WinVista - Virenbefall nach Instalation des ScheinCodec "HDvid"

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 06:37 on 13/09/2013 (Sehu)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-09-2013
Ran by Sehu (administrator) on SP3-HYBRIDORBIT on 13-09-2013 07:38:42
Running from C:\Users\Sehu\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\cmw_srv.exe
() C:\Program Files\Hotspot Shield\bin\hsswd.exe
(Hewlett-Packard Company) c:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\16.8.3.6\ccSvcHst.exe
() C:\Windows\system32\PnkBstrA.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\16.8.3.6\ccSvcHst.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Hewlett-Packard Company) C:\hp\support\hpsysdrv.exe
(NVIDIA Corporation) C:\Windows\System32\nvraidservice.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Sony) C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
() C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
(Panasonic Corporation) C:\Program Files\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
() C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
() C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\hsscp.exe
(Hewlett-Packard) c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
(Iminent) C:\Program Files\Common Files\Umbrella\umbrella.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
() C:\Users\Sehu\Desktop\Defogger.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [hpsysdrv] - c:\hp\support\hpsysdrv.exe [65536 2007-04-18] (Hewlett-Packard Company)
HKLM\...\Run: [NVRaidService] - C:\Windows\system32\nvraidservice.exe [203296 2008-10-03] (NVIDIA Corporation)
HKLM\...\Run: [HP Health Check Scheduler] - c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008 2008-10-09] (Hewlett-Packard)
HKLM\...\Run: [UpdateP2GoShortCut] - c:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)
HKLM\...\Run: [UpdatePDIRShortCut] - c:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)
HKLM\...\Run: [UpdatePSTShortCut] - c:\Program Files\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe [210216 2008-09-11] (CyberLink Corp.)
HKLM\...\Run: [HP Software Update] - c:\Program Files\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-08-30] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] - C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-26] (APN)
HKLM\...\Run: [IminentMessenger] - C:\Program Files\Iminent\Iminent.Messengers.exe
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [Facebook Update] - C:\Users\Sehu\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [Sony PC Companion] - C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
HKCU\...\Run: [KPeerNexonEU] - C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe [438272 2013-04-01] (NEXON Inc.)
MountPoints2: {6778fa2f-97c1-11e2-a009-002354f0bf12} - J:\Startme.exe
HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-10-17] (Hewlett-Packard)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Presario&pf=cndt
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.iminent.com/?appId=F2327F0E-6A0E-4767-9B9A-32837652B84F
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Presario&pf=cndt
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Presario&pf=cndt
URLSearchHook: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll No File
URLSearchHook: (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File
SearchScopes: HKLM - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552
SearchScopes: HKLM - {18237890-2735-480A-B070-1E6F6E31D14A} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcndtie7-de-de
SearchScopes: HKLM - {2F9C5E29-E769-47B1-9E31-112F6A113055} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552
SearchScopes: HKLM - {B7F50122-58FC-4823-A630-7744ECB0C208} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
SearchScopes: HKLM - {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://start.iminent.com/?appId=F2327F0E-6A0E-4767-9B9A-32837652B84F&ref=toolbox&q={searchTerms}
SearchScopes: HKCU - DefaultScope {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://start.iminent.com/?appId=F2327F0E-6A0E-4767-9B9A-32837652B84F&ref=toolbox&q={searchTerms}
SearchScopes: HKCU - {18237890-2735-480A-B070-1E6F6E31D14A} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcndtie7-de-de
SearchScopes: HKCU - {2F9C5E29-E769-47B1-9E31-112F6A113055} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
SearchScopes: HKCU - {B7F50122-58FC-4823-A630-7744ECB0C208} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
SearchScopes: HKCU - {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://start.iminent.com/?appId=F2327F0E-6A0E-4767-9B9A-32837652B84F&ref=toolbox&q={searchTerms}
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: HDvid Codec V1 - {11111111-1111-1111-1111-110311431162} - C:\Program Files\HDvid Codec V1\HDvid Codec V1-bho.dll (installdaddy)
BHO: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.8.3.6\coIEPlg.dll (Symantec Corporation)
BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.8.3.6\IPSBHO.DLL (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files\Iminent\Iminent.WebBooster.InternetExplorer.dll No File
BHO: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.8.3.6\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll No File
Toolbar: HKLM - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU -Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.8.3.6\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU -Hotspot Shield Toolbar - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} - C:\Program Files\Hotspot_Shield\prxtbHots.dll No File
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.8.3.6\coIEPlg.dll (Symantec Corporation)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Sehu\AppData\Roaming\Mozilla\Firefox\Profiles\vsv5foeh.default
FF user.js: detected! => C:\Users\Sehu\AppData\Roaming\Mozilla\Firefox\Profiles\vsv5foeh.default\user.js
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Sehu\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Users\Sehu\AppData\Roaming\Mozilla\Firefox\Profiles\vsv5foeh.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\StartWeb.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: toolbar - C:\Users\Sehu\AppData\Roaming\Mozilla\Firefox\Profiles\vsv5foeh.default\Extensions\toolbar@web.de.xpi
FF Extension: toolbar_AVIRA-V7 - C:\Users\Sehu\AppData\Roaming\Mozilla\Firefox\Profiles\vsv5foeh.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files\Mozilla Firefox\extensions\afurladvisor@anchorfree.com
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{8545daff-ad1e-493f-a37e-eed1ac79682b}
FF Extension: Hotspot Shield Extension - C:\Program Files\Mozilla Firefox\browser\extensions\afext@anchorfree.com
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\

Chrome: 
=======
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Sehu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\20.53263_0
CHR Extension: (Docs) - C:\Users\Sehu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Sehu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Sehu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Sehu\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Iminent) - C:\Users\Sehu\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\7.36.1.1_0
CHR Extension: (Gmail) - C:\Users\Sehu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (Iminent Chrome Toolbar) - C:\Users\Sehu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb\2.0_0
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx
CHR HKLM\...\Chrome\Extension: [dnllcmllkjofnojidnaknldfehfhehoo] - C:\Program Files\HDvidCodec.com\HDvidCodec10.crx

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-08-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-30] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.)
S3 Boonty Games; C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe [69120 2011-10-25] (BOONTY)
R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard)
R2 hshld; C:\Program Files\Hotspot Shield\bin\cmw_srv.exe [852264 2013-08-16] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE [78512 2013-08-13] ()
R2 HssWd; C:\Program Files\Hotspot Shield\bin\hsswd.exe [555304 2013-08-16] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\16.8.3.6\diMaster.dll [135024 2011-10-31] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-06-26] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 SProtection; C:\Program Files\Common Files\Umbrella\umbrella.exe [2868544 2013-08-07] (Iminent)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [271360 2012-06-25] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-08-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-07-10] (Avira Operations GmbH & Co. KG)
R1 BHDrvx86; C:\Windows\System32\Drivers\NIS\1008030.006\BHDrvx86.sys [259632 2010-01-20] (Symantec Corporation)
R1 ccHP; C:\Windows\System32\Drivers\NIS\1008030.006\ccHPx86.sys [467592 2011-10-31] (Symantec Corporation)
R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [374392 2011-11-08] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [106104 2011-11-08] (Symantec Corporation)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [41160 2013-08-13] (AnchorFree Inc.)
R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20111226.001\IDSvix86.sys [368248 2011-10-26] (Symantec Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [18048 2012-06-25] ()
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20111227.032\NAVENG.SYS [86136 2011-10-27] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20111227.032\NAVEX15.SYS [1576312 2011-10-27] (Symantec Corporation)
S3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [289280 2007-12-28] (NETGEAR Inc.                           )
R1 RtlProt; C:\Windows\System32\DRIVERS\rtlprot.sys [25896 2007-04-23] (Windows (R) Codename Longhorn DDK provider)
S3 SRTSP; C:\Windows\System32\Drivers\NIS\1008030.006\SRTSP.SYS [308272 2010-01-20] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NIS\1008030.006\SRTSPX.SYS [43696 2010-01-20] (Symantec Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-07-10] (Avira GmbH)
R0 SymEFA; C:\Windows\System32\drivers\NIS\1008030.006\SYMEFA.SYS [310320 2010-01-20] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [124976 2011-10-29] (Symantec Corporation)
S3 SYMFW; C:\Windows\System32\Drivers\NIS\1008030.006\SYMFW.SYS [89976 2011-09-22] (Symantec Corporation)
R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [25648 2010-01-20] (Symantec Corporation)
S3 SYMNDISV; C:\Windows\System32\Drivers\NIS\1008030.006\SYMNDISV.SYS [48760 2011-09-22] (Symantec Corporation)
R1 SYMTDI; C:\Windows\System32\Drivers\NIS\1008030.006\SYMTDI.SYS [217464 2011-09-22] (Symantec Corporation)
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [33512 2012-08-01] (AnchorFree Inc)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [37064 2013-04-24] (Anchorfree Inc.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 PCD5SRVC{BD6912E3-AC9D80E8-05040000}; \??\C:\PROGRA~1\PC-DOC~1\PCD5SRVC.pkms [x]
S3 SYMDNS; \??\C:\Windows\system32\drivers\NIS\1000000.07D\SYMDNS.SYS [x]
S3 SYMREDRV; \??\C:\Windows\system32\drivers\NIS\1000000.07D\SYMREDRV.SYS [x]
U3 kfadrfow; \??\C:\Users\Sehu\AppData\Local\Temp\kfadrfow.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-13 06:59 - 2013-09-13 06:59 - 00377856 _____ C:\Users\Sehu\Desktop\lvjelivt.exe
2013-09-13 06:42 - 2013-09-13 06:42 - 00000000 ____D C:\FRST
2013-09-13 06:38 - 2013-09-13 06:38 - 01088653 _____ (Farbar) C:\Users\Sehu\Desktop\FRST.exe
2013-09-13 06:37 - 2013-09-13 06:37 - 00000470 _____ C:\Users\Sehu\Desktop\defogger_disable.log
2013-09-13 06:37 - 2013-09-13 06:37 - 00000000 _____ C:\Users\Sehu\defogger_reenable
2013-09-13 06:34 - 2013-09-13 06:34 - 00050477 _____ C:\Users\Sehu\Desktop\Defogger.exe
2013-09-13 06:31 - 2013-09-13 06:33 - 00039870 _____ C:\Users\Sehu\Desktop\AVIRA-Report.txt
2013-09-13 03:12 - 2013-09-13 03:13 - 00000000 ____D C:\Users\Sehu\AppData\Roaming\iminent
2013-09-13 03:12 - 2013-09-13 03:12 - 00000611 _____ C:\Windows\system32\InstallUtil.InstallLog
2013-09-13 03:12 - 2013-09-13 03:12 - 00000000 ____D C:\ProgramData\Iminent
2013-09-13 03:12 - 2013-09-13 03:12 - 00000000 ____D C:\Program Files\Common Files\Umbrella
2013-09-13 03:11 - 2013-09-13 03:11 - 00001198 _____ C:\Windows\Tasks\HDvid Codec V1-updater.job
2013-09-13 03:11 - 2013-09-13 03:11 - 00001192 _____ C:\Windows\Tasks\HDvid Codec V1-codedownloader.job
2013-09-13 03:11 - 2013-09-13 03:11 - 00001102 _____ C:\Windows\Tasks\HDvid Codec V1-enabler.job
2013-09-13 03:10 - 2013-09-13 03:11 - 00000000 ____D C:\Program Files\HDvid Codec V1
2013-09-13 03:10 - 2013-09-13 03:10 - 00000000 ____D C:\Users\Sehu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com
2013-09-13 02:38 - 2013-09-13 02:38 - 97531747 _____ C:\Windows\system32\�ጄ癌Â
2013-09-12 21:17 - 2013-09-12 21:17 - 00000362 _____ C:\Users\Sehu\Desktop\Download.lnk
2013-09-12 00:49 - 2013-08-13 01:06 - 00041160 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys
2013-09-11 07:51 - 2013-09-11 07:51 - 00013627 _____ C:\Users\Public\Documents\is Geburtstog's-Liedl.odt
2013-09-11 07:50 - 2013-09-11 07:51 - 00000000 ____D C:\Users\Sehu\Documents\3 Rest
2013-09-10 03:09 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-10 03:09 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-10 03:09 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-10 03:09 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-10 03:09 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-10 03:09 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-10 03:09 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-10 03:09 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-10 03:09 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-10 03:09 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-10 03:09 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-10 03:09 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-10 03:09 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-10 03:09 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-10 03:09 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-10 03:09 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-09 23:53 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-09 23:53 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2013-08-30 09:23 - 2013-08-30 09:26 - 00041368 _____ C:\Users\Public\Documents\kokusnuss.odt
2013-08-27 18:13 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-27 05:37 - 2013-09-11 09:03 - 00000000 ____D C:\Users\Sehu\Documents\2 de sapientibus pretiosis tempis
2013-08-14 22:13 - 2013-08-14 22:20 - 00000000 ____D C:\Users\Sehu\Documents\1 EGE
2013-08-14 12:05 - 2013-09-11 07:52 - 00117760 ___SH C:\Users\Public\Documents\Thumbs.db
2013-08-14 12:05 - 2013-08-14 02:43 - 00074970 _____ C:\Users\Public\Documents\Bilder.odt
2013-08-14 12:05 - 2013-08-14 02:37 - 00013399 _____ C:\Users\Public\Documents\Hochzeiten.odt
2013-08-14 12:04 - 2013-08-14 12:05 - 00001310 _____ C:\Users\Sehu\Desktop\Public.lnk
2013-08-14 12:03 - 2013-08-14 12:03 - 00000378 _____ C:\Users\Sehu\Desktop\Dokumente.lnk
2013-08-14 00:16 - 2013-08-14 00:16 - 00000000 ____D C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2013-09-13 07:39 - 2013-07-15 05:34 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-13 07:22 - 2012-01-24 21:35 - 00000000 ____D C:\Users\Sehu\AppData\Roaming\Skype
2013-09-13 07:22 - 2011-10-05 19:01 - 01789997 _____ C:\Windows\WindowsUpdate.log
2013-09-13 07:09 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-13 07:09 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-13 06:59 - 2013-09-13 06:59 - 00377856 _____ C:\Users\Sehu\Desktop\lvjelivt.exe
2013-09-13 06:54 - 2013-02-07 16:59 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-13 06:54 - 2012-05-15 18:44 - 00001134 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2863936185-2516472391-3116331999-1000UA.job
2013-09-13 06:42 - 2013-09-13 06:42 - 00000000 ____D C:\FRST
2013-09-13 06:38 - 2013-09-13 06:38 - 01088653 _____ (Farbar) C:\Users\Sehu\Desktop\FRST.exe
2013-09-13 06:37 - 2013-09-13 06:37 - 00000470 _____ C:\Users\Sehu\Desktop\defogger_disable.log
2013-09-13 06:37 - 2013-09-13 06:37 - 00000000 _____ C:\Users\Sehu\defogger_reenable
2013-09-13 06:37 - 2011-10-05 18:05 - 00000000 ____D C:\Users\Sehu
2013-09-13 06:34 - 2013-09-13 06:34 - 00050477 _____ C:\Users\Sehu\Desktop\Defogger.exe
2013-09-13 06:33 - 2013-09-13 06:31 - 00039870 _____ C:\Users\Sehu\Desktop\AVIRA-Report.txt
2013-09-13 04:39 - 2013-07-15 05:34 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-13 03:34 - 2012-10-24 16:48 - 00000000 ____D C:\Program Files\Quadriga Games
2013-09-13 03:32 - 2012-01-09 19:07 - 00000000 ____D C:\Program Files\NosTale(DE)
2013-09-13 03:31 - 2008-12-01 07:35 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-09-13 03:28 - 2013-06-25 05:09 - 00000000 ____D C:\Program Files\Activision
2013-09-13 03:26 - 2008-12-01 08:09 - 00000000 ____D C:\Program Files\SMINST
2013-09-13 03:13 - 2013-09-13 03:12 - 00000000 ____D C:\Users\Sehu\AppData\Roaming\iminent
2013-09-13 03:12 - 2013-09-13 03:12 - 00000611 _____ C:\Windows\system32\InstallUtil.InstallLog
2013-09-13 03:12 - 2013-09-13 03:12 - 00000000 ____D C:\ProgramData\Iminent
2013-09-13 03:12 - 2013-09-13 03:12 - 00000000 ____D C:\Program Files\Common Files\Umbrella
2013-09-13 03:11 - 2013-09-13 03:11 - 00001198 _____ C:\Windows\Tasks\HDvid Codec V1-updater.job
2013-09-13 03:11 - 2013-09-13 03:11 - 00001192 _____ C:\Windows\Tasks\HDvid Codec V1-codedownloader.job
2013-09-13 03:11 - 2013-09-13 03:11 - 00001102 _____ C:\Windows\Tasks\HDvid Codec V1-enabler.job
2013-09-13 03:11 - 2013-09-13 03:10 - 00000000 ____D C:\Program Files\HDvid Codec V1
2013-09-13 03:10 - 2013-09-13 03:10 - 00000000 ____D C:\Users\Sehu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com
2013-09-13 02:47 - 2012-06-05 21:23 - 00000000 ____D C:\Users\Sehu\Desktop\Bilder
2013-09-13 02:38 - 2013-09-13 02:38 - 97531747 _____ C:\Windows\system32\�ጄ癌Â
2013-09-13 01:09 - 2008-12-01 07:37 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-13 01:09 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-13 00:15 - 2006-11-02 15:01 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-12 21:17 - 2013-09-12 21:17 - 00000362 _____ C:\Users\Sehu\Desktop\Download.lnk
2013-09-12 21:15 - 2012-03-27 17:48 - 00016299 _____ C:\Users\Sehu\Desktop\p(B).ods
2013-09-12 21:14 - 2012-09-01 21:42 - 00016823 _____ C:\Users\Sehu\Desktop\Train-list.ods
2013-09-12 18:54 - 2012-05-15 18:44 - 00001112 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2863936185-2516472391-3116331999-1000Core.job
2013-09-12 02:02 - 2012-02-27 18:22 - 00000000 ____D C:\Users\Sehu\AppData\Roaming\.minecraft
2013-09-12 00:49 - 2012-08-26 13:06 - 00000000 ____D C:\Program Files\Hotspot Shield
2013-09-12 00:48 - 2012-08-26 13:06 - 00003595 _____ C:\Windows\certutil.log
2013-09-11 23:54 - 2013-02-07 16:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-11 23:54 - 2011-10-05 18:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-11 20:32 - 2013-03-29 20:19 - 00221338 _____ C:\Windows\DPINST.LOG
2013-09-11 09:03 - 2013-08-27 05:37 - 00000000 ____D C:\Users\Sehu\Documents\2 de sapientibus pretiosis tempis
2013-09-11 07:52 - 2013-08-14 12:05 - 00117760 ___SH C:\Users\Public\Documents\Thumbs.db
2013-09-11 07:51 - 2013-09-11 07:51 - 00013627 _____ C:\Users\Public\Documents\is Geburtstog's-Liedl.odt
2013-09-11 07:51 - 2013-09-11 07:50 - 00000000 ____D C:\Users\Sehu\Documents\3 Rest
2013-09-10 11:59 - 2011-10-25 12:10 - 00000052 _____ C:\Windows\system32\DOErrors.log
2013-09-10 09:08 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-09-10 09:01 - 2006-11-02 14:47 - 00363960 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-10 03:06 - 2006-11-02 12:33 - 01467838 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-10 03:04 - 2013-08-13 04:08 - 00000000 ____D C:\Windows\system32\MRT
2013-09-10 03:01 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-09-09 20:50 - 2012-12-19 08:19 - 00000000 ____D C:\Users\Sehu\AppData\Roaming\Might & Magic Heroes VI
2013-09-09 19:27 - 2011-10-05 18:10 - 00000318 _____ C:\Windows\Tasks\HPCeeScheduleForSehu.job
2013-08-30 14:14 - 2013-07-11 10:16 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-30 14:14 - 2013-07-11 10:16 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-30 09:26 - 2013-08-30 09:23 - 00041368 _____ C:\Users\Public\Documents\kokusnuss.odt
2013-08-29 16:39 - 2013-06-11 06:38 - 00000000 ____D C:\Program Files\Origin
2013-08-29 13:04 - 2013-07-06 12:57 - 00017090 _____ C:\Users\Sehu\Desktop\Fin.ods
2013-08-27 23:22 - 2011-10-09 12:48 - 00000000 ___RD C:\Users\Sehu\Desktop\sp³-Musik
2013-08-27 15:30 - 2013-02-25 04:16 - 00000119 _____ C:\Users\Sehu\Desktop\g.txt
2013-08-25 21:55 - 2012-05-12 21:04 - 00000000 ____D C:\Users\Sehu\AppData\Roaming\vlc
2013-08-25 14:07 - 2012-01-09 19:10 - 00000000 ____D C:\Users\Sehu\Desktop\altes
2013-08-15 05:28 - 2012-08-10 10:09 - 00000000 ____D C:\Users\Sehu\Documents\1 CVJM
2013-08-15 05:19 - 2012-01-27 19:01 - 00056832 _____ C:\Users\Sehu\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-14 22:20 - 2013-08-14 22:13 - 00000000 ____D C:\Users\Sehu\Documents\1 EGE
2013-08-14 22:19 - 2013-04-21 13:31 - 00000000 ____D C:\Users\Sehu\Documents\2 FINA
2013-08-14 13:14 - 2012-05-06 17:10 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-08-14 13:03 - 2013-02-18 11:16 - 00000000 ____D C:\Users\Sehu\Documents\2 de quaestionibus existentiam
2013-08-14 12:05 - 2013-08-14 12:04 - 00001310 _____ C:\Users\Sehu\Desktop\Public.lnk
2013-08-14 12:03 - 2013-08-14 12:03 - 00000378 _____ C:\Users\Sehu\Desktop\Dokumente.lnk
2013-08-14 02:46 - 2013-07-10 13:24 - 00000000 ____D C:\Users\Sehu\Documents\LFS
2013-08-14 02:43 - 2013-08-14 12:05 - 00074970 _____ C:\Users\Public\Documents\Bilder.odt
2013-08-14 02:37 - 2013-08-14 12:05 - 00013399 _____ C:\Users\Public\Documents\Hochzeiten.odt
2013-08-14 00:16 - 2013-08-14 00:16 - 00000000 ____D C:\Program Files\Mozilla Firefox

Some content of TEMP:
====================
C:\Users\Sehu\AppData\Local\Temp\AskSLib.dll
C:\Users\Sehu\AppData\Local\Temp\AutoRun.exe
C:\Users\Sehu\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Sehu\AppData\Local\Temp\A~NSISu_.exe
C:\Users\Sehu\AppData\Local\Temp\CmdLineExt02.dll
C:\Users\Sehu\AppData\Local\Temp\conduitinstaller.exe
C:\Users\Sehu\AppData\Local\Temp\contentDATs.exe
C:\Users\Sehu\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Sehu\AppData\Local\Temp\drm_dyndata_7330005.dll
C:\Users\Sehu\AppData\Local\Temp\EAInstall.dll
C:\Users\Sehu\AppData\Local\Temp\ffunzip.exe
C:\Users\Sehu\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe
C:\Users\Sehu\AppData\Local\Temp\GameuxInstallHelper.dll
C:\Users\Sehu\AppData\Local\Temp\hssinst.dll
C:\Users\Sehu\AppData\Local\Temp\i4jdel0.exe
C:\Users\Sehu\AppData\Local\Temp\i4jdel1.exe
C:\Users\Sehu\AppData\Local\Temp\i4jdel2.exe
C:\Users\Sehu\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Sehu\AppData\Local\Temp\Play.exe
C:\Users\Sehu\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\Sehu\AppData\Local\Temp\SIntf16.dll
C:\Users\Sehu\AppData\Local\Temp\SIntf32.dll
C:\Users\Sehu\AppData\Local\Temp\SIntfNT.dll
C:\Users\Sehu\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Sehu\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Sehu\AppData\Local\Temp\_is64CB.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-13 01:15

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 24-09-2013
Ran by Sehu at 2013-09-13 07:39:25
Running from C:\Users\Sehu\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Disabled - Out of date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Disabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Disabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

ActiveCheck component for HP Active Support Library (Version: 1.1.18.0)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (Version: 11.8.800.168)
Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)
Anno 1701 (Version: 1.00)
ANNO 2070 (Version: 1.0.0.0)
Atlantica (Version: 31404)
Avira Free Antivirus (Version: 13.0.0.4052)
Avira SearchFree Toolbar plus Web Protection (Version: 12.2.2.663)
Call of Duty(R) - World at War(TM) (Version: 1.0)
CDBurnerXP (Version: 4.5.0.3661)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
CyberLink DVD Suite Deluxe (Version: 6.0.2111)
Emergency4 (Version: 1.03.001)
Facebook Video Calling 1.2.0.287 (Version: 1.2.287)
Feeding Frenzy Deluxe 5.7.18.1 (Version: 5.7.18.1)
Forte 3 - Free Edition (Version: 3)
Forte 3 - Home Edition (Version: 3)
Free DWG Viewer 6.3 (Version: 6.3)
Frets On Fire (Version: 1.3.110-win32)
Google Chrome (Version: 29.0.1547.76)
Google Update Helper (Version: 1.3.21.153)
Hardware Diagnose Tools (Version: 5.1.4976.17)
Harry Potter und der Gefangene von Askaban(TM)
Harry Potter und der Orden des Phönix™
HDvid Codec V1 (Version: 1.27.153.8)
Heroes of Might and Magic V
Hotspot Shield 3.13 (Version: 3.13)
Hotspot Shield Toolbar (Version: 6.8.5.1)
HP Active Support Library (Version: 3.1.9.1)
HP Customer Experience Enhancements (Version: 5.7.0.2784)
HP Demo (Version: 1.00.0000)
HP Recovery Manager RSS (Version: 91.0.0.10)
HP Total Care Advisor (Version: 2.4.5106.2815)
HP Total Care Setup (Version: 1.1.1983.2818)
HP Update (Version: 4.000.012.001)
HPAsset component for HP Active Support Library (Version: 2.0.64.3)
Icy Tower v1.5
Iminent (Version: 6.37.21.0)
IrfanView (remove only) (Version: 4.32)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
LabelPrint (Version: 2.5.0904)
LibreOffice 4.1.0.4 (Version: 4.1.0.4)
LightScribe System Software  1.14.25.1 (Version: 1.14.25.1)
McAfee Security Scan Plus (Version: 3.0.318.3)
Media Go (Version: 2.4.256)
Media Go Video Playback Engine 1.116.106.02030 (Version: 1.116.106.02030)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft SQL Server Compact 3.5 SP2 ENU (Version: 3.5.8080.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
Might & Magic Heroes VI (Version: 1.8)
Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
muvee Reveal (Version: 7.0.35.7315)
My HP Games (Version: 1.0.0.62)
Need for Speed™ Most Wanted (Version: 1.0.0.0)
NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.01.10)
Norton Internet Security (Version: 16.0.0.125)
Norton Internet Security (Version: 16.8.3.6)
Notepad++ (Version: 6.1.2)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Drivers (Version: 1.10)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA PhysX (Version: 9.10.0513)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OpenAL
Origin (Version: 9.0.13.2141)
Pflanzen gegen Zombies
PHOTOfunSTUDIO 8.0 SE (Version: 8.00.310)
Plants vs. Zombies
PlayStation(R)Store (Version: 4.14.6.15183)
Power Sound Editor Free
Power2Go (Version: 6.0.2112)
PowerDirector (Version: 7.0.2202)
PunkBuster Services (Version: 0.986)
Python 2.5.2 (Version: 2.5.2150)
Realtek High Definition Audio Driver (Version: 6.0.1.5708)
Regnum Online 1.6.2 (Version: 1.6.2)
Santa Claus in Trouble
SharpDevelop 3.2 (Version: 3.2.5777)
Skype™ 6.6 (Version: 6.6.106)
Sony Ericsson Update Engine (Version: 2.13.7.201306141231)
Sony PC Companion 2.10.174 (Version: 2.10.174)
SPORE Creature Creator Trial Edition (Version: 1.00.0000)
TeamSpeak 3 Client (Version: 3.0.6)
Testversion von Microsoft Office Home and Student 2007
TexMakerX 2.1 (Version: 2.1)
Ubisoft Game Launcher (Version: 1.0.0.0)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
VirtualDJ Home FREE (Version: 7.3)
VLC media player 2.0.1 (Version: 2.0.1)

==================== Restore Points  =========================

08-07-2013 16:31:44 Geplanter Prüfpunkt
09-07-2013 12:12:11 Geplanter Prüfpunkt
09-07-2013 13:50:36 Installed LibreOffice 4.1.0.4
10-07-2013 07:18:09 Removed LibreOffice 3.4
10-07-2013 07:26:57 Installed LibreOffice 4.1.0.4
12-07-2013 15:05:19 Geplanter Prüfpunkt
14-07-2013 13:41:58 Geplanter Prüfpunkt
11-08-2013 20:55:50 Geplanter Prüfpunkt
13-08-2013 02:00:13 Windows Update
14-08-2013 02:39:48 Geplanter Prüfpunkt
15-08-2013 00:02:18 Geplanter Prüfpunkt
25-08-2013 16:28:15 Geplanter Prüfpunkt
27-08-2013 10:42:08 Geplanter Prüfpunkt
28-08-2013 07:50:02 Windows Update
28-08-2013 22:44:12 Geplanter Prüfpunkt
29-08-2013 12:49:34 Geplanter Prüfpunkt
30-08-2013 04:37:01 Geplanter Prüfpunkt
31-08-2013 14:02:11 Geplanter Prüfpunkt
31-08-2013 14:13:51 Sony Ericsson PC Suite Drivers
10-09-2013 01:00:16 Windows Update
10-09-2013 20:38:34 Geplanter Prüfpunkt
11-09-2013 09:47:52 Geplanter Prüfpunkt
11-09-2013 18:30:37 Sony Ericsson PC Suite Drivers
12-09-2013 16:02:43 Geplanter Prüfpunkt
13-09-2013 01:27:12 Removed Call of Duty(R) 4 - Modern Warfare(TM) Demo

==================== Hosts content: ==========================

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0B79B91A-B855-4F91-94EB-B18B1CE44EA1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-15] (Google Inc.)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {4D9CD88D-20C3-4064-A55D-8DC754DC8D14} - System32\Tasks\HDvid Codec V1-enabler => C:\Program Files\HDvid Codec V1\HDvid Codec V1-enabler.exe [2013-09-13] (installdaddy)
Task: {64BF4B9C-5F10-499D-A6FB-713F7708DB69} - System32\Tasks\PCDRScheduledMaintenance => C:\Program Files\PC-Doctor for Windows\pcdr5cuiw32.exe [2008-09-10] (PC-Doctor, Inc.)
Task: {6702E190-9A7C-4914-90A4-494CC7EC0C10} - System32\Tasks\HDvid Codec V1-codedownloader => C:\Program Files\HDvid Codec V1\HDvid Codec V1-codedownloader.exe [2013-09-13] (installdaddy)
Task: {75679A08-5FDB-4013-8A42-E01F0BAD7CB2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-11] (Adobe Systems Incorporated)
Task: {80935233-B66B-4F63-8B49-0B10EFEBEB30} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2863936185-2516472391-3116331999-1000Core => C:\Users\Sehu\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\system32\pla.dll [2008-01-21] (Microsoft Corporation)
Task: {AAA78A43-C08C-4326-B1C6-8B021BF7C0F5} - System32\Tasks\HP Health Check => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09] (Hewlett-Packard)
Task: {B7B128D4-0C81-4A70-831F-7BD5A0D2F357} - System32\Tasks\HDvid Codec V1-updater => C:\Program Files\HDvid Codec V1\HDvid Codec V1-updater.exe [2013-09-13] (installdaddy)
Task: {BBA62274-3DE9-4266-AFEC-7E1C1A2A5DDA} - System32\Tasks\HPCeeScheduleForSehu => C:\Program Files\hewlett-packard\sdp\ceement\HPCEE.exe [2008-09-16] (Hewlett-Packard)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {EBD74AFD-792F-4FFE-BB2E-872C35DC5CA1} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2863936185-2516472391-3116331999-1000UA => C:\Users\Sehu\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {F31F0CF6-F890-41BA-896F-8F5C4E26F1E9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-15] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2863936185-2516472391-3116331999-1000Core.job => C:\Users\Sehu\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2863936185-2516472391-3116331999-1000UA.job => C:\Users\Sehu\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HDvid Codec V1-codedownloader.job => C:\Program Files\HDvid Codec V1\HDvid Codec V1-codedownloader.exe
Task: C:\Windows\Tasks\HDvid Codec V1-enabler.job => C:\Program Files\HDvid Codec V1\HDvid Codec V1-enabler.exe
Task: C:\Windows\Tasks\HDvid Codec V1-updater.job => C:\Program Files\HDvid Codec V1\HDvid Codec V1-updater.exe
Task: C:\Windows\Tasks\HPCeeScheduleForSehu.job => C:\Program Files\hewlett-packard\sdp\ceement\HPCEE.exe
Task: C:\Windows\Tasks\PCDRScheduledMaintenance.job => C:\Program Files\PC-Doctor for Windows\pcdr5cuiw32.exe

==================== Loaded Modules (whitelisted) =============

2008-12-01 08:08 - 2008-12-01 08:08 - 00791920 _____ (Symantec Corporation) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\CLT\cltLMSx.dll
2012-12-24 04:05 - 2013-02-26 01:22 - 15129960 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2009-09-27 18:47 - 2013-01-18 16:20 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2008-12-01 07:34 - 2008-10-03 16:24 - 00055808 _____ (NVIDIA Corporation) C:\Windows\System32\NvRaidSvDE.dll
2006-11-02 14:35 - 2006-11-02 14:35 - 00116736 _____ (Microsoft Corporation) C:\Windows\eHome\ehProxy.dll
2013-06-21 10:53 - 2013-06-21 10:53 - 00088680 ____R (Skype Technologies) C:\Program Files\Skype\Updater\Updater.dll
2013-03-29 20:18 - 2013-05-21 08:57 - 00593920 _____ (Avanquest Software) C:\Program Files\Sony\Sony PC Companion\NewUI.dll
2013-03-29 20:18 - 2013-02-05 12:49 - 00701952 _____ (Avanquest Software) C:\Program Files\Sony\Sony PC Companion\bvrpctln.dll
2013-03-29 20:18 - 2012-04-30 11:57 - 00039936 _____ () C:\Program Files\Sony\Sony PC Companion\TMonitorAPI.dll
2013-03-29 20:18 - 2013-08-27 09:26 - 00920064 _____ (Avanquest Software) C:\Program Files\Sony\Sony PC Companion\Device.dll
2013-03-29 20:18 - 2013-05-17 10:51 - 00207872 _____ () C:\Program Files\Sony\Sony PC Companion\MExplorer.dll
2013-03-29 20:18 - 2011-04-04 14:14 - 00113664 _____ (Avanquest Software) C:\Program Files\Sony\Sony PC Companion\WUNPACLN.dll
2013-03-29 20:18 - 2013-07-24 11:10 - 00991232 _____ (Avanquest Software) C:\Program Files\Sony\Sony PC Companion\PCCompanion.dll
2013-03-29 20:18 - 2012-12-26 15:44 - 00287744 _____ (Avanquest Software) C:\Program Files\Sony\Sony PC Companion\PluginManager.dll
2013-03-29 20:18 - 2013-04-23 17:27 - 00342528 _____ (TODO: <Company name>) C:\Program Files\Sony\Sony PC Companion\PhoneUpdateTools.dll
2013-03-29 20:18 - 2012-07-11 17:39 - 00329728 _____ (Avanquest Software) C:\Program Files\Sony\Sony PC Companion\DownloadManager.dll
2013-05-27 12:22 - 2013-05-27 12:22 - 00339456 _____ (Avanquest Software) C:\Program Files\Sony\Sony PC Companion\CrashDump.dll
2013-03-29 20:18 - 2013-06-10 17:46 - 00285696 _____ (Avanquest Software) C:\Program Files\Sony\Sony PC Companion\Statistics.dll
2013-09-11 20:29 - 2013-09-10 14:43 - 00183296 _____ (Avanquest Software) C:\Program Files\Sony\Sony PC Companion\PCCWebServices.dll
2013-08-16 23:39 - 2013-08-16 23:39 - 00764200 _____ () C:\Program Files\Hotspot Shield\bin\af_proxy.dll
2013-08-13 00:16 - 2013-08-13 00:16 - 00075264 _____ (Zlib) C:\Program Files\Hotspot Shield\bin\zlib1.dll
2013-08-14 00:16 - 2013-08-14 00:16 - 03551640 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2012-10-10 22:14 - 2013-02-26 01:22 - 12641992 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2008-12-01 07:34 - 2013-02-26 01:22 - 02505144 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2013-09-09 18:54 - 2013-09-09 18:54 - 16177544 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys => ""="FSFilter Activity Monitor"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SymEFA.sys => ""="FSFilter Activity Monitor"

==================== Faulty Device Manager Devices =============

Name: J:\
Description:                 
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer:         
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: Compact Flash   
Description: Compact Flash   
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic-
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: MS/MS-Pro       
Description: MS/MS-Pro       
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic-
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: SD/MMC          
Description: SD/MMC          
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic-
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: SM/xD-Picture   
Description: SM/xD-Picture   
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic-
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 


==================== Event log errors: =========================

Application errors:
==================
Error: (09/13/2013 07:16:56 AM) (Source: Perflib) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

Error: (09/13/2013 03:54:06 AM) (Source: Google Update) (User: sp3-Hybridorbit)
Description: Network Request Error.
Error: 0x80072ee7. Http status code: 0.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7

Error: (09/13/2013 03:27:11 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {73a8afac-7c78-4108-98e7-cad9ffcee8a6}

Error: (09/13/2013 03:13:06 AM) (Source: Iminent) (User: )
Description: Unexpected exception.

System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei Iminent.Mediator.Server.ApplicationService.<>c__DisplayClassa.<WarmUp>b__9(Composite composite)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
   bei System.RuntimeMethodHandle.InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, Signature sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
   bei System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)
   bei System.Delegate.DynamicInvokeImpl(Object[] args)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Int32 numArgs)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(Object source, Delegate method, Object args, Int32 numArgs, Delegate catchHandler)

Error: (09/13/2013 01:09:44 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/12/2013 11:33:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/12/2013 10:20:36 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/12/2013 08:36:50 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/12/2013 01:05:58 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung SndVol.exe, Version 6.0.6002.18005, Zeitstempel 0x49e02226, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000008, Fehleroffset 0x000745e8,
Prozess-ID 0x1a24, Anwendungsstartzeit SndVol.exe0.

Error: (09/12/2013 00:48:09 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung af_proxy_cmd.exe, Version 2.93.0.0, Zeitstempel 0x517aea12, fehlerhaftes Modul af_proxy.dll!??0server@proxy@af@@QAE@ABV?$ba, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000139, Fehleroffset 0x00009f5d,
Prozess-ID 0x194c, Anwendungsstartzeit af_proxy_cmd.exe0.


System errors:
=============
Error: (09/13/2013 03:12:20 AM) (Source: Service Control Manager) (User: )
Description: SProtection

Error: (09/13/2013 01:12:12 AM) (Source: Service Control Manager) (User: )
Description: NVIDIA Update Service Daemon%%1069

Error: (09/13/2013 01:12:12 AM) (Source: Service Control Manager) (User: )
Description: nvUpdatusService.\UpdatusUser%%1330

Error: (09/13/2013 01:09:53 AM) (Source: W32Time) (User: )
Description: Der Zeitdienst hat festgestellt, dass die Systemzeit um +1001693 Sekunden geändert werden muss. Die Systemzeit kann durch den Zeitdienst um maximal +54000 Sekunden geändert werden. Stellen Sie sicher, dass die Uhrzeit und Zeitzone korrekt sind und dass die Zeitquelle time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->65.55.56.206:123) funktionsfähig ist.

Error: (09/12/2013 11:34:31 PM) (Source: Service Control Manager) (User: )
Description: NVIDIA Update Service Daemon%%1069

Error: (09/12/2013 11:34:31 PM) (Source: Service Control Manager) (User: )
Description: nvUpdatusService.\UpdatusUser%%1330

Error: (09/12/2013 11:32:17 PM) (Source: W32Time) (User: )
Description: Der Zeitdienst hat festgestellt, dass die Systemzeit um +946729 Sekunden geändert werden muss. Die Systemzeit kann durch den Zeitdienst um maximal +54000 Sekunden geändert werden. Stellen Sie sicher, dass die Uhrzeit und Zeitzone korrekt sind und dass die Zeitquelle time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->64.4.10.33:123) funktionsfähig ist.

Error: (09/12/2013 10:23:23 AM) (Source: Service Control Manager) (User: )
Description: NVIDIA Update Service Daemon%%1069

Error: (09/12/2013 10:23:23 AM) (Source: Service Control Manager) (User: )
Description: nvUpdatusService.\UpdatusUser%%1330

Error: (09/12/2013 10:20:36 AM) (Source: W32Time) (User: )
Description: Der Zeitdienst hat festgestellt, dass die Systemzeit um +866364 Sekunden geändert werden muss. Die Systemzeit kann durch den Zeitdienst um maximal +54000 Sekunden geändert werden. Stellen Sie sicher, dass die Uhrzeit und Zeitzone korrekt sind und dass die Zeitquelle time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->65.55.56.206:123) funktionsfähig ist.


Microsoft Office Sessions:
=========================
Error: (09/13/2013 07:16:56 AM) (Source: Perflib)(User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

Error: (09/13/2013 03:54:06 AM) (Source: Google Update)(User: sp3-Hybridorbit)
Description: Network Request Error.
Error: 0x80072ee7. Http status code: 0.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7

Error: (09/13/2013 03:27:11 AM) (Source: VSS)(User: )
Description: 0x80070005

Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {73a8afac-7c78-4108-98e7-cad9ffcee8a6}

Error: (09/13/2013 03:13:06 AM) (Source: Iminent)(User: )
Description: Unexpected exception.

System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei Iminent.Mediator.Server.ApplicationService.<>c__DisplayClassa.<WarmUp>b__9(Composite composite)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
   bei System.RuntimeMethodHandle.InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, Signature sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
   bei System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)
   bei System.Delegate.DynamicInvokeImpl(Object[] args)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Int32 numArgs)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(Object source, Delegate method, Object args, Int32 numArgs, Delegate catchHandler)

Error: (09/13/2013 01:09:44 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/12/2013 11:33:24 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/12/2013 10:20:36 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/12/2013 08:36:50 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/12/2013 01:05:58 AM) (Source: Application Error)(User: )
Description: SndVol.exe6.0.6002.1800549e02226ntdll.dll6.0.6002.1888151da3e27c0000008000745e81a2401ceaf41a77a7ac0

Error: (09/12/2013 00:48:09 AM) (Source: Application Error)(User: )
Description: af_proxy_cmd.exe2.93.0.0517aea12af_proxy.dll!??0server@proxy@af@@QAE@ABV?$ba6.0.6002.1888151da3e27c000013900009f5d194c01ceaf40fc410390


CodeIntegrity Errors:
===================================
  Date: 2013-09-13 07:39:05.176
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-13 07:39:04.904
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-13 07:39:04.585
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-13 07:39:04.104
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-13 07:39:00.533
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NIS\1008030.006\BHDrvx86.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-13 07:39:00.239
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NIS\1008030.006\BHDrvx86.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-13 07:38:59.952
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NIS\1008030.006\BHDrvx86.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-13 07:38:59.625
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NIS\1008030.006\BHDrvx86.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-13 07:37:44.370
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-13 07:37:43.857
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 54%
Total physical RAM: 3070.5 MB
Available physical RAM: 1396.54 MB
Total Pagefile: 6355.48 MB
Available Pagefile: 4365.98 MB
Total Virtual: 2047.88 MB
Available Virtual: 1911.04 MB

==================== Drives ================================

Drive c: (COMPAQ) (Fixed) (Total:919.12 GB) (Free:669.57 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (FACTORY_IMAGE) (Fixed) (Total:12.39 GB) (Free:1.68 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive j: () (Removable) (Total:7.21 GB) (Free:5.9 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 0556CD06)
Partition 1: (Active) - (Size=919 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=12 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (MBR Code: Windows XP) (Size: 7 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=7 GB) - (Type=0C)

==================== End Of Log ============================