Hallo mein Name ist Daniel,
ich hab ein problem mit meinem Laptop und zwar hab ich das gefühl da läuft etwas nicht richtig. Vielleicht ist ja jemand so nett und schaut sich mal meine Logs an die ich schon gemacht hab.

Gruß Daniel

Frst.log

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-08-2014 01
Ran by Paschmanns (administrator) on PASCHMANNS-PC on 18-08-2014 10:42:47
Running from C:\Users\Paschmanns\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
() C:\Windows\SysWOW64\srvany.exe
() C:\Windows\KMService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(Windows Net) C:\Users\Paschmanns\AppData\Roaming\Windows Net Data\net.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(ASUS) C:\Windows\AsScrPro.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)
HKLM\...\Run: [EeeStorageBackup] => C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe MySyncFolder
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2009-11-27] (IDT, Inc.)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-11-12] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6998656 2009-10-27] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2009-08-20] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Setwallpaper] => c:\programdata\SetWallpaper.cmd
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [185896 2013-10-28] (Geek Software GmbH)
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [ASUS Screen Saver Protector] => C:\Windows\AsScrPro.exe [3054136 2010-02-09] (ASUS)
HKLM-x32\...\Run: [Download Protect] => C:\ProgramData\dlprotect.exe
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
HKLM-x32\...\Run: [Search Protection] => C:\ProgramData\Search Protection\SearchProtection.exe
HKLM-x32\...\Run: [Allin1Convert_8h Browser Plugin Loader 64] => C:\PROGRA~2\ALLIN1~2\bar\1.bin\8hbrmon64.exe
HKLM-x32\...\Run: [MapsGalaxy_39 Browser Plugin Loader 64] => C:\PROGRA~2\MAPSGA~2\bar\1.bin\39brmon64.exe
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-10-18] (Microsoft Corporation)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-2843387074-3314396776-2720498493-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\Paschmanns\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-2843387074-3314396776-2720498493-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
HKU\S-1-5-21-2843387074-3314396776-2720498493-1000\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
HKU\S-1-5-21-2843387074-3314396776-2720498493-1000\...\Run: [Alle meine Adressen] => C:\USERS\PASCHM~1\APPDATA\LOCAL\MICROS~1\W
HKU\S-1-5-21-2843387074-3314396776-2720498493-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-2843387074-3314396776-2720498493-1000\...\MountPoints2: {74d8beba-9720-11e3-822d-e0cb4efef544} - F:\AutoRun.exe
HKU\S-1-5-21-2843387074-3314396776-2720498493-1000\...\MountPoints2: {ce36613a-a5f9-11e3-a630-e0cb4efef544} - F:\AutoRun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe ()
Startup: C:\Users\Paschmanns\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Paschmanns\AppData\Roaming\Windows Net Data\net.exe (Windows Net)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://do-search.com/?type=sc&ts=1384710113&from=tugs&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J&q={searchTerms}
SearchScopes: HKLM-x32 - {75b4241f-171e-44a3-bf44-23613b6e3e03} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^AYY^xdm070^YYA^de&si=flvrunner&ptb=A079DE68-FFB3-4F27-AD30-C772271F96BB&ind=2014052110&n=780bff0e&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J&q={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @TrendMicro.com/FFExtension -> C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-02&ent=hp&u=FC57860CE7F0F567F4754E5363482D09
CHR StartupUrls: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-02&ent=hp&u=FC57860CE7F0F567F4754E5363482D09", "hxxp://www.default-search.net?sid=476&aid=122&itype=n&ver=12302&tm=313&src=hmp"
CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Google Wallet) - C:\Users\Paschmanns\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-13]
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Paschmanns\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-09]
CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\Paschmanns\AppData\Local\Wajam\Chrome\wajam.crx [2012-07-26]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Paschmanns\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-11-07]
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.nationzoom.com/?type=sc&ts=1389277782&from=adks&uid=ST9500325AS_6VE5PJ8JXXXX6VE5PJ8J
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed]
R2 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-10-01] (Intel Corporation) [File not signed]
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\STacSV64.exe [243712 2009-11-27] (IDT, Inc.)
R2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-10-01] (Intel Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799680 2009-08-12] ()
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
U2 TMAgent; 

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-18 10:42 - 2014-08-18 10:43 - 00015833 _____ () C:\Users\Paschmanns\Downloads\FRST.txt
2014-08-18 10:42 - 2014-08-18 10:42 - 02101760 _____ (Farbar) C:\Users\Paschmanns\Downloads\FRST64.exe
2014-08-18 10:42 - 2014-08-18 10:42 - 00000000 ____D () C:\FRST
2014-08-18 10:41 - 2014-08-18 10:41 - 01093632 _____ (Farbar) C:\Users\Paschmanns\Downloads\FRST.exe
2014-08-13 21:40 - 2014-08-14 08:34 - 00034816 _____ () C:\Users\Paschmanns\Desktop\Reisekostenabrechnung April 2014.xls
2014-08-13 11:25 - 2014-08-13 11:25 - 00545127 _____ () C:\Users\Paschmanns\Downloads\Antrag.zip
2014-08-07 12:44 - 2014-08-07 12:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2014-07-27 17:22 - 2014-07-27 17:22 - 00018316 _____ () C:\Users\Paschmanns\Documents\Tabelle100.xlsx
2014-07-27 00:03 - 2014-07-27 00:03 - 00033856 _____ () C:\Users\Paschmanns\Documents\Tabelle13.xlsx
2014-07-26 23:29 - 2014-07-26 23:29 - 00000000 ____D () C:\Users\Paschmanns\AppData\Roaming\Alle meine Adressen
2014-07-26 19:12 - 2014-07-26 19:13 - 03721367 _____ (Zwahlen Informatik) C:\Users\Paschmanns\Downloads\adressoffice.exe
2014-07-26 14:41 - 2014-07-26 19:10 - 00360448 _____ () C:\Users\Paschmanns\Documents\Database1.accdb
2014-07-26 14:34 - 2014-07-26 14:40 - 02183168 _____ () C:\Users\Paschmanns\Documents\Kontakte4.accdb
2014-07-25 17:11 - 2014-07-25 17:11 - 00000000 ____D () C:\Users\Paschmanns\AppData\Roaming\SMS Corner
2014-07-25 15:45 - 2014-07-25 17:41 - 00000000 ____D () C:\Users\Paschmanns\Documents\AdressOffice
2014-07-25 15:45 - 2014-07-25 15:48 - 00000000 ____D () C:\Users\Paschmanns\AppData\Roaming\AdressOffice
2014-07-25 15:45 - 2014-07-25 15:45 - 00000000 ____D () C:\Users\Paschmanns\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AdressOffice
2014-07-25 15:45 - 2014-07-25 15:45 - 00000000 ____D () C:\Program Files (x86)\Zwahlen Informatik
2014-07-25 15:41 - 2014-07-25 15:41 - 01703936 _____ () C:\Users\Paschmanns\Documents\Kontakte3.accdb
2014-07-25 15:34 - 2014-07-25 15:40 - 01671168 _____ () C:\Users\Paschmanns\Documents\Kontakte2.accdb
2014-07-25 15:28 - 2014-07-25 15:37 - 01966080 _____ () C:\Users\Paschmanns\Documents\Kontakte1.accdb
2014-07-25 15:15 - 2014-07-25 15:39 - 01703936 _____ () C:\Users\Paschmanns\Documents\Kontakte.accdb

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-18 10:43 - 2014-08-18 10:42 - 00015833 _____ () C:\Users\Paschmanns\Downloads\FRST.txt
2014-08-18 10:42 - 2014-08-18 10:42 - 02101760 _____ (Farbar) C:\Users\Paschmanns\Downloads\FRST64.exe
2014-08-18 10:42 - 2014-08-18 10:42 - 00000000 ____D () C:\FRST
2014-08-18 10:41 - 2014-08-18 10:41 - 01093632 _____ (Farbar) C:\Users\Paschmanns\Downloads\FRST.exe
2014-08-18 10:39 - 2014-06-06 12:29 - 00000000 ____D () C:\Users\Paschmanns\Desktop\2014-06-06 Vorteile ProPlan Estrich
2014-08-18 10:39 - 2013-12-13 12:58 - 00000000 ____D () C:\Users\Paschmanns\Documents\Outlook-Dateien
2014-08-18 10:08 - 2013-10-09 13:18 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-18 09:59 - 2013-12-13 10:58 - 00001118 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-18 07:59 - 2013-12-13 10:58 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-18 07:28 - 2009-07-14 06:45 - 00010016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-18 07:28 - 2009-07-14 06:45 - 00010016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-18 07:24 - 2010-02-09 04:58 - 01277994 _____ () C:\Windows\WindowsUpdate.log
2014-08-18 07:21 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-18 07:21 - 2009-07-14 06:51 - 00062901 _____ () C:\Windows\setupact.log
2014-08-14 08:34 - 2014-08-13 21:40 - 00034816 _____ () C:\Users\Paschmanns\Desktop\Reisekostenabrechnung April 2014.xls
2014-08-13 21:05 - 2014-06-10 20:33 - 00000000 ____D () C:\Users\Paschmanns\Desktop\Fotos
2014-08-13 11:25 - 2014-08-13 11:25 - 00545127 _____ () C:\Users\Paschmanns\Downloads\Antrag.zip
2014-08-13 11:15 - 2009-08-04 11:51 - 00647376 _____ () C:\Windows\system32\perfh007.dat
2014-08-13 11:15 - 2009-08-04 11:51 - 00127404 _____ () C:\Windows\system32\perfc007.dat
2014-08-13 11:15 - 2009-07-14 07:13 - 01480602 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-13 11:02 - 2014-01-09 16:54 - 00000000 ____D () C:\Users\Paschmanns\Documents\Mobogenie
2014-08-07 12:44 - 2014-08-07 12:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2014-08-05 23:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-29 18:36 - 2013-10-09 11:33 - 01480954 _____ () C:\Windows\PFRO.log
2014-07-27 17:22 - 2014-07-27 17:22 - 00018316 _____ () C:\Users\Paschmanns\Documents\Tabelle100.xlsx
2014-07-27 00:03 - 2014-07-27 00:03 - 00033856 _____ () C:\Users\Paschmanns\Documents\Tabelle13.xlsx
2014-07-26 23:29 - 2014-07-26 23:29 - 00000000 ____D () C:\Users\Paschmanns\AppData\Roaming\Alle meine Adressen
2014-07-26 19:13 - 2014-07-26 19:12 - 03721367 _____ (Zwahlen Informatik) C:\Users\Paschmanns\Downloads\adressoffice.exe
2014-07-26 19:10 - 2014-07-26 14:41 - 00360448 _____ () C:\Users\Paschmanns\Documents\Database1.accdb
2014-07-26 14:40 - 2014-07-26 14:34 - 02183168 _____ () C:\Users\Paschmanns\Documents\Kontakte4.accdb
2014-07-25 17:41 - 2014-07-25 15:45 - 00000000 ____D () C:\Users\Paschmanns\Documents\AdressOffice
2014-07-25 17:11 - 2014-07-25 17:11 - 00000000 ____D () C:\Users\Paschmanns\AppData\Roaming\SMS Corner
2014-07-25 15:48 - 2014-07-25 15:45 - 00000000 ____D () C:\Users\Paschmanns\AppData\Roaming\AdressOffice
2014-07-25 15:45 - 2014-07-25 15:45 - 00000000 ____D () C:\Users\Paschmanns\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AdressOffice
2014-07-25 15:45 - 2014-07-25 15:45 - 00000000 ____D () C:\Program Files (x86)\Zwahlen Informatik
2014-07-25 15:41 - 2014-07-25 15:41 - 01703936 _____ () C:\Users\Paschmanns\Documents\Kontakte3.accdb
2014-07-25 15:40 - 2014-07-25 15:34 - 01671168 _____ () C:\Users\Paschmanns\Documents\Kontakte2.accdb
2014-07-25 15:39 - 2014-07-25 15:15 - 01703936 _____ () C:\Users\Paschmanns\Documents\Kontakte.accdb
2014-07-25 15:37 - 2014-07-25 15:28 - 01966080 _____ () C:\Users\Paschmanns\Documents\Kontakte1.accdb
2014-07-25 08:55 - 2013-10-09 11:48 - 00000000 ____D () C:\Users\Paschmanns\AppData\Roaming\Adobe

Some content of TEMP:
====================
C:\Users\Paschmanns\AppData\Local\Temp\3994CC24-5A9C-4B84-8BDE-E17E5A787682.exe
C:\Users\Paschmanns\AppData\Local\Temp\amazonicon_v3.exe
C:\Users\Paschmanns\AppData\Local\Temp\amazoninstallernircmdc.exe
C:\Users\Paschmanns\AppData\Local\Temp\BackupSetup.exe
C:\Users\Paschmanns\AppData\Local\Temp\DownloadManager.exe
C:\Users\Paschmanns\AppData\Local\Temp\e7de2510-b435-4879-87e4-16d8e0e80dfd.exe
C:\Users\Paschmanns\AppData\Local\Temp\GetCC.dll
C:\Users\Paschmanns\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe
C:\Users\Paschmanns\AppData\Local\Temp\nso5CD.exe
C:\Users\Paschmanns\AppData\Local\Temp\nsq5E28.exe
C:\Users\Paschmanns\AppData\Local\Temp\nsu27C2.exe
C:\Users\Paschmanns\AppData\Local\Temp\nsu5390.exe
C:\Users\Paschmanns\AppData\Local\Temp\nsvE236.exe
C:\Users\Paschmanns\AppData\Local\Temp\nszF7F6.exe
C:\Users\Paschmanns\AppData\Local\Temp\oi_{9A7347E1-C09C-4B36-A4A0-B2851BFE9869}.exe
C:\Users\Paschmanns\AppData\Local\Temp\ose00000.exe
C:\Users\Paschmanns\AppData\Local\Temp\plus-hd-2-5.exe
C:\Users\Paschmanns\AppData\Local\Temp\pricepeep_1.exe
C:\Users\Paschmanns\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Paschmanns\AppData\Local\Temp\sdapskill.exe
C:\Users\Paschmanns\AppData\Local\Temp\SendMsg.dll
C:\Users\Paschmanns\AppData\Local\Temp\SPStub.exe
C:\Users\Paschmanns\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Paschmanns\AppData\Local\Temp\tbConn.dll
C:\Users\Paschmanns\AppData\Local\Temp\Uni000.exe
C:\Users\Paschmanns\AppData\Local\Temp\UNINSTALL.EXE
C:\Users\Paschmanns\AppData\Local\Temp\vbmz10.exe
C:\Users\Paschmanns\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Paschmanns\AppData\Local\Temp\VisusClient.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-18 08:35

==================== End Of Log ============================
         

Addition LOG

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-08-2014 01
Ran by Paschmanns at 2014-08-18 10:43:32
Running from C:\Users\Paschmanns\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.0.3.13070 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 2.0.3.13070 - Adobe Systems Inc.) Hidden
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
AdressOffice (Freeware) (HKLM-x32\...\AdressOffice) (Version: 2.0.6.34 - Zwahlen Informatik)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}) (Version: 1.5.17.25482 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482 - Alcor Micro Corp.) Hidden
ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.8 - ASUS)
ASUS AP Bank (HKLM-x32\...\ASUS AP Bank_is1) (Version: 1.0.0.0 - ASUSTEK)
ASUS FancyStart (HKLM-x32\...\{2B81872B-A054-48DA-BE3B-FA5C164C303A}) (Version: 1.0.8 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS)
ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS)
ASUS MultiFrame (HKLM-x32\...\{9D48531D-2135-49FC-BC29-ACCDA5396A76}) (Version: 1.0.0019 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}) (Version: 1.1.27 - ASUS)
ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0007 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0028 - ASUS)
ASUS USB2.0 UVC VGA WebCam (HKLM\...\ASUS USB2.0 UVC VGA WebCam) (Version: 5.8.53120.202 - Sonix)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.19 - asus)
ASUS WebStorage (HKLM\...\ASUS WebStorage) (Version: 2.0.36.1260 - eCareme Technologies, Inc.)
ATI Catalyst Install Manager (HKLM\...\{80AB4395-42E3-D0B3-A310-6F0A6BD9709B}) (Version: 3.0.750.0 - ATI Technologies, Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0001 - ASUS)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2009.1111.1543.28169 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.1111.1543.28169 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2009.1111.1543.28169 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2009.1111.1543.28169 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.1111.1543.28169 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.1111.1543.28169 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2009.1111.1543.28169 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2009.1111.1543.28169 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Czech (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Danish (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Dutch (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help English (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Finnish (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help French (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help German (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Greek (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Italian (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Japanese (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Korean (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Polish (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Russian (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Spanish (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Swedish (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Thai (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
CCC Help Turkish (x32 Version: 2009.1111.1542.28169 - ATI) Hidden
ccc-core-static (x32 Version: 2009.1111.1543.28169 - ATI) Hidden
ccc-utility64 (Version: 2009.1111.1543.28169 - ATI) Hidden
ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.5 - ASUS)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{81FB7C60-565A-4869-9D90-3BE1D270E8B7}) (Version:  - Microsoft)
ETDWare PS/2-x64 7.0.5.9_WHQL (HKLM\...\Elantech) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6259.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
JiveX DICOM Viewer Light 4.3.0.4 (HKLM-x32\...\JiveX DICOM Viewer Light 4.3.0.4) (Version:  - )
KONICA MINOLTA magicolor 2530DL (HKLM\...\KONICA MINOLTA magicolor 2530DL) (Version:  - )
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
PDF24 Creator 6.0.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{A8686D24-1E89-43A1-973E-05A258D2B3F8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{18B3CF2A-73F7-4716-B1AE-86D68726D408}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (HKLM-x32\...\{90140000-006E-0407-0000-0000000FF1CE}_Office14.PROPLUS_{32E700B9-1A94-48B4-99E1-CB8BD5F7340A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFB525A0-E1C0-4E32-9968-FE401BC87363}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ED31DE9A-3E13-4E2C-9106-E0D8AFFB9FA6}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9CFD026D-EB1C-48C2-9DD2-8E8875F251B2}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{D7D96A96-F61F-48AD-B2DC-4F4B6938D2AB}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{B5C70C99-B109-42FD-B219-FF12CA543F19}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (HKLM-x32\...\{90140000-00A1-0407-0000-0000000FF1CE}_Office14.PROPLUS_{0C175ED0-26B9-4B09-AFA9-3F16A03A29B9}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3EFF1957-7DEA-4C7A-8E9C-2D6D58E4B2ED}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{3EFF1957-7DEA-4C7A-8E9C-2D6D58E4B2ED}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{651EE0E5-C789-48D8-8B91-F79352B783C9}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BC6DFBFD-16DD-47E1-A7EF-2C062930FA4F}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{81CA2EFA-7250-4B1E-B3A6-E0595224E2CD}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{190EC86F-5867-4D7A-B9F3-D14D82C26F3D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5DA2D071-A54C-47C0-83E5-43C63DBFD936}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{5DA2D071-A54C-47C0-83E5-43C63DBFD936}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version:  - Microsoft)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.29.0 - ASUS)
WinRAR 5.00 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.15 - ASUS)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

12-07-2014 15:36:35 Geplanter Prüfpunkt
22-07-2014 13:46:58 Geplanter Prüfpunkt
01-08-2014 09:38:04 Geplanter Prüfpunkt
12-08-2014 12:39:36 Geplanter Prüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {11271DA7-D71B-4C3F-AC84-B459424ECB73} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {298BBBA5-CBFB-416F-8324-823CBB4D4F98} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2009-12-24] (ATK)
Task: {4CAA6C74-621F-48B1-B73B-897ABE0D1273} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-01-05] ()
Task: {636340EB-BB23-4156-BB15-58F2F0C67847} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-13] (Google Inc.)
Task: {9486FD85-2A83-4B3C-8745-FD7C55FB5CBA} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2009-11-17] (ASUSTek Computer Inc.)
Task: {A1E49656-7E87-459B-A3A3-B19842EB97ED} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-05-19] (ASUS)
Task: {A5227F79-A436-48B7-B8A4-A3D5D1D10B10} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {A90FAF66-949B-43DB-84BE-306BF1EFDFAA} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-11-24] ()
Task: {CFE8BE5F-B716-460B-89B5-898A42A638AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-13] (Google Inc.)
Task: {E678F3EA-74E5-4D7C-A346-3E946EE055F2} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-10-20 18:47 - 2003-04-18 19:06 - 00008192 _____ () C:\Windows\SysWOW64\srvany.exe
2013-10-20 18:47 - 2010-04-10 09:03 - 00077824 _____ () C:\Windows\KMService.exe
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-02-09 06:00 - 2007-11-30 21:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
2009-12-23 23:12 - 2009-12-23 23:12 - 00017920 _____ () C:\Program Files\P4G\DevMng.dll
2009-12-19 05:11 - 2009-12-19 05:11 - 00033280 _____ () C:\Program Files\P4G\OvrClk.dll
2010-01-05 03:43 - 2010-01-05 03:43 - 01597440 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
2009-11-24 23:45 - 2009-11-24 23:45 - 00053888 _____ () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
2008-10-01 09:02 - 2008-10-01 09:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2008-10-23 20:21 - 2008-10-23 20:21 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-02-09 05:53 - 2010-02-09 05:53 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2013-12-13 11:01 - 2013-12-04 04:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-13 11:01 - 2013-12-04 04:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-13 11:01 - 2013-12-04 04:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-13 11:01 - 2013-12-04 04:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-13 11:01 - 2013-12-04 04:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-13 11:01 - 2013-12-04 04:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/13/2014 11:15:40 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/13/2014 11:15:40 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/13/2014 10:42:56 AM) (Source: MsiInstaller) (EventID: 1024) (User: Paschmanns-PC)
Description: Produkt: Adobe Reader XI (11.0.07) - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011008}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (08/04/2014 05:47:59 PM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (1000) SUS20ClientDataStore: Der Versionsspeicher für Instanz 0 hat seine maximale Größe von 32 MB erreicht. Wahrscheinlich verhindert eine lange andauernde Transaktion die Bereinigung des Versionsspeichers und vergrößert ihn. Aktualisierungen werden zurückgewiesen, bis für die betreffende Transaktion ein vollständiger Commit- oder Rollbackvorgang durchgeführt wurde.

Mögliche lange andauernde Transaktion:

	Sitzungs-ID: 0x0000000000C704A0

	Sitzungskontext: 0x00000000

	Thread-ID des Sitzungskontextes: 0x0000000000000538

	Cleanup: 1

Error: (08/04/2014 05:47:37 PM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (1000) SUS20ClientDataStore: Der Versionsspeicher für Instanz 0 hat seine maximale Größe von 32 MB erreicht. Wahrscheinlich verhindert eine lange andauernde Transaktion die Bereinigung des Versionsspeichers und vergrößert ihn. Aktualisierungen werden zurückgewiesen, bis für die betreffende Transaktion ein vollständiger Commit- oder Rollbackvorgang durchgeführt wurde.

Mögliche lange andauernde Transaktion:

	Sitzungs-ID: 0x0000000000C704A0

	Sitzungskontext: 0x00000000

	Thread-ID des Sitzungskontextes: 0x0000000000000538

	Cleanup: 1

Error: (07/25/2014 03:19:46 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (07/25/2014 03:19:45 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (07/25/2014 03:19:44 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (07/25/2014 03:19:20 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (07/25/2014 03:19:20 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.


System errors:
=============
Error: (08/12/2014 07:05:01 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (08/05/2014 06:48:29 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (08/05/2014 06:48:11 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (08/02/2014 07:48:07 AM) (Source: NetBT) (EventID: 4307) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.

Error: (08/01/2014 03:34:57 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.

Error: (08/01/2014 03:34:57 PM) (Source: Schannel) (EventID: 4106) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.

Error: (08/01/2014 03:34:57 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.

Error: (08/01/2014 03:34:57 PM) (Source: Schannel) (EventID: 4106) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.

Error: (08/01/2014 03:34:57 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.

Error: (08/01/2014 03:34:57 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.


Microsoft Office Sessions:
=========================
Error: (08/13/2014 11:15:40 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestH:\Neuer Ordner (2)\Neuer Ordner\Sicherrung\SoftonicDownloader_fuer_free-video-to-mp3-converter.exe

Error: (08/13/2014 11:15:40 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestH:\Neuer Ordner (2)\Neuer Ordner\Sicherrung\SoftonicDownloader_fuer_duplicate-cleaner.exe

Error: (08/13/2014 10:42:56 AM) (Source: MsiInstaller) (EventID: 1024) (User: Paschmanns-PC)
Description: Adobe Reader XI (11.0.07) - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011008}1625(NULL)(NULL)(NULL)

Error: (08/04/2014 05:47:59 PM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll1000SUS20ClientDataStore: 0320x0000000000C704A00x000000000x00000000000005381

Error: (08/04/2014 05:47:37 PM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll1000SUS20ClientDataStore: 0320x0000000000C704A00x000000000x00000000000005381

Error: (07/25/2014 03:19:46 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Users\Paschmanns\Desktop\AdressOffice\adressoffice.exeC:\Users\Paschmanns\Desktop\AdressOffice\adressoffice.exe0

Error: (07/25/2014 03:19:45 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Users\Paschmanns\Desktop\AdressOffice\adressoffice.exeC:\Users\Paschmanns\Desktop\AdressOffice\adressoffice.exe0

Error: (07/25/2014 03:19:44 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Users\Paschmanns\Desktop\AdressOffice\adressoffice.exeC:\Users\Paschmanns\Desktop\AdressOffice\adressoffice.exe0

Error: (07/25/2014 03:19:20 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Users\Paschmanns\Desktop\Neu Aktenkoffer\AdressOffice\adressoffice.exeC:\Users\Paschmanns\Desktop\Neu Aktenkoffer\AdressOffice\adressoffice.exe0

Error: (07/25/2014 03:19:20 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Users\Paschmanns\Desktop\Neu Aktenkoffer\AdressOffice\adressoffice.exeC:\Users\Paschmanns\Desktop\Neu Aktenkoffer\AdressOffice\adressoffice.exe0


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz
Percentage of memory in use: 36%
Total physical RAM: 3948.55 MB
Available physical RAM: 2510.61 MB
Total Pagefile: 7895.27 MB
Available Pagefile: 6234.8 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:57.6 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:334.67 GB) (Free:160.78 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 76692CA8)
Partition 1: (Not Active) - (Size=14.6 GB) - (Type=1C)
Partition 2: (Active) - (Size=116.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=334.7 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

ESET

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=38a75074d4f4794c9c7aa389bc08eed1
# engine=19709
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-08-18 10:51:18
# local_time=2014-08-18 12:51:18 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 1571696 159988928 0 0
# scanned=178258
# found=25
# cleaned=0
# scan_time=4127
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Conduit\Community Alerts\Alert.dll"
sh=5FB95D21BE8CF2753FD8A42398ADD26E2B21409F ft=1 fh=0f2c5f177050d203 vn="Variante von Win32/Toolbar.Conduit.AJ evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\Conduit\Multi\CT3306061\UninstallerUI.exe"
sh=5FB95D21BE8CF2753FD8A42398ADD26E2B21409F ft=1 fh=0f2c5f177050d203 vn="Variante von Win32/Toolbar.Conduit.AJ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\Conduit\Multi\CT3306061\UninstallerUI.exe"
sh=F86CC53BE2F07BEC65E44AA1AA81F8A253F0BAD9 ft=1 fh=64322758d28398a5 vn="Variante von Win32/AdWare.iBryte.Q Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9JN8PS5B\Setup.exe"
sh=05EFA61129821526AE0D4FDCB753177EFB0BB2EB ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen Virus" ac=I fn="C:\Users\Paschmanns\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H2JBWTRT\free-driver-scout_pro_de[1].htm"
sh=C2A8D1DFDC5EC8B234D58C8582DE0D1E1143E1F8 ft=1 fh=b3f344197f8819a5 vn="Variante von MSIL/DownloadGuide.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R54FY7H9\lm-Downloader.exe"
sh=FAB0B286E994F7E79870CD15DCD0619BCDDBB2C1 ft=1 fh=12aa6849706ee9fc vn="Win32/Conduit.SearchProtect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJRIF0UD\SPSetup[1].exe"
sh=9DD0F7453F429A74EDA0C5519D70C91AF1EC6AA2 ft=0 fh=0000000000000000 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie2.1.36.zip"
sh=12A81C015E84CAB1346754690B8683E3D0F5C542 ft=1 fh=2038865bafb4f80a vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DaemonProcess.exe"
sh=CC52EE1298EA7A344B1C0CD7D03D1A059C77FD39 ft=1 fh=d235b59034f549ec vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\Mobogenie.exe"
sh=659E678C5D8CE742CC03A211C59AA57E6018FDC6 ft=0 fh=0000000000000000 vn="Variante von Android/Mobserv.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\MUServer.apk"
sh=930F6C24088B7CB47481D4EDD64A873A817E73FC ft=1 fh=44fb5a4b02bb1a4e vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\New_UpdateMoboGenie.exe"
sh=4147259B87A16A4CF06FA6C81ADBF26FF6A890BC ft=1 fh=177851bc594c906e vn="Variante von Win32/Toolbar.Visicom.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Temp\e7de2510-b435-4879-87e4-16d8e0e80dfd.exe"
sh=652BE3DA093691B593B2793485D80F22064AD930 ft=1 fh=be1d7f759544a3c7 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Temp\dlm8AC2.tmp\mypcbackuptier2_0529.exe"
sh=D2EAFFAD45CC86DE6E07E9D8E42440CD25DA5754 ft=1 fh=855d8e396d7ffddb vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Temp\DM\software\Cloud_Backup_Setup.exe"
sh=F5F973DA9E1ACB7CA961E4DD91E98694E80F7CD6 ft=1 fh=43e54f3d5cc39dd7 vn="Variante von Win32/AdWare.SpeedingUpMyPC.E Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Temp\DM\software\OptimizerPro.exe"
sh=A5831D8F6F000CD28B009765F9C32DECA70D24D3 ft=1 fh=8f4a30c72be96a25 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Paschmanns\AppData\Local\Temp\DM\software\Re-markit_2040-2081.exe"
sh=CCD90EE6E9B1ADFF9657E8F2C126BC6CB5C2EB24 ft=1 fh=91473923cd86549e vn="Variante von Win32/SProtector.E evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Temp\is-B5JVO.tmp\OptProCrash.dll"
sh=81750A0E85D7E7D11F2DF120496836D6387F9BE7 ft=1 fh=b49d8b43eb7d8654 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Temp\nsj9FB3.tmp\nsUtils.dll"
sh=965B2B971D7D9026C43E5A5FCD55B950756666AB ft=1 fh=2269737c15a41705 vn="Win32/Adware.RK.AO.Gen Anwendung" ac=I fn="C:\Users\Paschmanns\AppData\Local\Temp\oi_5MW2zjFdNY\FreeKeyLog.exe"
sh=A87B7647DC34B5B6186209377786E946B677C574 ft=1 fh=c2834f18f25710d9 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Paschmanns\AppData\Local\Temp\{D11164A9-404F-4A93-9B13-2ADB3606C00F}\setup.exe"
sh=C5A07C6647A4228B39A382EE5246235CFDD94A82 ft=1 fh=1901ca3fd08316cd vn="Variante von Win32/CNETInstaller.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\Downloads\cbsidlm-cbsi134-KONICA_MINOLTA_magicolor_2530DL-ORG-156786.exe"
sh=E3E1F9A22065347C2EAAD63CED60C785C376D966 ft=1 fh=2d4915ea26f51f99 vn="Variante von Win32/OpenInstall evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\Downloads\FreeKeyLog_installer.exe"
sh=D9D35664AA4C83B6D09475AE162E77FD2BC2BE8E ft=1 fh=aa96677e348dd238 vn="Win32/WinloadSDA.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Paschmanns\Downloads\Samsung-USB-Smartphone-Treiber-Setup.exe"
sh=121804F260523BDFB3D4876F044F8E0E5B60F526 ft=1 fh=07108015ae59f97c vn="Variante von Win32/Somoto.A evtl. unerwünschte Anwendung" ac=I fn="D:\Sandro\Download\VDownloaderInstallerBI.exe"
         

Malware antibyt

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 18.08.2014 10:50:08, SYSTEM, PASCHMANNS-PC, Protection, Malware Protection, Starting, 
Protection, 18.08.2014 10:50:08, SYSTEM, PASCHMANNS-PC, Protection, Malware Protection, Started, 
Protection, 18.08.2014 10:50:08, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Starting, 
Protection, 18.08.2014 10:50:09, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Started, 
Update, 18.08.2014 10:50:12, SYSTEM, PASCHMANNS-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.8.16.1, 
Update, 18.08.2014 10:50:15, SYSTEM, PASCHMANNS-PC, Manual, Malware Database, 2014.3.4.9, 2014.8.18.2, 
Protection, 18.08.2014 10:50:17, SYSTEM, PASCHMANNS-PC, Protection, Refresh, Starting, 
Protection, 18.08.2014 10:50:17, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 18.08.2014 10:50:17, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 18.08.2014 10:50:21, SYSTEM, PASCHMANNS-PC, Protection, Refresh, Success, 
Protection, 18.08.2014 10:50:22, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Starting, 
Protection, 18.08.2014 10:50:22, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Started, 
Detection, 18.08.2014 11:03:29, SYSTEM, PASCHMANNS-PC, Protection, Malware Protection, File, PUP.Optional.Conduit.A, C:\Users\Paschmanns\AppData\Local\Temp\SPStub.exe, Quarantine, [8a80f2d6ceadf145ad5a0e1a867b57a9]
Detection, 18.08.2014 11:03:30, SYSTEM, PASCHMANNS-PC, Protection, Malware Protection, File, PUP.Optional.ScramblePacker.A, C:\Users\Paschmanns\AppData\Local\Temp\plus-hd-2-5.exe, Quarantine, [7f8bd2f61a61ae88037e37505ca530d0]
Detection, 18.08.2014 11:03:33, SYSTEM, PASCHMANNS-PC, Protection, Malware Protection, File, PUP.Optional.Conduit.A, C:\Users\Paschmanns\AppData\Local\Temp\nsvE236.exe, Quarantine, [2cde12b6403b90a6705bc8611fe2fb05]
Detection, 18.08.2014 11:03:33, SYSTEM, PASCHMANNS-PC, Protection, Malware Protection, File, PUP.Optional.Conduit.A, C:\Users\Paschmanns\AppData\Local\Temp\nszF7F6.exe, Quarantine, [32d82f99bfbc6fc76f5c47e20ff29769]
Protection, 18.08.2014 11:34:08, SYSTEM, PASCHMANNS-PC, Protection, Malware Protection, Starting, 
Protection, 18.08.2014 11:34:08, SYSTEM, PASCHMANNS-PC, Protection, Malware Protection, Started, 
Protection, 18.08.2014 11:34:08, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Starting, 
Protection, 18.08.2014 11:34:39, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Started, 
Update, 18.08.2014 12:08:32, SYSTEM, PASCHMANNS-PC, Scheduler, Malware Database, 2014.8.18.2, 2014.8.18.3, 
Protection, 18.08.2014 12:08:55, SYSTEM, PASCHMANNS-PC, Protection, Refresh, Starting, 
Protection, 18.08.2014 12:08:55, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 18.08.2014 12:08:55, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 18.08.2014 12:09:31, SYSTEM, PASCHMANNS-PC, Protection, Refresh, Success, 
Protection, 18.08.2014 12:09:31, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Starting, 
Protection, 18.08.2014 12:09:31, SYSTEM, PASCHMANNS-PC, Protection, Malicious Website Protection, Started, 

(end)
         

Hi,

() C:\Windows\SysWOW64\srvany.exe
() C:\Windows\KMService.exe

Da ist mindestens ein gecracktes MS-Office. Das muss runter, erst dann gibt es Support. Und andere gecrackte/illegale Software falls vorhanden muss auch verschwinden.

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

okay ich schau mal drüber, da es nicht mein laptop sondern der eines freundes ist weiß ich nicht was nun alles gecrackt ist...

Zitat von Noizekick

okay ich schau mal drüber, da es nicht mein laptop sondern der eines freundes ist weiß ich nicht was nun alles gecrackt ist...

Ähm im ersten Posting schriebst du noch

Zitat von Noizekick

Hallo mein Name ist Daniel,
ich hab ein problem mit meinem Laptop

Watt denn nu?!

Es ist der eines Freundes

Hast jetzt alles gecrackte runter? Wenn ja neue FRST Logs erstellen und posten