Windows Vista Sicherheitscenter und AntiVir nach Neustart immer abgeschaltet - Bereits bekanntes Phänomen in Eurem Forum

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 21:18 on 04/10/2013 (Tobias)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013
Ran by Tobias (administrator) on CHRISTIAN-BÜRO on 04-10-2013 21:21:04
Running from C:\Users\Tobias\Desktop\Dateien\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Acer\ALaunch\ALaunchSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(HiTRSUT) C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
(Acer Inc.) C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
(Acer Inc.) C:\Acer\Empowering Technology\eNet\eNet Service.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
() C:\Acer\Mobility Center\MobilityService.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
() C:\Program Files\Tor\tor.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(acer) C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe
(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
() C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(HiTRUST) C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
(CyberLink) C:\Acer\Empowering Technology\eAudio\eAudio.exe
(Realtek Semiconductor Corp.) C:\Users\Tobias\AppData\Local\Temp\RtkBtMnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Search-Results) C:\Program Files\Ask.com\Updater\Updater.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [ALaunch] - C:\Acer\ALaunch\AlaunchClient.exe
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4669440 2007-07-06] (Realtek Semiconductor)
HKLM\...\Run: [eDataSecurity Loader] - C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [457216 2007-04-25] (HiTRUST)
HKLM\...\Run: [eAudio] - C:\Acer\Empowering Technology\eAudio\eAudio.exe [1286144 2007-06-11] (CyberLink)
HKLM\...\Run: [Acer Tour] - [x]
HKLM\...\Run: [LManager] - C:\PROGRA~1\LAUNCH~1\LManager.exe [772616 2007-08-15] (Dritek System Inc.)
HKLM\...\Run: [PlayMovie] - C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe [206952 2007-05-24] (CyberLink Corp.)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [159744 2007-06-06] (Alps Electric Co., Ltd.)
HKLM\...\Run: [eRecoveryService] - [x]
HKLM\...\Run: [Acer Tour Reminder] - C:\Acer\AcerTour\Reminder.exe [151552 2007-05-22] (Acer Inc.)
HKLM\...\Run: [WarReg_PopUp] - C:\Acer\WR_PopUp\WarReg_PopUp.exe [57344 2006-11-05] (Acer Inc.)
HKLM\...\Run: [SetPanel] - C:\Acer\APanel\APanel.cmd
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [55824 2007-09-21] (Logitech, Inc.)
HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [111936 2008-11-07] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [413696 2009-01-05] (Apple Inc.)
HKLM\...\Run: [Skytel] - C:\Windows\Skytel.exe [1826816 2007-06-15] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.)
HKLM\...\Run: [Microsoft Default Manager] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [288088 2009-11-11] (Microsoft Corporation)
HKLM\...\Run: [LexwareInfoService] - C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [339312 2010-09-15] (Haufe-Lexware GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [ApnUpdater] - C:\Program Files\Ask.com\Updater\Updater.exe [886760 2011-08-25] (Search-Results)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [Acer Tour Reminder] - C:\Acer\AcerTour\Reminder.exe [151552 2007-05-22] (Acer Inc.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation)
HKCU\...\Run: [Device Detection] - C:\Program Files\Lidl_Fotos\dd.exe
HKCU\...\Run: [Rainlendar2] - C:\Program Files\Rainlendar2\Rainlendar2.exe
MountPoints2: {7299db37-be18-11dd-84cb-806e6f6e6963} - WD_Windows_Tools\Setup.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\RunOnce: [AcerScrSav] - C:\Windows\Acer\run_NB.exe [ 2007-04-26] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.delta-search.com/?affID=120519&tt=gc_&babsrc=HP_ss&mntrId=382D001B38D067D9
HKCU\Software\Microsoft\Internet Explorer\Main,SEARCH PAGE = hxxp://de.rd.yahoo.com/customize/ycomp/defaults/sp/*hxxp://de.yahoo.com
HKCU\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www2.delta-search.com/?affID=120519&tt=gc_&babsrc=HP_ss&mntrId=382D001B38D067D9
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.intl.acer.yahoo.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.intl.acer.yahoo.com
URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Search-Results)
URLSearchHook: Yahoo! Toolbar mit Pop-Up-Blocker - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll No File
URLSearchHook: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl.dll (Conduit Ltd.)
SearchScopes: HKLM - DefaultScope {CF739809-1C6C-47C0-85B9-569DBB141420} URL = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q={searchTerms}&crm=1
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1392740
SearchScopes: HKLM - {CF739809-1C6C-47C0-85B9-569DBB141420} URL = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q={searchTerms}&crm=1
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=120519&tt=gc_&babsrc=SP_ss&mntrId=382D001B38D067D9
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=120519&tt=gc_&babsrc=SP_ss&mntrId=382D001B38D067D9
SearchScopes: HKCU - {380002C7-37D5-4958-8D38-62D386438EFB} URL = hxxp://www.bing.com/search?FORM=IEFM1&q={searchTerms}&src={referrer:source?}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {53E29E78-2FA3-4FF4-8C45-F60365BE1002} URL = hxxp://websearch.search-results.com/redirect?client=ie&tb=STC-SRS&o=41648033&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=96&apn_dtid=YYYYYYYYDE&apn_uid=5F953C26-48FA-4E55-8BE5-17BECD1E9A09&apn_sauid=425804C8-B7B6-406D-858C-C17FC770FCFD&
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {77AA3134-D51A-43F7-A4BF-4859267C1B14} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1392740
SearchScopes: HKCU - {BE9654C9-9D79-42ec-B55A-3CAEB12DBF58} URL = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {CF739809-1C6C-47C0-85B9-569DBB141420} URL = hxxp://websearch.ask.com/custom/java/redirect?client=ie&tb=ORJ&o=100000026&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000
BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll No File
BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll (IE Toolbar)
BHO: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl.dll (Conduit Ltd.)
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.16.16\bh\delta.dll (Delta-search.com)
BHO: Search-Results Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Search-Results)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll (HiTRUST)
Toolbar: HKLM - Yahoo! Toolbar mit Pop-Up-Blocker - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll No File
Toolbar: HKLM - MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl.dll (Conduit Ltd.)
Toolbar: HKLM - Search-Results Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Search-Results)
Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.16.16\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU - No Name - {855F3B16-6D32-4FE6-8A56-BBB695989046} -  No File
Toolbar: HKCU -Acer eDataSecurity Management - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll (HiTRUST)
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} hxxp://www.lokalisten.de/iup/ImageUploader4.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default
FF user.js: detected! => C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\user.js
FF NewTab: hxxp://www2.delta-search.com/?affID=119556&tt=gc_&babsrc=NT_ss&mntrId=382D001B38D067D9
FF SearchEngineOrder.1: Delta Search
FF SelectedSearchEngine: Google
FF Homepage: www.google.de
FF Keyword.URL: hxxp://websearch.search-results.com/redirect?client=ff&src=kw&tb=STC-SRS&o=41648033&locale=de_DE&apn_uid=5F953C26-48FA-4E55-8BE5-17BECD1E9A09&apn_ptnrs=96&apn_sauid=425804C8-B7B6-406D-858C-C17FC770FCFD&apn_dtid=YYYYYYYYDE&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\searchplugins\ask.xml
FF SearchPlugin: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\searchplugins\askcomsearch.xml
FF SearchPlugin: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\searchplugins\search-results.xml
FF SearchPlugin: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Delta Toolbar - C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\Extensions\ffxtlbr@delta.com
FF Extension: gui:config - C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\Extensions\guiconfig@slosd.net
FF Extension: Search-Results Toolbar - C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\Extensions\toolbar@ask.com
FF Extension: No Name - C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\Extensions\trackerblock@privacychoice.org
FF Extension: Yahoo! Toolbar - C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF Extension: No Name - C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\nwe002l6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKCU\...\Firefox\Extensions: [happylyrics@hpyproductions.net] - C:\Program Files\HappyLyrics\FF\
FF Extension: No Name - C:\Program Files\HappyLyrics\FF\

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Docs) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Happy Lyrics) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ealchnonpofjocgofjpopjdoegbbkofj\1.111_0
CHR Extension: (Delta Toolbar) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0
CHR HKLM\...\Chrome\Extension: [ealchnonpofjocgofjpopjdoegbbkofj] - C:\Program Files\HappyLyrics\Chrome.crx

========================== Services (Whitelisted) =================

R2 ALaunchService; C:\Acer\ALaunch\ALaunchSvc.exe [50688 2007-01-26] ()
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [457512 2007-04-25] (HiTRSUT)
R2 eLockService; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [24576 2007-04-23] (Acer Inc.)
R2 eNet Service; C:\Acer\Empowering Technology\eNet\eNet Service.exe [135168 2007-06-13] (Acer Inc.)
R2 eRecoveryService; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [53248 2007-07-03] (Acer Inc.)
R2 eSettingsService; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576 2007-06-28] ()
S3 HRService; C:\Program Files\Haufe\iDesk\iDeskService\iDeskService.exe [71024 2010-10-25] ()
R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [107008 2006-11-24] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [266343 2007-01-23] ()
R2 tor; C:\Program Files\Tor\tor.exe [3233806 2013-09-05] ()
R2 WMIService; C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [167936 2007-09-14] (acer)
S2 CLTNetCnService; "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon [x]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-31] (Avira Operations GmbH & Co. KG)
R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)
R1 DritekPortIO; C:\PROGRA~1\LAUNCH~1\DPortIO.sys [20112 2006-11-02] (Dritek System Inc.)
S3 dsiarhwprog; C:\Windows\System32\Drivers\dsiarhwprog.sys [29184 2007-02-08] (Thesycon GmbH, Germany)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [25280 2008-04-10] (LogMeIn, Inc.)
R2 int15; C:\Acer\Empowering Technology\eRecovery\int15.sys [76584 2006-12-07] ()
R0 PSDFilter; C:\Windows\System32\DRIVERS\psdfilter.sys [20776 2007-04-25] (HiTRUST)
R0 PSDNServ; C:\Windows\System32\drivers\PSDNServ.sys [16680 2007-04-25] (HiTRUST)
R0 psdvdisk; C:\Windows\System32\drivers\psdvdisk.sys [60712 2007-04-25] (HiTRUST)
S3 s3017bus; C:\Windows\System32\DRIVERS\s3017bus.sys [83880 2007-12-10] (MCCI Corporation)
S3 s3017mdfl; C:\Windows\System32\DRIVERS\s3017mdfl.sys [15016 2007-12-10] (MCCI Corporation)
S3 s3017mdm; C:\Windows\System32\DRIVERS\s3017mdm.sys [110632 2007-12-10] (MCCI Corporation)
S3 s3017mgmt; C:\Windows\System32\DRIVERS\s3017mgmt.sys [104616 2007-12-10] (MCCI Corporation)
S3 s3017nd5; C:\Windows\System32\DRIVERS\s3017nd5.sys [25512 2007-12-10] (MCCI Corporation)
S3 s3017obex; C:\Windows\System32\DRIVERS\s3017obex.sys [100648 2007-12-10] (MCCI Corporation)
S3 s3017unic; C:\Windows\System32\DRIVERS\s3017unic.sys [110120 2007-12-10] (MCCI Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl [13560 2006-11-02] (Cyberlink Corp.)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 LVRS; system32\DRIVERS\lvrs.sys [x]
S3 LVUSBSta; system32\drivers\LVUSBSta.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 pepifilter; system32\DRIVERS\lv302af.sys [x]
S3 PID_PEPI; system32\DRIVERS\LV302V32.SYS [x]
S4 UIUSys; system32\DRIVERS\UIUSYS.SYS [x]
S3 USBAAPL; System32\Drivers\usbaapl.sys [x]
U3 fwlyiuok; \??\C:\Users\Tobias\AppData\Local\Temp\fwlyiuok.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-04 21:19 - 2013-10-04 21:19 - 00000000 ____D C:\FRST
2013-10-04 21:18 - 2013-10-04 21:18 - 00000000 _____ C:\Users\Tobias\defogger_reenable
2013-10-02 10:33 - 2013-10-02 10:34 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-26 15:21 - 2013-09-26 15:21 - 97961477 _____ C:\Windows\system32\ᮼ뢍ᰔ�
2013-09-19 21:26 - 2013-09-19 21:41 - 00010518 _____ C:\Users\Tobias\Documents\Auslagen Videx.xlsx
2013-09-11 17:57 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 17:57 - 2013-08-01 12:21 - 00916992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-11 17:57 - 2013-08-01 12:20 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-11 17:57 - 2013-08-01 12:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-11 17:57 - 2013-08-01 12:18 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-11 17:57 - 2013-08-01 12:16 - 06016512 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-11 17:57 - 2013-08-01 12:16 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-11 17:57 - 2013-08-01 12:16 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-09-11 17:57 - 2013-08-01 12:16 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-11 17:57 - 2013-08-01 12:16 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-11 17:57 - 2013-08-01 12:15 - 11111936 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-11 17:57 - 2013-08-01 12:15 - 02005504 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-11 17:57 - 2013-08-01 12:15 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-11 17:57 - 2013-08-01 12:15 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-11 17:57 - 2013-08-01 12:15 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-11 17:57 - 2013-08-01 12:15 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 17:57 - 2013-08-01 12:15 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-11 17:57 - 2013-08-01 12:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-11 17:57 - 2013-08-01 12:15 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-11 17:57 - 2013-08-01 12:15 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-11 17:57 - 2013-08-01 12:15 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-11 17:57 - 2013-08-01 12:13 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2013-09-11 17:57 - 2013-08-01 10:37 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-11 17:57 - 2013-08-01 08:56 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-11 17:57 - 2013-08-01 08:56 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-11 17:57 - 2013-08-01 08:55 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-11 17:57 - 2013-08-01 08:54 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-11 17:57 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2013-09-06 19:41 - 2013-09-06 19:41 - 96462459 _____ C:\Windows\system32\宝幇ᰔž
2013-09-05 21:42 - 2013-09-05 22:38 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-09-05 12:25 - 2013-09-05 12:25 - 00000000 ____D C:\Program Files\Tor

==================== One Month Modified Files and Folders =======

2013-10-04 21:19 - 2013-10-04 21:19 - 00000000 ____D C:\FRST
2013-10-04 21:18 - 2013-10-04 21:18 - 00000000 _____ C:\Users\Tobias\defogger_reenable
2013-10-04 21:18 - 2008-03-23 17:08 - 00000000 ____D C:\Users\Tobias
2013-10-04 21:00 - 2008-02-25 16:03 - 01699389 _____ C:\Windows\WindowsUpdate.log
2013-10-04 20:59 - 2012-04-30 13:55 - 00000440 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-10-04 19:37 - 2006-11-02 12:33 - 01445352 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-04 19:32 - 2009-05-06 18:28 - 00027934 _____ C:\ProgramData\nvModes.001
2013-10-04 19:32 - 2006-11-02 14:47 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-04 19:32 - 2006-11-02 14:47 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-04 09:47 - 2009-05-06 18:28 - 00027934 _____ C:\ProgramData\nvModes.dat
2013-10-04 09:21 - 2012-05-08 16:12 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-10-02 10:34 - 2013-10-02 10:33 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-28 22:09 - 2008-03-25 19:08 - 00007292 _____ C:\Users\Tobias\AppData\Roaming\wklnhst.dat
2013-09-26 15:21 - 2013-09-26 15:21 - 97961477 _____ C:\Windows\system32\ᮼ뢍ᰔ�
2013-09-25 08:57 - 2006-11-02 14:52 - 00120082 _____ C:\Windows\setupact.log
2013-09-19 21:41 - 2013-09-19 21:26 - 00010518 _____ C:\Users\Tobias\Documents\Auslagen Videx.xlsx
2013-09-17 22:14 - 2008-03-28 17:27 - 00023552 _____ C:\Users\Tobias\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-16 19:04 - 2013-06-27 18:35 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-16 19:04 - 2013-06-27 18:35 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-16 19:04 - 2012-04-22 13:09 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-14 20:26 - 2007-07-28 11:46 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-11 18:19 - 2006-11-02 14:47 - 00392680 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-11 18:07 - 2013-07-14 21:43 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 18:04 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-09-06 23:31 - 2013-05-04 22:35 - 00000000 ____D C:\Program Files\HappyLyrics
2013-09-06 20:45 - 2007-07-28 12:05 - 00706880 _____ C:\Windows\PFRO.log
2013-09-06 20:17 - 2006-11-02 15:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-06 19:41 - 2013-09-06 19:41 - 96462459 _____ C:\Windows\system32\宝幇ᰔž
2013-09-06 19:39 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-05 22:38 - 2013-09-05 21:42 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-09-05 12:25 - 2013-09-05 12:25 - 00000000 ____D C:\Program Files\Tor
2013-09-04 13:17 - 2013-01-11 17:25 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-04 13:17 - 2013-01-11 17:25 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

Some content of TEMP:
====================
C:\Users\Tobias\AppData\Local\Temp\13387.exe
C:\Users\Tobias\AppData\Local\Temp\70048.exe
C:\Users\Tobias\AppData\Local\Temp\718631~1.exe
C:\Users\Tobias\AppData\Local\Temp\ApnStub.exe
C:\Users\Tobias\AppData\Local\Temp\AskSLib.dll
C:\Users\Tobias\AppData\Local\Temp\AutoRun.exe
C:\Users\Tobias\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Tobias\AppData\Local\Temp\bfguni.exe
C:\Users\Tobias\AppData\Local\Temp\bwgo001479a2.exe
C:\Users\Tobias\AppData\Local\Temp\DWPUpgradeInstaller.exe
C:\Users\Tobias\AppData\Local\Temp\eauninstall.exe
C:\Users\Tobias\AppData\Local\Temp\firefoxjre_exe-1.exe
C:\Users\Tobias\AppData\Local\Temp\firefoxjre_exe-2.exe
C:\Users\Tobias\AppData\Local\Temp\firefoxjre_exe.exe
C:\Users\Tobias\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Tobias\AppData\Local\Temp\FlashPlayerUpdate01.exe
C:\Users\Tobias\AppData\Local\Temp\FlashPlayerUpdate02.exe
C:\Users\Tobias\AppData\Local\Temp\Harry Potter and the Prisoner of Azkaban_uninst.exe
C:\Users\Tobias\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih.exe
C:\Users\Tobias\AppData\Local\Temp\iv_uninstall.exe
C:\Users\Tobias\AppData\Local\Temp\jre-1.6.0_20-windows-i586-iftw.exe_90744722.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u16-windows-i586-iftw.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u17-windows-i586-iftw-rv.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u18-windows-i586-iftw-rv.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u20-windows-i586-jinstall_uac.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u22-windows-i586-iftw-rv.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\Tobias\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Tobias\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Tobias\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Tobias\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Tobias\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Tobias\AppData\Local\Temp\moorhuhnx.exe
C:\Users\Tobias\AppData\Local\Temp\nsisdt.dll
C:\Users\Tobias\AppData\Local\Temp\ose00000.exe
C:\Users\Tobias\AppData\Local\Temp\ose00001.exe
C:\Users\Tobias\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\Tobias\AppData\Local\Temp\setup.exe
C:\Users\Tobias\AppData\Local\Temp\setup_fsu_cid.exe
C:\Users\Tobias\AppData\Local\Temp\SIntf16.dll
C:\Users\Tobias\AppData\Local\Temp\SIntf32.dll
C:\Users\Tobias\AppData\Local\Temp\SIntfNT.dll
C:\Users\Tobias\AppData\Local\Temp\tempmessage.bfg
C:\Users\Tobias\AppData\Local\Temp\TW_autoskip.exe
C:\Users\Tobias\AppData\Local\Temp\uninst1.exe
C:\Users\Tobias\AppData\Local\Temp\UninstallRC-8876480.dll
C:\Users\Tobias\AppData\Local\Temp\war3_Install.exe
C:\Users\Tobias\AppData\Local\Temp\wmfdist.exe
C:\Users\Tobias\AppData\Local\Temp\wvc1dmo.exe
C:\Users\Tobias\AppData\Local\Temp\ycomp_setup.exe
C:\Users\Tobias\AppData\Local\Temp\_isED1C.exe
C:\Users\Tobias\AppData\Local\Temp\_isF2A8.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-04 19:37

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-04 21:49:26
Windows 6.0.6002 Service Pack 2 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4 WDC_WD2500BEVS-22UST0 rev.01.01A01 232,89GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Tobias\AppData\Local\Temp\fwlyiuok.sys


---- System - GMER 2.1 ----

SSDT   905D0A26                                                                                 ZwCreateSection
SSDT   905D0A30                                                                                 ZwRequestWaitReplyPort
SSDT   905D0A2B                                                                                 ZwSetContextThread
SSDT   905D0A35                                                                                 ZwSetSecurityObject
SSDT   905D0A3A                                                                                 ZwSystemDebugControl
SSDT   905D09C7                                                                                 ZwTerminateProcess

---- Kernel code sections - GMER 2.1 ----

.text  ntkrnlpa.exe!KeSetEvent + 215                                                            82CDF860 4 Bytes  [26, 0A, 5D, 90] {OR BL, [ES:EBP-0x70]}
.text  ntkrnlpa.exe!KeSetEvent + 539                                                            82CDFB84 4 Bytes  [30, 0A, 5D, 90] {XOR [EDX], CL; POP EBP; NOP }
.text  ntkrnlpa.exe!KeSetEvent + 56D                                                            82CDFBB8 4 Bytes  [2B, 0A, 5D, 90] {SUB ECX, [EDX]; POP EBP; NOP }
.text  ntkrnlpa.exe!KeSetEvent + 5D1                                                            82CDFC1C 4 Bytes  [35, 0A, 5D, 90]
.text  ntkrnlpa.exe!KeSetEvent + 619                                                            82CDFC64 4 Bytes  [3A, 0A, 5D, 90] {CMP CL, [EDX]; POP EBP; NOP }
.text  ...                                                                                      
.text  C:\Windows\system32\DRIVERS\nvlddmkm.sys                                                 section is writeable [0x8F808340, 0x3FA057, 0xE8000020]

---- User code sections - GMER 2.1 ----

.text  C:\Program Files\Mozilla Firefox\firefox.exe[3620] ntdll.dll!LdrLoadDll                  771E9378 5 Bytes  JMP 64F4DFF0 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3620] kernel32.dll!HeapSetInformation + 26  760DA8B0 7 Bytes  JMP 64F55F1A C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3620] kernel32.dll!LockResource + C         760F6ACB 7 Bytes  JMP 656D9773 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3620] kernel32.dll!VirtualAllocEx + 54      760FAF50 7 Bytes  JMP 656D9796 C:\Program Files\Mozilla Firefox\xul.dll
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3620] GDI32.dll!SetStretchBltMode + 256     770A745C 7 Bytes  JMP 656D96F4 C:\Program Files\Mozilla Firefox\xul.dll

---- Disk sectors - GMER 2.1 ----

Disk   \Device\Harddisk0\DR0                                                                    unknown MBR code

---- EOF - GMER 2.1 ----
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-10-2013
Ran by Tobias at 2013-10-04 21:23:04
Running from C:\Users\Tobias\Desktop\Dateien\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958)
32 Bit HP CIO Components Installer (Version: 7.1.8)
Acer Arcade Deluxe (Version: 1.12.4213)
Acer eAudio Management (Version: 2.5.4012)
Acer eDataSecurity Management (Version: 2.5.4241)
Acer eLock Management (Version: 2.5.4008)
Acer Empowering Technology (Version: 2.5.4010)
Acer eNet Management (Version: 2.6.4008)
Acer ePower Management (Version: 2.5.4021)
Acer ePresentation Management (Version: 2.5.4002)
Acer eSettings Management (Version: 2.5.4011)
Acer GridVista (Version: 2.68.622)
Acer Mobility Center Plug-In (Version: 1.0.3003)
Acer ScreenSaver (Version: 1.11.20070515)
Acer Tour (Version: 2.0.1003)
Adobe Flash Player 11 Plugin (Version: 11.8.800.168)
Adobe Media Player (Version: 1.6)
Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8)
AGEIA PhysX v7.11.13 (Version: 7.11.13)
ALPS Touch Pad Driver
Avira Free Antivirus (Version: 13.0.0.4052)
AviSynth 2.5
BrowserProtect
Delta toolbar   (Version: 1.8.16.16)
Dynasty
Happy Lyrics
Haufe iDesk-Browser (Version: 10.10.14.0000)
Haufe iDesk-Service (Version: 10.10.25.7810)
HDAUDIO Soft Data Fax Modem with SmartCP
HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät (Version: 22.0.334.0)
HP Officejet 6500 E710a-f Hilfe (Version: 140.0.2.2)
HP Photo Creations (Version: 1.0.0.9572)
HP Photosmart Essential (Version: 1.12.0.46)
HP Update (Version: 5.005.000.001)
HPDiagnosticAlert (Version: 1.00.0000)
HPSSupply (Version: 2.1.3.0000)
I.R.I.S. OCR (Version: 12.3.4)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Java(TM) 6 Update 14 (Version: 6.0.140)
Java(TM) 6 Update 37 (Version: 6.0.370)
Kies Air Discovery Service
Launch Manager
Lexware Info Service (Version: 2.70.00.0081)
LightScribe  1.4.142.1 (Version: 1.4.142.1)
Marketsplash Schnellzugriffe (Version: 1.0.0.9)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Default Manager (Version: 2.1.55.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access Runtime (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Search Enhancement Pack (Version: 3.0.127.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 08.05.0822)
MobileMe Control Panel (Version: 2.1.2.7)
Mozilla Firefox 24.0 (x86 de) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
Mozilla Thunderbird 17.0.8 (x86 de) (Version: 17.0.8)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0)
MyPlayCity Toolbar (Version: )
NTI Backup NOW! 4.7 (Version: 4)
NTI CD & DVD-Maker (Version: 7)
NVIDIA Drivers
PowerProducer 3.72 (Version: 074117(3.7)_Vista_Acer)
QuickTime (Version: 7.60.92.0)
Realtek High Definition Audio Driver (Version: 6.0.1.5449)
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01 (Version: 3.51.01)
Rollcage Stage II Demo
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.9.0)
Search-Results Toolbar (Version: 1.13.1.0)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
Star Wars(tm) Knights of the Old Republic(tm) II: The Sith Lords(tm) (Version: 1.00.0000)
Studie zur Verbesserung von HP Officejet 6500 E710a-f Produkten (Version: 22.0.334.0)
Thoosje Sevenbar
Uninstall 1.0.0.1
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
UseNeXT
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Yahoo! Toolbar

==================== Restore Points  =========================

11-09-2013 15:47:29 Windows Update
11-09-2013 16:03:30 Windows Update
11-09-2013 17:08:30 Windows Update
13-09-2013 06:38:01 Windows Update
13-09-2013 07:19:32 Windows Update
13-09-2013 09:32:45 Windows Update
13-09-2013 10:34:27 Windows Update
13-09-2013 10:48:12 Windows Update
13-09-2013 11:46:22 Windows Update
14-09-2013 18:21:12 Windows Update
22-09-2013 17:12:13 Windows Update
27-09-2013 11:45:50 Windows Update
01-10-2013 13:15:03 Windows Update

==================== Hosts content: ==========================

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0785B53D-FD77-41C2-8E06-5369D0A7847C} - System32\Tasks\RunAsStdUser Task => C:\Program Files\Thoosje Sevenbar\Thoosje Sevenbar.exe [2009-08-11] ()
Task: {1B0CCEC1-1884-473D-98BD-2FB8FDBE682B} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\system32\FlashPlayerUpdateService.exe
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-19] (Microsoft Corporation)
Task: {6405EBEA-B785-4EEF-B40E-B64F1413BE9D} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect
Task: {AB8714F2-9A85-4B9E-B8B4-D806F1430EDC} - System32\Tasks\RunAsStdUser Task for VeohWebPlayer => C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
Task: {C27A1B41-70E0-4B1E-9B8C-4DD92BAF1D45} - System32\Tasks\HPCustParticipation HP Officejet 6500 E710a-f => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPCustPartic.exe [2010-06-14] (Hewlett-Packard Co.)
Task: {C5F05374-DABC-4996-B26C-6981FB0D59C8} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\system32\FlashPlayerUpdateService.exe
Task: {C716EC08-530E-4B2F-96BF-49873E0DD515} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2011-08-25] ()
Task: {CC32BABE-ED58-4B8D-A717-DF9286AA5AFF} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Tobias => C:\Program Files\Windows Calendar\wincal.exe [2009-04-11] (Microsoft Corporation)
Task: {DAB2DFBB-801B-4783-900F-6E70B93C3E02} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-16] (Adobe Systems Incorporated)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-05] ()
Task: {EF3EFE7C-E49C-471C-A67F-3A56047214B7} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {F453841E-C00F-4931-ADA2-37AE921CCB13} - System32\Tasks\BFGLaunch_moorhuhnx => C:\Users\Tobias\AppData\Local\Temp\moorhuhnx.exe [2008-04-04] (Big Fish Games)
Task: {FA654C42-F60C-4E6C-8A4A-3FB1C7E84C8D} - System32\Tasks\BFGLaunch_bfgclient => C:\Program Files\bfgclient\bfgclient.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2007-04-25 16:30 - 2007-04-25 16:30 - 00063488 _____ () C:\Windows\system32\ShowErrMsg.dll
2007-04-25 16:31 - 2007-04-25 16:31 - 00028672 _____ () C:\Windows\system32\BatchCrypto.dll
2008-02-26 01:55 - 2003-06-07 07:30 - 00057344 _____ () C:\Program Files\Launch Manager\PowerUtl.dll
2013-10-02 10:33 - 2013-10-02 10:34 - 03279768 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:52B72A7C
AlternateDataStreams: C:\ProgramData\TEMP:73933431
AlternateDataStreams: C:\ProgramData\TEMP:8277EEB5
AlternateDataStreams: C:\ProgramData\TEMP:AFFC859A
AlternateDataStreams: C:\ProgramData\TEMP:F036C20D
AlternateDataStreams: C:\Users\Tobias\WG  Vorlage Bestellung Erstbestückung.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/02/2013 06:55:11 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\TOBIAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\NWE002L6.DEFAULT\SAFEBROWSING-BACKUP> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (09/28/2013 08:42:52 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\TOBIAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\NWE002L6.DEFAULT\SAFEBROWSING-TO_DELETE> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (09/28/2013 08:42:52 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\TOBIAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\NWE002L6.DEFAULT\SAFEBROWSING-BACKUP> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (09/23/2013 09:38:37 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\TOBIAS\LINKS\CHRISTIAN SCHREIEGG HANDEL & SERVICE\BESETZUNG ADM NEU.XLSX> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (09/23/2013 09:38:37 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\TOBIAS\LINKS\CHRISTIAN SCHREIEGG HANDEL & SERVICE\BESETZUNG ADM NEU.XLSX> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (09/15/2013 10:18:33 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\TOBIAS\LINKS\1HOFMANN\BARBECOOK GRILLS\KATALOG-PREISE\2014\CATALOGUS_BBC_2014_DE_LR.PDF> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (09/15/2013 10:18:33 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\TOBIAS\LINKS\1HOFMANN\BARBECOOK GRILLS\KATALOG-PREISE\2014\CATALOGUS_BBC_2014_DE_LR.PDF> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (09/14/2013 08:25:45 PM) (Source: Windows Search Service) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (09/14/2013 08:25:45 PM) (Source: Windows Search Service) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (09/13/2013 08:38:20 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\TOBIAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\NWE002L6.DEFAULT\SAFEBROWSING> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)


System errors:
=============
Error: (10/04/2013 09:07:30 PM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (10/04/2013 09:00:23 PM) (Source: ipnathlp) (User: )
Description: Ein DHCP-Server mit der IP-Adresse 192.168.2.1 wurde von der DHCP-Zuweisung im selben Netzwerk gefunden, wie die Schnittstelle mit der IP-Adresse 192.168.0.1. Die Zuweisung wurde auf der Schnittstelle automatisch deaktiviert, um DHCP-Clientkonflikte zu vermeiden.

Error: (10/04/2013 09:00:23 PM) (Source: ipnathlp) (User: )
Description: 0 Bytes Speicher konnten durch den DNS-Proxy-Agenten nicht zugeordnet werden. Möglicherweise ist nicht genügend Speicher vorhanden oder ein interner Fehler ist im Speicher-Manager aufgetreten.

Error: (10/04/2013 09:00:21 PM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 192.168.178.26 für die Netzwerkkarte mit der Netzwerkadresse 001B38D067D9 wurde durch den DHCP-Server 192.168.2.1 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).

Error: (10/04/2013 08:59:37 PM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (10/04/2013 07:32:00 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (10/04/2013 09:22:17 AM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (10/02/2013 06:53:32 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (10/02/2013 10:05:30 AM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (10/02/2013 07:01:11 AM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-09-16 21:39:14.879
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 21:39:14.155
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 21:39:13.316
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 21:39:12.582
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 21:29:38.393
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 21:29:37.530
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 21:29:36.779
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 21:29:36.007
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 21:29:07.068
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 21:29:06.338
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\MSNChatHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 52%
Total physical RAM: 2814.19 MB
Available physical RAM: 1333.34 MB
Total Pagefile: 5856.9 MB
Available Pagefile: 4266.6 MB
Total Virtual: 2047.88 MB
Available Virtual: 1900.6 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:111.69 GB) (Free:26.8 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:111.43 GB) (Free:104.71 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 233 GB) (Disk ID: E98A1772)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=112 GB) - (Type=06)
Partition 3: (Not Active) - (Size=111 GB) - (Type=07 NTFS)

==================== End Of Log ============================