Wie lösche ich den Trojaner

static.australienbrewingcompany.com?

Danke im voraus

guant4

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Ich habe die 32 Version runtergeladen, aber es passiert nichts????

Geht das ein wenig genauer?

Tut mir Leid, aber ich bin wirklich ein Laie auf diesem Gebiet. Jetzt habe ich

iMesh

als Programm, aber nicht diesen F... 32 Bitversion , der vollständige Name ist mir leider entfallen.

Was muss ich jetzt machen?
Gruß guant4

Leider muss ich jetzt los. Ich schaue Nachmittag noch mal rein.

Gruß guant4

Jetzt habe ich sowohl FRST.txt und auch Addition.txt auf meinem Desktop. Wie poste ich die zu Dir?

Gruß guant4

esult of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-12-2013 01
Ran by Klaus (administrator) on KLAUS-PC on 15-12-2013 14:25:36
Running from C:\Users\Klaus
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(America Online, Inc.) C:\Program Files\Common Files\aol\ACS\AOLacsd.exe
(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Wistron Corp.) C:\Program Files\Launch Manager\OSD.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WButton.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(America Online, Inc) C:\Program Files\Common Files\aol\ACS\AOLDial.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WisLMSvc.exe
(Smartbar) C:\Users\Klaus\AppData\Local\Smartbar\Application\SnapDo.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(America Online, Inc.) C:\Program Files\AOL 9.0\aoltray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [LMgrVolOSD] - C:\Program Files\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.)
HKLM\...\Run: [Wbutton] - C:\Program Files\Launch Manager\WButton.exe [413696 2010-01-13] (Wistron Corp.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2009-12-11] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8522272 2010-03-02] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [678432 2010-03-02] (Realtek Semiconductor)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [] - [x]
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-10-19] (AVAST Software)
HKLM\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\ced2504e-930d-4c35-90b1-832df0c90a98.exe [180184 2013-11-23] (AVAST Software)
HKLM\...\Run: [AOLDialer] - C:\Program Files\Common Files\aol\ACS\AOLDial.exe [496752 2004-02-25] (America Online, Inc)
HKLM\...\Run: [RealTray] - c:\program files\real\realplayer\\RealPlay.exe SYSTEMBOOTHIDEPLAYER
HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\Klaus\AppData\Local\Smartbar\Application\SnapDo.exe [21024 2013-08-04] (Smartbar)
HKCU\...\Run: [TClockEx] - C:\Program Files\TClockEx\TCLOCKEX.EXE [89088 2000-03-09] (Dale Nurden)
HKCU\...\Run: [BackgroundContainer] - "C:\Windows\system32\Rundll32.exe" "C:\Users\Klaus\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION
HKCU\...0c966feabec1\InprocServer32: [Default-shell32] ATTENTION! ====> ZeroAccess?
MountPoints2: {dc69456f-2c05-11e3-97a8-806e6f6e6963} - E:\zdata\cobi.exe
HKU\Default\...\RunOnce: [MEDION] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Default User\...\RunOnce: [MEDION] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Nachrichten - Service - Shopping bei t-online.de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Welcome to ALDI
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
URLSearchHook: HKLM - WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
URLSearchHook: HKCU - WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
URLSearchHook: HKCU - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
SearchScopes: HKLM - DefaultScope {25219A87-0B62-426D-A738-95514B934E7C} URL =
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=1CD71C4BD6663CEF&affID=125035&tsp=5025
SearchScopes: HKCU - {25219A87-0B62-426D-A738-95514B934E7C} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311268&CUI=UN31055759242975416&UM=2
BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - No File
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: searchgol Helper Object - {8F547BDD-FCD4-48F8-A06F-573D6F404A3C} - C:\Program Files\searchgol\searchgol\1.8.16.19\bh\searchgol.dll (Montera Technologeis LTD)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
BHO: No Name - {fe063412-bea4-4d76-8ed3-183be6220d17} - No File
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - searchgol Toolbar - {00078E95-3A4A-4137-8DE7-2824908D1C17} - C:\Program Files\searchgol\searchgol\1.8.16.19\searchgolTlbr.dll (Montera Technologeis LTD)
Toolbar: HKLM - No Name - {25A3A431-30BB-47C8-AD6A-E1063801134F} - No File
Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
Toolbar: HKLM - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
Toolbar: HKLM - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU - WhiteSmoke New V6 Toolbar - {DA7F5AE1-3BE3-43C0-8098-C1D183616E97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome:
=======
CHR HomePage:
CHR RestoreOnStartup: "browser": {
"last_known_google_url": "https://www.google.de/",
"last_prompted_google_url": "https://www.google.de/",
"show_home_button": true,
"window_placement": {
"bottom": 718,
"left": 10,
"maximized": true,
"right": 1060,
"top": 10,
"work_area_bottom": 728,
"work_area_left": 0,
"work_area_right": 1366,
"work_area_top"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Amazon
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{googleriginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{go ogle:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{googlemniboxStartMarginParameter}ie={inputEncoding}
CHR Extension: (Search-Gol Toolbar) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac\1.0_0
CHR Extension: (Snap.Do ) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0
CHR Extension: (Feven 1.5) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0
CHR Extension: (YouTube) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Softonic Chrome Toolbar) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0
CHR Extension: (Plus-HD-1.3) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0
CHR Extension: (BonanzaDeals) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj\3.5.0.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR Extension: (Iminent Chrome Toolbar) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb\2.0_0
CHR HKLM\...\Chrome\Extension: [aipfmkinhleccnodemkoofnnofpbbpac] - C:\Users\Klaus\AppData\Roaming\BabSolution\CR\searchgol.crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM\...\Chrome\Extension: [ibcgjcbeckcdemelifnledhihpaighfk] - C:\Users\Klaus\AppData\Local\CRE\ibcgjcbeckcdemelifnledhihpaighfk.crx
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx

========================== Services (Whitelisted) =================

R2 AOL ACS; C:\Program Files\Common Files\aol\ACS\AOLacsd.exe [1123440 2004-02-25] (America Online, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-19] (AVAST Software)
R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1155072 2009-02-03] (MAGIX AG)
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®)
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [244904 2010-02-10] ()
R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118560 2009-10-22] (Wistron Corp.)
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [35656 2013-10-19] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2013-10-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [79720 2013-10-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-10-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [774392 2013-10-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [403440 2013-12-08] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2013-10-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [178304 2013-10-19] ()
S3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [786400 2009-08-13] (DiBcom SA)
R1 SLEE_15_DRIVER; C:\Windows\system32\drivers\Sleen15.sys [80232 2007-02-21] (Softwareentwicklung Remus - ArchiCrypt )
S3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [12320 2013-08-21] (TuneUp Software)
R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2003-01-10] (America Online, Inc.)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13720 2009-05-13] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27160 2009-05-13] (X10 Wireless Technology, Inc.)
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-15 14:25 - 2013-12-15 14:25 - 00016736 _____ C:\Users\Klaus\FRST.txt
2013-12-15 14:25 - 2013-12-15 14:25 - 00000000 ____D C:\FRST
2013-12-15 14:23 - 2013-12-15 14:23 - 01060897 _____ (Farbar) C:\Users\Klaus\FRST.exe
2013-12-15 14:11 - 2013-12-15 14:11 - 00000056 _____ C:\Windows\setupact.log
2013-12-15 14:11 - 2013-12-15 14:11 - 00000000 _____ C:\Windows\setuperr.log
2013-12-15 09:44 - 2013-12-15 09:46 - 00000000 ____D C:\Program Files\AOL 9.0
2013-12-15 09:44 - 2013-12-15 09:45 - 00000000 ____D C:\Program Files\Common Files\aolshare
2013-12-15 09:44 - 2004-02-25 14:50 - 00153088 _____ (America Online) C:\Windows\system32\jgdwmie.dll
2013-12-15 09:44 - 2004-02-25 11:21 - 00225280 _____ (America Online, Inc) C:\Windows\system32\AOLDial.dll
2013-12-15 08:49 - 2013-12-15 08:59 - 00026624 _____ C:\Users\Klaus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\Documents\My Received Files
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MusicNet
2013-12-14 15:02 - 2013-12-14 15:03 - 00000000 ____D C:\Users\Klaus\Documents\Fax
2013-12-12 09:27 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 09:27 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 09:26 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 09:26 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 09:26 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 09:26 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 09:26 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 09:26 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 09:26 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 09:26 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 09:26 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 09:26 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 09:26 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 09:26 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 09:26 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 09:26 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 09:26 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 09:26 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 09:26 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 09:22 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 09:22 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 07:41 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 07:41 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 07:41 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 07:41 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 07:41 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 07:41 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 07:41 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 07:41 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 07:41 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 07:41 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 07:41 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 15:05 - 2013-12-11 15:05 - 00000000 ____D C:\Program Files\COMPUTERBILD-Abzockschutz
2013-12-08 12:03 - 2013-12-08 12:27 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Softonic
2013-12-08 12:03 - 2013-12-08 12:03 - 00000000 ____D C:\Program Files\Softonic
2013-11-30 12:03 - 2013-12-01 09:59 - 00000000 ____D C:\Users\Klaus\Documents\Handynummern
2013-11-30 11:44 - 2013-11-30 12:06 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-11-30 11:43 - 2013-11-30 11:43 - 00000000 ____D C:\Program Files\MyPhoneExplorer
2013-11-24 13:42 - 2013-11-27 20:24 - 00000000 __RSD C:\Users\Klaus\Documents\My Stationery
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\ParetoLogic
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\DriverCure
2013-11-20 09:45 - 2013-11-20 09:50 - 00000000 ____D C:\ProgramData\ParetoLogic
2013-11-17 11:53 - 2013-11-17 12:00 - 00000025 _____ C:\Users\Klaus\AppData\Local\gt-props
2013-11-17 11:52 - 2013-11-17 11:52 - 00000000 ____D C:\Program Files\SoftOCR
2013-11-15 13:18 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-11-15 13:18 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-15 13:18 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-15 13:18 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-11-15 13:18 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-11-15 13:18 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-11-15 13:18 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-11-15 13:18 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2013-11-15 13:18 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-11-15 13:18 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-11-15 13:18 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-11-15 13:18 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-11-15 13:17 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2013-11-15 13:08 - 2013-11-15 13:08 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-15 13:08 - 2013-11-15 13:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-15 13:07 - 2013-11-15 13:07 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-15 13:07 - 2013-11-15 13:07 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-15 13:07 - 2013-11-15 13:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-15 09:43 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-15 09:43 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-15 09:43 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-15 09:43 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-15 09:43 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-15 09:43 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-15 09:43 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-15 09:43 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-15 09:43 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-15 09:43 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-15 09:43 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-15 09:43 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-15 09:42 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-15 09:42 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-15 09:42 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-15 09:42 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-15 09:42 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-15 09:42 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-15 08:54 - 2013-11-15 09:31 - 00000000 ____D C:\Users\Klaus\AppData\Local\Lollipop
2013-11-15 08:54 - 2013-11-15 09:31 - 00000000 ____D C:\Program Files\VideoPlayer
2013-11-15 08:53 - 2013-11-15 09:31 - 00000000 ____D C:\Program Files\Plus-HD-1.3
2013-11-15 08:53 - 2013-11-15 09:31 - 00000000 ____D C:\Program Files\Feven 1.5

==================== One Month Modified Files and Folders =======

2013-12-15 14:25 - 2013-12-15 14:25 - 00016736 _____ C:\Users\Klaus\FRST.txt
2013-12-15 14:25 - 2013-12-15 14:25 - 00000000 ____D C:\FRST
2013-12-15 14:25 - 2013-10-03 09:35 - 00000000 ____D C:\Users\Klaus
2013-12-15 14:23 - 2013-12-15 14:23 - 01060897 _____ (Farbar) C:\Users\Klaus\FRST.exe
2013-12-15 14:23 - 2013-10-06 08:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-15 14:18 - 2009-07-14 05:34 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-15 14:18 - 2009-07-14 05:34 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-15 14:15 - 2013-10-03 09:34 - 01261728 _____ C:\Windows\WindowsUpdate.log
2013-12-15 14:14 - 2013-10-04 18:09 - 00000912 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2013-12-15 14:11 - 2013-12-15 14:11 - 00000056 _____ C:\Windows\setupact.log
2013-12-15 14:11 - 2013-12-15 14:11 - 00000000 _____ C:\Windows\setuperr.log
2013-12-15 14:11 - 2013-10-04 18:09 - 00000908 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2013-12-15 14:11 - 2013-10-04 18:02 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-15 14:11 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-15 09:50 - 2013-10-06 09:02 - 00000000 ____D C:\Program Files\Common Files\Real
2013-12-15 09:49 - 2013-10-13 08:52 - 00000000 ____D C:\ProgramData\Real
2013-12-15 09:49 - 2013-10-13 08:52 - 00000000 ____D C:\Program Files\Real
2013-12-15 09:49 - 2013-10-13 08:49 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Real
2013-12-15 09:49 - 2013-10-03 09:35 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-15 09:46 - 2013-12-15 09:44 - 00000000 ____D C:\Program Files\AOL 9.0
2013-12-15 09:46 - 2013-10-06 09:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AOL
2013-12-15 09:46 - 2013-10-06 09:01 - 00000000 ____D C:\ProgramData\AOL
2013-12-15 09:45 - 2013-12-15 09:44 - 00000000 ____D C:\Program Files\Common Files\aolshare
2013-12-15 09:45 - 2013-10-06 09:03 - 00000000 ____D C:\Windows\occache
2013-12-15 09:45 - 2013-10-06 09:01 - 00002192 ____H C:\IPH.PH
2013-12-15 09:44 - 2013-10-06 09:01 - 00000000 ____D C:\Program Files\Common Files\aol
2013-12-15 09:44 - 2009-07-14 03:04 - 00000496 _____ C:\Windows\win.ini
2013-12-15 09:40 - 2013-10-04 18:03 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-15 09:08 - 2013-10-04 18:08 - 00000292 _____ C:\Windows\Tasks\DigitalSite.job
2013-12-15 09:07 - 2013-10-04 19:08 - 00000095 _____ C:\Users\Klaus\AppData\Roaming\WB.CFG
2013-12-15 09:07 - 2013-10-04 19:08 - 00000006 _____ C:\Users\Klaus\AppData\Roaming\WBPU-TTL.DAT
2013-12-15 08:59 - 2013-12-15 08:49 - 00026624 _____ C:\Users\Klaus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\Documents\My Received Files
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MusicNet
2013-12-15 08:41 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Allerlei
2013-12-15 08:39 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Briefköpfe
2013-12-15 08:10 - 2013-10-05 10:35 - 01498112 ___SH C:\Users\Klaus\Documents\Thumbs.db
2013-12-15 07:59 - 2010-03-02 06:02 - 01527504 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-14 17:51 - 2013-10-04 12:14 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\vlc
2013-12-14 17:35 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Lustiges
2013-12-14 15:04 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-14 15:03 - 2013-12-14 15:02 - 00000000 ____D C:\Users\Klaus\Documents\Fax
2013-12-12 16:20 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-12 11:40 - 2009-07-14 05:33 - 00493168 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 11:38 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-12-12 09:26 - 2010-03-02 06:45 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 09:25 - 2013-10-03 17:57 - 00000000 ____D C:\Windows\system32\MRT
2013-12-12 09:23 - 2010-03-02 07:25 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-12 07:47 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Glückwünsche
2013-12-11 15:05 - 2013-12-11 15:05 - 00000000 ____D C:\Program Files\COMPUTERBILD-Abzockschutz
2013-12-11 14:23 - 2013-10-04 18:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 14:23 - 2013-10-04 18:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 13:42 - 2013-10-04 18:22 - 00000000 ____D C:\Program Files\Google
2013-12-11 09:00 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Billard
2013-12-08 19:56 - 2013-10-04 17:29 - 00000000 ____D C:\Users\Klaus\AppData\Local\Paint.NET
2013-12-08 12:31 - 2013-10-03 15:59 - 00403440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2013-12-08 12:28 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\wfp
2013-12-08 12:27 - 2013-12-08 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Softonic
2013-12-08 12:27 - 2013-10-25 09:51 - 00000000 ____D C:\Users\Klaus\AppData\Local\Adobe_Systems_Incorporate
2013-12-08 12:27 - 2013-10-06 11:50 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\DVDVideoSoft
2013-12-08 12:27 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration
2013-12-08 12:27 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\AppCompat
2013-12-08 12:26 - 2013-10-06 11:50 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-12-08 12:26 - 2013-10-06 11:50 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-12-08 12:03 - 2013-12-08 12:03 - 00000000 ____D C:\Program Files\Softonic
2013-12-08 11:11 - 2013-10-12 16:57 - 00439808 ___SH C:\Users\Klaus\Thumbs.db
2013-12-05 09:42 - 2013-10-03 16:03 - 00000000 ____D C:\Users\Klaus\AppData\Local\Adobe
2013-12-01 09:59 - 2013-11-30 12:03 - 00000000 ____D C:\Users\Klaus\Documents\Handynummern
2013-11-30 13:01 - 2013-10-03 17:43 - 00155184 _____ C:\Users\Klaus\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-30 12:06 - 2013-11-30 11:44 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-11-30 11:43 - 2013-11-30 11:43 - 00000000 ____D C:\Program Files\MyPhoneExplorer
2013-11-27 20:24 - 2013-11-24 13:42 - 00000000 __RSD C:\Users\Klaus\Documents\My Stationery
2013-11-26 11:11 - 2013-12-12 09:26 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-12 09:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-12 09:26 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-12 09:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-12 09:26 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-12 09:26 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-12 09:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-12 09:26 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-12 09:26 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-12 09:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-12 09:26 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-12 09:26 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-12 09:26 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-12 09:27 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-12 09:26 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-12 09:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-12 09:26 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-12 09:26 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-12 09:26 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-25 20:02 - 2013-10-03 21:26 - 00000000 ____D C:\Program Files\CCleaner
2013-11-23 19:26 - 2013-12-12 07:41 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-20 09:50 - 2013-11-20 09:45 - 00000000 ____D C:\ProgramData\ParetoLogic
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\ParetoLogic
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\DriverCure
2013-11-19 12:56 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Geburtstagsliste
2013-11-17 12:01 - 2013-10-16 13:09 - 00005912 _____ C:\ProgramData\hpzinstall.log
2013-11-17 12:00 - 2013-11-17 11:53 - 00000025 _____ C:\Users\Klaus\AppData\Local\gt-props
2013-11-17 11:52 - 2013-11-17 11:52 - 00000000 ____D C:\Program Files\SoftOCR
2013-11-15 15:05 - 2010-03-02 14:51 - 00000000 ____D C:\Windows\Panther
2013-11-15 13:23 - 2009-07-14 09:47 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2013-11-15 13:08 - 2013-11-15 13:08 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-15 13:08 - 2013-11-15 13:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-15 13:07 - 2013-11-15 13:07 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-15 13:07 - 2013-11-15 13:07 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-15 13:07 - 2013-11-15 13:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-15 09:31 - 2013-11-15 08:54 - 00000000 ____D C:\Users\Klaus\AppData\Local\Lollipop
2013-11-15 09:31 - 2013-11-15 08:54 - 00000000 ____D C:\Program Files\VideoPlayer
2013-11-15 09:31 - 2013-11-15 08:53 - 00000000 ____D C:\Program Files\Plus-HD-1.3
2013-11-15 09:31 - 2013-11-15 08:53 - 00000000 ____D C:\Program Files\Feven 1.5
2013-11-15 09:31 - 2013-11-10 10:55 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\dvdcss
2013-11-15 09:31 - 2010-03-02 06:48 - 00000000 ____D C:\Windows\system32\Macromed
2013-11-15 09:31 - 2009-07-14 09:56 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 __RSD C:\Windows\Media
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\schemas
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-11-15 09:29 - 2013-10-05 10:45 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Skype
2013-11-15 09:28 - 2013-10-16 13:08 - 00000000 ____D C:\ProgramData\HP
2013-11-15 09:28 - 2010-03-02 06:55 - 00000000 ____D C:\Program Files\Java

Files to move or delete:
====================
C:\Users\Klaus\FRST.exe


Some content of TEMP:
====================
C:\Users\Klaus\AppData\Local\Temp\AOLFirewallMgr.dll
C:\Users\Klaus\AppData\Local\Temp\install.dll
C:\Users\Klaus\AppData\Local\Temp\INSTALL.EXE
C:\Users\Klaus\AppData\Local\Temp\instph.dll
C:\Users\Klaus\AppData\Local\Temp\launcher.dll
C:\Users\Klaus\AppData\Local\Temp\progupd.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 07:56

==================== End Of Log ============================
FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-12-2013 01
Ran by Klaus at 2013-12-15 14:26:12
Running from C:\Users\Klaus
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 6.1.2)
Adobe Digital Editions 2.0 (Version: 2.0)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05)
AOL Coach Version 1.0(Build:20040201.2 de)
AOL Deutschland
AOL Meine Fotos Bildschirmschoner
AOL Optimized Dial-In
Apple Application Support (Version: 2.3.4)
Apple Software Update (Version: 2.1.3.127)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.0.23)
avast! Free Antivirus (Version: 9.0.2006)
BufferChm (Version: 140.0.212.000)
CCleaner (Version: 4.08)
Cisco EAP-FAST Module (Version: 2.2.14)
Cisco LEAP Module (Version: 1.0.19)
Cisco PEAP Module (Version: 1.1.6)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
COMPUTERBILD-Abzockschutz (Version: 1.0.52)
Copy (Version: 140.0.212.000)
CorelDRAW Essentials 4
CorelDRAW Essentials 4 - Content (Version: 4.0)
CorelDRAW Essentials 4 - Draw (Version: 4.0)
CorelDRAW Essentials 4 - Filters (Version: 4.0)
CorelDRAW Essentials 4 - ICA (Version: 4.0)
CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0)
CorelDRAW Essentials 4 - Lang BR (Version: 4.0)
CorelDRAW Essentials 4 - Lang DE (Version: 4.0)
CorelDRAW Essentials 4 - Lang EN (Version: 4.0)
CorelDRAW Essentials 4 - Lang ES (Version: 4.0)
CorelDRAW Essentials 4 - Lang FR (Version: 4.0)
CorelDRAW Essentials 4 - Lang IT (Version: 4.0)
CorelDRAW Essentials 4 - Lang NL (Version: 4.0)
CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0)
CorelDRAW Essentials 4 - Windows Shell Extension
CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1)
CorelDRAW Essentials 4 (Version: 4.0)
CyberLink LabelPrint (Version: 2.5.2602)
CyberLink MediaShow (Version: 5.0.1410a)
CyberLink PhotoNow (Version: 1.1.6904)
CyberLink Power2Go (Version: 6.1.3602c)
CyberLink PowerDirector (Version: 8.0.2522)
CyberLink PowerDVD 9 (Version: 9.0.2519.00)
CyberLink PowerDVD Copy (Version: 1.5.1306)
CyberLink PowerProducer (Version: 5.0.2.2326)
CyberLink YouCam (Version: 3.0.2609)
Destinations (Version: 140.0.77.000)
DeviceDiscovery (Version: 140.0.212.000)
DJ_AIO_06_F4500_SW_MIN (Version: 140.0.690.000)
F4500 (Version: 140.0.690.000)
Firebird SQL Server - MAGIX Edition (Version: 2.1.23.0)
Fotostory 3 für Windows (Version: 3.0.1115.15)
Free Mp3 Wma Converter V 2.2 (Version: 2.2.0.0)
Free PDF to Word Doc Converter v1.1 (Version: 1.1)
Free Studio version 2013 (Version: 6.1.12.925)
Freemake Video Converter Version 4.0.4 (Version: 4.0.4)
Google Chrome (Version: 31.0.1650.63)
Google Earth (Version: 7.1.2.2041)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4805.320)
Google Update Helper (Version: 1.3.22.3)
GPBaseService2 (Version: 140.0.211.000)
HP Deskjet F4500 All-in-One Driver Software 14.0 Rel. 6 (Version: 14.0)
HP Imaging Device Functions 14.0 (Version: 14.0)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Solution Center 14.0 (Version: 14.0)
HP Update (Version: 5.002.002.002)
HPPhotoGadget (Version: 140.0.524.000)
HPProductAssistant (Version: 140.0.212.000)
HPSSupply (Version: 140.0.211.000)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.2092)
Intel(R) Management Engine Components (Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (Version: 9.5.0.1037)
Intel(R) TV Wizard
Java 7 Update 40 (Version: 7.0.400)
Java Auto Updater (Version: 2.1.9.8)
Java(TM) 6 Update 18 (Version: 6.0.180)
Junk Mail filter update (Version: 14.0.8089.726)
Launch Manager V1.5.0.8 (Version: 1.5.0.8)
Learn2 Player (Uninstall Only)
Macromedia Shockwave Player
Media Go (Version: 2.5.299)
Media Go Video Playback Engine 1.120.103.05010 (Version: 1.120.103.05010)
Medion Home Cinema (Version: 8.0.1318)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Digital Image Library 9 - Blocker (Version: 9.00.0000)
Microsoft Encarta 2006 Enzyklopädie Standard (Version: 2006)
Microsoft Foto 2006 Standard Edition (Version: 11.0.0422)
Microsoft Foto 2006 Standard Edition Bibliothek (Version: 11.0.0422)
Microsoft Foto 2006 Standard Edition Editor (Version: 11.0.0422)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (Version: 2.9)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Works (Version: 08.05.0822)
Microsoft Works (Version: 9.7.0621)
Microsoft Works Suite-Add-Ins für Microsoft Word (Version: 8.0.0.0000)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyPhoneExplorer (Version: 1.8.5)
Network (Version: 140.0.215.000)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)
Open It! (Version: 1.1.1)
PDF Annotator 4.0.0.410 (Version: 4.0.0.410)
PlayReady PC Runtime x86 (Version: 1.3.0)
PlayStation(R)Store (Version: 4.16.2.15545)
QuickTime (Version: 7.74.80.86)
Realtek High Definition Audio Driver (Version: 6.0.1.6057)
Realtek USB 2.0 Card Reader (Version: 6.1.7600.30101)
REALTEK Wireless LAN Driver (Version: 1.00.0145)
Scan (Version: 140.0.80.000)
Search Protect by conduit (Version: 1.7.0.72) <==== ATTENTION
Search-Gol Chrome Toolbar
searchgol toolbar   (Version: 1.8.16.19) <==== ATTENTION
Setup-Start von Microsoft Works Suite 2006
Shop for HP Supplies (Version: 14.0)
Skype™ 6.9 (Version: 6.9.106)
SmartWebPrinting (Version: 140.0.186.000)
Snap.Do (Version: 1.102.1.11691)
SolutionCenter (Version: 140.0.213.000)
Status (Version: 140.0.212.000)
Steganos Live Encryption Engine 15 (Version: 15.2.1)
Steganos Safe Home 2007 (Version: 9.0.4)
Synaptics Pointing Device Driver (Version: 14.0.19.0)
Toolbox (Version: 140.0.428.000)
TrayApp (Version: 140.0.212.000)
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.89)
TuneUp Utilities 2014 (Version: 14.0.1000.89)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Zip Extractor
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Viewpoint Media Player
VLC media player 2.1.2 (Version: 2.1.2)
WebReg (Version: 140.0.212.017)
WhiteSmoke New V6 Toolbar for IE (Version: 6.16.2.2)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live ID-Anmelde-Assistent (Version: 6.500.3146.0)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Wondershare PDF to Word (Build 3.6.0) (Version: 3.6.0)
Works Update (Version: 8.0.0.0000)
X10 Hardware(TM)
Yahoo! Toolbar

==================== Restore Points  =========================

18-11-2013 10:31:39 Windows-Sicherung
19-11-2013 08:19:25 Windows Update
25-11-2013 10:20:09 Windows-Sicherung
26-11-2013 07:22:28 Windows Update
01-12-2013 18:00:28 Windows-Sicherung
03-12-2013 07:37:40 Windows Update
08-12-2013 11:23:44 Wiederherstellungsvorgang
08-12-2013 11:29:20 avast! antivirus system restore point
08-12-2013 11:34:24 Windows Update
08-12-2013 18:57:16 Windows-Sicherung
12-12-2013 08:22:38 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {070C9FF5-F0B2-4387-8D1D-FF9DDD738B41} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1141593133-1951277196-1691025887-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {0A1DECD0-55C0-4D44-824A-2CEE50D6208A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-04] (Google Inc.)
Task: {1AF93342-5806-4AED-8460-C7A32DE32C19} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-10-19] (AVAST Software)
Task: {36291F0A-4BEE-4FC8-B87A-89A9C2D1CB52} - System32\Tasks\BonanzaDealsUpdate => C:\Program <==== ATTENTION
Task: {403FC347-7B17-46D8-8668-91CC15860914} - System32\Tasks\DigitalSite => C:\Users\Klaus\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {4F8AA48D-01A9-46A3-86CC-0A325C7458A0} - System32\Tasks\EPUpdater => C:\Users\Klaus\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-09-01] () <==== ATTENTION
Task: {6D9FD4FA-CDF0-4DA9-A0A0-CC99CDFFBF59} - System32\Tasks\BackgroundContainer Startup Task => C:\Users\Klaus\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll [2013-10-14] (Conduit Ltd.) <==== ATTENTION
Task: {87745490-C0B8-4975-853F-A8F74686A120} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {8F269D7B-C9A2-4BBB-AD63-1CDEEC3307CB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {C212E4C3-CD09-41D4-B80C-4943522B0852} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: {D97A2DD1-24AA-4F59-B5B6-A847607AE5E9} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: {DCCB829B-6FE2-4B06-8434-D00EC869A7E5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-04] (Google Inc.)
Task: {E4B505E6-2887-409B-B558-26DEA7C31E26} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1141593133-1951277196-1691025887-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\DigitalSite.job => C:\Users\Klaus\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-01-10 20:12 - 2012-01-10 20:12 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2013-10-19 13:31 - 2013-10-19 13:31 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-15 09:44 - 2004-02-25 11:21 - 00069632 _____ () C:\Program Files\Common Files\AOL\ACS\DE\DialerRes.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00032800 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00056352 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00150560 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00112672 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 01767456 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00078880 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00013344 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00726048 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00081952 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014368 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00016928 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00020512 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00057888 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014368 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll
2013-10-06 11:51 - 2013-10-06 11:51 - 00911128 _____ () C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014880 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00052256 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00048160 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2013-08-04 18:41 - 2013-08-04 18:41 - 00194080 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.dll
2013-08-04 18:40 - 2013-08-04 18:40 - 00068640 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00246304 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.NetSeer.dll
2013-09-30 15:00 - 2013-09-30 15:00 - 00020024 _____ () C:\Program Files\COMPUTERBILD-Abzockschutz\Internet Explorer\BandObjectsLib.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/14/2013 05:30:51 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1324

Startzeit: 01cef8e9b61eacff

Endzeit: 16

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (12/13/2013 06:38:16 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1ba79400
ID des fehlerhaften Prozesses: 0x1f50
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/13/2013 09:34:34 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1a07f800
ID des fehlerhaften Prozesses: 0x1120
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/13/2013 09:27:20 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1a2eac00
ID des fehlerhaften Prozesses: 0x1080
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/12/2013 07:37:29 AM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1670

Startzeit: 01cef7047dcfba2a

Endzeit: 13

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID: db6a0ea7-62f7-11e3-b56b-00262df75a0d

Error: (12/10/2013 08:24:31 AM) (Source: Application Hang) (User: )
Description: Programm WINWORD.EXE, Version 12.0.6683.5002 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fb4

Startzeit: 01cef578c885ad66

Endzeit: 15

Anwendungspfad: C:\Program Files\Microsoft Office\Office12\WINWORD.EXE

Berichts-ID: 155c9ca6-616c-11e3-b50f-00262df75a0d

Error: (12/09/2013 01:50:20 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1604

Startzeit: 01cef4dcf70c7b23

Endzeit: 0

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:


System errors:
=============
Error: (12/15/2013 02:12:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/15/2013 09:44:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AOL Connectivity Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (12/15/2013 07:55:08 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 05:29:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 02:41:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 02:14:42 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (12/14/2013 02:02:54 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 11:27:49 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (12/14/2013 11:27:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/13/2013 06:23:56 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.


Microsoft Office Sessions:
=========================
Error: (10/04/2013 05:38:42 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5001, Microsoft Office Version: 12.0.6612.1000. This session lasted 11 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 40%
Total physical RAM: 3510.6 MB
Available physical RAM: 2098.73 MB
Total Pagefile: 7019.48 MB
Available Pagefile: 5252.51 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.84 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:424.66 GB) (Free:323.39 GB) NTFS
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:26.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 3D711539)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=425 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================
         

--- --- ---

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-12-2013 01
Ran by Klaus (administrator) on KLAUS-PC on 15-12-2013 14:25:36
Running from C:\Users\Klaus
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(America Online, Inc.) C:\Program Files\Common Files\aol\ACS\AOLacsd.exe
(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Wistron Corp.) C:\Program Files\Launch Manager\OSD.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WButton.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(America Online, Inc) C:\Program Files\Common Files\aol\ACS\AOLDial.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WisLMSvc.exe
(Smartbar) C:\Users\Klaus\AppData\Local\Smartbar\Application\SnapDo.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(America Online, Inc.) C:\Program Files\AOL 9.0\aoltray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [LMgrVolOSD] - C:\Program Files\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.)
HKLM\...\Run: [Wbutton] - C:\Program Files\Launch Manager\WButton.exe [413696 2010-01-13] (Wistron Corp.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2009-12-11] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8522272 2010-03-02] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [678432 2010-03-02] (Realtek Semiconductor)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [] - [x]
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-10-19] (AVAST Software)
HKLM\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\ced2504e-930d-4c35-90b1-832df0c90a98.exe [180184 2013-11-23] (AVAST Software)
HKLM\...\Run: [AOLDialer] - C:\Program Files\Common Files\aol\ACS\AOLDial.exe [496752 2004-02-25] (America Online, Inc)
HKLM\...\Run: [RealTray] - c:\program files\real\realplayer\\RealPlay.exe SYSTEMBOOTHIDEPLAYER
HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\Klaus\AppData\Local\Smartbar\Application\SnapDo.exe [21024 2013-08-04] (Smartbar)
HKCU\...\Run: [TClockEx] - C:\Program Files\TClockEx\TCLOCKEX.EXE [89088 2000-03-09] (Dale Nurden)
HKCU\...\Run: [BackgroundContainer] - "C:\Windows\system32\Rundll32.exe" "C:\Users\Klaus\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION
HKCU\...0c966feabec1\InprocServer32: [Default-shell32]  ATTENTION! ====> ZeroAccess?
MountPoints2: {dc69456f-2c05-11e3-97a8-806e6f6e6963} - E:\zdata\cobi.exe
HKU\Default\...\RunOnce: [MEDION] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Default User\...\RunOnce: [MEDION] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
URLSearchHook: HKLM - WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
URLSearchHook: HKCU - WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
URLSearchHook: HKCU - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
SearchScopes: HKLM - DefaultScope {25219A87-0B62-426D-A738-95514B934E7C} URL = 
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=1CD71C4BD6663CEF&affID=125035&tsp=5025
SearchScopes: HKCU - {25219A87-0B62-426D-A738-95514B934E7C} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311268&CUI=UN31055759242975416&UM=2
BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} -  No File
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: searchgol Helper Object - {8F547BDD-FCD4-48F8-A06F-573D6F404A3C} - C:\Program Files\searchgol\searchgol\1.8.16.19\bh\searchgol.dll (Montera Technologeis LTD)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
BHO: No Name - {fe063412-bea4-4d76-8ed3-183be6220d17} -  No File
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - searchgol Toolbar - {00078E95-3A4A-4137-8DE7-2824908D1C17} - C:\Program Files\searchgol\searchgol\1.8.16.19\searchgolTlbr.dll (Montera Technologeis LTD)
Toolbar: HKLM - No Name - {25A3A431-30BB-47C8-AD6A-E1063801134F} -  No File
Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
Toolbar: HKLM - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
Toolbar: HKLM - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - WhiteSmoke New V6 Toolbar - {DA7F5AE1-3BE3-43C0-8098-C1D183616E97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: 
CHR RestoreOnStartup: "browser": {
        "last_known_google_url": "https://www.google.de/",
        "last_prompted_google_url": "https://www.google.de/",
        "show_home_button": true,
        "window_placement": {
            "bottom": 718,
            "left": 10,
            "maximized": true,
            "right": 1060,
            "top": 10,
            "work_area_bottom": 728,
            "work_area_left": 0,
            "work_area_right": 1366,
            "work_area_top"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Amazon
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR Extension: (Search-Gol Toolbar) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac\1.0_0
CHR Extension: (Snap.Do ) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0
CHR Extension: (Feven 1.5) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0
CHR Extension: (YouTube) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Softonic Chrome Toolbar) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0
CHR Extension: (Plus-HD-1.3) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0
CHR Extension: (BonanzaDeals) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj\3.5.0.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR Extension: (Iminent Chrome Toolbar) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb\2.0_0
CHR HKLM\...\Chrome\Extension: [aipfmkinhleccnodemkoofnnofpbbpac] - C:\Users\Klaus\AppData\Roaming\BabSolution\CR\searchgol.crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM\...\Chrome\Extension: [ibcgjcbeckcdemelifnledhihpaighfk] - C:\Users\Klaus\AppData\Local\CRE\ibcgjcbeckcdemelifnledhihpaighfk.crx
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx

========================== Services (Whitelisted) =================

R2 AOL ACS; C:\Program Files\Common Files\aol\ACS\AOLacsd.exe [1123440 2004-02-25] (America Online, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-19] (AVAST Software)
R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1155072 2009-02-03] (MAGIX AG)
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®)
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [244904 2010-02-10] ()
R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118560 2009-10-22] (Wistron Corp.)
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [35656 2013-10-19] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2013-10-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [79720 2013-10-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-10-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [774392 2013-10-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [403440 2013-12-08] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2013-10-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [178304 2013-10-19] ()
S3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [786400 2009-08-13] (DiBcom SA)
R1 SLEE_15_DRIVER; C:\Windows\system32\drivers\Sleen15.sys [80232 2007-02-21] (Softwareentwicklung Remus - ArchiCrypt )
S3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [12320 2013-08-21] (TuneUp Software)
R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2003-01-10] (America Online, Inc.)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13720 2009-05-13] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27160 2009-05-13] (X10 Wireless Technology, Inc.)
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-15 14:25 - 2013-12-15 14:25 - 00016736 _____ C:\Users\Klaus\FRST.txt
2013-12-15 14:25 - 2013-12-15 14:25 - 00000000 ____D C:\FRST
2013-12-15 14:23 - 2013-12-15 14:23 - 01060897 _____ (Farbar) C:\Users\Klaus\FRST.exe
2013-12-15 14:11 - 2013-12-15 14:11 - 00000056 _____ C:\Windows\setupact.log
2013-12-15 14:11 - 2013-12-15 14:11 - 00000000 _____ C:\Windows\setuperr.log
2013-12-15 09:44 - 2013-12-15 09:46 - 00000000 ____D C:\Program Files\AOL 9.0
2013-12-15 09:44 - 2013-12-15 09:45 - 00000000 ____D C:\Program Files\Common Files\aolshare
2013-12-15 09:44 - 2004-02-25 14:50 - 00153088 _____ (America Online) C:\Windows\system32\jgdwmie.dll
2013-12-15 09:44 - 2004-02-25 11:21 - 00225280 _____ (America Online, Inc) C:\Windows\system32\AOLDial.dll
2013-12-15 08:49 - 2013-12-15 08:59 - 00026624 _____ C:\Users\Klaus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\Documents\My Received Files
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MusicNet
2013-12-14 15:02 - 2013-12-14 15:03 - 00000000 ____D C:\Users\Klaus\Documents\Fax
2013-12-12 09:27 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 09:27 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 09:26 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 09:26 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 09:26 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 09:26 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 09:26 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 09:26 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 09:26 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 09:26 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 09:26 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 09:26 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 09:26 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 09:26 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 09:26 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 09:26 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 09:26 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 09:26 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 09:26 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 09:22 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 09:22 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 07:41 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 07:41 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 07:41 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 07:41 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 07:41 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 07:41 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 07:41 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 07:41 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 07:41 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 07:41 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 07:41 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 15:05 - 2013-12-11 15:05 - 00000000 ____D C:\Program Files\COMPUTERBILD-Abzockschutz
2013-12-08 12:03 - 2013-12-08 12:27 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Softonic
2013-12-08 12:03 - 2013-12-08 12:03 - 00000000 ____D C:\Program Files\Softonic
2013-11-30 12:03 - 2013-12-01 09:59 - 00000000 ____D C:\Users\Klaus\Documents\Handynummern
2013-11-30 11:44 - 2013-11-30 12:06 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-11-30 11:43 - 2013-11-30 11:43 - 00000000 ____D C:\Program Files\MyPhoneExplorer
2013-11-24 13:42 - 2013-11-27 20:24 - 00000000 __RSD C:\Users\Klaus\Documents\My Stationery
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\ParetoLogic
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\DriverCure
2013-11-20 09:45 - 2013-11-20 09:50 - 00000000 ____D C:\ProgramData\ParetoLogic
2013-11-17 11:53 - 2013-11-17 12:00 - 00000025 _____ C:\Users\Klaus\AppData\Local\gt-props
2013-11-17 11:52 - 2013-11-17 11:52 - 00000000 ____D C:\Program Files\SoftOCR
2013-11-15 13:18 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-11-15 13:18 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-15 13:18 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-15 13:18 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-11-15 13:18 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-11-15 13:18 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-11-15 13:18 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-11-15 13:18 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2013-11-15 13:18 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-11-15 13:18 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-11-15 13:18 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-11-15 13:18 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-11-15 13:17 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2013-11-15 13:08 - 2013-11-15 13:08 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-15 13:08 - 2013-11-15 13:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-15 13:07 - 2013-11-15 13:07 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-15 13:07 - 2013-11-15 13:07 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-15 13:07 - 2013-11-15 13:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-15 09:43 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-15 09:43 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-15 09:43 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-15 09:43 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-15 09:43 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-15 09:43 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-15 09:43 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-15 09:43 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-15 09:43 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-15 09:43 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-15 09:43 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-15 09:43 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-15 09:42 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-15 09:42 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-15 09:42 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-15 09:42 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-15 09:42 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-15 09:42 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-15 08:54 - 2013-11-15 09:31 - 00000000 ____D C:\Users\Klaus\AppData\Local\Lollipop
2013-11-15 08:54 - 2013-11-15 09:31 - 00000000 ____D C:\Program Files\VideoPlayer
2013-11-15 08:53 - 2013-11-15 09:31 - 00000000 ____D C:\Program Files\Plus-HD-1.3
2013-11-15 08:53 - 2013-11-15 09:31 - 00000000 ____D C:\Program Files\Feven 1.5

==================== One Month Modified Files and Folders =======

2013-12-15 14:25 - 2013-12-15 14:25 - 00016736 _____ C:\Users\Klaus\FRST.txt
2013-12-15 14:25 - 2013-12-15 14:25 - 00000000 ____D C:\FRST
2013-12-15 14:25 - 2013-10-03 09:35 - 00000000 ____D C:\Users\Klaus
2013-12-15 14:23 - 2013-12-15 14:23 - 01060897 _____ (Farbar) C:\Users\Klaus\FRST.exe
2013-12-15 14:23 - 2013-10-06 08:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-15 14:18 - 2009-07-14 05:34 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-15 14:18 - 2009-07-14 05:34 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-15 14:15 - 2013-10-03 09:34 - 01261728 _____ C:\Windows\WindowsUpdate.log
2013-12-15 14:14 - 2013-10-04 18:09 - 00000912 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2013-12-15 14:11 - 2013-12-15 14:11 - 00000056 _____ C:\Windows\setupact.log
2013-12-15 14:11 - 2013-12-15 14:11 - 00000000 _____ C:\Windows\setuperr.log
2013-12-15 14:11 - 2013-10-04 18:09 - 00000908 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2013-12-15 14:11 - 2013-10-04 18:02 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-15 14:11 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-15 09:50 - 2013-10-06 09:02 - 00000000 ____D C:\Program Files\Common Files\Real
2013-12-15 09:49 - 2013-10-13 08:52 - 00000000 ____D C:\ProgramData\Real
2013-12-15 09:49 - 2013-10-13 08:52 - 00000000 ____D C:\Program Files\Real
2013-12-15 09:49 - 2013-10-13 08:49 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Real
2013-12-15 09:49 - 2013-10-03 09:35 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-15 09:46 - 2013-12-15 09:44 - 00000000 ____D C:\Program Files\AOL 9.0
2013-12-15 09:46 - 2013-10-06 09:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AOL
2013-12-15 09:46 - 2013-10-06 09:01 - 00000000 ____D C:\ProgramData\AOL
2013-12-15 09:45 - 2013-12-15 09:44 - 00000000 ____D C:\Program Files\Common Files\aolshare
2013-12-15 09:45 - 2013-10-06 09:03 - 00000000 ____D C:\Windows\occache
2013-12-15 09:45 - 2013-10-06 09:01 - 00002192 ____H C:\IPH.PH
2013-12-15 09:44 - 2013-10-06 09:01 - 00000000 ____D C:\Program Files\Common Files\aol
2013-12-15 09:44 - 2009-07-14 03:04 - 00000496 _____ C:\Windows\win.ini
2013-12-15 09:40 - 2013-10-04 18:03 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-15 09:08 - 2013-10-04 18:08 - 00000292 _____ C:\Windows\Tasks\DigitalSite.job
2013-12-15 09:07 - 2013-10-04 19:08 - 00000095 _____ C:\Users\Klaus\AppData\Roaming\WB.CFG
2013-12-15 09:07 - 2013-10-04 19:08 - 00000006 _____ C:\Users\Klaus\AppData\Roaming\WBPU-TTL.DAT
2013-12-15 08:59 - 2013-12-15 08:49 - 00026624 _____ C:\Users\Klaus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\Documents\My Received Files
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MusicNet
2013-12-15 08:41 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Allerlei
2013-12-15 08:39 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Briefköpfe
2013-12-15 08:10 - 2013-10-05 10:35 - 01498112 ___SH C:\Users\Klaus\Documents\Thumbs.db
2013-12-15 07:59 - 2010-03-02 06:02 - 01527504 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-14 17:51 - 2013-10-04 12:14 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\vlc
2013-12-14 17:35 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Lustiges
2013-12-14 15:04 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-14 15:03 - 2013-12-14 15:02 - 00000000 ____D C:\Users\Klaus\Documents\Fax
2013-12-12 16:20 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-12 11:40 - 2009-07-14 05:33 - 00493168 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 11:38 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-12-12 09:26 - 2010-03-02 06:45 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 09:25 - 2013-10-03 17:57 - 00000000 ____D C:\Windows\system32\MRT
2013-12-12 09:23 - 2010-03-02 07:25 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-12 07:47 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Glückwünsche
2013-12-11 15:05 - 2013-12-11 15:05 - 00000000 ____D C:\Program Files\COMPUTERBILD-Abzockschutz
2013-12-11 14:23 - 2013-10-04 18:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 14:23 - 2013-10-04 18:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 13:42 - 2013-10-04 18:22 - 00000000 ____D C:\Program Files\Google
2013-12-11 09:00 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Billard
2013-12-08 19:56 - 2013-10-04 17:29 - 00000000 ____D C:\Users\Klaus\AppData\Local\Paint.NET
2013-12-08 12:31 - 2013-10-03 15:59 - 00403440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2013-12-08 12:28 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\wfp
2013-12-08 12:27 - 2013-12-08 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Softonic
2013-12-08 12:27 - 2013-10-25 09:51 - 00000000 ____D C:\Users\Klaus\AppData\Local\Adobe_Systems_Incorporate
2013-12-08 12:27 - 2013-10-06 11:50 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\DVDVideoSoft
2013-12-08 12:27 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration
2013-12-08 12:27 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\AppCompat
2013-12-08 12:26 - 2013-10-06 11:50 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-12-08 12:26 - 2013-10-06 11:50 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-12-08 12:03 - 2013-12-08 12:03 - 00000000 ____D C:\Program Files\Softonic
2013-12-08 11:11 - 2013-10-12 16:57 - 00439808 ___SH C:\Users\Klaus\Thumbs.db
2013-12-05 09:42 - 2013-10-03 16:03 - 00000000 ____D C:\Users\Klaus\AppData\Local\Adobe
2013-12-01 09:59 - 2013-11-30 12:03 - 00000000 ____D C:\Users\Klaus\Documents\Handynummern
2013-11-30 13:01 - 2013-10-03 17:43 - 00155184 _____ C:\Users\Klaus\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-30 12:06 - 2013-11-30 11:44 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-11-30 11:43 - 2013-11-30 11:43 - 00000000 ____D C:\Program Files\MyPhoneExplorer
2013-11-27 20:24 - 2013-11-24 13:42 - 00000000 __RSD C:\Users\Klaus\Documents\My Stationery
2013-11-26 11:11 - 2013-12-12 09:26 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-12 09:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-12 09:26 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-12 09:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-12 09:26 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-12 09:26 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-12 09:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-12 09:26 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-12 09:26 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-12 09:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-12 09:26 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-12 09:26 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-12 09:26 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-12 09:27 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-12 09:26 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-12 09:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-12 09:26 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-12 09:26 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-12 09:26 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-25 20:02 - 2013-10-03 21:26 - 00000000 ____D C:\Program Files\CCleaner
2013-11-23 19:26 - 2013-12-12 07:41 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-20 09:50 - 2013-11-20 09:45 - 00000000 ____D C:\ProgramData\ParetoLogic
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\ParetoLogic
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\DriverCure
2013-11-19 12:56 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Geburtstagsliste
2013-11-17 12:01 - 2013-10-16 13:09 - 00005912 _____ C:\ProgramData\hpzinstall.log
2013-11-17 12:00 - 2013-11-17 11:53 - 00000025 _____ C:\Users\Klaus\AppData\Local\gt-props
2013-11-17 11:52 - 2013-11-17 11:52 - 00000000 ____D C:\Program Files\SoftOCR
2013-11-15 15:05 - 2010-03-02 14:51 - 00000000 ____D C:\Windows\Panther
2013-11-15 13:23 - 2009-07-14 09:47 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2013-11-15 13:08 - 2013-11-15 13:08 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-15 13:08 - 2013-11-15 13:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-15 13:07 - 2013-11-15 13:07 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-15 13:07 - 2013-11-15 13:07 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-15 13:07 - 2013-11-15 13:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-15 09:31 - 2013-11-15 08:54 - 00000000 ____D C:\Users\Klaus\AppData\Local\Lollipop
2013-11-15 09:31 - 2013-11-15 08:54 - 00000000 ____D C:\Program Files\VideoPlayer
2013-11-15 09:31 - 2013-11-15 08:53 - 00000000 ____D C:\Program Files\Plus-HD-1.3
2013-11-15 09:31 - 2013-11-15 08:53 - 00000000 ____D C:\Program Files\Feven 1.5
2013-11-15 09:31 - 2013-11-10 10:55 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\dvdcss
2013-11-15 09:31 - 2010-03-02 06:48 - 00000000 ____D C:\Windows\system32\Macromed
2013-11-15 09:31 - 2009-07-14 09:56 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 __RSD C:\Windows\Media
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\schemas
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-11-15 09:29 - 2013-10-05 10:45 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Skype
2013-11-15 09:28 - 2013-10-16 13:08 - 00000000 ____D C:\ProgramData\HP
2013-11-15 09:28 - 2010-03-02 06:55 - 00000000 ____D C:\Program Files\Java

Files to move or delete:
====================
C:\Users\Klaus\FRST.exe


Some content of TEMP:
====================
C:\Users\Klaus\AppData\Local\Temp\AOLFirewallMgr.dll
C:\Users\Klaus\AppData\Local\Temp\install.dll
C:\Users\Klaus\AppData\Local\Temp\INSTALL.EXE
C:\Users\Klaus\AppData\Local\Temp\instph.dll
C:\Users\Klaus\AppData\Local\Temp\launcher.dll
C:\Users\Klaus\AppData\Local\Temp\progupd.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 07:56

==================== End Of Log ============================
         

--- --- ---
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-12-2013 01
Ran by Klaus at 2013-12-15 14:26:12
Running from C:\Users\Klaus
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 6.1.2)
Adobe Digital Editions 2.0 (Version: 2.0)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05)
AOL Coach Version 1.0(Build:20040201.2 de)
AOL Deutschland
AOL Meine Fotos Bildschirmschoner
AOL Optimized Dial-In
Apple Application Support (Version: 2.3.4)
Apple Software Update (Version: 2.1.3.127)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.0.23)
avast! Free Antivirus (Version: 9.0.2006)
BufferChm (Version: 140.0.212.000)
CCleaner (Version: 4.08)
Cisco EAP-FAST Module (Version: 2.2.14)
Cisco LEAP Module (Version: 1.0.19)
Cisco PEAP Module (Version: 1.1.6)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
COMPUTERBILD-Abzockschutz (Version: 1.0.52)
Copy (Version: 140.0.212.000)
CorelDRAW Essentials 4
CorelDRAW Essentials 4 - Content (Version: 4.0)
CorelDRAW Essentials 4 - Draw (Version: 4.0)
CorelDRAW Essentials 4 - Filters (Version: 4.0)
CorelDRAW Essentials 4 - ICA (Version: 4.0)
CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0)
CorelDRAW Essentials 4 - Lang BR (Version: 4.0)
CorelDRAW Essentials 4 - Lang DE (Version: 4.0)
CorelDRAW Essentials 4 - Lang EN (Version: 4.0)
CorelDRAW Essentials 4 - Lang ES (Version: 4.0)
CorelDRAW Essentials 4 - Lang FR (Version: 4.0)
CorelDRAW Essentials 4 - Lang IT (Version: 4.0)
CorelDRAW Essentials 4 - Lang NL (Version: 4.0)
CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0)
CorelDRAW Essentials 4 - Windows Shell Extension
CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1)
CorelDRAW Essentials 4 (Version: 4.0)
CyberLink LabelPrint (Version: 2.5.2602)
CyberLink MediaShow (Version: 5.0.1410a)
CyberLink PhotoNow (Version: 1.1.6904)
CyberLink Power2Go (Version: 6.1.3602c)
CyberLink PowerDirector (Version: 8.0.2522)
CyberLink PowerDVD 9 (Version: 9.0.2519.00)
CyberLink PowerDVD Copy (Version: 1.5.1306)
CyberLink PowerProducer (Version: 5.0.2.2326)
CyberLink YouCam (Version: 3.0.2609)
Destinations (Version: 140.0.77.000)
DeviceDiscovery (Version: 140.0.212.000)
DJ_AIO_06_F4500_SW_MIN (Version: 140.0.690.000)
F4500 (Version: 140.0.690.000)
Firebird SQL Server - MAGIX Edition (Version: 2.1.23.0)
Fotostory 3 für Windows (Version: 3.0.1115.15)
Free Mp3 Wma Converter V 2.2 (Version: 2.2.0.0)
Free PDF to Word Doc Converter v1.1 (Version: 1.1)
Free Studio version 2013 (Version: 6.1.12.925)
Freemake Video Converter Version 4.0.4 (Version: 4.0.4)
Google Chrome (Version: 31.0.1650.63)
Google Earth (Version: 7.1.2.2041)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4805.320)
Google Update Helper (Version: 1.3.22.3)
GPBaseService2 (Version: 140.0.211.000)
HP Deskjet F4500 All-in-One Driver Software 14.0 Rel. 6 (Version: 14.0)
HP Imaging Device Functions 14.0 (Version: 14.0)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Solution Center 14.0 (Version: 14.0)
HP Update (Version: 5.002.002.002)
HPPhotoGadget (Version: 140.0.524.000)
HPProductAssistant (Version: 140.0.212.000)
HPSSupply (Version: 140.0.211.000)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.2092)
Intel(R) Management Engine Components (Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (Version: 9.5.0.1037)
Intel(R) TV Wizard
Java 7 Update 40 (Version: 7.0.400)
Java Auto Updater (Version: 2.1.9.8)
Java(TM) 6 Update 18 (Version: 6.0.180)
Junk Mail filter update (Version: 14.0.8089.726)
Launch Manager V1.5.0.8 (Version: 1.5.0.8)
Learn2 Player (Uninstall Only)
Macromedia Shockwave Player
Media Go (Version: 2.5.299)
Media Go Video Playback Engine 1.120.103.05010 (Version: 1.120.103.05010)
Medion Home Cinema (Version: 8.0.1318)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Digital Image Library 9 - Blocker (Version: 9.00.0000)
Microsoft Encarta 2006 Enzyklopädie Standard (Version: 2006)
Microsoft Foto 2006 Standard Edition (Version: 11.0.0422)
Microsoft Foto 2006 Standard Edition Bibliothek (Version: 11.0.0422)
Microsoft Foto 2006 Standard Edition Editor (Version: 11.0.0422)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (Version: 2.9)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Works (Version: 08.05.0822)
Microsoft Works (Version: 9.7.0621)
Microsoft Works Suite-Add-Ins für Microsoft Word (Version: 8.0.0.0000)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyPhoneExplorer (Version: 1.8.5)
Network (Version: 140.0.215.000)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)
Open It! (Version: 1.1.1)
PDF Annotator 4.0.0.410 (Version: 4.0.0.410)
PlayReady PC Runtime x86 (Version: 1.3.0)
PlayStation(R)Store (Version: 4.16.2.15545)
QuickTime (Version: 7.74.80.86)
Realtek High Definition Audio Driver (Version: 6.0.1.6057)
Realtek USB 2.0 Card Reader (Version: 6.1.7600.30101)
REALTEK Wireless LAN Driver (Version: 1.00.0145)
Scan (Version: 140.0.80.000)
Search Protect by conduit (Version: 1.7.0.72) <==== ATTENTION
Search-Gol Chrome Toolbar
searchgol toolbar (Version: 1.8.16.19) <==== ATTENTION
Setup-Start von Microsoft Works Suite 2006
Shop for HP Supplies (Version: 14.0)
Skype™ 6.9 (Version: 6.9.106)
SmartWebPrinting (Version: 140.0.186.000)
Snap.Do (Version: 1.102.1.11691)
SolutionCenter (Version: 140.0.213.000)
Status (Version: 140.0.212.000)
Steganos Live Encryption Engine 15 (Version: 15.2.1)
Steganos Safe Home 2007 (Version: 9.0.4)
Synaptics Pointing Device Driver (Version: 14.0.19.0)
Toolbox (Version: 140.0.428.000)
TrayApp (Version: 140.0.212.000)
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.89)
TuneUp Utilities 2014 (Version: 14.0.1000.89)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Zip Extractor
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Viewpoint Media Player
VLC media player 2.1.2 (Version: 2.1.2)
WebReg (Version: 140.0.212.017)
WhiteSmoke New V6 Toolbar for IE (Version: 6.16.2.2)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live ID-Anmelde-Assistent (Version: 6.500.3146.0)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Wondershare PDF to Word (Build 3.6.0) (Version: 3.6.0)
Works Update (Version: 8.0.0.0000)
X10 Hardware(TM)
Yahoo! Toolbar

==================== Restore Points =========================

18-11-2013 10:31:39 Windows-Sicherung
19-11-2013 08:19:25 Windows Update
25-11-2013 10:20:09 Windows-Sicherung
26-11-2013 07:22:28 Windows Update
01-12-2013 18:00:28 Windows-Sicherung
03-12-2013 07:37:40 Windows Update
08-12-2013 11:23:44 Wiederherstellungsvorgang
08-12-2013 11:29:20 avast! antivirus system restore point
08-12-2013 11:34:24 Windows Update
08-12-2013 18:57:16 Windows-Sicherung
12-12-2013 08:22:38 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {070C9FF5-F0B2-4387-8D1D-FF9DDD738B41} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1141593133-1951277196-1691025887-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {0A1DECD0-55C0-4D44-824A-2CEE50D6208A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-04] (Google Inc.)
Task: {1AF93342-5806-4AED-8460-C7A32DE32C19} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-10-19] (AVAST Software)
Task: {36291F0A-4BEE-4FC8-B87A-89A9C2D1CB52} - System32\Tasks\BonanzaDealsUpdate => C:\Program <==== ATTENTION
Task: {403FC347-7B17-46D8-8668-91CC15860914} - System32\Tasks\DigitalSite => C:\Users\Klaus\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {4F8AA48D-01A9-46A3-86CC-0A325C7458A0} - System32\Tasks\EPUpdater => C:\Users\Klaus\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-09-01] () <==== ATTENTION
Task: {6D9FD4FA-CDF0-4DA9-A0A0-CC99CDFFBF59} - System32\Tasks\BackgroundContainer Startup Task => C:\Users\Klaus\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll [2013-10-14] (Conduit Ltd.) <==== ATTENTION
Task: {87745490-C0B8-4975-853F-A8F74686A120} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {8F269D7B-C9A2-4BBB-AD63-1CDEEC3307CB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {C212E4C3-CD09-41D4-B80C-4943522B0852} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: {D97A2DD1-24AA-4F59-B5B6-A847607AE5E9} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: {DCCB829B-6FE2-4B06-8434-D00EC869A7E5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-04] (Google Inc.)
Task: {E4B505E6-2887-409B-B558-26DEA7C31E26} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1141593133-1951277196-1691025887-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\DigitalSite.job => C:\Users\Klaus\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-01-10 20:12 - 2012-01-10 20:12 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2013-10-19 13:31 - 2013-10-19 13:31 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-15 09:44 - 2004-02-25 11:21 - 00069632 _____ () C:\Program Files\Common Files\AOL\ACS\DE\DialerRes.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00032800 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00056352 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00150560 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00112672 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 01767456 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00078880 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00013344 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00726048 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00081952 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014368 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00016928 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00020512 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00057888 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014368 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll
2013-10-06 11:51 - 2013-10-06 11:51 - 00911128 _____ () C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014880 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00052256 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00048160 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2013-08-04 18:41 - 2013-08-04 18:41 - 00194080 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.dll
2013-08-04 18:40 - 2013-08-04 18:40 - 00068640 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00246304 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.NetSeer.dll
2013-09-30 15:00 - 2013-09-30 15:00 - 00020024 _____ () C:\Program Files\COMPUTERBILD-Abzockschutz\Internet Explorer\BandObjectsLib.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/14/2013 05:30:51 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1324

Startzeit: 01cef8e9b61eacff

Endzeit: 16

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (12/13/2013 06:38:16 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1ba79400
ID des fehlerhaften Prozesses: 0x1f50
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/13/2013 09:34:34 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1a07f800
ID des fehlerhaften Prozesses: 0x1120
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/13/2013 09:27:20 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1a2eac00
ID des fehlerhaften Prozesses: 0x1080
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/12/2013 07:37:29 AM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1670

Startzeit: 01cef7047dcfba2a

Endzeit: 13

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID: db6a0ea7-62f7-11e3-b56b-00262df75a0d

Error: (12/10/2013 08:24:31 AM) (Source: Application Hang) (User: )
Description: Programm WINWORD.EXE, Version 12.0.6683.5002 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fb4

Startzeit: 01cef578c885ad66

Endzeit: 15

Anwendungspfad: C:\Program Files\Microsoft Office\Office12\WINWORD.EXE

Berichts-ID: 155c9ca6-616c-11e3-b50f-00262df75a0d

Error: (12/09/2013 01:50:20 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1604

Startzeit: 01cef4dcf70c7b23

Endzeit: 0

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:


System errors:
=============
Error: (12/15/2013 02:12:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/15/2013 09:44:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AOL Connectivity Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (12/15/2013 07:55:08 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 05:29:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 02:41:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 02:14:42 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (12/14/2013 02:02:54 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 11:27:49 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (12/14/2013 11:27:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/13/2013 06:23:56 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.


Microsoft Office Sessions:
=========================
Error: (10/04/2013 05:38:42 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5001, Microsoft Office Version: 12.0.6612.1000. This session lasted 11 seconds with 0 seconds of active time. This session ended with a crash.


==================== Memory info ===========================

Percentage of memory in use: 40%
Total physical RAM: 3510.6 MB
Available physical RAM: 2098.73 MB
Total Pagefile: 7019.48 MB
Available Pagefile: 5252.51 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.84 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:424.66 GB) (Free:323.39 GB) NTFS
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:26.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 3D711539)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=425 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================[/CODE]

Wie oben beschrieben bitte in Codetags posten. Un jetzt bitte wie oben beschrieben Combofix

Hallo Schrauber, ich habe es doch gestern gepostet War das falsch? Und was Combofix ist, weiss ich leider auch nicht.

Es tut mir Leid, wenn ich Dich nerve, aber ich bin wirklich unbedarft.

Gruß guant4

Schau in meine erste Antwort. Dort steht wie man in Codetags posten, und drunter stehen Anweisungen für Combofix

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-12-2013 01
Ran by Klaus (administrator) on KLAUS-PC on 15-12-2013 14:25:36
Running from C:\Users\Klaus
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(America Online, Inc.) C:\Program Files\Common Files\aol\ACS\AOLacsd.exe
(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Wistron Corp.) C:\Program Files\Launch Manager\OSD.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WButton.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(America Online, Inc) C:\Program Files\Common Files\aol\ACS\AOLDial.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WisLMSvc.exe
(Smartbar) C:\Users\Klaus\AppData\Local\Smartbar\Application\SnapDo.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(America Online, Inc.) C:\Program Files\AOL 9.0\aoltray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [LMgrVolOSD] - C:\Program Files\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.)
HKLM\...\Run: [Wbutton] - C:\Program Files\Launch Manager\WButton.exe [413696 2010-01-13] (Wistron Corp.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2009-12-11] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8522272 2010-03-02] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [678432 2010-03-02] (Realtek Semiconductor)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [] - [x]
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-10-19] (AVAST Software)
HKLM\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\ced2504e-930d-4c35-90b1-832df0c90a98.exe [180184 2013-11-23] (AVAST Software)
HKLM\...\Run: [AOLDialer] - C:\Program Files\Common Files\aol\ACS\AOLDial.exe [496752 2004-02-25] (America Online, Inc)
HKLM\...\Run: [RealTray] - c:\program files\real\realplayer\\RealPlay.exe SYSTEMBOOTHIDEPLAYER
HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\Klaus\AppData\Local\Smartbar\Application\SnapDo.exe [21024 2013-08-04] (Smartbar)
HKCU\...\Run: [TClockEx] - C:\Program Files\TClockEx\TCLOCKEX.EXE [89088 2000-03-09] (Dale Nurden)
HKCU\...\Run: [BackgroundContainer] - "C:\Windows\system32\Rundll32.exe" "C:\Users\Klaus\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION
HKCU\...0c966feabec1\InprocServer32: [Default-shell32]  ATTENTION! ====> ZeroAccess?
MountPoints2: {dc69456f-2c05-11e3-97a8-806e6f6e6963} - E:\zdata\cobi.exe
HKU\Default\...\RunOnce: [MEDION] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Default User\...\RunOnce: [MEDION] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
URLSearchHook: HKLM - WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
URLSearchHook: HKCU - WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
URLSearchHook: HKCU - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
SearchScopes: HKLM - DefaultScope {25219A87-0B62-426D-A738-95514B934E7C} URL = 
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=1CD71C4BD6663CEF&affID=125035&tsp=5025
SearchScopes: HKCU - {25219A87-0B62-426D-A738-95514B934E7C} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311268&CUI=UN31055759242975416&UM=2
BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} -  No File
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: searchgol Helper Object - {8F547BDD-FCD4-48F8-A06F-573D6F404A3C} - C:\Program Files\searchgol\searchgol\1.8.16.19\bh\searchgol.dll (Montera Technologeis LTD)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
BHO: No Name - {fe063412-bea4-4d76-8ed3-183be6220d17} -  No File
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - searchgol Toolbar - {00078E95-3A4A-4137-8DE7-2824908D1C17} - C:\Program Files\searchgol\searchgol\1.8.16.19\searchgolTlbr.dll (Montera Technologeis LTD)
Toolbar: HKLM - No Name - {25A3A431-30BB-47C8-AD6A-E1063801134F} -  No File
Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - WhiteSmoke New V6 Toolbar - {da7f5ae1-3be3-43c0-8098-c1d183616e97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
Toolbar: HKLM - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
Toolbar: HKLM - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - WhiteSmoke New V6 Toolbar - {DA7F5AE1-3BE3-43C0-8098-C1D183616E97} - C:\Program Files\WhiteSmoke_New_V6\prxtbWhit.dll (Conduit Ltd.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: 
CHR RestoreOnStartup: "browser": {
        "last_known_google_url": "https://www.google.de/",
        "last_prompted_google_url": "https://www.google.de/",
        "show_home_button": true,
        "window_placement": {
            "bottom": 718,
            "left": 10,
            "maximized": true,
            "right": 1060,
            "top": 10,
            "work_area_bottom": 728,
            "work_area_left": 0,
            "work_area_right": 1366,
            "work_area_top"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Amazon
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR Extension: (Search-Gol Toolbar) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac\1.0_0
CHR Extension: (Snap.Do ) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0
CHR Extension: (Feven 1.5) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0
CHR Extension: (YouTube) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Softonic Chrome Toolbar) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0
CHR Extension: (Plus-HD-1.3) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0
CHR Extension: (BonanzaDeals) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj\3.5.0.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR Extension: (Iminent Chrome Toolbar) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb\2.0_0
CHR HKLM\...\Chrome\Extension: [aipfmkinhleccnodemkoofnnofpbbpac] - C:\Users\Klaus\AppData\Roaming\BabSolution\CR\searchgol.crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM\...\Chrome\Extension: [ibcgjcbeckcdemelifnledhihpaighfk] - C:\Users\Klaus\AppData\Local\CRE\ibcgjcbeckcdemelifnledhihpaighfk.crx
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx

========================== Services (Whitelisted) =================

R2 AOL ACS; C:\Program Files\Common Files\aol\ACS\AOLacsd.exe [1123440 2004-02-25] (America Online, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-19] (AVAST Software)
R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1155072 2009-02-03] (MAGIX AG)
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®)
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [244904 2010-02-10] ()
R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118560 2009-10-22] (Wistron Corp.)
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [35656 2013-10-19] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2013-10-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [79720 2013-10-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-10-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [774392 2013-10-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [403440 2013-12-08] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2013-10-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [178304 2013-10-19] ()
S3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [786400 2009-08-13] (DiBcom SA)
R1 SLEE_15_DRIVER; C:\Windows\system32\drivers\Sleen15.sys [80232 2007-02-21] (Softwareentwicklung Remus - ArchiCrypt )
S3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [12320 2013-08-21] (TuneUp Software)
R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2003-01-10] (America Online, Inc.)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13720 2009-05-13] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27160 2009-05-13] (X10 Wireless Technology, Inc.)
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-15 14:25 - 2013-12-15 14:25 - 00016736 _____ C:\Users\Klaus\FRST.txt
2013-12-15 14:25 - 2013-12-15 14:25 - 00000000 ____D C:\FRST
2013-12-15 14:23 - 2013-12-15 14:23 - 01060897 _____ (Farbar) C:\Users\Klaus\FRST.exe
2013-12-15 14:11 - 2013-12-15 14:11 - 00000056 _____ C:\Windows\setupact.log
2013-12-15 14:11 - 2013-12-15 14:11 - 00000000 _____ C:\Windows\setuperr.log
2013-12-15 09:44 - 2013-12-15 09:46 - 00000000 ____D C:\Program Files\AOL 9.0
2013-12-15 09:44 - 2013-12-15 09:45 - 00000000 ____D C:\Program Files\Common Files\aolshare
2013-12-15 09:44 - 2004-02-25 14:50 - 00153088 _____ (America Online) C:\Windows\system32\jgdwmie.dll
2013-12-15 09:44 - 2004-02-25 11:21 - 00225280 _____ (America Online, Inc) C:\Windows\system32\AOLDial.dll
2013-12-15 08:49 - 2013-12-15 08:59 - 00026624 _____ C:\Users\Klaus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\Documents\My Received Files
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MusicNet
2013-12-14 15:02 - 2013-12-14 15:03 - 00000000 ____D C:\Users\Klaus\Documents\Fax
2013-12-12 09:27 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 09:27 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 09:26 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 09:26 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 09:26 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 09:26 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 09:26 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 09:26 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 09:26 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 09:26 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 09:26 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 09:26 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 09:26 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 09:26 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 09:26 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 09:26 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 09:26 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 09:26 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 09:26 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 09:22 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 09:22 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 07:41 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 07:41 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 07:41 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 07:41 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 07:41 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 07:41 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 07:41 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 07:41 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 07:41 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 07:41 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 07:41 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 15:05 - 2013-12-11 15:05 - 00000000 ____D C:\Program Files\COMPUTERBILD-Abzockschutz
2013-12-08 12:03 - 2013-12-08 12:27 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Softonic
2013-12-08 12:03 - 2013-12-08 12:03 - 00000000 ____D C:\Program Files\Softonic
2013-11-30 12:03 - 2013-12-01 09:59 - 00000000 ____D C:\Users\Klaus\Documents\Handynummern
2013-11-30 11:44 - 2013-11-30 12:06 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-11-30 11:43 - 2013-11-30 11:43 - 00000000 ____D C:\Program Files\MyPhoneExplorer
2013-11-24 13:42 - 2013-11-27 20:24 - 00000000 __RSD C:\Users\Klaus\Documents\My Stationery
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\ParetoLogic
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\DriverCure
2013-11-20 09:45 - 2013-11-20 09:50 - 00000000 ____D C:\ProgramData\ParetoLogic
2013-11-17 11:53 - 2013-11-17 12:00 - 00000025 _____ C:\Users\Klaus\AppData\Local\gt-props
2013-11-17 11:52 - 2013-11-17 11:52 - 00000000 ____D C:\Program Files\SoftOCR
2013-11-15 13:18 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-11-15 13:18 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-15 13:18 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-15 13:18 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-11-15 13:18 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-11-15 13:18 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-11-15 13:18 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-11-15 13:18 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2013-11-15 13:18 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-11-15 13:18 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-11-15 13:18 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-11-15 13:18 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-11-15 13:17 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2013-11-15 13:08 - 2013-11-15 13:08 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-15 13:08 - 2013-11-15 13:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-15 13:07 - 2013-11-15 13:07 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-15 13:07 - 2013-11-15 13:07 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-15 13:07 - 2013-11-15 13:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-15 09:43 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-15 09:43 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-15 09:43 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-15 09:43 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-15 09:43 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-15 09:43 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-15 09:43 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-15 09:43 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-15 09:43 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-15 09:43 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-15 09:43 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-15 09:43 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-15 09:42 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-15 09:42 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-15 09:42 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-15 09:42 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-15 09:42 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-15 09:42 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-15 08:54 - 2013-11-15 09:31 - 00000000 ____D C:\Users\Klaus\AppData\Local\Lollipop
2013-11-15 08:54 - 2013-11-15 09:31 - 00000000 ____D C:\Program Files\VideoPlayer
2013-11-15 08:53 - 2013-11-15 09:31 - 00000000 ____D C:\Program Files\Plus-HD-1.3
2013-11-15 08:53 - 2013-11-15 09:31 - 00000000 ____D C:\Program Files\Feven 1.5

==================== One Month Modified Files and Folders =======

2013-12-15 14:25 - 2013-12-15 14:25 - 00016736 _____ C:\Users\Klaus\FRST.txt
2013-12-15 14:25 - 2013-12-15 14:25 - 00000000 ____D C:\FRST
2013-12-15 14:25 - 2013-10-03 09:35 - 00000000 ____D C:\Users\Klaus
2013-12-15 14:23 - 2013-12-15 14:23 - 01060897 _____ (Farbar) C:\Users\Klaus\FRST.exe
2013-12-15 14:23 - 2013-10-06 08:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-15 14:18 - 2009-07-14 05:34 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-15 14:18 - 2009-07-14 05:34 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-15 14:15 - 2013-10-03 09:34 - 01261728 _____ C:\Windows\WindowsUpdate.log
2013-12-15 14:14 - 2013-10-04 18:09 - 00000912 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2013-12-15 14:11 - 2013-12-15 14:11 - 00000056 _____ C:\Windows\setupact.log
2013-12-15 14:11 - 2013-12-15 14:11 - 00000000 _____ C:\Windows\setuperr.log
2013-12-15 14:11 - 2013-10-04 18:09 - 00000908 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2013-12-15 14:11 - 2013-10-04 18:02 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-15 14:11 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-15 09:50 - 2013-10-06 09:02 - 00000000 ____D C:\Program Files\Common Files\Real
2013-12-15 09:49 - 2013-10-13 08:52 - 00000000 ____D C:\ProgramData\Real
2013-12-15 09:49 - 2013-10-13 08:52 - 00000000 ____D C:\Program Files\Real
2013-12-15 09:49 - 2013-10-13 08:49 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Real
2013-12-15 09:49 - 2013-10-03 09:35 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-15 09:46 - 2013-12-15 09:44 - 00000000 ____D C:\Program Files\AOL 9.0
2013-12-15 09:46 - 2013-10-06 09:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AOL
2013-12-15 09:46 - 2013-10-06 09:01 - 00000000 ____D C:\ProgramData\AOL
2013-12-15 09:45 - 2013-12-15 09:44 - 00000000 ____D C:\Program Files\Common Files\aolshare
2013-12-15 09:45 - 2013-10-06 09:03 - 00000000 ____D C:\Windows\occache
2013-12-15 09:45 - 2013-10-06 09:01 - 00002192 ____H C:\IPH.PH
2013-12-15 09:44 - 2013-10-06 09:01 - 00000000 ____D C:\Program Files\Common Files\aol
2013-12-15 09:44 - 2009-07-14 03:04 - 00000496 _____ C:\Windows\win.ini
2013-12-15 09:40 - 2013-10-04 18:03 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-15 09:08 - 2013-10-04 18:08 - 00000292 _____ C:\Windows\Tasks\DigitalSite.job
2013-12-15 09:07 - 2013-10-04 19:08 - 00000095 _____ C:\Users\Klaus\AppData\Roaming\WB.CFG
2013-12-15 09:07 - 2013-10-04 19:08 - 00000006 _____ C:\Users\Klaus\AppData\Roaming\WBPU-TTL.DAT
2013-12-15 08:59 - 2013-12-15 08:49 - 00026624 _____ C:\Users\Klaus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\Documents\My Received Files
2013-12-15 08:47 - 2013-12-15 08:47 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MusicNet
2013-12-15 08:41 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Allerlei
2013-12-15 08:39 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Briefköpfe
2013-12-15 08:10 - 2013-10-05 10:35 - 01498112 ___SH C:\Users\Klaus\Documents\Thumbs.db
2013-12-15 07:59 - 2010-03-02 06:02 - 01527504 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-14 17:51 - 2013-10-04 12:14 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\vlc
2013-12-14 17:35 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Lustiges
2013-12-14 15:04 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-14 15:03 - 2013-12-14 15:02 - 00000000 ____D C:\Users\Klaus\Documents\Fax
2013-12-12 16:20 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-12 11:40 - 2009-07-14 05:33 - 00493168 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 11:38 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-12-12 09:26 - 2010-03-02 06:45 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 09:25 - 2013-10-03 17:57 - 00000000 ____D C:\Windows\system32\MRT
2013-12-12 09:23 - 2010-03-02 07:25 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-12 07:47 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Glückwünsche
2013-12-11 15:05 - 2013-12-11 15:05 - 00000000 ____D C:\Program Files\COMPUTERBILD-Abzockschutz
2013-12-11 14:23 - 2013-10-04 18:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 14:23 - 2013-10-04 18:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 13:42 - 2013-10-04 18:22 - 00000000 ____D C:\Program Files\Google
2013-12-11 09:00 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Billard
2013-12-08 19:56 - 2013-10-04 17:29 - 00000000 ____D C:\Users\Klaus\AppData\Local\Paint.NET
2013-12-08 12:31 - 2013-10-03 15:59 - 00403440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2013-12-08 12:28 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\wfp
2013-12-08 12:27 - 2013-12-08 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Softonic
2013-12-08 12:27 - 2013-10-25 09:51 - 00000000 ____D C:\Users\Klaus\AppData\Local\Adobe_Systems_Incorporate
2013-12-08 12:27 - 2013-10-06 11:50 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\DVDVideoSoft
2013-12-08 12:27 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration
2013-12-08 12:27 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\AppCompat
2013-12-08 12:26 - 2013-10-06 11:50 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-12-08 12:26 - 2013-10-06 11:50 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-12-08 12:03 - 2013-12-08 12:03 - 00000000 ____D C:\Program Files\Softonic
2013-12-08 11:11 - 2013-10-12 16:57 - 00439808 ___SH C:\Users\Klaus\Thumbs.db
2013-12-05 09:42 - 2013-10-03 16:03 - 00000000 ____D C:\Users\Klaus\AppData\Local\Adobe
2013-12-01 09:59 - 2013-11-30 12:03 - 00000000 ____D C:\Users\Klaus\Documents\Handynummern
2013-11-30 13:01 - 2013-10-03 17:43 - 00155184 _____ C:\Users\Klaus\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-30 12:06 - 2013-11-30 11:44 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-11-30 11:43 - 2013-11-30 11:43 - 00000000 ____D C:\Program Files\MyPhoneExplorer
2013-11-27 20:24 - 2013-11-24 13:42 - 00000000 __RSD C:\Users\Klaus\Documents\My Stationery
2013-11-26 11:11 - 2013-12-12 09:26 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-12 09:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-12 09:26 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-12 09:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-12 09:26 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-12 09:26 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-12 09:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-12 09:26 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-12 09:26 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-12 09:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-12 09:26 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-12 09:26 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-12 09:26 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-12 09:27 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-12 09:26 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-12 09:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-12 09:26 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-12 09:26 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-12 09:26 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-25 20:02 - 2013-10-03 21:26 - 00000000 ____D C:\Program Files\CCleaner
2013-11-23 19:26 - 2013-12-12 07:41 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-20 09:50 - 2013-11-20 09:45 - 00000000 ____D C:\ProgramData\ParetoLogic
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\ParetoLogic
2013-11-20 09:46 - 2013-11-20 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\DriverCure
2013-11-19 12:56 - 2013-10-03 16:13 - 00000000 ____D C:\Users\Klaus\Documents\Geburtstagsliste
2013-11-17 12:01 - 2013-10-16 13:09 - 00005912 _____ C:\ProgramData\hpzinstall.log
2013-11-17 12:00 - 2013-11-17 11:53 - 00000025 _____ C:\Users\Klaus\AppData\Local\gt-props
2013-11-17 11:52 - 2013-11-17 11:52 - 00000000 ____D C:\Program Files\SoftOCR
2013-11-15 15:05 - 2010-03-02 14:51 - 00000000 ____D C:\Windows\Panther
2013-11-15 13:23 - 2009-07-14 09:47 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2013-11-15 13:08 - 2013-11-15 13:08 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-15 13:08 - 2013-11-15 13:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-15 13:07 - 2013-11-15 13:07 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-15 13:07 - 2013-11-15 13:07 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-15 13:07 - 2013-11-15 13:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-15 13:07 - 2013-11-15 13:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-15 13:07 - 2013-11-15 13:07 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-15 09:31 - 2013-11-15 08:54 - 00000000 ____D C:\Users\Klaus\AppData\Local\Lollipop
2013-11-15 09:31 - 2013-11-15 08:54 - 00000000 ____D C:\Program Files\VideoPlayer
2013-11-15 09:31 - 2013-11-15 08:53 - 00000000 ____D C:\Program Files\Plus-HD-1.3
2013-11-15 09:31 - 2013-11-15 08:53 - 00000000 ____D C:\Program Files\Feven 1.5
2013-11-15 09:31 - 2013-11-10 10:55 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\dvdcss
2013-11-15 09:31 - 2010-03-02 06:48 - 00000000 ____D C:\Windows\system32\Macromed
2013-11-15 09:31 - 2009-07-14 09:56 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 __RSD C:\Windows\Media
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\schemas
2013-11-15 09:31 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-11-15 09:29 - 2013-10-05 10:45 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Skype
2013-11-15 09:28 - 2013-10-16 13:08 - 00000000 ____D C:\ProgramData\HP
2013-11-15 09:28 - 2010-03-02 06:55 - 00000000 ____D C:\Program Files\Java

Files to move or delete:
====================
C:\Users\Klaus\FRST.exe


Some content of TEMP:
====================
C:\Users\Klaus\AppData\Local\Temp\AOLFirewallMgr.dll
C:\Users\Klaus\AppData\Local\Temp\install.dll
C:\Users\Klaus\AppData\Local\Temp\INSTALL.EXE
C:\Users\Klaus\AppData\Local\Temp\instph.dll
C:\Users\Klaus\AppData\Local\Temp\launcher.dll
C:\Users\Klaus\AppData\Local\Temp\progupd.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 07:56

==================== End Of Log ============================
         

--- --- ---

--- --- ---
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-12-2013 01
Ran by Klaus at 2013-12-15 14:26:12
Running from C:\Users\Klaus
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 6.1.2)
Adobe Digital Editions 2.0 (Version: 2.0)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05)
AOL Coach Version 1.0(Build:20040201.2 de)
AOL Deutschland
AOL Meine Fotos Bildschirmschoner
AOL Optimized Dial-In
Apple Application Support (Version: 2.3.4)
Apple Software Update (Version: 2.1.3.127)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.0.23)
avast! Free Antivirus (Version: 9.0.2006)
BufferChm (Version: 140.0.212.000)
CCleaner (Version: 4.08)
Cisco EAP-FAST Module (Version: 2.2.14)
Cisco LEAP Module (Version: 1.0.19)
Cisco PEAP Module (Version: 1.1.6)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
COMPUTERBILD-Abzockschutz (Version: 1.0.52)
Copy (Version: 140.0.212.000)
CorelDRAW Essentials 4
CorelDRAW Essentials 4 - Content (Version: 4.0)
CorelDRAW Essentials 4 - Draw (Version: 4.0)
CorelDRAW Essentials 4 - Filters (Version: 4.0)
CorelDRAW Essentials 4 - ICA (Version: 4.0)
CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0)
CorelDRAW Essentials 4 - Lang BR (Version: 4.0)
CorelDRAW Essentials 4 - Lang DE (Version: 4.0)
CorelDRAW Essentials 4 - Lang EN (Version: 4.0)
CorelDRAW Essentials 4 - Lang ES (Version: 4.0)
CorelDRAW Essentials 4 - Lang FR (Version: 4.0)
CorelDRAW Essentials 4 - Lang IT (Version: 4.0)
CorelDRAW Essentials 4 - Lang NL (Version: 4.0)
CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0)
CorelDRAW Essentials 4 - Windows Shell Extension
CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1)
CorelDRAW Essentials 4 (Version: 4.0)
CyberLink LabelPrint (Version: 2.5.2602)
CyberLink MediaShow (Version: 5.0.1410a)
CyberLink PhotoNow (Version: 1.1.6904)
CyberLink Power2Go (Version: 6.1.3602c)
CyberLink PowerDirector (Version: 8.0.2522)
CyberLink PowerDVD 9 (Version: 9.0.2519.00)
CyberLink PowerDVD Copy (Version: 1.5.1306)
CyberLink PowerProducer (Version: 5.0.2.2326)
CyberLink YouCam (Version: 3.0.2609)
Destinations (Version: 140.0.77.000)
DeviceDiscovery (Version: 140.0.212.000)
DJ_AIO_06_F4500_SW_MIN (Version: 140.0.690.000)
F4500 (Version: 140.0.690.000)
Firebird SQL Server - MAGIX Edition (Version: 2.1.23.0)
Fotostory 3 für Windows (Version: 3.0.1115.15)
Free Mp3 Wma Converter V 2.2 (Version: 2.2.0.0)
Free PDF to Word Doc Converter v1.1 (Version: 1.1)
Free Studio version 2013 (Version: 6.1.12.925)
Freemake Video Converter Version 4.0.4 (Version: 4.0.4)
Google Chrome (Version: 31.0.1650.63)
Google Earth (Version: 7.1.2.2041)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4805.320)
Google Update Helper (Version: 1.3.22.3)
GPBaseService2 (Version: 140.0.211.000)
HP Deskjet F4500 All-in-One Driver Software 14.0 Rel. 6 (Version: 14.0)
HP Imaging Device Functions 14.0 (Version: 14.0)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Solution Center 14.0 (Version: 14.0)
HP Update (Version: 5.002.002.002)
HPPhotoGadget (Version: 140.0.524.000)
HPProductAssistant (Version: 140.0.212.000)
HPSSupply (Version: 140.0.211.000)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.2092)
Intel(R) Management Engine Components (Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (Version: 9.5.0.1037)
Intel(R) TV Wizard
Java 7 Update 40 (Version: 7.0.400)
Java Auto Updater (Version: 2.1.9.8)
Java(TM) 6 Update 18 (Version: 6.0.180)
Junk Mail filter update (Version: 14.0.8089.726)
Launch Manager V1.5.0.8 (Version: 1.5.0.8)
Learn2 Player (Uninstall Only)
Macromedia Shockwave Player
Media Go (Version: 2.5.299)
Media Go Video Playback Engine 1.120.103.05010 (Version: 1.120.103.05010)
Medion Home Cinema (Version: 8.0.1318)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Digital Image Library 9 - Blocker (Version: 9.00.0000)
Microsoft Encarta 2006 Enzyklopädie Standard (Version: 2006)
Microsoft Foto 2006 Standard Edition (Version: 11.0.0422)
Microsoft Foto 2006 Standard Edition Bibliothek (Version: 11.0.0422)
Microsoft Foto 2006 Standard Edition Editor (Version: 11.0.0422)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (Version: 2.9)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Works (Version: 08.05.0822)
Microsoft Works (Version: 9.7.0621)
Microsoft Works Suite-Add-Ins für Microsoft Word (Version: 8.0.0.0000)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyPhoneExplorer (Version: 1.8.5)
Network (Version: 140.0.215.000)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)
Open It! (Version: 1.1.1)
PDF Annotator 4.0.0.410 (Version: 4.0.0.410)
PlayReady PC Runtime x86 (Version: 1.3.0)
PlayStation(R)Store (Version: 4.16.2.15545)
QuickTime (Version: 7.74.80.86)
Realtek High Definition Audio Driver (Version: 6.0.1.6057)
Realtek USB 2.0 Card Reader (Version: 6.1.7600.30101)
REALTEK Wireless LAN Driver (Version: 1.00.0145)
Scan (Version: 140.0.80.000)
Search Protect by conduit (Version: 1.7.0.72) <==== ATTENTION
Search-Gol Chrome Toolbar
searchgol toolbar (Version: 1.8.16.19) <==== ATTENTION
Setup-Start von Microsoft Works Suite 2006
Shop for HP Supplies (Version: 14.0)
Skype™ 6.9 (Version: 6.9.106)
SmartWebPrinting (Version: 140.0.186.000)
Snap.Do (Version: 1.102.1.11691)
SolutionCenter (Version: 140.0.213.000)
Status (Version: 140.0.212.000)
Steganos Live Encryption Engine 15 (Version: 15.2.1)
Steganos Safe Home 2007 (Version: 9.0.4)
Synaptics Pointing Device Driver (Version: 14.0.19.0)
Toolbox (Version: 140.0.428.000)
TrayApp (Version: 140.0.212.000)
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.89)
TuneUp Utilities 2014 (Version: 14.0.1000.89)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Zip Extractor
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Viewpoint Media Player
VLC media player 2.1.2 (Version: 2.1.2)
WebReg (Version: 140.0.212.017)
WhiteSmoke New V6 Toolbar for IE (Version: 6.16.2.2)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live ID-Anmelde-Assistent (Version: 6.500.3146.0)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Wondershare PDF to Word (Build 3.6.0) (Version: 3.6.0)
Works Update (Version: 8.0.0.0000)
X10 Hardware(TM)
Yahoo! Toolbar

==================== Restore Points =========================

18-11-2013 10:31:39 Windows-Sicherung
19-11-2013 08:19:25 Windows Update
25-11-2013 10:20:09 Windows-Sicherung
26-11-2013 07:22:28 Windows Update
01-12-2013 18:00:28 Windows-Sicherung
03-12-2013 07:37:40 Windows Update
08-12-2013 11:23:44 Wiederherstellungsvorgang
08-12-2013 11:29:20 avast! antivirus system restore point
08-12-2013 11:34:24 Windows Update
08-12-2013 18:57:16 Windows-Sicherung
12-12-2013 08:22:38 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {070C9FF5-F0B2-4387-8D1D-FF9DDD738B41} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1141593133-1951277196-1691025887-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {0A1DECD0-55C0-4D44-824A-2CEE50D6208A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-04] (Google Inc.)
Task: {1AF93342-5806-4AED-8460-C7A32DE32C19} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-10-19] (AVAST Software)
Task: {36291F0A-4BEE-4FC8-B87A-89A9C2D1CB52} - System32\Tasks\BonanzaDealsUpdate => C:\Program <==== ATTENTION
Task: {403FC347-7B17-46D8-8668-91CC15860914} - System32\Tasks\DigitalSite => C:\Users\Klaus\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {4F8AA48D-01A9-46A3-86CC-0A325C7458A0} - System32\Tasks\EPUpdater => C:\Users\Klaus\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-09-01] () <==== ATTENTION
Task: {6D9FD4FA-CDF0-4DA9-A0A0-CC99CDFFBF59} - System32\Tasks\BackgroundContainer Startup Task => C:\Users\Klaus\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll [2013-10-14] (Conduit Ltd.) <==== ATTENTION
Task: {87745490-C0B8-4975-853F-A8F74686A120} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {8F269D7B-C9A2-4BBB-AD63-1CDEEC3307CB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {C212E4C3-CD09-41D4-B80C-4943522B0852} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: {D97A2DD1-24AA-4F59-B5B6-A847607AE5E9} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: {DCCB829B-6FE2-4B06-8434-D00EC869A7E5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-04] (Google Inc.)
Task: {E4B505E6-2887-409B-B558-26DEA7C31E26} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1141593133-1951277196-1691025887-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\DigitalSite.job => C:\Users\Klaus\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-01-10 20:12 - 2012-01-10 20:12 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2013-10-19 13:31 - 2013-10-19 13:31 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-15 09:44 - 2004-02-25 11:21 - 00069632 _____ () C:\Program Files\Common Files\AOL\ACS\DE\DialerRes.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00032800 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00056352 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00150560 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00112672 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 01767456 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00078880 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00013344 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00726048 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00081952 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014368 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00016928 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00020512 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00057888 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014368 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll
2013-10-06 11:51 - 2013-10-06 11:51 - 00911128 _____ () C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014880 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00052256 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00048160 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2013-08-04 18:41 - 2013-08-04 18:41 - 00194080 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.dll
2013-08-04 18:40 - 2013-08-04 18:40 - 00068640 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00246304 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.NetSeer.dll
2013-09-30 15:00 - 2013-09-30 15:00 - 00020024 _____ () C:\Program Files\COMPUTERBILD-Abzockschutz\Internet Explorer\BandObjectsLib.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/14/2013 05:30:51 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1324

Startzeit: 01cef8e9b61eacff

Endzeit: 16

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (12/13/2013 06:38:16 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1ba79400
ID des fehlerhaften Prozesses: 0x1f50
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/13/2013 09:34:34 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1a07f800
ID des fehlerhaften Prozesses: 0x1120
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/13/2013 09:27:20 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1a2eac00
ID des fehlerhaften Prozesses: 0x1080
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/12/2013 07:37:29 AM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1670

Startzeit: 01cef7047dcfba2a

Endzeit: 13

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID: db6a0ea7-62f7-11e3-b56b-00262df75a0d

Error: (12/10/2013 08:24:31 AM) (Source: Application Hang) (User: )
Description: Programm WINWORD.EXE, Version 12.0.6683.5002 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fb4

Startzeit: 01cef578c885ad66

Endzeit: 15

Anwendungspfad: C:\Program Files\Microsoft Office\Office12\WINWORD.EXE

Berichts-ID: 155c9ca6-616c-11e3-b50f-00262df75a0d

Error: (12/09/2013 01:50:20 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1604

Startzeit: 01cef4dcf70c7b23

Endzeit: 0

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:


System errors:
=============
Error: (12/15/2013 02:12:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/15/2013 09:44:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AOL Connectivity Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (12/15/2013 07:55:08 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 05:29:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 02:41:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 02:14:42 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (12/14/2013 02:02:54 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 11:27:49 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (12/14/2013 11:27:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/13/2013 06:23:56 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.


Microsoft Office Sessions:
=========================
Error: (10/04/2013 05:38:42 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5001, Microsoft Office Version: 12.0.6612.1000. This session lasted 11 seconds with 0 seconds of active time. This session ended with a crash.


==================== Memory info ===========================

Percentage of memory in use: 40%
Total physical RAM: 3510.6 MB
Available physical RAM: 2098.73 MB
Total Pagefile: 7019.48 MB
Available Pagefile: 5252.51 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.84 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:424.66 GB) (Free:323.39 GB) NTFS
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:26.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 3D711539)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=425 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================[/CODE]

jetzt habe ich schon 3x gepostet, genau wie du es beschrieben hast. on Combo soundso steht allerdings nichts in deiner ersten antwort. ich bin mit meinem Latein am ende.

gruß guant4

War nicht die erste, sorry. Steht hier:

http://www.trojaner-board.de/146115-...ml#post1214140

Und die Additonal ist immer noch nicht in Codetags, das siehst Du doch selbst oder?

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-12-2013 01
Ran by Klaus at 2013-12-15 14:26:12
Running from C:\Users\Klaus
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 6.1.2)
Adobe Digital Editions 2.0 (Version: 2.0)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05)
AOL Coach Version 1.0(Build:20040201.2 de)
AOL Deutschland
AOL Meine Fotos Bildschirmschoner
AOL Optimized Dial-In
Apple Application Support (Version: 2.3.4)
Apple Software Update (Version: 2.1.3.127)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.0.23)
avast! Free Antivirus (Version: 9.0.2006)
BufferChm (Version: 140.0.212.000)
CCleaner (Version: 4.08)
Cisco EAP-FAST Module (Version: 2.2.14)
Cisco LEAP Module (Version: 1.0.19)
Cisco PEAP Module (Version: 1.1.6)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
COMPUTERBILD-Abzockschutz (Version: 1.0.52)
Copy (Version: 140.0.212.000)
CorelDRAW Essentials 4
CorelDRAW Essentials 4 - Content (Version: 4.0)
CorelDRAW Essentials 4 - Draw (Version: 4.0)
CorelDRAW Essentials 4 - Filters (Version: 4.0)
CorelDRAW Essentials 4 - ICA (Version: 4.0)
CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0)
CorelDRAW Essentials 4 - Lang BR (Version: 4.0)
CorelDRAW Essentials 4 - Lang DE (Version: 4.0)
CorelDRAW Essentials 4 - Lang EN (Version: 4.0)
CorelDRAW Essentials 4 - Lang ES (Version: 4.0)
CorelDRAW Essentials 4 - Lang FR (Version: 4.0)
CorelDRAW Essentials 4 - Lang IT (Version: 4.0)
CorelDRAW Essentials 4 - Lang NL (Version: 4.0)
CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0)
CorelDRAW Essentials 4 - Windows Shell Extension
CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1)
CorelDRAW Essentials 4 (Version: 4.0)
CyberLink LabelPrint (Version: 2.5.2602)
CyberLink MediaShow (Version: 5.0.1410a)
CyberLink PhotoNow (Version: 1.1.6904)
CyberLink Power2Go (Version: 6.1.3602c)
CyberLink PowerDirector (Version: 8.0.2522)
CyberLink PowerDVD 9 (Version: 9.0.2519.00)
CyberLink PowerDVD Copy (Version: 1.5.1306)
CyberLink PowerProducer (Version: 5.0.2.2326)
CyberLink YouCam (Version: 3.0.2609)
Destinations (Version: 140.0.77.000)
DeviceDiscovery (Version: 140.0.212.000)
DJ_AIO_06_F4500_SW_MIN (Version: 140.0.690.000)
F4500 (Version: 140.0.690.000)
Firebird SQL Server - MAGIX Edition (Version: 2.1.23.0)
Fotostory 3 für Windows (Version: 3.0.1115.15)
Free Mp3 Wma Converter V 2.2 (Version: 2.2.0.0)
Free PDF to Word Doc Converter v1.1 (Version: 1.1)
Free Studio version 2013 (Version: 6.1.12.925)
Freemake Video Converter Version 4.0.4 (Version: 4.0.4)
Google Chrome (Version: 31.0.1650.63)
Google Earth (Version: 7.1.2.2041)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4805.320)
Google Update Helper (Version: 1.3.22.3)
GPBaseService2 (Version: 140.0.211.000)
HP Deskjet F4500 All-in-One Driver Software 14.0 Rel. 6 (Version: 14.0)
HP Imaging Device Functions 14.0 (Version: 14.0)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Solution Center 14.0 (Version: 14.0)
HP Update (Version: 5.002.002.002)
HPPhotoGadget (Version: 140.0.524.000)
HPProductAssistant (Version: 140.0.212.000)
HPSSupply (Version: 140.0.211.000)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.2092)
Intel(R) Management Engine Components (Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (Version: 9.5.0.1037)
Intel(R) TV Wizard
Java 7 Update 40 (Version: 7.0.400)
Java Auto Updater (Version: 2.1.9.8)
Java(TM) 6 Update 18 (Version: 6.0.180)
Junk Mail filter update (Version: 14.0.8089.726)
Launch Manager V1.5.0.8 (Version: 1.5.0.8)
Learn2 Player (Uninstall Only)
Macromedia Shockwave Player
Media Go (Version: 2.5.299)
Media Go Video Playback Engine 1.120.103.05010 (Version: 1.120.103.05010)
Medion Home Cinema (Version: 8.0.1318)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Digital Image Library 9 - Blocker (Version: 9.00.0000)
Microsoft Encarta 2006 Enzyklopädie Standard (Version: 2006)
Microsoft Foto 2006 Standard Edition (Version: 11.0.0422)
Microsoft Foto 2006 Standard Edition Bibliothek (Version: 11.0.0422)
Microsoft Foto 2006 Standard Edition Editor (Version: 11.0.0422)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (Version: 2.9)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Works (Version: 08.05.0822)
Microsoft Works (Version: 9.7.0621)
Microsoft Works Suite-Add-Ins für Microsoft Word (Version: 8.0.0.0000)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyPhoneExplorer (Version: 1.8.5)
Network (Version: 140.0.215.000)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)
Open It! (Version: 1.1.1)
PDF Annotator 4.0.0.410 (Version: 4.0.0.410)
PlayReady PC Runtime x86 (Version: 1.3.0)
PlayStation(R)Store (Version: 4.16.2.15545)
QuickTime (Version: 7.74.80.86)
Realtek High Definition Audio Driver (Version: 6.0.1.6057)
Realtek USB 2.0 Card Reader (Version: 6.1.7600.30101)
REALTEK Wireless LAN Driver (Version: 1.00.0145)
Scan (Version: 140.0.80.000)
Search Protect by conduit (Version: 1.7.0.72) <==== ATTENTION
Search-Gol Chrome Toolbar
searchgol toolbar   (Version: 1.8.16.19) <==== ATTENTION
Setup-Start von Microsoft Works Suite 2006
Shop for HP Supplies (Version: 14.0)
Skype™ 6.9 (Version: 6.9.106)
SmartWebPrinting (Version: 140.0.186.000)
Snap.Do (Version: 1.102.1.11691)
SolutionCenter (Version: 140.0.213.000)
Status (Version: 140.0.212.000)
Steganos Live Encryption Engine 15 (Version: 15.2.1)
Steganos Safe Home 2007 (Version: 9.0.4)
Synaptics Pointing Device Driver (Version: 14.0.19.0)
Toolbox (Version: 140.0.428.000)
TrayApp (Version: 140.0.212.000)
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.89)
TuneUp Utilities 2014 (Version: 14.0.1000.89)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Zip Extractor
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Viewpoint Media Player
VLC media player 2.1.2 (Version: 2.1.2)
WebReg (Version: 140.0.212.017)
WhiteSmoke New V6 Toolbar for IE (Version: 6.16.2.2)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live ID-Anmelde-Assistent (Version: 6.500.3146.0)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Wondershare PDF to Word (Build 3.6.0) (Version: 3.6.0)
Works Update (Version: 8.0.0.0000)
X10 Hardware(TM)
Yahoo! Toolbar

==================== Restore Points  =========================

18-11-2013 10:31:39 Windows-Sicherung
19-11-2013 08:19:25 Windows Update
25-11-2013 10:20:09 Windows-Sicherung
26-11-2013 07:22:28 Windows Update
01-12-2013 18:00:28 Windows-Sicherung
03-12-2013 07:37:40 Windows Update
08-12-2013 11:23:44 Wiederherstellungsvorgang
08-12-2013 11:29:20 avast! antivirus system restore point
08-12-2013 11:34:24 Windows Update
08-12-2013 18:57:16 Windows-Sicherung
12-12-2013 08:22:38 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {070C9FF5-F0B2-4387-8D1D-FF9DDD738B41} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1141593133-1951277196-1691025887-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {0A1DECD0-55C0-4D44-824A-2CEE50D6208A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-04] (Google Inc.)
Task: {1AF93342-5806-4AED-8460-C7A32DE32C19} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-10-19] (AVAST Software)
Task: {36291F0A-4BEE-4FC8-B87A-89A9C2D1CB52} - System32\Tasks\BonanzaDealsUpdate => C:\Program <==== ATTENTION
Task: {403FC347-7B17-46D8-8668-91CC15860914} - System32\Tasks\DigitalSite => C:\Users\Klaus\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {4F8AA48D-01A9-46A3-86CC-0A325C7458A0} - System32\Tasks\EPUpdater => C:\Users\Klaus\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-09-01] () <==== ATTENTION
Task: {6D9FD4FA-CDF0-4DA9-A0A0-CC99CDFFBF59} - System32\Tasks\BackgroundContainer Startup Task => C:\Users\Klaus\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll [2013-10-14] (Conduit Ltd.) <==== ATTENTION
Task: {87745490-C0B8-4975-853F-A8F74686A120} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {8F269D7B-C9A2-4BBB-AD63-1CDEEC3307CB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {C212E4C3-CD09-41D4-B80C-4943522B0852} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: {D97A2DD1-24AA-4F59-B5B6-A847607AE5E9} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: {DCCB829B-6FE2-4B06-8434-D00EC869A7E5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-04] (Google Inc.)
Task: {E4B505E6-2887-409B-B558-26DEA7C31E26} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1141593133-1951277196-1691025887-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job => C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\DigitalSite.job => C:\Users\Klaus\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-01-10 20:12 - 2012-01-10 20:12 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2013-10-19 13:31 - 2013-10-19 13:31 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-15 09:44 - 2004-02-25 11:21 - 00069632 _____ () C:\Program Files\Common Files\AOL\ACS\DE\DialerRes.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00032800 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00056352 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00150560 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00112672 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 01767456 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00078880 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00013344 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00726048 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00081952 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014368 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00016928 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00020512 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00057888 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014368 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll
2013-10-06 11:51 - 2013-10-06 11:51 - 00911128 _____ () C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00014880 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00052256 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00048160 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2013-08-04 18:51 - 2013-08-04 18:51 - 00026144 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2013-08-04 18:41 - 2013-08-04 18:41 - 00194080 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.dll
2013-08-04 18:40 - 2013-08-04 18:40 - 00068640 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll
2013-08-04 18:50 - 2013-08-04 18:50 - 00246304 _____ () C:\Users\Klaus\AppData\Local\Smartbar\Application\Smartbar.Resources.NetSeer.dll
2013-09-30 15:00 - 2013-09-30 15:00 - 00020024 _____ () C:\Program Files\COMPUTERBILD-Abzockschutz\Internet Explorer\BandObjectsLib.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/15/2013 09:47:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/14/2013 05:30:51 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1324

Startzeit: 01cef8e9b61eacff

Endzeit: 16

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (12/13/2013 06:38:16 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1ba79400
ID des fehlerhaften Prozesses: 0x1f50
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/13/2013 09:34:34 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1a07f800
ID des fehlerhaften Prozesses: 0x1120
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/13/2013 09:27:20 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x1a2eac00
ID des fehlerhaften Prozesses: 0x1080
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/12/2013 07:37:29 AM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1670

Startzeit: 01cef7047dcfba2a

Endzeit: 13

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID: db6a0ea7-62f7-11e3-b56b-00262df75a0d

Error: (12/10/2013 08:24:31 AM) (Source: Application Hang) (User: )
Description: Programm WINWORD.EXE, Version 12.0.6683.5002 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fb4

Startzeit: 01cef578c885ad66

Endzeit: 15

Anwendungspfad: C:\Program Files\Microsoft Office\Office12\WINWORD.EXE

Berichts-ID: 155c9ca6-616c-11e3-b50f-00262df75a0d

Error: (12/09/2013 01:50:20 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1604

Startzeit: 01cef4dcf70c7b23

Endzeit: 0

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:


System errors:
=============
Error: (12/15/2013 02:12:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/15/2013 09:44:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AOL Connectivity Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (12/15/2013 07:55:08 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 05:29:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 02:41:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 02:14:42 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (12/14/2013 02:02:54 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/14/2013 11:27:49 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (12/14/2013 11:27:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147467262.

Error: (12/13/2013 06:23:56 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.


Microsoft Office Sessions:
=========================
Error: (10/04/2013 05:38:42 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5001, Microsoft Office Version: 12.0.6612.1000. This session lasted 11 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 40%
Total physical RAM: 3510.6 MB
Available physical RAM: 2098.73 MB
Total Pagefile: 7019.48 MB
Available Pagefile: 5252.51 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.84 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:424.66 GB) (Free:323.39 GB) NTFS
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:26.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 3D711539)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=425 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================
         

ComboFix 13-12-17.02 - Klaus 18.12.2013  14:27:05.1.4 - x86
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3511.2341 [GMT 1:00]
ausgeführt von:: c:\users\Klaus\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0\background.html
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0\crossriderManifest.json
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0\extensionData\manifest.xml
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0\extensionData\plugins.json
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0\icons\actions\1.png
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0\icons\icon128.png
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0\icons\icon16.png
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0\icons\icon48.png
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0\manifest.json
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg\1.25.48_0\popup.html
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0\background.html
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0\crossriderManifest.json
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0\extensionData\manifest.xml
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0\extensionData\plugins.json
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0\icons\actions\1.png
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0\icons\icon128.png
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0\icons\icon16.png
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0\icons\icon48.png
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0\manifest.json
c:\users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.94_0\popup.html
c:\users\Klaus\AppData\Local\lollipop
c:\users\Klaus\AppData\Local\lollipop\lollipop.lpd
c:\users\Klaus\AppData\Local\lollipop\lollipop_cfg.lpd
c:\users\Klaus\AppData\Local\lollipop\lollipop_ps.lpd
c:\users\Klaus\AppData\Roaming\SearchProtect
c:\users\Klaus\AppData\Roaming\SearchProtect\bin\msvcp100.dll
c:\users\Klaus\AppData\Roaming\SearchProtect\bin\msvcr100.dll
c:\users\Klaus\AppData\Roaming\SearchProtect\bin\rep.dat
c:\users\Klaus\AppData\Roaming\SearchProtect\bin\uninstall.exe
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\dialogsApi.js
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\lib\jquery.min.js
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\lib\json2.js
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spbd\bubble.css
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spbd\bubble.js
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spbd\images\information.png
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spbd\images\x-default-LTR.png
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spbd\images\x-default-RTL.png
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spbd\images\x-mouseover-LTR.png
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spbd\images\x-mouseover-RTL.png
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spbd\main.html
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spsd\images\ok-button.png
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spsd\images\separation-line.png
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spsd\images\warning.png
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spsd\main.html
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spsd\SearchProtector.css
c:\users\Klaus\AppData\Roaming\SearchProtect\Dialogs\spsd\settings.js
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\abstraction.js
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\application.js
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\dialogsApi.js
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\lib\jquery.min.js
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\lib\json2.js
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\bubble.css
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\bubble.js
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\images\information.png
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\images\x-default-LTR.png
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\images\x-default-RTL.png
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\images\x-mouseover-LTR.png
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\images\x-mouseover-RTL.png
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\main.html
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\images\ok-button.png
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\images\separation-line.png
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\images\warning.png
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\main.html
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\SearchProtector.css
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\settings.js
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\nsprotector.js
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\popupTransparent.xul
c:\users\Klaus\AppData\Roaming\SearchProtect\ffprotect\SProtectorRepository\EN
c:\windows\system32\jgaw400.dll
c:\windows\system32\roboot.exe
c:\windows\system32\Tasks\BackgroundContainer Startup Task
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-11-18 bis 2013-12-18  ))))))))))))))))))))))))))))))
.
.
2013-12-18 13:38 . 2013-12-18 13:38	--------	d-----w-	c:\users\Klaus\AppData\Local\temp
2013-12-18 13:38 . 2013-12-18 13:38	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-12-17 08:45 . 2013-12-17 08:45	--------	d-----w-	c:\program files\COMPUTERBILD-Abzockschutz
2013-12-17 08:04 . 2013-12-04 02:57	7760024	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{8E9E52AC-8650-4D2A-AC58-74570D83940C}\mpengine.dll
2013-12-15 13:25 . 2013-12-15 13:25	--------	d-----w-	C:\FRST
2013-12-15 08:45 . 2013-12-15 08:45	--------	d-----w-	C:\My Music
2013-12-15 08:44 . 2004-02-25 13:50	153088	----a-w-	c:\windows\system32\jgdwmie.dll
2013-12-15 08:44 . 2004-02-25 10:21	225280	----a-w-	c:\windows\system32\AOLDial.dll
2013-12-15 08:44 . 2013-12-15 08:45	--------	d-----w-	c:\program files\Common Files\aolshare
2013-12-15 08:44 . 2013-12-15 08:46	--------	d-----w-	c:\program files\AOL 9.0
2013-12-15 07:47 . 2013-12-15 07:47	--------	d-----w-	c:\users\Klaus\AppData\Roaming\MusicNet
2013-12-12 08:27 . 2013-11-27 00:20	235216	----a-w-	c:\program files\Internet Explorer\sqmapi.dll
2013-12-12 08:27 . 2013-11-26 09:23	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2013-12-12 08:27 . 2013-11-26 06:41	251392	----a-w-	c:\program files\Internet Explorer\IEShims.dll
2013-12-12 08:27 . 2013-11-26 06:22	270848	----a-w-	c:\program files\Internet Explorer\ieproxy.dll
2013-12-12 08:22 . 2013-05-10 04:56	12625408	----a-w-	c:\windows\system32\wmploc.DLL
2013-12-12 08:22 . 2013-05-10 03:48	164864	----a-w-	c:\program files\Windows Media Player\wmplayer.exe
2013-12-12 06:41 . 2013-10-30 02:19	301568	----a-w-	c:\windows\system32\msieftp.dll
2013-12-12 06:41 . 2013-10-19 01:36	159232	----a-w-	c:\windows\system32\imagehlp.dll
2013-12-12 06:41 . 2013-11-23 18:26	417792	----a-w-	c:\windows\system32\WMPhoto.dll
2013-12-12 06:41 . 2013-10-12 02:04	121856	----a-w-	c:\windows\system32\wshom.ocx
2013-12-12 06:41 . 2013-10-12 02:03	163840	----a-w-	c:\windows\system32\scrrun.dll
2013-12-12 06:41 . 2013-10-12 01:15	141824	----a-w-	c:\windows\system32\wscript.exe
2013-12-12 06:41 . 2013-10-12 01:15	126976	----a-w-	c:\windows\system32\cscript.exe
2013-12-12 06:41 . 2013-11-12 02:07	2048	----a-w-	c:\windows\system32\tzres.dll
2013-12-12 06:41 . 2013-10-30 01:27	2349056	----a-w-	c:\windows\system32\win32k.sys
2013-12-12 06:41 . 2013-10-04 01:49	81408	----a-w-	c:\windows\system32\drivers\drmk.sys
2013-12-12 06:41 . 2013-10-04 01:17	177152	----a-w-	c:\windows\system32\drivers\portcls.sys
2013-12-08 11:03 . 2013-12-08 11:03	--------	d-----w-	c:\program files\Softonic
2013-12-08 11:03 . 2013-12-08 11:27	--------	d-----w-	c:\users\Klaus\AppData\Roaming\Softonic
2013-11-30 10:44 . 2013-11-30 11:06	--------	d-----w-	c:\users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-11-30 10:43 . 2013-11-30 10:43	--------	d-----w-	c:\program files\MyPhoneExplorer
2013-11-23 07:06 . 2013-11-23 07:06	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2013-11-23 07:05 . 2013-11-23 07:05	42776	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2013-11-20 08:46 . 2013-11-20 08:46	--------	d-----w-	c:\users\Klaus\AppData\Roaming\ParetoLogic
2013-11-20 08:46 . 2013-11-20 08:46	--------	d-----w-	c:\users\Klaus\AppData\Roaming\DriverCure
2013-11-20 08:45 . 2013-11-20 08:50	--------	d-----w-	c:\programdata\ParetoLogic
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-18 07:34 . 2013-10-04 17:02	71048	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2013-12-18 07:34 . 2013-10-04 17:02	692616	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2013-12-15 06:57 . 2013-10-04 07:16	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2013-12-15 06:57 . 2013-10-04 07:16	42168	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2013-12-08 11:31 . 2013-10-03 14:59	403440	----a-w-	c:\windows\system32\drivers\aswsp.sys
2013-11-19 02:33 . 2010-03-02 06:22	230048	------w-	c:\windows\system32\MpSigStub.exe
2013-11-15 12:08 . 2013-11-15 12:08	646144	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-15 12:08 . 2013-11-15 12:08	194048	----a-w-	c:\windows\system32\elshyph.dll
2013-11-15 12:07 . 2013-11-15 12:07	86016	----a-w-	c:\windows\system32\iesysprep.dll
2013-11-15 12:07 . 2013-11-15 12:07	74240	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-11-15 12:07 . 2013-11-15 12:07	71680	----a-w-	c:\windows\system32\RegisterIEPKEYs.exe
2013-11-15 12:07 . 2013-11-15 12:07	645120	----a-w-	c:\windows\system32\jsIntl.dll
2013-11-15 12:07 . 2013-11-15 12:07	62464	----a-w-	c:\windows\system32\tdc.ocx
2013-11-15 12:07 . 2013-11-15 12:07	61952	----a-w-	c:\windows\system32\MshtmlDac.dll
2013-11-15 12:07 . 2013-11-15 12:07	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-11-15 12:07 . 2013-11-15 12:07	454656	----a-w-	c:\windows\system32\vbscript.dll
2013-11-15 12:07 . 2013-11-15 12:07	36352	----a-w-	c:\windows\system32\imgutil.dll
2013-11-15 12:07 . 2013-11-15 12:07	34816	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 12:07 . 2013-11-15 12:07	337408	----a-w-	c:\windows\system32\html.iec
2013-11-15 12:07 . 2013-11-15 12:07	24576	----a-w-	c:\windows\system32\licmgr10.dll
2013-11-15 12:07 . 2013-11-15 12:07	182272	----a-w-	c:\windows\system32\msls31.dll
2013-11-15 12:07 . 2013-11-15 12:07	151552	----a-w-	c:\windows\system32\iexpress.exe
2013-11-15 12:07 . 2013-11-15 12:07	139264	----a-w-	c:\windows\system32\wextract.exe
2013-11-15 12:07 . 2013-11-15 12:07	13312	----a-w-	c:\windows\system32\mshta.exe
2013-11-15 12:07 . 2013-11-15 12:07	111616	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-11-15 12:07 . 2013-11-15 12:07	1051136	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-10-19 12:31 . 2013-10-03 14:59	57672	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2013-10-19 12:31 . 2013-10-03 14:59	774392	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2013-10-19 12:31 . 2013-10-03 14:59	49944	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2013-10-19 12:31 . 2013-10-03 14:59	178304	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2013-10-19 12:31 . 2013-10-03 14:59	70384	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2013-10-19 12:31 . 2013-10-03 14:59	35656	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2013-10-19 12:31 . 2013-10-03 14:59	79720	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2013-10-19 12:31 . 2013-10-03 14:59	269216	----a-w-	c:\windows\system32\aswBoot.exe
2013-10-19 12:31 . 2013-10-03 14:58	43152	----a-w-	c:\windows\avastSS.scr
2013-10-13 07:52 . 2003-03-18 19:14	499712	------w-	c:\windows\system32\msvcp71.dll
2013-10-12 02:03 . 2013-11-15 08:42	656896	----a-w-	c:\windows\system32\nshwfp.dll
2013-10-12 02:01 . 2013-11-15 08:42	679424	----a-w-	c:\windows\system32\IKEEXT.DLL
2013-10-12 02:01 . 2013-11-15 08:42	216576	----a-w-	c:\windows\system32\FWPUCLNT.DLL
2013-10-05 19:57 . 2013-11-15 08:42	1168384	----a-w-	c:\windows\system32\crypt32.dll
2013-10-05 13:07 . 2013-10-05 13:07	94632	----a-w-	c:\windows\system32\WindowsAccessBridge.dll
2013-10-05 13:07 . 2013-10-05 13:08	790440	----a-w-	c:\windows\system32\deployJava1.dll
2013-10-05 13:07 . 2013-10-05 13:08	868264	----a-w-	c:\windows\system32\npDeployJava1.dll
2013-10-04 13:03 . 2013-10-04 13:03	49152	----a-w-	c:\windows\system32\taskhost.exe
2013-10-04 13:01 . 2013-10-04 13:01	9728	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-04 13:01 . 2013-10-04 13:01	5632	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-04 13:01 . 2013-10-04 13:01	5632	---ha-w-	c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-04 13:01 . 2013-10-04 13:01	4096	---ha-w-	c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-04 13:01 . 2013-10-04 13:01	3584	---ha-w-	c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-04 13:01 . 2013-10-04 13:01	3072	---ha-w-	c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-04 13:01 . 2013-10-04 13:01	3072	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-04 13:01 . 2013-10-04 13:01	2560	---ha-w-	c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-04 13:01 . 2013-10-04 13:01	10752	---ha-w-	c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-04 13:00 . 2013-10-04 13:00	364544	----a-w-	c:\windows\system32\XpsGdiConverter.dll
2013-10-04 13:00 . 2013-10-04 13:00	1158144	----a-w-	c:\windows\system32\XpsPrint.dll
2013-10-04 13:00 . 2013-10-04 13:00	2284544	----a-w-	c:\windows\system32\msmpeg2vdec.dll
2013-10-04 13:00 . 2013-10-04 13:00	906240	----a-w-	c:\windows\system32\FntCache.dll
2013-10-04 13:00 . 2013-10-04 13:00	220160	----a-w-	c:\windows\system32\d3d10core.dll
2013-10-04 13:00 . 2013-10-04 13:00	1080832	----a-w-	c:\windows\system32\d3d10.dll
2013-10-04 13:00 . 2013-10-04 13:00	249856	----a-w-	c:\windows\system32\d3d10_1core.dll
2013-10-04 13:00 . 2013-10-04 13:00	207872	----a-w-	c:\windows\system32\WindowsCodecsExt.dll
2013-10-04 13:00 . 2013-10-04 13:00	161792	----a-w-	c:\windows\system32\d3d10_1.dll
2013-10-04 13:00 . 2013-10-04 13:00	604160	----a-w-	c:\windows\system32\d3d10level9.dll
2013-10-04 13:00 . 2013-10-04 13:00	3419136	----a-w-	c:\windows\system32\d2d1.dll
2013-10-04 13:00 . 2013-10-04 13:00	293376	----a-w-	c:\windows\system32\dxgi.dll
2013-10-04 13:00 . 2013-10-04 13:00	1988096	----a-w-	c:\windows\system32\d3d10warp.dll
2013-10-04 13:00 . 2013-10-04 13:00	187392	----a-w-	c:\windows\system32\UIAnimation.dll
2013-10-04 12:49 . 2013-10-04 12:49	1505280	----a-w-	c:\windows\system32\d3d11.dll
2013-10-04 12:35 . 2013-10-04 12:35	952	--sha-w-	c:\programdata\KGyGaAvL.sys
2013-10-04 11:29 . 2009-07-14 02:05	152576	----a-w-	c:\windows\system32\msclmd.dll
2013-10-04 07:15 . 2013-10-04 07:15	1236816	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-10-04 01:58 . 2013-11-15 08:43	152576	----a-w-	c:\windows\system32\SmartcardCredentialProvider.dll
2013-10-04 01:56 . 2013-11-15 08:43	168960	----a-w-	c:\windows\system32\credui.dll
2013-10-04 01:56 . 2013-11-15 08:43	1796096	----a-w-	c:\windows\system32\authui.dll
2013-10-03 01:58 . 2013-11-15 08:42	305152	----a-w-	c:\windows\system32\gdi32.dll
2013-10-02 03:01 . 2013-11-15 12:18	3584	----a-w-	c:\windows\system32\drivers\de-DE\tsusbflt.sys.mui
2013-10-02 00:42 . 2013-11-15 12:18	49152	----a-w-	c:\windows\system32\drivers\TsUsbFlt.sys
2013-10-02 00:32 . 2013-11-15 12:18	12800	----a-w-	c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-10-02 00:30 . 2013-11-15 12:18	14336	----a-w-	c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-10-02 00:14 . 2013-11-15 12:18	50176	----a-w-	c:\windows\system32\MsRdpWebAccess.dll
2013-10-02 00:14 . 2013-11-15 12:18	17920	----a-w-	c:\windows\system32\wksprtPS.dll
2013-10-01 23:58 . 2013-11-15 12:18	53248	----a-w-	c:\windows\system32\tsgqec.dll
2013-10-01 23:45 . 2013-11-15 12:18	32256	----a-w-	c:\windows\system32\TsUsbGDCoInstaller.dll
2013-10-01 23:08 . 2013-11-15 12:18	855552	----a-w-	c:\windows\system32\rdvidcrl.dll
2013-10-01 23:00 . 2013-11-15 12:18	76288	----a-w-	c:\windows\system32\TSWbPrxy.exe
2013-10-01 22:53 . 2013-11-15 12:18	350208	----a-w-	c:\windows\system32\wksprt.exe
2013-10-01 22:34 . 2013-11-15 12:18	1068544	----a-w-	c:\windows\system32\mstsc.exe
2013-10-01 20:55 . 2013-11-15 12:18	5698048	----a-w-	c:\windows\system32\mstscax.dll
2013-09-25 02:01 . 2013-11-15 08:43	136640	----a-w-	c:\windows\system32\drivers\ksecpkg.sys
2013-09-25 02:01 . 2013-11-15 08:43	67520	----a-w-	c:\windows\system32\drivers\ksecdd.sys
2013-09-25 01:57 . 2013-11-15 12:17	792576	----a-w-	c:\windows\system32\TSWorkspace.dll
2013-09-25 01:57 . 2013-11-15 08:43	99840	----a-w-	c:\windows\system32\sspicli.dll
2013-09-25 01:57 . 2013-11-15 08:43	22016	----a-w-	c:\windows\system32\secur32.dll
2013-09-25 01:57 . 2013-11-15 08:43	247808	----a-w-	c:\windows\system32\schannel.dll
2013-09-25 01:56 . 2013-11-15 08:43	220160	----a-w-	c:\windows\system32\ncrypt.dll
2013-09-25 01:56 . 2013-11-15 08:43	1038848	----a-w-	c:\windows\system32\lsasrv.dll
2013-09-25 00:49 . 2013-11-15 08:43	22016	----a-w-	c:\windows\system32\lsass.exe
2013-09-25 00:49 . 2013-11-15 08:42	15872	----a-w-	c:\windows\system32\sspisrv.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{da7f5ae1-3be3-43c0-8098-c1d183616e97}"= "c:\program files\WhiteSmoke_New_V6\prxtbWhit.dll" [2013-09-11 226592]
.
[HKEY_CLASSES_ROOT\clsid\{da7f5ae1-3be3-43c0-8098-c1d183616e97}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{da7f5ae1-3be3-43c0-8098-c1d183616e97}]
2013-09-11 12:05	226592	----a-w-	c:\program files\WhiteSmoke_New_V6\prxtbWhit.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{da7f5ae1-3be3-43c0-8098-c1d183616e97}"= "c:\program files\WhiteSmoke_New_V6\prxtbWhit.dll" [2013-09-11 226592]
.
[HKEY_CLASSES_ROOT\clsid\{da7f5ae1-3be3-43c0-8098-c1d183616e97}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{DA7F5AE1-3BE3-43C0-8098-C1D183616E97}"= "c:\program files\WhiteSmoke_New_V6\prxtbWhit.dll" [2013-09-11 226592]
.
[HKEY_CLASSES_ROOT\clsid\{da7f5ae1-3be3-43c0-8098-c1d183616e97}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-10-19 12:31	321752	----a-w-	c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Browser Infrastructure Helper"="c:\users\Klaus\AppData\Local\Smartbar\Application\SnapDo.exe" [2013-08-04 21024]
"TClockEx"="c:\program files\TClockEx\TCLOCKEX.EXE" [2000-03-09 89088]
"BackgroundContainer"="c:\users\Klaus\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll" [2013-10-14 319264]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LMgrVolOSD"="c:\program files\Launch Manager\OSD.exe" [2009-12-11 348960]
"Wbutton"="c:\program files\Launch Manager\Wbutton.exe" [2010-01-13 413696]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-12-11 1594664]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-03-02 8522272]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RtHDVBg.exe" [2010-03-02 678432]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-01-10 142616]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-10 177432]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-10 177944]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-10-19 3567800]
"AOLDialer"="c:\program files\Common Files\AOL\ACS\AOLDial.exe" [2004-02-25 496752]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-10-04 280576]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AOL 9.0 Tray-Symbol.lnk - c:\program files\AOL 9.0\aoltray.exe -check [2013-12-15 156784]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-09-05 14:03	958576	----a-w-	c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOLDialer]
2004-02-25 10:21	496752	----a-w-	c:\program files\Common Files\aol\ACS\AOLDial.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
2009-11-02 13:21	103720	------w-	c:\program files\CyberLink\Power2Go\CLMLSvc.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotkeyApp]
2009-12-14 10:25	200704	----a-w-	c:\program files\Launch Manager\HotkeyApp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2009-11-18 14:13	54576	----a-w-	c:\program files\HP\HP Software Update\hpwuschd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2013-05-01 01:59	421888	----a-w-	c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SAFEHOME HotKeys]
2007-03-21 16:59	25088	----a-w-	c:\program files\Steganos Safe Home\SteganosHotKeyService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-02 07:16	254336	----a-w-	c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wondershare Helper Compact.exe]
2012-02-28 12:42	1679360	----a-w-	c:\program files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-09-05 171680]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-11-26 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-07-31 171520]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [2013-08-21 12320]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-10-19 774392]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2013-12-08 403440]
S1 SLEE_15_DRIVER;Steganos Live Encryption Engine 15 [Driver];c:\windows\system32\drivers\Sleen15.sys [2007-02-21 12:33 80232]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2013-10-19 35656]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-10-19 70384]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-02-03 1155072]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-10-02 13336]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-10 2320920]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-10 132352]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-01-08 232448]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2009-12-22 65576]
S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys [2010-04-01 1009184]
S3 WisLMSvc;WisLMSvc;c:\program files\Launch Manager\WisLMSvc.exe [2009-10-22 118560]
S3 X10Hid;X10 Hid Device;c:\windows\System32\Drivers\x10hid.sys [2009-05-13 13720]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
HPService	REG_MULTI_SZ   	HPSLPSVC
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-09 13:41	1210320	----a-w-	c:\program files\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-12-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-04 07:34]
.
2013-12-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-10-04 17:22]
.
2013-12-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-10-04 17:22]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.t-online.de/
uSearchAssistant = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=7a2bf2b5-f8d0-c131-b2b3-1778d1fb91f4&searchtype=ds&q={searchTerms}&installDate=06/10/2013
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: {{0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4
TCP: DhcpNameServer = 192.168.178.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKU-Default-Run-SearchProtect - \SearchProtect\bin\cltmng.exe
MSConfigStartUp-SearchProtect - c:\users\Klaus\AppData\Roaming\SearchProtect\bin\cltmng.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-12-18  14:44:28
ComboFix-quarantined-files.txt  2013-12-18 13:44
.
Vor Suchlauf: 10 Verzeichnis(se), 348.960.604.160 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 348.617.736.192 Bytes frei
.
- - End Of File - - 33A91BB177BD5F3C45C52264B4EBC207
4624822E540EC83CD0819525C65846BA
         

perfekt

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo Schrauber,

habe der ersten Teil (Malware.... ) erledigt und wollte das Logfile posten, erhalte aber folgende Meldung:

Die folgenden Fehler traten bei der Verarbeitung auf:
Der Text, den Sie eingegeben haben, besteht aus 195942 Zeichen und ist damit zu lang. Bitte kürzen Sie den Text auf die maximale Länge von 120000 Zeichen.

Was soll ich nun machen?

Gruß guant4

Kann ich erst mal weitermachen mit AdwCleaner und Junkware Romo....?