Trojaner-Board - Win7: GData: Virenwächter nicht aktivierbar - Magic Partition Recovery will immer installiert werden

Code:

GMER 2.1.19357 - hxxp://www.gmer.net

Rootkit scan 2014-05-18 19:23:57

Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 FUJITSU_ rev.8919 232,89GB

Running: Gmer-19357.exe; Driver: C:\Users\DR4166~1.ING\AppData\Local\Temp\pxliipoc.sys
 
 

---- Kernel code sections - GMER 2.1 ----
 

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                                  fffff80003bb2000 45 bytes [00, 00, 51, 02, 54, 68, 72, ...]

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575                                                                                  fffff80003bb202f 16 bytes [00, 04, 00, 00, 00, 00, 00, ...]
 

---- User code sections - GMER 2.1 ----
 

.text     C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe[2864] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                            0000000076ea1465 2 bytes [EA, 76]

.text     C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe[2864] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                           0000000076ea14bb 2 bytes [EA, 76]

.text     ...                                                                                                                                                 * 2

.text     C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\StarMoneyOnlineUpdate.exe[3160] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000076ea1465 2 bytes [EA, 76]

.text     C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\StarMoneyOnlineUpdate.exe[3160] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000076ea14bb 2 bytes [EA, 76]

.text     ...                                                                                                                                                 * 2

.text     C:\{$1284-9213-2940-1289$}\comhost.exe[1528] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                0000000076ea1465 2 bytes [EA, 76]

.text     C:\{$1284-9213-2940-1289$}\comhost.exe[1528] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                               0000000076ea14bb 2 bytes [EA, 76]

.text     ...                                                                                                                                                 * 2

.text     C:\Program Files (x86)\Hewlett-Packard\IAM\bin\AsGHost.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                            0000000076ea1465 2 bytes [EA, 76]

.text     C:\Program Files (x86)\Hewlett-Packard\IAM\bin\AsGHost.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                           0000000076ea14bb 2 bytes [EA, 76]

.text     ...                                                                                                                                                 * 2

.text     C:\Program Files (x86)\Kalenderchen\Kalenderchen.exe[3856] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                  0000000076ea1465 2 bytes [EA, 76]

.text     C:\Program Files (x86)\Kalenderchen\Kalenderchen.exe[3856] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                 0000000076ea14bb 2 bytes [EA, 76]

.text     ...                                                                                                                                                 * 2

.text     C:\Program Files (x86)\Tools&More\GhostWriter\GhostWriter.exe[3264] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                         0000000076ea1465 2 bytes [EA, 76]

.text     C:\Program Files (x86)\Tools&More\GhostWriter\GhostWriter.exe[3264] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                        0000000076ea14bb 2 bytes [EA, 76]

.text     ...                                                                                                                                                 * 2

.text     C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[5808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                      0000000076ea1465 2 bytes [EA, 76]

.text     C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[5808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                     0000000076ea14bb 2 bytes [EA, 76]

.text     ...                                                                                                                                                 * 2

.text     C:\Program Files (x86)\Sun\StarOffice 9\program\soffice.bin[5748] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                           0000000076ea1465 2 bytes [EA, 76]

.text     C:\Program Files (x86)\Sun\StarOffice 9\program\soffice.bin[5748] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                          0000000076ea14bb 2 bytes [EA, 76]

.text     ...                                                                                                                                                 * 2

.text     C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe[5996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                          0000000076ea1465 2 bytes [EA, 76]

.text     C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe[5996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                         0000000076ea14bb 2 bytes [EA, 76]

.text     ...                                                                                                                                                 * 2

.text     C:\{$1284-9213-2940-1289$}\comhost.exe[5420] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                0000000076ea1465 2 bytes [EA, 76]

.text     C:\{$1284-9213-2940-1289$}\comhost.exe[5420] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                               0000000076ea14bb 2 bytes [EA, 76]

.text     ...                                                                                                                                                 * 2

.text     C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe[4932] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                 0000000076ea1465 2 bytes [EA, 76]

.text     C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe[4932] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                0000000076ea14bb 2 bytes [EA, 76]

.text     ...                                                                                                                                                 * 2

---- Processes - GMER 2.1 ----
 

Process   C:\{$1284-9213-2940-1289$}\comhost.exe (*** suspicious ***) @ C:\{$1284-9213-2940-1289$}\comhost.exe [1528](2014-05-16 00:26:20)                    0000000000230000

Process   C:\{$1284-9213-2940-1289$}\comhost.exe (*** suspicious ***) @ C:\{$1284-9213-2940-1289$}\comhost.exe [5420](2014-05-16 00:26:20)                    0000000000230000
 

---- Registry - GMER 2.1 ----
 

Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00247eee2bd2                                                                         

Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00247eee2bd2@181eb02e9c11                                                            0xD5 0xD7 0xD7 0x2C ...

Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00247eee2bd2@001fe403b2de                                                            0x58 0x62 0xF4 0x27 ...

Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00247eee2bd2@b8763faa3d1b                                                            0x7B 0x8F 0x35 0x85 ...

Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00247eee2bd2@002248def056                                                            0x19 0x71 0x44 0xAC ...

Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00247eee2bd2 (not active ControlSet)                                                     

Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00247eee2bd2@181eb02e9c11                                                                0xD5 0xD7 0xD7 0x2C ...

Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00247eee2bd2@001fe403b2de                                                                0x58 0x62 0xF4 0x27 ...

Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00247eee2bd2@b8763faa3d1b                                                                0x7B 0x8F 0x35 0x85 ...

Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00247eee2bd2@002248def056                                                                0x19 0x71 0x44 0xAC ...

Reg       HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{92C1845F-9629-E837-45B3-5CE2552BF71B}                                     

Reg       HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{92C1845F-9629-E837-45B3-5CE2552BF71B}@pahkcmcamhdadjfkagekbgbhjjogehob    0x61 0x62 0x6D 0x6F ...
 

---- EOF - GMER 2.1 ----

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014

Ran by SnakeP at 2014-05-18 17:48:20

Running from C:\Users\SnakeP\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)

16-CH Smart VS-IP Recorder (HKLM-x32\...\InstallShield_{989776D8-7665-45B8-AC39-EF04C3FF5983}) (Version: 2.00.0022 - Security Center GmbH & Co. KG)

16-CH Smart VS-IP Recorder (x32 Version: 2.00.0022 - Security Center GmbH & Co. KG) Hidden

64 Bit HP CIO Components Installer (Version: 3.2.1 - Hewlett-Packard) Hidden

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

ABUS IP-Installer (HKLM-x32\...\{0D70EC02-6A84-4F5F-8768-0BCAD45F5FB9}) (Version: 7.3.2332 - ABUS Security-Center GmbH & Co. KG)

ABUS VMS Express (x64) (HKLM\...\{429409CA-D8F1-48CF-B064-FD99D81068AB}) (Version: 7.2.2296 - ABUS Security-Center GmbH & Co. KG)

Acronis*True*Image*Home (HKLM-x32\...\{67ED38A3-4882-448B-B44D-3428AB00D7D5}) (Version: 13.0.6053 - Acronis)

ActivClient x64 (Version: 6.2 - ActivIdentity) Hidden

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)

AMD APP SDK Runtime (Version: 2.5.793.1 - Advanced Micro Devices Inc.) Hidden

AMD Catalyst Install Manager (HKLM\...\{D0A76081-22E4-5B3F-5394-1229DDF73585}) (Version: 3.0.851.0 - Advanced Micro Devices, Inc.)

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ArchiCrypt Live Version 7.4.1.11024 (HKLM\...\ArchiCrypt Live 7_is1) (Version: 7.4.1.11024 - Softwareentwicklung Patric Remus - ArchiCrypt)

ArchiCrypt Shredder Version 6.9.3.5701 (HKLM-x32\...\ACRYSH6_is1) (Version: 6.9.3.5701 - Softwareentwicklung Remus - ArchiCrypt)

Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)

AuthenTec Fingerprint System (Version: 8.0.202.0 - AuthenTec, Inc.) Hidden

Auto Gordian Knot 2.55 (HKLM-x32\...\AutoGK) (Version: 2.55 - len0x)

Avanquest update (HKLM-x32\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.29 - Avanquest Software)

Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5) (Version: 2.5.3.0 - )

AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version:  - )

AVM FRITZ!Box AddOn (IE) (x64) (HKLM\...\{EC3671D7-98AC-4951-8FFD-5556BE066137}) (Version: 1.7.0 - AVM Berlin)

AVM FRITZ!fax für FRITZ!Box (HKLM-x32\...\FRITZ! 2.0) (Version:  - AVM Berlin)

BiAdmin (HKLM-x32\...\BiAdmin) (Version:  - )

Biet-O-Matic v2.14.8 (HKLM-x32\...\Biet-O-Matic v2.14.8) (Version: 2.14.8 - BOM Development Team)

Bigasoft AVCHD Converter 3.4.14.4261 (HKLM-x32\...\{49A06D30-A5DB-4f49-91C3-7CCC63B5E8EE}_is1) (Version:  - Bigasoft Corporation)

BIOS Configuration for HP ProtectTools (HKLM-x32\...\{1960BE46-E85A-4933-B10A-6D8516585288}) (Version: 4.00 E1 - Hewlett-Packard)

Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.48.35 - Broadcom Corporation)

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center (x32 Version: 2012.0121.2309.41511 - Ihr Firmenname) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0121.2309.41511 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2012.0121.2309.41511 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2012.0121.2309.41511 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Profiles Mobile (x32 Version: 2012.0121.2309.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden

ccc-utility64 (Version: 2012.0121.2309.41511 - Advanced Micro Devices, Inc.) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)

Credential Manager for HP ProtectTools (x32 Version: 4.1.11.1505 - Hewlett-Packard Company) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Device Access Manager for HP ProtectTools (HKLM\...\{55B52830-024A-443E-AF61-61E1E71AFA1B}) (Version: 5.0.1.9 - Hewlett-Packard)

DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)

DisplayLink Core Software (HKLM\...\{039C24E4-07A1-4A1F-AAB0-78FD9B2DB0E0}) (Version: 5.6.31854.0 - DisplayLink Corp.)

DisplayLink Graphics (HKLM\...\{90B964AC-CF8E-4B69-935E-A1E620DCBAE2}) (Version: 5.6.31870.0 - DisplayLink Corp.)

Do Not Track Plus Add-on 1.0.5570.0305 (HKLM-x32\...\Do Not Track Plus Add-on_is1) (Version: 1.0.5570.0305 - Abine)

DreamBoxEdit -- The one and only settings editor for your Dreambox (HKLM-x32\...\DreamBoxEdit) (Version:  - )

DreamStream E2 (HKLM-x32\...\845CCCCA-B77C-43EA-9A43-62DACEA4F902) (Version: 0.4.0 (Beta 14a) - Thomas "LazyT" Löwe)

Drive Encryption for HP ProtectTools (Version: 4.0.26 - Hewlett-Packard) Hidden

DVD Shrink 3.2 deutsch (DeCSS-frei) (HKLM-x32\...\DVD Shrink DE_is1) (Version:  - DVD Shrink)

ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.1.13904 - Landesfinanzdirektion Thüringen)

EURACOM (HKLM-x32\...\EURACOM) (Version:  - )

File Sanitizer For HP ProtectTools (HKLM-x32\...\{789C97CE-9E17-4126-BDF4-11FF458BF705}) (Version: 1.0.1.10 - Hewlett-Packard)

Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Free Mp3 Wma Converter V 2.2 (HKLM-x32\...\Free Mp3 Wma Converter_is1) (Version: 2.2.0.0 - Koyote Soft)

FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version: Preview - Marek Jasinski)

FRITZ!Box-Fernzugang einrichten (HKLM-x32\...\{EFADD989-D9F2-49F6-A280-675951CC78D3}) (Version: 1.0.3 - AVM Berlin)

FRITZ!Fernzugang (HKLM\...\{5001E5BC-C9BF-4598-AB89-E7318C76C5F4}) (Version: 1.2.6 - AVM Berlin)

G Data InternetSecurity CBE (HKLM-x32\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.1.2 - G Data Software AG)

Ghostery IE Plugin (HKLM-x32\...\Ghostery IE Plugin_is1) (Version: 2.5.2.0 - Ghostery)

GhostWriter (HKLM-x32\...\{72146E2E-64C7-41E4-8052-5C423049CB7E}) (Version: 4.00.0100 - Wirth IT Design)

GhostWriter (HKLM-x32\...\{B53FAFF6-8504-4A0E-BBA6-BD62A757F205}) (Version: 4.01.0000 - Wirth IT Design)

Google Chrome (HKCU\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.)

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden

Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden

High-Definition Video Playback 10 (x32 Version: 7.0.11400.29.0 - Nero AG) Hidden

HP 3D DriveGuard (HKLM\...\{991A4895-3346-4980-990F-A1041B73C6F7}) (Version: 4.0.5.1 - Hewlett-Packard Company)

HP Client Automation Agent Preload  (HKLM-x32\...\{52B18ABC-AD5F-4C3C-B391-04F57B380449}) (Version: 7.5 - Hewlett-Packard)

HP Customer Experience Enhancements (x32 Version: 6.0.1.3 - Hewlett-Packard) Hidden

HP ESU for Microsoft Windows 7 (HKLM-x32\...\{605D2CE0-928A-44DF-8044-3FDA8610BD99}) (Version: 1.1.3.1 - Hewlett-Packard Company)

HP Integrated Module with Bluetooth wireless technology (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.0.9602 - Broadcom Corporation)

HP JavaCard for HP ProtectTools (x32 Version: 04.10.17.0001 - Hewlett-Packard) Hidden

HP ProtectTools Security Manager (x32 Version: 04.10.17.0001 - Hewlett-Packard) Hidden

HP ProtectTools Security Manager Suite (HKLM-x32\...\{75D7BB3A-9AB7-4ad1-AD5E-0059B90C624B}) (Version: 04.10.17.0001 - Hewlett-Packard)

HP Quick Launch Buttons (HKLM-x32\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.16.1 - Hewlett-Packard Company)

HP SoftPaq Download Manager (HKLM-x32\...\{E1CD7FC4-98F6-4A14-A8C8-A01D6F6F8FC3}) (Version: 3.0.9.0 - Hewlett-Packard Company)

HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)

HP USB Docking Video (HKLM\...\{AD73C813-335F-45E7-9772-A4583FDFD177}) (Version: 5.2.22372.0 - Hewlett-Packard)

HP Webcam (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.39017.0 - Sonix)

HP Webcam Application (HKLM-x32\...\{154E4F71-DFC0-4B31-8D99-F97615031B02}) (Version: 1.0.065.0612 - Chicony Electronics Co.,Ltd.)

HP Wireless Assistant (HKLM-x32\...\{4E432692-A736-4F77-AF77-F9078CF88D31}) (Version: 3.50.11.2 - Hewlett-Packard)

Image Resizer Powertoy Clone for Windows (64 bit) (HKLM\...\{80A620C1-B22C-4781-A351-B14B8A37BFE3}) (Version: 2.1 - Brice Lambson)

ImageMixer 3 SE Ver.4 Transfer Utility (HKLM-x32\...\{CAE4E520-4695-4A96-8661-B62FA5FB669E}) (Version: 3.03.005 - PIXELA)

ImageMixer 3 SE Ver.4 Video Tools (HKLM-x32\...\{AE6ECFF9-FD33-48A3-B4AC-89263CC393A8}) (Version: 3.03.008 - PIXELA)

Intel PROSet Wireless (Version:  - ) Hidden

Intel(R) Management Engine Interface (HKLM\...\HECI) (Version:  - Intel Corporation)

Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{B90E5EBE-DF18-44D5-9D18-689ADEE9DA6C}) (Version: 13.01.1000 - Intel Corporation)

Intel® Active-Management-Technologie (HKLM\...\MESOL) (Version:  - Intel Corporation)

Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)

IPP Port Monitor (HKLM-x32\...\IPP Port Monitor) (Version:  - )

Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Java(TM) 6 Update 7 (HKLM-x32\...\{3248F0A8-6813-11D6-A77B-00B0D0160070}) (Version: 1.6.0.70 - Sun Microsystems, Inc.)

Joe (HKLM-x32\...\{06DE6520-D87A-4259-AD87-DF4E57B604B4}) (Version: 3.21.0000 - Wirth IT Design)

Joe (HKLM-x32\...\{0AD3DEBC-5321-457E-8B43-8F546940169B}) (Version: 4.00.0050 - Wirth IT Design)

Joe (HKLM-x32\...\{2F8C3308-46DC-4431-B1C0-5C579A5CADBE}) (Version: 3.08.0100 - Wirth IT Design)

Joe (HKLM-x32\...\{36A1E3D6-288A-4EEE-A081-30D9808B2BE3}) (Version: 3.05.0100 - Wirth New Media Sarl)

Joe (HKLM-x32\...\{3CA94C59-E51E-4823-A7E4-F441980D5813}) (Version: 3.08.0000 - Wirth IT Design)

Joe (HKLM-x32\...\{93D4B493-DDE2-4D2F-B99F-DBED7B5A8B8F}) (Version: 3.13.0000 - Wirth IT Design)

Joe (HKLM-x32\...\{DFE622F4-EFDE-4105-AD7B-A6452140BDD4}) (Version: 3.22.0000 - Wirth IT Design)

Joe (HKLM-x32\...\{ED6DBA1D-FCE4-4A4B-90DC-92BB4D2E80CE}) (Version: 3.11.0000 - Wirth IT Design)

Joe (HKLM-x32\...\{F8C986EA-13F8-4B39-91C3-A6B9A851CD34}) (Version: 4.01.0000 - Wirth IT Design)

Kalenderchen 5 (HKLM-x32\...\{11464943-4682-4F6B-A96D-D4E8C26DD111}_is1) (Version:  - Daniel Manger)

LG ODD Auto Firmware Update (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 8.01.1209.01 - )

LightScribe System Software (HKLM-x32\...\{82EF29B1-9B60-4142-A155-0599216DD053}) (Version: 1.18.6.1 - LightScribe)

LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.1.94 - LSI Corporation)

Macromedia Dreamweaver 8 (HKLM-x32\...\{44025BD7-AD10-4769-99AE-6378FD0303D6}) (Version: 8.0.1.2753 - Macromedia)

Macromedia Extension Manager (HKLM-x32\...\{0F022A2E-7022-497D-90A5-0F46746D8275}) (Version: 1.7.270 - Ihr Firmenname)

Macromedia Fireworks 8 (HKLM-x32\...\{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}) (Version: 8.0.0.777 - Macromedia)

Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook 2007 (HKLM-x32\...\OUTLOOK) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Outlook 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 (HKLM\...\{BBBE35B2-9349-3C48-BD3D-F574B17C7924}) (Version: 9.0.21022.218 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)

Mp3tag v2.55a (HKLM-x32\...\Mp3tag) (Version: v2.55a - Florian Heidenreich)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Music Transfer Utility Ver.1 (HKLM-x32\...\{9E520B22-546E-4AD3-8958-7D1EB8587AB1}) (Version: 1.00.005 - PIXELA)

MyMDb 3.6 (HKLM-x32\...\MyMDb_0) (Version:  - )

Nero 10 Menu TemplatePack Basic (x32 Version: 10.0.10600.6.0 - Nero AG) Hidden

Nero 10 Movie ThemePack Basic (x32 Version: 10.0.10600.6.0 - Nero AG) Hidden

Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.11100.10.100 - Nero AG)

Nero Control Center 10 (x32 Version: 10.0.12000.1.4 - Nero AG) Hidden

Nero Core Components 10 (x32 Version: 2.0.13700.0.1 - Nero AG) Hidden

Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.0.10900.11.100 - Nero AG)

Nero Dolby Files 10 (x32 Version: 2.0.11000.0.10 - Nero AG) Hidden

Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.13200 - Nero AG)

Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0017 - Nero AG)

NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)

Outlook Backup Assistant 7 (Testversion) (HKLM-x32\...\812A5AC8-50DA-43D8-B36E-30CDD7FCCAA1_is1) (Version: 7.0 - Priotecs IT GmbH)

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 0.9.9 - Frank Heindörfer, Philip Chinery)

pdfsam (HKCU\...\pdfsam) (Version: 2.2.1 - )

Personal ID (HKLM-x32\...\{F722209B-739E-40E4-ADB1-062BD032A0DB}) (Version: 1.8.5 - coolspot AG)

Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Print Server Driver (HKLM-x32\...\Print Server Driver) (Version:  - )

Privacy Manager for HP ProtectTools (HKLM-x32\...\{4E8E3D7B-B20D-4FD6-9E72-A84BAD1C35CC}) (Version: 1.0.1.599 - DigitalPersona, Inc.)

ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)

QLBCASL (x32 Version: 6.40.17.2 - Hewlett-Packard) Hidden

QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)

QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)

QuickTime MPEG2 (HKLM-x32\...\{12EAE4F0-8770-451C-B4AD-76B569678973}) (Version: 7.60.92.0 - Apple Inc.)

ratDVD 0.78.1444 (HKLM-x32\...\ratDVD) (Version: 0.78.1444 - ratDVD)

RICOH Media Driver (HKLM-x32\...\{F5CC2EF8-20A4-4366-A681-3FE849E65809}) (Version: 2.10.00.04 - RICOH)

Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

Sony Ericsson Update Engine (HKLM-x32\...\Update Engine) (Version: 2.12.11.22 - Sony Ericsson Communications AB)

Sony PC Companion 2.10.188 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)

SoundMAX (HKLM-x32\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.2.7255 - Analog Devices)

StarMoney (x32 Version: 2.0 - StarFinanz) Hidden

StarMoney (x32 Version: 3.0.1.31 - StarFinanz) Hidden

StarMoney (x32 Version: 4.0.0.203 - StarFinanz) Hidden

StarMoney 9.0 apoEdition (HKLM-x32\...\{5DC16EE7-E58D-4C83-9960-766CCFD4ACB9}) (Version: 9.0 - Star Finanz GmbH)

StarOffice 9 (HKLM-x32\...\{22F25C70-75E6-49AF-B762-AB7FB9FCA0DB}) (Version: 9.2.9483 - Sun Microsystems)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.24.0 - Synaptics Incorporated)

TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.20202 - TeamViewer)

Turbo Lister 2 (HKLM-x32\...\{8927E07C-97F7-4A54-88FB-D976F50DD46E}) (Version: 2.00.0000 - eBay Inc.)

Turbo Lister 2 (HKLM-x32\...\InstallShield_{69640730-B830-4C24-BB5C-222DA1260548}) (Version: 2.0.0 - eBay)

Turbo Lister 2 (x32 Version: 2.0.0 - eBay) Hidden

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_OUTLOOK_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OUTLOOK_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2880505) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{2720451F-5D04-43EC-AB1F-26D948FD971B}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2880505) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{2720451F-5D04-43EC-AB1F-26D948FD971B}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OUTLOOK_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

USBFast (HKLM-x32\...\{AED142A8-96EA-42DE-B212-60BFC98D6CC7}) (Version: 1.3.0.28 - Prolific Technology Inc.)

UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)

VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)

VobSub v2.23 (Remove Only) (HKLM-x32\...\VobSub) (Version:  - )

Windows 7 Default Setting (HKLM-x32\...\{AEACD7BE-7E12-490D-80B2-C7DEBDBD8915}) (Version: 1.0.0.8 - Hewlett-Packard)

Windows 7 Default Setting (HKLM-x32\...\{CC63C5BD-5096-4044-AC12-0FC6F1A6028D}) (Version: 1.0.1.7 - Hewlett-Packard Company)

Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)

Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)

Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)

WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)

XSManager (HKLM-x32\...\XSManager) (Version: 3.0 - XSManager)

XviD MPEG4 Video Codec (remove only) (HKLM-x32\...\XviD MPEG4 Video Codec) (Version:  - )

Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
 

==================== Restore Points  =========================
 

18-05-2014 07:28:25 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0373EC49-7D28-419C-BFB5-05B1BC2BE3A2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-12-12] (Hewlett-Packard Company)

Task: {1571FDD4-1441-4172-87C8-6445B975F376} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {29DFC8EF-D9FC-4766-803C-2DD523629738} - System32\Tasks\CCleanerSkipUAC => C:\Program Files (x86)\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)

Task: {2CF42C83-07C5-4EE1-9E93-FDF28AAE8637} - System32\Tasks\Microsoft\Windows\MobilePC\DisplayLink TMM Control

Task: {33FDD674-8F55-4270-8D26-7FEEF5A11B81} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)

Task: {3934BC34-B7D9-474B-9136-031E017E6BB7} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe

Task: {3CBB0343-8416-46A1-A3AA-9028F9EAFA8D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-26] (Google Inc.)

Task: {65A77E28-8B26-4F96-A967-40D530F814F0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)

Task: {7046A181-B619-4B61-A5C2-C935165ECF84} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)

Task: {A84DC5F4-0E42-4521-8992-A5E78D150688} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-26] (Google Inc.)

Task: {ADC9A81C-3368-4C4E-ADA6-5F44210810B2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001UA => C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-14] (Google Inc.)

Task: {BD1906F2-EAB6-4972-92E3-5B41B6B587B7} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe

Task: {C53730DD-4D90-4484-9D48-223C22AD9A17} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001Core => C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-14] (Google Inc.)

Task: {DB4A8EAC-B0EF-4BF0-90E6-C0BF4CD3B05C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001Core.job => C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001UA.job => C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2010-07-10 19:19 - 2006-02-23 12:35 - 00020480 _____ () C:\Windows\System32\FritzColorPort64.dll

2010-07-10 19:19 - 2006-02-22 11:39 - 00020480 _____ () C:\Windows\System32\FritzPort64.dll

2010-04-22 22:05 - 2005-03-12 00:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll

2010-01-19 16:27 - 2010-01-19 16:27 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll

2009-07-30 17:42 - 2009-07-30 17:42 - 00173344 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll

2014-03-09 19:52 - 2010-04-12 19:03 - 00329168 ____N () C:\Program Files (x86)\XSManager\WTGService.exe

2010-01-19 16:27 - 2010-01-19 16:27 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll

2014-05-16 02:26 - 2014-01-08 22:28 - 31010304 __RSH () C:\{$1284-9213-2940-1289$}\comhost.exe

2009-07-01 15:44 - 2009-07-01 15:44 - 00632888 _____ () C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe

2011-12-26 13:55 - 2011-12-26 13:55 - 00098304 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll

2011-12-26 13:55 - 2011-12-26 13:55 - 00024576 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResources.dll

2012-01-22 00:07 - 2012-01-22 00:07 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2010-01-19 17:08 - 2010-01-19 17:08 - 00315664 _____ () C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

2014-05-18 17:23 - 2014-01-08 22:28 - 31010304 __RSH () C:\ProgramData\{$1284-9213-2940-1289$}\comhost.exe

2013-12-19 04:42 - 2013-12-19 04:42 - 00350840 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll

2014-05-18 17:42 - 2014-05-18 17:42 - 00050477 _____ () C:\Users\SnakeP\Downloads\Defogger.exe

2014-02-03 14:31 - 2011-01-13 10:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\PATCHW32.dll

2009-10-20 21:02 - 2010-04-20 21:36 - 00970752 _____ () C:\Program Files (x86)\Sun\StarOffice 9\program\libxml2.dll

2014-05-10 10:07 - 2014-05-10 10:08 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 

==================== EXE Association (whitelisted) =============
 
 

==================== Disabled items from MSCONFIG ==============
 

MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: CognizanceTS => rundll32.exe C:\PROGRA~3\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule

MSCONFIG\startupreg: File Sanitizer => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe

MSCONFIG\startupreg: Google Update => "C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe" /c

MSCONFIG\startupreg: IAAnotif => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe

MSCONFIG\startupreg: LGODDFU => "C:\Program Files (x86)\lg_fwupdate\fwupdate.exe" blrun

MSCONFIG\startupreg: NCPluginUpdater => "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update

MSCONFIG\startupreg: Personal ID => C:\COOLSP~1\PERSON~1\PID.EXE

MSCONFIG\startupreg: picon => "C:\Program Files (x86)\Common Files\Intel\Privacy Icon\PrivacyIconClient.exe" -startup

MSCONFIG\startupreg: PTHOSTTR => C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start

MSCONFIG\startupreg: QlbCtrl.exe => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: SoundMAX => C:\Program Files (x86)\Analog Devices\SoundMAX\soundmax.exe /tray

MSCONFIG\startupreg: SoundMAXPnP => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe

MSCONFIG\startupreg: StartCCC => "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

MSCONFIG\startupreg: SynTPEnh => %programFiles%\Synaptics\SynTP\SynTPEnh.exe

MSCONFIG\startupreg: TrueImageMonitor.exe => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe

MSCONFIG\startupreg: UpdateP2GoShortCut => "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"

MSCONFIG\startupreg: UpdatePPShortCut => "C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerProducer" UpdateWithCreateOnce "Software\CyberLink\PowerProducer\5.0"

MSCONFIG\startupreg: UpdatePSTShortCut => "C:\Program Files (x86)\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Blu-ray Disc Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"

MSCONFIG\startupreg: Windows Mobile Device Center => %windir%\WindowsMobile\wmdc.exe

MSCONFIG\startupreg: WinZip => C:\Users\SnakeP\AppData\Roaming\cgg.exe

MSCONFIG\startupreg: Xvid => C:\Program Files (x86)\XviD\CheckUpdate.exe
 

==================== Faulty Device Manager Devices =============
 

Name: HookCentre

Description: HookCentre

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: HookCentre

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: ACLN6Live

Description: ACLN6Live

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: ACLN6Live

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/18/2014 03:32:57 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (05/18/2014 01:27:08 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: GDSC.exe, Version: 25.0.14079.241, Zeitstempel: 0x532a59ff

Name des fehlerhaften Moduls: GDSC.exe, Version: 25.0.14079.241, Zeitstempel: 0x532a59ff

Ausnahmecode: 0x40000015

Fehleroffset: 0x000ffcf8

ID des fehlerhaften Prozesses: 0x1710

Startzeit der fehlerhaften Anwendung: 0xGDSC.exe0

Pfad der fehlerhaften Anwendung: GDSC.exe1

Pfad des fehlerhaften Moduls: GDSC.exe2

Berichtskennung: GDSC.exe3
 

Error: (05/18/2014 01:27:07 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AVKProxy.exe, Version: 1.5.14043.574, Zeitstempel: 0x52fb3224

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x014f5310

ID des fehlerhaften Prozesses: 0xa64

Startzeit der fehlerhaften Anwendung: 0xAVKProxy.exe0

Pfad der fehlerhaften Anwendung: AVKProxy.exe1

Pfad des fehlerhaften Moduls: AVKProxy.exe2

Berichtskennung: AVKProxy.exe3
 

Error: (05/18/2014 01:25:50 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AVKProxy.exe, Version: 1.5.14043.574, Zeitstempel: 0x52fb3224

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00fffeb0

ID des fehlerhaften Prozesses: 0x15d0

Startzeit der fehlerhaften Anwendung: 0xAVKProxy.exe0

Pfad der fehlerhaften Anwendung: AVKProxy.exe1

Pfad des fehlerhaften Moduls: AVKProxy.exe2

Berichtskennung: AVKProxy.exe3
 

Error: (05/18/2014 01:21:53 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (05/18/2014 01:21:53 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/18/2014 01:21:53 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/18/2014 01:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: GDSC.exe, Version: 25.0.14079.241, Zeitstempel: 0x532a59ff

Name des fehlerhaften Moduls: GDSC.exe, Version: 25.0.14079.241, Zeitstempel: 0x532a59ff

Ausnahmecode: 0x40000015

Fehleroffset: 0x000ffcf8

ID des fehlerhaften Prozesses: 0x1918

Startzeit der fehlerhaften Anwendung: 0xGDSC.exe0

Pfad der fehlerhaften Anwendung: GDSC.exe1

Pfad des fehlerhaften Moduls: GDSC.exe2

Berichtskennung: GDSC.exe3
 

Error: (05/18/2014 01:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AVKProxy.exe, Version: 1.5.14043.574, Zeitstempel: 0x52fb3224

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x01219c30

ID des fehlerhaften Prozesses: 0x994

Startzeit der fehlerhaften Anwendung: 0xAVKProxy.exe0

Pfad der fehlerhaften Anwendung: AVKProxy.exe1

Pfad des fehlerhaften Moduls: AVKProxy.exe2

Berichtskennung: AVKProxy.exe3
 

Error: (05/18/2014 01:02:18 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 
 

System errors:

=============

Error: (05/18/2014 05:33:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "G Data Scheduler" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/18/2014 05:26:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "G Data Scheduler" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/18/2014 05:22:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "G Data Scheduler" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/18/2014 05:22:26 PM) (Source: DCOM) (EventID: 10005) (User: )

Description: 2AVKService-Servive{AB3AD0CD-2BED-4A1A-85DA-1806C5FF49CD}
 

Error: (05/18/2014 05:19:39 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

ACLN6Live

HookCentre
 

Error: (05/18/2014 05:18:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Security Center Surveillance System Launcher" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/18/2014 05:18:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "G Data Scheduler" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/18/2014 05:18:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "MLPTDR_B" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/18/2014 05:18:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "G Data Dateisystem Wächter" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/18/2014 05:15:54 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {7429F543-2A60-4CB7-8BC5-F27EA898FB44}
 
 

Microsoft Office Sessions:

=========================

Error: (12/17/2011 11:43:40 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 17 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (07/10/2011 01:17:50 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 29 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (07/10/2011 01:16:56 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 6163 seconds with 360 seconds of active time.  This session ended with a crash.
 

Error: (01/31/2011 07:55:40 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 236840 seconds with 2280 seconds of active time.  This session ended with a crash.
 

Error: (01/04/2011 00:05:26 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6548.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 99 seconds with 60 seconds of active time.  This session ended with a crash.
 

Error: (01/04/2011 11:58:01 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6548.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 48 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (01/04/2011 11:57:05 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6548.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 83767 seconds with 1740 seconds of active time.  This session ended with a crash.
 

Error: (09/08/2010 03:19:12 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6541.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (07/15/2010 01:36:21 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 44275 seconds with 1680 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2011-09-02 15:42:35.446

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2011-09-02 15:42:35.226

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2010-05-09 23:24:49.666

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2010-05-09 23:24:49.516

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 58%

Total physical RAM: 3996.27 MB

Available physical RAM: 1675.25 MB

Total Pagefile: 7990.71 MB

Available Pagefile: 4702.09 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (HP 8530p) (Fixed) (Total:221.87 GB) (Free:41.87 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (HP_RECOVERY) (Fixed) (Total:9 GB) (Free:1.99 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive f: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.99 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: D06DB09C)

Partition 1: (Active) - (Size=222 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=2 GB) - (Type=0C)

Partition 3: (Not Active) - (Size=9 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Teil 2 mit Logfiles, Text siehe Teil 1

Code:



Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014

Ran by SnakeP (administrator) on HP-8530P on 18-05-2014 17:46:08

Running from C:\Users\SnakeP\Downloads

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

The only official download link for FRST:

Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 

Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe

(McAfee, Inc.) C:\Program Files (x86)\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe

(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe

(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE

(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe

(Softwareentwicklung Remus - ArchiCrypt) C:\Program Files (x86)\ArchiCrypt\ArchiCrypt Shredder 6\ArchiCryptInjector64.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe

(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\avmike.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(CANON INC.) C:\Program Files\Canon\DIAS\CnxDIAS.exe

(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\certsrv.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\AMT\LMS.exe

(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\StarMoneyOnlineUpdate.exe

(Bioscrypt Inc.) C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\asghost.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

(Intel Corporation) C:\Program Files (x86)\Common Files\Intel\Privacy Icon\UNS\UNS.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

() C:\Program Files (x86)\XSManager\WTGService.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe

(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Daniel Manger Software) C:\Program Files (x86)\Kalenderchen\Kalenderchen.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Wirth IT Design) C:\Program Files (x86)\Tools&More\GhostWriter\GhostWriter.exe

(Google Inc.) C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\{$1284-9213-2940-1289$}\comhost.exe

(Sun Microsystems, Inc.) C:\Program Files (x86)\Sun\StarOffice 9\program\soffice.exe

(Sun Microsystems, Inc.) C:\Program Files (x86)\Sun\StarOffice 9\program\soffice.bin

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

() C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

() C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

() C:\ProgramData\{$1284-9213-2940-1289$}\comhost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe

(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

() C:\Users\SnakeP\Downloads\Defogger.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1926928 2010-01-19] (Intel(R) Corporation)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2174760 2010-06-04] (Synaptics Incorporated)

HKLM\...\Run: [acevents] => C:\Program Files\ActivIdentity\ActivClient\acevents.exe [196648 2009-06-03] (ActivIdentity)

HKLM\...\Run: [accrdsub] => C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [483880 2009-06-03] (ActivIdentity)

HKLM-x32\...\Run: [WirelessAssistant] => C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [500792 2010-03-23] (Hewlett-Packard Company)

HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-01-22] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [16-CH Smart VS-IP Storage Application] => [X]

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [Windows COM Host] => C:\{$1284-9213-2940-1289$}\comhost.exe -rundll32 /SYSTEM32 "C:\Windows\System32\taskmgr.exe" "C:\Program Files\Microsoft\Windows"

HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1724728 2013-12-19] (G Data Software AG)

HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe,

Winlogon\Notify\ScCertProp: wlnotify.dll [X]

Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]

HKLM\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [DMS-Kalenderchen] => C:\Program Files (x86)\Kalenderchen\Kalenderchen.exe [3494912 2010-03-16] (Daniel Manger Software)

HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [ArchiCrypt Shredder 6] => [X]

HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [ArchiCrypt Scheduler 6] => [X]

HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [ArchiCrypt SecureDZone] => [X]

HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [GhostWriter] => C:\Program Files (x86)\Tools&More\GhostWriter\GhostWriter.exe [585728 2012-10-25] (Wirth IT Design)

HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [Google Update] => C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-14] (Google Inc.)

HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\CurrentVersion\Windows: [Load] C:\{$1284-9213-2940-1289$}\comhost.exe <===== ATTENTION

HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0xFF000000

HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\MountPoints2: {70de29f7-4c1b-11df-a037-806e6f6e6963} - E:\zdata\cobi.exe

AppInit_DLLs: C:\PROGRA~3\HEWLET~1\IAM\bin\APSHOO~1.DLL => C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\APSHook64.dll [382208 2010-07-01] (Bioscrypt Inc.)

AppInit_DLLs-x32: C:\PROGRA~3\HEWLET~1\IAM\bin\APSHook.dll => C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\APSHook.dll [89856 2010-07-01] (Bioscrypt Inc.)

IFEO\avcenter.exe: [Debugger] nsjw.exe

IFEO\avguard.exe: [Debugger] nsjw.exe

IFEO\AVKService.exe: [Debugger] nsjw.exe

IFEO\AVKTray.exe: [Debugger] nsjw.exe

IFEO\AVKWCtlx64.exe: [Debugger] nsjw.exe

IFEO\avp.exe: [Debugger] nsjw.exe

IFEO\bdagent.exe: [Debugger] nsjw.exe

IFEO\ccuac.exe: [Debugger] nsjw.exe

IFEO\ComboFix.exe: [Debugger] nsjw.exe

IFEO\egui.exe: [Debugger] nsjw.exe

IFEO\GDFirewallTray.exe: [Debugger] nsjw.exe

IFEO\GDFwSvcx64.exe: [Debugger] nsjw.exe

IFEO\hijackthis.exe: [Debugger] nsjw.exe

IFEO\keyscrambler.exe: [Debugger] nsjw.exe

IFEO\Launcher_SECN.exe: [Debugger] nsjw.exe

IFEO\mbam.exe: [Debugger] nsjw.exe

IFEO\MpCmdRun.exe: [Debugger] nsjw.exe

IFEO\MSASCui.exe: [Debugger] nsjw.exe

IFEO\MsMpEng.exe: [Debugger] nsjw.exe

IFEO\msseces.exe: [Debugger] nsjw.exe

IFEO\spybotsd.exe: [Debugger] nsjw.exe

IFEO\wireshark.exe: [Debugger] nsjw.exe

IFEO\zlclient.exe: [Debugger] nsjw.exe

Lsa: [Notification Packages] scecli ASCredProv64

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

InternetURL: C:\Users\SnakeP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url -> C:\ProgramData\27218346293184.exe

Startup: C:\Users\SnakeP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StarOffice 9.lnk

ShortcutTarget: StarOffice 9.lnk -> C:\Program Files (x86)\Sun\StarOffice 9\program\quickstart.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.n-tv.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3A894289C9DFCA01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

URLSearchHook: HKCU - (No Name) - {9d81af43-de53-48d0-a199-42c2a226b24c} - No File

SearchScopes: HKLM-x32 - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2206084

SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2206084

SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = 

SearchScopes: HKCU - {4376475D-DF29-44FE-8C68-62F8D78A3FCF} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}

SearchScopes: HKCU - {5FC1D470-415E-4942-A015-F0E512C13B97} URL = hxxp://suche.t-online.de/cgi-bin/swl?br=ie7&q={searchTerms}

SearchScopes: HKCU - {6495CFED-55DC-4A8C-BA8D-A120C7F9BD2C} URL = hxxp://www.google.de/search?q={searchTerms}

SearchScopes: HKCU - {70FF1299-E6A4-41A7-B125-37978D9B5676} URL = hxxp://de.wikipedia.org/wiki/Spezial:Search?search={searchTerms}

SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2206084

SearchScopes: HKCU - {CA00EDF1-478B-4FB1-A67D-0657D08FB7EB} URL = hxxp://www.amazon.de/gp/search?search-alias=aps&field-keywords={searchTerms}

SearchScopes: HKCU - {CB9D5273-E71E-4D2E-AA0A-53735CD3BE84} URL = hxxp://suche.sueddeutsche.de/{searchTerms}

SearchScopes: HKCU - {E02227BC-7789-43CA-8338-D3191D6137C3} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}

SearchScopes: HKCU - {E0E06019-DA09-4CD6-BB4E-DECC5029BC53} URL = hxxp://suche.web.de/search/web/?su={searchTerms}&mc=searchplugin@suche@msie.suche@web&origin=searchplugin

SearchScopes: HKCU - {FB5D834C-3B7D-4913-B248-5A0AC194876E} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=FF&o=14594&src=kw&q={searchTerms}&locale=&apn_ptnrs=FV&apn_dtid=YYYYYYYYDE&apn_uid=dfd53380-f536-4831-a55d-5c4598c64524&apn_sauid=3598204E-7C4E-4DD9-9BD8-AE5611E37255

SearchScopes: HKCU - {FE14FF18-6E1B-491E-9AC6-2CE43682F85C} URL = hxxp://suche.web.de/search/web/?su={searchTerms}

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)

BHO-x32: File Sanitizer for HP ProtectTools - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)

BHO-x32: Do Not Track Plus - {6E45F3E8-2683-4824-A6BE-08108022FB36} - C:\Program Files (x86)\DoNotTrackPlus\ScriptHost.dll (Abine)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Flagfox - {BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24} - C:\Users\SnakeP\AppData\LocalLow\Flagfox\IE\Flagfox.dll (Dave G)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.)

BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)

Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File

DPF: HKLM-x32 {10000000-1000-1000-1000-100000000000} hxxp://cdn.betteradvertising.com/ghostery/addons/ie/2.4.2.0/ghostery.cab

DPF: HKLM-x32 {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} hxxp://192.168.178.202/RtspVaPgDec.cab

DPF: HKLM-x32 {B4CB8358-ABDB-47EE-BC2D-437B5DEBABCB} hxxp://192.168.178.204/AxViewer/AxMediaControl.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: text/html - {4459DC76-1FDE-4B16-BAD0-E4F8E7647555} -  No File

Filter-x32: text/html - {4459DC76-1FDE-4B16-BAD0-E4F8E7647555} - C:\Program Files (x86)\GhosteryIEplugin\GhosteryMimeFilter.dll ()

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{7585D27A-A707-4132-B228-F2EBE89236E0}: [NameServer]0.0.0.0
 

FireFox:

========

FF ProfilePath: C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default

FF user.js: detected! => C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\user.js

FF SearchEngineOrder.1: Ask.com

FF Homepage: hxxp://www.n-tv.de

FF NetworkProxy: "ftp", "94.53.6.30"

FF NetworkProxy: "ftp_port", 8080

FF NetworkProxy: "http", "94.53.6.30"

FF NetworkProxy: "http_port", 8080

FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"

FF NetworkProxy: "share_proxy_settings", true

FF NetworkProxy: "socks", "94.53.6.30"

FF NetworkProxy: "socks_port", 8080

FF NetworkProxy: "ssl", "94.53.6.30"

FF NetworkProxy: "ssl_port", 8080

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\SnakeP\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\SnakeP\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF SearchPlugin: C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\searchplugins\metager2.xml

FF SearchPlugin: C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\searchplugins\safesearch.xml

FF SearchPlugin: C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\searchplugins\startpage-https---deutsch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: DoNotTrackMe: Online Privacy Protection - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\donottrackplus@abine.com [2014-04-26]

FF Extension: FRITZ!Box AddOn - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\fb_add_on@avm.de [2013-05-09]

FF Extension: Flagfox - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\info@flagfox.net [2013-06-08]

FF Extension: DownloadHelper - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-26]

FF Extension: Adblock Plus Pop-up Addon - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\adblockpopups@jessehakanen.net.xpi [2011-08-30]

FF Extension: Ghostery - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\firefox@ghostery.com.xpi [2013-08-03]

FF Extension: Stealthy - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\stealthyextension@gmail.com.xpi [2012-01-12]

FF Extension: Flagfox - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-03-08]

FF Extension: ShowIP - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\{3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}.xpi [2011-08-30]

FF Extension: NoScript - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-07-26]

FF Extension: Adblock Plus - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-03-27]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-05-10]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-05-10]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-05-10]

FF HKCU\...\Firefox\Extensions: [videosaver@videosaver.net] - C:\Program Files (x86)\VideoSaver\FF\
 

Chrome: 

=======

CHR StartupUrls: "hxxp://ntv.de/"

CHR Plugin: (Shockwave Flash) - C:\Users\SnakeP\AppData\Local\Google\Chrome\Application\34.0.1847.137\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\SnakeP\AppData\Local\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\SnakeP\AppData\Local\Google\Chrome\Application\34.0.1847.137\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (MicrosoftÃ‚Â® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (2007 Microsoft Office system) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File

CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll No File

CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

CHR Extension: (Flagfox) - C:\Users\SnakeP\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid [2013-06-08]

CHR Extension: (Google Wallet) - C:\Users\SnakeP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]

CHR HKLM-x32\...\Chrome\Extension: [cfdfamfnacokbbbnmpdfmhonipnhmbid] - C:\Users\SnakeP\AppData\LocalLow\Flagfox\CHROME\Flagfox.crx [2013-04-28]

CHR HKLM-x32\...\Chrome\Extension: [ifjgookacnmjghjfagggbkpebmndnbib] - C:\Program Files (x86)\VideoSaver\Chrome.crx [2013-04-28]

CHR StartMenuInternet: Google Chrome - C:\Users\SnakeP\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Services (Whitelisted) =================
 

R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [277032 2009-06-03] (ActivIdentity)

R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [111616 2008-07-15] (Andrea Electronics Corporation)

R2 ArchiCrypt Sichere Loeschzonen; C:\Program Files (x86)\ArchiCrypt\ArchiCrypt Shredder 6\ArchiCryptInjector64.exe [320600 2013-10-21] (Softwareentwicklung Remus - ArchiCrypt)

R2 ASBroker; C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll [192768 2010-07-01] (Bioscrypt Inc.)

R2 ASChannel; C:\Program Files (x86)\Hewlett-Packard\IAM\bin\AsChnl.dll [150272 2010-07-01] (Bioscrypt Inc.)

R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)

S2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)

S2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [2723400 2014-03-25] (G Data Software AG)

R2 avmike; C:\Program Files\FRITZ!Fernzugang\avmike.exe [336248 2012-02-02] (AVM Berlin)

R2 Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [6075816 2010-08-04] (CANON INC.)

R2 certsrv; C:\Program Files\FRITZ!Fernzugang\certsrv.exe [143736 2011-10-31] (AVM Berlin)

R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9663848 2011-04-10] (DisplayLink Corp.)

S3 FLCDLOCK; C:\Windows\SysWOW64\flcdlock.exe [362040 2009-10-05] (Hewlett-Packard Ltd)

R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)

S3 HP ProtectTools Service; C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [45056 2010-04-13] (Hewlett-Packard Development Company, L.P)

R2 HpFkCryptService; C:\Program Files (x86)\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [256616 2010-03-05] (McAfee, Inc.)

R2 LMS; C:\Program Files (x86)\Intel\AMT\LMS.exe [174616 2009-07-15] (Intel Corporation)

R3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [315664 2010-01-19] ()

R2 nwtsrv; C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe [189304 2011-10-31] (AVM Berlin)

S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)

R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\StarMoneyOnlineUpdate.exe [663184 2014-01-27] (Star Finanz-Software Entwicklung und Vertriebs GmbH)

R2 UNS; C:\Program Files (x86)\Common Files\Intel\Privacy Icon\UNS\UNS.exe [2058776 2009-07-15] (Intel Corporation)

R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [329168 2010-04-12] ()

S2 SecurityCenter_ST3402; C:\Program Files (x86)\Security Center\Smart VS-IP Surveillance System\Launcher_SECN.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

R1 ACLE7Live; C:\Windows\system32\Drivers\ACLE1864.sys [109328 2014-02-07] (Softwareentwicklung Remus - ArchiCrypt - )

R1 ACLiveFlt; C:\Windows\System32\DRIVERS\ACLiveFlt.sys [24848 2014-01-29] (ArchiCrypt - Softwareentwicklung Remus)

R1 ACLiveFlt; C:\Windows\SysWOW64\DRIVERS\ACLiveFlt.sys [24848 2014-01-29] (ArchiCrypt - Softwareentwicklung Remus)

S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [117888 2014-03-09] (Mobile Connector)

S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [40760 2009-09-08] (Hewlett-Packard Development Company L.P.)

R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [57344 2014-05-18] (G Data Software AG)

R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [135168 2014-05-18] (G Data Software AG)

R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [68608 2014-05-18] (G Data Software AG)

R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64000 2014-05-18] (G Data Software AG)

R3 GearAspiWDM; C:\Windows\SysWOW64\drivers\GEARAspiWDM.sys [15664 2010-05-10] (GEAR Software Inc.)

R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-05-18] (G Data Software)

R3 HBtnKey; C:\Windows\System32\DRIVERS\cpqbttn.sys [19000 2010-02-25] (Hewlett-Packard Company)

R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65024 2014-05-18] (G Data Software AG)

S2 MLPTDR_B; C:\Windows\SysWOW64\MLPTDR_B.SYS [19872 2002-07-23] (Minolta Co., Ltd.)

S3 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)

R3 NWIM; C:\Windows\System32\DRIVERS\avmnwim.sys [412024 2011-07-05] (AVM Berlin)

S3 RICOH SmartCard Reader; C:\Windows\System32\DRIVERS\rismcx64.sys [59008 2009-07-20] (RICOH Company, Ltd.)

R3 rismcx64; C:\Windows\System32\DRIVERS\rismcx64.sys [59008 2009-07-20] (RICOH Company, Ltd.)

R1 RsvLock; C:\Windows\System32\Drivers\RsvLock.sys [14952 2010-03-05] (SafeBoot International)

S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation)

S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation)

S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation)

S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation)

S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [34344 2008-05-16] (MCCI Corporation)

S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation)

S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation)

R0 SafeBoot; C:\Windows\System32\Drivers\SafeBoot.sys [55912 2010-03-05] ()

R0 SbAlg; C:\Windows\System32\Drivers\SbAlg.sys [60160 2007-07-16] (SafeBoot N.V.)

R0 SbFsLock; C:\Windows\System32\Drivers\SbFsLock.sys [15464 2010-03-05] (SafeBoot International)

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1875624 2008-10-09] ()

R0 tdrpman258; C:\Windows\System32\DRIVERS\tdrpm258.sys [1477728 2010-04-23] (Acronis)

S1 ACLN6Live; \??\C:\Windows\system32\Drivers\ACLE1764.sys [X]

S3 CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfoX64.sys [X]

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-05-18 17:46 - 2014-05-18 17:47 - 00033434 _____ () C:\Users\SnakeP\Downloads\FRST.txt

2014-05-18 17:44 - 2014-05-18 17:46 - 00000000 ____D () C:\FRST

2014-05-18 17:44 - 2014-05-18 17:44 - 02067456 _____ (Farbar) C:\Users\SnakeP\Downloads\FRST64.exe

2014-05-18 17:43 - 2014-05-18 17:43 - 00000490 _____ () C:\Users\SnakeP\Downloads\defogger_disable.log

2014-05-18 17:43 - 2014-05-18 17:43 - 00000000 _____ () C:\Users\SnakeP\defogger_reenable

2014-05-18 17:42 - 2014-05-18 17:42 - 00050477 _____ () C:\Users\SnakeP\Downloads\Defogger.exe

2014-05-18 17:38 - 2014-05-18 17:38 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-18 17:36 - 2014-05-18 17:36 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\SnakeP\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-18 17:26 - 2014-05-18 17:26 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys

2014-05-18 17:26 - 2014-05-18 17:26 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys

2014-05-18 17:23 - 2014-05-18 17:23 - 00000000 ___HD () C:\ProgramData\{$1284-9213-2940-1289$}

2014-05-18 17:20 - 2014-05-18 17:20 - 00068608 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys

2014-05-18 17:20 - 2014-05-18 17:20 - 00065024 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys

2014-05-18 17:16 - 2014-05-18 17:16 - 00135168 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys

2014-05-18 17:16 - 2014-05-18 17:16 - 00057344 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys

2014-05-18 17:15 - 2014-05-18 17:15 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys

2014-05-18 17:15 - 2014-05-18 17:15 - 00002022 _____ () C:\Users\Public\Desktop\G Data InternetSecurity CBE.lnk

2014-05-18 17:15 - 2014-05-18 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data InternetSecurity CBE

2014-05-18 16:37 - 2014-05-18 16:37 - 00411144 _____ () C:\Users\SnakeP\Downloads\AVCleaner.exe

2014-05-18 16:25 - 2014-05-18 16:26 - 63320784 _____ (Microsoft Corporation) C:\Users\SnakeP\Downloads\IE11-Windows6.1-x64-de-de.exe

2014-05-18 16:12 - 2014-05-18 16:12 - 00961360 _____ (Chip Digital GmbH) C:\Users\SnakeP\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe

2014-05-18 15:03 - 2014-05-18 17:13 - 00003922 _____ () C:\Windows\DPINST.LOG

2014-05-18 14:52 - 2014-05-18 16:59 - 00176232 _____ () C:\Windows\PFRO.log

2014-05-18 13:44 - 2014-05-18 17:18 - 00000392 _____ () C:\Windows\setupact.log

2014-05-18 13:44 - 2014-05-18 13:44 - 00000000 _____ () C:\Windows\setuperr.log

2014-05-15 21:12 - 2013-03-20 23:31 - 51796532 _____ () C:\Users\SnakeP\Downloads\Modern Talking - You're My Heart, Your're My Soul (From Top Pop 1985).mkv

2014-05-15 21:06 - 2014-04-06 18:01 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - Vulture culture (1984)

2014-05-15 21:06 - 2014-04-06 18:01 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - The sicilian defense (1979)

2014-05-15 21:05 - 2014-04-06 17:59 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - Stereotomy (1985)

2014-05-15 21:05 - 2014-04-06 17:59 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - Gaudi (1987)

2014-05-15 21:05 - 2014-04-06 17:59 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - Eye in the sky (1982)

2014-05-15 21:05 - 2014-04-06 17:58 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - Ammonia Avenue (1984)

2014-05-15 21:04 - 2014-04-06 18:01 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - The turn of a friendly card (1980)

2014-05-15 20:47 - 2012-06-12 20:01 - 00000000 ___SD () C:\Users\SnakeP\Downloads\Maxi Hits der 80er (Vol.3)

2014-05-15 20:45 - 2014-05-15 20:45 - 00000000 ____D () C:\Users\SnakeP\Downloads\Gerhard Polt - Und wer zahlts

2014-05-15 20:43 - 2013-10-09 13:31 - 00000000 ____D () C:\Users\SnakeP\Downloads\Jules Verne - Der Leuchtturm am Ende der Welt (2013)

2014-05-15 20:40 - 2014-02-17 19:54 - 00000000 ____D () C:\Users\SnakeP\Downloads\Gruselkabinett - Die obere Koje

2014-05-15 20:40 - 2010-01-16 19:39 - 00000000 ____D () C:\Users\SnakeP\Downloads\Franz Josef Degenhardt - Von damals und von dieser Zeit

2014-05-15 15:07 - 2014-05-18 13:27 - 00000000 _____ () C:\Users\SnakeP\AppData\Roaming\msconfig.ini

2014-05-15 15:07 - 2014-05-15 15:07 - 00000000 _____ () C:\ProgramData\27218346293184.exe

2014-05-15 15:04 - 2014-05-18 13:17 - 00000000 ___HD () C:\{$1284-9213-2940-1289$}

2014-05-15 09:01 - 2014-05-15 09:01 - 00629584 _____ (Chip Digital GmbH) C:\Users\SnakeP\Downloads\Recuva - CHIP-Downloader.exe

2014-05-15 04:24 - 2014-05-15 04:26 - 00000000 ____D () C:\Windows\rescache

2014-05-15 03:14 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-15 03:14 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-15 03:14 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-15 03:14 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-15 03:14 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-15 03:14 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-14 13:30 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-14 13:30 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-14 13:30 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-05-14 13:30 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-05-14 13:29 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-05-14 13:29 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-05-14 13:29 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-05-14 13:29 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-05-14 13:29 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2014-05-14 13:29 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-05-14 13:29 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-05-14 13:29 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-05-14 13:29 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-05-14 13:29 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-05-14 13:29 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-05-14 13:29 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-05-14 13:29 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-05-14 13:29 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-05-14 13:29 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-05-14 13:29 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-05-14 13:29 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-05-14 13:29 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-05-14 13:29 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-05-14 13:29 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-05-14 13:29 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-05-14 13:29 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-05-14 13:29 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-05-14 13:29 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-05-14 13:29 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-05-14 13:29 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2014-05-14 13:29 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2014-05-14 13:29 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll

2014-05-14 13:29 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-05-14 13:29 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-05-13 21:23 - 2014-05-13 21:24 - 04985016 _____ (EaseUS ) C:\Users\SnakeP\Downloads\drw_free.exe

2014-05-13 21:08 - 2014-05-18 13:08 - 00000000 ____D () C:\Program Files (x86)\Convar

2014-05-13 21:08 - 2014-05-13 21:08 - 03462033 _____ () C:\Users\SnakeP\Downloads\pci_filerecovery.exe

2014-05-11 13:21 - 2014-05-11 13:21 - 08568832 _____ () C:\Users\SnakeP\Downloads\MEDUMAT_Transport_simulation_V_5.03_04.exe

2014-05-11 10:38 - 2014-05-11 10:40 - 00000000 ____D () C:\Users\SnakeP\Downloads\Eurovision Song Contest Copenhagen 2014

2014-05-10 10:07 - 2014-05-10 10:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-06 17:56 - 2014-05-15 03:31 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-04 22:05 - 2014-05-04 22:05 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\G Data

2014-05-04 22:04 - 2014-05-04 22:04 - 00000000 ____D () C:\Users\SnakeP\AppData\Local\G DATA

2014-05-04 21:56 - 2014-05-18 17:15 - 00002337 _____ () C:\Users\SnakeP\AppData\Roaming\gdscan.log

2014-05-04 21:56 - 2014-05-04 21:56 - 00000000 _____ () C:\Users\SnakeP\AppData\Roaming\gdfw.log

2014-05-04 14:00 - 2014-05-04 14:21 - 00000000 ____D () C:\Users\SnakeP\Downloads\Die drei Fragezeichen Kids - 39 - Der verrückte Erfinder

2014-05-04 14:00 - 2014-05-04 14:20 - 00000000 ____D () C:\Users\SnakeP\Downloads\Die drei Fragezeichen - 186 - GPS-Gangster

2014-05-03 20:56 - 2014-05-03 20:57 - 00022728 _____ () C:\Users\SnakeP\Documents\UStVA2014_I._Quartal_Dr._Ingo_Blank_2014.elfo

2014-05-03 16:22 - 2014-05-03 16:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-05-03 16:22 - 2014-05-03 16:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-05-03 16:22 - 2014-05-03 16:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-05-03 16:22 - 2014-05-03 16:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-05-02 13:50 - 2014-05-02 13:50 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\XMedia Recode

2014-05-02 13:44 - 2014-05-02 13:44 - 07399496 _____ (XMedia Recode ) C:\Users\SnakeP\Downloads\XMediaRecode3186_setup.exe

2014-04-30 17:09 - 2014-05-11 19:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak

2014-04-30 17:00 - 2011-02-19 13:40 - 00000000 ____D () C:\Users\SnakeP\Downloads\Supertramp - Songs einer Supergruppe

2014-04-30 16:53 - 2012-06-10 07:23 - 00000000 ___SD () C:\Users\SnakeP\Downloads\Maxi Mixes from the 80´s

2014-04-28 14:06 - 2013-11-07 15:11 - 00000000 ____D () C:\Users\SnakeP\Downloads\Adel Tawil - Lieder

2014-04-27 12:43 - 2014-04-27 12:43 - 00002120 _____ () C:\{339E332C-797C-4B83-B0F8-CF27B1AEC0F5}

2014-04-22 14:06 - 2009-11-08 14:21 - 00000000 ____D () C:\Users\SnakeP\Downloads\Welcome to Bavaria

2014-04-22 14:05 - 2010-03-20 20:14 - 00000000 ____D () C:\Users\SnakeP\Downloads\Mixed Emotions - Sweetheart Darlin' My Deer (Extended Version) 1C K060 1472806

2014-04-22 13:54 - 2014-04-22 13:56 - 109176327 _____ () C:\Users\SnakeP\Downloads\JOSICL18.zip

2014-04-21 09:08 - 2014-04-21 09:08 - 00000000 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
 

==================== One Month Modified Files and Folders =======
 

2014-05-18 17:47 - 2014-05-18 17:46 - 00033434 _____ () C:\Users\SnakeP\Downloads\FRST.txt

2014-05-18 17:46 - 2014-05-18 17:44 - 00000000 ____D () C:\FRST

2014-05-18 17:44 - 2014-05-18 17:44 - 02067456 _____ (Farbar) C:\Users\SnakeP\Downloads\FRST64.exe

2014-05-18 17:43 - 2014-05-18 17:43 - 00000490 _____ () C:\Users\SnakeP\Downloads\defogger_disable.log

2014-05-18 17:43 - 2014-05-18 17:43 - 00000000 _____ () C:\Users\SnakeP\defogger_reenable

2014-05-18 17:43 - 2010-04-19 14:57 - 00000000 ____D () C:\Users\SnakeP

2014-05-18 17:42 - 2014-05-18 17:42 - 00050477 _____ () C:\Users\SnakeP\Downloads\Defogger.exe

2014-05-18 17:38 - 2014-05-18 17:38 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-18 17:36 - 2014-05-18 17:36 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\SnakeP\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-18 17:28 - 2009-07-14 06:45 - 00014864 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-05-18 17:28 - 2009-07-14 06:45 - 00014864 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-05-18 17:26 - 2014-05-18 17:26 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys

2014-05-18 17:26 - 2014-05-18 17:26 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys

2014-05-18 17:25 - 2010-04-19 18:24 - 01562677 _____ () C:\Windows\WindowsUpdate.log

2014-05-18 17:23 - 2014-05-18 17:23 - 00000000 ___HD () C:\ProgramData\{$1284-9213-2940-1289$}

2014-05-18 17:20 - 2014-05-18 17:20 - 00068608 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys

2014-05-18 17:20 - 2014-05-18 17:20 - 00065024 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys

2014-05-18 17:20 - 2010-04-19 23:57 - 00000000 ____D () C:\ProgramData\G DATA

2014-05-18 17:18 - 2014-05-18 13:44 - 00000392 _____ () C:\Windows\setupact.log

2014-05-18 17:18 - 2011-03-01 21:28 - 00065536 _____ () C:\Windows\system32\Ikeext.etl

2014-05-18 17:16 - 2014-05-18 17:16 - 00135168 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys

2014-05-18 17:16 - 2014-05-18 17:16 - 00057344 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys

2014-05-18 17:15 - 2014-05-18 17:15 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys

2014-05-18 17:15 - 2014-05-18 17:15 - 00002022 _____ () C:\Users\Public\Desktop\G Data InternetSecurity CBE.lnk

2014-05-18 17:15 - 2014-05-18 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data InternetSecurity CBE

2014-05-18 17:15 - 2014-05-04 21:56 - 00002337 _____ () C:\Users\SnakeP\AppData\Roaming\gdscan.log

2014-05-18 17:13 - 2014-05-18 15:03 - 00003922 _____ () C:\Windows\DPINST.LOG

2014-05-18 17:13 - 2010-04-19 23:56 - 00000000 ____D () C:\Program Files (x86)\G Data

2014-05-18 16:59 - 2014-05-18 14:52 - 00176232 _____ () C:\Windows\PFRO.log

2014-05-18 16:37 - 2014-05-18 16:37 - 00411144 _____ () C:\Users\SnakeP\Downloads\AVCleaner.exe

2014-05-18 16:26 - 2014-05-18 16:25 - 63320784 _____ (Microsoft Corporation) C:\Users\SnakeP\Downloads\IE11-Windows6.1-x64-de-de.exe

2014-05-18 16:12 - 2014-05-18 16:12 - 00961360 _____ (Chip Digital GmbH) C:\Users\SnakeP\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe

2014-05-18 15:34 - 2010-04-26 17:40 - 00000000 ____D () C:\Users\SnakeP\AppData\Local\QuickPar

2014-05-18 15:34 - 2010-04-23 19:15 - 00000000 ____D () C:\Users\SnakeP\Documents\UseNeXT

2014-05-18 14:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup

2014-05-18 14:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe

2014-05-18 14:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI

2014-05-18 14:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\com

2014-05-18 13:44 - 2014-05-18 13:44 - 00000000 _____ () C:\Windows\setuperr.log

2014-05-18 13:27 - 2014-05-15 15:07 - 00000000 _____ () C:\Users\SnakeP\AppData\Roaming\msconfig.ini

2014-05-18 13:27 - 2013-05-14 20:35 - 00000000 ____D () C:\Users\SnakeP\AppData\Local\CrashDumps

2014-05-18 13:22 - 2009-07-14 19:58 - 54152102 _____ () C:\Windows\system32\perfh007.dat

2014-05-18 13:21 - 2009-07-14 19:58 - 17784446 _____ () C:\Windows\system32\perfc007.dat

2014-05-18 13:21 - 2009-07-14 07:13 - 00006670 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-18 13:20 - 2010-04-19 14:57 - 00000000 ___RD () C:\Users\SnakeP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-18 13:17 - 2014-05-15 15:04 - 00000000 ___HD () C:\{$1284-9213-2940-1289$}

2014-05-18 13:08 - 2014-05-13 21:08 - 00000000 ____D () C:\Program Files (x86)\Convar

2014-05-18 09:28 - 2013-05-28 10:11 - 00000000 ____D () C:\Program Files (x86)\StarMoney 9.0 apoEdition

2014-05-16 17:52 - 2012-03-31 10:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-05-16 17:29 - 2012-10-02 08:12 - 00001156 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001UA.job

2014-05-16 14:37 - 2010-12-15 16:11 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\vlc

2014-05-16 13:40 - 2012-10-02 08:12 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001Core.job

2014-05-16 02:25 - 2010-04-23 19:15 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\UseNeXT

2014-05-16 02:17 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-05-15 20:45 - 2014-05-15 20:45 - 00000000 ____D () C:\Users\SnakeP\Downloads\Gerhard Polt - Und wer zahlts

2014-05-15 15:07 - 2014-05-15 15:07 - 00000000 _____ () C:\ProgramData\27218346293184.exe

2014-05-15 12:29 - 2012-03-23 12:16 - 00000000 ____D () C:\Users\SnakeP\AppData\Local\DoNotTrackPlus

2014-05-15 09:01 - 2014-05-15 09:01 - 00629584 _____ (Chip Digital GmbH) C:\Users\SnakeP\Downloads\Recuva - CHIP-Downloader.exe

2014-05-15 08:21 - 2013-04-13 18:51 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-05-15 07:59 - 2010-07-07 12:20 - 00000000 ___RD () C:\Users\SnakeP\Virtual Machines

2014-05-15 07:59 - 2010-04-19 14:57 - 00000000 ___RD () C:\Users\SnakeP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-05-15 04:26 - 2014-05-15 04:24 - 00000000 ____D () C:\Windows\rescache

2014-05-15 03:31 - 2014-05-06 17:56 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-15 03:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-05-15 03:14 - 2010-04-19 20:13 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-05-15 03:12 - 2013-07-12 18:03 - 00000000 ____D () C:\Windows\system32\MRT

2014-05-14 19:54 - 2014-02-07 15:25 - 1048576000 _____ () C:\Users\SnakeP\Documents\Diverses.acyl

2014-05-14 19:54 - 2010-04-19 23:25 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\ACLive5

2014-05-14 09:53 - 2012-03-31 10:12 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-05-14 09:53 - 2012-03-31 10:11 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-05-14 09:53 - 2011-06-01 13:06 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-05-13 21:24 - 2014-05-13 21:23 - 04985016 _____ (EaseUS ) C:\Users\SnakeP\Downloads\drw_free.exe

2014-05-13 21:08 - 2014-05-13 21:08 - 03462033 _____ () C:\Users\SnakeP\Downloads\pci_filerecovery.exe

2014-05-11 20:53 - 2012-05-04 15:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-05-11 19:37 - 2014-04-30 17:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak

2014-05-11 14:21 - 2011-03-29 23:27 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\BOM

2014-05-11 13:21 - 2014-05-11 13:21 - 08568832 _____ () C:\Users\SnakeP\Downloads\MEDUMAT_Transport_simulation_V_5.03_04.exe

2014-05-11 10:40 - 2014-05-11 10:38 - 00000000 ____D () C:\Users\SnakeP\Downloads\Eurovision Song Contest Copenhagen 2014

2014-05-10 10:08 - 2014-05-10 10:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-09 21:45 - 2011-04-27 10:22 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-09 21:45 - 2011-04-27 10:22 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-05-09 13:24 - 2012-10-02 08:12 - 00004148 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001UA

2014-05-09 13:24 - 2012-10-02 08:12 - 00003752 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001Core

2014-05-09 08:14 - 2014-05-14 13:30 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-09 08:12 - 2011-04-27 10:22 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-05-09 08:12 - 2011-04-27 10:22 - 00003856 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-05-09 08:11 - 2014-05-14 13:30 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-07 22:36 - 2010-04-24 15:09 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\dvdcss

2014-05-06 06:40 - 2014-05-15 03:14 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-06 06:17 - 2014-05-15 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-06 05:25 - 2014-05-15 03:14 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-06 05:07 - 2014-05-15 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-06 05:00 - 2014-05-15 03:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-06 04:10 - 2014-05-15 03:14 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-04 22:05 - 2014-05-04 22:05 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\G Data

2014-05-04 22:04 - 2014-05-04 22:04 - 00000000 ____D () C:\Users\SnakeP\AppData\Local\G DATA

2014-05-04 21:56 - 2014-05-04 21:56 - 00000000 _____ () C:\Users\SnakeP\AppData\Roaming\gdfw.log

2014-05-04 21:46 - 2013-05-12 22:32 - 00000000 ____D () C:\ProgramData\Norton

2014-05-04 17:12 - 2010-04-19 19:27 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-05-04 14:21 - 2014-05-04 14:00 - 00000000 ____D () C:\Users\SnakeP\Downloads\Die drei Fragezeichen Kids - 39 - Der verrückte Erfinder

2014-05-04 14:20 - 2014-05-04 14:00 - 00000000 ____D () C:\Users\SnakeP\Downloads\Die drei Fragezeichen - 186 - GPS-Gangster

2014-05-03 20:57 - 2014-05-03 20:56 - 00022728 _____ () C:\Users\SnakeP\Documents\UStVA2014_I._Quartal_Dr._Ingo_Blank_2014.elfo

2014-05-03 20:41 - 2011-01-22 09:50 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-05-03 16:23 - 2013-10-21 12:17 - 00000000 ____D () C:\ProgramData\Oracle

2014-05-03 16:21 - 2014-05-03 16:22 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-05-03 16:21 - 2014-05-03 16:22 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-05-03 16:21 - 2014-05-03 16:22 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-05-03 16:21 - 2014-05-03 16:22 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-05-02 13:50 - 2014-05-02 13:50 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\XMedia Recode

2014-05-02 13:44 - 2014-05-02 13:44 - 07399496 _____ (XMedia Recode ) C:\Users\SnakeP\Downloads\XMediaRecode3186_setup.exe

2014-04-27 12:43 - 2014-04-27 12:43 - 00002120 _____ () C:\{339E332C-797C-4B83-B0F8-CF27B1AEC0F5}

2014-04-26 14:09 - 2013-03-14 09:05 - 00007605 _____ () C:\Users\SnakeP\AppData\Local\Resmon.ResmonCfg

2014-04-22 13:56 - 2014-04-22 13:54 - 109176327 _____ () C:\Users\SnakeP\Downloads\JOSICL18.zip

2014-04-21 20:14 - 2010-04-26 21:33 - 00000000 ____D () C:\Users\SnakeP\Downloads\Cover

2014-04-21 09:08 - 2014-04-21 09:08 - 00000000 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log

2014-04-21 09:08 - 2010-04-19 20:55 - 00000000 ____D () C:\Program Files (x86)\Java

2014-04-20 23:04 - 2013-01-15 14:58 - 00000000 ____D () C:\Program Files (x86)\MyMDb
 

Files to move or delete:

====================

C:\Users\SnakeP\AppData\Roaming\eSReg.ini

C:\Users\SnakeP\AppData\Roaming\msconfig.ini

C:\ProgramData\27218346293184.exe
 
 

Some content of TEMP:

====================

C:\Users\SnakeP\AppData\Local\Temp\Magic_Partition_Recovery.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe

[2014-05-14 13:29] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
 

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-05-09 00:31
 

==================== End Of Log ============================

Code:



defogger_disable by jpshortstuff (23.02.10.1)

Log created at 17:43 on 18/05/2014 (SnakeP)
 

Checking for autostart values...

HKCU\~\Run values retrieved.

HKLM\~\Run values retrieved.
 

Checking for services/drivers...
 
 

-=E.O.F=-