Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Gebrauchten PC übernommen, ist der sauber und gut genug geschützt? (https://www.trojaner-board.de/148451-gebrauchten-pc-uebernommen-sauber-gut-genug-geschuetzt.html)

Claudia K. 22.01.2014 22:42

Gebrauchten PC übernommen, ist der sauber und gut genug geschützt?
 
Hallo, Ihr Lieben!

Ich habe endlich meinen alten lahmen PC abgeschafft und den gebrauchten von meinem Mann übernommen. Jetzt möchte ich gerne kurz mit eurer Hilfe prüfen, ob der PC sauber und gut genug geschützt ist. Mögt ihr mir bitte kurz dabei helfen?

Vielen lieben Dank und liebe Grüße

Claudia

schrauber 23.01.2014 07:33

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Claudia K. 23.01.2014 22:21

Hi Schrauber,

schön, dass du mir helfen magst, danke schon mal!

Hier die gewünschten Log-Files:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-01-2014
Ran by VM (administrator) on CK-PC on 23-01-2014 22:09:36
Running from C:\Users\VM\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal


==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Validity Sensors, Inc.) C:\Windows\System32\vfsFPService.exe
(Arachnoid Biometrics Identification Group Corp.) C:\Program Files\Acer\Acer Bio Protection\CompPtcVUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
() C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
() C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
() C:\Program Files\GfK-ProxyService\GfK-ProxyService.exe
() C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe
() C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe
() C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
( ) C:\Windows\System32\lxeecoms.exe
() C:\ACER\Mobility Center\MobilityService.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NewTech InfoSystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
() C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Prolific Technology Inc.) C:\Program Files\Nero\Nero BackItUp 4\IoctlSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe
(Uniblue) C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
(Acer Inc.) C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
(sonix) C:\Windows\PLFSetL.exe
() C:\Windows\PLFSetI.exe
(eBay Inc.) C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
() C:\Program Files\Lexmark Pro700 Series\ezprint.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Program Files\Lexmark Pro700 Series\lxeemon.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
() C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe
() C:\Program Files\PdaNet for Android\PdaNetPC.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Acer Inc.) C:\Program Files\Acer\Acer VCM\acp2HID.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Macrovision Europe Ltd.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2012-10-12] (Synaptics Incorporated)
HKLM\...\Run: [eAudio] - C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [544768 2008-05-30] (Acer Incorporated)
HKLM\...\Run: [ArcadeDeluxeAgent] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-07-24] (CyberLink Corp.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [1468296 2009-06-01] (Microsoft Corporation)
HKLM\...\Run: [Lexmark Pro700 Series Fax Server] - C:\Program Files\Lexmark Pro700 Series\fm3032.exe [316072 2011-01-23] ()
HKLM\...\Run: [eDataSecurity Loader] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [526896 2008-07-29] (Egis Incorporated)
HKLM\...\Run: [ePower_DMC] - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [405504 2008-08-01] (Acer Inc.)
HKLM\...\Run: [PLFSetL] - C:\Windows\PLFSetL.exe [94208 2011-01-22] (sonix)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2008-06-30] ()
HKLM\...\Run: [eBayToolbar] - C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe [632048 2009-03-19] (eBay Inc.)
HKLM\...\Run: [EzPrint] - C:\Program Files\Lexmark Pro700 Series\ezprint.exe [139944 2010-01-18] ()
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [182808 2008-07-20] (Intel Corporation)
HKLM\...\Run: [CLMLServer] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [167936 2008-07-24] (CyberLink)
HKLM\...\Run: [lxeemon.exe] - C:\Program Files\Lexmark Pro700 Series\lxeemon.exe [770728 2011-01-23] ()
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1115728 2009-12-15] (Dritek System Inc.)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM\...\Run: [LexwareInfoService] - C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-10] (AVAST Software)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2011-11-04] (Realtek Semiconductor)
Winlogon\Notify\AWinNotifyVitaKey MC3000: C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll (Arachnoid Biometrics Identification Group Corp.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung)
HKCU\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKCU\...\Run: [NextLive] - C:\Users\VM\AppData\Roaming\newnext.me\nengine.dll [1283584 2013-11-14] (NewNextDotMe)
HKCU\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
MountPoints2: {745ab459-58af-11de-af2e-806e6f6e6963} - F:\SETUP.EXE
MountPoints2: {b2eaf739-9ee3-11df-9989-001e331dd3dc} - E:\autorun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default\...\Run: [ProductReg] - C:\Program Files\Acer\WR_PopUp\ProductReg.exe [ 2008-11-17] (Acer)
HKU\Default\...\RunOnce: [AcerScrSav] - C:\Windows\Acer\run_NB.exe [ 2007-08-21] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [ProductReg] - C:\Program Files\Acer\WR_PopUp\ProductReg.exe [ 2008-11-17] (Acer)
HKU\Default User\...\RunOnce: [AcerScrSav] - C:\Windows\Acer\run_NB.exe [ 2007-08-21] ()
Lsa: [Notification Packages] scecli C:\Program Files\Acer\Acer Bio Protection\PwdFilter
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files\PdaNet for Android\PdaNetPC.exe ()

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:7777
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.freenet.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
URLSearchHook: HKLM - (No Name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} -  No File
URLSearchHook: HKCU - (No Name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} -  No File
SearchScopes: HKLM - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
BHO: GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files\GfK Internet-Monitor\Gacela2.dll (GfK)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll (Egis)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
Toolbar: HKLM - eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKLM - No Name - {872b5b88-9db5-4310-bdd0-ac189557e5f5} -  No File
Toolbar: HKLM - No Name - {98889811-442D-49dd-99D7-DC866BE87DBC} -  No File
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} -  No File
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: haufereader - No CLSID Value -
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.0.43.49 217.0.43.33 192.168.1.1

Chrome:
=======
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\32.0.1700.76\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\32.0.1700.76\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Dr.Web Anti-Virus Link Checker) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\aleggpabliehgbeagmfhnodcijcmbonb [2014-01-02]
CHR Extension: (WOT) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-01-02]
CHR Extension: (VTchromizer) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\efbjojhplkelaegfbieplglfidafgoka [2014-01-02]
CHR Extension: (AdBlock) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-02]
CHR Extension: (avast! Online Security) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-25]
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2013-02-25]
CHR Extension: (GfK Internet-Monitor) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef [2014-01-15]
CHR Extension: (Freemake Video Converter) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj [2013-06-08]
CHR Extension: (Google Wallet) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (NotScripts) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn [2014-01-02]
CHR Extension: (Gmail) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-02]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-25]
CHR HKLM\...\Chrome\Extension: [igkejcihojcegdmifcnlkhmnelneogef] - C:\Program Files\GfK Internet-Monitor\Chrome Extension\extension.crx [2014-01-15]
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-06-08]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-10] (AVAST Software)
R2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [81504 2008-01-16] ()
R2 DeviceManager; C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe [40960 2009-05-25] ()
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [406016 2009-08-24] (mst software GmbH, Germany)
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-06-02] ()
R2 GfK-Proxy-Service; C:\Program Files\GfK-ProxyService\GfK-ProxyService.exe [45544 2013-11-28] ()
R2 GfK-Reporting-Service; C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe [3089384 2013-11-28] ()
R2 GfK-Update-Service; C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe [1376232 2013-11-28] ()
R2 IGBASVC; C:\Program Files\Acer\Acer Bio Protection\BASVC.exe [3520512 2009-06-14] ()
S2 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe [193192 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [598696 2010-04-14] ( )
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] ()
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] ()
R2 PLFlash DeviceIoControl Service; C:\Program Files\Nero\Nero BackItUp 4\IoctlSvc.exe [81920 2008-08-29] (Prolific Technology Inc.)
R2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [272024 2007-01-09] ()
R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [233472 2008-07-19] (Acer Incorporated)
R2 Uniblue DiskRescue; C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe [229648 2008-09-10] (Uniblue)

==================== Drivers (Whitelisted) ====================

R0 AlfaFF; C:\Windows\System32\Drivers\AlfaFF.sys [43184 2009-06-14] (Alfa Corporation)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-01-10] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-12-25] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-01-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410528 2014-01-10] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-01-10] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2014-01-10] ()
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [28048 2010-02-05] (CSR, plc)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2010-01-01] (Elaborate Bytes AG)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-10-30] ()
R2 int15; C:\Windows\system32\drivers\int15.sys [69632 2007-01-26] ()
R3 itecir; C:\Windows\System32\DRIVERS\itecir.sys [62496 2011-11-04] (ITE Tech. Inc. )
R3 L1E; C:\Windows\System32\DRIVERS\L1E60x86.sys [54824 2012-10-12] (Atheros Communications, Inc.)
R3 NETwNv32; C:\Windows\System32\DRIVERS\NETwNv32.sys [7346176 2012-10-12] (Intel Corporation)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation)
R3 pmkbdfltr; C:\Windows\System32\DRIVERS\pmkbdfltr.sys [15248 2012-10-12] (PenMount)
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [103552 2009-05-25] (TCT International Mobile Ltd)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [23608 2012-10-12] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1759744 2011-01-22] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-10-16] (Avira GmbH)
R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2009-09-01] ()
R3 TelekomNM3; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys [35040 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [61424 2008-07-18] (Cyberlink Corp.)
S2 Aspi32; No ImagePath
S1 DritekPortIO; No ImagePath
S3 esgiguard; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x]
S3 S6U12Scanner; system32\drivers\usbscan.sys [x]
S3 usbscan; system32\DRIVERS\usbscan.sys [x]
U5 usbser; C:\Windows\System32\Drivers\usbser.sys [27648 2009-04-11] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-23 22:09 - 2014-01-23 22:10 - 00028117 _____ C:\Users\VM\Desktop\FRST.txt
2014-01-23 22:08 - 2014-01-23 22:08 - 00000000 ____D C:\FRST
2014-01-23 22:07 - 2014-01-23 22:07 - 01222144 _____ (Farbar) C:\Users\VM\Desktop\FRST.exe
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:43 - 00000000 ____D C:\Users\VM\.gimp-2.8
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\AppData\Local\gegl-0.2
2014-01-17 23:16 - 2014-01-18 00:27 - 00000000 ____D C:\Users\VM\Desktop\Mallorca
2014-01-16 21:10 - 2014-01-16 21:10 - 00000000 ____D C:\Windows\LastGood
2014-01-16 21:03 - 2007-11-14 15:18 - 00000553 _____ C:\Windows\USetup.iss
2014-01-16 17:45 - 2014-01-16 17:45 - 00000721 _____ C:\Users\VM\Desktop\Finca Cavalli.kmz
2014-01-16 05:23 - 2014-01-16 05:53 - 00000000 ____D C:\Program Files\GfK-ProxyService
2014-01-15 21:48 - 2014-01-23 22:07 - 00000000 ____D C:\Program Files\GfK Internet-Monitor
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-09 23:54 - 2014-01-16 03:09 - 00000000 ____D C:\Program Files\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee
2014-01-09 23:51 - 2014-01-23 17:46 - 00000000 ____D C:\Users\VM\AppData\Roaming\newnext.me
2014-01-09 23:51 - 2014-01-09 23:52 - 00000000 ____D C:\Users\VM\AppData\Local\Mobogenie
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\Documents\Mobogenie
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\genienext
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\cache
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\.android
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 _____ C:\Users\VM\daemonprocess.txt
2014-01-09 23:49 - 2014-01-09 23:52 - 00000000 ____D C:\Program Files\Mobogenie
2014-01-09 23:49 - 2014-01-09 23:49 - 00000000 ____D C:\Users\VM\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Image Converter
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Foxtab
2014-01-09 22:31 - 2014-01-09 22:31 - 00673168 _____ (                                                            ) C:\Users\VM\Desktop\ImageEditorSetup.exe
2014-01-05 22:37 - 2014-01-19 23:13 - 00000000 ____D C:\Users\VM\Desktop\Handybilder
2014-01-03 08:56 - 2014-01-03 08:56 - 00000427 _____ C:\Users\VM\Desktop\Dateien von CK.lnk
2014-01-02 22:46 - 2014-01-02 22:46 - 00000000 ____D C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-01-01 21:01 - 2014-01-01 21:05 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-01 20:51 - 2014-01-01 20:53 - 90396104 _____ (The GIMP Team                                              ) C:\Users\VM\Downloads\gimp-2.8.10-setup.exe
2013-12-31 13:53 - 2013-12-31 13:53 - 00000000 ____D C:\Program Files\MyFree Codec
2013-12-30 20:35 - 2013-12-30 20:36 - 00000000 ____D C:\Program Files\QuickTime
2013-12-30 20:31 - 2013-12-30 20:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-30 20:30 - 2013-12-30 20:30 - 00000000 ____D C:\Program Files\Apple Software Update
2013-12-30 20:21 - 2013-12-30 20:22 - 41404760 _____ (Apple Inc.) C:\Users\VM\Downloads\QuickTimeInstaller.exe
2013-12-27 01:14 - 2013-12-27 01:14 - 00000509 _____ C:\Users\VM\Desktop\Eigene Bilder.lnk
2013-12-26 19:50 - 2013-12-26 19:50 - 00161608 _____ C:\Windows\Minidump\Mini122613-01.dmp
2013-12-26 13:02 - 2013-12-26 23:21 - 616354938 _____ C:\Users\VM\Handy-Bilder 381.mp4
2013-12-25 17:05 - 2013-12-26 19:50 - 450556947 _____ C:\Windows\MEMORY.DMP
2013-12-25 17:05 - 2013-12-25 17:05 - 00161720 _____ C:\Windows\Minidump\Mini122513-01.dmp
2013-12-25 14:49 - 2014-01-10 00:07 - 00000350 ____H C:\Windows\Tasks\avast! Emergency Update.job
2013-12-25 14:44 - 2013-12-25 14:44 - 00000000 ____D C:\Users\VM\AppData\Roaming\AVAST Software
2013-12-25 14:43 - 2014-01-10 00:07 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-12-25 14:43 - 2014-01-10 00:07 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2013-12-25 14:43 - 2014-01-10 00:07 - 00180248 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-12-25 14:43 - 2014-01-10 00:07 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-12-25 14:43 - 2014-01-10 00:07 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-12-25 14:43 - 2014-01-10 00:07 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2013-12-25 14:43 - 2014-01-10 00:06 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-12-25 14:43 - 2013-12-25 14:42 - 00049944 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-12-25 14:42 - 2014-01-10 00:06 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-12-25 14:41 - 2013-12-25 14:41 - 00000000 ____D C:\Program Files\AVAST Software
2013-12-25 14:40 - 2013-12-25 14:40 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-25 14:33 - 2013-12-25 14:35 - 85269544 _____ (AVAST Software) C:\Users\VM\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe
2013-12-24 00:40 - 2014-01-21 21:43 - 00000000 ___RD C:\Users\VM\Eigene Bilder
2013-12-24 00:34 - 2013-12-26 19:48 - 00000000 ____D C:\Users\VM\Corel User Files
2013-12-24 00:34 - 2013-12-26 19:48 - 00000000 ____D C:\Users\VM\Azwsoft
2013-12-24 00:34 - 2013-12-24 00:34 - 00000000 ____D C:\Users\VM\Scanner Treiber
2013-12-24 00:34 - 2013-11-14 22:18 - 00011041 _____ C:\Users\VM\Mappe1.xlsx
2013-12-24 00:34 - 2013-11-07 20:49 - 00013712 _____ C:\Users\VM\Brief Claudia Klein.dotx
2013-12-24 00:34 - 2013-06-26 22:12 - 00023235 _____ C:\Users\VM\Kopie von 3-Monatsübersicht Tulpenweg.xlsx
2013-12-24 00:34 - 2013-03-18 12:38 - 00035840 ___SH C:\Users\VM\Thumbs.db
2013-12-24 00:34 - 2011-10-15 12:54 - 00013642 _____ C:\Users\VM\Briefbogen CK.dotx
2013-12-24 00:33 - 2013-12-26 19:47 - 00000000 ____D C:\Users\VM\My Digital Editions
2013-12-24 00:33 - 2013-12-26 19:45 - 00000000 ____D C:\Users\VM\Kestrel
2013-12-24 00:33 - 2013-12-26 19:45 - 00000000 ____D C:\Users\VM\Epubsoft
2013-12-24 00:33 - 2013-12-26 19:45 - 00000000 ____D C:\Users\VM\ePub DRM Removal
2013-12-24 00:33 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\samsung
2013-12-24 00:33 - 2013-12-22 23:43 - 00000000 ____D C:\Users\VM\PDF Architect Files

==================== One Month Modified Files and Folders =======

2014-01-23 22:10 - 2014-01-23 22:09 - 00028117 _____ C:\Users\VM\Desktop\FRST.txt
2014-01-23 22:08 - 2014-01-23 22:08 - 00000000 ____D C:\FRST
2014-01-23 22:08 - 2006-11-02 13:47 - 00003344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-23 22:08 - 2006-11-02 13:47 - 00003344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-23 22:07 - 2014-01-23 22:07 - 01222144 _____ (Farbar) C:\Users\VM\Desktop\FRST.exe
2014-01-23 22:07 - 2014-01-15 21:48 - 00000000 ____D C:\Program Files\GfK Internet-Monitor
2014-01-23 21:40 - 2009-06-14 07:52 - 01158242 _____ C:\Windows\WindowsUpdate.log
2014-01-23 17:46 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Roaming\newnext.me
2014-01-21 21:43 - 2013-12-24 00:40 - 00000000 ___RD C:\Users\VM\Eigene Bilder
2014-01-20 21:58 - 2010-03-07 20:31 - 00000000 ____D C:\ProgramData\Lx_cats
2014-01-20 14:58 - 2008-01-21 08:16 - 01596168 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-19 23:13 - 2014-01-05 22:37 - 00000000 ____D C:\Users\VM\Desktop\Handybilder
2014-01-19 22:27 - 2010-03-07 21:06 - 00399564 _____ C:\ProgramData\lxeeJSW.log
2014-01-19 14:58 - 2011-02-07 20:19 - 00007916 _____ C:\Users\VM\AppData\Local\d3d9caps.dat
2014-01-18 00:27 - 2014-01-17 23:16 - 00000000 ____D C:\Users\VM\Desktop\Mallorca
2014-01-18 00:27 - 2013-12-21 21:16 - 00008260 _____ C:\Windows\setupact.log
2014-01-17 23:43 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\.gimp-2.8
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\AppData\Local\gegl-0.2
2014-01-17 23:28 - 2009-06-28 17:16 - 00000000 ____D C:\Users\VM
2014-01-16 21:10 - 2014-01-16 21:10 - 00000000 ____D C:\Windows\LastGood
2014-01-16 21:10 - 2010-03-07 20:25 - 00226419 _____ C:\ProgramData\lxeescan.log
2014-01-16 21:09 - 2009-02-02 12:21 - 00000000 ____D C:\Windows\system32\RTCOM
2014-01-16 21:08 - 2009-06-14 08:05 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2014-01-16 21:07 - 2013-12-21 21:48 - 01069598 _____ C:\Windows\PFRO.log
2014-01-16 21:07 - 2009-02-02 13:15 - 00000147 _____ C:\Windows\system32\agent.log
2014-01-16 21:05 - 2009-07-02 00:19 - 00010652 _____ C:\Windows\bthservsdp.dat
2014-01-16 21:02 - 2009-02-02 12:23 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-01-16 21:02 - 2009-02-02 12:17 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2014-01-16 17:45 - 2014-01-16 17:45 - 00000721 _____ C:\Users\VM\Desktop\Finca Cavalli.kmz
2014-01-16 14:25 - 2009-06-28 17:19 - 00000000 ____D C:\Users\VM\AppData\Local\Google
2014-01-16 14:24 - 2009-02-02 12:44 - 00000000 ____D C:\Program Files\Google
2014-01-16 05:53 - 2014-01-16 05:23 - 00000000 ____D C:\Program Files\GfK-ProxyService
2014-01-16 03:11 - 2013-07-22 23:17 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 03:09 - 2014-01-09 23:54 - 00000000 ____D C:\Program Files\McAfee Security Scan
2014-01-16 03:01 - 2006-11-02 11:24 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-10 00:07 - 2013-12-25 14:49 - 00000350 ____H C:\Windows\Tasks\avast! Emergency Update.job
2014-01-10 00:07 - 2013-12-25 14:43 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00180248 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2014-01-10 00:06 - 2013-12-25 14:43 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-10 00:06 - 2013-12-25 14:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee
2014-01-09 23:54 - 2011-06-02 21:31 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-01-09 23:54 - 2009-06-28 22:44 - 00000000 ____D C:\Users\VM\AppData\Local\Adobe
2014-01-09 23:52 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\Mobogenie
2014-01-09 23:52 - 2014-01-09 23:49 - 00000000 ____D C:\Program Files\Mobogenie
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\Documents\Mobogenie
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\genienext
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\cache
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\.android
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 _____ C:\Users\VM\daemonprocess.txt
2014-01-09 23:49 - 2014-01-09 23:49 - 00000000 ____D C:\Users\VM\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Image Converter
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Foxtab
2014-01-09 22:31 - 2014-01-09 22:31 - 00673168 _____ (                                                            ) C:\Users\VM\Desktop\ImageEditorSetup.exe
2014-01-06 23:27 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2014-01-03 08:56 - 2014-01-03 08:56 - 00000427 _____ C:\Users\VM\Desktop\Dateien von CK.lnk
2014-01-02 22:46 - 2014-01-02 22:46 - 00000000 ____D C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-01-01 21:05 - 2014-01-01 21:01 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-01 20:53 - 2014-01-01 20:51 - 90396104 _____ (The GIMP Team                                              ) C:\Users\VM\Downloads\gimp-2.8.10-setup.exe
2013-12-31 14:06 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-12-31 13:53 - 2013-12-31 13:53 - 00000000 ____D C:\Program Files\MyFree Codec
2013-12-30 20:36 - 2013-12-30 20:35 - 00000000 ____D C:\Program Files\QuickTime
2013-12-30 20:35 - 2009-10-27 01:02 - 00000000 ____D C:\ProgramData\Apple Computer
2013-12-30 20:31 - 2013-12-30 20:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-30 20:30 - 2013-12-30 20:30 - 00000000 ____D C:\Program Files\Apple Software Update
2013-12-30 20:30 - 2009-10-27 01:00 - 00000000 ____D C:\ProgramData\Apple
2013-12-30 20:22 - 2013-12-30 20:21 - 41404760 _____ (Apple Inc.) C:\Users\VM\Downloads\QuickTimeInstaller.exe
2013-12-29 21:57 - 2011-05-29 11:57 - 00000000 ____D C:\ProgramData\Netzmanager
2013-12-27 01:14 - 2013-12-27 01:14 - 00000509 _____ C:\Users\VM\Desktop\Eigene Bilder.lnk
2013-12-26 23:21 - 2013-12-26 13:02 - 616354938 _____ C:\Users\VM\Handy-Bilder 381.mp4
2013-12-26 22:45 - 2009-07-24 21:03 - 00000000 ____D C:\Users\VM\Option
2013-12-26 19:50 - 2013-12-26 19:50 - 00161608 _____ C:\Windows\Minidump\Mini122613-01.dmp
2013-12-26 19:50 - 2013-12-25 17:05 - 450556947 _____ C:\Windows\MEMORY.DMP
2013-12-26 19:50 - 2010-01-11 00:25 - 00000000 ____D C:\Windows\Minidump
2013-12-26 19:48 - 2013-12-24 00:34 - 00000000 ____D C:\Users\VM\Corel User Files
2013-12-26 19:48 - 2013-12-24 00:34 - 00000000 ____D C:\Users\VM\Azwsoft
2013-12-26 19:47 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\My Digital Editions
2013-12-26 19:45 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\Kestrel
2013-12-26 19:45 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\Epubsoft
2013-12-26 19:45 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\ePub DRM Removal
2013-12-26 19:37 - 2009-02-02 13:00 - 00000000 ____D C:\Program Files\Acer GameZone
2013-12-26 19:35 - 2008-01-21 08:15 - 00000000 ____D C:\Windows\WindowsMobile
2013-12-26 19:06 - 2013-12-15 00:38 - 00000000 ____D C:\Users\VM\Tracing
2013-12-25 17:05 - 2013-12-25 17:05 - 00161720 _____ C:\Windows\Minidump\Mini122513-01.dmp
2013-12-25 14:44 - 2013-12-25 14:44 - 00000000 ____D C:\Users\VM\AppData\Roaming\AVAST Software
2013-12-25 14:42 - 2013-12-25 14:43 - 00049944 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-12-25 14:41 - 2013-12-25 14:41 - 00000000 ____D C:\Program Files\AVAST Software
2013-12-25 14:40 - 2013-12-25 14:40 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-25 14:35 - 2013-12-25 14:33 - 85269544 _____ (AVAST Software) C:\Users\VM\Downloads\avast_free_antivirus_setup_9.0.2006.159.exe
2013-12-25 14:29 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\spool
2013-12-25 14:27 - 2012-10-16 17:04 - 00000000 ____D C:\ProgramData\Avira
2013-12-25 14:23 - 2010-11-26 22:48 - 00000000 ____D C:\Users\VM\Documents\Samsung
2013-12-25 14:23 - 2010-04-25 22:16 - 00000000 ____D C:\Users\VM\Documents\VirtualDJ
2013-12-25 14:23 - 2010-01-11 10:27 - 00000000 __RSD C:\Users\VM\Documents\My Stationery
2013-12-25 14:23 - 2009-12-12 19:53 - 00000000 ____D C:\Users\VM\Documents\Quicksteuer
2013-12-25 14:22 - 2013-06-08 20:43 - 00000000 ____D C:\Users\VM\Documents\Freemake
2013-12-25 14:22 - 2012-12-09 18:38 - 00000000 ____D C:\Users\VM\Documents\Medion
2013-12-25 14:21 - 2011-05-29 22:15 - 00000000 ____D C:\Users\VM\Documents\DVDVideoSoft
2013-12-25 14:20 - 2012-11-07 22:23 - 00000000 ____D C:\Users\VM\Documents\Amazon MP3
2013-12-25 03:12 - 2009-02-02 12:28 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-25 03:12 - 2006-11-02 11:23 - 00000301 _____ C:\Windows\win.ini
2013-12-24 00:34 - 2013-12-24 00:34 - 00000000 ____D C:\Users\VM\Scanner Treiber
2013-12-24 00:33 - 2013-12-24 00:33 - 00000000 ____D C:\Users\VM\samsung
2013-12-24 00:12 - 2009-06-28 23:58 - 00139936 _____ C:\Windows\system32\GDIPFONTCACHEV1.DAT
2013-12-24 00:10 - 2006-11-02 13:47 - 00492008 _____ C:\Windows\system32\FNTCACHE.DAT

Files to move or delete:
====================
C:\Users\VM\AppData\Roaming\desktop.ini


Some content of TEMP:
====================
C:\Users\VM\AppData\Local\Temp\18039uninstall.exe
C:\Users\VM\AppData\Local\Temp\avgnt.exe
C:\Users\VM\AppData\Local\Temp\ose00000.exe
C:\Users\VM\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\VM\AppData\Local\Temp\Sqlite3.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-16 21:16

==================== End Of Log ============================

--- --- ---


Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 23-01-2014
Ran by VM at 2014-01-23 22:12:51
Running from C:\Users\VM\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================


3Planesoft Screensaver Manager 1.2 (Version: 1.2 - 3Planesoft)
AAV 6.0.00.15 (Version:  - )
ABBYY FineReader 6.0 Sprint (Version: 6.00.2146.41621 - ABBYY Software House)
Acer Arcade Deluxe (Version: 2.1.5529 - CyberLink Corp.)
Acer Arcade Deluxe (Version: 2.1.5529 - CyberLink Corp.) Hidden
Acer Bio Protection
Acer Crystal Eye Webcam 3.0.6.3 (Version: 3.0.6.3 - SuYin)
Acer eAudio Management (Version: 3.0.3008 - CyberLink Corp.)
Acer eDataSecurity Management (Version: 3.0.3065 - Egis Inc.)
Acer Empowering Technology (Version: 3.0.3009 - Acer Incorporated)
Acer ePower Management (Version: 3.0.3014 - Acer Incorporated)
Acer eRecovery Management (Version: 3.0.3014 - Acer Incorporated)
Acer eSettings Management (Version: 3.0.3011 - Acer Incorporated)
Acer GridVista (Version: 2.72.317 - )
Acer Mobility Center Plug-In (Version: 3.0.3000 - Acer Inc.)
Acer Product Registration (Version: 3.0.0.10 - Acer Incorporated)
Acer ScreenSaver (Version: 1.13.1301 - Acer Inc.)
Acer VCM (Version: 3.2.3002 - Acer Incorporated)
Adobe Acrobat 9 Pro - English, Français, Deutsch (Version: 9.0.0 - Adobe Systems) Hidden
Adobe Flash Player 11 ActiveX (Version: 11.1.102.55 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader for Pocket PC 2.0 (Version: 2.0 - Adobe Systems)
Adobe Reader for Pocket PC 2.0 (Version: 2.0 - Adobe Systems) Hidden
Adobe Reader X (10.1.9) - Deutsch (Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (Version: 11.5.9.615 - Adobe Systems, Inc.)
Advertising Center (Version: 0.0.0.1 - Nero AG) Hidden
Agere Systems HDA Modem (Version:  - Agere Systems)
Amazon MP3-Downloader 1.0.17 (Version: 1.0.17 - Amazon Services LLC)
Apple Application Support (Version: 2.3.4 - Apple Inc.)
Apple Software Update (Version: 2.1.3.127 - Apple Inc.)
Ashampoo WinOptimizer 6.60 (Version: 6.6.0 - Ashampoo GmbH & Co. KG)
Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver (Version: 1.0.0.30 - Atheros Communications Inc.)
avast! Free Antivirus (Version: 9.0.2011 - Avast Software)
BabylonObjectInstaller (Version: 2.0.0.2 - Babylon Ltd)
BPM-Studio 4 Profi (Version:  - )
C:\Program Files\Acer GameZone\GameConsole (Version: 2.0.1.4 - Oberon Media, Inc.)
CCleaner (Version: 4.06 - Piriform)
Classic PhoneTools (Version: 9.00 - Avanquest software)
Classic PhoneTools (Version: 9.00 - BVRP Software) Hidden
CorelDRAW Graphics Suite X3 (Version: 13.0 - Corel Corporation)
CyberLink PowerDirector (Version: 6.5.3023d - CyberLink Corp.)
CyberLink PowerDirector (Version: 6.5.3023d - CyberLink Corp.) Hidden
DATA BECKER - Die große CD-Druckerei (Version:  - )
DE (Version: 13.0 - Corel Corporation) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version:  - Microsoft)
DHTML Editing Component (Version: 6.02.0001 - Microsoft Corporation)
DivX-Setup (Version: 2.6.1.84 - DivX, LLC)
eBay Toolbar (Version: 2.50.12.4 - eBay)
eSobi v2 (Version: 2.0.3.000223 - esobi Inc.)
eSobi v2 (Version: 2.0.3.000223 - esobi Inc.) Hidden
Feedback Tool (Version: 1.2.0 - Microsoft Corporation)
Fireplace 3D Screensaver 1.0 (Version: 1.0 - 3Planesoft)
FontNav (Version: 5.0 - Corel Corporation) Hidden
Free Studio version 2013 (Version: 6.1.7.717 - DVDVideoSoft Ltd.)
Freemake Video Converter Version 4.0.1 (Version: 4.0.1 - Ellora Assets Corporation)
Galapago (Version:  - Oberon Media)
GameXN GO (HKCU Version:  - GameXN AS)
GfK Internet-Monitor (Version: 13.4.53 - GfK)
GfK Proxy Service (Version:  - )
GIMP 2.8.10 (Version: 2.8.10 - The GIMP Team)
Go-Go Gourmet (Version:  - Oberon Media)
Google Chrome (Version: 32.0.1700.76 - Google Inc.)
Google Earth (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Haufe iDesk-Service (Version: 11.07.19.8023 - Haufe)
Heroes of Hellas (Version:  - Oberon Media)
HSPA USB MODEM (Version:  - Alcatel)
Image Editor Packages (HKCU Version:  - ) <==== ATTENTION
ImagXpress (Version: 7.0.74.0 - Nero AG) Hidden
Intel PROSet Wireless (Version:  - ) Hidden
Intel(R) PROSet/Wireless WiFi-Software (Version: 12.00.0004 - Intel(R) Corporation)
Intel® Matrix Storage Manager (Version:  - Intel Corporation)
IrfanView (remove only) (Version:  - )
ITECIR (Version: 1.6 - ITE)
Java 7 Update 45 (Version: 7.0.450 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 2 (Version: 1.6.0.20 - Sun Microsystems, Inc.)
Java(TM) 6 Update 35 (Version: 6.0.350 - Oracle)
JMicron JMB38X Flash Media Controller (Version: 1.00.12.07 - JMicron Technology Corp.)
Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Launch Manager (Version: 3.0.02 - Acer Inc.)
Lexmark  (Version: 1.0.0.0 - )
Lexmark Pro700 Series (Version:  - Lexmark International, Inc.)
Lexmark Symbolleiste (Version: 4.63.37.0 - )
Lexmark Tools for Office (Version: 1.29.0.0 - )
Lexware Info Service (Version: 2.90.00.0009 - Haufe-Lexware GmbH & Co.KG)
LightScribe  1.4.142.1 (Version: 1.4.142.1 - hxxp://www.lightscribe.com) Hidden
Macromedia FreeHand 9 (Version: 9 - Macromedia)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation)
McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.)
MEDION GoPal Assistant (Version: 6.2.0.12196 - MEDION)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft IntelliPoint 7.0 (Version: 7.0.260.0 - Microsoft)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (Version: 08.05.0822 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0 - Microsoft Corp.)
Mobipocket Reader 6.2 (Version: 6.2.608 - Mobipocket.com)
MSVC80_x86 (Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0 - Microsoft Corporation)
MyFreeCodec (HKCU Version:  - )
Mythic Mahjong (Version:  - Oberon Media)
Nero 12 (Version: 12.0.02900 - Nero AG)
Nero Audio Pack 1 (Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero BackItUp (Version: 12.0.6002 - Nero AG) Hidden
Nero BackItUp (Version: 4.0.0.0 - Nero AG) Hidden
Nero BackItUp 4 (Version:  - Nero AG)
Nero BackItUp Help (CHM) (Version: 12.0.8000 - Nero AG) Hidden
Nero Blu-ray Player (Version: 12.0.17700 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (Version: 12.0.9000 - Nero AG) Hidden
Nero Burning ROM (Version: 12.0.28001 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden
Nero ControlCenter (Version: 11.0.15500 - Nero AG) Hidden
Nero ControlCenter (Version: 9.0.0.1 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero Core Components (Version: 11.0.18900 - Nero AG) Hidden
Nero Disc Menus Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Effects Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Express (Version: 12.0.28001 - Nero AG) Hidden
Nero Express Help (CHM) (Version: 12.0.5000 - Nero AG) Hidden
Nero Installer (Version: 2.0.0.1 - Nero AG) Hidden
Nero Kwik Media (Version: 1.18.19600 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero Kwik Themes Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero PiP Effects Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Recode (Version: 12.0.31001 - Nero AG) Hidden
Nero Recode Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero RescueAgent (Version: 12.0.10002 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero SharedVideoCodecs (Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (Version: 11.0.11800.31.0 - Nero AG) Hidden
Nero Video (Version: 12.0.8000 - Nero AG) Hidden
Nero Video Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
neroxml (Version: 1.0.0 - Nero AG) Hidden
Netzmanager (Version: 1.071 - Deutsche Telekom AG)
Netzmanager (Version: 1.071 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
NTI Backup Now 5 (Version: 5.1.2.606 - NewTech Infosystems)
NTI Backup Now Standard (Version: 5.1.2.606 - NewTech Infosystems) Hidden
NTI Media Maker 8 (Version: 8.0.2.6329 - NewTech Infosystems)
NTI Media Maker 8 (Version: 8.0.2.6329 - NewTech Infosystems) Hidden
NVIDIA Drivers (Version: 1.10 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.85.551 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.09.0203 - NVIDIA Corporation)
NVIDIA Systemsteuerung 306.97 (Version: 306.97 - NVIDIA Corporation) Hidden
Office-Bibliothek (Version: 5.00.4 - Bibliographisches Institut & F.A. Brockhaus AG)
Orion (Version: 2.0.1 - Convesoft)
PdaNet for Android 3.50 (Version:  - June Fabrics Technology Inc)
PhotoNow! (Version: 1.1.4619 - CyberLink Corp.)
PixiePack Codec Pack (Version: 1.1.1200.0 - None)
Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden
Putt Mania (Version:  - Oberon Media)
QuickSteuer 2011 (Version: 17.05.00.0003 - Haufe-Lexware GmbH & Co.KG)
QuickSteuer 2012 COMPUTERBILD Edition (Version: 18.07.00.0008 - Haufe-Lexware GmbH & Co.KG)
QuickSteuer 2013 (Version: 19.06.00.0003 - Haufe-Lexware GmbH & Co.KG)
QuickSteuer Wissens-Center 2011 (Version: 17.10.0.0 - Haufe-Lexware GmbH & Co. KG)
QuickSteuer Wissens-Center 2012 (Version: 18.1.0.0 - Haufe-Lexware GmbH & Co. KG)
QuickTime (Version: 7.74.80.86 - Apple Inc.)
Radiotracker (Version: 6.2.13700.0 - RapidSolution Software AG)
Realtek High Definition Audio Driver (Version: 6.0.1.6167 - Realtek Semiconductor Corp.)
Samsung Kies (Version: 2.0.1.11053_99 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.0.1.11053_99 - Samsung Electronics Co., Ltd.) Hidden
Samsung PC Studio 3 (Version: 3.0.0.80502 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (Version: 1.3.2410.0 - SAMSUNG Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
Servicepack Datumsaktualisierung (Version: 1.00.00.0005 - Haufe-Lexware) Hidden
Skype™ 6.0 (Version: 6.0.126 - Skype Technologies S.A.)
StarMoney (Version: 1.0 - StarFinanz) Hidden
StarMoney (Version: 2.0 - StarFinanz) Hidden
StarMoney (Version: 3.0.0.124 - StarFinanz) Hidden
Synaptics Pointing Device Driver (Version: 14.0.12.0 - Synaptics Incorporated)
TuneUp Utilities Language Pack (de-DE) (Version: 9.0.6030.1 - TuneUp Software) Hidden
TVgenial 4.10 (Version:  - )
Uniblue DiskRescue 2009 (Version: 1.0.0 - Uniblue Systems) Hidden
Uniblue DriverScanner 2009 (Version: 2.0.0.1 - Uniblue Systems Ltd.) Hidden
Uninstall 1.0.0.1 (Version:  - )
Unity Web Player (HKCU Version:  - Unity Technologies ApS)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version:  - Microsoft)
Update Manager (Version: 4.60 - Corel Corporation) Hidden
Validity Sensors software (Version: 2.7.44 - Validity Sensors, Inc.)
VBA (Version: 6.2 - Corel Corporation) Hidden
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Virtual DJ - Atomix Productions (Version:  - )
VirtualCloneDrive (Version:  - Elaborate Bytes)
VirtualDJ PRO Full (Version: 7.0.4 - Atomix Productions)
Welcome App (Start-up experience) (Version: 12.0.15000 - Nero AG) Hidden
Windows Live Call (Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (Version: 14.0.8098.930 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live ID-Anmelde-Assistent (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Mail (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter: Treiberupdate (Version: 6.1.6965.0 - Microsoft Corporation)
WinRAR (Version:  - )
Xara Photo & Graphic Designer 6 (Version: 6.1.3.25152 - Xara Group Ltd)
Xara Photo & Graphic Designer 6 (Version: 6.1.3.25152 - Xara Group Ltd) Hidden

==================== Restore Points  =========================

26-12-2013 18:11:50 Removed Bonjour
26-12-2013 18:32:54 QuickSteuer Wissens-Center 2011 wird entfernt
28-12-2013 14:13:53 Windows Update
30-12-2013 19:31:45 Installed QuickTime
31-12-2013 17:18:20 Windows Update
04-01-2014 00:16:15 Windows Update
07-01-2014 17:44:34 Windows Update
09-01-2014 23:03:34 avast! antivirus system restore point
15-01-2014 12:06:04 Windows Update
16-01-2014 02:00:30 Windows Update
21-01-2014 12:52:21 Windows Update

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost
::1            localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {27EC1DEA-57EC-423F-AA44-2D88E86D382D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {549E9554-DB95-4E78-B10B-69AF49034DE0} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert
Task: {5A7F5460-B140-4D8D-B9EB-39C5E1DF451E} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {634EEDCC-710F-464A-A305-32334C8EE65A} - System32\Tasks\Uniblue DiskRescue 2009 => C:\Program Files\Uniblue\DiskRescue\UBDiskRescue.exe [2008-09-10] (Uniblue)
Task: {69623E90-07BC-4041-A70B-3E1A7D6BE87B} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2009-06-01] (Microsoft Corporation)
Task: {69682880-4C7B-4ADD-812B-0A11C2C1103B} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {73CF916C-8B98-4169-A0A9-2974C54CCBE3} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {75D79F72-E960-4A77-92D7-8F1A2A8EBD2C} - System32\Tasks\InstallShield Software-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2005-08-11] (Macrovision Corporation)
Task: {8B1C49D2-71EA-4E0F-A58D-6E463B027166} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-30] (Google Inc.)
Task: {A43163DD-771C-4F90-A1C5-827EF9792C8B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {B19AD1E9-68EC-4259-8132-F36461A0F0E0} - System32\Tasks\{F62FF463-32EE-4AB5-91B3-768D3C5905BB} => C:\Program Files\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {C0276B33-DD07-41FB-B1CC-1F7B41746315} - System32\Tasks\{B54E3089-7E05-4657-8ADF-FD6ACB82CC21} => C:\Program Files\Skype\\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {CD85FE0E-256B-4185-968B-B2E859598A46} - System32\Tasks\{6D53D572-09B3-432B-8B05-6B0C41F87FAC} => C:\Program Files\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {E1FD0C7C-6741-43CA-952C-72310DE39797} - System32\Tasks\{57C162A0-E3B0-4C81-81C7-3B784833FC42} => C:\Program Files\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {E765ADB2-FECE-4ECB-9724-E5AF8F8EFB3F} - System32\Tasks\{EDAB9B0E-ACA4-4294-AA65-0A1FE2741AEF} => Iexplore.exe hxxp://ui.skype.com/ui/0/4.1.0.179/de/abandoninstall?page=tsChrome&amp;installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:offered-notinstalled
Task: {E7D075D2-BF1B-45AC-BFE2-F0B692466C48} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-30] (Google Inc.)
Task: {E97F56B4-78D5-4E60-AE6B-C367FFE5A3D3} - System32\Tasks\Update Manager => C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [2011-07-31] (Haufe-Lexware GmbH & Co. KG)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cef1e721a369a0.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Uniblue DiskRescue 2009.job => C:\Program Files\Uniblue\DiskRescue\UBDiskRescue.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2008-05-22 03:27 - 2011-08-19 02:09 - 00528384 _____ () C:\Program Files\Lexmark Toolbar\toolband.dll
2008-05-22 03:28 - 2011-08-19 02:25 - 00471040 _____ () C:\Program Files\Lexmark Toolbar\resource.dll
2010-03-07 20:25 - 2009-05-18 08:29 - 00819200 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\lxeeptpc.dll
2010-03-07 20:25 - 2009-11-04 08:14 - 00165376 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\lxeedrui.dll
2010-03-07 20:25 - 2009-06-07 19:40 - 00167936 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\lxeePRPR.DLL
2011-08-28 14:21 - 2011-03-10 10:52 - 00636800 _____ () C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\ContextHandler.dll
2009-06-29 20:45 - 2008-09-16 19:18 - 00132608 _____ () C:\Program Files\WinRAR\rarext.dll
2008-07-29 17:52 - 2008-07-29 17:52 - 00227888 _____ () C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ShowErrMsg.dll
2009-02-02 12:43 - 2009-02-02 12:43 - 00036864 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Utility\3.0.3009.0__4df5dcab8860d239\Framework.Utility.dll
2009-02-02 12:43 - 2009-02-02 12:43 - 00061440 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Library\3.0.3009.0__3036420f80dd6947\Framework.Library.dll
2009-02-02 12:43 - 2009-02-02 12:43 - 00009216 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Model.ControllerInterface\3.0.3009.0__d842b71b4d6ed079\Framework.Model.ControllerInterface.dll
2010-03-07 20:22 - 2009-03-30 07:37 - 00708608 _____ () C:\Program Files\Lexmark Pro700 Series\Epwizard.DLL
2010-03-07 20:22 - 2009-03-30 07:35 - 00159744 _____ () C:\Program Files\Lexmark Pro700 Series\customui.dll
2010-03-07 20:22 - 2009-03-30 07:35 - 00118784 _____ () C:\Program Files\Lexmark Pro700 Series\Eputil.DLL
2010-03-07 20:22 - 2009-03-30 07:35 - 00139264 _____ () C:\Program Files\Lexmark Pro700 Series\Imagutil.DLL
2010-03-07 20:22 - 2009-03-30 07:35 - 00061440 _____ () C:\Program Files\Lexmark Pro700 Series\Epfunct.DLL
2010-03-07 20:22 - 2009-06-23 06:09 - 02203648 _____ () C:\Program Files\Lexmark Pro700 Series\EPWizRes.dll
2010-03-07 20:22 - 2009-06-23 06:10 - 00045056 _____ () C:\Program Files\Lexmark Pro700 Series\epstring.dll
2010-03-07 20:22 - 2009-06-23 06:11 - 00102400 _____ () C:\Program Files\Lexmark Pro700 Series\EPOEMDll.dll
2010-03-07 20:22 - 2009-04-07 14:25 - 00409600 _____ () C:\Program Files\Lexmark Pro700 Series\iptk.dll
2010-03-07 20:22 - 2009-03-02 09:25 - 00151552 _____ () C:\Program Files\Lexmark Pro700 Series\lxeeptp.dll
2010-03-07 20:25 - 2009-11-04 08:14 - 00236032 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\lxeedr.dll
2010-03-07 20:22 - 2010-04-01 11:23 - 00389120 _____ () C:\Program Files\Lexmark Pro700 Series\lxeescw.dll
2010-03-07 20:25 - 2009-05-27 07:16 - 00192512 _____ () C:\Windows\system32\spool\drivers\w32x86\3\lxeedatr.dll
2010-03-07 20:22 - 2010-04-01 11:24 - 01159168 _____ () C:\Program Files\Lexmark Pro700 Series\lxeeDRS.dll
2010-03-07 20:22 - 2009-03-10 00:43 - 00155648 _____ () C:\Program Files\Lexmark Pro700 Series\lxeecaps.dll
2010-03-07 20:10 - 2009-02-20 09:48 - 00299008 _____ () C:\Windows\system32\lxeesm.dll
2010-03-07 20:10 - 2009-04-28 08:56 - 00024064 _____ () C:\Windows\system32\lxeesmr.dll
2010-03-07 20:22 - 2009-12-09 15:03 - 00561152 _____ () C:\Program Files\Lexmark Pro700 Series\lxeealm.dll
2013-08-29 01:25 - 2013-08-29 01:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-12-25 14:42 - 2013-12-25 14:42 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-31 14:04 - 2013-12-31 14:04 - 01952256 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\abbba0f399508efdbeaf78b2e2fa7b03\Kies.UI.ni.dll
2013-12-31 14:04 - 2013-12-31 14:04 - 00079360 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\6f25a20174765872519f821c6c68bfda\Kies.MVVM.ni.dll
2013-12-31 14:04 - 2013-12-31 14:04 - 00189952 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\891822cfc054262435c02192bb220192\Kies.Common.DeviceServiceLib.Interface.ni.dll
2013-12-31 14:05 - 2013-12-31 14:05 - 00367104 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePhoto\0cb1ca6d0bc2fbc4225ec8b991eecd07\DevicePhoto.ni.dll
2013-12-31 14:06 - 2013-12-31 14:06 - 00301568 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceVideo\1f0d8f012eae2b7353c8d594b2a06e9d\DeviceVideo.ni.dll
2013-12-31 14:06 - 2013-12-31 14:06 - 00616448 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePodcast\3eb0df72e19c269e7ec4dc4a2c130521\DevicePodcast.ni.dll
2013-12-31 14:06 - 2013-12-31 14:06 - 00307200 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DummyStorePlugin\9e97c3b33aa7fb9d900bca4f6d93ec9e\DummyStorePlugin.ni.dll
2013-12-31 14:06 - 2013-12-31 14:06 - 14972928 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\642ba04dfd0cf6b5a4bd768ab404eb4f\Kies.Theme.ni.dll
2013-12-31 14:05 - 2013-12-31 14:05 - 00581632 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\42ab5ed8c70495af14fc9a8e38e5383a\Kies.Common.DeviceServiceLib.FileService.ni.dll
2013-12-31 14:04 - 2013-12-31 14:04 - 00046592 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\fb36527133c6a9e51f53aab9ca2faabe\Kies.Common.DeviceServiceLib.FirmwareUpdate.FirmwareUpdateAgentHelper.ni.dll
2013-12-31 14:05 - 2013-12-31 14:05 - 01002496 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceCommonLib\06251528bbadcb3da726d324a41e710f\DeviceCommonLib.ni.dll
2013-12-31 14:05 - 2013-12-31 14:05 - 00232960 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\c5efe841e2998c266e0f5e29bed04b55\ASF_cSharpAPI.ni.dll
2009-06-14 08:13 - 2007-09-11 10:12 - 00475136 _____ () C:\Program Files\Acer\Acer VCM\AcerControl.dll
2014-01-16 21:19 - 2014-01-16 21:19 - 04591616 _____ () C:\Users\VM\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libglesv2.dll
2014-01-16 21:19 - 2014-01-16 21:19 - 00112128 _____ () C:\Users\VM\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libegl.dll
2014-01-16 20:06 - 2014-01-11 11:29 - 04055320 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.76\pdf.dll
2014-01-16 20:06 - 2014-01-11 11:29 - 00399640 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll
2014-01-16 20:06 - 2014-01-11 11:28 - 01634584 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.76\ffmpegsumo.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf
2013-02-14 15:46 - 2013-02-14 15:46 - 01044048 _____ () C:\Program Files\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
2014-01-16 20:06 - 2014-01-11 11:29 - 13615896 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:05113FB9
AlternateDataStreams: C:\ProgramData\Temp:430C6D84
AlternateDataStreams: C:\ProgramData\Temp:4D066AD2
AlternateDataStreams: C:\ProgramData\Temp:5D7E5A8F
AlternateDataStreams: C:\ProgramData\Temp:C99F6ECA
AlternateDataStreams: C:\ProgramData\Temp:DAFD38AE
AlternateDataStreams: C:\ProgramData\Temp:DFC5A2B2
AlternateDataStreams: C:\ProgramData\Temp:EEFF768F
AlternateDataStreams: C:\Users\VM\Handy-Bilder 381.mp4:TOC.WMV

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: isatap.{E8D12279-C9FE-4919-B3C2-94C4123E65E8}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: isatap.{E8D12279-C9FE-4919-B3C2-94C4123E65E8}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: isatap.home
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-ISATAP-Adapter #4
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/20/2014 09:10:02 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung CLMLSvc.exe, Version 2.1.1901.0, Zeitstempel 0x486a3d0d, fehlerhaftes Modul CLMLSvc.exe, Version 2.1.1901.0, Zeitstempel 0x486a3d0d, Ausnahmecode 0xc0000005, Fehleroffset 0x00014984,
Prozess-ID 0xa68, Anwendungsstartzeit CLMLSvc.exe0.

Error: (01/16/2014 09:08:27 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 09:51:22 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 07:25:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/14/2014 08:44:17 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung lxeecoms.exe, Version 9.2.33.0, Zeitstempel 0x4b1ffc19, fehlerhaftes Modul lxeeserv.dll, Version 9.2.33.0, Zeitstempel 0x4b1ffdcd, Ausnahmecode 0xc0000005, Fehleroffset 0x0006bcd7,
Prozess-ID 0xb20, Anwendungsstartzeit lxeecoms.exe0.

Error: (01/10/2014 03:24:46 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/10/2014 00:03:32 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
  Generatordaten werden gesammelt

Kontext:
  Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
  Generatorname: System Writer
  Generatorinstanz-ID: {0216780d-cbb3-4380-acdc-cf1f5bd54025}

Error: (01/09/2014 08:01:49 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung lxeecoms.exe, Version 9.2.33.0, Zeitstempel 0x4b1ffc19, fehlerhaftes Modul lxeeserv.dll, Version 9.2.33.0, Zeitstempel 0x4b1ffdcd, Ausnahmecode 0xc0000005, Fehleroffset 0x0006bcd7,
Prozess-ID 0xb34, Anwendungsstartzeit lxeecoms.exe0.

Error: (01/04/2014 00:57:53 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung Explorer.EXE, Version 6.0.6002.18005, Zeitstempel 0x49e01da5, fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode 0xc0000005, Fehleroffset 0x076a251c,
Prozess-ID 0xce0, Anwendungsstartzeit Explorer.EXE0.

Error: (12/31/2013 01:58:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (01/22/2014 09:31:45 PM) (Source: Service Control Manager) (User: )
Description: 30000PlugPlay

Error: (01/21/2014 05:54:09 PM) (Source: Service Control Manager) (User: )
Description: 30000PlugPlay

Error: (01/21/2014 01:37:58 PM) (Source: Service Control Manager) (User: )
Description: 30000PlugPlay

Error: (01/20/2014 01:55:42 PM) (Source: Service Control Manager) (User: )
Description: 30000PlugPlay

Error: (01/19/2014 07:35:46 PM) (Source: DCOM) (User: )
Description: 1053WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (01/19/2014 07:35:46 PM) (Source: Service Control Manager) (User: )
Description: Windows Search%%1053

Error: (01/19/2014 07:35:46 PM) (Source: Service Control Manager) (User: )
Description: 30000Windows Search

Error: (01/19/2014 07:10:40 PM) (Source: Print) (User: CK-PC)
Description: Das Dokument OPs-CK.xls im Besitz von VM konnte nicht auf dem Drucker Lexmark Pro700 Series (Netzwerk) gedruckt werden. Versuchen Sie erneut, das Dokument zu drucken, oder starten Sie den Druckspooler erneut.
Datentyp: LEMF. Größe der Spooldatei in Bytes: 10350. Anzahl der gedruckten Bytes: 10350. Gesamtanzahl der Seiten des Dokuments: 1. Anzahl der gedruckten Seiten: 0. Clientcomputer: \\CK-PC. Vom Druckprozessor zurückgegebener Win32-Fehlercode: OPs-CK.xls0. OPs-CK.xls1

Error: (01/19/2014 06:30:57 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "VOLI4-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{E8D12279-C9FE-4919-B3C2-94C4123E6-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (01/18/2014 08:48:12 PM) (Source: Service Control Manager) (User: )
Description: Netzmanager Infrastruktur Informationssystem Dienst150001Neustart des Diensts


Microsoft Office Sessions:
=========================
Error: (01/20/2014 09:10:02 PM) (Source: Application Error)(User: )
Description: CLMLSvc.exe2.1.1901.0486a3d0dCLMLSvc.exe2.1.1901.0486a3d0dc000000500014984a6801cf12f6d4bc99fb

Error: (01/16/2014 09:08:27 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 09:51:22 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2014 07:25:34 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/14/2014 08:44:17 AM) (Source: Application Error)(User: )
Description: lxeecoms.exe9.2.33.04b1ffc19lxeeserv.dll9.2.33.04b1ffdcdc00000050006bcd7b2001cf0e0fb16e9ee4

Error: (01/10/2014 03:24:46 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/10/2014 00:03:32 AM) (Source: VSS)(User: )
Description: 0x80070005

Vorgang:
  Generatordaten werden gesammelt

Kontext:
  Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
  Generatorname: System Writer
  Generatorinstanz-ID: {0216780d-cbb3-4380-acdc-cf1f5bd54025}

Error: (01/09/2014 08:01:49 PM) (Source: Application Error)(User: )
Description: lxeecoms.exe9.2.33.04b1ffc19lxeeserv.dll9.2.33.04b1ffdcdc00000050006bcd7b3401cf062806c9fb65

Error: (01/04/2014 00:57:53 AM) (Source: Application Error)(User: )
Description: Explorer.EXE6.0.6002.1800549e01da5unknown0.0.0.000000000c0000005076a251cce001cf064a90a867c0

Error: (12/31/2013 01:58:55 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-07-22 21:35:04.411
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-22 21:35:03.879
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-22 21:28:34.355
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-22 21:28:33.853
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:08:50.063
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:08:49.499
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:05:35.967
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:05:35.492
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-09-26 00:33:23.763
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-09-26 00:33:23.345
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 65%
Total physical RAM: 3068.03 MB
Available physical RAM: 1043.82 MB
Total Pagefile: 6040.13 MB
Available Pagefile: 3303.05 MB
Total Virtual: 2047.88 MB
Available Virtual: 1913.67 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:144.04 GB) (Free:24.93 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:137.5 GB) (Free:131.03 GB) NTFS
Drive f: (SpanischMP3CD) (CDROM) (Total:0.27 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 4EBF5754)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=138 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=4 GB) - (Type=12)

==================== End Of Log ============================

LG
Claudia

schrauber 24.01.2014 14:34

Adware :)

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

Claudia K. 24.01.2014 23:15

Hi Schrauber,

erst mal bin ich entsetzt, dass ich hier tatsächlich fündig geworden bin, denn angeblich war der Rechner "sauber"...

Also hier schon mal das erste Log-File von Malwarebytes:
Code:

Malwarebytes Anti-Malware (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.24.06

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
VM :: CK-PC [Administrator]

Schutz: Aktiviert

24.01.2014 21:02:04
mbam-log-2014-01-24 (21-02-04).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 236998
Laufzeit: 27 Minute(n), 13 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 1
C:\Users\VM\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart.

Infizierte Registrierungsschlüssel: 3
HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Speedchecker Limited\PC Speed Up (PUP.Optional.PCSpeedUp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|NextLive (PUP.Optional.NextLive.A) -> Daten: C:\Windows\system32\rundll32.exe "C:\Users\VM\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0H1L1J1L1S1R1N -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 2
C:\Users\VM\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Löschen bei Neustart.
C:\Users\VM\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 4
C:\Users\VM\Desktop\ImageEditorSetup.exe (PUP.Optional.InstallCore) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\VM\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart.
C:\Users\VM\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\VM\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Der Rest folgt nach getaner Arbeit.

So ein Mist, Schrauber!

Mein PC bootet nicht mehr richtig hoch. Ich sollte nach dem Malwarebytes-Scan einen Neustart machen und jetzt hab ich den Salat. Das Passwort kann ich noch eingeben, danach bleibt der Bildschirm schwarz. Im abgesicherten Modus gehts zwar, aber dann kann ich nicht online gehen. HILFEEEE...


LG,
CLAUDIA

So ein Mist, Schrauber!

Mein PC bootet nicht mehr richtig hoch. Ich sollte nach dem Malwarebytes-Scan einen Neustart machen und jetzt hab ich den Salat. Das Passwort kann ich noch eingeben, danach bleibt der Bildschirm schwarz. Im abgesicherten Modus gehts zwar, aber dann kann ich nicht online gehen. HILFEEEE...


LG,
CLAUDIA

schrauber 25.01.2014 13:38

Wähle mal den abgesicherten Modus mit netzwerktreibern, dann kannste auch online gehen und den Rest der obigen Anleitung machen. Bekommen wir schon hin :)

Claudia K. 25.01.2014 20:08

Hi Schrauber,

Das ist ja mein Problem, dass ich eben leider NICHT online gehen kann. Beim Internet bekomme ich folgende Meldung: "Verbindung zum Proxyserver kann nicht hergestellt werden. " Fehlercode "ERR_PROXY_CONNECTION_FAILE D". Und wenn ich eMails abrufen will kommt diese Meldung:"Microsoft Office kann die Lizenz für diese Anwendung nicht überprüberprüfen. Fehler bei einem Reparaturversuch oder Abbruch durch den Benutzer. Sie Anwendung wird jetzt heruntergefahren. " Wenn mein Mann erfährt, dass der PC nicht mehr läuft, wird er sicher sehr sauer sein, denn es war vorher sein Rechner. .. :-(

Bekommen wir das wirklich wieder hin??? Bitte mach, dass er wieder läuft. ..

Liebe Grüße

Claudia

schrauber 26.01.2014 08:00

Klar. Du bist sicher im abgesicherten Modus mit Netzwerktreibern? Was passiert wenn Du nun in den normalen Modus booten willst? Hast DU nen Stick?

Dann AdwCleaner und JRT rüber mit dem Stick, laufen lassen nach Anleitung. Logs auf den Stick packen und hier posten.

Ebenso bitte nen frischen Scan mit FRST machen, Log auf den Stick hier posten.

Und nebenbei:

DU kannst da gar nix für. Rechner ist voll mit Adware, die wehrt sich gerne mal en bissl wenn man sie entfernen will. Is wie en guter Pickel oder ne Winterkirsche, aber das Teil bekommen wir schon ausgedrückt :)

Claudia K. 27.01.2014 21:56

Hi Schrauber,

ja, ich habe ALLE abgesicherten Modi ausprobiert.

Den ADW-Cleaner hatte ich mir gerade noch rechtzeitig vorher runtergeladen. Den hab ich jetzt laufen lassen, der Rechner fährt gerade wieder hoch und das sieht ganz gut aus.

Bei JRT gibt's ein anderes Problem, weil ich zur Zeit per Handy mit dir schreibe und nicht per Tablet. Ich habe zur Zeit kein Tablet. Mal sehen, ob ich das per Handy runterladen kann...

Leider hat sich nach dem Neustart des Rechners keine Lof-Datei geöffnet, ich muss die jetzt erst mal suchen. ..

Okay, es klappt:

JRT-LOGFILE:

[CODE] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows Vista (TM) Home Premium x86
Ran by VM on 27.01.2014 at 11:21:03,73
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2667981686-1106648099-187186479-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\caphyon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.01.2014 at 11:23:36,58
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~/CODE]

ADW-LOGFILE:

Code:

# AdwCleaner v3.017 - Bericht erstellt am 27/01/2014 um 11:00:04
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzername : VM - CK-PC
# Gestartet von : C:\Users\VM\Desktop\adwcleaner.exe
# Option : L鰏chen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gel鰏cht : C:\ProgramData\NCH Software
Ordner Gel鰏cht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Ordner Gel鰏cht : C:\Program Files\FoxTab
Ordner Gel鰏cht : C:\Program Files\Mobogenie
Ordner Gel鰏cht : C:\Program Files\myfree codec
Ordner Gel鰏cht : C:\Program Files\Common Files\DVDVideoSoft\TB
Ordner Gel鰏cht : C:\Users\VM\AppData\Local\genienext
Ordner Gel鰏cht : C:\Users\VM\AppData\Local\Mobogenie
Ordner Gel鰏cht : C:\Users\VM\AppData\Local\PackageAware
Ordner Gel鰏cht : C:\Users\VM\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Ordner Gel鰏cht : C:\Users\VM\Documents\Mobogenie
Datei Gel鰏cht : C:\END
Datei Gel鰏cht : C:\Windows\System32\Tasks\BrowserDefendert

***** [ Verkn黳fungen ] *****


***** [ Registrierungsdatenbank ] *****

[#] Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{549E9554-DB95-4E78-B10B-69AF49034DE0}
[#] Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{549E9554-DB95-4E78-B10B-69AF49034DE0}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\d
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\speedupmypc
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Wert Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Schl黶sel Gel鰏cht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Classes\TypeLib\{DB797681-40E0-11D2-9BD5-0060082AE372}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EC73EAE3-4B91-474E-AABE-6E96FB1B675F}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{98E94708-93C2-4C60-8F9C-ABECF0A1EDF0}
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E70EC461-31E1-4D56-B40F-B5FCE222BE5D}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Wert Gel鰏cht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gel鰏cht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Wert Gel鰏cht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gel鰏cht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Schl黶sel Gel鰏cht : HKCU\Software\Conduit
Schl黶sel Gel鰏cht : HKCU\Software\Myfree Codec
Schl黶sel Gel鰏cht : HKCU\Software\NCH Software
Schl黶sel Gel鰏cht : HKCU\Software\Uniblue
Schl黶sel Gel鰏cht : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB
Schl黶sel Gel鰏cht : HKLM\Software\AskTBar
Schl黶sel Gel鰏cht : HKLM\Software\Conduit
Schl黶sel Gel鰏cht : HKLM\Software\DataMngr
Schl黶sel Gel鰏cht : HKLM\Software\DivX\Install\Setup\WizardLayout\ConduitToolbar
Schl黶sel Gel鰏cht : HKLM\Software\DVDVideoSoftTB
Schl黶sel Gel鰏cht : HKLM\Software\Myfree Codec
Schl黶sel Gel鰏cht : HKLM\Software\Speedchecker Limited
Schl黶sel Gel鰏cht : HKLM\Software\Uniblue
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Schl黶sel Gel鰏cht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Ask Toolbar_is1
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mobogenie
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyFreeCodec
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Optimizer Pro_is1
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PriceGong
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam
Schl黶sel Gel鰏cht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DVDVideoSoftTB Toolbar
Schl黶sel Gel鰏cht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Schl黶sel Gel鰏cht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schl黶sel Gel鰏cht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Schl黶sel Gel鰏cht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
Schl黶sel Gel鰏cht : HKLM\Software\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16526


-\\ Google Chrome v32.0.1700.76

[ Datei : C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gel鰏cht : icon_url

*************************

AdwCleaner[R0].txt - [8955 octets] - [27/01/2014 10:37:37]
AdwCleaner[S0].txt - [8343 octets] - [27/01/2014 11:00:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8403 octets] ##########

2. ADW-LOGFILE:

Code:

# AdwCleaner v3.017 - Bericht erstellt am 27/01/2014 um 10:37:37
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzername : VM - CK-PC
# Gestartet von : C:\Users\VM\Desktop\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\END
Datei Gefunden : C:\Windows\System32\Tasks\BrowserDefendert
Ordner Gefunden C:\Program Files\Common Files\DVDVideoSoft\TB
Ordner Gefunden C:\Program Files\FoxTab
Ordner Gefunden C:\Program Files\Mobogenie
Ordner Gefunden C:\Program Files\myfree codec
Ordner Gefunden C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Ordner Gefunden C:\ProgramData\NCH Software
Ordner Gefunden C:\Users\VM\AppData\Local\genienext
Ordner Gefunden C:\Users\VM\AppData\Local\Mobogenie
Ordner Gefunden C:\Users\VM\AppData\Local\PackageAware
Ordner Gefunden C:\Users\VM\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Ordner Gefunden C:\Users\VM\Documents\Mobogenie

***** [ Verkn黳fungen ] *****


***** [ Registrierungsdatenbank ] *****

Schl黶sel Gefunden : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB
Schl黶sel Gefunden : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB
Schl黶sel Gefunden : HKCU\Software\Conduit
Schl黶sel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Ask Toolbar_is1
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DVDVideoSoftTB Toolbar
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mobogenie
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyFreeCodec
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Optimizer Pro_is1
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PriceGong
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Schl黶sel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Schl黶sel Gefunden : HKCU\Software\Myfree Codec
Schl黶sel Gefunden : HKCU\Software\NCH Software
Schl黶sel Gefunden : HKCU\Software\Uniblue
Schl黶sel Gefunden : HKLM\Software\AskTBar
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\d
Schl黶sel Gefunden : HKLM\Software\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\speedupmypc
Schl黶sel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{DB797681-40E0-11D2-9BD5-0060082AE372}
Schl黶sel Gefunden : HKLM\Software\Conduit
Schl黶sel Gefunden : HKLM\Software\DataMngr
Schl黶sel Gefunden : HKLM\Software\DivX\Install\Setup\WizardLayout\ConduitToolbar
Schl黶sel Gefunden : HKLM\Software\DVDVideoSoftTB
Schl黶sel Gefunden : HKLM\Software\DVDVideoSoftTB
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{98E94708-93C2-4C60-8F9C-ABECF0A1EDF0}
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E70EC461-31E1-4D56-B40F-B5FCE222BE5D}
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\BrowserDefendert
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{549E9554-DB95-4E78-B10B-69AF49034DE0}
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EC73EAE3-4B91-474E-AABE-6E96FB1B675F}
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schl黶sel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Schl黶sel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schl黶sel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Schl黶sel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
Schl黶sel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schl黶sel Gefunden : HKLM\Software\Myfree Codec
Schl黶sel Gefunden : HKLM\Software\Speedchecker Limited
Schl黶sel Gefunden : HKLM\Software\Uniblue
Schl黶sel Gefunden : HKLM\Software\Uniblue\DriverScanner
Schl黶sel Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16526


-\\ Google Chrome v32.0.1700.76

[ Datei : C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gefunden : icon_url
Gefunden : search_url
Gefunden : suggest_url
Gefunden : keyword

*************************

AdwCleaner[R0].txt - [8815 octets] - [27/01/2014 10:37:37]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [8875 octets] ##########

Und das neueste Frst-Logfile :

[CODE]
FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-01-2014
Ran by VM (administrator) on CK-PC on 27-01-2014 12:42:20
Running from C:\Users\VM\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Safe Mode (minimal)


==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2012-10-12] (Synaptics Incorporated)
HKLM\...\Run: [eAudio] - C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [544768 2008-05-30] (Acer Incorporated)
HKLM\...\Run: [ArcadeDeluxeAgent] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-07-24] (CyberLink Corp.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [1468296 2009-06-01] (Microsoft Corporation)
HKLM\...\Run: [Lexmark Pro700 Series Fax Server] - C:\Program Files\Lexmark Pro700 Series\fm3032.exe [316072 2011-01-23] ()
HKLM\...\Run: [eDataSecurity Loader] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [526896 2008-07-29] (Egis Incorporated)
HKLM\...\Run: [ePower_DMC] - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [405504 2008-08-01] (Acer Inc.)
HKLM\...\Run: [PLFSetL] - C:\Windows\PLFSetL.exe [94208 2011-01-22] (sonix)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2008-06-30] ()
HKLM\...\Run: [eBayToolbar] - C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe [632048 2009-03-19] (eBay Inc.)
HKLM\...\Run: [EzPrint] - C:\Program Files\Lexmark Pro700 Series\ezprint.exe [139944 2010-01-18] ()
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [182808 2008-07-20] (Intel Corporation)
HKLM\...\Run: [CLMLServer] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [167936 2008-07-24] (CyberLink)
HKLM\...\Run: [lxeemon.exe] - C:\Program Files\Lexmark Pro700 Series\lxeemon.exe [770728 2011-01-23] ()
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1115728 2009-12-15] (Dritek System Inc.)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM\...\Run: [LexwareInfoService] - C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-10] (AVAST Software)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2011-11-04] (Realtek Semiconductor)
Winlogon\Notify\AWinNotifyVitaKey MC3000: C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll (Arachnoid Biometrics Identification Group Corp.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung)
HKCU\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKCU\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
HKCU\...\Runonce: [Report] - C:\AdwCleaner\AdwCleaner[S0].txt
MountPoints2: {745ab459-58af-11de-af2e-806e6f6e6963} - F:\SETUP.EXE
MountPoints2: {b2eaf739-9ee3-11df-9989-001e331dd3dc} - E:\autorun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default\...\Run: [ProductReg] - C:\Program Files\Acer\WR_PopUp\ProductReg.exe [ 2008-11-17] (Acer)
HKU\Default\...\RunOnce: [AcerScrSav] - C:\Windows\Acer\run_NB.exe [ 2007-08-21] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [ProductReg] - C:\Program Files\Acer\WR_PopUp\ProductReg.exe [ 2008-11-17] (Acer)
HKU\Default User\...\RunOnce: [AcerScrSav] - C:\Windows\Acer\run_NB.exe [ 2007-08-21] ()
Lsa: [Notification Packages] scecli C:\Program Files\Acer\Acer Bio Protection\PwdFilter
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files\PdaNet for Android\PdaNetPC.exe ()

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:7777
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.freenet.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
BHO: GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files\GfK Internet-Monitor\Gacela2.dll (GfK)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll (Egis)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
Toolbar: HKLM - eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} -  No File
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: haufereader - No CLSID Value -
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.0.43.49 217.0.43.33 192.168.1.1

Chrome:
=======
CHR Extension: (Dr.Web Anti-Virus Link Checker) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\aleggpabliehgbeagmfhnodcijcmbonb [2014-01-02]
CHR Extension: (WOT) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-01-02]
CHR Extension: (VTchromizer) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\efbjojhplkelaegfbieplglfidafgoka [2014-01-02]
CHR Extension: (AdBlock) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-02]
CHR Extension: (avast! Online Security) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-25]
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2013-02-25]
CHR Extension: (GfK Internet-Monitor) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef [2014-01-15]
CHR Extension: (Freemake Video Converter) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj [2013-06-08]
CHR Extension: (Google Wallet) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (NotScripts) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn [2014-01-02]
CHR Extension: (Gmail) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-02]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-25]
CHR HKLM\...\Chrome\Extension: [igkejcihojcegdmifcnlkhmnelneogef] - C:\Program Files\GfK Internet-Monitor\Chrome Extension\extension.crx [2014-01-15]
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-06-08]

========================== Services (Whitelisted) =================

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-10] (AVAST Software)
S2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [81504 2008-01-16] ()
S2 DeviceManager; C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe [40960 2009-05-25] ()
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [406016 2009-08-24] (mst software GmbH, Germany)
S2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-06-02] ()
S2 GfK-Proxy-Service; C:\Program Files\GfK-ProxyService\GfK-ProxyService.exe [45544 2013-11-28] ()
S2 GfK-Reporting-Service; C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe [3089384 2013-11-28] ()
S2 GfK-Update-Service; C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe [1376232 2013-11-28] ()
S2 IGBASVC; C:\Program Files\Acer\Acer Bio Protection\BASVC.exe [3520512 2009-06-14] ()
S2 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe [193192 2010-04-14] (Lexmark International, Inc.)
S2 lxee_device; C:\Windows\system32\lxeecoms.exe [598696 2010-04-14] ( )
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
S2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] ()
S2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
S2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
S2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] ()
S2 PLFlash DeviceIoControl Service; C:\Program Files\Nero\Nero BackItUp 4\IoctlSvc.exe [81920 2008-08-29] (Prolific Technology Inc.)
S2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [272024 2007-01-09] ()
S2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [233472 2008-07-19] (Acer Incorporated)
S2 Uniblue DiskRescue; C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe [229648 2008-09-10] (Uniblue)

==================== Drivers (Whitelisted) ====================

R0 AlfaFF; C:\Windows\System32\Drivers\AlfaFF.sys [43184 2009-06-14] (Alfa Corporation)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-10] (AVAST Software)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-01-10] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-12-25] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-01-10] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410528 2014-01-10] (AVAST Software)
S1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-01-10] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2014-01-10] ()
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [28048 2010-02-05] (CSR, plc)
S1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2010-01-01] (Elaborate Bytes AG)
S2 int15; C:\Windows\system32\drivers\int15.sys [69632 2007-01-26] ()
R3 itecir; C:\Windows\System32\DRIVERS\itecir.sys [62496 2011-11-04] (ITE Tech. Inc. )
S3 L1E; C:\Windows\System32\DRIVERS\L1E60x86.sys [54824 2012-10-12] (Atheros Communications, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 NETwNv32; C:\Windows\System32\DRIVERS\NETwNv32.sys [7346176 2012-10-12] (Intel Corporation)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation)
S3 pmkbdfltr; C:\Windows\System32\DRIVERS\pmkbdfltr.sys [15248 2012-10-12] (PenMount)
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [103552 2009-05-25] (TCT International Mobile Ltd)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [23608 2012-10-12] (Synaptics Incorporated)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1759744 2011-01-22] ()
S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-10-16] (Avira GmbH)
S1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2009-09-01] ()
S3 TelekomNM3; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys [35040 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [61424 2008-07-18] (Cyberlink Corp.)
S2 Aspi32; No ImagePath
S1 DritekPortIO; No ImagePath
S3 esgiguard; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x]
S3 S6U12Scanner; system32\drivers\usbscan.sys [x]
S3 usbscan; system32\DRIVERS\usbscan.sys [x]
U5 usbser; C:\Windows\System32\Drivers\usbser.sys [27648 2009-04-11] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-27 12:42 - 2014-01-27 12:42 - 00019298 _____ C:\Users\VM\Desktop\FRST.txt
2014-01-27 11:23 - 2014-01-27 11:23 - 00001162 _____ C:\Users\VM\Desktop\JRT.txt
2014-01-27 11:00 - 2014-01-27 11:00 - 00008483 _____ C:\Users\VM\Desktop\AdwCleaner[S0].txt
2014-01-27 10:37 - 2014-01-27 10:38 - 00008955 _____ C:\Users\VM\Desktop\AdwCleaner[R0].txt
2014-01-27 10:33 - 2014-01-27 10:33 - 00140112 _____ C:\Windows\Minidump\Mini012714-01.dmp
2014-01-27 10:30 - 2014-01-27 12:30 - 00000000 ____D C:\AdwCleaner
2014-01-24 22:04 - 2014-01-24 22:04 - 01236282 _____ C:\Users\VM\Desktop\adwcleaner.exe
2014-01-24 20:39 - 2014-01-24 20:40 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\VM\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-23 22:08 - 2014-01-23 22:08 - 00000000 ____D C:\FRST
2014-01-23 22:07 - 2014-01-23 22:07 - 01222144 _____ (Farbar) C:\Users\VM\Desktop\FRST.exe
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:43 - 00000000 ____D C:\Users\VM\.gimp-2.8
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\AppData\Local\gegl-0.2
2014-01-17 23:16 - 2014-01-23 22:26 - 00000000 ____D C:\Users\VM\Desktop\Mallorca
2014-01-16 21:10 - 2014-01-16 21:10 - 00000000 ____D C:\Windows\LastGood.Tmp
2014-01-16 21:03 - 2007-11-14 15:18 - 00000553 _____ C:\Windows\USetup.iss
2014-01-16 05:23 - 2014-01-16 05:53 - 00000000 ____D C:\Program Files\GfK-ProxyService
2014-01-15 21:48 - 2014-01-24 23:18 - 00000000 ____D C:\Program Files\GfK Internet-Monitor
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-09 23:54 - 2014-01-16 03:09 - 00000000 ____D C:\Program Files\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\cache
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\.android
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 _____ C:\Users\VM\daemonprocess.txt
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Image Converter
2014-01-05 22:37 - 2014-01-19 23:13 - 00000000 ____D C:\Users\VM\Desktop\Handybilder
2014-01-03 08:56 - 2014-01-03 08:56 - 00000427 _____ C:\Users\VM\Desktop\Dateien von CK.lnk
2014-01-02 22:46 - 2014-01-02 22:46 - 00000000 ____D C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-01-01 21:01 - 2014-01-01 21:05 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-01 20:51 - 2014-01-01 20:53 - 90396104 _____ (The GIMP Team                                              ) C:\Users\VM\Downloads\gimp-2.8.10-setup.exe
2013-12-30 20:35 - 2013-12-30 20:36 - 00000000 ____D C:\Program Files\QuickTime
2013-12-30 20:31 - 2013-12-30 20:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-30 20:30 - 2013-12-30 20:30 - 00000000 ____D C:\Program Files\Apple Software Update
2013-12-30 20:21 - 2013-12-30 20:22 - 41404760 _____ (Apple Inc.) C:\Users\VM\Downloads\QuickTimeInstaller.exe

==================== One Month Modified Files and Folders =======

2014-01-27 12:42 - 2014-01-27 12:42 - 00019298 _____ C:\Users\VM\Desktop\FRST.txt
2014-01-27 12:37 - 2011-02-07 20:19 - 00008592 _____ C:\Users\VM\AppData\Local\d3d9caps.dat
2014-01-27 12:30 - 2014-01-27 10:30 - 00000000 ____D C:\AdwCleaner
2014-01-27 12:23 - 2013-12-21 21:48 - 01194396 _____ C:\Windows\PFRO.log
2014-01-27 12:16 - 2006-11-02 13:47 - 00003344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-27 12:16 - 2006-11-02 13:47 - 00003344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-27 12:15 - 2009-02-02 13:15 - 00000147 _____ C:\Windows\system32\agent.log
2014-01-27 11:23 - 2014-01-27 11:23 - 00001162 _____ C:\Users\VM\Desktop\JRT.txt
2014-01-27 11:15 - 2006-11-02 13:47 - 00492008 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-27 11:00 - 2014-01-27 11:00 - 00008483 _____ C:\Users\VM\Desktop\AdwCleaner[S0].txt
2014-01-27 10:38 - 2014-01-27 10:37 - 00008955 _____ C:\Users\VM\Desktop\AdwCleaner[R0].txt
2014-01-27 10:33 - 2014-01-27 10:33 - 00140112 _____ C:\Windows\Minidump\Mini012714-01.dmp
2014-01-27 10:33 - 2013-12-25 17:05 - 305926989 _____ C:\Windows\MEMORY.DMP
2014-01-27 10:33 - 2010-01-11 00:25 - 00000000 ____D C:\Windows\Minidump
2014-01-25 20:54 - 2013-12-21 21:16 - 00009070 _____ C:\Windows\setupact.log
2014-01-25 20:54 - 2009-06-14 07:52 - 01206835 _____ C:\Windows\WindowsUpdate.log
2014-01-24 23:31 - 2009-06-14 08:05 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2014-01-24 23:18 - 2014-01-15 21:48 - 00000000 ____D C:\Program Files\GfK Internet-Monitor
2014-01-24 22:07 - 2009-07-02 00:19 - 00010652 _____ C:\Windows\bthservsdp.dat
2014-01-24 22:04 - 2014-01-24 22:04 - 01236282 _____ C:\Users\VM\Desktop\adwcleaner.exe
2014-01-24 21:25 - 2013-12-24 00:40 - 00000000 ___RD C:\Users\VM\Eigene Bilder
2014-01-24 20:40 - 2014-01-24 20:39 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\VM\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-24 20:40 - 2013-09-12 19:50 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-24 15:05 - 2009-06-28 19:17 - 00000000 ____D C:\Users\VM\AppData\Local\Microsoft Help
2014-01-24 09:45 - 2010-03-07 21:06 - 00400324 _____ C:\ProgramData\lxeeJSW.log
2014-01-24 09:45 - 2010-03-07 20:31 - 00000000 ____D C:\ProgramData\Lx_cats
2014-01-23 22:26 - 2014-01-17 23:16 - 00000000 ____D C:\Users\VM\Desktop\Mallorca
2014-01-23 22:08 - 2014-01-23 22:08 - 00000000 ____D C:\FRST
2014-01-23 22:07 - 2014-01-23 22:07 - 01222144 _____ (Farbar) C:\Users\VM\Desktop\FRST.exe
2014-01-20 14:58 - 2008-01-21 08:16 - 01596168 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-19 23:13 - 2014-01-05 22:37 - 00000000 ____D C:\Users\VM\Desktop\Handybilder
2014-01-17 23:43 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\.gimp-2.8
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D C:\Users\VM\AppData\Local\gegl-0.2
2014-01-17 23:28 - 2009-06-28 17:16 - 00000000 ____D C:\Users\VM
2014-01-16 21:10 - 2014-01-16 21:10 - 00000000 ____D C:\Windows\LastGood.Tmp
2014-01-16 21:10 - 2010-03-07 20:25 - 00226419 _____ C:\ProgramData\lxeescan.log
2014-01-16 21:09 - 2009-02-02 12:21 - 00000000 ____D C:\Windows\system32\RTCOM
2014-01-16 21:02 - 2009-02-02 12:23 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-01-16 21:02 - 2009-02-02 12:17 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2014-01-16 14:25 - 2009-06-28 17:19 - 00000000 ____D C:\Users\VM\AppData\Local\Google
2014-01-16 14:24 - 2009-02-02 12:44 - 00000000 ____D C:\Program Files\Google
2014-01-16 05:53 - 2014-01-16 05:23 - 00000000 ____D C:\Program Files\GfK-ProxyService
2014-01-16 03:11 - 2013-07-22 23:17 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 03:09 - 2014-01-09 23:54 - 00000000 ____D C:\Program Files\McAfee Security Scan
2014-01-16 03:01 - 2006-11-02 11:24 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-10 00:07 - 2013-12-25 14:49 - 00000350 ____H C:\Windows\Tasks\avast! Emergency Update.job
2014-01-10 00:07 - 2013-12-25 14:43 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00180248 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2014-01-10 00:06 - 2013-12-25 14:43 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-10 00:06 - 2013-12-25 14:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D C:\ProgramData\McAfee
2014-01-09 23:54 - 2011-06-02 21:31 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-01-09 23:54 - 2009-06-28 22:44 - 00000000 ____D C:\Users\VM\AppData\Local\Adobe
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\AppData\Local\cache
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D C:\Users\VM\.android
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 _____ C:\Users\VM\daemonprocess.txt
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D C:\Program Files\Image Converter
2014-01-06 23:27 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2014-01-03 08:56 - 2014-01-03 08:56 - 00000427 _____ C:\Users\VM\Desktop\Dateien von CK.lnk
2014-01-02 22:46 - 2014-01-02 22:46 - 00000000 ____D C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-01-01 21:05 - 2014-01-01 21:01 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-01 20:53 - 2014-01-01 20:51 - 90396104 _____ (The GIMP Team                                              ) C:\Users\VM\Downloads\gimp-2.8.10-setup.exe
2013-12-31 14:06 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-12-30 20:36 - 2013-12-30 20:35 - 00000000 ____D C:\Program Files\QuickTime
2013-12-30 20:35 - 2009-10-27 01:02 - 00000000 ____D C:\ProgramData\Apple Computer
2013-12-30 20:31 - 2013-12-30 20:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-30 20:30 - 2013-12-30 20:30 - 00000000 ____D C:\Program Files\Apple Software Update
2013-12-30 20:30 - 2009-10-27 01:00 - 00000000 ____D C:\ProgramData\Apple
2013-12-30 20:22 - 2013-12-30 20:21 - 41404760 _____ (Apple Inc.) C:\Users\VM\Downloads\QuickTimeInstaller.exe
2013-12-29 21:57 - 2011-05-29 11:57 - 00000000 ____D C:\ProgramData\Netzmanager

Files to move or delete:
====================
C:\Users\VM\AppData\Roaming\desktop.ini


Some content of TEMP:
====================
C:\Users\VM\AppData\Local\Temp\18039uninstall.exe
C:\Users\VM\AppData\Local\Temp\avgnt.exe
C:\Users\VM\AppData\Local\Temp\ose00000.exe
C:\Users\VM\AppData\Local\Temp\Quarantine.exe
C:\Users\VM\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\VM\AppData\Local\Temp\Sqlite3.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-27 12:39

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Mal startet der PC im abgesicherten Modus, mal nicht, aber in beiden Fällen läuft er leider nicht. :-(

Okay, ich kann jetzt im abgesicherten Modus mit Netzwerktreibern wieder online gehen, weil ich nicht mehr über einen Proxyserver online gehe. Was immer das bedeutet. Jedenfalls geht es jetzt und ich warte DRINGENDST auf deine Antwort... *sorry*

Claudia K. 27.01.2014 22:15

Liste der Anhänge anzeigen (Anzahl: 1)
Ach ja und MS-Office funktioniert leider auch nicht. Da bekomme ich immer folgende Fehlermeldung:
Siehe Anhang

Liebe Grüße

Claudia

P.S.: Jetzt läuft mein PC nicht, mein Tablet ist eingeschickt und mein Handy ist auch schrott, weil meine Hündin mir das durch einen kurzen aber heftigen Leinenruck aus der Hand geschleudert hat. Ich hab kein gutes Händchen gerade für elektronische Artikel wie es scheint... :'(

schrauber 27.01.2014 23:26

Jetzt reparieren wir erstmal, da scheint einiges verbogen:

Die Bilder sind etwas älter. Einfach jeden Schritt machen. Wenn einer nicht geht überspringen, wichtig ist am Schluss auf Start, dann die Häkchen setzen und nochmal start. Entgegen dem Bild alles anhaken! Das kann dauern.

Downloade dir bitte Windows Repair (All In One) von hier.

Claudia K. 29.01.2014 09:18

Es funktioniert einfach nicht, entweder hängt die Kiste sich beim booten auf, oder ich bin im abgesicherten Modus und dann klappt es nicht so richtig. .. * verzweifelt bin*

Hi Schrauber!

Ich hab alles so gemacht, wie du gesagt hast, aber es war sehr schwierig. Das Ergebnis ist gleich Null, denn die Office-Programme laufen immer noch nicht. :'(

Hab ich was falsch gemacht??

In erster Linie wäre mir aber wichtig, dass das Teil erst mal richtig hochfährt...

Guten Morgen, Schrauber!

Ich habe mir mal in der Systemsteuerung die Probleme angesehen, vielleicht hilft dir das ja bei der Lösungsfindung? Das Gerät zeigt an, dass aktuell die "SubInAcl" nicht funktioniert - was immer das sein mag... Außerdem funktionierte am 24.01. auch der "Windows Driver Foundation - Benutzermodus Treiberframework-Hostprozess" nicht.

Ich verstehe das alles gar nicht, denn der Rechner ist vorher eigentlich ganz gut gelaufen und wir haben doch nur Adware entfernt, oder?

Was soll ich denn jetzt als nächstes machen???

Liebe Grüße
Claudia

schrauber 29.01.2014 17:18

Dann versuchen wir jetzt was ganz andres:

Mach bitte mal eine Systemwiederherstellung auf einen Punkt vor dem Scan mit Malwarebytes.

Claudia K. 30.01.2014 13:09

Ähhh, okay. Und wie geht das?

Ah, okay . Ich habe es schon gefunden. Der Rechner arbeitet gerade daran. ..

Also, ich kann das ja nur im abgesicherten Modus starten. Wie lange dauert das denn so, das läuft jetzt schon ewig. .. Ist das okay so, oder hat sich der Rechner schon wieder aufgehängt? ??

Also, das funktioniert irgendwie alles nicht, auch nicht mit der F8-Taste. Da hat der PC zwar den Vorgang abgeschlossen, aber nach dem Neustart war alles beim alten, außer, dass er jetzt gar nicht mehr im normalen Modus hochfährt... Ich kriege noch die Pimpanellen... :'(

Die Kiste ist doch gelaufen... *grmpf*

schrauber 31.01.2014 08:47

Hast Du die DVD zur Hand? Bzw wird ein Computer reaprieren angeboten wenn Du F8 drückst (da woa uch der Safe Mode angezeigt wird)?

Claudia K. 31.01.2014 23:17

Ja, aber er fragt nsch dem Administrator-Passwort und das kenne ich nicht. .. Welche DVD meinst du?

Also, ich hab die Reparatur als Benutzer, nicht als Admin gemacht. Ist auch durchgeführt worden. Ergebnis fast gleich null, außer, dass der PC jetzt nach dem Booten einen schwarzen Bildschirm anzeigt. Ich muss dann den Ein/Ausschalter länger drücken und neu starten. Meistens kann ich dann im abgesicherten Modus starten.

So langsam ist es ein Problem, dass ich nicht mehr an meine Office-Daten komme...

Inzwischen hab ich echte Panikattacken, dass wir das doch nicht hin bekommen. :wtf:

schrauber 01.02.2014 17:37

Windows DVD meine ich.

An deine Daten kommen wir auf jeden Fall.


"In Place Upgrade"

Claudia K. 01.02.2014 20:04

Nee, hab ich leider nicht. Die wird mein Mann haben, also werde ich es ihm wohl sagen müssen... :heulen:

Wenn ich die DVD dann von meinem Mann habe, was soll ich denn dann tun?

Vielleicht hilft dir ja dieses hier?
Code:

Produkt
Acer eDataSecurity Management Decryption Utility

Problem
Funktioniert nicht mehr

Datum
28.12.2013 15:23

Status
Nicht berichtet

Problemsignatur
Problemereignisame:        APPCRASH
Anwendungsname:        decryption.exe
Anwendungsversion:        3.0.11.1
Anwendungszeitstempel:        488ee704
Fehlermodulname:        BatchCrypto.dll
Fehlermodulversion:        3.0.7.1
Fehlermodulzeitstempel:        488ee60e
Ausnahmecode:        c0000005
Ausnahmeoffset:        0000b67b
Betriebsystemversion:        6.0.6002.2.2.0.768.3
Gebietsschema-ID:        1031
Zusatzinformation 1:        fd00
Zusatzinformation 2:        ea6f5fe8924aaa756324d57f87834160
Zusatzinformation 3:        fd00
Zusatzinformation 4:        ea6f5fe8924aaa756324d57f87834160

Code:

Produkt
Acer eDataSecurity Management Decryption Utility

Problem
Funktioniert nicht mehr

Datum
28.12.2013 15:24

Status
Nicht berichtet

Problemsignatur
Problemereignisame:        APPCRASH
Anwendungsname:        Decryption.exe
Anwendungsversion:        3.0.11.1
Anwendungszeitstempel:        488ee704
Fehlermodulname:        BatchCrypto.dll
Fehlermodulversion:        3.0.7.1
Fehlermodulzeitstempel:        488ee60e
Ausnahmecode:        c0000005
Ausnahmeoffset:        0000b67b
Betriebsystemversion:        6.0.6002.2.2.0.768.3
Gebietsschema-ID:        1031
Zusatzinformation 1:        fd00
Zusatzinformation 2:        ea6f5fe8924aaa756324d57f87834160
Zusatzinformation 3:        fd00
Zusatzinformation 4:        ea6f5fe8924aaa756324d57f87834160

Code:

Produkt
Assistant Application

Problem
Funktioniert nicht mehr

Datum
02.10.2011 22:44

Status
Nicht berichtet

Problemsignatur
Problemereignisame:        APPCRASH
Anwendungsname:        Assistant.exe
Anwendungsversion:        5.5.10.0
Anwendungszeitstempel:        4da41eb7
Fehlermodulname:        MSVCR90.dll
Fehlermodulversion:        9.0.30729.6161
Fehlermodulzeitstempel:        4dace5b9
Ausnahmecode:        40000015
Ausnahmeoffset:        0005beae
Betriebsystemversion:        6.0.6002.2.2.0.768.3
Gebietsschema-ID:        1031
Zusatzinformation 1:        a0be
Zusatzinformation 2:        d2c24500fdf06538b615fc5437b4d241
Zusatzinformation 3:        e822
Zusatzinformation 4:        04116d4183121abfc8169bfdf16fba5b

Code:

Produkt
DivX Setup

Problem
Funktioniert nicht mehr

Datum
12.09.2013 00:21

Status
Nicht berichtet

Problemsignatur
Problemereignisame:        APPCRASH
Anwendungsname:        div452F.tmp
Anwendungsversion:        2.6.1.84
Anwendungszeitstempel:        521ed204
Fehlermodulname:        div452F.tmp
Fehlermodulversion:        2.6.1.84
Fehlermodulzeitstempel:        521ed204
Ausnahmecode:        c0000005
Ausnahmeoffset:        0003b39f
Betriebsystemversion:        6.0.6002.2.2.0.768.3
Gebietsschema-ID:        1031
Zusatzinformation 1:        fd00
Zusatzinformation 2:        ea6f5fe8924aaa756324d57f87834160
Zusatzinformation 3:        fd00
Zusatzinformation 4:        ea6f5fe8924aaa756324d57f87834160

Hostprozesse für Windows-Dienste laufen auch nicht, genauso wie LX-Setup und etliche Anwendungen und Services mehr. Kann man da evtl. was machen? Ich bin da über die "Problemberichte und -lösungen" drangekommen.

schrauber 02.02.2014 07:23

Ich hab dir oben auch nen Link zu einer Anleitung gepostet. Das machen wenn die DVD da ist :)

Claudia K. 02.02.2014 20:54

Ich hab nur ein Windows Update 7. Vista war auf dem Rechner vorinstalliert...

schrauber 03.02.2014 16:50

Vista ia ja auch drauf, also brauchen wir schon ne Vista Scheibe.....Wenn Du nen Key hast kannste auch nen Uprade auf 7 machen.

Claudia K. 03.02.2014 20:16

Okay, ich habe Recovery-"Scheiben" :-) Du musst mich aber bitte anleiten, bei der Systemwiederherstellung, ich habe keinen blassen Schimmer davon...

Also bitte Step by Step für Doofe, incl. der Info, wann ich die erste "Scheibe" einlegen muss, also VOR dem Start, oder an welcher Stelle genau und so...

schrauber 04.02.2014 13:48

Moment. Recovery Scheiben? :(

Damit geht nur Wiederherstellung auf Werkseinstellungen, dann sind aber alle Daten weg.

Claudia K. 04.02.2014 14:31

Ich habe meinen Mann gefragt, der hat keine Vista-DVDs... weil es ja wie gesagt vorinstalliert war...:confused: und jetzt???

schrauber 05.02.2014 09:19

Mit der Recovery Scheibe kannste nur Neu installieren, dann wären aber Daten und Programme weg. Daten können wir vorher sichern, das wäre nicht das Problem.

ab Win7 gibt es Iso Dateien zum Download. Für Vista finde ich die aber irgendwie nicht.

Option:
Upgrade auf Win7 (legale Scheibe + key). Vorteil: Programme und Daten bleiben erhalten.

Tu mi rmal nen Gefallen. Beschreib mal bitte genau was pasiert wenn Du normal booten willst, ebenso wenn Du in den abgesicherten Modus willst. Was genau pasiert, wie weit bootet er bis es passiert?

Claudia K. 05.02.2014 09:53

Okay, ich beschreibe:

Ich drücke den ON-Schalter und der PC startet, dann zeigt er das Acer-Logo und fragt, in welchem Modus ich starten will. Da ich dir das jetzt gerade schreibe, hat der Rechner selbst entschieden normal zu starten. Nach weniger Zeit erscheint das Windows-Logo und meistens dann das "Willkommen" von Windows mit einem Button der sich dreht, weil der PC noch arbeitet. Dann wird der Bildschirm dunkel (nicht ganz schwarz, eher anthrazit) und man hört, dass die Kiste nicht mehr arbeitet. Das Arbeitslämpchen am Gehäuse des Laptops blinkt rhythmisch schwach auf. Der PC reagiert jetzt auf gar nichts mehr, ich kann jetzt nur noch den Off-Schalter lange drucken und so neu starten.

Wenn ich Windows 7 mache, wann muss ich dann die CD einlegen?

Abgesicherter Modus:

Ich schalte den PC an und warte bis ich den abgesicherten Modus mit allen Netzwerktreibern auswählen kann. Dann sehe ich, welche Treiber alle geladen werden und muss etwas warten. Es erscheint das Windows Logo, aber größer als im normalen Modus. Dann kommen meine Destopicons, ebenfalls alle sehr vergrößerte und ohne Hintergrundbild und eine Hilfe-Seite "Was ist der abgesicherte Modus", die ich dann zuklicke. Der Desktopschoner läuft normal. Ich kann jetzt fast alles machen, außer:

- rechten Mouseklick, dann stürzt er sofort ab
- alle Windows-Programme, dann will der erst ein Setup machen, dann nochmal und sagt mir dann, dass die erforderlichen Zertifikate nicht vorhanden oder lesbar wären und deshalb das Programm jetzt beendet wird

Das war's, mehr kann ich dazu nicht sagen...

Ach ja: im abgesicherten Modus kann ich ganz normal runterfahren.

schrauber 05.02.2014 17:44

Im normalen Modus, wenn Du den dunklen Bildschirm siehst:

Kannst Du Strg+Alt*Entf drücken und den Taskmanager öffnen? Wenn ja:
Datei > Neuer Task > explorer.exe und ok klicken.


Wenn nein, dann im abgesicherten Modus:
Versuche bitte MBAM zu deinstallieren.

Claudia K. 05.02.2014 23:14

Nein, im normalen Modus funktioniert gar keine Tastenkombination, auch die nicht.

Im abgesicherten Modus komme ich. In den Explorer und finde auch die MBAM-exe, aber. Das ist ein Setup. Ein uninstal finde ich da nicht...

YESSSSS, YES, YES, YES...!

Er läuft wieder (einigermaßen)! Ich komme wieder in die Office-Programme etc., weil ich Malware deinstalliert habe! GOTT SEI DANK!

Was brauchst du als nächstes?

Die Tastenkombinationen funktionieren auch wieder, ich bin so happy! :-)
Ich habe aber gerade gesehen, dass hier noch irgend so eine Mc Affee-Sicherheitssoftware oder so was läuft...

Momentan ist der PC jetzt ansonsten wohl ungeschützt...

Also, was soll ich als nächstes machen? Tausend Dank schon mal bis hierhin! :-*

LG
Claudia

Ach ja, der wollte ganz viele Updates machen, auch für DivX, da wusste ich aber nicht, ob das richtig ist oder nicht und habe es erst mal abgebrochen. Hoffe, dass das richtig so war!

schrauber 06.02.2014 17:03

Ja erstmal nix machen. Bitte aus dem normalen Modus frische FRST Logs.

Claudia K. 06.02.2014 21:11

Okay, dann ist hier das aktuelle FRST-Logfile:


FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-02-2014
Ran by VM (administrator) on CK-PC on 06-02-2014 21:09:21
Running from C:\Users\VM\Desktop\AntiTrojaner
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal


==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Validity Sensors, Inc.) C:\Windows\System32\vfsFPService.exe
(Arachnoid Biometrics Identification Group Corp.) C:\Program Files\Acer\Acer Bio Protection\CompPtcVUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
() C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
() C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
() C:\Program Files\GfK-ProxyService\GfK-ProxyService.exe
() C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe
() C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe
() C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
( ) C:\Windows\System32\lxeecoms.exe
() C:\ACER\Mobility Center\MobilityService.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(NewTech InfoSystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
() C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Prolific Technology Inc.) C:\Program Files\Nero\Nero BackItUp 4\IoctlSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe
(Uniblue) C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
(Acer Inc.) C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
(sonix) C:\Windows\PLFSetL.exe
() C:\Windows\PLFSetI.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(eBay Inc.) C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
() C:\Program Files\Lexmark Pro700 Series\ezprint.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(CyberLink) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
() C:\Program Files\Lexmark Pro700 Series\lxeemon.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe
() C:\Program Files\PdaNet for Android\PdaNetPC.exe
(Realtek Semiconductor Corp.) C:\Users\VM\AppData\Local\Temp\RtkBtMnt.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Acer Inc.) C:\Program Files\Acer\Acer VCM\acp2HID.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2012-10-12] (Synaptics Incorporated)
HKLM\...\Run: [eAudio] - C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [544768 2008-05-30] (Acer Incorporated)
HKLM\...\Run: [ArcadeDeluxeAgent] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-07-24] (CyberLink Corp.)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [1468296 2009-06-01] (Microsoft Corporation)
HKLM\...\Run: [Lexmark Pro700 Series Fax Server] - C:\Program Files\Lexmark Pro700 Series\fm3032.exe [316072 2011-01-23] ()
HKLM\...\Run: [eDataSecurity Loader] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [526896 2008-07-29] (Egis Incorporated)
HKLM\...\Run: [ePower_DMC] - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [405504 2008-08-01] (Acer Inc.)
HKLM\...\Run: [PLFSetL] - C:\Windows\PLFSetL.exe [94208 2011-01-22] (sonix)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2008-06-30] ()
HKLM\...\Run: [eBayToolbar] - C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe [632048 2009-03-19] (eBay Inc.)
HKLM\...\Run: [EzPrint] - C:\Program Files\Lexmark Pro700 Series\ezprint.exe [139944 2010-01-18] ()
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [182808 2008-07-20] (Intel Corporation)
HKLM\...\Run: [CLMLServer] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [167936 2008-07-24] (CyberLink)
HKLM\...\Run: [lxeemon.exe] - C:\Program Files\Lexmark Pro700 Series\lxeemon.exe [770728 2011-01-23] ()
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1115728 2009-12-15] (Dritek System Inc.)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM\...\Run: [LexwareInfoService] - C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-10] (AVAST Software)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2011-11-04] (Realtek Semiconductor)
HKLM\...\RunOnce: [20131224] - C:\Program Files\AVAST Software\Avast\setup\emupdate\99d9223d-221b-45f4-a6cd-42de0e9b8b5b.exe /check [181136 2014-02-05] (AVAST Software)
HKLM\...\RunOnce: [InstallShieldSetup] - C:\PROGRA~1\INSTAL~1\{7F811~1\setup.exe -rebootC:\PROGRA~1\INSTAL~1\{7F811~1\reboot.ini [378208 2009-06-14] (Acer Incorporated)
Winlogon\Notify\AWinNotifyVitaKey MC3000: C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll (Arachnoid Biometrics Identification Group Corp.)
HKU\.DEFAULT\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-19\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung)
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\MountPoints2: {745ab459-58af-11de-af2e-806e6f6e6963} - F:\SETUP.EXE
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\MountPoints2: {b2eaf739-9ee3-11df-9989-001e331dd3dc} - E:\autorun.exe
Lsa: [Notification Packages] scecli C:\Program Files\Acer\Acer Bio Protection\PwdFilter
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files\PdaNet for Android\PdaNetPC.exe ()

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:7777
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.freenet.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
BHO: GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files\GfK Internet-Monitor\Gacela2.dll (GfK)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll (Egis)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
Toolbar: HKLM - eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} -  No File
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: haufereader - No CLSID Value -
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.0.43.49 217.0.43.33 192.168.1.1

Chrome:
=======
CHR Extension: (avast! Online Security) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-25]
CHR Extension: (GfK Internet-Monitor) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef [2014-01-15]
CHR Extension: (Freemake Video Converter) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj [2013-06-08]
CHR Extension: (Google Wallet) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-25]
CHR HKLM\...\Chrome\Extension: [igkejcihojcegdmifcnlkhmnelneogef] - C:\Program Files\GfK Internet-Monitor\Chrome Extension\extension.crx [2014-01-15]
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-06-08]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-10] (AVAST Software)
R2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [81504 2008-01-16] ()
R2 DeviceManager; C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe [40960 2009-05-25] ()
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [406016 2009-08-24] (mst software GmbH, Germany)
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-06-02] ()
R2 GfK-Proxy-Service; C:\Program Files\GfK-ProxyService\GfK-ProxyService.exe [45544 2013-11-28] ()
R2 GfK-Reporting-Service; C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe [3089384 2013-11-28] ()
R2 GfK-Update-Service; C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe [1376232 2013-11-28] ()
R2 IGBASVC; C:\Program Files\Acer\Acer Bio Protection\BASVC.exe [3520512 2009-06-14] ()
S2 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe [193192 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [598696 2010-04-14] ( )
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] ()
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] ()
R2 PLFlash DeviceIoControl Service; C:\Program Files\Nero\Nero BackItUp 4\IoctlSvc.exe [81920 2008-08-29] (Prolific Technology Inc.)
R2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [272024 2007-01-09] ()
R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [233472 2008-07-19] (Acer Incorporated)
R2 Uniblue DiskRescue; C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe [229648 2008-09-10] (Uniblue)

==================== Drivers (Whitelisted) ====================

R0 AlfaFF; C:\Windows\System32\Drivers\AlfaFF.sys [43184 2009-06-14] (Alfa Corporation)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-01-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2013-12-25] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-01-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410528 2014-01-10] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-01-10] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180248 2014-01-10] ()
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [28048 2010-02-05] (CSR, plc)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2010-01-01] (Elaborate Bytes AG)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-10-30] ()
R2 int15; C:\Windows\system32\drivers\int15.sys [69632 2007-01-26] ()
R3 itecir; C:\Windows\System32\DRIVERS\itecir.sys [62496 2011-11-04] (ITE Tech. Inc. )
R3 L1E; C:\Windows\System32\DRIVERS\L1E60x86.sys [54824 2012-10-12] (Atheros Communications, Inc.)
R3 NETwNv32; C:\Windows\System32\DRIVERS\NETwNv32.sys [7346176 2012-10-12] (Intel Corporation)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation)
R3 pmkbdfltr; C:\Windows\System32\DRIVERS\pmkbdfltr.sys [15248 2012-10-12] (PenMount)
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [103552 2009-05-25] (TCT International Mobile Ltd)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [23608 2012-10-12] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1759744 2011-01-22] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-10-16] (Avira GmbH)
R1 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5632 2009-09-01] ()
R3 TelekomNM3; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys [35040 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [61424 2008-07-18] (Cyberlink Corp.)
S2 Aspi32; No ImagePath
S1 DritekPortIO; No ImagePath
S3 esgiguard; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X]
S3 S6U12Scanner; system32\drivers\usbscan.sys [X]
S3 usbscan; system32\DRIVERS\usbscan.sys [X]
U5 usbser; C:\Windows\System32\Drivers\usbser.sys [27648 2009-04-11] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-05 23:05 - 2014-02-05 23:05 - 00000000 _____ () C:\END
2014-01-29 09:26 - 2014-01-29 09:26 - 00140304 _____ () C:\Windows\Minidump\Mini012914-01.dmp
2014-01-28 09:44 - 2014-01-28 09:44 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-CK-PC-Microsoft®-Windows-Vista™-Home-Premium-(32-bit).dat
2014-01-28 09:43 - 2014-01-28 09:43 - 00000000 ____D () C:\RegBackup
2014-01-28 08:51 - 2014-01-28 08:52 - 00000000 ____D () C:\Users\VM\Desktop\Tweaking.com - Windows Repair
2014-01-28 08:25 - 2014-01-28 08:26 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio (2).zip
2014-01-28 08:25 - 2014-01-28 08:25 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio (1).zip
2014-01-28 08:02 - 2014-01-28 08:02 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-27 15:22 - 2014-02-06 21:09 - 00000000 ____D () C:\Users\VM\Desktop\AntiTrojaner
2014-01-27 10:33 - 2014-01-27 10:33 - 00140112 _____ () C:\Windows\Minidump\Mini012714-01.dmp
2014-01-27 10:30 - 2014-01-27 12:30 - 00000000 ____D () C:\AdwCleaner
2014-01-23 22:08 - 2014-02-06 21:09 - 00000000 ____D () C:\FRST
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D () C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:43 - 00000000 ____D () C:\Users\VM\.gimp-2.8
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D () C:\Users\VM\AppData\Local\gegl-0.2
2014-01-17 23:16 - 2014-01-23 22:26 - 00000000 ____D () C:\Users\VM\Desktop\Mallorca
2014-01-16 21:03 - 2007-11-14 15:18 - 00000553 _____ () C:\Windows\USetup.iss
2014-01-16 05:23 - 2014-01-16 05:53 - 00000000 ____D () C:\Program Files\GfK-ProxyService
2014-01-15 21:48 - 2014-02-06 10:36 - 00000000 ____D () C:\Program Files\GfK Internet-Monitor
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ () C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-09 23:54 - 2014-01-16 03:09 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D () C:\Users\VM\AppData\Local\cache
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D () C:\Program Files\Image Converter

==================== One Month Modified Files and Folders =======

2014-02-06 21:09 - 2014-01-27 15:22 - 00000000 ____D () C:\Users\VM\Desktop\AntiTrojaner
2014-02-06 21:09 - 2014-01-23 22:08 - 00000000 ____D () C:\FRST
2014-02-06 21:04 - 2009-06-14 07:52 - 01247451 _____ () C:\Windows\WindowsUpdate.log
2014-02-06 21:04 - 2006-11-02 13:47 - 00003344 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-06 21:04 - 2006-11-02 13:47 - 00003344 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-06 10:36 - 2014-01-15 21:48 - 00000000 ____D () C:\Program Files\GfK Internet-Monitor
2014-02-05 23:05 - 2014-02-05 23:05 - 00000000 _____ () C:\END
2014-02-05 23:04 - 2011-02-07 20:19 - 00008592 _____ () C:\Users\VM\AppData\Local\d3d9caps.dat
2014-02-05 23:04 - 2008-01-21 08:16 - 01596168 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-05 23:02 - 2010-03-07 20:25 - 00226529 _____ () C:\ProgramData\lxeescan.log
2014-02-05 23:00 - 2009-06-14 08:05 - 00000000 _____ () C:\Windows\system32\LogConfigTemp.xml
2014-02-05 22:58 - 2009-02-02 13:15 - 00000147 _____ () C:\Windows\system32\agent.log
2014-02-05 22:58 - 2006-11-02 13:47 - 00492008 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-05 22:42 - 2013-12-21 21:48 - 01204648 _____ () C:\Windows\PFRO.log
2014-01-30 16:17 - 2013-12-24 00:40 - 00000000 ___RD () C:\Users\VM\Eigene Bilder
2014-01-30 16:11 - 2013-12-24 00:33 - 00000000 ____D () C:\Users\VM\My Digital Editions
2014-01-30 15:58 - 2009-06-28 17:16 - 00000000 ____D () C:\Users\VM
2014-01-29 20:48 - 2009-06-28 23:58 - 00139936 _____ () C:\Windows\system32\GDIPFONTCACHEV1.DAT
2014-01-29 20:18 - 2006-11-02 13:37 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-01-29 09:26 - 2014-01-29 09:26 - 00140304 _____ () C:\Windows\Minidump\Mini012914-01.dmp
2014-01-29 09:26 - 2013-12-25 17:05 - 325170187 _____ () C:\Windows\MEMORY.DMP
2014-01-29 09:26 - 2010-01-11 00:25 - 00000000 ____D () C:\Windows\Minidump
2014-01-28 12:52 - 2006-11-02 11:23 - 00000855 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_702
2014-01-28 09:44 - 2014-01-28 09:44 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-CK-PC-Microsoft®-Windows-Vista™-Home-Premium-(32-bit).dat
2014-01-28 09:43 - 2014-01-28 09:43 - 00000000 ____D () C:\RegBackup
2014-01-28 08:52 - 2014-01-28 08:51 - 00000000 ____D () C:\Users\VM\Desktop\Tweaking.com - Windows Repair
2014-01-28 08:26 - 2014-01-28 08:25 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio (2).zip
2014-01-28 08:25 - 2014-01-28 08:25 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio (1).zip
2014-01-28 08:02 - 2014-01-28 08:02 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-27 12:30 - 2014-01-27 10:30 - 00000000 ____D () C:\AdwCleaner
2014-01-27 10:33 - 2014-01-27 10:33 - 00140112 _____ () C:\Windows\Minidump\Mini012714-01.dmp
2014-01-25 20:54 - 2013-12-21 21:16 - 00009070 _____ () C:\Windows\setupact.log
2014-01-24 22:07 - 2009-07-02 00:19 - 00010652 _____ () C:\Windows\bthservsdp.dat
2014-01-24 15:05 - 2009-06-28 19:17 - 00000000 ____D () C:\Users\VM\AppData\Local\Microsoft Help
2014-01-24 09:45 - 2010-03-07 21:06 - 00400324 _____ () C:\ProgramData\lxeeJSW.log
2014-01-24 09:45 - 2010-03-07 20:31 - 00000000 ____D () C:\ProgramData\Lx_cats
2014-01-23 22:26 - 2014-01-17 23:16 - 00000000 ____D () C:\Users\VM\Desktop\Mallorca
2014-01-19 23:13 - 2014-01-05 22:37 - 00000000 ____D () C:\Users\VM\Desktop\Handybilder
2014-01-17 23:43 - 2014-01-17 23:28 - 00000000 ____D () C:\Users\VM\.gimp-2.8
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D () C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D () C:\Users\VM\AppData\Local\gegl-0.2
2014-01-16 21:09 - 2009-02-02 12:21 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-01-16 21:02 - 2009-02-02 12:23 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-01-16 21:02 - 2009-02-02 12:17 - 00000000 ____D () C:\Program Files\InstallShield Installation Information
2014-01-16 14:25 - 2009-06-28 17:19 - 00000000 ____D () C:\Users\VM\AppData\Local\Google
2014-01-16 14:24 - 2009-02-02 12:44 - 00000000 ____D () C:\Program Files\Google
2014-01-16 09:59 - 2013-09-13 17:22 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-16 05:53 - 2014-01-16 05:23 - 00000000 ____D () C:\Program Files\GfK-ProxyService
2014-01-16 03:11 - 2013-07-22 23:17 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 03:09 - 2014-01-09 23:54 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-01-16 03:01 - 2006-11-02 11:24 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ () C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-10 00:07 - 2013-12-25 14:49 - 00000350 _____ () C:\Windows\Tasks\avast! Emergency Update.job
2014-01-10 00:07 - 2013-12-25 14:43 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00180248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2014-01-10 00:06 - 2013-12-25 14:43 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-10 00:06 - 2013-12-25 14:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-09 23:54 - 2011-06-02 21:31 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-01-09 23:54 - 2009-06-28 22:44 - 00000000 ____D () C:\Users\VM\AppData\Local\Adobe
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D () C:\Users\VM\AppData\Local\cache
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D () C:\Program Files\Image Converter

Files to move or delete:
====================
C:\Users\VM\AppData\Roaming\desktop.ini


Some content of TEMP:
====================
C:\Users\VM\AppData\Local\Temp\DivXSetup.exe
C:\Users\VM\AppData\Local\Temp\RtkBtMnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-05 23:06

==================== End Of Log ============================

--- --- ---


Liebe Grüße

Claudia

schrauber 07.02.2014 17:24

Sieht soweit gut aus. Avast ist noch installiert? Bitte mal den rechner testen und berichten was es noch an Problemen gibt.

Und nebenbei:

Kannst Du dich vllt erinnern was alles gemacht wurde bevor der Rechner nicht mehr bootete? War da vllt ein WIndows Update? Ich hab jetzt mehrere rechner die mit MBAM nicht mehr booten, aber ich muss rausfinden was genau MBAM abschiesst :)

Claudia K. 07.02.2014 19:59

Ja, Avast ist noch aktiv, ich lass es gerade mal scannen.

Aber ein Windows-Update habe ich hier nicht gemacht. Ich glaube ja, dass irgendeine Sicherheitssoftware hier drauf ist, die sich nicht mit ADW "verstanden" hat. Zum Beispiel bekomme ich immer, wenn ich eine .jpg mit meinem Irfan-View öffnen will, so eine bescheuerte Meldung von der "Benutzerkontensteuerung", dass das ein nicht identifiziertes Programm sei (komischer Weise kann ich von der Meldung keinen Print-Screen machen). Außerdem ist hier noch so eine doofe McAffee Software drauf, die ich eigentlich auch nicht haben will. Ich würde viel lieber mit den mir bekannten Sicherheitsmaßnahmen arbeiten, die ich durch euch kennen und schätzen gelernt habe. Ich habe nur keine Ahnung, was ich dafür runterschmeißen kann und darf und was nicht.

Das Scan-Ergebnis von Avast reiche ich dir gerne nach, wenn es fertig ist. ;-)

Avast hat 0 infizierte Dateien gefunden. :-)

schrauber 08.02.2014 14:14

Ok, öffne mal bitte FRST, setze nen Haken bei Additional und scanne, poste beide Logfiles.

Mittlerweile hab ich ne Ahnung wo das Problem her kam :)

Claudia K. 08.02.2014 18:32

Hi. okay, hier die Logfiles:


Code:

---------------------------
Farbar Recovery Scan Tool
---------------------------
The Addition.txt is saved in the same location FRST tool is run.
---------------------------
OK 
---------------------------


FRST Logfile:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-02-2014
Ran by VM (administrator) on CK-PC on 08-02-2014 15:55:56
Running from C:\Users\VM\Desktop\AntiTrojaner
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal


==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Validity Sensors, Inc.) C:\Windows\System32\vfsFPService.exe
(Arachnoid Biometrics Identification Group Corp.) C:\Program Files\Acer\Acer Bio Protection\CompPtcVUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
() C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
() C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
() C:\Program Files\GfK-ProxyService\GfK-ProxyService.exe
() C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe
() C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe
() C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
( ) C:\Windows\System32\lxeecoms.exe
() C:\ACER\Mobility Center\MobilityService.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(NewTech InfoSystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
() C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Prolific Technology Inc.) C:\Program Files\Nero\Nero BackItUp 4\IoctlSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe
(Uniblue) C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Acer Inc.) C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
(sonix) C:\Windows\PLFSetL.exe
() C:\Windows\PLFSetI.exe
(eBay Inc.) C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
() C:\Program Files\Lexmark Pro700 Series\ezprint.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(CyberLink) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
() C:\Program Files\Lexmark Pro700 Series\lxeemon.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe
() C:\Program Files\PdaNet for Android\PdaNetPC.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Realtek Semiconductor Corp.) C:\Users\VM\AppData\Local\Temp\RtkBtMnt.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 10.0\Reader\reader_sl.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files\Common Files\Lexware\LxWebAccess\LxWebAccess.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Acer Inc.) C:\Program Files\Acer\Acer VCM\acp2HID.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2012-10-12] (Synaptics Incorporated)
HKLM\...\Run: [eAudio] - C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [544768 2008-05-30] (Acer Incorporated)
HKLM\...\Run: [ArcadeDeluxeAgent] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-07-24] (CyberLink Corp.)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [1468296 2009-06-01] (Microsoft Corporation)
HKLM\...\Run: [Lexmark Pro700 Series Fax Server] - C:\Program Files\Lexmark Pro700 Series\fm3032.exe [316072 2011-01-23] ()
HKLM\...\Run: [eDataSecurity Loader] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [526896 2008-07-29] (Egis Incorporated)
HKLM\...\Run: [ePower_DMC] - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [405504 2008-08-01] (Acer Inc.)
HKLM\...\Run: [PLFSetL] - C:\Windows\PLFSetL.exe [94208 2011-01-22] (sonix)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2008-06-30] ()
HKLM\...\Run: [eBayToolbar] - C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe [632048 2009-03-19] (eBay Inc.)
HKLM\...\Run: [EzPrint] - C:\Program Files\Lexmark Pro700 Series\ezprint.exe [139944 2010-01-18] ()
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [182808 2008-07-20] (Intel Corporation)
HKLM\...\Run: [CLMLServer] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [167936 2008-07-24] (CyberLink)
HKLM\...\Run: [lxeemon.exe] - C:\Program Files\Lexmark Pro700 Series\lxeemon.exe [770728 2011-01-23] ()
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1115728 2009-12-15] (Dritek System Inc.)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM\...\Run: [LexwareInfoService] - C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-10] (AVAST Software)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2011-11-04] (Realtek Semiconductor)
Winlogon\Notify\AWinNotifyVitaKey MC3000: C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll (Arachnoid Biometrics Identification Group Corp.)
HKU\.DEFAULT\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-19\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung)
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\Run: [GfK-Proxy-Service] - C:\Program Files\GfK-ProxyService\GfK-ProxyWatchdog.exe [21480 2013-11-28] ()
HKU\S-1-5-21-2667981686-1106648099-187186479-1000\...\MountPoints2: {b2eaf739-9ee3-11df-9989-001e331dd3dc} - E:\autorun.exe
Lsa: [Notification Packages] scecli C:\Program Files\Acer\Acer Bio Protection\PwdFilter
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\VM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files\PdaNet for Android\PdaNetPC.exe ()

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:7777
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.freenet.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0609&m=aspire_8930
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
BHO: GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files\GfK Internet-Monitor\Gacela2.dll (GfK)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll (Egis)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
Toolbar: HKLM - eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll (eBay Inc.)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} -  No File
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: haufereader - No CLSID Value -
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.0.43.49 217.0.43.33 192.168.1.1

Chrome:
=======
CHR Extension: (avast! Online Security) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-25]
CHR Extension: (GfK Internet-Monitor) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef [2014-01-15]
CHR Extension: (Freemake Video Converter) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj [2013-06-08]
CHR Extension: (Google Wallet) - C:\Users\VM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-25]
CHR HKLM\...\Chrome\Extension: [igkejcihojcegdmifcnlkhmnelneogef] - C:\Program Files\GfK Internet-Monitor\Chrome Extension\extension.crx [2014-01-15]
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-06-08]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-10] (AVAST Software)
R2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [81504 2008-01-16] ()
R2 DeviceManager; C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe [40960 2009-05-25] ()
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [406016 2009-08-24] (mst software GmbH, Germany)
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-06-02] ()
R2 GfK-Proxy-Service; C:\Program Files\GfK-ProxyService\GfK-ProxyService.exe [45544 2013-11-28] ()
R2 GfK-Reporting-Service; C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe [3089384 2013-11-28] ()
R2 GfK-Update-Service; C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe [1376232 2013-11-28] ()
R2 IGBASVC; C:\Program Files\Acer\Acer Bio Protection\BASVC.exe [3520512 2009-06-14] ()
S2 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe [193192 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [598696 2010-04-14] ( )
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] ()
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] ()
R2 PLFlash DeviceIoControl Service; C:\Program Files\Nero\Nero BackItUp 4\IoctlSvc.exe [81920 2008-08-29] (Prolific Technology Inc.)
R2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [272024 2007-01-09] ()
R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [233472 2008-07-19] (Acer Incorporated)
R2 Uniblue DiskRescue; C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe [229648 2008-09-10] (Uniblue)

==================== Drivers (Whitelisted) ====================

R0 AlfaFF; C:\Windows\System32\Drivers\AlfaFF.sys [43184 2009-06-14] (Alfa Corporation)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-01-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2013-12-25] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-01-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410528 2014-01-10] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-01-10] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180248 2014-01-10] ()
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [28048 2010-02-05] (CSR, plc)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2010-01-01] (Elaborate Bytes AG)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-10-30] ()
R2 int15; C:\Windows\system32\drivers\int15.sys [69632 2007-01-26] ()
R3 itecir; C:\Windows\System32\DRIVERS\itecir.sys [62496 2011-11-04] (ITE Tech. Inc. )
R3 L1E; C:\Windows\System32\DRIVERS\L1E60x86.sys [54824 2012-10-12] (Atheros Communications, Inc.)
R3 NETwNv32; C:\Windows\System32\DRIVERS\NETwNv32.sys [7346176 2012-10-12] (Intel Corporation)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation)
R3 pmkbdfltr; C:\Windows\System32\DRIVERS\pmkbdfltr.sys [15248 2012-10-12] (PenMount)
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [103552 2009-05-25] (TCT International Mobile Ltd)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [23608 2012-10-12] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1759744 2011-01-22] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-10-16] (Avira GmbH)
R1 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5632 2009-09-01] ()
R3 TelekomNM3; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys [35040 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [61424 2008-07-18] (Cyberlink Corp.)
S2 Aspi32; No ImagePath
S1 DritekPortIO; No ImagePath
S3 esgiguard; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X]
S3 S6U12Scanner; system32\drivers\usbscan.sys [X]
S3 usbscan; system32\DRIVERS\usbscan.sys [X]
U5 usbser; C:\Windows\System32\Drivers\usbser.sys [27648 2009-04-11] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-07 18:28 - 2014-02-07 19:22 - 00000000 ____D () C:\Users\VM\Desktop\Spanisch
2014-02-05 23:05 - 2014-02-05 23:05 - 00000000 _____ () C:\END
2014-01-29 09:26 - 2014-01-29 09:26 - 00140304 _____ () C:\Windows\Minidump\Mini012914-01.dmp
2014-01-28 09:44 - 2014-01-28 09:44 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-CK-PC-Microsoft®-Windows-Vista™-Home-Premium-(32-bit).dat
2014-01-28 09:43 - 2014-01-28 09:43 - 00000000 ____D () C:\RegBackup
2014-01-28 08:51 - 2014-01-28 08:52 - 00000000 ____D () C:\Users\VM\Desktop\Tweaking.com - Windows Repair
2014-01-28 08:25 - 2014-01-28 08:26 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio (2).zip
2014-01-28 08:25 - 2014-01-28 08:25 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio (1).zip
2014-01-28 08:02 - 2014-01-28 08:02 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-27 15:22 - 2014-02-08 15:55 - 00000000 ____D () C:\Users\VM\Desktop\AntiTrojaner
2014-01-27 10:33 - 2014-01-27 10:33 - 00140112 _____ () C:\Windows\Minidump\Mini012714-01.dmp
2014-01-27 10:30 - 2014-01-27 12:30 - 00000000 ____D () C:\AdwCleaner
2014-01-23 22:08 - 2014-02-08 15:55 - 00000000 ____D () C:\FRST
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D () C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:43 - 00000000 ____D () C:\Users\VM\.gimp-2.8
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D () C:\Users\VM\AppData\Local\gegl-0.2
2014-01-17 23:16 - 2014-02-07 19:21 - 00000000 ____D () C:\Users\VM\Desktop\Mallorca
2014-01-16 21:03 - 2007-11-14 15:18 - 00000553 _____ () C:\Windows\USetup.iss
2014-01-16 05:23 - 2014-01-16 05:53 - 00000000 ____D () C:\Program Files\GfK-ProxyService
2014-01-15 21:48 - 2014-02-08 15:54 - 00000000 ____D () C:\Program Files\GfK Internet-Monitor
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ () C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-09 23:54 - 2014-01-16 03:09 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D () C:\Users\VM\AppData\Local\cache
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D () C:\Program Files\Image Converter

==================== One Month Modified Files and Folders =======

2014-02-08 15:55 - 2014-01-27 15:22 - 00000000 ____D () C:\Users\VM\Desktop\AntiTrojaner
2014-02-08 15:55 - 2014-01-23 22:08 - 00000000 ____D () C:\FRST
2014-02-08 15:54 - 2014-01-15 21:48 - 00000000 ____D () C:\Program Files\GfK Internet-Monitor
2014-02-08 15:54 - 2010-03-07 20:25 - 00226639 _____ () C:\ProgramData\lxeescan.log
2014-02-08 15:52 - 2009-02-02 13:15 - 00000147 _____ () C:\Windows\system32\agent.log
2014-02-08 15:51 - 2013-12-21 21:48 - 01205424 _____ () C:\Windows\PFRO.log
2014-02-08 15:51 - 2009-02-02 12:17 - 00000000 ____D () C:\Program Files\InstallShield Installation Information
2014-02-08 15:51 - 2006-11-02 13:47 - 00003344 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-08 15:51 - 2006-11-02 13:47 - 00003344 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-07 20:04 - 2009-07-02 00:19 - 00010652 _____ () C:\Windows\bthservsdp.dat
2014-02-07 20:03 - 2009-06-14 07:52 - 01455888 _____ () C:\Windows\WindowsUpdate.log
2014-02-07 20:02 - 2008-01-21 08:16 - 01549904 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-07 19:22 - 2014-02-07 18:28 - 00000000 ____D () C:\Users\VM\Desktop\Spanisch
2014-02-07 19:21 - 2014-01-17 23:16 - 00000000 ____D () C:\Users\VM\Desktop\Mallorca
2014-02-07 18:59 - 2010-03-07 20:31 - 00000000 ____D () C:\ProgramData\Lx_cats
2014-02-07 18:58 - 2010-03-07 21:06 - 00402604 _____ () C:\ProgramData\lxeeJSW.log
2014-02-07 18:27 - 2013-01-02 23:03 - 00000000 ____D () C:\Users\VM\AppData\Local\Nero
2014-02-07 18:01 - 2013-12-24 00:40 - 00000000 ___RD () C:\Users\VM\Eigene Bilder
2014-02-05 23:05 - 2014-02-05 23:05 - 00000000 _____ () C:\END
2014-02-05 23:04 - 2011-02-07 20:19 - 00008592 _____ () C:\Users\VM\AppData\Local\d3d9caps.dat
2014-02-05 23:00 - 2009-06-14 08:05 - 00000000 _____ () C:\Windows\system32\LogConfigTemp.xml
2014-02-05 22:58 - 2006-11-02 13:47 - 00492008 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-30 16:11 - 2013-12-24 00:33 - 00000000 ____D () C:\Users\VM\My Digital Editions
2014-01-30 15:58 - 2009-06-28 17:16 - 00000000 ____D () C:\Users\VM
2014-01-29 20:48 - 2009-06-28 23:58 - 00139936 _____ () C:\Windows\system32\GDIPFONTCACHEV1.DAT
2014-01-29 20:18 - 2006-11-02 13:37 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-01-29 09:26 - 2014-01-29 09:26 - 00140304 _____ () C:\Windows\Minidump\Mini012914-01.dmp
2014-01-29 09:26 - 2013-12-25 17:05 - 325170187 _____ () C:\Windows\MEMORY.DMP
2014-01-29 09:26 - 2010-01-11 00:25 - 00000000 ____D () C:\Windows\Minidump
2014-01-28 12:52 - 2006-11-02 11:23 - 00000855 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_702
2014-01-28 09:44 - 2014-01-28 09:44 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-CK-PC-Microsoft®-Windows-Vista™-Home-Premium-(32-bit).dat
2014-01-28 09:43 - 2014-01-28 09:43 - 00000000 ____D () C:\RegBackup
2014-01-28 08:52 - 2014-01-28 08:51 - 00000000 ____D () C:\Users\VM\Desktop\Tweaking.com - Windows Repair
2014-01-28 08:26 - 2014-01-28 08:25 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio (2).zip
2014-01-28 08:25 - 2014-01-28 08:25 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio (1).zip
2014-01-28 08:02 - 2014-01-28 08:02 - 02903255 _____ () C:\Users\VM\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-27 12:30 - 2014-01-27 10:30 - 00000000 ____D () C:\AdwCleaner
2014-01-27 10:33 - 2014-01-27 10:33 - 00140112 _____ () C:\Windows\Minidump\Mini012714-01.dmp
2014-01-25 20:54 - 2013-12-21 21:16 - 00009070 _____ () C:\Windows\setupact.log
2014-01-24 15:05 - 2009-06-28 19:17 - 00000000 ____D () C:\Users\VM\AppData\Local\Microsoft Help
2014-01-19 23:13 - 2014-01-05 22:37 - 00000000 ____D () C:\Users\VM\Desktop\Handybilder
2014-01-17 23:43 - 2014-01-17 23:28 - 00000000 ____D () C:\Users\VM\.gimp-2.8
2014-01-17 23:37 - 2014-01-17 23:37 - 00000000 ____D () C:\Users\VM\AppData\Local\gtk-2.0
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D () C:\Users\VM\AppData\Local\gegl-0.2
2014-01-16 21:09 - 2009-02-02 12:21 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-01-16 21:02 - 2009-02-02 12:23 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-01-16 14:25 - 2009-06-28 17:19 - 00000000 ____D () C:\Users\VM\AppData\Local\Google
2014-01-16 14:24 - 2009-02-02 12:44 - 00000000 ____D () C:\Program Files\Google
2014-01-16 09:59 - 2013-09-13 17:22 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-16 05:53 - 2014-01-16 05:23 - 00000000 ____D () C:\Program Files\GfK-ProxyService
2014-01-16 03:11 - 2013-07-22 23:17 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 03:09 - 2014-01-09 23:54 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-01-16 03:01 - 2006-11-02 11:24 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-01-15 21:48 - 2014-01-15 21:48 - 00002672 _____ () C:\Windows\system32\GacelaLSPServiceOff.ini
2014-01-10 00:07 - 2013-12-25 14:49 - 00000350 _____ () C:\Windows\Tasks\avast! Emergency Update.job
2014-01-10 00:07 - 2013-12-25 14:43 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00180248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2014-01-10 00:07 - 2013-12-25 14:43 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2014-01-10 00:06 - 2013-12-25 14:43 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-10 00:06 - 2013-12-25 14:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-09 23:54 - 2014-01-09 23:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-09 23:54 - 2014-01-09 23:54 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-01-09 23:54 - 2014-01-09 23:54 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-09 23:54 - 2011-06-02 21:31 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-01-09 23:54 - 2009-06-28 22:44 - 00000000 ____D () C:\Users\VM\AppData\Local\Adobe
2014-01-09 23:51 - 2014-01-09 23:51 - 00000000 ____D () C:\Users\VM\AppData\Local\cache
2014-01-09 23:48 - 2014-01-09 23:48 - 00000000 ____D () C:\Program Files\Image Converter

Files to move or delete:
====================
C:\Users\VM\AppData\Roaming\desktop.ini


Some content of TEMP:
====================
C:\Users\VM\AppData\Local\Temp\DivXSetup.exe
C:\Users\VM\AppData\Local\Temp\RtkBtMnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 15:59

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

schrauber 09.02.2014 09:52

Additional.txt fehlt :)

Claudia K. 09.02.2014 20:08

Uuuups, sorry... ;-) Here it is:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-02-2014
Ran by VM at 2014-02-08 15:58:29
Running from C:\Users\VM\Desktop\AntiTrojaner
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

 <==== ATTENTION
3Planesoft Screensaver Manager 1.2 (Version: 1.2 - 3Planesoft) <==== ATTENTION
AAV 6.0.00.15 (Version:  - ) <==== ATTENTION
ABBYY FineReader 6.0 Sprint (Version: 6.00.2146.41621 - ABBYY Software House) <==== ATTENTION
Acer Arcade Deluxe (Version: 2.1.5529 - CyberLink Corp.) <==== ATTENTION
Acer Arcade Deluxe (Version: 2.1.5529 - CyberLink Corp.) Hidden <==== ATTENTION
Acer Bio Protection <==== ATTENTION
Acer Crystal Eye Webcam 3.0.6.3 (Version: 3.0.6.3 - SuYin) <==== ATTENTION
Acer eAudio Management (Version: 3.0.3008 - CyberLink Corp.) <==== ATTENTION
Acer eDataSecurity Management (Version: 3.0.3065 - Egis Inc.) <==== ATTENTION
Acer Empowering Technology (Version: 3.0.3009 - Acer Incorporated) <==== ATTENTION
Acer ePower Management (Version: 3.0.3014 - Acer Incorporated) <==== ATTENTION
Acer eSettings Management (Version: 3.0.3011 - Acer Incorporated) <==== ATTENTION
Acer GridVista (Version: 2.72.317 - ) <==== ATTENTION
Acer Mobility Center Plug-In (Version: 3.0.3000 - Acer Inc.) <==== ATTENTION
Acer Product Registration (Version: 3.0.0.10 - Acer Incorporated) <==== ATTENTION
Acer ScreenSaver (Version: 1.13.1301 - Acer Inc.) <==== ATTENTION
Acer VCM (Version: 3.2.3002 - Acer Incorporated) <==== ATTENTION
Adobe Acrobat 9 Pro - English, Français, Deutsch (Version: 9.0.0 - Adobe Systems) Hidden <==== ATTENTION
Adobe Flash Player 11 ActiveX (Version: 11.1.102.55 - Adobe Systems Incorporated) <==== ATTENTION
Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated) <==== ATTENTION
Adobe Reader for Pocket PC 2.0 (Version: 2.0 - Adobe Systems) <==== ATTENTION
Adobe Reader for Pocket PC 2.0 (Version: 2.0 - Adobe Systems) Hidden <==== ATTENTION
Adobe Reader X (10.1.9) - Deutsch (Version: 10.1.9 - Adobe Systems Incorporated) <==== ATTENTION
Adobe Shockwave Player 11.5 (Version: 11.5.9.615 - Adobe Systems, Inc.) <==== ATTENTION
Advertising Center (Version: 0.0.0.1 - Nero AG) Hidden <==== ATTENTION
Agere Systems HDA Modem (Version:  - Agere Systems) <==== ATTENTION
Amazon MP3-Downloader 1.0.17 (Version: 1.0.17 - Amazon Services LLC) <==== ATTENTION
Apple Application Support (Version: 2.3.4 - Apple Inc.) <==== ATTENTION
Apple Software Update (Version: 2.1.3.127 - Apple Inc.) <==== ATTENTION
Ashampoo WinOptimizer 6.60 (Version: 6.6.0 - Ashampoo GmbH & Co. KG) <==== ATTENTION
Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver (Version: 1.0.0.30 - Atheros Communications Inc.) <==== ATTENTION
avast! Free Antivirus (Version: 9.0.2011 - Avast Software) <==== ATTENTION
BPM-Studio 4 Profi (Version:  - ) <==== ATTENTION
C:\Program Files\Acer GameZone\GameConsole (Version: 2.0.1.4 - Oberon Media, Inc.) <==== ATTENTION
CCleaner (Version: 4.06 - Piriform) <==== ATTENTION
Classic PhoneTools (Version: 9.00 - Avanquest software) <==== ATTENTION
Classic PhoneTools (Version: 9.00 - BVRP Software) Hidden <==== ATTENTION
CorelDRAW Graphics Suite X3 (Version: 13.0 - Corel Corporation) <==== ATTENTION
CyberLink PowerDirector (Version: 6.5.3023d - CyberLink Corp.) <==== ATTENTION
CyberLink PowerDirector (Version: 6.5.3023d - CyberLink Corp.) Hidden <==== ATTENTION
DATA BECKER - Die große CD-Druckerei (Version:  - ) <==== ATTENTION
DE (Version: 13.0 - Corel Corporation) Hidden <==== ATTENTION
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
DHTML Editing Component (Version: 6.02.0001 - Microsoft Corporation) <==== ATTENTION
DivX-Setup (Version: 2.6.1.84 - DivX, LLC) <==== ATTENTION
eBay Toolbar (Version: 2.50.12.4 - eBay) <==== ATTENTION
eSobi v2 (Version: 2.0.3.000223 - esobi Inc.) <==== ATTENTION
eSobi v2 (Version: 2.0.3.000223 - esobi Inc.) Hidden <==== ATTENTION
Feedback Tool (Version: 1.2.0 - Microsoft Corporation) <==== ATTENTION
Fireplace 3D Screensaver 1.0 (Version: 1.0 - 3Planesoft) <==== ATTENTION
FontNav (Version: 5.0 - Corel Corporation) Hidden <==== ATTENTION
Free Studio version 2013 (Version: 6.1.7.717 - DVDVideoSoft Ltd.) <==== ATTENTION
Freemake Video Converter Version 4.0.1 (Version: 4.0.1 - Ellora Assets Corporation) <==== ATTENTION
Galapago (Version:  - Oberon Media) <==== ATTENTION
GameXN GO (HKCU Version:  - GameXN AS) <==== ATTENTION
GfK Internet-Monitor (Version: 13.4.53 - GfK) <==== ATTENTION
GfK Proxy Service (Version:  - ) <==== ATTENTION
GIMP 2.8.10 (Version: 2.8.10 - The GIMP Team) <==== ATTENTION
Go-Go Gourmet (Version:  - Oberon Media) <==== ATTENTION
Google Chrome (Version: 32.0.1700.107 - Google Inc.) <==== ATTENTION
Google Earth (Version: 7.1.2.2041 - Google) <==== ATTENTION
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden <==== ATTENTION
Haufe iDesk-Service (Version: 11.07.19.8023 - Haufe) <==== ATTENTION
Heroes of Hellas (Version:  - Oberon Media) <==== ATTENTION
HSPA USB MODEM (Version:  - Alcatel) <==== ATTENTION
Image Editor Packages (HKCU Version:  - ) <==== ATTENTION
ImagXpress (Version: 7.0.74.0 - Nero AG) Hidden <==== ATTENTION
Intel PROSet Wireless (Version:  - ) Hidden <==== ATTENTION
Intel(R) PROSet/Wireless WiFi-Software (Version: 12.00.0004 - Intel(R) Corporation) <==== ATTENTION
Intel® Matrix Storage Manager (Version:  - Intel Corporation) <==== ATTENTION
IrfanView (remove only) (Version:  - ) <==== ATTENTION
ITECIR (Version: 1.6 - ITE) <==== ATTENTION
Java 7 Update 45 (Version: 7.0.450 - Oracle) <==== ATTENTION
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden <==== ATTENTION
Java(TM) 6 Update 2 (Version: 1.6.0.20 - Sun Microsystems, Inc.) <==== ATTENTION
Java(TM) 6 Update 35 (Version: 6.0.350 - Oracle) <==== ATTENTION
JMicron JMB38X Flash Media Controller (Version: 1.00.12.07 - JMicron Technology Corp.) <==== ATTENTION
Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden <==== ATTENTION
Launch Manager (Version: 3.0.02 - Acer Inc.) <==== ATTENTION
Lexmark  (Version: 1.0.0.0 - ) <==== ATTENTION
Lexmark Pro700 Series (Version:  - Lexmark International, Inc.) <==== ATTENTION
Lexmark Symbolleiste (Version: 4.63.37.0 - ) <==== ATTENTION
Lexmark Tools for Office (Version: 1.29.0.0 - ) <==== ATTENTION
Lexware Info Service (Version: 2.90.00.0009 - Haufe-Lexware GmbH & Co.KG) <==== ATTENTION
LightScribe  1.4.142.1 (Version: 1.4.142.1 - hxxp://www.lightscribe.com) Hidden <==== ATTENTION
Macromedia FreeHand 9 (Version: 9 - Macromedia) <==== ATTENTION
McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.) <==== ATTENTION
MEDION GoPal Assistant (Version: 6.2.0.12196 - MEDION) <==== ATTENTION
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (Version:  - Microsoft Corporation) <==== ATTENTION
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft .NET Framework 3.5 SP1 (Version:  - Microsoft Corporation) <==== ATTENTION
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) <==== ATTENTION
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) <==== ATTENTION
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) <==== ATTENTION
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) <==== ATTENTION
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft IntelliPoint 7.0 (Version: 7.0.260.0 - Microsoft) <==== ATTENTION
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) <==== ATTENTION
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) <==== ATTENTION
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation) <==== ATTENTION
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation) <==== ATTENTION
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation) <==== ATTENTION
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation) <==== ATTENTION
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) <==== ATTENTION
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation) <==== ATTENTION
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) <==== ATTENTION
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) <==== ATTENTION
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) <==== ATTENTION
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) <==== ATTENTION
Microsoft Works (Version: 08.05.0822 - Microsoft Corporation) <==== ATTENTION
Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0 - Microsoft Corp.) <==== ATTENTION
Mobipocket Reader 6.2 (Version: 6.2.608 - Mobipocket.com) <==== ATTENTION
MSVC80_x86 (Version: 1.0.1.0 - Nokia) Hidden <==== ATTENTION
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden <==== ATTENTION
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden <==== ATTENTION
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden <==== ATTENTION
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation) <==== ATTENTION
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation) <==== ATTENTION
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0 - Microsoft Corporation) <==== ATTENTION
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0 - Microsoft Corporation) <==== ATTENTION
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0 - Microsoft Corporation) <==== ATTENTION
Mythic Mahjong (Version:  - Oberon Media) <==== ATTENTION
Nero 12 (Version: 12.0.02900 - Nero AG) <==== ATTENTION
Nero Audio Pack 1 (Version: 11.0.11500.110.0 - Nero AG) Hidden <==== ATTENTION
Nero BackItUp (Version: 12.0.6002 - Nero AG) Hidden <==== ATTENTION
Nero BackItUp (Version: 4.0.0.0 - Nero AG) Hidden <==== ATTENTION
Nero BackItUp 4 (Version:  - Nero AG) <==== ATTENTION
Nero BackItUp Help (CHM) (Version: 12.0.8000 - Nero AG) Hidden <==== ATTENTION
Nero Blu-ray Player (Version: 12.0.17700 - Nero AG) Hidden <==== ATTENTION
Nero Blu-ray Player Help (CHM) (Version: 12.0.9000 - Nero AG) Hidden <==== ATTENTION
Nero Burning ROM (Version: 12.0.28001 - Nero AG) Hidden <==== ATTENTION
Nero Burning ROM Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden <==== ATTENTION
Nero ControlCenter (Version: 11.0.15500 - Nero AG) Hidden <==== ATTENTION
Nero ControlCenter (Version: 9.0.0.1 - Nero AG) Hidden <==== ATTENTION
Nero ControlCenter Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden <==== ATTENTION
Nero Core Components (Version: 11.0.18900 - Nero AG) Hidden <==== ATTENTION
Nero Disc Menus Basic (Version: 12.0.11500 - Nero AG) Hidden <==== ATTENTION
Nero Effects Basic (Version: 12.0.11500 - Nero AG) Hidden <==== ATTENTION
Nero Express (Version: 12.0.28001 - Nero AG) Hidden <==== ATTENTION
Nero Express Help (CHM) (Version: 12.0.5000 - Nero AG) Hidden <==== ATTENTION
Nero Installer (Version: 2.0.0.1 - Nero AG) Hidden <==== ATTENTION
Nero Kwik Media (Version: 1.18.19600 - Nero AG) Hidden <==== ATTENTION
Nero Kwik Media Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden <==== ATTENTION
Nero Kwik Themes Basic (Version: 12.0.11500 - Nero AG) Hidden <==== ATTENTION
Nero PiP Effects Basic (Version: 12.0.11500 - Nero AG) Hidden <==== ATTENTION
Nero Recode (Version: 12.0.31001 - Nero AG) Hidden <==== ATTENTION
Nero Recode Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden <==== ATTENTION
Nero RescueAgent (Version: 12.0.10002 - Nero AG) Hidden <==== ATTENTION
Nero RescueAgent Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden <==== ATTENTION
Nero SharedVideoCodecs (Version: 1.0.12100.2.0 - Nero AG) Hidden <==== ATTENTION
Nero Update (Version: 11.0.11800.31.0 - Nero AG) Hidden <==== ATTENTION
Nero Video (Version: 12.0.8000 - Nero AG) Hidden <==== ATTENTION
Nero Video Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden <==== ATTENTION
neroxml (Version: 1.0.0 - Nero AG) Hidden <==== ATTENTION
Netzmanager (Version: 1.071 - Deutsche Telekom AG) <==== ATTENTION
Netzmanager (Version: 1.071 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden <==== ATTENTION
NTI Backup Now 5 (Version: 5.1.2.606 - NewTech Infosystems) <==== ATTENTION
NTI Backup Now Standard (Version: 5.1.2.606 - NewTech Infosystems) Hidden <==== ATTENTION
NTI Media Maker 8 (Version: 8.0.2.6329 - NewTech Infosystems) <==== ATTENTION
NTI Media Maker 8 (Version: 8.0.2.6329 - NewTech Infosystems) Hidden <==== ATTENTION
NVIDIA Drivers (Version: 1.10 - NVIDIA Corporation) <==== ATTENTION
NVIDIA Install Application (Version: 2.1002.85.551 - NVIDIA Corporation) Hidden <==== ATTENTION
NVIDIA PhysX (Version: 9.09.0203 - NVIDIA Corporation) <==== ATTENTION
NVIDIA Systemsteuerung 306.97 (Version: 306.97 - NVIDIA Corporation) Hidden <==== ATTENTION
Office-Bibliothek (Version: 5.00.4 - Bibliographisches Institut & F.A. Brockhaus AG) <==== ATTENTION
Orion (Version: 2.0.1 - Convesoft) <==== ATTENTION
PdaNet for Android 3.50 (Version:  - June Fabrics Technology Inc) <==== ATTENTION
PhotoNow! (Version: 1.1.4619 - CyberLink Corp.) <==== ATTENTION
PixiePack Codec Pack (Version: 1.1.1200.0 - None) <==== ATTENTION
Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden <==== ATTENTION
Putt Mania (Version:  - Oberon Media) <==== ATTENTION
QuickSteuer 2011 (Version: 17.05.00.0003 - Haufe-Lexware GmbH & Co.KG) <==== ATTENTION
QuickSteuer 2012 COMPUTERBILD Edition (Version: 18.07.00.0008 - Haufe-Lexware GmbH & Co.KG) <==== ATTENTION
QuickSteuer 2013 (Version: 19.06.00.0003 - Haufe-Lexware GmbH & Co.KG) <==== ATTENTION
QuickSteuer Wissens-Center 2011 (Version: 17.10.0.0 - Haufe-Lexware GmbH & Co. KG) <==== ATTENTION
QuickSteuer Wissens-Center 2012 (Version: 18.1.0.0 - Haufe-Lexware GmbH & Co. KG) <==== ATTENTION
QuickTime (Version: 7.74.80.86 - Apple Inc.) <==== ATTENTION
Radiotracker (Version: 6.2.13700.0 - RapidSolution Software AG) <==== ATTENTION
Realtek High Definition Audio Driver (Version: 6.0.1.6167 - Realtek Semiconductor Corp.) <==== ATTENTION
Samsung Kies (Version: 2.0.1.11053_99 - Samsung Electronics Co., Ltd.) <==== ATTENTION
Samsung Kies (Version: 2.0.1.11053_99 - Samsung Electronics Co., Ltd.) Hidden <==== ATTENTION
Samsung PC Studio 3 (Version: 3.0.0.80502 - Samsung Electronics Co., Ltd.) Hidden <==== ATTENTION
SAMSUNG USB Driver for Mobile Phones (Version: 1.3.2410.0 - SAMSUNG Electronics Co., Ltd.) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden <==== ATTENTION
Servicepack Datumsaktualisierung (Version: 1.00.00.0005 - Haufe-Lexware) Hidden <==== ATTENTION
Skype™ 6.0 (Version: 6.0.126 - Skype Technologies S.A.) <==== ATTENTION
StarMoney (Version: 1.0 - StarFinanz) Hidden <==== ATTENTION
StarMoney (Version: 2.0 - StarFinanz) Hidden <==== ATTENTION
StarMoney (Version: 3.0.0.124 - StarFinanz) Hidden <==== ATTENTION
Synaptics Pointing Device Driver (Version: 14.0.12.0 - Synaptics Incorporated) <==== ATTENTION
TuneUp Utilities Language Pack (de-DE) (Version: 9.0.6030.1 - TuneUp Software) Hidden <==== ATTENTION
TVgenial 4.10 (Version:  - ) <==== ATTENTION
Uniblue DiskRescue 2009 (Version: 1.0.0 - Uniblue Systems) Hidden <==== ATTENTION
Uniblue DriverScanner 2009 (Version: 2.0.0.1 - Uniblue Systems Ltd.) Hidden <==== ATTENTION
Uninstall 1.0.0.1 (Version:  - ) <==== ATTENTION
Unity Web Player (HKCU Version:  - Unity Technologies ApS) <==== ATTENTION
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation) <==== ATTENTION
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation) <==== ATTENTION
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation) <==== ATTENTION
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation) <==== ATTENTION
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation) <==== ATTENTION
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation) <==== ATTENTION
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1 - Microsoft Corporation) <==== ATTENTION
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1 - Microsoft Corporation) <==== ATTENTION
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1 - Microsoft Corporation) <==== ATTENTION
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1 - Microsoft Corporation) <==== ATTENTION
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3 - Microsoft Corporation) <==== ATTENTION
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update Manager (Version: 4.60 - Corel Corporation) Hidden <==== ATTENTION
Validity Sensors software (Version: 2.7.44 - Validity Sensors, Inc.) <==== ATTENTION
VBA (Version: 6.2 - Corel Corporation) Hidden <==== ATTENTION
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden <==== ATTENTION
Virtual DJ - Atomix Productions (Version:  - ) <==== ATTENTION
VirtualCloneDrive (Version:  - Elaborate Bytes) <==== ATTENTION
VirtualDJ PRO Full (Version: 7.0.4 - Atomix Productions) <==== ATTENTION
Welcome App (Start-up experience) (Version: 12.0.15000 - Nero AG) Hidden <==== ATTENTION
Windows Live Call (Version: 14.0.8064.0206 - Microsoft Corporation) Hidden <==== ATTENTION
Windows Live Communications Platform (Version: 14.0.8098.930 - Microsoft Corporation) Hidden <==== ATTENTION
Windows Live Essentials (Version: 14.0.8089.0726 - Microsoft Corporation) <==== ATTENTION
Windows Live Essentials (Version: 14.0.8089.726 - Microsoft Corporation) Hidden <==== ATTENTION
Windows Live Fotogalerie (Version: 14.0.8081.709 - Microsoft Corporation) Hidden <==== ATTENTION
Windows Live ID-Anmelde-Assistent (Version: 6.500.3165.0 - Microsoft Corporation) <==== ATTENTION
Windows Live Mail (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden <==== ATTENTION
Windows Live Messenger (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden <==== ATTENTION
Windows Live Writer (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden <==== ATTENTION
Windows Live-Uploadtool (Version: 14.0.8014.1029 - Microsoft Corporation) <==== ATTENTION
Windows Mobile-Gerätecenter (Version: 6.1.6965.0 - Microsoft Corporation) <==== ATTENTION
Windows Mobile-Gerätecenter: Treiberupdate (Version: 6.1.6965.0 - Microsoft Corporation) <==== ATTENTION
WinRAR (Version:  - ) <==== ATTENTION
Xara Photo & Graphic Designer 6 (Version: 6.1.3.25152 - Xara Group Ltd) <==== ATTENTION
Xara Photo & Graphic Designer 6 (Version: 6.1.3.25152 - Xara Group Ltd) Hidden <==== ATTENTION

==================== Restore Points  =========================

07-01-2014 17:44:34 Windows Update
09-01-2014 23:03:34 avast! antivirus system restore point
15-01-2014 12:06:04 Windows Update
16-01-2014 02:00:30 Windows Update
21-01-2014 12:52:21 Windows Update
24-01-2014 18:28:25 Windows Update

==================== Hosts content: ==========================

2006-11-02 11:23 - 2014-01-28 21:33 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {27EC1DEA-57EC-423F-AA44-2D88E86D382D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {5A7F5460-B140-4D8D-B9EB-39C5E1DF451E} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {634EEDCC-710F-464A-A305-32334C8EE65A} - System32\Tasks\Uniblue DiskRescue 2009 => C:\Program Files\Uniblue\DiskRescue\UBDiskRescue.exe [2008-09-10] (Uniblue)
Task: {69623E90-07BC-4041-A70B-3E1A7D6BE87B} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2009-06-01] (Microsoft Corporation)
Task: {69682880-4C7B-4ADD-812B-0A11C2C1103B} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {73CF916C-8B98-4169-A0A9-2974C54CCBE3} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {75D79F72-E960-4A77-92D7-8F1A2A8EBD2C} - System32\Tasks\InstallShield Software-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2005-08-11] (Macrovision Corporation)
Task: {8B1C49D2-71EA-4E0F-A58D-6E463B027166} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-30] (Google Inc.)
Task: {A43163DD-771C-4F90-A1C5-827EF9792C8B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {B19AD1E9-68EC-4259-8132-F36461A0F0E0} - System32\Tasks\{F62FF463-32EE-4AB5-91B3-768D3C5905BB} => C:\Program Files\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {C0276B33-DD07-41FB-B1CC-1F7B41746315} - System32\Tasks\{B54E3089-7E05-4657-8ADF-FD6ACB82CC21} => C:\Program Files\Skype\\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {CD85FE0E-256B-4185-968B-B2E859598A46} - System32\Tasks\{6D53D572-09B3-432B-8B05-6B0C41F87FAC} => C:\Program Files\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {E1FD0C7C-6741-43CA-952C-72310DE39797} - System32\Tasks\{57C162A0-E3B0-4C81-81C7-3B784833FC42} => C:\Program Files\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {E765ADB2-FECE-4ECB-9724-E5AF8F8EFB3F} - System32\Tasks\{EDAB9B0E-ACA4-4294-AA65-0A1FE2741AEF} => Iexplore.exe hxxp://ui.skype.com/ui/0/4.1.0.179/de/abandoninstall?page=tsChrome&amp;installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:offered-notinstalled
Task: {E7D075D2-BF1B-45AC-BFE2-F0B692466C48} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-30] (Google Inc.)
Task: {E97F56B4-78D5-4E60-AE6B-C367FFE5A3D3} - System32\Tasks\Update Manager => C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [2011-07-31] (Haufe-Lexware GmbH & Co. KG)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cef1e721a369a0.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Uniblue DiskRescue 2009.job => C:\Program Files\Uniblue\DiskRescue\UBDiskRescue.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2008-05-22 03:27 - 2011-08-19 02:09 - 00528384 _____ () C:\Program Files\Lexmark Toolbar\toolband.dll
2008-05-22 03:28 - 2011-08-19 02:25 - 00471040 _____ () C:\Program Files\Lexmark Toolbar\resource.dll
2008-07-29 17:52 - 2008-07-29 17:52 - 00227888 _____ () C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ShowErrMsg.dll
2009-02-02 12:43 - 2009-02-02 12:43 - 00036864 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Utility\3.0.3009.0__4df5dcab8860d239\Framework.Utility.dll
2009-02-02 12:43 - 2009-02-02 12:43 - 00061440 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Library\3.0.3009.0__3036420f80dd6947\Framework.Library.dll
2010-03-07 20:22 - 2009-03-30 07:37 - 00708608 _____ () C:\Program Files\Lexmark Pro700 Series\Epwizard.DLL
2010-03-07 20:22 - 2009-03-30 07:35 - 00159744 _____ () C:\Program Files\Lexmark Pro700 Series\customui.dll
2010-03-07 20:22 - 2009-03-30 07:35 - 00118784 _____ () C:\Program Files\Lexmark Pro700 Series\Eputil.DLL
2010-03-07 20:22 - 2009-03-30 07:35 - 00139264 _____ () C:\Program Files\Lexmark Pro700 Series\Imagutil.DLL
2010-03-07 20:22 - 2009-03-30 07:35 - 00061440 _____ () C:\Program Files\Lexmark Pro700 Series\Epfunct.DLL
2010-03-07 20:22 - 2009-06-23 06:09 - 02203648 _____ () C:\Program Files\Lexmark Pro700 Series\EPWizRes.dll
2010-03-07 20:22 - 2009-06-23 06:10 - 00045056 _____ () C:\Program Files\Lexmark Pro700 Series\epstring.dll
2010-03-07 20:22 - 2009-06-23 06:11 - 00102400 _____ () C:\Program Files\Lexmark Pro700 Series\EPOEMDll.dll
2010-03-07 20:22 - 2009-04-07 14:25 - 00409600 _____ () C:\Program Files\Lexmark Pro700 Series\iptk.dll
2010-03-07 20:22 - 2009-03-02 09:25 - 00151552 _____ () C:\Program Files\Lexmark Pro700 Series\lxeeptp.dll
2008-07-24 14:54 - 2008-07-24 14:54 - 00757760 _____ () C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMediaLibrary.dll
2010-03-07 20:22 - 2010-04-01 11:23 - 00389120 _____ () C:\Program Files\Lexmark Pro700 Series\lxeescw.dll
2010-03-07 20:25 - 2009-05-27 07:16 - 00192512 _____ () C:\Windows\system32\spool\drivers\w32x86\3\lxeedatr.dll
2010-03-07 20:22 - 2010-04-01 11:24 - 01159168 _____ () C:\Program Files\Lexmark Pro700 Series\lxeeDRS.dll
2010-03-07 20:22 - 2009-03-10 00:43 - 00155648 _____ () C:\Program Files\Lexmark Pro700 Series\lxeecaps.dll
2010-03-07 20:10 - 2009-02-20 09:48 - 00299008 _____ () C:\Windows\system32\lxeesm.dll
2010-03-07 20:10 - 2009-04-28 08:56 - 00024064 _____ () C:\Windows\system32\lxeesmr.dll
2013-08-29 01:25 - 2013-08-29 01:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-12-25 14:42 - 2013-12-25 14:42 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-04-21 21:44 - 2013-04-21 21:44 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2013-04-21 21:44 - 2013-04-21 21:44 - 01242952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2009-06-14 08:13 - 2007-09-11 10:12 - 00475136 _____ () C:\Program Files\Acer\Acer VCM\AcerControl.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:05113FB9
AlternateDataStreams: C:\ProgramData\Temp:430C6D84
AlternateDataStreams: C:\ProgramData\Temp:4D066AD2
AlternateDataStreams: C:\ProgramData\Temp:5D7E5A8F
AlternateDataStreams: C:\ProgramData\Temp:C99F6ECA
AlternateDataStreams: C:\ProgramData\Temp:DAFD38AE
AlternateDataStreams: C:\ProgramData\Temp:DFC5A2B2
AlternateDataStreams: C:\ProgramData\Temp:EEFF768F

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: isatap.{E8D12279-C9FE-4919-B3C2-94C4123E65E8}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: isatap.{E8D12279-C9FE-4919-B3C2-94C4123E65E8}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: isatap.home
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-ISATAP-Adapter #4
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/07/2014 08:01:01 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts auf dem Volume (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Hr = 0x8000ffff).

Error: (02/07/2014 08:01:01 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80040154.


Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata

Error: (02/07/2014 08:01:01 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienst-Fehler: Die VSS-Ereignisklasse ist nicht registriert. Dadurch wird
verhindert, dass VSS-Generatoren Ereignisse empfangen. Dies kann auf einen Setupfehler
oder das Installationsprogramm bzw. Deinstallationsprogramm einer Anwendung zurückzuführen
sein.


Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata

Error: (02/07/2014 06:38:29 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung Explorer.EXE, Version 6.0.6002.18005, Zeitstempel 0x49e01da5, fehlerhaftes Modul NBRes-DEU.nls_unloaded, Version 0.0.0.0, Zeitstempel 0x48b76c5c, Ausnahmecode 0xc0000005, Fehleroffset 0x07c1251c,
Prozess-ID 0x7ac, Anwendungsstartzeit Explorer.EXE0.

Error: (02/07/2014 04:03:49 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts auf dem Volume (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Hr = 0x8000ffff).

Error: (02/07/2014 04:03:48 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80040154.


Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata

Error: (02/07/2014 04:03:48 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienst-Fehler: Die VSS-Ereignisklasse ist nicht registriert. Dadurch wird
verhindert, dass VSS-Generatoren Ereignisse empfangen. Dies kann auf einen Setupfehler
oder das Installationsprogramm bzw. Deinstallationsprogramm einer Anwendung zurückzuführen
sein.


Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata

Error: (02/07/2014 03:00:25 AM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts auf dem Volume (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Hr = 0x8000ffff).

Error: (02/07/2014 03:00:24 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80040154.


Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata

Error: (02/07/2014 03:00:24 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienst-Fehler: Die VSS-Ereignisklasse ist nicht registriert. Dadurch wird
verhindert, dass VSS-Generatoren Ereignisse empfangen. Dies kann auf einen Setupfehler
oder das Installationsprogramm bzw. Deinstallationsprogramm einer Anwendung zurückzuführen
sein.


Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata


System errors:
=============
Error: (02/08/2014 03:54:38 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (02/08/2014 03:54:36 PM) (Source: Service Control Manager) (User: )
Description: Windows Media Player-NetzwerkfreigabedienstUPnP-Gerätehost%%1058

Error: (02/08/2014 03:53:29 PM) (Source: Service Control Manager) (User: )
Description: lxeeCATSCustConnectService%%1053

Error: (02/08/2014 03:53:29 PM) (Source: Service Control Manager) (User: )
Description: 30000lxeeCATSCustConnectService

Error: (02/08/2014 03:53:29 PM) (Source: Service Control Manager) (User: )
Description: Aspi32%%2

Error: (02/07/2014 08:03:08 PM) (Source: Service Control Manager) (User: )
Description: Netzmanager Infrastruktur Informationssystem Dienst150001Neustart des Diensts

Error: (02/07/2014 03:01:44 AM) (Source: Service Control Manager) (User: )
Description: Netzmanager Infrastruktur Informationssystem Dienst150001Neustart des Diensts

Error: (02/07/2014 03:01:17 AM) (Source: Service Control Manager) (User: )
Description: 30000Netzmanager Service

Error: (02/07/2014 03:00:46 AM) (Source: Service Control Manager) (User: )
Description: 30000Netzmanager Service

Error: (02/06/2014 10:14:43 PM) (Source: Service Control Manager) (User: )
Description: 30000Netzmanager Service


Microsoft Office Sessions:
=========================
Error: (02/07/2014 08:01:01 PM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x8000ffff

Error: (02/07/2014 08:01:01 PM) (Source: VSS)(User: )
Description: CoCreateInstance0x80040154

Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata

Error: (02/07/2014 08:01:01 PM) (Source: VSS)(User: )
Description: Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata

Error: (02/07/2014 06:38:29 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.0.6002.1800549e01da5NBRes-DEU.nls_unloaded0.0.0.048b76c5cc000000507c1251c7ac01cf22bd5605a57e

Error: (02/07/2014 04:03:49 PM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x8000ffff

Error: (02/07/2014 04:03:48 PM) (Source: VSS)(User: )
Description: CoCreateInstance0x80040154

Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata

Error: (02/07/2014 04:03:48 PM) (Source: VSS)(User: )
Description: Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata

Error: (02/07/2014 03:00:25 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x8000ffff

Error: (02/07/2014 03:00:24 AM) (Source: VSS)(User: )
Description: CoCreateInstance0x80040154

Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata

Error: (02/07/2014 03:00:24 AM) (Source: VSS)(User: )
Description: Vorgang:
  Generatordaten werden gesammelt
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Ausführungskontext: Requestor
  Aktueller Status: GatherWriterMetadata


CodeIntegrity Errors:
===================================
  Date: 2013-07-22 21:35:04.411
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-22 21:35:03.879
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-22 21:28:34.355
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-22 21:28:33.853
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:08:50.063
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:08:49.499
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:05:35.967
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-03 23:05:35.492
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\SysHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 61%
Total physical RAM: 3068.03 MB
Available physical RAM: 1178.9 MB
Total Pagefile: 6044.12 MB
Available Pagefile: 3646.65 MB
Total Virtual: 2047.88 MB
Available Virtual: 1932.09 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:144.04 GB) (Free:1.75 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:137.5 GB) (Free:126.45 GB) NTFS
Drive f: (SpanischMP3CD) (CDROM) (Total:0.27 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 4EBF5754)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=138 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=4 GB) - (Type=12)

==================== End Of Log ============================


schrauber 10.02.2014 17:08

welche Software von McAfee meinst du? Kommt die andere Meldung noch?

Claudia K. 10.02.2014 22:07

Liste der Anhänge anzeigen (Anzahl: 1)
Die läuft irgendwie immer nur im Hintergrund (siehe Anlage).

schrauber 11.02.2014 18:00

Zitat:

McAfee Security Scan Plus
das bitte mit Revo deinstallieren:
Revo Uninstaller - Download - Filepony

Claudia K. 11.02.2014 18:37

Okay, hab ich gemacht. Und nun? Welche Sicherheitssoftware soll ich mir wo runterladen?

schrauber 12.02.2014 17:47

Du hast Avast, das reicht mit der WIndows Firewall. Jetzt kommen nach dem Aufräumen noch ein paar Tipps :)

Fertig :)

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Claudia K. 13.02.2014 09:58

Okay, dann habe ich nur noch folgende abschließende Fragen:

- Kann ich jetzt wieder MalwareBytes downloaden, oder ist das jetzt bei mir tabu?

- Ich habe "automatische Updates" aktiviert. Als ich jetzt nachgesehen habe, waren da aber 17 (!!!) Updates, die auf meine Bestätigung gewartet haben. Wie kann das sein???

Liebe Grüße

Claudia

schrauber 14.02.2014 10:45

Du musst unterscheiden zwischen automatisch laden und automatisch installieren. WIe genau ist die Einstellung bei dir?

MBAM kannste versuchen, wenn es stresst nochmal im Safe Mode deinstallieren. Sollte aber eigetlich behoben sein.


Alle Zeitangaben in WEZ +1. Es ist jetzt 05:39 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19