:19 PM) (Source: Service Control Manager) (User: )

Description: Parallel port driver%%1058
 

Error: (09/17/2013 03:46:21 PM) (Source: DCOM) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (09/17/2013 02:40:36 PM) (Source: Service Control Manager) (User: )

Description: Parallel port driver%%1058
 

Error: (09/17/2013 06:32:21 AM) (Source: DCOM) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (09/17/2013 06:25:04 AM) (Source: Service Control Manager) (User: )

Description: Parallel port driver%%1058
 

Error: (09/16/2013 10:30:38 PM) (Source: DCOM) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (09/16/2013 10:28:35 PM) (Source: Service Control Manager) (User: )

Description: Parallel port driver%%1058
 

Error: (09/16/2013 10:25:44 PM) (Source: DCOM) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (09/16/2013 09:10:59 PM) (Source: Print) (User: SimonePetry-PC)

Description: Das Dokument Microsoft Word - Aufträge 17.9.13.docx im Besitz von Simone Petry konnte nicht auf dem Drucker Canon MG6100 series Printer gedruckt werden. Versuchen Sie erneut, das Dokument zu drucken, oder starten Sie den Druckspooler erneut. 

Datentyp: NT EMF 1.008. Größe der Spooldatei in Bytes: 131072. Anzahl der gedruckten Bytes: 37128. Gesamtanzahl der Seiten des Dokuments: 1. Anzahl der gedruckten Seiten: 0. Clientcomputer: \\SIMONEPETRY-PC. Vom Druckprozessor zurückgegebener Win32-Fehlercode: Microsoft Word - Aufträge 17.9.13.docx0. Microsoft Word - Aufträge 17.9.13.docx1
 

Error: (09/16/2013 08:12:56 PM) (Source: Service Control Manager) (User: )

Description: Parallel port driver%%1058
 
 

Microsoft Office Sessions:

=========================

Error: (09/02/2013 07:13:54 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 8985 seconds with 6780 seconds of active time.  This session ended with a crash.
 

Error: (03/26/2010 02:42:51 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 127 seconds with 120 seconds of active time.  This session ended with a crash.
 

Error: (03/11/2010 00:11:05 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 892 seconds with 780 seconds of active time.  This session ended with a crash.
 

Error: (10/25/2008 03:40:05 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6308.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 189 seconds with 180 seconds of active time.  This session ended with a crash.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 44%

Total physical RAM: 3069.67 MB

Available physical RAM: 1713.84 MB

Total Pagefile: 6341.62 MB

Available Pagefile: 5171.08 MB

Total Virtual: 2047.88 MB

Available Virtual: 1918.7 MB
 

==================== Drives ================================
 

Drive c: (Vista) (Fixed) (Total:117.54 GB) (Free:22.05 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive e: (Data) (Fixed) (Total:113.88 GB) (Free:101.87 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: 22741035)

Partition 1: (Not Active) - (Size=1 GB) - (Type=27)

Partition 2: (Active) - (Size=118 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=114 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================