Trojaner-Board - AdW Cleaner findet C:\ProgramFiles\Gemeinsame Dateien

Hallo,
beim routinemäßigen Scan hat AdW Cleaner den Ordner "Gemeinsame Dateien" (geschützte Systemdatei)) gefunden.Wie soll ich weiter verfahren?
LG Girlie

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-09-2014

Ran by Claus (administrator) on CLAUS-PC on 08-09-2014 09:17:31

Running from C:\Users\Claus\Desktop

Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 

The only official download link for FRST:

Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 

Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(BillP Studios) C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe

(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe

(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe

(Google Inc.) C:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler.exe

(Secunia) C:\Program Files\Secunia\PSI\sua.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-01] (AVAST Software)

HKU\S-1-5-21-3193897139-333771760-13577277-1000\...\Run: [WinPatrol] => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe [496192 2014-02-25] (BillP Studios)

Startup: C:\Users\Claus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Email.lnk

ShortcutTarget: Email.lnk -> C:\Program Files\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)

Startup: C:\Users\Claus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NeueDatenbank.kdbx ()

ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

BootExecute: autocheck autochk * sdnclean.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

Handler: AutorunsDisabled\grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: AutorunsDisabled\ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)

Handler: AutorunsDisabled\skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler: AutorunsDisabled\viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} -  No File

Handler: AutorunsDisabled\wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)

Filter: AutorunsDisabled - No CLSID Value - No File

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Claus\AppData\Roaming\Mozilla\Firefox\Profiles\vtz5bua3.default-1388416262325

FF Homepage: https://kunde.onvista-bank.de/login.html

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_179.dll ()

FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Garmin Communicator - C:\Users\Claus\AppData\Roaming\Mozilla\Firefox\Profiles\vtz5bua3.default-1388416262325\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-05-10]

FF Extension: Autofill Forms - C:\Users\Claus\AppData\Roaming\Mozilla\Firefox\Profiles\vtz5bua3.default-1388416262325\Extensions\autofillForms@blueimp.net.xpi [2014-01-30]

FF Extension: Bookmark Favicon Changer - C:\Users\Claus\AppData\Roaming\Mozilla\Firefox\Profiles\vtz5bua3.default-1388416262325\Extensions\bookmarkfaviconchanger@sonthakit.xpi [2013-12-30]

FF Extension: Stylish - C:\Users\Claus\AppData\Roaming\Mozilla\Firefox\Profiles\vtz5bua3.default-1388416262325\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2013-12-30]

FF Extension: NoScript - C:\Users\Claus\AppData\Roaming\Mozilla\Firefox\Profiles\vtz5bua3.default-1388416262325\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-05]

FF Extension: CookieCuller - C:\Users\Claus\AppData\Roaming\Mozilla\Firefox\Profiles\vtz5bua3.default-1388416262325\Extensions\{99B98C2C-7274-45a3-A640-D9DF1A1C8460}.xpi [2013-12-30]

FF Extension: Adblock Plus - C:\Users\Claus\AppData\Roaming\Mozilla\Firefox\Profiles\vtz5bua3.default-1388416262325\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-28]

FF Extension: Tab Mix Plus - C:\Users\Claus\AppData\Roaming\Mozilla\Firefox\Profiles\vtz5bua3.default-1388416262325\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2013-12-30]

FF Extension: Theme Font &amp; Size Changer - C:\Users\Claus\AppData\Roaming\Mozilla\Firefox\Profiles\vtz5bua3.default-1388416262325\Extensions\{f69e22c7-bc50-414a-9269-0f5c344cd94c}.xpi [2014-08-14]

FF Extension: Anti-Banner - C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru [2014-06-14]

FF Extension: Anti-Banner - C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2014-06-14]

FF Extension: Modul zur Link-Untersuchung - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2014-06-14]

FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-09]
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://www.google.com/

CHR StartupUrls: Default -> "https://kunde.onvista-bank.de/login.html",

                        "hxxp://www.onvista.de/"

CHR DefaultSearchKeyword: Default -> 747D16B1105AFC62C0E7C459E5F97A9E27D5E75424A297FCE11B2282566549BE

CHR DefaultSearchURL: Default -> 85ECCC23FCDB2C6E6F3A341F6E13F0AF2818B0BCB189A9121FBE476AFCADF78E

CHR Plugin: (Shockwave Flash) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\PepperFlash\11.9.900.117\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\pdf.dll ()

CHR Plugin: (Norton Identity Safe) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_1\npcoplgn.dll No File

CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll No File

CHR CustomProfile: C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-27]

CHR Extension: (HIFANA X W+K TOKYO LAB) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmhjjmolopikkbigemoocmebohfpnmkj [2014-02-05]

CHR Extension: (Next Browser Sync Plus for Chrome) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\eikaoeimlnplikakodlifpagiklbnefj [2014-03-01]

CHR Extension: (Google Kalender) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-02-05]

CHR Extension: (Bookmarks Menu) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffmdedmghpoipeldijkdlcckdpempkdi [2014-02-05]

CHR Extension: (AdBlock) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-10-05]

CHR Extension: (RSS Live Links) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcamnijgggppihioleoenjmlnakejdph [2013-10-05]

CHR Extension: (Drucken) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\idfnpgjblkahngbondojabhffkkdekbd [2013-10-05]

CHR Extension: (Calc SS3) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\iicfbobganffbpdodmdcbcpblomkbeoa [2014-02-05]

CHR Extension: (Dropbox) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2014-02-05]

CHR Extension: (Cookies) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\iphcomljdfghbkdcfndaijbokpgddeno [2013-10-05]

CHR Extension: (Ghostery) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-02-05]

CHR Extension: (FastestFox – Schneller browsen) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm [2014-02-05]

CHR Extension: (Print) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmiefodmmloajakmcfnpnjpkldellhlj [2014-02-05]

CHR Extension: (Bookmarked tabs to the front) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmllilpdpplbmjdjhlkagmimpgdflphb [2013-10-06]

CHR Extension: (Google Bookmarks) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnedccijmniojgaehpjebjfpkmafecho [2014-02-05]

CHR Extension: (Google Wallet) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-15]

CHR Extension: (ScriptSafe) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2013-10-05]

CHR Extension: (Google Calendar Checker) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookhcbgokankfmjafalglpofmolfopek [2014-02-05]

CHR Extension: (Dolphin Connect) - C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll [2014-03-04]

CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-07]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [142648 2014-09-01] (SUPERAntiSpyware.com)

R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [805032 2011-09-22] (Acronis)

S4 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3246040 2013-03-03] (Acronis)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-07] (AVAST Software)

S4 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-06-12] (CyberGhost S.R.L)

S4 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [436056 2014-04-23] (Garmin Ltd or its subsidiaries)

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [32568 2014-06-05] (The OpenVPN Project)

S3 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)

R2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 ampa; C:\Windows\system32\ampa.sys [12728 2011-12-26] () [File not signed]

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-07-07] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-07-07] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-07-07] (AVAST Software)

R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-07-07] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-07-07] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-07-07] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-07-07] (AVAST Software)

R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-07-07] ()

R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [31576 2013-01-31] (AVG Technologies)

R3 CMISTOR; C:\Windows\System32\DRIVERS\cmiucr.SYS [93056 2007-01-12] (C-Media Corporation)

R3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [57800 2009-10-22] (FTDI Ltd.)

S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)

S3 pneteth; C:\Windows\System32\DRIVERS\pneteth.sys [13440 2011-11-25] (June Fabrics Technology Inc.)

S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_x86.sys [16024 2013-12-06] (Secunia)

S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2012-11-06] (RapidSolution Software AG)

R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2012-11-06] (RapidSolution Software AG)

R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

S3 silabser; C:\Windows\System32\DRIVERS\silabser.sys [60544 2012-10-22] (Silicon Laboratories)

S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2013-09-20] ()

R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)

R3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [39048 2012-11-06] (RapidSolution Software AG)

S3 usbcamcl; C:\Windows\System32\DRIVERS\usbcamcl.sys [28416 2011-08-18] (usb camera)

S4 A2DDA; \??\C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [X]

S3 catchme; \??\C:\Users\Claus\AppData\Local\Temp\catchme.sys [X]

S4 cleanhlp; \??\C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [X]

U3 DfSdkS; No ImagePath
 

==================== NetSvcs (Whitelisted) ===================
 
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-08 09:17 - 2014-09-08 09:19 - 00018939 _____ () C:\Users\Claus\Desktop\FRST.txt

2014-09-08 09:17 - 2014-09-08 09:17 - 01097728 _____ (Farbar) C:\Users\Claus\Desktop\FRST.exe

2014-09-02 18:52 - 2014-09-02 18:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth

2014-09-02 18:15 - 2014-09-02 18:15 - 00000983 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk

2014-08-30 15:38 - 2014-08-30 15:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer

2014-08-28 15:58 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-28 15:58 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-27 08:18 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-08-27 08:18 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-08-27 08:18 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-08-27 08:18 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-08-27 08:18 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-08-27 08:18 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-08-27 08:18 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-08-27 08:17 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-08-27 08:17 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-08-26 17:56 - 2014-08-26 17:56 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1

2014-08-26 16:40 - 2014-08-26 16:40 - 00000000 ____D () C:\Program Files\Common Files\Java

2014-08-26 16:40 - 2014-08-26 16:39 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-08-26 16:39 - 2014-08-26 16:39 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-08-26 16:39 - 2014-08-26 16:39 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-08-26 16:39 - 2014-08-26 16:39 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2014-08-26 16:39 - 2014-08-26 16:39 - 00000000 ____D () C:\Program Files\Java

2014-08-13 16:08 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2014-08-13 16:08 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2014-08-13 16:07 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-08-13 16:07 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2014-08-13 16:00 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-08-13 16:00 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-08-13 16:00 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-08-13 16:00 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-08-13 16:00 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-08-13 16:00 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-08-13 16:00 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-08-13 16:00 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-08-13 16:00 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-08-13 16:00 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-08-13 16:00 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-08-13 16:00 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-08-13 16:00 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-08-13 15:59 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-08-13 15:59 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-08-13 15:59 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-08-13 15:59 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-08-13 15:59 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-08-13 15:59 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-08-13 15:59 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-08-13 15:59 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-08-13 15:59 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-08-13 15:59 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-08-13 15:59 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-08-13 15:59 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-08-13 15:59 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-08-13 15:59 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-08-13 15:59 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-08-13 15:59 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-08-13 15:59 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-08-13 15:59 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-08-13 15:59 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-08-13 15:59 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-08-13 15:59 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2014-08-13 15:59 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2014-08-13 15:59 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-08-13 15:59 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-08-13 15:59 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-08-13 15:59 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-08-13 15:58 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-08-13 15:58 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-08-13 15:57 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-08 09:19 - 2014-09-08 09:17 - 00018939 _____ () C:\Users\Claus\Desktop\FRST.txt

2014-09-08 09:17 - 2014-09-08 09:17 - 01097728 _____ (Farbar) C:\Users\Claus\Desktop\FRST.exe

2014-09-08 09:17 - 2013-12-21 10:14 - 00000000 ____D () C:\FRST

2014-09-08 09:12 - 2012-10-19 18:35 - 00000000 ____D () C:\Users\Claus\AppData\Roaming\KeePass

2014-09-08 09:12 - 2009-07-14 06:34 - 00031280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-08 09:12 - 2009-07-14 06:34 - 00031280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-08 09:11 - 2013-12-16 12:49 - 00000000 ____D () C:\AdwCleaner

2014-09-08 09:11 - 2013-05-01 11:47 - 01178646 _____ () C:\Windows\WindowsUpdate.log

2014-09-08 09:07 - 2014-05-27 10:32 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce1f221a76e5c3.job

2014-09-08 09:07 - 2014-02-26 21:09 - 00029381 _____ () C:\Windows\setupact.log

2014-09-08 09:07 - 2013-10-06 14:32 - 02514148 _____ () C:\Windows\PFRO.log

2014-09-08 09:07 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-08 08:43 - 2014-05-27 10:32 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce1f221b16a351.job

2014-09-07 18:10 - 2012-10-20 14:11 - 00000000 ____D () C:\Users\Claus\AppData\Roaming\Canon

2014-09-07 17:57 - 2014-05-26 20:38 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-07 16:46 - 2012-10-19 18:14 - 00000000 ___RD () C:\Users\Claus\Eigene Bilder

2014-09-07 15:27 - 2012-10-19 18:12 - 00000000 ___RD () C:\Users\Claus\Computer

2014-09-04 17:00 - 2012-10-19 18:08 - 00000000 ___RD () C:\Users\Claus\Ferienwohnung

2014-09-04 08:12 - 2012-10-18 15:31 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2014-09-03 15:43 - 2014-06-14 09:33 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2014-09-03 13:11 - 2013-10-11 16:24 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird

2014-09-02 19:04 - 2012-10-20 16:15 - 00000000 ___RD () C:\Users\Claus\Desktop\PiPaPo

2014-09-02 18:58 - 2014-02-21 19:58 - 00000000 ____D () C:\Program Files\Nokia

2014-09-02 18:56 - 2013-02-01 14:08 - 00000000 ____D () C:\ProgramData\Installations

2014-09-02 18:52 - 2014-09-02 18:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth

2014-09-02 18:52 - 2012-10-20 13:24 - 00000000 ____D () C:\Users\Claus\AppData\Local\Google

2014-09-02 18:51 - 2012-10-20 15:45 - 00000000 ____D () C:\Program Files\Google

2014-09-02 18:15 - 2014-09-02 18:15 - 00000983 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk

2014-09-02 13:46 - 2010-11-20 23:01 - 01628944 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-02 08:58 - 2013-02-01 15:07 - 00005632 _____ () C:\Users\Claus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-09-02 08:32 - 2013-03-01 10:31 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware

2014-09-01 18:44 - 2012-10-19 18:11 - 00000000 ___RD () C:\Users\Claus\Briefe aktuell

2014-09-01 18:43 - 2012-10-19 18:12 - 00000000 ___RD () C:\Users\Claus\Briefköpfe

2014-09-01 09:20 - 2013-01-30 18:30 - 00000000 ___RD () C:\Users\Claus\Documents\Spaces

2014-09-01 09:20 - 2013-01-30 18:07 - 00000000 ____D () C:\Users\Claus\AppData\Roaming\TeamDrive3

2014-09-01 08:52 - 2013-06-13 15:36 - 00000000 ____D () C:\Users\Claus\AppData\Local\CrashDumps

2014-08-31 19:51 - 2008-07-10 15:01 - 00000000 ____D () C:\Users\Claus

2014-08-31 19:50 - 2013-01-02 15:12 - 00000000 ____D () C:\Users\Claus\AppData\Roaming\Skype

2014-08-31 19:39 - 2013-10-14 19:11 - 00000000 ____D () C:\Program Files\SpywareBlaster

2014-08-31 19:38 - 2013-10-14 12:48 - 00000000 ____D () C:\Windows\ERUNT

2014-08-30 15:38 - 2014-08-30 15:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer

2014-08-30 15:38 - 2014-06-14 08:37 - 00000000 ____D () C:\Program Files\MyPhoneExplorer

2014-08-30 15:10 - 2013-04-19 17:14 - 00000000 ____D () C:\Program Files\Opera

2014-08-28 17:05 - 2009-07-14 06:33 - 00459592 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-08-28 16:35 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache

2014-08-28 08:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE

2014-08-26 17:58 - 2012-10-19 18:12 - 00000000 ___RD () C:\Users\Claus\Claus

2014-08-26 17:57 - 2012-10-18 16:21 - 00121824 _____ () C:\Users\Claus\AppData\Local\GDIPFONTCACHEV1.DAT

2014-08-26 17:56 - 2014-08-26 17:56 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1

2014-08-26 17:56 - 2013-07-23 15:46 - 00000000 ____D () C:\Program Files\OpenOffice 4

2014-08-26 16:42 - 2013-09-16 16:40 - 00000000 ____D () C:\ProgramData\Oracle

2014-08-26 16:40 - 2014-08-26 16:40 - 00000000 ____D () C:\Program Files\Common Files\Java

2014-08-26 16:39 - 2014-08-26 16:40 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-08-26 16:39 - 2014-08-26 16:39 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-08-26 16:39 - 2014-08-26 16:39 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-08-26 16:39 - 2014-08-26 16:39 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2014-08-26 16:39 - 2014-08-26 16:39 - 00000000 ____D () C:\Program Files\Java

2014-08-26 16:39 - 2014-03-19 17:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-08-25 14:34 - 2009-07-14 06:53 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-08-23 03:46 - 2014-08-28 15:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-23 02:42 - 2014-08-28 15:58 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-19 09:58 - 2012-10-19 18:13 - 00000000 ___RD () C:\Users\Claus\Elli

2014-08-16 15:58 - 2013-12-16 20:14 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2014-08-16 15:38 - 2013-12-16 20:13 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-08-13 18:02 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET

2014-08-13 17:18 - 2012-12-26 17:53 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2014-08-13 17:18 - 2012-12-26 17:53 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2014-08-13 16:49 - 2014-06-14 09:53 - 00002033 _____ () C:\Windows\SecuniaPackage.log

2014-08-13 16:25 - 2014-04-23 09:11 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-08-13 16:18 - 2012-10-19 18:49 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-08-13 16:17 - 2014-05-14 11:58 - 00000000 ____D () C:\Windows\system32\MRT

2014-08-13 16:12 - 2012-10-18 14:53 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

Some content of TEMP:

====================

C:\Users\Claus\AppData\Local\temp\2036_alwa_driver.dll

C:\Users\Claus\AppData\Local\temp\cardreader_jni2687137812696680729.dll

C:\Users\Claus\AppData\Local\temp\cardreader_jni7737991528202150279.dll

C:\Users\Claus\AppData\Local\temp\Foxit Reader Updater.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-09-06 17:45
 

==================== End Of Log ============================

Code:

dateein gefundenAdditional scan result of Farbar Recovery Scan Tool (x86) Version: 07-09-2014

Ran by Claus at 2014-09-08 09:19:26

Running from C:\Users\Claus\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

7-Zip 9.22beta (HKLM\...\7-Zip) (Version:  - )

Acronis*True*Image*Home 2011 (HKLM\...\{04A3A6B0-8E19-49BB-82FF-65C5A55F917D}) (Version: 14.0.6942 - Acronis)

Adobe Flash Player 14 ActiveX (HKLM\...\{15AE611F-5A40-4BD0-9291-1C6856BDB9A4}) (Version: 14.0.0.176 - Adobe Systems Incorporated)

Adobe Flash Player 14 Plugin (HKLM\...\{16E20D9D-E7E2-4951-A944-6FFC40870AD4}) (Version: 14.0.0.179 - Adobe Systems Incorporated)

Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated)

Allgäu Walser Card 2013 (HKLM\...\Allgäu Walser Card 2013) (Version:  - OberAllgäu Tourismus Service GmbH)

Android SDK Tools (HKLM\...\Android SDK Tools) (Version: 1.16 - Google Inc.)

ANT Drivers Installer x86 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden

AOMEI Partition Assistant Home Edition 5.1 (HKLM\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version:  - Aomei Technology Co., Ltd.)

Audials (HKLM\...\{DC8B9A86-0EB5-4178-BCC0-DBDF1F529378}) (Version: 10.0.46604.300 - Audials AG)

Auerswald ETS-4308 I 2.5 (HKLM\...\{17ABC860-66F2-44BC-9A64-237CD335A51E}) (Version: 2.5  - Auerswald GmbH & Co.KG)

avast! Free Antivirus (HKLM\...\Avast) (Version: 9.0.2021 - AVAST Software)

Biet-O-Matic v2.14.8 (HKLM\...\Biet-O-Matic v2.14.8) (Version: 2.14.8 - BOM Development Team)

Canon iP4700 series Printer Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4700_series) (Version:  - Canon Inc.)

CanoScan Toolbox Ver4.1 (HKLM\...\{BCE46757-7674-4416-BEDB-68205A60409E}) (Version:  - )

CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4214 - CDBurnerXP)

CM Installer (HKLM\...\{681544C2-FFA2-4CFD-A9AD-2A3D25DF8D22}) (Version: 1.0.0.0 - Cyanogen Inc.)

C-Media Card Reader Driver USB2.0 (HKLM\...\C-Media Card Reader Driver USB2.0) (Version:  - )

CrystalDiskInfo 5.0.5 Shizuku Edition (HKLM\...\CrystalDiskInfo_is1) (Version: 5.0.5 - Crystal Dew World)

CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version:  - CyberGhost S.R.L.)

D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden

Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform)

Deutsche Post E-Porto (HKLM\...\{5CCF8330-F742-411A-8A04-719806D168B5}) (Version: 2.3.0 - Deutsche Post AG)

Elevated Installer (Version: 3.1.8.0 - Garmin Ltd or its subsidiaries) Hidden

ERUNT 1.1j (HKLM\...\ERUNT_is1) (Version:  - Lars Hederer)

ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )

Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 6.1.5.624 - Foxit Corporation)

Free Mp3 Wma Converter V 2.2 (HKLM\...\Free Mp3 Wma Converter_is1) (Version: 2.2.0.0 - Koyote Soft)

Garmin Express (HKLM\...\{a2c69cba-542a-4a49-af31-b8a49349064d}) (Version: 3.1.8.0 - Garmin Ltd or its subsidiaries)

Garmin Express (Version: 3.1.8.0 - Garmin Ltd or its subsidiaries) Hidden

Garmin Express Tray (Version: 3.1.8.0 - Garmin Ltd or its subsidiaries) Hidden

Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.)

Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden

IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.38 - Irfan Skiljan)

Java 7 Update 67 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)

Java Auto Updater (Version: 2.1.67.1 - Oracle, Inc.) Hidden

Junk Mail filter update (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

KeePass Password Safe 2.27 (HKLM\...\KeePassPasswordSafe2_is1) (Version: 2.27 - Dominik Reichl)

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft – Speichern als PDF oder XPS – Add-In für 2007 Microsoft Office-Programme (HKLM\...\{90120000-00B2-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

Microsoft Office 2007 Primary Interop Assemblies (HKLM\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

Microsoft Office Access MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Groove MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Language Pack 2007 - German/Deutsch (HKLM\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office O MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

Microsoft Office SharePoint Designer MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office X MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1 - Nokia) Hidden

Mozilla Firefox 32.0 (x86 de) (HKLM\...\Mozilla Firefox 32.0 (x86 de)) (Version: 32.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla)

Mozilla Thunderbird 31.1.0 (x86 de) (HKLM\...\Mozilla Thunderbird 31.1.0 (x86 de)) (Version: 31.1.0 - Mozilla)

MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden

MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden

MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)

NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5896 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.109.706 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 307.83 (Version: 307.83 - NVIDIA Corporation) Hidden

NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden

OpenOffice 4.1.1 (HKLM\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)

OpenVPN 2.3.4-I002  (HKLM\...\OpenVPN) (Version: 2.3.4-I002 - )

PC Connectivity Solution (HKLM\...\{644F4910-E812-49AD-93EC-86828CB81A0D}) (Version: 12.0.27.0 - Nokia)

PDF24 Creator 5.4.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

PDFMate Free PDF Merger 1.0.4 (HKLM\...\PDFMate Free PDF Merger_is1) (Version:  - pdfmate.com)

pdfsam (HKLM\...\pdfsam) (Version: 2.2.1 - )

PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.210.0 - Tracker Software Products Ltd)

Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden

Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.53.216.2012 - Realtek)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{8FA53ACE-B718-4FAE-B7BF-95B0FCB320C8}) (Version: 1.3.800.0 - SAMSUNG Electronics CO., LTD.)

Sarbyx TrayClock v1.1 (HKLM\...\Sarbyx TrayClock_is1) (Version: 1.1 - SarbyxLabs)

Secunia PSI (3.0.0.9016) (HKLM\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)

SIW 2011 Home Edition (HKLM\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2011.10.29 - Topala Software Solutions)

Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

SmartTools Publishing • Word Adressfenster-Assistent (HKLM\...\SmartToolsAdressfenster-Assistentv3.00) (Version: v3.00 - SmartTools Publishing)

SmartTools Publishing • Word Falz & Lochmarken-Assistent (HKLM\...\SmartToolsFalz & Lochmarken-Assistentv6.50) (Version: v6.50 - SmartTools Publishing)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

SRWare Iron Version SRWare Iron 27.0.1500.0 (HKLM\...\{C59CF2CE-B302-4833-AA35-E0E07D8EBC52}_is1) (Version: SRWare Iron 27.0.1500.0 - SRWare)

Sweet Home 3D version 4.1 (HKLM\...\Sweet Home 3D_is1) (Version:  - eTeks)

TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )

TeamDrive 3 (HKLM\...\TeamDrive 3) (Version: 3.2.1.809 - TeamDrive Systems GmbH)

TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.19045 - TeamViewer)

TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)

Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)

Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM\...\{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Microsoft Office Access 2007 Help (KB963663) (HKLM\...\{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{6B76A18A-AA1E-42AB-A7AD-6C84BBB43987}) (Version:  - Microsoft)

Update for Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{199DF7B6-169C-448C-B511-1054101BE9C9}) (Version:  - Microsoft)

Update for Microsoft Office Infopath 2007 Help (KB963662) (HKLM\...\{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{716B81B8-B13C-41DF-8EAC-7A2F656CAB63}) (Version:  - Microsoft)

Update for Microsoft Office OneNote 2007 Help (KB963670) (HKLM\...\{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2744EF05-38E1-4D5D-B333-E021EDAEA245}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{ED38F8A3-4F61-494E-8BCA-E3AC7760C924}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{0451F231-E3E3-4943-AB9F-58EB96171784}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883097) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B2260BC9-D561-46EE-B33D-739CF760A2A9}) (Version:  - Microsoft)

Update for Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{397B1D4F-ED7B-4ACA-A637-43B670843876}) (Version:  - Microsoft)

Update for Microsoft Office Publisher 2007 Help (KB963667) (HKLM\...\{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2E40DE55-B289-4C8B-8901-5D369B16814F}) (Version:  - Microsoft)

Update for Microsoft Office Script Editor Help (KB963671) (HKLM\...\{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version:  - Microsoft)

Update for Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{80E762AA-C921-4839-9D7D-DB62A72C0726}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

Visual Studio C++ 10.0 Runtime (HKLM\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

Windows Live Communications Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

Windows Live Essentials (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Mail (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live SOXE (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live UX Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Writer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Writer Resources (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)

Windows-Treiberpaket - Nokia Modem  (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia)

Windows-Treiberpaket - Nokia Modem  (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia)

Windows-Treiberpaket - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)

Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)

WinRAR 5.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

Zoner Photo Studio 13 (HKLM\...\ZonerPhotoStudio13_DE_is1) (Version: 13.0.1.7 - ZONER software)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-3193897139-333771760-13577277-1000_Classes\CLSID\{BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B}\InprocServer32 -> C:\Program Files\Zoner\Photo Studio 13\Program32\SHELLEXT.DLL (ZONER software)
 

==================== Restore Points  =========================
 

02-09-2014 16:40:01 Revo Uninstaller's restore point - Foxit Cloud

02-09-2014 16:43:22 Revo Uninstaller's restore point - Google Earth

02-09-2014 16:44:04 Removed Google Earth.

02-09-2014 16:48:52 Revo Uninstaller's restore point - Google Earth

02-09-2014 16:51:55 Revo Uninstaller's restore point - Nokia PC Suite

02-09-2014 16:56:52 Revo Uninstaller's restore point - Nokia Connectivity Cable Driver

07-09-2014 15:52:05 07.09.
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:04 - 2013-12-12 15:39 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {1B6C04C3-9F8C-47E9-AE30-A0E3FA25D392} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe

Task: {8AD6B4E0-C5BD-4AF4-A420-16336694C486} - System32\Tasks\GoogleUpdateTaskMachineCore1ce1f221a76e5c3 => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-20] (Google Inc.)

Task: {9400AC16-3F8B-422C-B64C-D5F1AF6E809C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-07] (AVAST Software)

Task: {AFC899FC-06FE-4863-BDB1-0CCC8BC561C3} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {BCC79ACA-79BA-4B39-B866-D5E9ABA71900} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe

Task: {D1EB4C1C-E7F3-4D60-9987-687FE8A1FD07} - System32\Tasks\GoogleUpdateTaskMachineUA1ce1f221b16a351 => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-20] (Google Inc.)

Task: {EBD24E70-C02D-40D1-9793-C04077E3FFDB} - System32\Tasks\GarminUpdaterTask => C:\Program Files\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-04-23] ()
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce1f221a76e5c3.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce1f221b16a351.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-07-07 08:31 - 2014-07-07 08:31 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll

2014-09-08 08:03 - 2014-09-08 08:03 - 02845184 _____ () C:\Program Files\AVAST Software\Avast\defs\14090701\algo.dll

2014-09-08 09:08 - 2014-09-08 09:08 - 02845184 _____ () C:\Program Files\AVAST Software\Avast\defs\14090800\algo.dll

2014-07-07 08:31 - 2014-07-07 08:31 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2013-12-14 12:21 - 2014-02-18 05:46 - 00643948 ____N () C:\Program Files\BillP Studios\WinPatrol\sqlite3.dll

2013-10-11 16:24 - 2014-09-03 13:11 - 03339376 _____ () C:\Program Files\Mozilla Thunderbird\mozjs.dll

2013-10-11 16:24 - 2014-09-03 13:11 - 00158832 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAP32V60.dll

2013-10-11 16:24 - 2014-09-03 13:11 - 00023152 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAPPR32V60.dll

2014-06-14 09:33 - 2014-09-03 15:43 - 03715184 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\Services: AcrSch2Svc => 2

MSCONFIG\Services: Adobe LM Service => 3

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: afcdpsrv => 3

MSCONFIG\Services: AtomicAlarmClock => 2

MSCONFIG\Services: CGVPNCliService => 3

MSCONFIG\Services: Garmin Core Update Service => 2

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: IGDCTRL => 2

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: nvsvc => 2

MSCONFIG\Services: nvUpdatusService => 2

MSCONFIG\Services: O&O Defrag => 2

MSCONFIG\Services: SDScannerService => 2

MSCONFIG\Services: SDUpdateService => 2

MSCONFIG\Services: SDWSCService => 2

MSCONFIG\Services: Secunia PSI Agent => 3

MSCONFIG\Services: Secunia Update Agent => 2

MSCONFIG\Services: ServiceLayer => 3

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\Services: TDslMgrService => 3

MSCONFIG\Services: TeamViewer8 => 3

MSCONFIG\Services: TomTomHOMEService => 2

MSCONFIG\Services: vToolbarUpdater14.0.1 => 2

MSCONFIG\Services: WO_LiveService => 3

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FRITZ!DSL Protect.lnk => C:\Windows\pss\FRITZ!DSL Protect.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk => C:\Windows\pss\Secunia PSI Tray.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk => C:\Windows\pss\Adobe Gamma.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^DSL-Manager.lnk => C:\Windows\pss\DSL-Manager.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ERUNT AutoBackup.lnk => C:\Windows\pss\ERUNT AutoBackup.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^FRITZ!DSL Startcenter.lnk => C:\Windows\pss\FRITZ!DSL Startcenter.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^KeePass.config.xml => C:\Windows\pss\KeePass.config.xml.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^KeePass.lnk => C:\Windows\pss\KeePass.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Mediencenter.lnk => C:\Windows\pss\Mediencenter.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Mozilla Firefox.lnk => C:\Windows\pss\Mozilla Firefox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^NeueDatenbank.kdbx => C:\Windows\pss\NeueDatenbank.kdbx.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^NeueDatenbank.kdbx.tmp => C:\Windows\pss\NeueDatenbank.kdbx.tmp.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Persbackup.lnk => C:\Windows\pss\Persbackup.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Claus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^TeamDrive starten.lnk => C:\Windows\pss\TeamDrive starten.lnk.Startup

MSCONFIG\startupreg: !AVG Anti-Spyware => "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

MSCONFIG\startupreg: 072E250AAD35E440664F23F909A8496BD7E0BAA1._service_run => "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=service

MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"

MSCONFIG\startupreg: Cmiboot => C:\Windows\cmiboot.exe

MSCONFIG\startupreg: FixCamera => C:\Windows\FixCamera.exe

MSCONFIG\startupreg: G Data ASM => "C:\Program Files\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe" /autostart

MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files\Garmin\Express Tray\ExpressTray.exe"

MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

MSCONFIG\startupreg: KeePass 2 PreLoad => "C:\Program Files\KeePass Password Safe 2\KeePass.exe" --preload

MSCONFIG\startupreg: NeueDatenbank.kdbx => C:\Users\Claus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NeueDatenbank.kdbx

MSCONFIG\startupreg: NokiaSuite.exe => C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray

MSCONFIG\startupreg: PC Suite Tray => "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray

MSCONFIG\startupreg: PDFPrint => C:\Program Files\PDF24\pdf24.exe

MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s

MSCONFIG\startupreg: SAOB Monitor => C:\Program Files\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe

MSCONFIG\startupreg: SarbyxTrayClock => C:\Program Files\SarbyxTrayClock\trayclock.exe

MSCONFIG\startupreg: SecureBanking => C:\Program Files\Secure Banking\SecureBanking.exe

MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

MSCONFIG\startupreg: SkyDrive => "C:\Users\Claus\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" -s

MSCONFIG\startupreg: TrueImageMonitor.exe => "C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe"

MSCONFIG\startupreg: tsnp2std => C:\Windows\tsnp2std.exe

MSCONFIG\startupreg: UnlockerAssistant => "C:\Program Files\Unlocker\UnlockerAssistant.exe"

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot

MSCONFIG\startupreg: WinPatrol [FREE Edition] => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/07/2014 10:02:50 AM) (Source: SideBySide) (EventID: 9) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Das Stammelement der Manifestdatei muss assembliert sein.
 

Error: (09/07/2014 10:02:49 AM) (Source: SideBySide) (EventID: 9) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Das Stammelement der Manifestdatei muss assembliert sein.
 

Error: (09/07/2014 10:00:56 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".

Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (09/07/2014 10:00:45 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".

Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (09/07/2014 10:00:11 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".

Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (09/04/2014 09:57:41 AM) (Source: SideBySide) (EventID: 9) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Das Stammelement der Manifestdatei muss assembliert sein.
 

Error: (09/04/2014 09:57:40 AM) (Source: SideBySide) (EventID: 9) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Das Stammelement der Manifestdatei muss assembliert sein.
 

Error: (09/04/2014 09:56:17 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".

Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (09/04/2014 09:56:10 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".

Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (09/04/2014 09:55:47 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".

Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 
 

System errors:

=============

Error: (09/03/2014 01:05:28 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: Der Dienst "Diagnosediensthost" wurde nicht richtig gestartet.
 

Error: (09/03/2014 07:18:36 AM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: Der Dienst "Diagnosediensthost" wurde nicht richtig gestartet.
 

Error: (09/02/2014 07:08:16 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: Der Dienst "Diagnosediensthost" wurde nicht richtig gestartet.
 
 

Microsoft Office Sessions:

=========================

Error: (07/23/2014 10:02:13 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 19 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (07/23/2014 10:00:17 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 13 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (07/23/2014 09:59:47 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 24 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (12/11/2013 01:27:25 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 6520 seconds with 1020 seconds of active time.  This session ended with a crash.
 

Error: (04/28/2013 01:44:00 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 9 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (04/28/2013 01:42:11 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 41 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (04/28/2013 01:39:16 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 18 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (04/28/2013 01:38:27 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 18 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (01/04/2013 11:47:14 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 27 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (12/21/2012 06:43:00 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 31 seconds with 0 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-12-17 09:28:13.492

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-17 09:28:13.492

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-17 09:28:13.492

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-17 09:03:05.933

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-17 09:03:05.933

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-17 09:03:05.933

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2012-12-03 18:34:14.123

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2012-12-03 17:23:35.312

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2012-12-03 17:06:58.013

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2012-12-03 16:35:40.923

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4200+

Percentage of memory in use: 59%

Total physical RAM: 2047.37 MB

Available physical RAM: 820.36 MB

Total Pagefile: 5047.37 MB

Available Pagefile: 3529.86 MB

Total Virtual: 2047.88 MB

Available Virtual: 1910.11 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:232.79 GB) (Free:175.53 GB) NTFS

Drive f: (INTENSO) (Fixed) (Total:931.51 GB) (Free:602.54 GB) NTFS

Drive l: (USB 7,5 GB) (Removable) (Total:7.46 GB) (Free:1.79 GB) NTFS

Drive m: (USB 1,9 GB) (Removable) (Total:1.87 GB) (Free:1.76 GB) FAT
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows XP) (Size: 232.9 GB) (Disk ID: 65E74B2B)

Partition 1: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows XP) (Size: 7.5 GB) (Disk ID: 6CB64341)

Partition 1: (Not Active) - (Size=7.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (Size: 931.5 GB) (Disk ID: 519B0ECF)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 6 (Size: 1.9 GB) (Disk ID: 7E9A7B95)

Partition 1: (Active) - (Size=1.9 GB) - (Type=06)
 

==================== End Of Log ============================

Code:

# AdwCleaner v3.309 - Bericht erstellt am 08/09/2014 um 09:02:25

# Aktualisiert 02/09/2014 von Xplode

# Betriebssystem : Windows 7 Professional Service Pack 1 (32 bits)

# Benutzername : Claus - CLAUS-PC

# Gestartet von : C:\Users\Claus\Reinigung\Reinigung\adwcleaner_3.309.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

[/!\] Nicht Gelöscht ( Junction ) : C:\Program Files\Gemeinsame Dateien
 

***** [ Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17239
 
 

-\\ Mozilla Firefox v32.0 (x86 de)
 

[ Datei : C:\Users\Claus\AppData\Roaming\Mozilla\Firefox\Profiles\vtz5bua3.default-1388416262325\prefs.js ]
 
 

-\\ Google Chrome v37.0.2062.103
 

[ Datei : C:\Users\Claus\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [958 octets] - [16/12/2013 12:49:20]

AdwCleaner[R10].txt - [1615 octets] - [05/01/2014 19:28:19]

AdwCleaner[R11].txt - [1676 octets] - [11/01/2014 18:55:14]

AdwCleaner[R12].txt - [1737 octets] - [14/01/2014 19:33:27]

AdwCleaner[R13].txt - [1928 octets] - [22/01/2014 19:45:56]

AdwCleaner[R14].txt - [1920 octets] - [22/01/2014 20:12:39]

AdwCleaner[R15].txt - [1981 octets] - [24/01/2014 15:32:31]

AdwCleaner[R16].txt - [2043 octets] - [29/01/2014 19:11:54]

AdwCleaner[R17].txt - [2087 octets] - [31/01/2014 12:05:16]

AdwCleaner[R18].txt - [2202 octets] - [11/02/2014 11:32:47]

AdwCleaner[R19].txt - [2263 octets] - [12/02/2014 17:28:54]

AdwCleaner[R1].txt - [982 octets] - [16/12/2013 12:51:30]

AdwCleaner[R20].txt - [2319 octets] - [17/02/2014 19:25:01]

AdwCleaner[R21].txt - [2782 octets] - [26/02/2014 21:26:55]

AdwCleaner[R22].txt - [2471 octets] - [26/02/2014 21:32:32]

AdwCleaner[R23].txt - [2532 octets] - [27/02/2014 18:20:38]

AdwCleaner[R24].txt - [2581 octets] - [28/02/2014 12:51:25]

AdwCleaner[R25].txt - [2834 octets] - [04/03/2014 11:42:33]

AdwCleaner[R26].txt - [2817 octets] - [07/03/2014 17:29:00]

AdwCleaner[R27].txt - [2866 octets] - [11/03/2014 13:27:36]

AdwCleaner[R28].txt - [2957 octets] - [11/03/2014 13:40:01]

AdwCleaner[R29].txt - [3006 octets] - [15/03/2014 12:00:35]

AdwCleaner[R2].txt - [1053 octets] - [17/12/2013 09:17:49]

AdwCleaner[R30].txt - [3162 octets] - [19/03/2014 19:14:12]

AdwCleaner[R31].txt - [3198 octets] - [28/03/2014 12:39:49]

AdwCleaner[R32].txt - [3302 octets] - [06/04/2014 19:39:09]

AdwCleaner[R33].txt - [3380 octets] - [06/04/2014 19:43:43]

AdwCleaner[R34].txt - [3441 octets] - [09/04/2014 11:45:28]

AdwCleaner[R35].txt - [3640 octets] - [13/04/2014 18:27:31]

AdwCleaner[R36].txt - [3623 octets] - [17/04/2014 11:09:05]

AdwCleaner[R37].txt - [6023 octets] - [24/04/2014 15:07:03]

AdwCleaner[R38].txt - [3805 octets] - [25/04/2014 08:52:00]

AdwCleaner[R39].txt - [3854 octets] - [27/04/2014 09:42:52]

AdwCleaner[R3].txt - [1114 octets] - [20/12/2013 15:17:12]

AdwCleaner[R40].txt - [4053 octets] - [02/05/2014 08:32:53]

AdwCleaner[R41].txt - [4036 octets] - [07/05/2014 17:34:24]

AdwCleaner[R42].txt - [4109 octets] - [09/05/2014 17:40:25]

AdwCleaner[R43].txt - [4306 octets] - [12/05/2014 15:30:28]

AdwCleaner[R44].txt - [4294 octets] - [15/05/2014 10:46:57]

AdwCleaner[R45].txt - [4355 octets] - [18/05/2014 15:39:13]

AdwCleaner[R46].txt - [4410 octets] - [19/05/2014 13:23:42]

AdwCleaner[R47].txt - [4613 octets] - [21/05/2014 17:53:32]

AdwCleaner[R48].txt - [4605 octets] - [22/05/2014 09:16:57]

AdwCleaner[R49].txt - [4666 octets] - [24/05/2014 10:04:17]

AdwCleaner[R4].txt - [1437 octets] - [24/12/2013 15:37:19]

AdwCleaner[R50].txt - [4727 octets] - [25/05/2014 09:58:56]

AdwCleaner[R51].txt - [4877 octets] - [28/05/2014 10:35:12]

AdwCleaner[R52].txt - [4898 octets] - [28/05/2014 14:39:40]

AdwCleaner[R53].txt - [4971 octets] - [29/05/2014 21:51:34]

AdwCleaner[R54].txt - [5032 octets] - [31/05/2014 12:52:51]

AdwCleaner[R55].txt - [5267 octets] - [14/06/2014 14:54:11]

AdwCleaner[R56].txt - [5213 octets] - [16/06/2014 08:50:16]

AdwCleaner[R57].txt - [5274 octets] - [20/06/2014 15:17:24]

AdwCleaner[R58].txt - [5541 octets] - [24/06/2014 11:00:46]

AdwCleaner[R59].txt - [5445 octets] - [06/07/2014 18:11:40]

AdwCleaner[R5].txt - [1300 octets] - [25/12/2013 10:43:37]

AdwCleaner[R60].txt - [5506 octets] - [14/07/2014 10:34:20]

AdwCleaner[R61].txt - [5579 octets] - [14/07/2014 14:59:52]

AdwCleaner[R62].txt - [5640 octets] - [17/07/2014 13:27:07]

AdwCleaner[R63].txt - [5689 octets] - [19/07/2014 09:23:05]

AdwCleaner[R64].txt - [5762 octets] - [21/07/2014 12:57:51]

AdwCleaner[R65].txt - [5827 octets] - [26/07/2014 09:21:36]

AdwCleaner[R66].txt - [5903 octets] - [01/08/2014 09:53:08]

AdwCleaner[R67].txt - [6163 octets] - [09/08/2014 10:44:49]

AdwCleaner[R68].txt - [6037 octets] - [11/08/2014 11:40:49]

AdwCleaner[R69].txt - [6098 octets] - [11/08/2014 11:44:07]

AdwCleaner[R6].txt - [1360 octets] - [28/12/2013 10:46:01]

AdwCleaner[R70].txt - [6159 octets] - [13/08/2014 17:43:19]

AdwCleaner[R71].txt - [6406 octets] - [16/08/2014 11:35:57]

AdwCleaner[R72].txt - [6359 octets] - [23/08/2014 16:52:28]

AdwCleaner[R73].txt - [6432 octets] - [24/08/2014 16:00:13]

AdwCleaner[R74].txt - [6464 octets] - [26/08/2014 17:03:55]

AdwCleaner[R75].txt - [6524 octets] - [28/08/2014 08:48:28]

AdwCleaner[R76].txt - [8543 octets] - [31/08/2014 10:11:34]

AdwCleaner[R77].txt - [6708 octets] - [02/09/2014 18:11:24]

AdwCleaner[R78].txt - [6953 octets] - [07/09/2014 17:41:07]

AdwCleaner[R79].txt - [6946 octets] - [08/09/2014 08:56:07]

AdwCleaner[R7].txt - [1434 octets] - [30/12/2013 20:36:42]

AdwCleaner[R8].txt - [1494 octets] - [01/01/2014 19:21:55]

AdwCleaner[R9].txt - [1554 octets] - [02/01/2014 11:42:18]

AdwCleaner[S0].txt - [1498 octets] - [24/12/2013 15:38:36]

AdwCleaner[S10].txt - [4368 octets] - [12/05/2014 15:32:33]

AdwCleaner[S11].txt - [4675 octets] - [21/05/2014 17:55:26]

AdwCleaner[S12].txt - [4939 octets] - [28/05/2014 10:38:01]

AdwCleaner[S13].txt - [5333 octets] - [14/06/2014 15:08:12]

AdwCleaner[S14].txt - [5603 octets] - [24/06/2014 11:06:04]

AdwCleaner[S15].txt - [6468 octets] - [16/08/2014 14:32:28]

AdwCleaner[S16].txt - [8605 octets] - [31/08/2014 10:14:21]

AdwCleaner[S17].txt - [7033 octets] - [07/09/2014 17:53:19]

AdwCleaner[S18].txt - [6344 octets] - [08/09/2014 09:02:25]

AdwCleaner[S1].txt - [1988 octets] - [22/01/2014 19:48:46]

AdwCleaner[S2].txt - [2821 octets] - [26/02/2014 21:30:02]

AdwCleaner[S3].txt - [2873 octets] - [04/03/2014 11:44:29]

AdwCleaner[S4].txt - [2905 octets] - [11/03/2014 13:29:26]

AdwCleaner[S5].txt - [3222 octets] - [19/03/2014 19:15:43]

AdwCleaner[S6].txt - [3364 octets] - [06/04/2014 19:40:50]

AdwCleaner[S7].txt - [3700 octets] - [13/04/2014 18:29:48]

AdwCleaner[S8].txt - [6085 octets] - [24/04/2014 15:11:07]

AdwCleaner[S9].txt - [4113 octets] - [02/05/2014 08:35:06]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S18].txt - [6945 octets] ##########

Keienen Fund durch Maleware Bytes!