hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo schrauber,
nachstehend die beiden angeforderten Log-Dateien.
Gruß
John49
[
FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-09-2013 02
Ran by PAUL (ATTENTION: The logged in user is not administrator) on PEST-NB on 12-09-2013 11:23:47
Running from C:\Users\PAUL\Desktop\_CLEANER\FRST64
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Samsung) D:\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(G Data Software AG) C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFirewallTray.exe
(G Data Software AG) C:\Program Files (x86)\G Data\TotalProtection\AVKTray\AVKTray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems Inc.) D:\PDF\AA8\Acrobat\acrotray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Hotkey\Hotkey.exe
(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
(Samsung Electronics Co., Ltd.) D:\Samsung\Kies\KiesTrayAgent.exe
(AVM Berlin) C:\Program Files\FRITZ!DSL\FwebProt.exe
(AVM Berlin) C:\Program Files\FRITZ!DSL\StCenter.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Ghisler Software GmbH) D:\totalcmd\TOTALCMD64.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-02-11] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11772520 2011-01-05] (Realtek Semiconductor)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-06-20] (Microsoft Corporation)
HKLM\...\RunOnce: [*Restore] - C:\Windows\System32\rstrui.exe /runonce [296960 2010-11-21] (Microsoft Corporation)
HKCU\...\Run: [EPSON Stylus DX4400 Series] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICAE.EXE /FU "C:\Windows\TEMP\E_S62B8.tmp" /EF "HKCU"
HKCU\...\Run: [] - D:\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-26] (Samsung)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-07-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [GDFirewallTray] - C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\TotalProtection\AVKTray\AVKTray.exe [1444304 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [QuickTime Task] - D:\Foto_Video\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - D:\PDF\AA8\Acrobat\Acrotray.exe [620152 2006-10-22] (Adobe Systems Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [RIMBBLaunchAgent.exe] - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [267792 2013-01-17] (Research In Motion Limited)
HKLM-x32\...\Run: [KiesTrayAgent] - D:\Samsung\Kies\KiesTrayAgent.exe [311152 2013-07-26] (Samsung Electronics Co., Ltd.)
Startup: C:\Users\PAUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Protect.lnk
ShortcutTarget: FRITZ!DSL Protect.lnk -> C:\Program Files\FRITZ!DSL\FwebProt.exe (AVM Berlin)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF228458B9A2CCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=46364&st=chrome&tid=3869&ver=3.2&ts=1371130296364&tguid=46364-3869-1371130296364-91BE5802D50364C1FBB91D4B8DDE7DBA&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=3.2&ts=1371130296364&tguid=46364-3869-1371130296364-91BE5802D50364C1FBB91D4B8DDE7DBA
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=46364&st=chrome&tid=3869&ver=3.2&ts=1371130296364&tguid=46364-3869-1371130296364-91BE5802D50364C1FBB91D4B8DDE7DBA&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=3.2&ts=1371130296364&tguid=46364-3869-1371130296364-91BE5802D50364C1FBB91D4B8DDE7DBA
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=46364&st=chrome&tid=3869&ver=3.2&ts=1371130296364&tguid=46364-3869-1371130296364-91BE5802D50364C1FBB91D4B8DDE7DBA&q=
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.2&ts=1371130296364&tguid=46364-3869-1371130296364-91BE5802D50364C1FBB91D4B8DDE7DBA&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.2&ts=1371130296364&tguid=46364-3869-1371130296364-91BE5802D50364C1FBB91D4B8DDE7DBA&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - D:\PDF\AA8\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\PDF\AA8\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Winsock: Catalog5 07 %ProgramFiles%\FRITZ!DSL\\sarah.dll [28472] (AVM Berlin)
Winsock: Catalog9 01 %ProgramFiles%\FRITZ!DSL\\sarah.dll [28472] (AVM Berlin)
Winsock: Catalog9 02 %ProgramFiles%\FRITZ!DSL\\sarah.dll [28472] (AVM Berlin)
Winsock: Catalog9 03 %ProgramFiles%\FRITZ!DSL\\sarah.dll [28472] (AVM Berlin)
Winsock: Catalog9 14 %ProgramFiles%\FRITZ!DSL\\sarah.dll [28472] (AVM Berlin)
Winsock: Catalog5-x64 07 %ProgramFiles%\FRITZ!DSL\\sarah.dll [34104] (AVM Berlin)
Winsock: Catalog9-x64 01 %ProgramFiles%\FRITZ!DSL\\sarah.dll [34104] (AVM Berlin)
Winsock: Catalog9-x64 02 %ProgramFiles%\FRITZ!DSL\\sarah.dll [34104] (AVM Berlin)
Winsock: Catalog9-x64 03 %ProgramFiles%\FRITZ!DSL\\sarah.dll [34104] (AVM Berlin)
Winsock: Catalog9-x64 14 %ProgramFiles%\FRITZ!DSL\\sarah.dll [34104] (AVM Berlin)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF Homepage: www.pcmagazin.de
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('turntable.fm')%20!%3D%20-1%20%26%26%20url.indexOf('static.turntable.fm')%20%3D%3D%20-1%20%26%26%20url.indexOf('s3.amazonaws.com')%20%3D%3D%20-1%20%26%26%20url.indexOf('ping.chartbeat.net')%20%3D%3D%20-1%20%26%26%20url.indexOf('.png')%20%3D%3D%20-1)%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*'))%20%7B%20return%20'PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000%3B%20PROXY%20ab-us22.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us21.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000%3B%20PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us20.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - D:\PDF\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 - D:\Foto_Video\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.4 - D:\Foto_Video\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.5 - D:\Foto_Video\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.6 - D:\Foto_Video\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - D:\PDF\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - D:\PDF\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - D:\PDF\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - D:\Foto_Video\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - D:\Musik\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.69 - D:\Foto_Video\Magix\Magic Video Converter\codec\real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.69 - D:\Foto_Video\Magix\Magic Video Converter\codec\real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 - C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - D:\Foto_Video\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\searchplugins\11-suche.xml
FF SearchPlugin: C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\searchplugins\webde-suche.xml
FF Extension: No Name - C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\Extensions\fb_add_on@avm.de
FF Extension: HomeTab - C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\Extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2}
FF Extension: WOT - C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: ReminderFox - C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae}
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: toolbar - C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\Extensions\toolbar@web.de.xpi
FF Extension: No Name - C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\Extensions\WTB_GLOBAL.sqlite
FF Extension: No Name - C:\Users\PAUL\AppData\Roaming\Mozilla\Firefox\Profiles\f4ihmfeq.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: No Name - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF StartMenuInternet: FIREFOX.EXE - D:\Browser_Mail\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\PAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\PAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\PAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\PAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Grooveshark Germany unlocker) - C:\Users\PAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\docdgimmdejoiemdafcgeodchlbllgac\2.3.4_0
CHR Extension: (Chrome Remote Desktop) - C:\Users\PAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp\29.0.1547.58_0
CHR Extension: (ProxMate - Proxy on steroids!) - C:\Users\PAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgjpnmnpjmabddgmjdiaggacbololbjm\3.0.7_0
CHR Extension: (WEB.DE MailCheck) - C:\Users\PAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.2_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\PAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\PAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 AAV UpdateService; D:\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-08-06] (Adobe Systems)
R2 AdobeActiveFileMonitor5.0; D:\Foto_Video\PSE5\PhotoshopElementsFileAgent.exe [102400 2006-09-14] ()
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-07-07] (Advanced Micro Devices, Inc.)
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1957840 2013-03-22] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKService.exe [635344 2013-02-25] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKWCtlX64.exe [2556384 2013-07-02] (G Data Software AG)
S3 becldr3Service; C:\Program Files (x86)\BCL Technologies\easyConverter SDK 3\Common\becldr.exe [176128 2011-04-19] ()
R3 Blackberry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [577536 2013-01-18] (Research In Motion Limited)
S4 Brother XP spl Service; C:\Windows\SysWOW64\brsvc01a.exe [57344 2004-06-14] (brother Industries Ltd)
R2 GDBackupSvc; C:\Program Files (x86)\G Data\TotalProtection\AVKBackup\AVKBackupService.exe [1944016 2013-03-22] (G Data Software AG)
R3 GDFwSvc; C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFwSvcx64.exe [2926672 2013-03-22] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [696808 2013-02-25] (G Data Software AG)
S3 GDTunerSvc; C:\Program Files (x86)\G Data\TotalProtection\AVKTuner\AVKTunerService.exe [1711568 2013-02-25] (G Data Software AG)
R2 IGDCTRL; C:\Program Files\FRITZ!DSL\IGDCTRL.EXE [88888 2009-07-28] (AVM Berlin)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-06-20] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-06-20] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [33792 2011-02-15] ()
S2 SkypeUpdate; D:\Skype\Updater\Updater.exe [162672 2013-07-25] (Skype Technologies)
R2 TSNxGService; C:\Program Files (x86)\G Data\TotalProtection\TSNxG\TSNxGService.exe [257512 2013-02-25] (G Data Software)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [274208 2012-05-04] ()

==================== Drivers (Whitelisted) ====================

R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-06-25] (G Data Software AG)
R3 gddcd; C:\Windows\system32\drivers\gddcd64.sys [77656 2013-07-24] (G Data Software AG)
R1 gddcv; C:\Windows\system32\drivers\gddcv64.sys [58712 2013-07-24] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-07-24] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [62808 2013-05-18] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-07-24] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-05-18] (G Data Software)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-05-18] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-06-25] (G Data Software AG)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [31136 2013-09-01] (REALiX(tm))
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [31136 2013-09-01] (REALiX(tm))
S3 MEMSWEEP2; C:\Windows\system32\F9D2.tmp [6144 2009-06-18] (Sophos Plc)
S3 MEMSWEEP2; C:\Windows\system32\F9D2.tmp [6144 2009-06-18] (Sophos Plc)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [78336 2013-01-03] (Research In Motion Limited)
R3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [530488 2012-09-13] ()
R0 TS4NT; C:\Windows\System32\Drivers\TS4nt.sys [98760 2013-07-24] (G Data Software)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-11 23:08 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-11 23:08 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-11 23:07 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-11 23:07 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-11 23:07 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-11 23:07 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-11 23:07 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-11 23:07 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-11 23:07 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-11 23:07 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-11 23:07 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-11 23:07 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-11 23:07 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 23:07 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-11 23:07 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-11 23:07 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-11 23:07 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-11 23:07 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-11 23:07 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 23:07 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-11 23:07 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-11 23:07 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-11 23:07 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-11 23:07 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-11 23:07 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-11 23:07 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-11 23:07 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-11 23:07 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-11 23:07 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-11 23:07 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-11 23:07 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 10:39 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 10:39 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 10:39 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 10:39 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 10:39 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 10:39 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 10:39 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 10:39 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 10:39 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 10:39 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 10:39 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 10:39 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 10:39 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 10:39 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 10:39 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 10:39 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 10:39 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 10:39 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 10:39 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 10:39 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 10:39 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 10:39 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 10:39 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 10:39 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 10:39 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 10:38 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 10:38 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 18:48 - 2013-09-10 18:48 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-09-10 18:36 - 2013-09-10 18:25 - 281773974 _____ C:\Users\PAUL\Desktop\Registry_TEST.reg
2013-09-10 18:24 - 2013-09-10 18:25 - 281773974 _____ C:\Users\PAUL\Desktop\Registry_OLD.reg
2013-09-10 18:14 - 2013-09-10 18:14 - 00000000 ____D C:\Users\PAUL\Desktop\_CLEANER
2013-09-09 10:27 - 2013-09-09 10:27 - 00000000 ____D C:\AdwCleaner
2013-09-08 22:03 - 2013-09-08 22:11 - 00000000 ____D C:\Users\PAUL\AppData\Roaming\Skype
2013-09-08 22:03 - 2013-09-08 22:03 - 00002477 _____ C:\Users\Public\Desktop\Skype.lnk
2013-09-08 21:59 - 2013-09-12 11:06 - 00000616 _____ C:\Windows\setupact.log
2013-09-08 21:59 - 2013-09-08 21:59 - 00000000 _____ C:\Windows\setuperr.log
2013-09-08 18:34 - 2013-09-08 18:34 - 00007841 _____ C:\Users\PAUL\Documents\trnslate.log
2013-09-08 17:09 - 2013-09-08 17:09 - 00000000 ____D C:\FRST
2013-09-08 11:28 - 2013-09-08 11:28 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-04 16:51 - 2013-09-04 16:51 - 00000000 ____D C:\Users\PAUL\AppData\Roaming\LibreOffice
2013-09-01 16:54 - 2013-09-01 16:54 - 00770279 _____ C:\Users\PAUL\Downloads\video_downloadhelper-4.9.21-fx_sm.zip
2013-09-01 15:33 - 2013-09-01 15:33 - 00031136 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2013-09-01 14:08 - 2013-09-01 14:08 - 00000000 ____D C:\Users\ELFI\AppData\Roaming\FRITZ!
2013-09-01 13:47 - 2013-09-01 13:47 - 00000000 ____D C:\Users\ELFI\AppData\Roaming\GHISLER
2013-09-01 13:45 - 2013-09-01 13:45 - 00000000 ____D C:\Users\ELFI\AppData\Roaming\ATI
2013-09-01 13:44 - 2013-09-08 18:22 - 00000000 ____D C:\Users\ELFI
2013-09-01 13:44 - 2013-09-01 13:45 - 00000000 ____D C:\Users\ELFI\AppData\Roaming\Adobe
2013-09-01 13:44 - 2013-09-01 13:44 - 00000020 ___SH C:\Users\ELFI\ntuser.ini
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Vorlagen
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Startmenü
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Netzwerkumgebung
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Lokale Einstellungen
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Eigene Dateien
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Druckumgebung
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Anwendungsdaten
2013-09-01 13:44 - 2013-03-24 16:30 - 00000000 ____D C:\Users\ELFI\AppData\LocalGoogle
2013-09-01 13:44 - 2013-01-29 14:22 - 00000000 ____D C:\Users\ELFI\AppData\Roaming\TuneUp Software
2013-08-17 14:17 - 2013-08-17 14:17 - 00000000 ____D C:\ProgramData\PhotoGenie
2013-08-14 20:48 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 20:48 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 20:48 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 20:48 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 20:48 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 20:48 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 20:48 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 20:48 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 20:48 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 20:48 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 20:48 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 20:48 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 20:48 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 20:48 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 20:48 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 20:48 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 17:45 - 2013-09-12 11:08 - 00000232 _____ C:\Windows\Tasks\Schirmfoto.job

==================== One Month Modified Files and Folders =======

2013-09-12 11:14 - 2012-08-04 12:45 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-12 11:14 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-12 11:14 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-12 11:10 - 2013-05-14 12:26 - 01224925 _____ C:\Windows\WindowsUpdate.log
2013-09-12 11:09 - 2012-08-05 12:45 - 02784089 _____ C:\Users\PAUL\DesktopStCenter.txt
2013-09-12 11:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2013-09-12 11:08 - 2013-08-14 17:45 - 00000232 _____ C:\Windows\Tasks\Schirmfoto.job
2013-09-12 11:08 - 2012-08-04 12:45 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-12 11:06 - 2013-09-08 21:59 - 00000616 _____ C:\Windows\setupact.log
2013-09-12 11:06 - 2012-09-24 15:17 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2013-09-12 11:06 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-12 11:05 - 2013-07-21 12:30 - 00000000 ____D C:\Users\PAUL\AppData\Roaming\FRITZ!
2013-09-12 11:00 - 2012-10-19 17:42 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-12 09:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-12 09:07 - 2012-08-05 11:51 - 00000000 ___RD C:\Users\PAUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-12 09:07 - 2012-08-05 11:51 - 00000000 ___RD C:\Users\PAUL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-12 08:45 - 2012-08-03 18:03 - 00000000 ____D C:\Windows\Panther
2013-09-12 08:45 - 2009-07-14 06:45 - 00463968 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-11 23:06 - 2013-07-25 16:34 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 23:00 - 2012-08-04 11:44 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 19:00 - 2012-08-04 12:45 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-11 19:00 - 2012-08-04 12:45 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-10 18:48 - 2013-09-10 18:48 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-09-10 18:25 - 2013-09-10 18:36 - 281773974 _____ C:\Users\PAUL\Desktop\Registry_TEST.reg
2013-09-10 18:25 - 2013-09-10 18:24 - 281773974 _____ C:\Users\PAUL\Desktop\Registry_OLD.reg
2013-09-10 18:21 - 2013-08-06 15:54 - 00000000 ____D C:\Users\PAUL\AppData\Roaming\Winamp
2013-09-10 18:14 - 2013-09-10 18:14 - 00000000 ____D C:\Users\PAUL\Desktop\_CLEANER
2013-09-09 20:24 - 2013-08-06 11:22 - 00000000 ____D C:\Users\PAUL\AppData\Roaming\vlc
2013-09-09 13:34 - 2012-09-08 16:19 - 00000226 _____ C:\Users\PAUL\AppData\Roaming\wklnhst.dat
2013-09-09 10:27 - 2013-09-09 10:27 - 00000000 ____D C:\AdwCleaner
2013-09-08 22:11 - 2013-09-08 22:03 - 00000000 ____D C:\Users\PAUL\AppData\Roaming\Skype
2013-09-08 22:03 - 2013-09-08 22:03 - 00002477 _____ C:\Users\Public\Desktop\Skype.lnk
2013-09-08 22:03 - 2012-09-26 16:55 - 00000000 ____D C:\ProgramData\Skype
2013-09-08 21:59 - 2013-09-08 21:59 - 00000000 _____ C:\Windows\setuperr.log
2013-09-08 18:34 - 2013-09-08 18:34 - 00007841 _____ C:\Users\PAUL\Documents\trnslate.log
2013-09-08 18:34 - 2011-03-08 13:15 - 00696870 _____ C:\Windows\system32\perfh007.dat
2013-09-08 18:34 - 2011-03-08 13:15 - 00148134 _____ C:\Windows\system32\perfc007.dat
2013-09-08 18:34 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-08 18:23 - 2012-08-05 11:49 - 00000000 ____D C:\Users\PAUL
2013-09-08 18:22 - 2013-09-01 13:44 - 00000000 ____D C:\Users\ELFI
2013-09-08 18:22 - 2013-07-18 20:06 - 00000000 ____D C:\Users\PAUL\AppData\Local\Samsung
2013-09-08 18:22 - 2013-06-13 17:35 - 00000000 ____D C:\ProgramData\FLEXnet
2013-09-08 18:22 - 2012-09-19 18:58 - 00000000 ____D C:\Program Files (x86)\1&1 Surf-Stick
2013-09-08 18:22 - 2012-08-05 12:10 - 00000000 ____D C:\Users\PAUL\AppData\Roaming\KeePass
2013-09-08 18:22 - 2012-08-05 12:07 - 00000000 ____D C:\Users\PAUL\AppData\Roaming\GHISLER
2013-09-08 18:22 - 2012-08-03 08:39 - 00000000 ____D C:\Users\PEST
2013-09-08 18:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-09-08 17:09 - 2013-09-08 17:09 - 00000000 ____D C:\FRST
2013-09-08 11:28 - 2013-09-08 11:28 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-08 11:12 - 2013-05-22 15:42 - 00000000 ____D C:\Users\PAUL\Desktop\BEARBEITUNG
2013-09-06 13:35 - 2012-11-06 20:44 - 00000000 ____D C:\Users\PAUL\Documents\PhraseExpress
2013-09-06 12:50 - 2012-12-19 12:19 - 00000000 ____D C:\Users\Public\Documents\PhraseExpress
2013-09-04 17:39 - 2012-08-04 12:56 - 00000000 ____D C:\Users\Public\Documents\VR-NetWorld
2013-09-04 16:51 - 2013-09-04 16:51 - 00000000 ____D C:\Users\PAUL\AppData\Roaming\LibreOffice
2013-09-01 16:54 - 2013-09-01 16:54 - 00770279 _____ C:\Users\PAUL\Downloads\video_downloadhelper-4.9.21-fx_sm.zip
2013-09-01 15:40 - 2012-08-05 19:50 - 00000000 ____D C:\Users\PAUL\Desktop\Systemtools
2013-09-01 15:33 - 2013-09-01 15:33 - 00031136 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2013-09-01 14:08 - 2013-09-01 14:08 - 00000000 ____D C:\Users\ELFI\AppData\Roaming\FRITZ!
2013-09-01 13:55 - 2013-07-21 12:38 - 00000000 ____D C:\Users\PEST\AppData\Roaming\FRITZ!
2013-09-01 13:54 - 2012-08-04 18:38 - 00004769 _____ C:\Users\PEST\DesktopStCenter.txt
2013-09-01 13:47 - 2013-09-01 13:47 - 00000000 ____D C:\Users\ELFI\AppData\Roaming\GHISLER
2013-09-01 13:45 - 2013-09-01 13:45 - 00000000 ____D C:\Users\ELFI\AppData\Roaming\ATI
2013-09-01 13:45 - 2013-09-01 13:44 - 00000000 ____D C:\Users\ELFI\AppData\Roaming\Adobe
2013-09-01 13:44 - 2013-09-01 13:44 - 00000020 ___SH C:\Users\ELFI\ntuser.ini
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Vorlagen
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Startmenü
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Netzwerkumgebung
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Lokale Einstellungen
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Eigene Dateien
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Druckumgebung
2013-09-01 13:44 - 2013-09-01 13:44 - 00000000 _SHDL C:\Users\ELFI\Anwendungsdaten
2013-08-26 15:12 - 2012-08-05 11:52 - 00000000 ____D C:\Users\PAUL\Desktop\FOTO_VIDEO
2013-08-17 16:24 - 2012-08-05 11:50 - 00000000 ____D C:\Users\PAUL\AppData\Local\VirtualStore
2013-08-17 14:17 - 2013-08-17 14:17 - 00000000 ____D C:\ProgramData\PhotoGenie
2013-08-17 13:09 - 2013-06-28 14:54 - 00000000 ____D C:\ProgramData\tmp
2013-08-17 11:34 - 2012-08-26 13:17 - 00000000 ____D C:\Users\PAUL\AppData\Roaming\XnView
2013-08-16 13:03 - 2013-07-22 14:50 - 00000000 ____D C:\Users\PAUL\AppData\Local\FRITZ!

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
         

--- --- ---

--- --- ---
][/CODE]

Zitat von schrauber

hi,
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-09-2013 02
Ran by PAUL at 2013-09-12 11:25:25
Running from C:\Users\PAUL\Desktop\_CLEANER\FRST64
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

1&1 Surf-Stick (x32 Version: 1.0.0.2)
7-PDF Split & Merge Version 2.0.4 (Build 112) (x32 Version: 7-PDF Split & Merge - Version 2.0.4 (Build 112))
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
AAVUpdateManager (x32 Version: 18.00.0000)
Adobe Acrobat 8 Professional - English, Français, Deutsch (x32 Version: 8.0.0)
Adobe Bridge 1.0 (x32 Version: 1.0.1.1)
Adobe Common File Installer (x32 Version: 1.00.002)
Adobe Creative Suite 2 (x32)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.168)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Help Center 2.0 (x32 Version: 2.0.0)
Adobe Illustrator CS2 (x32 Version: 12.000.000)
Adobe InCopy CS2 (x32 Version: 004.000.000)
Adobe InDesign CS2 (x32 Version: 004.000.000)
Adobe Photoshop 6.0 (x32 Version: 6.0)
Adobe Photoshop CS2 (x32 Version: 9.0)
Adobe Photoshop Elements 5.0 (x32 Version: 5.0)
Adobe Premiere Pro 2.0 (x32 Version: 2.000.000)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1)
Adobe Stock Photos 1.0 (x32 Version: 1.0.2)
Adobe SVG Viewer 3.0 (x32 Version: 3.0)
ALDI Bestellsoftware 4.12.2 (x32 Version: 4.12.2)
AMD APP SDK Runtime (Version: 2.5.684.213)
AMD Fuel (Version: 2011.0707.2346.40825)
AMD Media Foundation Decoders (Version: 1.0.60707.2331)
AMD VISION Engine Control Center (x32 Version: 2011.0707.2346.40825)
Apple Application Support (x32 Version: 2.3)
Apple Software Update (x32 Version: 2.1.3.127)
AquaSoft DiaShow Studio 6 (x32 Version: 6.6.03)
Ashampoo Slideshow Studio 2012 v.1.0.2 (x32 Version: 1.0.2)
ATI Catalyst Install Manager (Version: 3.0.833.0)
Audacity 2.0.2 (x32 Version: 2.0.2)
AVG 2013 (Version: 13.0.2805)
AVG 2013 (Version: 13.0.2890)
AVG 2013 (Version: 13.0.2897)
AviSynth 2.6 (x32 Version: 2.6.0.2)
AVM FRITZ!fax für FRITZ!Box (x32)
AvsP (x32)
BCL easyConverter 3.0 Licensing Module (BCL License) (x32 Version: 3.0.18)
BCL easyConverter 3.0 Loader SDK Module (x32 Version: 3.0.18)
BCL easyConverter 3.0 Module (Loader, BCL License) (x32 Version: 3.0.18)
BCL easyConverter 3.0 Module (RTF, BCL License) (x32 Version: 3.0.18)
BCL easyConverter 3.0 RTF SDK Module (x32 Version: 3.0.18)
BCL easyConverter 3.0 SDK Module (x32 Version: 3.0.18)
BisonCam (x32 Version: 9.2.1.71.53)
BlackBerry Desktop Software 7.1 (x32 Version: 7.1.0.41)
BurnAware Free 6.4 (x32)
Caesium Version 1.5.0 (x32 Version: 1.5.0)
Catalyst Control Center InstallProxy (x32 Version: 2011.0707.2346.40825)
Catalyst Control Center Localization All (x32 Version: 2011.0707.2346.40825)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0707.2346.40825)
CCC Help Chinese Standard (x32 Version: 2011.0707.2345.40825)
CCC Help Chinese Traditional (x32 Version: 2011.0707.2345.40825)
CCC Help Czech (x32 Version: 2011.0707.2345.40825)
CCC Help Danish (x32 Version: 2011.0707.2345.40825)
CCC Help Dutch (x32 Version: 2011.0707.2345.40825)
CCC Help English (x32 Version: 2011.0707.2345.40825)
CCC Help Finnish (x32 Version: 2011.0707.2345.40825)
CCC Help French (x32 Version: 2011.0707.2345.40825)
CCC Help German (x32 Version: 2011.0707.2345.40825)
CCC Help Greek (x32 Version: 2011.0707.2345.40825)
CCC Help Hungarian (x32 Version: 2011.0707.2345.40825)
CCC Help Italian (x32 Version: 2011.0707.2345.40825)
CCC Help Japanese (x32 Version: 2011.0707.2345.40825)
CCC Help Korean (x32 Version: 2011.0707.2345.40825)
CCC Help Norwegian (x32 Version: 2011.0707.2345.40825)
CCC Help Polish (x32 Version: 2011.0707.2345.40825)
CCC Help Portuguese (x32 Version: 2011.0707.2345.40825)
CCC Help Russian (x32 Version: 2011.0707.2345.40825)
CCC Help Spanish (x32 Version: 2011.0707.2345.40825)
CCC Help Swedish (x32 Version: 2011.0707.2345.40825)
CCC Help Thai (x32 Version: 2011.0707.2345.40825)
CCC Help Turkish (x32 Version: 2011.0707.2345.40825)
ccc-utility64 (Version: 2011.0707.2346.40825)
CCleaner (Version: 4.05)
CDBurnerXP (x32 Version: 4.5.2.4214)
Cisco EAP-FAST Module (x32 Version: 2.2.14)
Cisco LEAP Module (x32 Version: 1.0.19)
Cisco PEAP Module (x32 Version: 1.1.6)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
concept/design Video Jukebox (x32 Version: 1.3.0.0)
Content Manager 2 (x32 Version: 3.4.1.11834)
Corel Applications (x32)
Defraggler (Version: 2.15)
DVD slideshow GUI 0.9.5.4 (x32 Version: 0.9.5.4)
Dynamic Photo Manager (x32 Version: 1.1.00)
EPSON Scan (x32)
EPSON-Drucker-Software
FastStone Image Viewer 4.6 (x32 Version: 4.6)
ffdshow [rev 2975] [2009-05-28] (x32 Version: 1.0)
Fotomatic version 1.4 (x32 Version: 1.4)
Foxit PDF Editor (x32 Version: 2.2.1.1119)
Foxit Reader (x32 Version: 6.0.6.722)
FRANZIS onlineTV 8 (x32 Version: 8.4.0.0)
Free Pdf Perfect Prereq (x32 Version: 1.0.0.66)
Free Studio version 2013 (x32 Version: 6.1.7.717)
FreeOCR v4.2 (x32)
FRITZ!DSL64 (Version: 2.04.03)
G Data TotalProtection 2014 (x32 Version: 24.0.2.5)
GeoSetter 3.4.16 (x32)
Google Chrome (x32 Version: 29.0.1547.66)
Google Update Helper (x32 Version: 1.3.21.153)
GUI for dvdauthor 1.07 (x32 Version: 1.07)
Haali Media Splitter (x32)
Helix YUV Codecs (remove only) (x32)
Hex-Editor MX (x32 Version: 6.0)
Hotkey 3.3043 (x32 Version: 3.3043)
HWiNFO64 Version 4.22 (Version: 4.22)
InfraRecorder 0.53 (x64 edition) (Version: 0.53.00.00)
Inkscape 0.48.4 (x32 Version: 0.48.4)
Java 7 Update 25 (64-bit) (Version: 7.0.250)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
JMicron Ethernet Adapter NDIS Driver (x32 Version: 6.0.26.6)
JMicron Flash Media Controller Driver (x32 Version: 1.0.62.0)
KeePass Password Safe 1.26 (x32 Version: 1.26)
LibreOffice 4.1 Help Pack (German) (x32 Version: 4.1.0.4)
LibreOffice 4.1.0.4 (x32 Version: 4.1.0.4)
Lidl-Fotos (x32)
Light Image Resizer 4.4.2.0 (x32 Version: 4.4.2.0)
Magic Video Converter 8.5 (x32)
MAGIX Foto Designer 7 (x32 Version: 7.0.1.1)
MAGIX Slideshow Maker 2 (x32 Version: 2.0.0.8)
MediaMonkey 4.0 (x32 Version: 4.0)
Mein CEWE FOTOBUCH (x32 Version: 5.0.4)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Office Converter Pack (x32 Version: 11.0.0.0)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000)
Microsoft Office Professional Edition 2003 (x32 Version: 11.0.8173.0)
Microsoft Security Client (Version: 4.3.0215.0)
Microsoft Security Essentials (Version: 4.3.215.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Sync Framework 2.0 Core Components (x64) ENU (Version: 2.0.1578.0)
Microsoft Sync Framework 2.0 Provider Services (x64) ENU (Version: 2.0.1578.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Works (x32 Version: 08.05.0822)
Microsoft Works 6-9 Converter (x32 Version: 9.7.0000)
Mozilla Firefox 20.0 (x86 de) (x32 Version: 19.0)
Mozilla Firefox 23.0.1 (x86 de) (HKCU Version: 23.0.1)
Mozilla Thunderbird 14.0 (x86 de) (x32 Version: 14.0)
Mozilla Thunderbird 17.0.8 (x86 de) (HKCU Version: 17.0.8)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Naviextras Toolbox Prerequesities (x32 Version: 1.0.0)
Opera 12.14 (HKCU Version: 12.14.1738)
Opera Stable 15.0.1147.153 (HKCU Version: 15.0.1147.153)
Paint.NET v3.5.10 (Version: 3.60.0)
PanoramaStudio 2.3 SE ((deinstallieren))
PDF Architect (x32 Version: 1.1.83.9982)
PDF2Word Converter Version 1.0.8 (Build 164, 7-PDF) (x32 Version: PDF2Word Converter - Version 1.0.8 (Build 164))
PDFCreator (x32 Version: 1.7.1)
PDFMate Free PDF Merger 1.0.7 (x32)
PDFMate PDF Converter 1.6.3 (x32)
PDF-Viewer (Version: 2.5.210.0)
Photo Transport (x32 Version: 1.0.1)
PhraseExpress v9.1.44 (x32 Version: 9.1.44)
Picasa 3 (x32 Version: 3.9)
Pixum Fotobuch (x32 Version: 5.0.1)
psynetic®-ImageConverter 3.1 (x32 Version: 3.1)
PureSync (x32 Version: 3.7.1)
PureSync 3.7.1 (x32 Version: 3.7.1)
QuickTime (x32 Version: 7.74.80.86)
Real Alternative 1.9.0 (x32 Version: 1.9.0)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6282)
REALTEK Wireless LAN Driver (x32 Version: 1.00.0174)
Recuva (Version: 1.48)
Revo Uninstaller 1.95 (x32 Version: 1.95)
Samsung Kies (x32 Version: 2.6.0.13064_2)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0)
Schirmfoto (x32 Version: 2013)
Skype™ 6.7 (x32 Version: 6.7.102)
Sophos Anti-Rootkit 1.5.0 (x32 Version: 1.5.0)
Speccy (Version: 1.20)
Stellar Phoenix Windows Data Recovery-Home (x32 Version: 4.2.0.1)
Steuer-Spar-Erklärung 2013 (x32 Version: 18.08)
Synaptics Pointing Device Driver (Version: 15.0.8.0)
SyncToy 2.1 (x64) (Version: 2.1.0)
tango solo (x32 Version: 4.6.3.999)
Total Commander 64-bit (Remove or Repair) (Version: 8.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Video Grabber (HKCU Version: 1.00.0000)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
VLC media player 2.0.8 (x32 Version: 2.0.8)
VR-NetWorld (x32)
WEB.DE MailCheck für Google Chrome (HKCU Version: 1.0.0.0)
WebCam Installer (x32 Version: 4.00)
Winamp (x32 Version: 5.65 )
WinTer Windows Terminplaner (x32)
Word Password Recovery Lastic 1.1 (x32)
XnConvert 1.55 (Version: 1.55)
XnView 2.03 (x32 Version: 2.03)

==================== Restore Points =========================

Could not list Restore Points.


==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ?
Task: C:\Windows\Tasks\ROC_REG_JAN_DELETE.job => ?
Task: C:\Windows\Tasks\Schirmfoto.job => ?

==================== Loaded Modules (whitelisted) =============

2013-02-25 05:16 - 2013-02-25 05:16 - 01514448 _____ (G Data Software AG) C:\Program Files (x86)\G Data\TotalProtection\Shredder\Reisswlf64.dll
2012-08-03 08:43 - 2010-02-11 13:29 - 00396584 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2012-08-03 08:43 - 2010-02-11 13:29 - 00207144 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2013-02-25 04:57 - 2013-02-25 04:57 - 00305104 ____N (G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\BanksafeLDR64.dll
2009-07-28 16:10 - 2009-07-28 16:10 - 00078648 _____ (AVM Berlin) C:\Program Files\FRITZ!DSL\fireapi.dll
2009-07-28 16:10 - 2009-07-28 16:10 - 00083768 _____ (AVM Berlin) C:\Program Files\FRITZ!DSL\igdapi.dll
2009-07-28 16:09 - 2009-07-28 16:09 - 00325944 _____ (AVM Berlin) C:\Program Files\FRITZ!DSL\avmcsock.dll
2009-07-28 16:09 - 2009-07-28 16:09 - 00044856 _____ (AVM Berlin) C:\Program Files\FRITZ!DSL\avmufc.dll
2011-07-07 23:40 - 2011-07-07 23:40 - 00290816 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll
2011-07-07 23:40 - 2011-07-07 23:40 - 00167936 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll
2009-01-20 13:51 - 2009-01-20 13:51 - 00007168 _____ ( ) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atixclib.dll
2011-07-07 23:36 - 2011-07-07 23:36 - 00036864 _____ (AMD) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\FUEL.Implementation.dll
2011-07-07 23:36 - 2011-07-07 23:36 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2011-07-07 23:45 - 2011-07-07 23:45 - 00027648 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll
2011-07-07 23:44 - 2011-07-07 23:44 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-07-28 16:10 - 2009-07-28 16:10 - 00034104 _____ (AVM Berlin) C:\Program Files\FRITZ!DSL\sarah.dll
2009-07-28 16:09 - 2009-07-28 16:09 - 00090936 _____ (AVM Berlin) C:\Program Files\FRITZ!DSL\block.dll

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\ProgramData\TEMP:2683706C


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/12/2013 11:16:42 AM) (Source: Application Hang) (User: )
Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1798

Startzeit: 01ceaf98c27e0e79

Endzeit: 95

Anwendungspfad: C:\Users\PAUL\Desktop\_CLEANER\FRST64\FRST64.exe

Berichts-ID: 0712cc17-1b8c-11e3-9b12-0090f5cc332d

Error: (09/12/2013 11:08:08 AM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (09/12/2013 09:08:45 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (09/12/2013 08:45:35 AM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (09/12/2013 08:42:23 AM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (09/11/2013 05:43:28 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (09/11/2013 10:41:08 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (09/11/2013 10:23:17 AM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (09/10/2013 06:59:23 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (09/10/2013 06:15:07 PM) (Source: Application Hang) (User: )
Description: Programm regedit.exe, Version 6.1.7600.16385 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1ae0

Startzeit: 01ceae4084e8ea53

Endzeit: 14

Anwendungspfad: C:\Windows\regedit.exe

Berichts-ID: 22eccb7e-1a34-11e3-b265-0090f5cc332d


System errors:
=============
Error: (09/12/2013 11:07:08 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
GLogin

Error: (09/12/2013 11:05:10 AM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/12/2013 08:45:34 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
GLogin

Error: (09/12/2013 08:43:02 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007045b

Error: (09/12/2013 08:41:43 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
GLogin

Error: (09/11/2013 10:51:13 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/11/2013 05:42:33 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
GLogin

Error: (09/11/2013 05:40:37 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/11/2013 10:33:25 AM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.

Neue Signaturversion:

Vorherige Signaturversion: 1.157.1576.0

Aktualisierungsquelle: %NT-AUTORITÄT59

Aktualisierungsphase: 4.3.0215.00

Quellpfad: 4.3.0215.01

Signaturtyp: %NT-AUTORITÄT602

Aktualisierungstyp: %NT-AUTORITÄT604

Benutzer: NT-AUTORITÄT\SYSTEM

Aktuelle Modulversion: %NT-AUTORITÄT605

Vorherige Modulversion: %NT-AUTORITÄT606

Fehlercode: %NT-AUTORITÄT607

Fehlerbeschreibung: %NT-AUTORITÄT608

Error: (09/11/2013 10:21:55 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
GLogin


Microsoft Office Sessions:
=========================
Error: (09/12/2013 11:16:42 AM) (Source: Application Hang)(User: )
Description: FRST64.exe3.3.8.1179801ceaf98c27e0e7995C:\Users\PAUL\Desktop\_CLEANER\FRST64\FRST64.exe0712cc17-1b8c-11e3-9b12-0090f5cc332d

Error: (09/12/2013 11:08:08 AM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/12/2013 09:08:45 AM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (09/12/2013 08:45:35 AM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/12/2013 08:42:23 AM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/11/2013 05:43:28 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/11/2013 10:41:08 AM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (09/11/2013 10:23:17 AM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/10/2013 06:59:23 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/10/2013 06:15:07 PM) (Source: Application Hang)(User: )
Description: regedit.exe6.1.7600.163851ae001ceae4084e8ea5314C:\Windows\regedit.exe22eccb7e-1a34-11e3-b265-0090f5cc332d


CodeIntegrity Errors:
===================================
Date: 2013-03-11 21:15:28.023
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\F9D2.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-03-11 21:15:27.831
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\F9D2.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-03-11 20:34:07.980
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\F9D2.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-03-11 20:34:07.801
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\F9D2.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-03-11 20:19:03.421
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\F9D2.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-03-11 20:19:03.230
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\F9D2.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-03-11 19:40:32.139
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\F9D2.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-03-11 19:40:31.954
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\F9D2.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-03-11 19:36:32.729
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\B581.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-03-11 19:36:32.550
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\B581.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 45%
Total physical RAM: 3692.19 MB
Available physical RAM: 2019.59 MB
Total Pagefile: 7382.56 MB
Available Pagefile: 4973.32 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Root) (Fixed) (Total:81.7 GB) (Free:25.96 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Programme) (Fixed) (Total:59.15 GB) (Free:38.99 GB) NTFS
Drive e: (Daten) (Fixed) (Total:157.23 GB) (Free:33.61 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================][/CODE]
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)