Frisches FRST Log erstellen und posten

neues FRST Log

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-12-2013
Ran by SUSANNE KLEIN (administrator) on NAME-0DCC5B3F43 on 02-12-2013 15:38:42
Running from C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop
Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Microsoft Corporation) C:\WINDOWS\system32\scardsvr.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe
(Symantec Corporation) C:\Programme\Symantec\LiveUpdate\AluSchedulerSvc.exe
(Sun Microsystems, Inc.) C:\Programme\Java\jre6\bin\jqs.exe
(Hewlett-Packard Company) C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
() C:\Programme\Samsung\Samsung Update Plus\SLUBackgroundService.exe
() C:\Programme\Samsung\Samsung Network Manager\SNMWLANService.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\Programme\ATI Technologies\ATI.ACE\CLI.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
() C:\Programme\Samsung\Samsung EDS\EDSAgent.exe
(Synaptics, Inc.) C:\Programme\Synaptics\SynTP\SynTPEnh.exe
(Agere Systems) C:\WINDOWS\AGRSMMSG.exe
() C:\Programme\Samsung\AVStation Premium 3.75\AVSAgent.exe
(FarStone Tech. Inc.) C:\Programme\Phoenix Technologies Ltd\RecoverPro_XP\vbptask.exe
(Cyberlink Corp.) C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
() C:\Programme\Samsung\Samsung Battery Manager\BatteryManager.exe
(SAMSUNG ELECTRONICS) C:\Programme\Samsung\DisplayManager\DisplayManager.exe
(Apple Computer, Inc.) C:\Programme\QuickTime\qttask.exe
(Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe
(Adobe Systems Incorporated) C:\Programme\Adobe\Reader 8.0\Reader\reader_sl.exe
(Sun Microsystems, Inc.) C:\Programme\Java\jre6\bin\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Programme\Messenger\msmsgs.exe
(Google Inc.) C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(SAMSUNG) C:\Programme\Samsung\DisplayManager\dmhkcore.exe
(SEIKO EPSON CORPORATION) C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FATICDE.EXE
(SAMSUNG Electronics Co., Ltd.) C:\Programme\Samsung\MagicKBD\MagicKBD.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe
(ATI Technologies Inc.) C:\Programme\ATI Technologies\ATI.ACE\CLI.exe
(ATI Technologies Inc.) C:\Programme\ATI Technologies\ATI.ACE\CLI.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe
(Microsoft Corporation) C:\WINDOWS\system32\imapi.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ATICCC] - C:\Programme\ATI Technologies\ATI.ACE\CLI.exe [45056 2006-01-02] (ATI Technologies Inc.)
HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.exe [16120832 2006-04-05] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] - C:\WINDOWS\Alcmtr.exe [69632 2005-05-04] (Realtek Semiconductor Corp.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [EDS] - C:\Programme\Samsung\Samsung EDS\EDSAgent.exe [634880 2006-03-28] ()
HKLM\...\Run: [SynTPEnh] - C:\Programme\Synaptics\SynTP\SynTPEnh.exe [761947 2005-12-07] (Synaptics, Inc.)
HKLM\...\Run: [AGRSMMSG] - C:\WINDOWS\AGRSMMSG.exe [89541 2006-06-29] (Agere Systems)
HKLM\...\Run: [AVStation Premium 3.75] - C:\Programme\Samsung\AVStation Premium 3.75\AVSAgent.exe [159744 2006-05-12] ()
HKLM\...\Run: [MagicKeyboard] - C:\Programme\Samsung\MagicKBD\PreMKbd.exe [151552 2006-05-17] ()
HKLM\...\Run: [farstone] - [x]
HKLM\...\Run: [RestoreIT!] - C:\Programme\Phoenix Technologies Ltd\RecoverPro_XP\vbptask.exe [114688 2004-09-23] (FarStone Tech. Inc.)
HKLM\...\Run: [RemoteControl] - C:\Programme\CyberLink\PowerDVD\PDVDServ.exe [32768 2004-11-02] (Cyberlink Corp.)
HKLM\...\Run: [BatteryManager] - C:\Programme\Samsung\Samsung Battery Manager\BatteryManager.exe [2764800 2006-04-25] ()
HKLM\...\Run: [DMHotKey] - C:\Programme\Samsung\DisplayManager\DMLoader.exe [356352 2005-11-23] (SAMSUNG)
HKLM\...\Run: [DisplayManager] - C:\Programme\Samsung\DisplayManager\DisplayManager.exe [413696 2006-05-03] (SAMSUNG ELECTRONICS)
HKLM\...\Run: [QuickTime Task] - C:\Programme\QuickTime\qttask.exe [282624 2007-02-16] (Apple Computer, Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Programme\iTunes\iTunesHelper.exe [257088 2007-03-14] (Apple Inc.)
HKLM\...\Run: [TkBellExe] - "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe"  -osboot
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Programme\Adobe\Reader 8.0\Reader\reader_sl.exe [39792 2008-10-15] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Java\jre6\bin\jusched.exe [136600 2009-01-08] (Sun Microsystems, Inc.)
HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-14] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKLM\...\Policies\Explorer\Run: [33477] - c:\dokume~1\alluse~1\msiatf.exe No File
HKCU\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKCU\...\Run: [updateMgr] - C:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
HKCU\...\Run: [swg] - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2007-04-30] (Google Inc.)
HKCU\...\Run: [EPSON Stylus DX7400 Series] - C:\WINDOWS\Temp\E_SAB.tmp [132 2007-09-20] ()
MountPoints2: {9de985f4-8444-11db-83ea-00137732afd2} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe
MountPoints2: {9de985f5-8444-11db-83ea-00137732afd2} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe
MountPoints2: {9de985f9-8444-11db-83ea-00137732afd2} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe
MountPoints2: {9de985fa-8444-11db-83ea-00137732afd2} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe
MountPoints2: {9de985fb-8444-11db-83ea-00137732afd2} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe
MountPoints2: {9de985fc-8444-11db-83ea-00137732afd2} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe
HKU\Administrator\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation)
HKU\Default User\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation)
HKU\STEPHAN WINGS\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation)
HKU\STEPHAN WINGS\...\Run: [PowerBar] - C:\Programme\CyberLink\PowerStarter\PowerBar.exe [ 2006-02-22] (Cyberlink, Corp.)
HKU\STEPHAN WINGS\...\Run: [swg] - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [ 2007-04-30] (Google Inc.)
HKU\STEPHAN WINGS\...\Winlogon: [Shell] explorer.exe,C:\Dokumente und Einstellungen\STEPHAN WINGS\Anwendungsdaten\cache.dat <==== ATTENTION 

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=hpdhp
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=ie8hp
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.msn.com/
hxxp://www.bing.com/
URLSearchHook: HKCU - SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - "C:\Programme\AskPartnerNetwork\Toolbar\searchhook.dll" No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programme\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programme\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programme\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game08.zylom.com/activex/zylomgamesplayer.cab
DPF: {C3E3BB4F-269C-41A3-9F5F-A360E933CAD3} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} hxxp://as.photoprintit.de/ips-opdata/layout/default_cms01/activex/IPSUploader4.cab
DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
ShellExecuteHooks: URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\system32\shell32.dll [8503808 2012-06-08] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\SUSANNE KLEIN\Anwendungsdaten\Mozilla\Firefox\Profiles\hasg7uhd.default
FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", "");
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.11.2571 - C:\Programme\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=1.0.2.2629 - C:\Programme\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.1739 - C:\Programme\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @zylom.com/ZylomGamesPlayer - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\amazon-de.png
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\amazon-de.src
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\eBay-de.gif
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\eBay-de.src
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\google-de.gif
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\google-de.src
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\wikipedia-de.png
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\wikipedia-de.src
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\yahoo-de.gif
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\yahoo-de.src
FF Extension: No Name - C:\Dokumente und Einstellungen\SUSANNE KLEIN\Anwendungsdaten\Mozilla\Firefox\Profiles\hasg7uhd.default\Extensions\staged-xpis
FF Extension: Microsoft .NET Framework Assistant - C:\Dokumente und Einstellungen\SUSANNE KLEIN\Anwendungsdaten\Mozilla\Firefox\Profiles\hasg7uhd.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}(2)
FF Extension: Google Toolbar for Firefox - C:\Dokumente und Einstellungen\SUSANNE KLEIN\Anwendungsdaten\Mozilla\Firefox\Profiles\hasg7uhd.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
FF Extension: Google Toolbar for Firefox - C:\Programme\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Programme\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Programme\Java\jre6\lib\deploy\jqs\ff
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 Automatisches LiveUpdate - Scheduler; C:\Programme\Symantec\LiveUpdate\ALUSchedulerSvc.exe [100032 2006-08-03] (Symantec Corporation)
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-02-07] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-02-07] (Google Inc.)
S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [194032 2012-09-09] (Google)
R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [500800 2007-03-14] (Apple Inc.)
R2 LightScribeService; C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe [73728 2006-01-20] (Hewlett-Packard Company)
S3 LiveUpdate; C:\Programme\Symantec\LiveUpdate\LuComServer_3_0.EXE [2119360 2006-08-03] (Symantec Corporation)
R2 Samsung Update Plus; C:\Programme\Samsung\Samsung Update Plus\SLUBackgroundService.exe [57344 2006-07-21] ()
R2 SNM WLAN Service; C:\Programme\samsung\Samsung Network Manager\SNMWLANService.exe [36864 2005-05-28] ()
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
S2 APNMCP; C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
R2 JavaQuickStarterService; "C:\Programme\Java\jre6\bin\jqs.exe" -service -config "C:\Programme\Java\jre6\lib\deploy\jqs\jqs.conf"

==================== Drivers (Whitelisted) ====================

R3 AR5211; C:\Windows\System32\DRIVERS\ar5211.sys [547904 2007-07-26] (Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-11-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-11-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-01] (Avira Operations GmbH & Co. KG)
S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [65784 2006-04-12] (Broadcom Corporation.)
R3 DNSeFilter; C:\Windows\System32\drivers\SamsungEDS.sys [27648 2006-03-29] (Samsung Electronics,.LTD)
R2 DOSMEMIO; C:\WINDOWS\system32\MEMIO.SYS [4300 2005-10-27] ()
R2 FBAPI; C:\WINDOWS\system32\drivers\FBAPI.sys [5088 2004-05-18] ()
R0 RITCPT; C:\Windows\System32\Drivers\RITCPT.sys [43512 2004-05-18] ()
S3 rtl8139; C:\Windows\System32\DRIVERS\RTL8139.SYS [20992 2004-08-03] (Realtek Semiconductor Corporation)
S3 SD11CL32; C:\Windows\System32\DRIVERS\SD11CL32.sys [82688 2011-01-24] (SCM Microsystems Inc.)
S3 SDI01132; C:\Windows\System32\DRIVERS\SDI01132.sys [65408 2011-01-24] (SCM Microsystems Inc.)
S3 SSB2413; C:\Windows\System32\DRIVERS\SSB2413.sys [470112 2006-01-16] (Atheros Communications, Inc.)
S3 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-10] (Avira GmbH)
S3 SUEPD; C:\Windows\System32\DRIVERS\SUE_PD.sys [19840 2005-05-24] (Samsung)
R0 VVBackd5; C:\Windows\System32\Drivers\VVBackd5.sys [183159 2005-08-08] ()
U2 CertPropSvc; 
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
S3 SYMIDSCO; \??\C:\PROGRA~1\GEMEIN~1\SYMANT~1\SymcData\IDS-DI~1\20070426.002\symidsco.sys [x]
U1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-02 15:36 - 2013-12-02 15:37 - 00000073 ___SH C:\cj.ini
2013-12-02 01:58 - 2013-12-02 02:04 - 00031768 _____ C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\Addition.txt
2013-12-02 01:55 - 2013-12-02 15:39 - 00019690 _____ C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\FRST.txt
2013-12-02 01:55 - 2013-12-02 01:55 - 00000000 ____D C:\FRST
2013-12-02 01:49 - 2013-12-02 01:49 - 00001413 _____ C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\JRT.txt
2013-12-02 01:44 - 2013-12-02 01:44 - 00000000 ____D C:\WINDOWS\ERUNT
2013-12-02 01:43 - 2013-12-02 01:43 - 01092187 _____ (Farbar) C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\FRST.exe
2013-12-02 01:43 - 2013-12-02 01:43 - 01034531 _____ (Thisisu) C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\JRT.exe
2013-12-02 01:27 - 2013-12-02 01:32 - 00000000 ____D C:\AdwCleaner
2013-12-02 01:26 - 2013-12-02 01:26 - 01110034 _____ C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\adwcleaner.exe
2013-12-01 23:05 - 2013-12-01 23:05 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
2013-12-01 22:41 - 2013-12-01 22:41 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes' Anti-Malware (portable)
2013-12-01 22:40 - 2013-12-01 22:40 - 00000000 ____D C:\Programme\Avira
2013-12-01 22:40 - 2013-12-01 22:40 - 00000000 ____D C:\Dokumente und Einstellungen\SUSANNE KLEIN\Anwendungsdaten\Avira
2013-12-01 22:40 - 2013-12-01 22:40 - 00000000 ____D C:\Dokumente und Einstellungen\STEPHAN WINGS\Anwendungsdaten\Avira
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Zubehör
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ___HD C:\Dokumente und Einstellungen\Administrator\Druckumgebung
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\{3248F0A6-6813-11D6-A77B-00B0D0150000}
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Symantec
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\ATI
2013-12-01 21:32 - 2013-12-01 22:38 - 00000000 ____D C:\Programme\Avira(2)
2013-12-01 21:08 - 2013-12-01 22:39 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MFAData
2013-12-01 21:08 - 2013-12-01 21:08 - 00000000 ____D C:\Dokumente und Einstellungen\SUSANNE KLEIN\Lokale Einstellungen\Anwendungsdaten\MFAData
2013-12-01 21:05 - 2013-12-01 21:05 - 00000000 ____D C:\Dokumente und Einstellungen\SUSANNE KLEIN\IECompatCache
2013-12-01 20:48 - 2013-12-01 21:04 - 00000838 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2013-12-01 19:55 - 2013-12-01 19:55 - 00000000 ____D C:\Programme\Microsoft.NET
2013-12-01 19:47 - 2013-12-01 19:52 - 97243424 _____ C:\Dokumente und Einstellungen\SUSANNE KLEIN\Eigene Dateien\avira_free_antivirus_de.exe
2013-12-01 16:05 - 2013-12-01 17:21 - 00105176 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2013-12-01 16:05 - 2013-12-01 16:05 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2013-12-01 16:03 - 2013-12-01 17:20 - 00047064 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2013-11-30 21:56 - 2013-11-30 21:56 - 00000000 ____D C:\_OTL
2013-11-30 21:56 - 2011-07-13 03:55 - 02237440 ____R (OldTimer Tools) C:\OTLPE.exe
2013-11-30 21:47 - 2013-11-30 21:47 - 00000000 ____D C:\_OTL.1
2013-11-29 00:37 - 2013-11-29 00:37 - 00093856 _____ C:\OTL.Txt
2013-11-28 00:32 - 2013-12-01 22:42 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator
2013-11-28 00:32 - 2013-12-01 22:24 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Verlauf
2013-11-28 00:32 - 2013-11-28 00:33 - 00000190 ___SH C:\Dokumente und Einstellungen\Administrator\ntuser.ini
2013-11-28 00:32 - 2006-08-29 14:29 - 00012328 _____ C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2013-11-28 00:32 - 2006-08-29 14:28 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\ATI
2013-11-28 00:32 - 2006-08-29 14:15 - 00000141 _____ C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
2013-11-28 00:32 - 2006-08-29 14:11 - 00000747 _____ C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Internet Explorer.lnk
2013-11-28 00:32 - 2006-08-29 14:11 - 00000718 _____ C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Outlook Express.lnk
2013-11-28 00:32 - 2006-08-29 14:06 - 00001599 _____ C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Remoteunterstützung.lnk
2013-11-20 13:58 - 2013-11-20 13:58 - 00000754 _____ C:\WINDOWS\WORDPAD.INI
2013-11-14 17:45 - 2013-11-14 17:45 - 00015902 _____ C:\WINDOWS\KB2900986.log
2013-11-14 17:45 - 2013-11-14 17:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$
2013-11-14 17:45 - 2013-11-14 17:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-11-14 17:44 - 2013-11-14 17:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-11-14 17:44 - 2013-11-14 17:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2013-11-14 17:39 - 2013-11-14 17:44 - 00018647 _____ C:\WINDOWS\KB2888505-IE8.log
2013-11-14 14:27 - 2013-11-14 17:45 - 00028848 _____ C:\WINDOWS\KB2868626.log
2013-11-14 14:27 - 2013-11-14 17:45 - 00027813 _____ C:\WINDOWS\KB2862152.log
2013-11-14 14:26 - 2013-11-14 17:44 - 00027293 _____ C:\WINDOWS\KB2876331.log

==================== One Month Modified Files and Folders =======

2013-12-02 15:39 - 2013-12-02 01:55 - 00019690 _____ C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\FRST.txt
2013-12-02 15:38 - 2006-08-29 22:42 - 00001158 _____ C:\WINDOWS\system32\wpa.dbl
2013-12-02 15:38 - 2006-08-29 14:04 - 01556953 _____ C:\WINDOWS\WindowsUpdate.log
2013-12-02 15:37 - 2013-12-02 15:36 - 00000073 ___SH C:\cj.ini
2013-12-02 15:36 - 2010-02-07 13:30 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-02 15:36 - 2006-08-29 15:00 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-12-02 15:36 - 2006-08-29 15:00 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-12-02 15:36 - 2006-08-29 14:09 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-12-02 13:09 - 2007-01-06 02:58 - 00000190 ___SH C:\Dokumente und Einstellungen\SUSANNE KLEIN\ntuser.ini
2013-12-02 13:09 - 2007-01-06 02:58 - 00000000 ____D C:\Dokumente und Einstellungen\SUSANNE KLEIN
2013-12-02 13:09 - 2006-08-29 14:58 - 00524288 _____ C:\WINDOWS\system32\config\ACEEvent.evt
2013-12-02 13:09 - 2006-08-29 14:09 - 00032640 _____ C:\WINDOWS\SchedLgU.Txt
2013-12-02 13:08 - 2012-02-07 16:55 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2013-12-02 13:07 - 2006-08-29 14:03 - 00000000 ____D C:\WINDOWS\Registration
2013-12-02 13:01 - 2013-03-07 17:46 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-12-02 12:46 - 2006-08-29 14:57 - 00000000 ____D C:\Programme
2013-12-02 12:39 - 2007-04-30 21:45 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-12-02 12:34 - 2010-02-07 13:30 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-02 12:33 - 2007-01-06 23:58 - 00000000 ___RD C:\Dokumente und Einstellungen\STEPHAN WINGS\Startmenü\Programme\Autostart
2013-12-02 12:33 - 2007-01-06 02:58 - 00000000 ___RD C:\Dokumente und Einstellungen\SUSANNE KLEIN\Startmenü\Programme\Autostart
2013-12-02 02:04 - 2013-12-02 01:58 - 00031768 _____ C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\Addition.txt
2013-12-02 01:55 - 2013-12-02 01:55 - 00000000 ____D C:\FRST
2013-12-02 01:49 - 2013-12-02 01:49 - 00001413 _____ C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\JRT.txt
2013-12-02 01:44 - 2013-12-02 01:44 - 00000000 ____D C:\WINDOWS\ERUNT
2013-12-02 01:43 - 2013-12-02 01:43 - 01092187 _____ (Farbar) C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\FRST.exe
2013-12-02 01:43 - 2013-12-02 01:43 - 01034531 _____ (Thisisu) C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\JRT.exe
2013-12-02 01:37 - 2006-08-29 14:57 - 00475805 _____ C:\WINDOWS\setupapi.log
2013-12-02 01:32 - 2013-12-02 01:27 - 00000000 ____D C:\AdwCleaner
2013-12-02 01:26 - 2013-12-02 01:26 - 01110034 _____ C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\adwcleaner.exe
2013-12-01 23:11 - 2013-08-10 17:29 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
2013-12-01 23:05 - 2013-12-01 23:05 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
2013-12-01 23:05 - 2013-08-10 17:30 - 00001671 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
2013-12-01 23:05 - 2006-08-29 14:57 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2013-12-01 22:42 - 2013-11-28 00:32 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator
2013-12-01 22:42 - 2007-01-06 23:58 - 00000000 ____D C:\Dokumente und Einstellungen\STEPHAN WINGS
2013-12-01 22:42 - 2006-08-29 14:09 - 00000000 __SHD C:\Dokumente und Einstellungen\NetworkService
2013-12-01 22:42 - 2006-08-29 14:09 - 00000000 __SHD C:\Dokumente und Einstellungen\LocalService
2013-12-01 22:41 - 2013-12-01 22:41 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes' Anti-Malware (portable)
2013-12-01 22:40 - 2013-12-01 22:40 - 00000000 ____D C:\Programme\Avira
2013-12-01 22:40 - 2013-12-01 22:40 - 00000000 ____D C:\Dokumente und Einstellungen\SUSANNE KLEIN\Anwendungsdaten\Avira
2013-12-01 22:40 - 2013-12-01 22:40 - 00000000 ____D C:\Dokumente und Einstellungen\STEPHAN WINGS\Anwendungsdaten\Avira
2013-12-01 22:39 - 2013-12-01 21:08 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MFAData
2013-12-01 22:38 - 2013-12-01 21:32 - 00000000 ____D C:\Programme\Avira(2)
2013-12-01 22:26 - 2006-08-29 14:12 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-12-01 22:25 - 2007-01-06 02:58 - 00000000 ___RD C:\Dokumente und Einstellungen\SUSANNE KLEIN\Startmenü\Programme
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Zubehör
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ___HD C:\Dokumente und Einstellungen\Administrator\Druckumgebung
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\{3248F0A6-6813-11D6-A77B-00B0D0150000}
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Symantec
2013-12-01 22:24 - 2013-12-01 22:24 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\ATI
2013-12-01 22:24 - 2013-11-28 00:32 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Verlauf
2013-12-01 22:24 - 2007-02-21 18:04 - 00000000 ____D C:\Dokumente und Einstellungen\STEPHAN WINGS\Lokale Einstellungen\Anwendungsdaten\Google
2013-12-01 22:19 - 2009-04-18 15:47 - 00000000 ____D C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Google
2013-12-01 21:08 - 2013-12-01 21:08 - 00000000 ____D C:\Dokumente und Einstellungen\SUSANNE KLEIN\Lokale Einstellungen\Anwendungsdaten\MFAData
2013-12-01 21:05 - 2013-12-01 21:05 - 00000000 ____D C:\Dokumente und Einstellungen\SUSANNE KLEIN\IECompatCache
2013-12-01 21:04 - 2013-12-01 20:48 - 00000838 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2013-12-01 20:27 - 2010-03-04 14:37 - 00000000 ____D C:\WINDOWS\system32\de-DE
2013-12-01 19:55 - 2013-12-01 19:55 - 00000000 ____D C:\Programme\Microsoft.NET
2013-12-01 19:52 - 2013-12-01 19:47 - 97243424 _____ C:\Dokumente und Einstellungen\SUSANNE KLEIN\Eigene Dateien\avira_free_antivirus_de.exe
2013-12-01 18:24 - 2007-10-07 18:42 - 00000000 ___RD C:\Dokumente und Einstellungen\SUSANNE KLEIN\Desktop\Eigene Bilder
2013-12-01 17:21 - 2013-12-01 16:05 - 00105176 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2013-12-01 17:20 - 2013-12-01 16:03 - 00047064 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2013-12-01 17:17 - 2012-12-12 18:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2779562$
2013-12-01 16:05 - 2013-12-01 16:05 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2013-11-30 21:56 - 2013-11-30 21:56 - 00000000 ____D C:\_OTL
2013-11-30 21:47 - 2013-11-30 21:47 - 00000000 ____D C:\_OTL.1
2013-11-30 16:42 - 2007-01-06 23:58 - 00000190 ___SH C:\Dokumente und Einstellungen\STEPHAN WINGS\ntuser.ini
2013-11-29 00:37 - 2013-11-29 00:37 - 00093856 _____ C:\OTL.Txt
2013-11-28 00:55 - 2007-01-06 23:58 - 00013104 _____ C:\Dokumente und Einstellungen\STEPHAN WINGS\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2013-11-28 00:33 - 2013-11-28 00:32 - 00000190 ___SH C:\Dokumente und Einstellungen\Administrator\ntuser.ini
2013-11-21 14:27 - 2007-01-06 02:58 - 00000000 ___RD C:\Dokumente und Einstellungen\SUSANNE KLEIN\Eigene Dateien\Eigene Bilder
2013-11-20 14:18 - 2007-01-06 02:58 - 00000000 ___RD C:\Dokumente und Einstellungen\SUSANNE KLEIN\Eigene Dateien\Eigene Musik
2013-11-20 13:58 - 2013-11-20 13:58 - 00000754 _____ C:\WINDOWS\WORDPAD.INI
2013-11-19 17:58 - 2006-08-29 14:02 - 00069602 _____ C:\WINDOWS\wmsetup.log
2013-11-14 17:45 - 2013-11-14 17:45 - 00015902 _____ C:\WINDOWS\KB2900986.log
2013-11-14 17:45 - 2013-11-14 17:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$
2013-11-14 17:45 - 2013-11-14 17:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-11-14 17:45 - 2013-11-14 14:27 - 00028848 _____ C:\WINDOWS\KB2868626.log
2013-11-14 17:45 - 2013-11-14 14:27 - 00027813 _____ C:\WINDOWS\KB2862152.log
2013-11-14 17:45 - 2006-08-29 14:58 - 03103062 _____ C:\WINDOWS\FaxSetup.log
2013-11-14 17:45 - 2006-08-29 14:58 - 01481794 _____ C:\WINDOWS\ocgen.log
2013-11-14 17:45 - 2006-08-29 14:58 - 01188661 _____ C:\WINDOWS\tsoc.log
2013-11-14 17:45 - 2006-08-29 14:58 - 00882478 _____ C:\WINDOWS\comsetup.log
2013-11-14 17:45 - 2006-08-29 14:58 - 00533263 _____ C:\WINDOWS\ntdtcsetup.log
2013-11-14 17:45 - 2006-08-29 14:58 - 00494501 _____ C:\WINDOWS\iis6.log
2013-11-14 17:45 - 2006-08-29 14:58 - 00155215 _____ C:\WINDOWS\msgsocm.log
2013-11-14 17:45 - 2006-08-29 14:58 - 00145028 _____ C:\WINDOWS\ocmsn.log
2013-11-14 17:45 - 2006-08-29 14:58 - 00001393 _____ C:\WINDOWS\imsins.log
2013-11-14 17:45 - 2006-08-29 14:58 - 00001393 _____ C:\WINDOWS\imsins.BAK
2013-11-14 17:45 - 2006-08-29 14:23 - 00340087 _____ C:\WINDOWS\updspapi.log
2013-11-14 17:44 - 2013-11-14 17:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-11-14 17:44 - 2013-11-14 17:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2013-11-14 17:44 - 2013-11-14 17:39 - 00018647 _____ C:\WINDOWS\KB2888505-IE8.log
2013-11-14 17:44 - 2013-11-14 14:26 - 00027293 _____ C:\WINDOWS\KB2876331.log
2013-11-14 17:39 - 2013-09-02 11:23 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-14 17:35 - 2007-02-08 16:40 - 80340640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-14 13:59 - 2013-08-10 17:29 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-11-14 13:59 - 2013-08-10 17:29 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-11-08 22:09 - 2006-08-29 15:52 - 00000000 ____D C:\WINDOWS\Help

Some content of TEMP:
====================
C:\Dokumente und Einstellungen\SUSANNE KLEIN\Lokale Einstellungen\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2006-08-29 22:42] - [2008-04-14 07:52] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e 

C:\Windows\System32\winlogon.exe
[2006-08-29 22:42] - [2008-04-14 07:53] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a 

C:\Windows\System32\svchost.exe
[2006-08-29 22:42] - [2008-04-14 07:53] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366 

C:\Windows\System32\services.exe
[2006-08-29 22:42] - [2009-02-09 12:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc 

C:\Windows\System32\User32.dll
[2006-08-29 22:42] - [2008-04-14 07:52] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd 

C:\Windows\System32\userinit.exe
[2006-08-29 22:42] - [2008-04-14 07:53] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106 

C:\Windows\System32\Drivers\volsnap.sys
[2006-08-29 22:42] - [2008-04-14 07:22] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d 


==================== End Of Log ============================
         

--- --- ---

--- --- ---