| |
| |||||||
Log-Analyse und Auswertung: Win7: GData: Virenwächter nicht aktivierbar - Magic Partition Recovery will immer installiert werdenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
18.05.2014, 19:03
| #1 |
| |  Win7: GData: Virenwächter nicht aktivierbar - Magic Partition Recovery will immer installiert werden Vor 4 Tagen musste ich die Daten einer externen Festplatte retten. Dazu lud ich mir das Programm "East.Imperial.Soft.Magic.Partition.Recovery.v2.1" runter und installierte es. Mit diesem Programm konnte auch ein großer Teil der FP wieder hergestellt werden. Danach löschte ich es. Nun will sich dieses Programm allerdings immer wieder installieren und der VIRENWÄCHTER von GData Internet Security (Bild-Edition) lässt sich nicht mehr aktvieren. In der Datei GMER.txt ist win Prozess auffällig. Wenn ich diesen manuell abschalte, will sich das Partition Rcovery-Programm zwar nicht weiter installieren, der Virenwächter läasst sich aber auch nicht einschalten. Wie lösche ich diesen Mist???? Unter C:\Users\SnakeP\AppData\Local\Temp lädt sich immer wieder die Datei "Magic_Partition_Recovery.exe" herunter. Wer kann mir helfen???? |
|
18.05.2014, 19:12
| #2 |
| /// the machine /// TB-Ausbilder    | Win7: GData: Virenwächter nicht aktivierbar - Magic Partition Recovery will immer installiert werden Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
18.05.2014, 19:39
| #3 |
| | Win7: GData: Virenwächter nicht aktivierbar - Magic Partition Recovery will immer installiert werden (Teil 1)Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-05-18 19:23:57
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 FUJITSU_ rev.8919 232,89GB
Running: Gmer-19357.exe; Driver: C:\Users\DR4166~1.ING\AppData\Local\Temp\pxliipoc.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff80003bb2000 45 bytes [00, 00, 51, 02, 54, 68, 72, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575 fffff80003bb202f 16 bytes [00, 04, 00, 00, 00, 00, 00, ...]
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe[2864] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076ea1465 2 bytes [EA, 76]
.text C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe[2864] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076ea14bb 2 bytes [EA, 76]
.text ... * 2
.text C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\StarMoneyOnlineUpdate.exe[3160] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076ea1465 2 bytes [EA, 76]
.text C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\StarMoneyOnlineUpdate.exe[3160] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076ea14bb 2 bytes [EA, 76]
.text ... * 2
.text C:\{$1284-9213-2940-1289$}\comhost.exe[1528] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076ea1465 2 bytes [EA, 76]
.text C:\{$1284-9213-2940-1289$}\comhost.exe[1528] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076ea14bb 2 bytes [EA, 76]
.text ... * 2
.text C:\Program Files (x86)\Hewlett-Packard\IAM\bin\AsGHost.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076ea1465 2 bytes [EA, 76]
.text C:\Program Files (x86)\Hewlett-Packard\IAM\bin\AsGHost.exe[3412] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076ea14bb 2 bytes [EA, 76]
.text ... * 2
.text C:\Program Files (x86)\Kalenderchen\Kalenderchen.exe[3856] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076ea1465 2 bytes [EA, 76]
.text C:\Program Files (x86)\Kalenderchen\Kalenderchen.exe[3856] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076ea14bb 2 bytes [EA, 76]
.text ... * 2
.text C:\Program Files (x86)\Tools&More\GhostWriter\GhostWriter.exe[3264] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076ea1465 2 bytes [EA, 76]
.text C:\Program Files (x86)\Tools&More\GhostWriter\GhostWriter.exe[3264] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076ea14bb 2 bytes [EA, 76]
.text ... * 2
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[5808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076ea1465 2 bytes [EA, 76]
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[5808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076ea14bb 2 bytes [EA, 76]
.text ... * 2
.text C:\Program Files (x86)\Sun\StarOffice 9\program\soffice.bin[5748] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076ea1465 2 bytes [EA, 76]
.text C:\Program Files (x86)\Sun\StarOffice 9\program\soffice.bin[5748] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076ea14bb 2 bytes [EA, 76]
.text ... * 2
.text C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe[5996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076ea1465 2 bytes [EA, 76]
.text C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe[5996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076ea14bb 2 bytes [EA, 76]
.text ... * 2
.text C:\{$1284-9213-2940-1289$}\comhost.exe[5420] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076ea1465 2 bytes [EA, 76]
.text C:\{$1284-9213-2940-1289$}\comhost.exe[5420] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076ea14bb 2 bytes [EA, 76]
.text ... * 2
.text C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe[4932] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076ea1465 2 bytes [EA, 76]
.text C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe[4932] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076ea14bb 2 bytes [EA, 76]
.text ... * 2
---- Processes - GMER 2.1 ----
Process C:\{$1284-9213-2940-1289$}\comhost.exe (*** suspicious ***) @ C:\{$1284-9213-2940-1289$}\comhost.exe [1528](2014-05-16 00:26:20) 0000000000230000
Process C:\{$1284-9213-2940-1289$}\comhost.exe (*** suspicious ***) @ C:\{$1284-9213-2940-1289$}\comhost.exe [5420](2014-05-16 00:26:20) 0000000000230000
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00247eee2bd2
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00247eee2bd2@181eb02e9c11 0xD5 0xD7 0xD7 0x2C ...
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00247eee2bd2@001fe403b2de 0x58 0x62 0xF4 0x27 ...
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00247eee2bd2@b8763faa3d1b 0x7B 0x8F 0x35 0x85 ...
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00247eee2bd2@002248def056 0x19 0x71 0x44 0xAC ...
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00247eee2bd2 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00247eee2bd2@181eb02e9c11 0xD5 0xD7 0xD7 0x2C ...
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00247eee2bd2@001fe403b2de 0x58 0x62 0xF4 0x27 ...
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00247eee2bd2@b8763faa3d1b 0x7B 0x8F 0x35 0x85 ...
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00247eee2bd2@002248def056 0x19 0x71 0x44 0xAC ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{92C1845F-9629-E837-45B3-5CE2552BF71B}
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{92C1845F-9629-E837-45B3-5CE2552BF71B}@pahkcmcamhdadjfkagekbgbhjjogehob 0x61 0x62 0x6D 0x6F ...
---- EOF - GMER 2.1 ----
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by SnakeP at 2014-05-18 17:48:20
Running from C:\Users\SnakeP\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
16-CH Smart VS-IP Recorder (HKLM-x32\...\InstallShield_{989776D8-7665-45B8-AC39-EF04C3FF5983}) (Version: 2.00.0022 - Security Center GmbH & Co. KG)
16-CH Smart VS-IP Recorder (x32 Version: 2.00.0022 - Security Center GmbH & Co. KG) Hidden
64 Bit HP CIO Components Installer (Version: 3.2.1 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
ABUS IP-Installer (HKLM-x32\...\{0D70EC02-6A84-4F5F-8768-0BCAD45F5FB9}) (Version: 7.3.2332 - ABUS Security-Center GmbH & Co. KG)
ABUS VMS Express (x64) (HKLM\...\{429409CA-D8F1-48CF-B064-FD99D81068AB}) (Version: 7.2.2296 - ABUS Security-Center GmbH & Co. KG)
Acronis*True*Image*Home (HKLM-x32\...\{67ED38A3-4882-448B-B44D-3428AB00D7D5}) (Version: 13.0.6053 - Acronis)
ActivClient x64 (Version: 6.2 - ActivIdentity) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AMD APP SDK Runtime (Version: 2.5.793.1 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{D0A76081-22E4-5B3F-5394-1229DDF73585}) (Version: 3.0.851.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArchiCrypt Live Version 7.4.1.11024 (HKLM\...\ArchiCrypt Live 7_is1) (Version: 7.4.1.11024 - Softwareentwicklung Patric Remus - ArchiCrypt)
ArchiCrypt Shredder Version 6.9.3.5701 (HKLM-x32\...\ACRYSH6_is1) (Version: 6.9.3.5701 - Softwareentwicklung Remus - ArchiCrypt)
Audiograbber 1.83 SE (HKLM-x32\...\Audiograbber) (Version: 1.83 SE - Audiograbber)
AuthenTec Fingerprint System (Version: 8.0.202.0 - AuthenTec, Inc.) Hidden
Auto Gordian Knot 2.55 (HKLM-x32\...\AutoGK) (Version: 2.55 - len0x)
Avanquest update (HKLM-x32\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.29 - Avanquest Software)
Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5) (Version: 2.5.3.0 - )
AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version: - )
AVM FRITZ!Box AddOn (IE) (x64) (HKLM\...\{EC3671D7-98AC-4951-8FFD-5556BE066137}) (Version: 1.7.0 - AVM Berlin)
AVM FRITZ!fax für FRITZ!Box (HKLM-x32\...\FRITZ! 2.0) (Version: - AVM Berlin)
BiAdmin (HKLM-x32\...\BiAdmin) (Version: - )
Biet-O-Matic v2.14.8 (HKLM-x32\...\Biet-O-Matic v2.14.8) (Version: 2.14.8 - BOM Development Team)
Bigasoft AVCHD Converter 3.4.14.4261 (HKLM-x32\...\{49A06D30-A5DB-4f49-91C3-7CCC63B5E8EE}_is1) (Version: - Bigasoft Corporation)
BIOS Configuration for HP ProtectTools (HKLM-x32\...\{1960BE46-E85A-4933-B10A-6D8516585288}) (Version: 4.00 E1 - Hewlett-Packard)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.48.35 - Broadcom Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.0121.2309.41511 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0121.2309.41511 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0121.2309.41511 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0121.2309.41511 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Profiles Mobile (x32 Version: 2012.0121.2309.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0121.2308.41511 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0121.2309.41511 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version: - DownloadHelper)
Credential Manager for HP ProtectTools (x32 Version: 4.1.11.1505 - Hewlett-Packard Company) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Device Access Manager for HP ProtectTools (HKLM\...\{55B52830-024A-443E-AF61-61E1E71AFA1B}) (Version: 5.0.1.9 - Hewlett-Packard)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DisplayLink Core Software (HKLM\...\{039C24E4-07A1-4A1F-AAB0-78FD9B2DB0E0}) (Version: 5.6.31854.0 - DisplayLink Corp.)
DisplayLink Graphics (HKLM\...\{90B964AC-CF8E-4B69-935E-A1E620DCBAE2}) (Version: 5.6.31870.0 - DisplayLink Corp.)
Do Not Track Plus Add-on 1.0.5570.0305 (HKLM-x32\...\Do Not Track Plus Add-on_is1) (Version: 1.0.5570.0305 - Abine)
DreamBoxEdit -- The one and only settings editor for your Dreambox (HKLM-x32\...\DreamBoxEdit) (Version: - )
DreamStream E2 (HKLM-x32\...\845CCCCA-B77C-43EA-9A43-62DACEA4F902) (Version: 0.4.0 (Beta 14a) - Thomas "LazyT" Löwe)
Drive Encryption for HP ProtectTools (Version: 4.0.26 - Hewlett-Packard) Hidden
DVD Shrink 3.2 deutsch (DeCSS-frei) (HKLM-x32\...\DVD Shrink DE_is1) (Version: - DVD Shrink)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.1.13904 - Landesfinanzdirektion Thüringen)
EURACOM (HKLM-x32\...\EURACOM) (Version: - )
File Sanitizer For HP ProtectTools (HKLM-x32\...\{789C97CE-9E17-4126-BDF4-11FF458BF705}) (Version: 1.0.1.10 - Hewlett-Packard)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free Mp3 Wma Converter V 2.2 (HKLM-x32\...\Free Mp3 Wma Converter_is1) (Version: 2.2.0.0 - Koyote Soft)
FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version: Preview - Marek Jasinski)
FRITZ!Box-Fernzugang einrichten (HKLM-x32\...\{EFADD989-D9F2-49F6-A280-675951CC78D3}) (Version: 1.0.3 - AVM Berlin)
FRITZ!Fernzugang (HKLM\...\{5001E5BC-C9BF-4598-AB89-E7318C76C5F4}) (Version: 1.2.6 - AVM Berlin)
G Data InternetSecurity CBE (HKLM-x32\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.1.2 - G Data Software AG)
Ghostery IE Plugin (HKLM-x32\...\Ghostery IE Plugin_is1) (Version: 2.5.2.0 - Ghostery)
GhostWriter (HKLM-x32\...\{72146E2E-64C7-41E4-8052-5C423049CB7E}) (Version: 4.00.0100 - Wirth IT Design)
GhostWriter (HKLM-x32\...\{B53FAFF6-8504-4A0E-BBA6-BD62A757F205}) (Version: 4.01.0000 - Wirth IT Design)
Google Chrome (HKCU\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
High-Definition Video Playback 10 (x32 Version: 7.0.11400.29.0 - Nero AG) Hidden
HP 3D DriveGuard (HKLM\...\{991A4895-3346-4980-990F-A1041B73C6F7}) (Version: 4.0.5.1 - Hewlett-Packard Company)
HP Client Automation Agent Preload (HKLM-x32\...\{52B18ABC-AD5F-4C3C-B391-04F57B380449}) (Version: 7.5 - Hewlett-Packard)
HP Customer Experience Enhancements (x32 Version: 6.0.1.3 - Hewlett-Packard) Hidden
HP ESU for Microsoft Windows 7 (HKLM-x32\...\{605D2CE0-928A-44DF-8044-3FDA8610BD99}) (Version: 1.1.3.1 - Hewlett-Packard Company)
HP Integrated Module with Bluetooth wireless technology (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.0.9602 - Broadcom Corporation)
HP JavaCard for HP ProtectTools (x32 Version: 04.10.17.0001 - Hewlett-Packard) Hidden
HP ProtectTools Security Manager (x32 Version: 04.10.17.0001 - Hewlett-Packard) Hidden
HP ProtectTools Security Manager Suite (HKLM-x32\...\{75D7BB3A-9AB7-4ad1-AD5E-0059B90C624B}) (Version: 04.10.17.0001 - Hewlett-Packard)
HP Quick Launch Buttons (HKLM-x32\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.16.1 - Hewlett-Packard Company)
HP SoftPaq Download Manager (HKLM-x32\...\{E1CD7FC4-98F6-4A14-A8C8-A01D6F6F8FC3}) (Version: 3.0.9.0 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
HP USB Docking Video (HKLM\...\{AD73C813-335F-45E7-9772-A4583FDFD177}) (Version: 5.2.22372.0 - Hewlett-Packard)
HP Webcam (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.39017.0 - Sonix)
HP Webcam Application (HKLM-x32\...\{154E4F71-DFC0-4B31-8D99-F97615031B02}) (Version: 1.0.065.0612 - Chicony Electronics Co.,Ltd.)
HP Wireless Assistant (HKLM-x32\...\{4E432692-A736-4F77-AF77-F9078CF88D31}) (Version: 3.50.11.2 - Hewlett-Packard)
Image Resizer Powertoy Clone for Windows (64 bit) (HKLM\...\{80A620C1-B22C-4781-A351-B14B8A37BFE3}) (Version: 2.1 - Brice Lambson)
ImageMixer 3 SE Ver.4 Transfer Utility (HKLM-x32\...\{CAE4E520-4695-4A96-8661-B62FA5FB669E}) (Version: 3.03.005 - PIXELA)
ImageMixer 3 SE Ver.4 Video Tools (HKLM-x32\...\{AE6ECFF9-FD33-48A3-B4AC-89263CC393A8}) (Version: 3.03.008 - PIXELA)
Intel PROSet Wireless (Version: - ) Hidden
Intel(R) Management Engine Interface (HKLM\...\HECI) (Version: - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{B90E5EBE-DF18-44D5-9D18-689ADEE9DA6C}) (Version: 13.01.1000 - Intel Corporation)
Intel® Active-Management-Technologie (HKLM\...\MESOL) (Version: - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation)
IPP Port Monitor (HKLM-x32\...\IPP Port Monitor) (Version: - )
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 7 (HKLM-x32\...\{3248F0A8-6813-11D6-A77B-00B0D0160070}) (Version: 1.6.0.70 - Sun Microsystems, Inc.)
Joe (HKLM-x32\...\{06DE6520-D87A-4259-AD87-DF4E57B604B4}) (Version: 3.21.0000 - Wirth IT Design)
Joe (HKLM-x32\...\{0AD3DEBC-5321-457E-8B43-8F546940169B}) (Version: 4.00.0050 - Wirth IT Design)
Joe (HKLM-x32\...\{2F8C3308-46DC-4431-B1C0-5C579A5CADBE}) (Version: 3.08.0100 - Wirth IT Design)
Joe (HKLM-x32\...\{36A1E3D6-288A-4EEE-A081-30D9808B2BE3}) (Version: 3.05.0100 - Wirth New Media Sarl)
Joe (HKLM-x32\...\{3CA94C59-E51E-4823-A7E4-F441980D5813}) (Version: 3.08.0000 - Wirth IT Design)
Joe (HKLM-x32\...\{93D4B493-DDE2-4D2F-B99F-DBED7B5A8B8F}) (Version: 3.13.0000 - Wirth IT Design)
Joe (HKLM-x32\...\{DFE622F4-EFDE-4105-AD7B-A6452140BDD4}) (Version: 3.22.0000 - Wirth IT Design)
Joe (HKLM-x32\...\{ED6DBA1D-FCE4-4A4B-90DC-92BB4D2E80CE}) (Version: 3.11.0000 - Wirth IT Design)
Joe (HKLM-x32\...\{F8C986EA-13F8-4B39-91C3-A6B9A851CD34}) (Version: 4.01.0000 - Wirth IT Design)
Kalenderchen 5 (HKLM-x32\...\{11464943-4682-4F6B-A96D-D4E8C26DD111}_is1) (Version: - Daniel Manger)
LG ODD Auto Firmware Update (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 8.01.1209.01 - )
LightScribe System Software (HKLM-x32\...\{82EF29B1-9B60-4142-A155-0599216DD053}) (Version: 1.18.6.1 - LightScribe)
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.1.94 - LSI Corporation)
Macromedia Dreamweaver 8 (HKLM-x32\...\{44025BD7-AD10-4769-99AE-6378FD0303D6}) (Version: 8.0.1.2753 - Macromedia)
Macromedia Extension Manager (HKLM-x32\...\{0F022A2E-7022-497D-90A5-0F46746D8275}) (Version: 1.7.270 - Ihr Firmenname)
Macromedia Fireworks 8 (HKLM-x32\...\{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}) (Version: 8.0.0.777 - Macromedia)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook 2007 (HKLM-x32\...\OUTLOOK) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Outlook 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 (HKLM\...\{BBBE35B2-9349-3C48-BD3D-F574B17C7924}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
Mp3tag v2.55a (HKLM-x32\...\Mp3tag) (Version: v2.55a - Florian Heidenreich)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Music Transfer Utility Ver.1 (HKLM-x32\...\{9E520B22-546E-4AD3-8958-7D1EB8587AB1}) (Version: 1.00.005 - PIXELA)
MyMDb 3.6 (HKLM-x32\...\MyMDb_0) (Version: - )
Nero 10 Menu TemplatePack Basic (x32 Version: 10.0.10600.6.0 - Nero AG) Hidden
Nero 10 Movie ThemePack Basic (x32 Version: 10.0.10600.6.0 - Nero AG) Hidden
Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.11100.10.100 - Nero AG)
Nero Control Center 10 (x32 Version: 10.0.12000.1.4 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.13700.0.1 - Nero AG) Hidden
Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.0.10900.11.100 - Nero AG)
Nero Dolby Files 10 (x32 Version: 2.0.11000.0.10 - Nero AG) Hidden
Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.13200 - Nero AG)
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0017 - Nero AG)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
Outlook Backup Assistant 7 (Testversion) (HKLM-x32\...\812A5AC8-50DA-43D8-B36E-30CDD7FCCAA1_is1) (Version: 7.0 - Priotecs IT GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 0.9.9 - Frank Heindörfer, Philip Chinery)
pdfsam (HKCU\...\pdfsam) (Version: 2.2.1 - )
Personal ID (HKLM-x32\...\{F722209B-739E-40E4-ADB1-062BD032A0DB}) (Version: 1.8.5 - coolspot AG)
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Print Server Driver (HKLM-x32\...\Print Server Driver) (Version: - )
Privacy Manager for HP ProtectTools (HKLM-x32\...\{4E8E3D7B-B20D-4FD6-9E72-A84BAD1C35CC}) (Version: 1.0.1.599 - DigitalPersona, Inc.)
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
QLBCASL (x32 Version: 6.40.17.2 - Hewlett-Packard) Hidden
QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
QuickTime MPEG2 (HKLM-x32\...\{12EAE4F0-8770-451C-B4AD-76B569678973}) (Version: 7.60.92.0 - Apple Inc.)
ratDVD 0.78.1444 (HKLM-x32\...\ratDVD) (Version: 0.78.1444 - ratDVD)
RICOH Media Driver (HKLM-x32\...\{F5CC2EF8-20A4-4366-A681-3FE849E65809}) (Version: 2.10.00.04 - RICOH)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Sony Ericsson Update Engine (HKLM-x32\...\Update Engine) (Version: 2.12.11.22 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.188 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
SoundMAX (HKLM-x32\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.2.7255 - Analog Devices)
StarMoney (x32 Version: 2.0 - StarFinanz) Hidden
StarMoney (x32 Version: 3.0.1.31 - StarFinanz) Hidden
StarMoney (x32 Version: 4.0.0.203 - StarFinanz) Hidden
StarMoney 9.0 apoEdition (HKLM-x32\...\{5DC16EE7-E58D-4C83-9960-766CCFD4ACB9}) (Version: 9.0 - Star Finanz GmbH)
StarOffice 9 (HKLM-x32\...\{22F25C70-75E6-49AF-B762-AB7FB9FCA0DB}) (Version: 9.2.9483 - Sun Microsystems)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.24.0 - Synaptics Incorporated)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.20202 - TeamViewer)
Turbo Lister 2 (HKLM-x32\...\{8927E07C-97F7-4A54-88FB-D976F50DD46E}) (Version: 2.00.0000 - eBay Inc.)
Turbo Lister 2 (HKLM-x32\...\InstallShield_{69640730-B830-4C24-BB5C-222DA1260548}) (Version: 2.0.0 - eBay)
Turbo Lister 2 (x32 Version: 2.0.0 - eBay) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_OUTLOOK_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OUTLOOK_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2880505) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{2720451F-5D04-43EC-AB1F-26D948FD971B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2880505) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{2720451F-5D04-43EC-AB1F-26D948FD971B}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OUTLOOK_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
USBFast (HKLM-x32\...\{AED142A8-96EA-42DE-B212-60BFC98D6CC7}) (Version: 1.3.0.28 - Prolific Technology Inc.)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
VobSub v2.23 (Remove Only) (HKLM-x32\...\VobSub) (Version: - )
Windows 7 Default Setting (HKLM-x32\...\{AEACD7BE-7E12-490D-80B2-C7DEBDBD8915}) (Version: 1.0.0.8 - Hewlett-Packard)
Windows 7 Default Setting (HKLM-x32\...\{CC63C5BD-5096-4044-AC12-0FC6F1A6028D}) (Version: 1.0.1.7 - Hewlett-Packard Company)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
XSManager (HKLM-x32\...\XSManager) (Version: 3.0 - XSManager)
XviD MPEG4 Video Codec (remove only) (HKLM-x32\...\XviD MPEG4 Video Codec) (Version: - )
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
==================== Restore Points =========================
18-05-2014 07:28:25 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0373EC49-7D28-419C-BFB5-05B1BC2BE3A2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-12-12] (Hewlett-Packard Company)
Task: {1571FDD4-1441-4172-87C8-6445B975F376} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {29DFC8EF-D9FC-4766-803C-2DD523629738} - System32\Tasks\CCleanerSkipUAC => C:\Program Files (x86)\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {2CF42C83-07C5-4EE1-9E93-FDF28AAE8637} - System32\Tasks\Microsoft\Windows\MobilePC\DisplayLink TMM Control
Task: {33FDD674-8F55-4270-8D26-7FEEF5A11B81} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {3934BC34-B7D9-474B-9136-031E017E6BB7} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe
Task: {3CBB0343-8416-46A1-A3AA-9028F9EAFA8D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-26] (Google Inc.)
Task: {65A77E28-8B26-4F96-A967-40D530F814F0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {7046A181-B619-4B61-A5C2-C935165ECF84} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {A84DC5F4-0E42-4521-8992-A5E78D150688} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-26] (Google Inc.)
Task: {ADC9A81C-3368-4C4E-ADA6-5F44210810B2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001UA => C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-14] (Google Inc.)
Task: {BD1906F2-EAB6-4972-92E3-5B41B6B587B7} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe
Task: {C53730DD-4D90-4484-9D48-223C22AD9A17} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001Core => C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-14] (Google Inc.)
Task: {DB4A8EAC-B0EF-4BF0-90E6-C0BF4CD3B05C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001Core.job => C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001UA.job => C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2010-07-10 19:19 - 2006-02-23 12:35 - 00020480 _____ () C:\Windows\System32\FritzColorPort64.dll
2010-07-10 19:19 - 2006-02-22 11:39 - 00020480 _____ () C:\Windows\System32\FritzPort64.dll
2010-04-22 22:05 - 2005-03-12 00:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2010-01-19 16:27 - 2010-01-19 16:27 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2009-07-30 17:42 - 2009-07-30 17:42 - 00173344 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2014-03-09 19:52 - 2010-04-12 19:03 - 00329168 ____N () C:\Program Files (x86)\XSManager\WTGService.exe
2010-01-19 16:27 - 2010-01-19 16:27 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2014-05-16 02:26 - 2014-01-08 22:28 - 31010304 __RSH () C:\{$1284-9213-2940-1289$}\comhost.exe
2009-07-01 15:44 - 2009-07-01 15:44 - 00632888 _____ () C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
2011-12-26 13:55 - 2011-12-26 13:55 - 00098304 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-12-26 13:55 - 2011-12-26 13:55 - 00024576 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResources.dll
2012-01-22 00:07 - 2012-01-22 00:07 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2010-01-19 17:08 - 2010-01-19 17:08 - 00315664 _____ () C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
2014-05-18 17:23 - 2014-01-08 22:28 - 31010304 __RSH () C:\ProgramData\{$1284-9213-2940-1289$}\comhost.exe
2013-12-19 04:42 - 2013-12-19 04:42 - 00350840 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2014-05-18 17:42 - 2014-05-18 17:42 - 00050477 _____ () C:\Users\SnakeP\Downloads\Defogger.exe
2014-02-03 14:31 - 2011-01-13 10:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\PATCHW32.dll
2009-10-20 21:02 - 2010-04-20 21:36 - 00970752 _____ () C:\Program Files (x86)\Sun\StarOffice 9\program\libxml2.dll
2014-05-10 10:07 - 2014-05-10 10:08 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: CognizanceTS => rundll32.exe C:\PROGRA~3\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule
MSCONFIG\startupreg: File Sanitizer => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe
MSCONFIG\startupreg: Google Update => "C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: IAAnotif => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe
MSCONFIG\startupreg: LGODDFU => "C:\Program Files (x86)\lg_fwupdate\fwupdate.exe" blrun
MSCONFIG\startupreg: NCPluginUpdater => "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update
MSCONFIG\startupreg: Personal ID => C:\COOLSP~1\PERSON~1\PID.EXE
MSCONFIG\startupreg: picon => "C:\Program Files (x86)\Common Files\Intel\Privacy Icon\PrivacyIconClient.exe" -startup
MSCONFIG\startupreg: PTHOSTTR => C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
MSCONFIG\startupreg: QlbCtrl.exe => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SoundMAX => C:\Program Files (x86)\Analog Devices\SoundMAX\soundmax.exe /tray
MSCONFIG\startupreg: SoundMAXPnP => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
MSCONFIG\startupreg: StartCCC => "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SynTPEnh => %programFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: TrueImageMonitor.exe => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
MSCONFIG\startupreg: UpdateP2GoShortCut => "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
MSCONFIG\startupreg: UpdatePPShortCut => "C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerProducer" UpdateWithCreateOnce "Software\CyberLink\PowerProducer\5.0"
MSCONFIG\startupreg: UpdatePSTShortCut => "C:\Program Files (x86)\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Blu-ray Disc Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
MSCONFIG\startupreg: Windows Mobile Device Center => %windir%\WindowsMobile\wmdc.exe
MSCONFIG\startupreg: WinZip => C:\Users\SnakeP\AppData\Roaming\cgg.exe
MSCONFIG\startupreg: Xvid => C:\Program Files (x86)\XviD\CheckUpdate.exe
==================== Faulty Device Manager Devices =============
Name: HookCentre
Description: HookCentre
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: HookCentre
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: ACLN6Live
Description: ACLN6Live
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ACLN6Live
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (05/18/2014 03:32:57 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (05/18/2014 01:27:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GDSC.exe, Version: 25.0.14079.241, Zeitstempel: 0x532a59ff
Name des fehlerhaften Moduls: GDSC.exe, Version: 25.0.14079.241, Zeitstempel: 0x532a59ff
Ausnahmecode: 0x40000015
Fehleroffset: 0x000ffcf8
ID des fehlerhaften Prozesses: 0x1710
Startzeit der fehlerhaften Anwendung: 0xGDSC.exe0
Pfad der fehlerhaften Anwendung: GDSC.exe1
Pfad des fehlerhaften Moduls: GDSC.exe2
Berichtskennung: GDSC.exe3
Error: (05/18/2014 01:27:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AVKProxy.exe, Version: 1.5.14043.574, Zeitstempel: 0x52fb3224
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x014f5310
ID des fehlerhaften Prozesses: 0xa64
Startzeit der fehlerhaften Anwendung: 0xAVKProxy.exe0
Pfad der fehlerhaften Anwendung: AVKProxy.exe1
Pfad des fehlerhaften Moduls: AVKProxy.exe2
Berichtskennung: AVKProxy.exe3
Error: (05/18/2014 01:25:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AVKProxy.exe, Version: 1.5.14043.574, Zeitstempel: 0x52fb3224
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00fffeb0
ID des fehlerhaften Prozesses: 0x15d0
Startzeit der fehlerhaften Anwendung: 0xAVKProxy.exe0
Pfad der fehlerhaften Anwendung: AVKProxy.exe1
Pfad des fehlerhaften Moduls: AVKProxy.exe2
Berichtskennung: AVKProxy.exe3
Error: (05/18/2014 01:21:53 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (05/18/2014 01:21:53 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/18/2014 01:21:53 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/18/2014 01:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GDSC.exe, Version: 25.0.14079.241, Zeitstempel: 0x532a59ff
Name des fehlerhaften Moduls: GDSC.exe, Version: 25.0.14079.241, Zeitstempel: 0x532a59ff
Ausnahmecode: 0x40000015
Fehleroffset: 0x000ffcf8
ID des fehlerhaften Prozesses: 0x1918
Startzeit der fehlerhaften Anwendung: 0xGDSC.exe0
Pfad der fehlerhaften Anwendung: GDSC.exe1
Pfad des fehlerhaften Moduls: GDSC.exe2
Berichtskennung: GDSC.exe3
Error: (05/18/2014 01:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AVKProxy.exe, Version: 1.5.14043.574, Zeitstempel: 0x52fb3224
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x01219c30
ID des fehlerhaften Prozesses: 0x994
Startzeit der fehlerhaften Anwendung: 0xAVKProxy.exe0
Pfad der fehlerhaften Anwendung: AVKProxy.exe1
Pfad des fehlerhaften Moduls: AVKProxy.exe2
Berichtskennung: AVKProxy.exe3
Error: (05/18/2014 01:02:18 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
System errors:
=============
Error: (05/18/2014 05:33:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "G Data Scheduler" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/18/2014 05:26:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "G Data Scheduler" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/18/2014 05:22:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "G Data Scheduler" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/18/2014 05:22:26 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 2AVKService-Servive{AB3AD0CD-2BED-4A1A-85DA-1806C5FF49CD}
Error: (05/18/2014 05:19:39 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ACLN6Live
HookCentre
Error: (05/18/2014 05:18:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Security Center Surveillance System Launcher" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/18/2014 05:18:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "G Data Scheduler" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/18/2014 05:18:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MLPTDR_B" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/18/2014 05:18:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "G Data Dateisystem Wächter" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/18/2014 05:15:54 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {7429F543-2A60-4CB7-8BC5-F27EA898FB44}
Microsoft Office Sessions:
=========================
Error: (12/17/2011 11:43:40 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 17 seconds with 0 seconds of active time. This session ended with a crash.
Error: (07/10/2011 01:17:50 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 29 seconds with 0 seconds of active time. This session ended with a crash.
Error: (07/10/2011 01:16:56 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 6163 seconds with 360 seconds of active time. This session ended with a crash.
Error: (01/31/2011 07:55:40 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 236840 seconds with 2280 seconds of active time. This session ended with a crash.
Error: (01/04/2011 00:05:26 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6548.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 99 seconds with 60 seconds of active time. This session ended with a crash.
Error: (01/04/2011 11:58:01 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6548.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 48 seconds with 0 seconds of active time. This session ended with a crash.
Error: (01/04/2011 11:57:05 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6548.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 83767 seconds with 1740 seconds of active time. This session ended with a crash.
Error: (09/08/2010 03:19:12 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6541.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time. This session ended with a crash.
Error: (07/15/2010 01:36:21 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 44275 seconds with 1680 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2011-09-02 15:42:35.446
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2011-09-02 15:42:35.226
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2010-05-09 23:24:49.666
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2010-05-09 23:24:49.516
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 58%
Total physical RAM: 3996.27 MB
Available physical RAM: 1675.25 MB
Total Pagefile: 7990.71 MB
Available Pagefile: 4702.09 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (HP 8530p) (Fixed) (Total:221.87 GB) (Free:41.87 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (HP_RECOVERY) (Fixed) (Total:9 GB) (Free:1.99 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.99 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: D06DB09C)
Partition 1: (Active) - (Size=222 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=2 GB) - (Type=0C)
Partition 3: (Not Active) - (Size=9 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Geändert von cosinus (19.05.2014 um 01:21 Uhr) Grund: Zwei neue Threads mit diesem Thread zusammengeführt |
|
18.05.2014, 19:42
| #4 |
| | Win7: GData: Virenwächter nicht aktivierbar - Magic Partition Recovery will immer installiert werden (Teil 2) Teil 2 mit Logfiles, Text siehe Teil 1 Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by SnakeP (administrator) on HP-8530P on 18-05-2014 17:46:08
Running from C:\Users\SnakeP\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(McAfee, Inc.) C:\Program Files (x86)\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Softwareentwicklung Remus - ArchiCrypt) C:\Program Files (x86)\ArchiCrypt\ArchiCrypt Shredder 6\ArchiCryptInjector64.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\avmike.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(CANON INC.) C:\Program Files\Canon\DIAS\CnxDIAS.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\certsrv.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\AMT\LMS.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\StarMoneyOnlineUpdate.exe
(Bioscrypt Inc.) C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\asghost.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Intel Corporation) C:\Program Files (x86)\Common Files\Intel\Privacy Icon\UNS\UNS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\XSManager\WTGService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Daniel Manger Software) C:\Program Files (x86)\Kalenderchen\Kalenderchen.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Wirth IT Design) C:\Program Files (x86)\Tools&More\GhostWriter\GhostWriter.exe
(Google Inc.) C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\{$1284-9213-2940-1289$}\comhost.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Sun\StarOffice 9\program\soffice.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Sun\StarOffice 9\program\soffice.bin
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
() C:\ProgramData\{$1284-9213-2940-1289$}\comhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
() C:\Users\SnakeP\Downloads\Defogger.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1926928 2010-01-19] (Intel(R) Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2174760 2010-06-04] (Synaptics Incorporated)
HKLM\...\Run: [acevents] => C:\Program Files\ActivIdentity\ActivClient\acevents.exe [196648 2009-06-03] (ActivIdentity)
HKLM\...\Run: [accrdsub] => C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [483880 2009-06-03] (ActivIdentity)
HKLM-x32\...\Run: [WirelessAssistant] => C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [500792 2010-03-23] (Hewlett-Packard Company)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-01-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [16-CH Smart VS-IP Storage Application] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Windows COM Host] => C:\{$1284-9213-2940-1289$}\comhost.exe -rundll32 /SYSTEM32 "C:\Windows\System32\taskmgr.exe" "C:\Program Files\Microsoft\Windows"
HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1724728 2013-12-19] (G Data Software AG)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe,
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]
HKLM\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [DMS-Kalenderchen] => C:\Program Files (x86)\Kalenderchen\Kalenderchen.exe [3494912 2010-03-16] (Daniel Manger Software)
HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [ArchiCrypt Shredder 6] => [X]
HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [ArchiCrypt Scheduler 6] => [X]
HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [ArchiCrypt SecureDZone] => [X]
HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [GhostWriter] => C:\Program Files (x86)\Tools&More\GhostWriter\GhostWriter.exe [585728 2012-10-25] (Wirth IT Design)
HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Run: [Google Update] => C:\Users\SnakeP\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-14] (Google Inc.)
HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\CurrentVersion\Windows: [Load] C:\{$1284-9213-2940-1289$}\comhost.exe <===== ATTENTION
HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0xFF000000
HKU\S-1-5-21-2549505966-1208895196-3188896472-1001\...\MountPoints2: {70de29f7-4c1b-11df-a037-806e6f6e6963} - E:\zdata\cobi.exe
AppInit_DLLs: C:\PROGRA~3\HEWLET~1\IAM\bin\APSHOO~1.DLL => C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\APSHook64.dll [382208 2010-07-01] (Bioscrypt Inc.)
AppInit_DLLs-x32: C:\PROGRA~3\HEWLET~1\IAM\bin\APSHook.dll => C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\APSHook.dll [89856 2010-07-01] (Bioscrypt Inc.)
IFEO\avcenter.exe: [Debugger] nsjw.exe
IFEO\avguard.exe: [Debugger] nsjw.exe
IFEO\AVKService.exe: [Debugger] nsjw.exe
IFEO\AVKTray.exe: [Debugger] nsjw.exe
IFEO\AVKWCtlx64.exe: [Debugger] nsjw.exe
IFEO\avp.exe: [Debugger] nsjw.exe
IFEO\bdagent.exe: [Debugger] nsjw.exe
IFEO\ccuac.exe: [Debugger] nsjw.exe
IFEO\ComboFix.exe: [Debugger] nsjw.exe
IFEO\egui.exe: [Debugger] nsjw.exe
IFEO\GDFirewallTray.exe: [Debugger] nsjw.exe
IFEO\GDFwSvcx64.exe: [Debugger] nsjw.exe
IFEO\hijackthis.exe: [Debugger] nsjw.exe
IFEO\keyscrambler.exe: [Debugger] nsjw.exe
IFEO\Launcher_SECN.exe: [Debugger] nsjw.exe
IFEO\mbam.exe: [Debugger] nsjw.exe
IFEO\MpCmdRun.exe: [Debugger] nsjw.exe
IFEO\MSASCui.exe: [Debugger] nsjw.exe
IFEO\MsMpEng.exe: [Debugger] nsjw.exe
IFEO\msseces.exe: [Debugger] nsjw.exe
IFEO\spybotsd.exe: [Debugger] nsjw.exe
IFEO\wireshark.exe: [Debugger] nsjw.exe
IFEO\zlclient.exe: [Debugger] nsjw.exe
Lsa: [Notification Packages] scecli ASCredProv64
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
InternetURL: C:\Users\SnakeP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url -> C:\ProgramData\27218346293184.exe
Startup: C:\Users\SnakeP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StarOffice 9.lnk
ShortcutTarget: StarOffice 9.lnk -> C:\Program Files (x86)\Sun\StarOffice 9\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.n-tv.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3A894289C9DFCA01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKCU - (No Name) - {9d81af43-de53-48d0-a199-42c2a226b24c} - No File
SearchScopes: HKLM-x32 - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2206084
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2206084
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL =
SearchScopes: HKCU - {4376475D-DF29-44FE-8C68-62F8D78A3FCF} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}
SearchScopes: HKCU - {5FC1D470-415E-4942-A015-F0E512C13B97} URL = hxxp://suche.t-online.de/cgi-bin/swl?br=ie7&q={searchTerms}
SearchScopes: HKCU - {6495CFED-55DC-4A8C-BA8D-A120C7F9BD2C} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {70FF1299-E6A4-41A7-B125-37978D9B5676} URL = hxxp://de.wikipedia.org/wiki/Spezial:Search?search={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2206084
SearchScopes: HKCU - {CA00EDF1-478B-4FB1-A67D-0657D08FB7EB} URL = hxxp://www.amazon.de/gp/search?search-alias=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {CB9D5273-E71E-4D2E-AA0A-53735CD3BE84} URL = hxxp://suche.sueddeutsche.de/{searchTerms}
SearchScopes: HKCU - {E02227BC-7789-43CA-8338-D3191D6137C3} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}
SearchScopes: HKCU - {E0E06019-DA09-4CD6-BB4E-DECC5029BC53} URL = hxxp://suche.web.de/search/web/?su={searchTerms}&mc=searchplugin@suche@msie.suche@web&origin=searchplugin
SearchScopes: HKCU - {FB5D834C-3B7D-4913-B248-5A0AC194876E} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=FF&o=14594&src=kw&q={searchTerms}&locale=&apn_ptnrs=FV&apn_dtid=YYYYYYYYDE&apn_uid=dfd53380-f536-4831-a55d-5c4598c64524&apn_sauid=3598204E-7C4E-4DD9-9BD8-AE5611E37255
SearchScopes: HKCU - {FE14FF18-6E1B-491E-9AC6-2CE43682F85C} URL = hxxp://suche.web.de/search/web/?su={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: File Sanitizer for HP ProtectTools - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
BHO-x32: Do Not Track Plus - {6E45F3E8-2683-4824-A6BE-08108022FB36} - C:\Program Files (x86)\DoNotTrackPlus\ScriptHost.dll (Abine)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Flagfox - {BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24} - C:\Users\SnakeP\AppData\LocalLow\Flagfox\IE\Flagfox.dll (Dave G)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
DPF: HKLM-x32 {10000000-1000-1000-1000-100000000000} hxxp://cdn.betteradvertising.com/ghostery/addons/ie/2.4.2.0/ghostery.cab
DPF: HKLM-x32 {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} hxxp://192.168.178.202/RtspVaPgDec.cab
DPF: HKLM-x32 {B4CB8358-ABDB-47EE-BC2D-437B5DEBABCB} hxxp://192.168.178.204/AxViewer/AxMediaControl.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/html - {4459DC76-1FDE-4B16-BAD0-E4F8E7647555} - No File
Filter-x32: text/html - {4459DC76-1FDE-4B16-BAD0-E4F8E7647555} - C:\Program Files (x86)\GhosteryIEplugin\GhosteryMimeFilter.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{7585D27A-A707-4132-B228-F2EBE89236E0}: [NameServer]0.0.0.0
FireFox:
========
FF ProfilePath: C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default
FF user.js: detected! => C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\user.js
FF SearchEngineOrder.1: Ask.com
FF Homepage: hxxp://www.n-tv.de
FF NetworkProxy: "ftp", "94.53.6.30"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "http", "94.53.6.30"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "94.53.6.30"
FF NetworkProxy: "socks_port", 8080
FF NetworkProxy: "ssl", "94.53.6.30"
FF NetworkProxy: "ssl_port", 8080
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\SnakeP\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\SnakeP\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\searchplugins\metager2.xml
FF SearchPlugin: C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\searchplugins\safesearch.xml
FF SearchPlugin: C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\searchplugins\startpage-https---deutsch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DoNotTrackMe: Online Privacy Protection - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\donottrackplus@abine.com [2014-04-26]
FF Extension: FRITZ!Box AddOn - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\fb_add_on@avm.de [2013-05-09]
FF Extension: Flagfox - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\info@flagfox.net [2013-06-08]
FF Extension: DownloadHelper - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-26]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\adblockpopups@jessehakanen.net.xpi [2011-08-30]
FF Extension: Ghostery - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\firefox@ghostery.com.xpi [2013-08-03]
FF Extension: Stealthy - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\stealthyextension@gmail.com.xpi [2012-01-12]
FF Extension: Flagfox - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-03-08]
FF Extension: ShowIP - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\{3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}.xpi [2011-08-30]
FF Extension: NoScript - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-07-26]
FF Extension: Adblock Plus - C:\Users\SnakeP\AppData\Roaming\Mozilla\Firefox\Profiles\lef4qagh.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-03-27]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-05-10]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-05-10]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-05-10]
FF HKCU\...\Firefox\Extensions: [videosaver@videosaver.net] - C:\Program Files (x86)\VideoSaver\FF\
Chrome:
=======
CHR StartupUrls: "hxxp://ntv.de/"
CHR Plugin: (Shockwave Flash) - C:\Users\SnakeP\AppData\Local\Google\Chrome\Application\34.0.1847.137\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\SnakeP\AppData\Local\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\SnakeP\AppData\Local\Google\Chrome\Application\34.0.1847.137\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll No File
CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
CHR Extension: (Flagfox) - C:\Users\SnakeP\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid [2013-06-08]
CHR Extension: (Google Wallet) - C:\Users\SnakeP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR HKLM-x32\...\Chrome\Extension: [cfdfamfnacokbbbnmpdfmhonipnhmbid] - C:\Users\SnakeP\AppData\LocalLow\Flagfox\CHROME\Flagfox.crx [2013-04-28]
CHR HKLM-x32\...\Chrome\Extension: [ifjgookacnmjghjfagggbkpebmndnbib] - C:\Program Files (x86)\VideoSaver\Chrome.crx [2013-04-28]
CHR StartMenuInternet: Google Chrome - C:\Users\SnakeP\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) =================
R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [277032 2009-06-03] (ActivIdentity)
R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [111616 2008-07-15] (Andrea Electronics Corporation)
R2 ArchiCrypt Sichere Loeschzonen; C:\Program Files (x86)\ArchiCrypt\ArchiCrypt Shredder 6\ArchiCryptInjector64.exe [320600 2013-10-21] (Softwareentwicklung Remus - ArchiCrypt)
R2 ASBroker; C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll [192768 2010-07-01] (Bioscrypt Inc.)
R2 ASChannel; C:\Program Files (x86)\Hewlett-Packard\IAM\bin\AsChnl.dll [150272 2010-07-01] (Bioscrypt Inc.)
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)
S2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
S2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [2723400 2014-03-25] (G Data Software AG)
R2 avmike; C:\Program Files\FRITZ!Fernzugang\avmike.exe [336248 2012-02-02] (AVM Berlin)
R2 Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [6075816 2010-08-04] (CANON INC.)
R2 certsrv; C:\Program Files\FRITZ!Fernzugang\certsrv.exe [143736 2011-10-31] (AVM Berlin)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9663848 2011-04-10] (DisplayLink Corp.)
S3 FLCDLOCK; C:\Windows\SysWOW64\flcdlock.exe [362040 2009-10-05] (Hewlett-Packard Ltd)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)
S3 HP ProtectTools Service; C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [45056 2010-04-13] (Hewlett-Packard Development Company, L.P)
R2 HpFkCryptService; C:\Program Files (x86)\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [256616 2010-03-05] (McAfee, Inc.)
R2 LMS; C:\Program Files (x86)\Intel\AMT\LMS.exe [174616 2009-07-15] (Intel Corporation)
R3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [315664 2010-01-19] ()
R2 nwtsrv; C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe [189304 2011-10-31] (AVM Berlin)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\StarMoneyOnlineUpdate.exe [663184 2014-01-27] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 UNS; C:\Program Files (x86)\Common Files\Intel\Privacy Icon\UNS\UNS.exe [2058776 2009-07-15] (Intel Corporation)
R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [329168 2010-04-12] ()
S2 SecurityCenter_ST3402; C:\Program Files (x86)\Security Center\Smart VS-IP Surveillance System\Launcher_SECN.exe [X]
==================== Drivers (Whitelisted) ====================
R1 ACLE7Live; C:\Windows\system32\Drivers\ACLE1864.sys [109328 2014-02-07] (Softwareentwicklung Remus - ArchiCrypt - )
R1 ACLiveFlt; C:\Windows\System32\DRIVERS\ACLiveFlt.sys [24848 2014-01-29] (ArchiCrypt - Softwareentwicklung Remus)
R1 ACLiveFlt; C:\Windows\SysWOW64\DRIVERS\ACLiveFlt.sys [24848 2014-01-29] (ArchiCrypt - Softwareentwicklung Remus)
S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [117888 2014-03-09] (Mobile Connector)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [40760 2009-09-08] (Hewlett-Packard Development Company L.P.)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [57344 2014-05-18] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [135168 2014-05-18] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [68608 2014-05-18] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64000 2014-05-18] (G Data Software AG)
R3 GearAspiWDM; C:\Windows\SysWOW64\drivers\GEARAspiWDM.sys [15664 2010-05-10] (GEAR Software Inc.)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-05-18] (G Data Software)
R3 HBtnKey; C:\Windows\System32\DRIVERS\cpqbttn.sys [19000 2010-02-25] (Hewlett-Packard Company)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65024 2014-05-18] (G Data Software AG)
S2 MLPTDR_B; C:\Windows\SysWOW64\MLPTDR_B.SYS [19872 2002-07-23] (Minolta Co., Ltd.)
S3 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
R3 NWIM; C:\Windows\System32\DRIVERS\avmnwim.sys [412024 2011-07-05] (AVM Berlin)
S3 RICOH SmartCard Reader; C:\Windows\System32\DRIVERS\rismcx64.sys [59008 2009-07-20] (RICOH Company, Ltd.)
R3 rismcx64; C:\Windows\System32\DRIVERS\rismcx64.sys [59008 2009-07-20] (RICOH Company, Ltd.)
R1 RsvLock; C:\Windows\System32\Drivers\RsvLock.sys [14952 2010-03-05] (SafeBoot International)
S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation)
S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation)
S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation)
S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation)
S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [34344 2008-05-16] (MCCI Corporation)
S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation)
S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation)
R0 SafeBoot; C:\Windows\System32\Drivers\SafeBoot.sys [55912 2010-03-05] ()
R0 SbAlg; C:\Windows\System32\Drivers\SbAlg.sys [60160 2007-07-16] (SafeBoot N.V.)
R0 SbFsLock; C:\Windows\System32\Drivers\SbFsLock.sys [15464 2010-03-05] (SafeBoot International)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1875624 2008-10-09] ()
R0 tdrpman258; C:\Windows\System32\DRIVERS\tdrpm258.sys [1477728 2010-04-23] (Acronis)
S1 ACLN6Live; \??\C:\Windows\system32\Drivers\ACLE1764.sys [X]
S3 CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfoX64.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-18 17:46 - 2014-05-18 17:47 - 00033434 _____ () C:\Users\SnakeP\Downloads\FRST.txt
2014-05-18 17:44 - 2014-05-18 17:46 - 00000000 ____D () C:\FRST
2014-05-18 17:44 - 2014-05-18 17:44 - 02067456 _____ (Farbar) C:\Users\SnakeP\Downloads\FRST64.exe
2014-05-18 17:43 - 2014-05-18 17:43 - 00000490 _____ () C:\Users\SnakeP\Downloads\defogger_disable.log
2014-05-18 17:43 - 2014-05-18 17:43 - 00000000 _____ () C:\Users\SnakeP\defogger_reenable
2014-05-18 17:42 - 2014-05-18 17:42 - 00050477 _____ () C:\Users\SnakeP\Downloads\Defogger.exe
2014-05-18 17:38 - 2014-05-18 17:38 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-18 17:36 - 2014-05-18 17:36 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\SnakeP\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-18 17:26 - 2014-05-18 17:26 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2014-05-18 17:26 - 2014-05-18 17:26 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2014-05-18 17:23 - 2014-05-18 17:23 - 00000000 ___HD () C:\ProgramData\{$1284-9213-2940-1289$}
2014-05-18 17:20 - 2014-05-18 17:20 - 00068608 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys
2014-05-18 17:20 - 2014-05-18 17:20 - 00065024 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2014-05-18 17:16 - 2014-05-18 17:16 - 00135168 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2014-05-18 17:16 - 2014-05-18 17:16 - 00057344 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2014-05-18 17:15 - 2014-05-18 17:15 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2014-05-18 17:15 - 2014-05-18 17:15 - 00002022 _____ () C:\Users\Public\Desktop\G Data InternetSecurity CBE.lnk
2014-05-18 17:15 - 2014-05-18 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data InternetSecurity CBE
2014-05-18 16:37 - 2014-05-18 16:37 - 00411144 _____ () C:\Users\SnakeP\Downloads\AVCleaner.exe
2014-05-18 16:25 - 2014-05-18 16:26 - 63320784 _____ (Microsoft Corporation) C:\Users\SnakeP\Downloads\IE11-Windows6.1-x64-de-de.exe
2014-05-18 16:12 - 2014-05-18 16:12 - 00961360 _____ (Chip Digital GmbH) C:\Users\SnakeP\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-05-18 15:03 - 2014-05-18 17:13 - 00003922 _____ () C:\Windows\DPINST.LOG
2014-05-18 14:52 - 2014-05-18 16:59 - 00176232 _____ () C:\Windows\PFRO.log
2014-05-18 13:44 - 2014-05-18 17:18 - 00000392 _____ () C:\Windows\setupact.log
2014-05-18 13:44 - 2014-05-18 13:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-15 21:12 - 2013-03-20 23:31 - 51796532 _____ () C:\Users\SnakeP\Downloads\Modern Talking - You're My Heart, Your're My Soul (From Top Pop 1985).mkv
2014-05-15 21:06 - 2014-04-06 18:01 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - Vulture culture (1984)
2014-05-15 21:06 - 2014-04-06 18:01 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - The sicilian defense (1979)
2014-05-15 21:05 - 2014-04-06 17:59 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - Stereotomy (1985)
2014-05-15 21:05 - 2014-04-06 17:59 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - Gaudi (1987)
2014-05-15 21:05 - 2014-04-06 17:59 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - Eye in the sky (1982)
2014-05-15 21:05 - 2014-04-06 17:58 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - Ammonia Avenue (1984)
2014-05-15 21:04 - 2014-04-06 18:01 - 00000000 ____D () C:\Users\SnakeP\Downloads\Alan Parsons - The turn of a friendly card (1980)
2014-05-15 20:47 - 2012-06-12 20:01 - 00000000 ___SD () C:\Users\SnakeP\Downloads\Maxi Hits der 80er (Vol.3)
2014-05-15 20:45 - 2014-05-15 20:45 - 00000000 ____D () C:\Users\SnakeP\Downloads\Gerhard Polt - Und wer zahlts
2014-05-15 20:43 - 2013-10-09 13:31 - 00000000 ____D () C:\Users\SnakeP\Downloads\Jules Verne - Der Leuchtturm am Ende der Welt (2013)
2014-05-15 20:40 - 2014-02-17 19:54 - 00000000 ____D () C:\Users\SnakeP\Downloads\Gruselkabinett - Die obere Koje
2014-05-15 20:40 - 2010-01-16 19:39 - 00000000 ____D () C:\Users\SnakeP\Downloads\Franz Josef Degenhardt - Von damals und von dieser Zeit
2014-05-15 15:07 - 2014-05-18 13:27 - 00000000 _____ () C:\Users\SnakeP\AppData\Roaming\msconfig.ini
2014-05-15 15:07 - 2014-05-15 15:07 - 00000000 _____ () C:\ProgramData\27218346293184.exe
2014-05-15 15:04 - 2014-05-18 13:17 - 00000000 ___HD () C:\{$1284-9213-2940-1289$}
2014-05-15 09:01 - 2014-05-15 09:01 - 00629584 _____ (Chip Digital GmbH) C:\Users\SnakeP\Downloads\Recuva - CHIP-Downloader.exe
2014-05-15 04:24 - 2014-05-15 04:26 - 00000000 ____D () C:\Windows\rescache
2014-05-15 03:14 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 03:14 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 03:14 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 03:14 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 03:14 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 03:14 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 13:30 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 13:30 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 13:30 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 13:30 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 13:29 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 13:29 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 13:29 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 13:29 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 13:29 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 13:29 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 13:29 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 13:29 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 13:29 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 13:29 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 13:29 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 13:29 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 13:29 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 13:29 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 13:29 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 13:29 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 13:29 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 13:29 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 13:29 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 13:29 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 13:29 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 13:29 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 13:29 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 13:29 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 13:29 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 13:29 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 13:29 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 13:29 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 13:29 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 13:29 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-13 21:23 - 2014-05-13 21:24 - 04985016 _____ (EaseUS ) C:\Users\SnakeP\Downloads\drw_free.exe
2014-05-13 21:08 - 2014-05-18 13:08 - 00000000 ____D () C:\Program Files (x86)\Convar
2014-05-13 21:08 - 2014-05-13 21:08 - 03462033 _____ () C:\Users\SnakeP\Downloads\pci_filerecovery.exe
2014-05-11 13:21 - 2014-05-11 13:21 - 08568832 _____ () C:\Users\SnakeP\Downloads\MEDUMAT_Transport_simulation_V_5.03_04.exe
2014-05-11 10:38 - 2014-05-11 10:40 - 00000000 ____D () C:\Users\SnakeP\Downloads\Eurovision Song Contest Copenhagen 2014
2014-05-10 10:07 - 2014-05-10 10:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-06 17:56 - 2014-05-15 03:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-04 22:05 - 2014-05-04 22:05 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\G Data
2014-05-04 22:04 - 2014-05-04 22:04 - 00000000 ____D () C:\Users\SnakeP\AppData\Local\G DATA
2014-05-04 21:56 - 2014-05-18 17:15 - 00002337 _____ () C:\Users\SnakeP\AppData\Roaming\gdscan.log
2014-05-04 21:56 - 2014-05-04 21:56 - 00000000 _____ () C:\Users\SnakeP\AppData\Roaming\gdfw.log
2014-05-04 14:00 - 2014-05-04 14:21 - 00000000 ____D () C:\Users\SnakeP\Downloads\Die drei Fragezeichen Kids - 39 - Der verrückte Erfinder
2014-05-04 14:00 - 2014-05-04 14:20 - 00000000 ____D () C:\Users\SnakeP\Downloads\Die drei Fragezeichen - 186 - GPS-Gangster
2014-05-03 20:56 - 2014-05-03 20:57 - 00022728 _____ () C:\Users\SnakeP\Documents\UStVA2014_I._Quartal_Dr._Ingo_Blank_2014.elfo
2014-05-03 16:22 - 2014-05-03 16:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-03 16:22 - 2014-05-03 16:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-03 16:22 - 2014-05-03 16:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-03 16:22 - 2014-05-03 16:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-02 13:50 - 2014-05-02 13:50 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\XMedia Recode
2014-05-02 13:44 - 2014-05-02 13:44 - 07399496 _____ (XMedia Recode ) C:\Users\SnakeP\Downloads\XMediaRecode3186_setup.exe
2014-04-30 17:09 - 2014-05-11 19:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak
2014-04-30 17:00 - 2011-02-19 13:40 - 00000000 ____D () C:\Users\SnakeP\Downloads\Supertramp - Songs einer Supergruppe
2014-04-30 16:53 - 2012-06-10 07:23 - 00000000 ___SD () C:\Users\SnakeP\Downloads\Maxi Mixes from the 80´s
2014-04-28 14:06 - 2013-11-07 15:11 - 00000000 ____D () C:\Users\SnakeP\Downloads\Adel Tawil - Lieder
2014-04-27 12:43 - 2014-04-27 12:43 - 00002120 _____ () C:\{339E332C-797C-4B83-B0F8-CF27B1AEC0F5}
2014-04-22 14:06 - 2009-11-08 14:21 - 00000000 ____D () C:\Users\SnakeP\Downloads\Welcome to Bavaria
2014-04-22 14:05 - 2010-03-20 20:14 - 00000000 ____D () C:\Users\SnakeP\Downloads\Mixed Emotions - Sweetheart Darlin' My Deer (Extended Version) 1C K060 1472806
2014-04-22 13:54 - 2014-04-22 13:56 - 109176327 _____ () C:\Users\SnakeP\Downloads\JOSICL18.zip
2014-04-21 09:08 - 2014-04-21 09:08 - 00000000 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
==================== One Month Modified Files and Folders =======
2014-05-18 17:47 - 2014-05-18 17:46 - 00033434 _____ () C:\Users\SnakeP\Downloads\FRST.txt
2014-05-18 17:46 - 2014-05-18 17:44 - 00000000 ____D () C:\FRST
2014-05-18 17:44 - 2014-05-18 17:44 - 02067456 _____ (Farbar) C:\Users\SnakeP\Downloads\FRST64.exe
2014-05-18 17:43 - 2014-05-18 17:43 - 00000490 _____ () C:\Users\SnakeP\Downloads\defogger_disable.log
2014-05-18 17:43 - 2014-05-18 17:43 - 00000000 _____ () C:\Users\SnakeP\defogger_reenable
2014-05-18 17:43 - 2010-04-19 14:57 - 00000000 ____D () C:\Users\SnakeP
2014-05-18 17:42 - 2014-05-18 17:42 - 00050477 _____ () C:\Users\SnakeP\Downloads\Defogger.exe
2014-05-18 17:38 - 2014-05-18 17:38 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-18 17:36 - 2014-05-18 17:36 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\SnakeP\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-18 17:28 - 2009-07-14 06:45 - 00014864 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-18 17:28 - 2009-07-14 06:45 - 00014864 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-18 17:26 - 2014-05-18 17:26 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2014-05-18 17:26 - 2014-05-18 17:26 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2014-05-18 17:25 - 2010-04-19 18:24 - 01562677 _____ () C:\Windows\WindowsUpdate.log
2014-05-18 17:23 - 2014-05-18 17:23 - 00000000 ___HD () C:\ProgramData\{$1284-9213-2940-1289$}
2014-05-18 17:20 - 2014-05-18 17:20 - 00068608 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys
2014-05-18 17:20 - 2014-05-18 17:20 - 00065024 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2014-05-18 17:20 - 2010-04-19 23:57 - 00000000 ____D () C:\ProgramData\G DATA
2014-05-18 17:18 - 2014-05-18 13:44 - 00000392 _____ () C:\Windows\setupact.log
2014-05-18 17:18 - 2011-03-01 21:28 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-05-18 17:16 - 2014-05-18 17:16 - 00135168 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2014-05-18 17:16 - 2014-05-18 17:16 - 00057344 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2014-05-18 17:15 - 2014-05-18 17:15 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2014-05-18 17:15 - 2014-05-18 17:15 - 00002022 _____ () C:\Users\Public\Desktop\G Data InternetSecurity CBE.lnk
2014-05-18 17:15 - 2014-05-18 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data InternetSecurity CBE
2014-05-18 17:15 - 2014-05-04 21:56 - 00002337 _____ () C:\Users\SnakeP\AppData\Roaming\gdscan.log
2014-05-18 17:13 - 2014-05-18 15:03 - 00003922 _____ () C:\Windows\DPINST.LOG
2014-05-18 17:13 - 2010-04-19 23:56 - 00000000 ____D () C:\Program Files (x86)\G Data
2014-05-18 16:59 - 2014-05-18 14:52 - 00176232 _____ () C:\Windows\PFRO.log
2014-05-18 16:37 - 2014-05-18 16:37 - 00411144 _____ () C:\Users\SnakeP\Downloads\AVCleaner.exe
2014-05-18 16:26 - 2014-05-18 16:25 - 63320784 _____ (Microsoft Corporation) C:\Users\SnakeP\Downloads\IE11-Windows6.1-x64-de-de.exe
2014-05-18 16:12 - 2014-05-18 16:12 - 00961360 _____ (Chip Digital GmbH) C:\Users\SnakeP\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-05-18 15:34 - 2010-04-26 17:40 - 00000000 ____D () C:\Users\SnakeP\AppData\Local\QuickPar
2014-05-18 15:34 - 2010-04-23 19:15 - 00000000 ____D () C:\Users\SnakeP\Documents\UseNeXT
2014-05-18 14:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup
2014-05-18 14:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-05-18 14:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-05-18 14:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2014-05-18 13:44 - 2014-05-18 13:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-18 13:27 - 2014-05-15 15:07 - 00000000 _____ () C:\Users\SnakeP\AppData\Roaming\msconfig.ini
2014-05-18 13:27 - 2013-05-14 20:35 - 00000000 ____D () C:\Users\SnakeP\AppData\Local\CrashDumps
2014-05-18 13:22 - 2009-07-14 19:58 - 54152102 _____ () C:\Windows\system32\perfh007.dat
2014-05-18 13:21 - 2009-07-14 19:58 - 17784446 _____ () C:\Windows\system32\perfc007.dat
2014-05-18 13:21 - 2009-07-14 07:13 - 00006670 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-18 13:20 - 2010-04-19 14:57 - 00000000 ___RD () C:\Users\SnakeP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-18 13:17 - 2014-05-15 15:04 - 00000000 ___HD () C:\{$1284-9213-2940-1289$}
2014-05-18 13:08 - 2014-05-13 21:08 - 00000000 ____D () C:\Program Files (x86)\Convar
2014-05-18 09:28 - 2013-05-28 10:11 - 00000000 ____D () C:\Program Files (x86)\StarMoney 9.0 apoEdition
2014-05-16 17:52 - 2012-03-31 10:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-16 17:29 - 2012-10-02 08:12 - 00001156 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001UA.job
2014-05-16 14:37 - 2010-12-15 16:11 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\vlc
2014-05-16 13:40 - 2012-10-02 08:12 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001Core.job
2014-05-16 02:25 - 2010-04-23 19:15 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\UseNeXT
2014-05-16 02:17 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-15 20:45 - 2014-05-15 20:45 - 00000000 ____D () C:\Users\SnakeP\Downloads\Gerhard Polt - Und wer zahlts
2014-05-15 15:07 - 2014-05-15 15:07 - 00000000 _____ () C:\ProgramData\27218346293184.exe
2014-05-15 12:29 - 2012-03-23 12:16 - 00000000 ____D () C:\Users\SnakeP\AppData\Local\DoNotTrackPlus
2014-05-15 09:01 - 2014-05-15 09:01 - 00629584 _____ (Chip Digital GmbH) C:\Users\SnakeP\Downloads\Recuva - CHIP-Downloader.exe
2014-05-15 08:21 - 2013-04-13 18:51 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-15 07:59 - 2010-07-07 12:20 - 00000000 ___RD () C:\Users\SnakeP\Virtual Machines
2014-05-15 07:59 - 2010-04-19 14:57 - 00000000 ___RD () C:\Users\SnakeP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 04:26 - 2014-05-15 04:24 - 00000000 ____D () C:\Windows\rescache
2014-05-15 03:31 - 2014-05-06 17:56 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 03:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-15 03:14 - 2010-04-19 20:13 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 03:12 - 2013-07-12 18:03 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 19:54 - 2014-02-07 15:25 - 1048576000 _____ () C:\Users\SnakeP\Documents\Diverses.acyl
2014-05-14 19:54 - 2010-04-19 23:25 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\ACLive5
2014-05-14 09:53 - 2012-03-31 10:12 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 09:53 - 2012-03-31 10:11 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 09:53 - 2011-06-01 13:06 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-13 21:24 - 2014-05-13 21:23 - 04985016 _____ (EaseUS ) C:\Users\SnakeP\Downloads\drw_free.exe
2014-05-13 21:08 - 2014-05-13 21:08 - 03462033 _____ () C:\Users\SnakeP\Downloads\pci_filerecovery.exe
2014-05-11 20:53 - 2012-05-04 15:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-11 19:37 - 2014-04-30 17:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak
2014-05-11 14:21 - 2011-03-29 23:27 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\BOM
2014-05-11 13:21 - 2014-05-11 13:21 - 08568832 _____ () C:\Users\SnakeP\Downloads\MEDUMAT_Transport_simulation_V_5.03_04.exe
2014-05-11 10:40 - 2014-05-11 10:38 - 00000000 ____D () C:\Users\SnakeP\Downloads\Eurovision Song Contest Copenhagen 2014
2014-05-10 10:08 - 2014-05-10 10:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 21:45 - 2011-04-27 10:22 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-09 21:45 - 2011-04-27 10:22 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-09 13:24 - 2012-10-02 08:12 - 00004148 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001UA
2014-05-09 13:24 - 2012-10-02 08:12 - 00003752 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2549505966-1208895196-3188896472-1001Core
2014-05-09 08:14 - 2014-05-14 13:30 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:12 - 2011-04-27 10:22 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-09 08:12 - 2011-04-27 10:22 - 00003856 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-09 08:11 - 2014-05-14 13:30 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-07 22:36 - 2010-04-24 15:09 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\dvdcss
2014-05-06 06:40 - 2014-05-15 03:14 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 03:14 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 03:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 03:14 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-04 22:05 - 2014-05-04 22:05 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\G Data
2014-05-04 22:04 - 2014-05-04 22:04 - 00000000 ____D () C:\Users\SnakeP\AppData\Local\G DATA
2014-05-04 21:56 - 2014-05-04 21:56 - 00000000 _____ () C:\Users\SnakeP\AppData\Roaming\gdfw.log
2014-05-04 21:46 - 2013-05-12 22:32 - 00000000 ____D () C:\ProgramData\Norton
2014-05-04 17:12 - 2010-04-19 19:27 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-04 14:21 - 2014-05-04 14:00 - 00000000 ____D () C:\Users\SnakeP\Downloads\Die drei Fragezeichen Kids - 39 - Der verrückte Erfinder
2014-05-04 14:20 - 2014-05-04 14:00 - 00000000 ____D () C:\Users\SnakeP\Downloads\Die drei Fragezeichen - 186 - GPS-Gangster
2014-05-03 20:57 - 2014-05-03 20:56 - 00022728 _____ () C:\Users\SnakeP\Documents\UStVA2014_I._Quartal_Dr._Ingo_Blank_2014.elfo
2014-05-03 20:41 - 2011-01-22 09:50 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-05-03 16:23 - 2013-10-21 12:17 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-03 16:21 - 2014-05-03 16:22 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-03 16:21 - 2014-05-03 16:22 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-03 16:21 - 2014-05-03 16:22 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-03 16:21 - 2014-05-03 16:22 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-02 13:50 - 2014-05-02 13:50 - 00000000 ____D () C:\Users\SnakeP\AppData\Roaming\XMedia Recode
2014-05-02 13:44 - 2014-05-02 13:44 - 07399496 _____ (XMedia Recode ) C:\Users\SnakeP\Downloads\XMediaRecode3186_setup.exe
2014-04-27 12:43 - 2014-04-27 12:43 - 00002120 _____ () C:\{339E332C-797C-4B83-B0F8-CF27B1AEC0F5}
2014-04-26 14:09 - 2013-03-14 09:05 - 00007605 _____ () C:\Users\SnakeP\AppData\Local\Resmon.ResmonCfg
2014-04-22 13:56 - 2014-04-22 13:54 - 109176327 _____ () C:\Users\SnakeP\Downloads\JOSICL18.zip
2014-04-21 20:14 - 2010-04-26 21:33 - 00000000 ____D () C:\Users\SnakeP\Downloads\Cover
2014-04-21 09:08 - 2014-04-21 09:08 - 00000000 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-21 09:08 - 2010-04-19 20:55 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-20 23:04 - 2013-01-15 14:58 - 00000000 ____D () C:\Program Files (x86)\MyMDb
Files to move or delete:
====================
C:\Users\SnakeP\AppData\Roaming\eSReg.ini
C:\Users\SnakeP\AppData\Roaming\msconfig.ini
C:\ProgramData\27218346293184.exe
Some content of TEMP:
====================
C:\Users\SnakeP\AppData\Local\Temp\Magic_Partition_Recovery.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2014-05-14 13:29] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-09 00:31
==================== End Of Log ============================
Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:43 on 18/05/2014 (SnakeP)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
|
|
19.05.2014, 18:01
| #5 |
| /// the machine /// TB-Ausbilder | Win7: GData: Virenwächter nicht aktivierbar - Magic Partition Recovery will immer installiert werden hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
19.05.2014, 19:04
| #6 |
| | Win7: GData: Virenwächter nicht aktivierbar - Magic Partition Recovery will immer installiert werden Hallo! Habe Combofix heruntergeladen auf den Desktop. Lässt sich aber nicht installieren. Die Meldung lautet: "Combofix konnte nicht gefunden werden". Mit einem anderen Programm, das Malware sucht, hatte ich das gleiche Problem. Gruß Ingo |
|
20.05.2014, 12:22
| #7 |
| /// the machine /// TB-Ausbilder | Win7: GData: Virenwächter nicht aktivierbar - Magic Partition Recovery will immer installiert werden hi, Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
wenn das auch nit geht dann von aussen: Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8) Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Win7: GData: Virenwächter nicht aktivierbar - Magic Partition Recovery will immer installiert werden |
| administrator, adobe, adobe flash player, appdata, browser, converter, datei, daten, desktop, detected, ebay, email, error, excel, explorer, fehler, festplatte, firefox, flash player, ftp, gdata, gdataantivirenkit, google, help, helper, hijack, home, homepage, installieren, installiert, installierte, interne, internet, lädt, magic, malware / spyware, microsoft, mozilla, mp3, nicht mehr, partition, platte, programm, prozess, recovery, registry, rundll, runter, scan, security, server, services.exe, software, suche, system, temp, usb, virenwächter, win, win7, windows, winlogon, wma, wächter |
Linear-Darstellung
