Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Runtime Error 50003

Runtime Error 50003


Log-Analyse und Auswertung: Runtime Error 50003

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 20.01.2014, 18:29   #1
giankarlo
 
Runtime Error 50003 - Standard

Runtime Error 50003


OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 20.01.2014 18:15:06 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Giankarlo\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16750)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

5,00 Gb Total Physical Memory | 3,38 Gb Available Physical Memory | 67,65% Memory free
10,00 Gb Paging File | 7,69 Gb Available in Paging File | 76,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 121,61 Gb Total Space | 21,02 Gb Free Space | 17,29% Space Free | Partition Type: NTFS
Drive F: | 20,08 Gb Total Space | 16,03 Gb Free Space | 79,86% Space Free | Partition Type: NTFS
Drive I: | 931,42 Gb Total Space | 260,82 Gb Free Space | 28,00% Space Free | Partition Type: NTFS
Drive J: | 111,26 Gb Total Space | 2,51 Gb Free Space | 2,26% Space Free | Partition Type: NTFS
Drive L: | 7,44 Gb Total Space | 2,74 Gb Free Space | 36,87% Space Free | Partition Type: NTFS
Drive Z: | 69,29 Gb Total Space | 32,65 Gb Free Space | 47,12% Space Free | Partition Type: NTFS

Computer Name: GIANKARLO-PC | User Name: Giankarlo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Giankarlo\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe (Adobe Systems Inc.)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe (ArcSoft, Inc.)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.exe (CANON INC.)
PRC - C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE (CANON INC.)
PRC - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE ()
PRC - C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe (CyberLink)
PRC - C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe (CyberLink)
PRC - C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe ()
PRC - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe ()
PRC - C:\Program Files (x86)\ASUS\AASP\1.00.80\aaCenter.exe ()
PRC - C:\Program Files (x86)\ASUS\EPU-6 Engine\SixEngine.exe ()
PRC - C:\Program Files (x86)\ASUS\AI Direct Link\AsShare.exe (ASUS)
PRC - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
PRC - C:\Program Files (x86)\ASUS\AI Direct Link\AsCmd.exe ()
PRC - C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe ()
PRC - C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe (Portrait Displays, Inc.)
PRC - C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.)
PRC - C:\Program Files (x86)\Portrait Displays\Pivot Software\floater.exe ()
PRC - C:\Program Files (x86)\Portrait Displays\Pivot Software\wpCtrl.exe ()


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Locale\de_DE\acrotray.deu ()
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\464a76a3fdc9ee7456cb4baaea3e503a\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\e40d894a772b2cff5ffd5a84ef20d2d4\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b5b66869081b909d238fdea083cf3179\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\71d887ce964fb69b7f03c4fe7a3f28ff\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\dac1208781fdd0b960afc12efff42944\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\0b37b2bafc33ef52282b9d7b217cabaf\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\8927b576eb15c4a8f4bb04f05e7cc51e\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\4d277a8481c203a35c58bd277a2e71df\System.Xaml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\228b114c79c5d9024bdb4cc580e32c09\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\3a3fc0216674bdea0be809b305517c98\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\884bcbd22130ebeb1211bc7bcc3910c9\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System\de853615c8224ba5d9aa9b76276c6d98\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\cf58670896c5313b9b52f026f4455a5d\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\ASUS\AASP\1.00.80\aaCenter.exe ()
MOD - C:\Program Files (x86)\ASUS\EPU-6 Engine\SixEngine.exe ()
MOD - C:\Program Files (x86)\ASUS\AI Direct Link\AsCmd.exe ()
MOD - C:\Program Files (x86)\ASUS\EPU-6 Engine\AsSpindownTimeout.dll ()
MOD - C:\Program Files (x86)\ASUS\AASP\1.00.80\cpuutil.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Direct Link\AsNetlib.dll ()
MOD - C:\Program Files (x86)\Portrait Displays\Pivot Software\floater.exe ()
MOD - C:\Program Files (x86)\Portrait Displays\Pivot Software\wpCtrl.exe ()
MOD - C:\Program Files (x86)\Portrait Displays\Pivot Software\winphook.dll ()
MOD - C:\Windows\SysWOW64\AsIO.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Direct Link\AsMultiLang.dll ()
MOD - C:\Program Files (x86)\ASUS\AASP\1.00.80\PowerDll.dll ()
MOD - C:\Program Files (x86)\ASUS\EPU-6 Engine\pngio.dll ()


========== Services (SafeList) ==========

SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (ADExchange) -- C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe (ArcSoft, Inc.)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (IJPLMSVC) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE ()
SRV - (CyberLink PowerDVD 11.0 Service) -- C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe (CyberLink)
SRV - (CyberLink PowerDVD 11.0 Monitor Service) -- C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe (CyberLink)
SRV - (CLHNServiceForPowerDVD) -- C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe ()
SRV - (OS Selector) -- C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe ()
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (Nero BackItUp Scheduler 4.0) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
SRV - (DTSRVC) -- C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe ()
SRV - (PdiService) -- C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe (Portrait Displays, Inc.)


========== Driver Services (SafeList) ==========

DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (snapman) -- C:\Windows\SysNative\drivers\snapman.sys (Acronis)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\drivers\PxHlpa64.sys (Rovi Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (tsusbhub) -- C:\Windows\SysNative\drivers\tsusbhub.sys (Microsoft Corporation)
DRV:64bit: - (Synth3dVsc) -- C:\Windows\SysNative\drivers\Synth3dVsc.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (terminpt) -- C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (SCDEmu) -- C:\Windows\SysNative\drivers\scdemu.sys (PowerISO Computing, Inc.)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (WSDPrintDevice) -- C:\Windows\SysNative\drivers\WSDPrint.sys (Microsoft Corporation)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (L1E) -- C:\Windows\SysNative\drivers\L1E60x64.sys (Atheros Communications, Inc.)
DRV:64bit: - (PdiPorts) -- C:\Windows\SysNative\drivers\PdiPorts.sys (Portrait Displays, Inc.)
DRV:64bit: - (Pnp680r) -- C:\Windows\SysNative\drivers\PnP680r.sys (Silicon Image, Inc)
DRV:64bit: - (cmuda3) -- C:\Windows\SysNative\drivers\cmudax3.sys (C-Media Inc)
DRV:64bit: - (MTsensor) -- C:\Windows\SysNative\drivers\ASACPI.sys ()
DRV:64bit: - (MarvinBus) -- C:\Windows\SysNative\drivers\MarvinBus64.sys (Pinnacle Systems GmbH)
DRV - ({329F96B6-DF1E-4328-BFDA-39EA953C1312}) -- C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl (CyberLink Corp.)
DRV - (ntk_PowerDVD) -- C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD_64.sys (Cyberlink Corp.)
DRV - (ISODrive) -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys (EZB Systems, Inc.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 

IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=ds&q={searchTerms}&installDate={installDate}
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=ds&q={searchTerms}&installDate={installDate}
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=hp&installDate={installDate}
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9E 72 CC D0 26 38 CD 01 [binary data]
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=ds&q={searchTerms}&installDate={installDate}
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=ds&q={searchTerms}&installDate={installDate}
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=ds&q={searchTerms}&installDate={installDate}
IE - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Web Search"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "hxxp://www.gmx.de/"
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.21
FF - prefs.js..extensions.enabledAddons: web2pdfextension%40web2pdf.adobedotcom:1.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - prefs.js..keyword.URL: "hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=ds&installDate={installDate}&q="
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@canon.com/MycameraPlugin: C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension@web2pdf.adobedotcom: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014.01.17 17:33:38 | 000,000,000 | ---D | M]

[2012.04.08 22:24:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Giankarlo\AppData\Roaming\mozilla\Extensions
[2014.01.17 19:27:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Giankarlo\AppData\Roaming\mozilla\Firefox\Profiles\vqw2mu45.default\extensions
[2013.09.10 16:24:23 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Giankarlo\AppData\Roaming\mozilla\Firefox\Profiles\vqw2mu45.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2014.01.13 13:37:32 | 000,002,604 | ---- | M] () -- C:\Users\Giankarlo\AppData\Roaming\mozilla\firefox\profiles\vqw2mu45.default\searchplugins\Web Search.xml
[2013.09.09 02:30:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2014.01.09 17:38:02 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2014.01.17 17:33:38 | 000,000,000 | ---D | M] (Adobe Acrobat - Create PDF) -- C:\PROGRAM FILES (X86)\ADOBE\ACROBAT 10.0\ACROBAT\BROWSER\WCFIREFOXEXTN

O1 HOSTS File: ([2013.05.10 15:17:36 | 000,005,801 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com 
O1 - Hosts: 127.0.0.1 192.150.14.69 
O1 - Hosts: 127.0.0.1 192.150.18.101 
O1 - Hosts: 127.0.0.1 192.150.18.108 
O1 - Hosts: 127.0.0.1 192.150.22.40 
O1 - Hosts: 127.0.0.1 192.150.8.100 
O1 - Hosts: 127.0.0.1 192.150.8.118 
O1 - Hosts: 127.0.0.1 209-34-83-73.ood.opsource.net 
O1 - Hosts: 127.0.0.1 3dns-1.adobe.com 
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com 
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com 
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com 
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com 
O1 - Hosts: 127.0.0.1 3dns-4.adobe.com 
O1 - Hosts: 127.0.0.1 3dns.adobe.com 
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com 
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com 
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com 
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com 
O1 - Hosts: 127.0.0.1 activate.adobe.com 
O1 - Hosts: 127.0.0.1 activate.adobe.com 
O1 - Hosts: 127.0.0.1 activate.wip.adobe.com 
O1 - Hosts: 127.0.0.1 activate.wip1.adobe.com 
O1 - Hosts: 127.0.0.1 activate.wip2.adobe.com 
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com 
O1 - Hosts: 41 more lines...
O2:64bit: - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll File not found
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3:64bit: - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKU\S-1-5-21-1211304840-1541439233-3964124013-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [CmPCIaudio] C:\Windows\Syswow64\cmicnfg3.cpl (C-Media Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [DT ACR] C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe ()
O4 - HKLM..\Run: [PivotSoftware] C:\Program Files (x86)\Portrait Displays\Pivot Software\wpctrl.exe ()
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
O4 - HKLM..\Run: [RemoteControl11] C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: An vorhandene PDF-Datei anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Linkziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6D1EB7F3-2203-45E6-B0AC-B0CEEE9B50FC}: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - Unable to obtain root file information for disk L:\
O32 - AutoRun File - [2010.05.05 15:09:04 | 000,000,000 | ---- | M] () - Z:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014.01.20 18:05:04 | 000,000,000 | ---D | C] -- C:\ProgramData\CDB
[2014.01.18 22:28:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft
[2014.01.18 22:27:34 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
[2014.01.18 20:24:59 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\Desktop\Helicon Focus Pro
[2014.01.15 13:17:21 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\Desktop\Neuer Ordner (3)
[2014.01.15 12:26:00 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2014.01.15 12:26:00 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2014.01.15 12:25:59 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2014.01.15 12:25:59 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2014.01.15 12:25:59 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2014.01.15 12:25:59 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2014.01.15 12:25:59 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2014.01.15 12:25:59 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2014.01.15 12:25:59 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2014.01.15 12:25:59 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2014.01.15 12:25:59 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2014.01.15 12:25:58 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2014.01.15 12:25:58 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2014.01.15 12:25:58 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2014.01.15 12:25:57 | 003,959,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2014.01.15 12:22:50 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2014.01.15 12:22:50 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys
[2014.01.15 12:22:38 | 000,376,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2014.01.13 15:11:08 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\AppData\Local\Avg2014
[2014.01.13 13:36:40 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\AppData\Roaming\TuneUp Software
[2014.01.13 13:35:50 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2014.01.13 13:35:47 | 000,000,000 | -HSD | C] -- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
[2014.01.13 13:35:46 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2014.01.13 13:35:15 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\AppData\Roaming\OpenCandy
[2014.01.12 08:42:52 | 000,000,000 | ---D | C] -- C:\ProgramData\APN
[2014.01.12 08:42:50 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\AppData\Roaming\Avira
[2014.01.12 08:42:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2014.01.12 08:42:00 | 000,131,576 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys
[2014.01.12 08:42:00 | 000,108,440 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2014.01.12 08:42:00 | 000,084,720 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys
[2014.01.12 08:42:00 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2014.01.12 08:41:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2014.01.12 08:41:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2014.01.12 07:59:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2014.01.12 07:59:24 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2014.01.12 07:59:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2014.01.12 07:48:05 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\.appwork
[2014.01.12 07:11:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Logs
[2014.01.12 07:07:15 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014.01.11 23:03:32 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2014.01.11 23:03:31 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2014.01.11 23:03:31 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2014.01.11 23:03:30 | 014,631,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2014.01.11 22:58:32 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys
[2014.01.11 22:58:32 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\drmk.sys
[2014.01.11 22:58:29 | 000,404,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2014.01.11 22:58:12 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2014.01.11 22:58:05 | 001,930,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2014.01.11 22:58:05 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2014.01.11 22:58:05 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\credui.dll
[2014.01.11 22:58:05 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2014.01.11 22:58:05 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2014.01.11 22:57:50 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll
[2014.01.11 22:57:50 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll
[2014.01.11 22:57:50 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe
[2014.01.11 22:57:50 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx
[2014.01.11 22:57:50 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe
[2014.01.11 22:57:50 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshom.ocx
[2014.01.11 22:57:49 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2014.01.11 22:57:49 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2014.01.11 22:57:47 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2014.01.11 22:57:47 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2014.01.11 22:57:47 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2014.01.11 22:57:47 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2014.01.11 22:57:47 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2014.01.11 22:57:42 | 001,474,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2014.01.11 22:57:26 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
[2014.01.11 22:57:26 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
[2014.01.11 22:57:03 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\AppData\Local\JDownloader v2.0
[2014.01.11 22:56:13 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshwfp.dll
[2014.01.11 22:56:13 | 000,656,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll
[2014.01.11 22:56:13 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FWPUCLNT.DLL
[2014.01.11 22:56:13 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL
[2014.01.06 17:18:08 | 000,000,000 | ---D | C] -- C:\ProgramData\CanonIJ
[2014.01.05 18:57:29 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\Desktop\I K A
[2014.01.02 04:03:14 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\Desktop\F O F O C O M Gepostet
[2013.12.30 02:32:13 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\AppData\Roaming\ArcSoft
[2013.12.30 02:28:24 | 000,000,000 | ---D | C] -- C:\ProgramData\ArcSoft
[2013.12.30 02:28:22 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\AppData\Local\ArcSoft
[2013.12.30 02:28:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ArcSoft
[2013.12.30 02:28:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ArcSoft
[2013.12.30 01:57:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Portrait Professional Studio 10
[2013.12.30 01:56:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Portrait Professional Studio 10
[2013.12.28 13:26:56 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\AppData\Local\Helicon
[2013.12.28 13:26:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Helicon Software
[2013.12.28 13:26:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nikon
[2013.12.28 13:26:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Helicon Software
[2013.12.23 10:39:36 | 000,000,000 | ---D | C] -- C:\Users\Giankarlo\Desktop\GIA PROBOLI FOFOCOM

========== Files - Modified Within 30 Days ==========

[2014.01.20 18:07:53 | 000,021,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014.01.20 18:07:53 | 000,021,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014.01.20 18:05:43 | 000,000,163 | ---- | M] () -- C:\Windows\Reimage.ini
[2014.01.20 18:03:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014.01.20 17:58:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014.01.20 17:58:36 | 4025,835,520 | -HS- | M] () -- C:\hiberfil.sys
[2014.01.20 17:47:33 | 000,001,122 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2014.01.19 21:24:21 | 003,897,781 | ---- | M] () -- C:\Users\Giankarlo\Desktop\Imitlerim.mp3
[2014.01.19 21:04:44 | 004,242,948 | ---- | M] () -- C:\Users\Giankarlo\Desktop\Pappous.mp3
[2014.01.19 04:20:37 | 000,001,277 | ---- | M] () -- C:\Users\Giankarlo\Desktop\Helicon 3D Viewer.lnk
[2014.01.19 04:20:37 | 000,001,262 | ---- | M] () -- C:\Users\Giankarlo\Desktop\Helicon Focus.lnk
[2014.01.18 20:11:45 | 000,001,517 | ---- | M] () -- C:\Users\Giankarlo\Desktop\2014_01_16 - BLUMEN MAKROS - Verknüpfung.lnk
[2014.01.18 17:04:36 | 000,001,456 | ---- | M] () -- C:\Users\Giankarlo\AppData\Local\Adobe Für Web speichern 13.0 Prefs
[2014.01.17 17:33:43 | 000,002,035 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Acrobat X Pro.lnk
[2014.01.15 19:36:42 | 005,100,288 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014.01.13 06:28:27 | 008,224,183 | ---- | M] () -- C:\Users\Giankarlo\Desktop\IMG_0038.jpg
[2014.01.11 17:44:27 | 000,001,559 | ---- | M] () -- C:\Users\Giankarlo\Desktop\2014_01_10 - U P S Fotoshooting - Verknüpfung.lnk
[2014.01.05 19:12:18 | 000,002,028 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2013.12.28 13:26:31 | 000,001,288 | ---- | M] () -- C:\Users\Giankarlo\Desktop\Helicon Filter 5.lnk
[2013.12.23 13:11:26 | 001,439,176 | ---- | M] () -- C:\Users\Giankarlo\IMG_036.jpg

========== Files Created - No Company Name ==========

[2014.01.20 18:03:57 | 000,000,163 | ---- | C] () -- C:\Windows\Reimage.ini
[2014.01.20 17:47:33 | 000,001,122 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2014.01.19 21:24:13 | 003,897,781 | ---- | C] () -- C:\Users\Giankarlo\Desktop\Imitlerim.mp3
[2014.01.19 21:04:35 | 004,242,948 | ---- | C] () -- C:\Users\Giankarlo\Desktop\Pappous.mp3
[2014.01.19 04:20:37 | 000,001,277 | ---- | C] () -- C:\Users\Giankarlo\Desktop\Helicon 3D Viewer.lnk
[2014.01.19 04:20:37 | 000,001,262 | ---- | C] () -- C:\Users\Giankarlo\Desktop\Helicon Focus.lnk
[2014.01.18 20:11:45 | 000,001,517 | ---- | C] () -- C:\Users\Giankarlo\Desktop\2014_01_16 - BLUMEN MAKROS - Verknüpfung.lnk
[2014.01.13 06:28:36 | 008,224,183 | ---- | C] () -- C:\Users\Giankarlo\Desktop\IMG_0038.jpg
[2014.01.11 17:44:27 | 000,001,559 | ---- | C] () -- C:\Users\Giankarlo\Desktop\2014_01_10 - U P S Fotoshooting - Verknüpfung.lnk
[2014.01.05 19:12:18 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2014.01.05 19:12:18 | 000,002,028 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2013.12.28 13:26:31 | 000,001,288 | ---- | C] () -- C:\Users\Giankarlo\Desktop\Helicon Filter 5.lnk
[2013.12.23 13:11:19 | 001,439,176 | ---- | C] () -- C:\Users\Giankarlo\IMG_036.jpg
[2013.09.19 12:20:08 | 000,000,206 | ---- | C] () -- C:\Users\Giankarlo\AppData\Roaming\.ptbt0
[2013.09.01 14:02:24 | 000,001,456 | ---- | C] () -- C:\Users\Giankarlo\AppData\Local\Adobe Für Web speichern 13.0 Prefs
[2013.08.31 17:15:27 | 000,000,132 | ---- | C] () -- C:\Users\Giankarlo\AppData\Roaming\Adobe CS6-AIFF-Format - Voreinstellungen
[2013.07.12 13:01:34 | 000,786,504 | ---- | C] () -- C:\Windows\SysWow64\CNQ9602N.DAT
[2013.07.12 13:01:34 | 000,296,064 | ---- | C] () -- C:\Windows\SysWow64\CNQ9602W.DAT
[2013.06.11 13:25:57 | 000,006,144 | ---- | C] () -- C:\Users\Giankarlo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.05.06 02:32:06 | 000,000,244 | ---- | C] () -- C:\Users\Giankarlo\AppData\Roaming\default.rss
[2013.05.05 18:44:35 | 000,002,304 | ---- | C] () -- C:\Windows\SysWow64\Machnm32.sys
[2012.04.08 22:15:24 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.04.08 22:05:12 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2012.04.08 22:05:12 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys
[2012.04.08 21:41:41 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll
[2012.04.08 21:41:41 | 000,014,392 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
[2012.04.08 21:27:10 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\VMix.dll
[2012.04.08 21:27:04 | 000,000,501 | ---- | C] () -- C:\Windows\Cmicnfg3.ini.imi

========== ZeroAccess Check ==========

[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.07.26 03:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013.11.17 15:54:04 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\Anthropics
[2013.11.01 08:26:27 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\AVAST Software
[2013.06.09 01:33:09 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\Azureus
[2013.12.16 16:10:26 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\Canon
[2013.05.05 19:00:54 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\DisplayTune
[2013.12.09 12:45:47 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\elsterformular
[2013.05.09 12:34:20 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\HDRsoft
[2013.06.14 04:06:26 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\KW
[2014.01.13 13:35:15 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\OpenCandy
[2013.10.13 18:46:57 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\PACE Anti-Piracy
[2013.05.10 17:52:43 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2014.01.13 13:36:40 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\TuneUp Software
[2012.04.11 04:35:56 | 000,000,000 | ---D | M] -- C:\Users\Giankarlo\AppData\Roaming\Xilisoft

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 400 bytes -> C:\Users\Giankarlo\AppData\Local\desktop.ini:07a19238af92db80fe9045ca73c7a84e

< End of report >
--- --- ---
Alt 20.01.2014, 21:19   #2
schrauber
/// the machine
/// TB-Ausbilder
 
Runtime Error 50003 - Standard

Runtime Error 50003


hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 21.01.2014, 15:58   #3
giankarlo
 
Runtime Error 50003 - Standard

Runtime Error 50003


Danke für die schnelle Antwort. Ich bin ratlos. Kann keine Programme mehr deinstallieren, installieren geht bei nur einigen....Malwarebytes läuft nicht, OTL hat nicht geholfen.....

schnelle
FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-01-2014
Ran by Giankarlo (administrator) on GIANKARLO-PC on 21-01-2014 15:50:46
Running from C:\Users\Giankarlo\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ArcSoft, Inc.) C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe
() C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(WinZip Computing, S.L.) C:\Program Files (x86)\WinZip\WZQKPICK.EXE
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
() C:\Program Files (x86)\ASUS\EPU-6 Engine\SixEngine.exe
() C:\Program Files (x86)\ASUS\AASP\1.00.80\aaCenter.exe
() C:\Program Files (x86)\ASUS\AI Direct Link\AsCmd.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\Portrait Displays\Pivot Software\wpCtrl.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(ASUS) C:\Program Files (x86)\ASUS\AI Direct Link\AsShare.exe
() C:\Program Files (x86)\Portrait Displays\Pivot Software\Floater.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(CANON INC.) C:\Program Files (x86)\Canon\My Image Garden\cnmigmain.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [CmPCIaudio] - C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfg3.cpl,CMICtrlWnd
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [6936096 2008-11-25] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2008-11-25] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PWRISOVM.EXE] - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2010-04-12] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [RemoteControl11] - C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe [230696 2011-09-14] (CyberLink Corp.)
HKLM-x32\...\Run: [PivotSoftware] - C:\Program Files (x86)\Portrait Displays\Pivot Software\wpctrl.exe [694008 2007-02-09] ()
HKLM-x32\...\Run: [DT ACR] - C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [81920 2008-06-06] ()
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840568 2013-12-18] (Adobe Systems Inc.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [CanonQuickMenu] - C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41336 2013-12-18] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
MountPoints2: E - E:\setup.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=ds&q={searchTerms}&installDate={installDate}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=hp&installDate={installDate}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9E72CCD02638CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=ds&q={searchTerms}&installDate={installDate}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=ds&q={searchTerms}&installDate={installDate}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=ds&q={searchTerms}&installDate={installDate}
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Hosts: 127.0.0.1 activate.adobe.com                                       
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Giankarlo\AppData\Roaming\Mozilla\Firefox\Profiles\vqw2mu45.default
FF NewTab: hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=nt&installDate={installDate}
FF DefaultSearchEngine: Web Search
FF SelectedSearchEngine: Web Search
FF Homepage: hxxp://www.gmx.de/
FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=44796972-bc0a-ef49-6d65-d878d12c05ac&searchtype=ds&installDate={installDate}&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Giankarlo\AppData\Roaming\Mozilla\Firefox\Profiles\vqw2mu45.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\sweet-page.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Giankarlo\AppData\Roaming\Mozilla\Firefox\Profiles\vqw2mu45.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-09-10]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-05-10]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

==================== Services (Whitelisted) =================

R2 ADExchange; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [44736 2013-10-24] (ArcSoft, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 CLHNServiceForPowerDVD; C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [83240 2011-09-14] ()
R2 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [75048 2011-10-12] (CyberLink)
R2 CyberLink PowerDVD 11.0 Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [292136 2011-10-12] (CyberLink)
R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe [69632 2008-06-06] ()
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 OS Selector; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2139400 2010-05-25] ()

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [14392 2007-12-17] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [828416 2007-04-12] (C-Media Inc)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 L1E; C:\Windows\System32\DRIVERS\L1E60x64.sys [56832 2008-09-24] (Atheros Communications, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15680 2006-10-31] ()
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20520 2008-06-04] (Portrait Displays, Inc.)
R0 Pnp680r; C:\Windows\System32\DRIVERS\pnp680r.sys [125992 2007-07-24] (Silicon Image, Inc)
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [148976 2011-09-16] (CyberLink Corp.)
S3 athr; system32\DRIVERS\athrx.sys [x]
S3 cpuz134; \??\C:\Users\GIANKA~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-21 15:50 - 2014-01-21 15:51 - 00015503 _____ C:\Users\Giankarlo\Downloads\FRST.txt
2014-01-21 15:50 - 2014-01-21 15:50 - 00000000 ____D C:\FRST
2014-01-21 15:49 - 2014-01-21 15:49 - 02077184 _____ (Farbar) C:\Users\Giankarlo\Downloads\FRST64.exe
2014-01-20 18:31 - 2014-01-20 18:31 - 00104564 _____ C:\Users\Giankarlo\Desktop\otl.txt
2014-01-20 18:05 - 2014-01-20 18:05 - 00000000 ____D C:\ProgramData\CDB
2014-01-20 18:03 - 2014-01-20 18:05 - 00000163 _____ C:\Windows\Reimage.ini
2014-01-20 17:47 - 2014-01-20 17:47 - 00001122 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-20 17:46 - 2014-01-20 17:47 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Giankarlo\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-20 17:21 - 2014-01-20 17:21 - 00388608 _____ (Trend Micro Inc.) C:\Users\Giankarlo\Downloads\HiJackThis204.exe
2014-01-20 03:05 - 2014-01-20 03:08 - 00000000 ____D C:\Users\Giankarlo\Downloads\MOOVIES - TA EIDA
2014-01-19 06:43 - 2014-01-19 06:43 - 00000000 ____D C:\Users\Giankarlo\Downloads\Calloways
2014-01-19 04:20 - 2014-01-19 04:20 - 00001277 _____ C:\Users\Giankarlo\Desktop\Helicon 3D Viewer.lnk
2014-01-19 04:20 - 2014-01-19 04:20 - 00001262 _____ C:\Users\Giankarlo\Desktop\Helicon Focus.lnk
2014-01-18 22:27 - 2014-01-18 22:27 - 00292184 _____ (Microsoft Corporation) C:\Users\Giankarlo\Downloads\dxwebsetup.exe
2014-01-18 22:27 - 2014-01-18 22:27 - 00000000 ____D C:\Windows\SysWOW64\directx
2014-01-18 20:24 - 2014-01-18 20:25 - 00000000 ____D C:\Users\Giankarlo\Desktop\Helicon Focus Pro
2014-01-18 20:11 - 2014-01-18 20:11 - 00001517 _____ C:\Users\Giankarlo\Desktop\2014_01_16 - BLUMEN MAKROS - Verknüpfung.lnk
2014-01-18 05:45 - 2014-01-18 05:46 - 00000000 ____D C:\Users\Giankarlo\Downloads\cumbe
2014-01-16 18:22 - 2014-01-16 18:22 - 00001458 _____ C:\Users\Giankarlo\Downloads\ΑποστολήΕμβάσματος.Csv
2014-01-15 13:17 - 2014-01-20 16:32 - 00000000 ____D C:\Users\Giankarlo\Desktop\Neuer Ordner (3)
2014-01-15 12:26 - 2013-10-25 07:17 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-15 12:26 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-15 12:26 - 2013-10-25 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-15 12:26 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-15 12:25 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-15 12:25 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-15 12:25 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-15 12:25 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-15 12:25 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-15 12:25 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-15 12:25 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-15 12:25 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-15 12:25 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-15 12:25 - 2013-10-25 07:17 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-15 12:25 - 2013-10-25 07:17 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-15 12:25 - 2013-10-25 07:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-15 12:25 - 2013-10-25 07:17 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-15 12:25 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-15 12:25 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-15 12:25 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-15 12:25 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-15 12:25 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-15 12:25 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-15 12:25 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-15 12:25 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-15 12:25 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-15 12:25 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-15 12:25 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-15 12:25 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-15 12:25 - 2013-10-25 04:17 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-15 12:25 - 2013-10-25 03:49 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-15 12:22 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 12:22 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 12:22 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 12:22 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 12:22 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 12:22 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 12:22 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 12:22 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 12:22 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-13 15:11 - 2014-01-13 15:11 - 00000000 ____D C:\Users\Giankarlo\AppData\Local\Avg2014
2014-01-13 13:36 - 2014-01-13 13:36 - 00000000 ____D C:\Users\Giankarlo\AppData\Roaming\TuneUp Software
2014-01-13 13:35 - 2014-01-17 19:25 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-01-13 13:35 - 2014-01-13 15:02 - 00000000 ____D C:\ProgramData\TuneUp Software
2014-01-13 13:35 - 2014-01-13 13:35 - 00000000 ____D C:\Users\Giankarlo\AppData\Roaming\OpenCandy
2014-01-12 08:42 - 2014-01-12 08:42 - 00000000 ____D C:\Users\Giankarlo\AppData\Roaming\Avira
2014-01-12 08:42 - 2014-01-12 08:42 - 00000000 ____D C:\ProgramData\APN
2014-01-12 08:42 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-12 08:42 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-12 08:42 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-12 08:42 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-12 08:41 - 2014-01-12 08:41 - 00000000 ____D C:\ProgramData\Avira
2014-01-12 08:41 - 2014-01-12 08:41 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-12 07:59 - 2014-01-20 17:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-12 07:59 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-12 07:48 - 2014-01-12 07:48 - 00000000 ____D C:\Users\Giankarlo\.appwork
2014-01-12 07:07 - 2014-01-12 07:54 - 00000000 ____D C:\AdwCleaner
2014-01-11 23:03 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-11 23:03 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-11 23:03 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-01-11 23:03 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-01-11 22:58 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-01-11 22:58 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-01-11 22:58 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-11 22:58 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-01-11 22:58 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-01-11 22:58 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-01-11 22:58 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-11 22:58 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-01-11 22:58 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-01-11 22:58 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-01-11 22:58 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-01-11 22:58 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-01-11 22:58 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-11 22:58 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-01-11 22:57 - 2014-01-12 07:48 - 00000000 ____D C:\Users\Giankarlo\AppData\Local\JDownloader v2.0
2014-01-11 22:57 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-01-11 22:57 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-11 22:57 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-01-11 22:57 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-01-11 22:57 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-01-11 22:57 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-11 22:57 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-01-11 22:57 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-01-11 22:57 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-01-11 22:57 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-01-11 22:57 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-01-11 22:57 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-01-11 22:57 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-11 22:57 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-01-11 22:57 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-11 22:57 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-01-11 22:57 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-11 22:57 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-11 22:57 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-01-11 22:57 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-01-11 22:57 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-01-11 22:57 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-11 22:57 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-01-11 22:57 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-01-11 22:57 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-01-11 22:57 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-01-11 22:57 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-01-11 22:57 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-01-11 22:57 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-01-11 22:56 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-01-11 22:56 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-11 22:56 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-01-11 22:56 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-01-11 22:56 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-01-11 17:44 - 2014-01-11 17:44 - 00001559 _____ C:\Users\Giankarlo\Desktop\2014_01_10 - U P S  Fotoshooting - Verknüpfung.lnk
2014-01-11 07:55 - 2014-01-11 07:55 - 00000000 ____D C:\Users\Giankarlo\Downloads\o.la-xath.kaan
2014-01-07 07:25 - 2014-01-07 07:26 - 00000000 ____D C:\Users\Giankarlo\Downloads\ffin
2014-01-06 17:18 - 2014-01-06 17:18 - 00000000 ____D C:\ProgramData\CanonIJ
2014-01-06 06:51 - 2014-01-06 06:51 - 00000000 ____D C:\Users\Giankarlo\Downloads\qiqfpe___--Y....BAR-FHE,IVI,BE_ran.y1axx
2014-01-05 19:12 - 2014-01-05 19:12 - 00002028 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-05 18:57 - 2014-01-06 18:00 - 00000000 ____D C:\Users\Giankarlo\Desktop\I K A
2014-01-05 18:57 - 2014-01-05 18:57 - 02690344 _____ C:\Users\Giankarlo\Downloads\scan.rar
2014-01-04 05:19 - 2014-01-04 05:19 - 00000000 ____D C:\Users\Giankarlo\Downloads\amrod
2014-01-04 05:02 - 2014-01-04 05:03 - 00000000 ____D C:\Users\Giankarlo\Downloads\nvited
2014-01-02 18:00 - 2014-01-02 18:00 - 00036987 _____ C:\Users\Giankarlo\Downloads\y2pKEZw4bts3Sz87VLLFKokf-4HQOgcD6xxMStyJ7ejZAzWZYXz-QJ_8H86E4tPjgDJJ0brgbe9WLs2fN2CbACgODk7sMJl0VFO5hP9qLL_TiA
2014-01-02 04:03 - 2014-01-20 15:58 - 00000000 ____D C:\Users\Giankarlo\Desktop\F O F O C O M Gepostet
2013-12-30 02:32 - 2013-12-30 02:32 - 00000000 ____D C:\Users\Giankarlo\AppData\Roaming\ArcSoft
2013-12-30 02:28 - 2013-12-30 03:28 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2013-12-30 02:28 - 2013-12-30 02:28 - 00000000 ____D C:\Users\Giankarlo\AppData\Local\ArcSoft
2013-12-30 02:28 - 2013-12-30 02:28 - 00000000 ____D C:\ProgramData\ArcSoft
2013-12-30 01:56 - 2014-01-12 08:54 - 00000000 ____D C:\Program Files (x86)\Portrait Professional Studio 10
2013-12-28 13:26 - 2014-01-19 04:20 - 00002686 _____ C:\Windows\KB893803v2.log
2013-12-28 13:26 - 2014-01-18 20:19 - 00000000 ____D C:\Program Files (x86)\Helicon Software
2013-12-28 13:26 - 2013-12-28 13:26 - 00001288 _____ C:\Users\Giankarlo\Desktop\Helicon Filter 5.lnk
2013-12-28 13:26 - 2013-12-28 13:26 - 00000000 ____D C:\Users\Giankarlo\AppData\Local\Helicon
2013-12-23 10:39 - 2014-01-20 15:58 - 00000000 ____D C:\Users\Giankarlo\Desktop\GIA PROBOLI FOFOCOM

==================== One Month Modified Files and Folders =======

2014-01-21 15:51 - 2014-01-21 15:50 - 00015503 _____ C:\Users\Giankarlo\Downloads\FRST.txt
2014-01-21 15:50 - 2014-01-21 15:50 - 00000000 ____D C:\FRST
2014-01-21 15:49 - 2014-01-21 15:49 - 02077184 _____ (Farbar) C:\Users\Giankarlo\Downloads\FRST64.exe
2014-01-21 15:43 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-21 15:43 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-21 15:39 - 2012-04-08 21:16 - 01737629 _____ C:\Windows\WindowsUpdate.log
2014-01-21 15:33 - 2012-01-10 20:14 - 00022904 _____ C:\Windows\setupact.log
2014-01-21 15:33 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-21 05:03 - 2012-04-08 22:23 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-21 04:03 - 2012-04-11 04:54 - 00000000 ____D C:\Users\Giankarlo\AppData\Roaming\vlc
2014-01-21 04:00 - 2012-05-22 17:25 - 00003962 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{166E1BDD-3C98-4C5B-A13F-6EB5629EEA51}
2014-01-21 03:52 - 2010-11-21 04:47 - 00931592 _____ C:\Windows\PFRO.log
2014-01-20 18:31 - 2014-01-20 18:31 - 00104564 _____ C:\Users\Giankarlo\Desktop\otl.txt
2014-01-20 18:05 - 2014-01-20 18:05 - 00000000 ____D C:\ProgramData\CDB
2014-01-20 18:05 - 2014-01-20 18:03 - 00000163 _____ C:\Windows\Reimage.ini
2014-01-20 17:47 - 2014-01-20 17:47 - 00001122 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-20 17:47 - 2014-01-20 17:46 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Giankarlo\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-20 17:47 - 2014-01-12 07:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-20 17:21 - 2014-01-20 17:21 - 00388608 _____ (Trend Micro Inc.) C:\Users\Giankarlo\Downloads\HiJackThis204.exe
2014-01-20 16:32 - 2014-01-15 13:17 - 00000000 ____D C:\Users\Giankarlo\Desktop\Neuer Ordner (3)
2014-01-20 15:58 - 2014-01-02 04:03 - 00000000 ____D C:\Users\Giankarlo\Desktop\F O F O C O M Gepostet
2014-01-20 15:58 - 2013-12-23 10:39 - 00000000 ____D C:\Users\Giankarlo\Desktop\GIA PROBOLI FOFOCOM
2014-01-20 03:08 - 2014-01-20 03:05 - 00000000 ____D C:\Users\Giankarlo\Downloads\MOOVIES - TA EIDA
2014-01-19 19:19 - 2013-12-16 15:59 - 00000000 ____D C:\ProgramData\CanonIJPLM
2014-01-19 06:43 - 2014-01-19 06:43 - 00000000 ____D C:\Users\Giankarlo\Downloads\Calloways
2014-01-19 04:20 - 2014-01-19 04:20 - 00001277 _____ C:\Users\Giankarlo\Desktop\Helicon 3D Viewer.lnk
2014-01-19 04:20 - 2014-01-19 04:20 - 00001262 _____ C:\Users\Giankarlo\Desktop\Helicon Focus.lnk
2014-01-19 04:20 - 2013-12-28 13:26 - 00002686 _____ C:\Windows\KB893803v2.log
2014-01-18 22:27 - 2014-01-18 22:27 - 00292184 _____ (Microsoft Corporation) C:\Users\Giankarlo\Downloads\dxwebsetup.exe
2014-01-18 22:27 - 2014-01-18 22:27 - 00000000 ____D C:\Windows\SysWOW64\directx
2014-01-18 20:25 - 2014-01-18 20:24 - 00000000 ____D C:\Users\Giankarlo\Desktop\Helicon Focus Pro
2014-01-18 20:19 - 2013-12-28 13:26 - 00000000 ____D C:\Program Files (x86)\Helicon Software
2014-01-18 20:11 - 2014-01-18 20:11 - 00001517 _____ C:\Users\Giankarlo\Desktop\2014_01_16 - BLUMEN MAKROS - Verknüpfung.lnk
2014-01-18 17:04 - 2013-09-01 14:02 - 00001456 _____ C:\Users\Giankarlo\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2014-01-18 05:46 - 2014-01-18 05:45 - 00000000 ____D C:\Users\Giankarlo\Downloads\cumbe
2014-01-17 19:25 - 2014-01-13 13:35 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-01-17 17:33 - 2013-10-17 11:19 - 00002035 _____ C:\Users\Public\Desktop\Adobe Acrobat X Pro.lnk
2014-01-16 18:22 - 2014-01-16 18:22 - 00001458 _____ C:\Users\Giankarlo\Downloads\ΑποστολήΕμβάσματος.Csv
2014-01-15 19:36 - 2009-07-14 05:45 - 05100288 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 12:25 - 2013-08-31 14:21 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 12:23 - 2012-01-10 19:35 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 16:03 - 2013-06-09 05:55 - 00024576 ___SH C:\Users\Giankarlo\Thumbs.db
2014-01-14 05:48 - 2013-10-16 08:57 - 00000000 ____D C:\Users\Giankarlo\Desktop\Neuer Ordner
2014-01-13 15:11 - 2014-01-13 15:11 - 00000000 ____D C:\Users\Giankarlo\AppData\Local\Avg2014
2014-01-13 15:08 - 2012-04-12 15:22 - 00000000 ____D C:\Users\Giankarlo\AppData\Local\Downloaded Installations
2014-01-13 15:02 - 2014-01-13 13:35 - 00000000 ____D C:\ProgramData\TuneUp Software
2014-01-13 13:36 - 2014-01-13 13:36 - 00000000 ____D C:\Users\Giankarlo\AppData\Roaming\TuneUp Software
2014-01-13 13:35 - 2014-01-13 13:35 - 00000000 ____D C:\Users\Giankarlo\AppData\Roaming\OpenCandy
2014-01-13 10:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2014-01-12 19:58 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2014-01-12 08:54 - 2013-12-30 01:56 - 00000000 ____D C:\Program Files (x86)\Portrait Professional Studio 10
2014-01-12 08:42 - 2014-01-12 08:42 - 00000000 ____D C:\Users\Giankarlo\AppData\Roaming\Avira
2014-01-12 08:42 - 2014-01-12 08:42 - 00000000 ____D C:\ProgramData\APN
2014-01-12 08:41 - 2014-01-12 08:41 - 00000000 ____D C:\ProgramData\Avira
2014-01-12 08:41 - 2014-01-12 08:41 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-12 07:56 - 2013-11-28 15:52 - 00000000 ____D C:\Users\Giankarlo\Desktop\Neuer Ordner (2)
2014-01-12 07:56 - 2013-10-04 18:59 - 00000000 ____D C:\Users\Giankarlo\Downloads\Neuer Ordner
2014-01-12 07:54 - 2014-01-12 07:07 - 00000000 ____D C:\AdwCleaner
2014-01-12 07:52 - 2013-05-09 18:10 - 00000000 ____D C:\Users\Giankarlo\AppData\Local\Adobe
2014-01-12 07:48 - 2014-01-12 07:48 - 00000000 ____D C:\Users\Giankarlo\.appwork
2014-01-12 07:48 - 2014-01-11 22:57 - 00000000 ____D C:\Users\Giankarlo\AppData\Local\JDownloader v2.0
2014-01-12 07:48 - 2012-04-08 21:14 - 00000000 ____D C:\Users\Giankarlo
2014-01-12 07:31 - 2013-10-26 21:07 - 00001092 _____ C:\Users\Giankarlo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-01-12 07:31 - 2012-04-08 21:14 - 00000972 _____ C:\Users\Giankarlo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-11 17:44 - 2014-01-11 17:44 - 00001559 _____ C:\Users\Giankarlo\Desktop\2014_01_10 - U P S  Fotoshooting - Verknüpfung.lnk
2014-01-11 07:55 - 2014-01-11 07:55 - 00000000 ____D C:\Users\Giankarlo\Downloads\o.la-xath.kaan
2014-01-10 05:06 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-10 04:36 - 2013-06-01 22:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-10 04:36 - 2013-06-01 22:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-09 18:17 - 2012-04-08 22:24 - 00000000 ____D C:\Users\Giankarlo\AppData\Local\Mozilla
2014-01-07 07:26 - 2014-01-07 07:25 - 00000000 ____D C:\Users\Giankarlo\Downloads\ffin
2014-01-06 18:00 - 2014-01-05 18:57 - 00000000 ____D C:\Users\Giankarlo\Desktop\I K A
2014-01-06 17:18 - 2014-01-06 17:18 - 00000000 ____D C:\ProgramData\CanonIJ
2014-01-06 06:51 - 2014-01-06 06:51 - 00000000 ____D C:\Users\Giankarlo\Downloads\qiqfpe___--Y....BAR-FHE,IVI,BE_ran.y1axx
2014-01-05 19:12 - 2014-01-05 19:12 - 00002028 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-05 19:12 - 2012-04-08 22:07 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-05 19:11 - 2013-05-09 18:10 - 00000000 ____D C:\ProgramData\Adobe
2014-01-05 18:57 - 2014-01-05 18:57 - 02690344 _____ C:\Users\Giankarlo\Downloads\scan.rar
2014-01-04 05:19 - 2014-01-04 05:19 - 00000000 ____D C:\Users\Giankarlo\Downloads\amrod
2014-01-04 05:03 - 2014-01-04 05:02 - 00000000 ____D C:\Users\Giankarlo\Downloads\nvited
2014-01-02 18:00 - 2014-01-02 18:00 - 00036987 _____ C:\Users\Giankarlo\Downloads\y2pKEZw4bts3Sz87VLLFKokf-4HQOgcD6xxMStyJ7ejZAzWZYXz-QJ_8H86E4tPjgDJJ0brgbe9WLs2fN2CbACgODk7sMJl0VFO5hP9qLL_TiA
2013-12-30 03:48 - 2013-11-17 15:53 - 00000000 ____D C:\Program Files (x86)\Portrait Professional 11 Test
2013-12-30 03:28 - 2013-12-30 02:28 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2013-12-30 03:28 - 2012-04-08 21:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-30 02:32 - 2013-12-30 02:32 - 00000000 ____D C:\Users\Giankarlo\AppData\Roaming\ArcSoft
2013-12-30 02:28 - 2013-12-30 02:28 - 00000000 ____D C:\Users\Giankarlo\AppData\Local\ArcSoft
2013-12-30 02:28 - 2013-12-30 02:28 - 00000000 ____D C:\ProgramData\ArcSoft
2013-12-28 13:26 - 2013-12-28 13:26 - 00001288 _____ C:\Users\Giankarlo\Desktop\Helicon Filter 5.lnk
2013-12-28 13:26 - 2013-12-28 13:26 - 00000000 ____D C:\Users\Giankarlo\AppData\Local\Helicon
2013-12-28 07:08 - 2013-07-22 15:01 - 00000000 ____D C:\Users\Giankarlo\Desktop\SMOKIE
2013-12-22 05:43 - 2013-05-09 18:10 - 00000000 ____D C:\Users\Giankarlo\AppData\Roaming\Adobe

Some content of TEMP:
====================
C:\Users\Giankarlo\AppData\Local\Temp\avgnt.exe
C:\Users\Giankarlo\AppData\Local\Temp\BingBarSetup-Partner.exe
C:\Users\Giankarlo\AppData\Local\Temp\ReimagePackage.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 00:58

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-01-2014
Ran by Giankarlo at 2014-01-21 15:51:29
Running from C:\Users\Giankarlo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

"Nero SoundTrax Help (x32 Version: 4.0.15.0 - Nero AG) Hidden
Acer eDisplay Management (x32 Version: 1.20.011 - Portrait Displays, Inc.)
Acronis*Disk*Director*Home (x32 Version: 11.0.216 - Acronis)
Adobe Acrobat X Pro - English, Français, Deutsch (x32 Version: 10.1.9 - Adobe Systems)
Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden
Adobe Creative Suite 6 Master Collection (x32 Version: 6 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden
Adobe Photoshop Lightroom 4.1 64-bit (Version: 4.1.2 - Adobe)
Adobe Photoshop Lightroom 5.2 64-bit (Version: 5.2.1 - Adobe)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Widget Browser (x32 Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Adobe Widget Browser (x32 Version: 2.0.348 - Adobe Systems Incorporated.) Hidden
Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden
AI Direct Link (x32 Version: 1.00.21 - )
AMD Drag and Drop Transcoding (Version: 2.00.0000 - ATI Technologies Inc.) Hidden
Ashampoo Music Studio 3 (x32 Version:  - ashampoo GmbH & Co. KG)
Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.38 - Atheros Communications Inc.)
Atheros Ethernet Utility (x32 Version: 1.1.0.3 - Atheros Communications Inc.)
ATI AVIVO64 Codecs (Version: 11.6.0.50527 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (Version: 3.0.778.0 - ATI Technologies, Inc.)
Aureon 5.1 PCI (Version:  - )
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Canon Easy-WebPrint EX (x32 Version: 1.4.0.0 - Canon Inc.)
Canon IJ Network Tool (x32 Version: 3.1.0 - Canon Inc.)
CANON iMAGE GATEWAY MyCamera Download Plugin (x32 Version: 3.1.0.1 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (x32 Version: 1.8.0.1 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32 Version: 4.0.0 - Canon Inc.)
Canon Internet Library for ZoomBrowser EX (x32 Version: 1.7.0.1 - Canon Inc.)
Canon iP7200 series Benutzerregistrierung (x32 Version:  - Canon Inc.‎)
Canon iP7200 series On-screen Manual (x32 Version: 7.5.0 - Canon Inc.)
Canon iP7200 series Printer Driver (Version:  - Canon Inc.)
Canon MOV Decoder (x32 Version: 1.7.0.6 - Canon Inc.)
Canon MOV Encoder (x32 Version: 1.5.0.3 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 3.6.0.5 - Canon Inc.)
Canon MP Navigator EX 3.1 (x32 Version:  - )
Canon My Image Garden (x32 Version: 1.1.2 - Canon Inc.)
Canon My Image Garden Design Files (x32 Version: 1.0.1 - Canon Inc.)
Canon My Printer (x32 Version: 3.0.0 - Canon Inc.)
Canon Quick Menu (x32 Version: 2.0.0 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.9 (x32 Version: 3.9.1.0 - Canon Inc.)
Canon Utilities EOS Utility (x32 Version: 2.9.0.0 - Canon Inc.)
Canon Utilities PhotoStitch (x32 Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (x32 Version: 1.8.0.0 - Canon Inc.)
Canon Utilities WFT Utility (x32 Version: 3.5.1.1 - Canon Inc.)
Canon Utilities ZoomBrowser EX (x32 Version: 6.6.0.23 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (x32 Version: 1.4.0.4 - Canon Inc.)
CanoScan 9000F Scanner Driver (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0527.1242.20909 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0527.1242.20909 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0527.1242.20909 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0527.1242.20909 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help English (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help French (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help German (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0527.1241.20909 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0527.1242.20909 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.0527.1242.20909 - ATI) Hidden
CyberLink PowerDVD 11 (x32 Version: 11.0.2218.53 - CyberLink Corp.)
CyberLink PowerDVD 11 (x32 Version: 11.0.2218.53 - CyberLink Corp.) Hidden
DolbyFiles (x32 Version: 2.0 - Nero AG) Hidden
DRI Tool 2.0 (x32 Version: 2.0 - Traumflieger)
EasyBCD 2.1.2 (x32 Version: 2.1.2 - NeoSmart Technologies)
ElsterFormular (x32 Version: 14.4.20130909 - Landesfinanzdirektion Thüringen)
EPU-6 Engine (x32 Version: 1.00.28 - )
Express Gate (x32 Version: 1.3.13.2 - DeviceVM, Inc.)
Helicon Filter 5.0.26 (x32 Version:  - Helicon Soft Ltd.)
Helicon Focus 5.3.11 (x32 Version:  - Helicon Soft Ltd.)
HydraVision (x32 Version: 4.2.166.0 - ATI Technologies Inc.) Hidden
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
JDownloader 0.9 (x32 Version: 0.9 - AppWork GmbH)
Knoll Light Factory EZ Studio 15 (x32 Version:  - )
Luminance HDR 2.3.1 (Version:  - Luminance HDR Dev Team)
Magic Bullet Looks Studio 15 (x32 Version:  - )
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Menu Templates - Starter Kit (x32 Version: 9.0.4.0 - Nero AG) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Windows Media Video 9 VCM (x32 Version:  - )
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Movie Templates - Starter Kit (x32 Version: 9.0.4.0 - Nero AG) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 (x32 Version:  - Nero AG)
Nero BurningROM (x32 Version: 9.0.0.0 - Nero AG) Hidden
Nero BurnRights (x32 Version: 2.99.6.100 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 0.0.0.1 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero CoverDesigner (x32 Version: 4.0.5.100 - Nero AG) Hidden
Nero CoverDesigner Help (x32 Version: 4.0.0.0 - Nero AG) Hidden
Nero Disc Copy Gadget (x32 Version: 1.53.0.0 - Nero AG) Hidden
Nero Disc Copy Gadget Help (x32 Version: 2.0.0.0 - Nero AG) Hidden
Nero DiscSpeed (x32 Version: 4.99.5.105 - Nero AG) Hidden
Nero DriveSpeed (x32 Version: 3.99.5.105 - Nero AG) Hidden
Nero Express (x32 Version: 9.0.0.0 - Nero AG) Hidden
Nero InfoTool (x32 Version: 5.99.5.105 - Nero AG) Hidden
Nero Installer (x32 Version: 2.0.0.1 - Nero AG) Hidden
Nero Live (x32 Version: 1.0.164.0 - Nero AG) Hidden
Nero Live Help (x32 Version: 1.0.162.0 - Nero AG) Hidden
Nero PhotoSnap (x32 Version: 1.53.2.0 - Nero AG) Hidden
Nero PhotoSnap Help (x32 Version: 1.53.2.0 - Nero AG) Hidden
Nero Recode (x32 Version: 3.53.0.0 - Nero AG) Hidden
Nero Recode Help (x32 Version: 3.53.0.0 - Nero AG) Hidden
Nero Rescue Agent (x32 Version: 1.99.0.1 - Nero AG) Hidden
Nero RescueAgent Help (x32 Version: 1.99.0.1 - Nero AG) Hidden
Nero ShowTime (x32 Version: 4.99.0.0 - Nero AG) Hidden
Nero StartSmart (x32 Version: 9.0.9.100 - Nero AG) Hidden
Nero StartSmart Help (x32 Version: 9.0.0.0 - Nero AG) Hidden
Nero Vision (x32 Version: 0.0.0.1 - Nero AG) Hidden
Nero Vision (x32 Version: 6.0.6.100 - Nero AG) Hidden
Nero WaveEditor (x32 Version: 5.0.18.0 - Nero AG) Hidden
Nero WaveEditor Help (x32 Version: 5.0.15.0 - Nero AG) Hidden
NeroBurningROM (x32 Version: 9.0.9.100 - Nero AG) Hidden
NeroExpress (x32 Version: 9.0.9.100 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
PC Probe II (x32 Version: 1.04.60 - ASUSTek)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
Photomatix Pro version 4.2.6 (Version: 4.2.6 - HDRsoft Ltd)
Pinnacle Studio 15 (x32 Version: 15.0.0.7593 - Pinnacle Systems)
Pinnacle Studio 15 Ultimate Collection Plugins (x32 Version: 15.0.0.7593 - Pinnacle Systems)
Pinnacle Studio Bonus Content (x32 Version: 15.0.0.51 - Pinnacle Systems)
Pinnacle Video Treiber (Version: 12.1.0.030 - Pinnacle Systems)
Pivot Software (x32 Version: 8.21.013 - Portrait Displays, Inc.) Hidden
Portrait Professional 11.3 Test (x32 Version: 11.3 - Anthropics Technology Ltd.)
Portrait Professional Studio 10.8 (x32 Version: 10.8 - Anthropics Technology Ltd.)
PowerISO (x32 Version: 4.7 - PowerISO Computing, Inc.)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5745 - Realtek Semiconductor Corp.)
SDK (x32 Version: 2.05.004 - Portrait Displays, Inc.) Hidden
Snap.Do (x32 Version: 1.149.1.12678 - ReSoft Ltd.) <==== ATTENTION
Snap.Do Engine (HKCU Version: 1.149.1.12678 - ReSoft Ltd.) <==== ATTENTION
SoundTrax (x32 Version: 4.0.18.0 - Nero AG) Hidden
SureThing Express Labeler (x32 Version:  - MicroVision Development, Inc.)
Trapcode Particular Studio (x32 Version:  - )
Trapcode Shine Studio 15 (x32 Version:  - )
UltraISO Premium V9.5 (x32 Version:  - )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
VLC media player 2.0.1 (Version: 2.0.1 - VideoLAN)
VLC media player 2.1.1 (x32 Version: 2.1.1 - VideoLAN)
Vuze (Version: 5.0.0.0 - Azureus Software, Inc.)
WinRAR archiver (x32 Version:  - )
WinZip 11.1 (x32 Version: 11.1.7466 - WinZip Computing, S.L. )
Xilisoft Video Converter Ultimate 6 (x32 Version: 6.0.15.1110 - Xilisoft)

==================== Restore Points  =========================

17-01-2014 18:22:02 TuneUp Utilities 2014 wird entfernt
17-01-2014 18:24:13 TuneUp Utilities 2014 wird entfernt
17-01-2014 18:25:18 TuneUp Utilities 2014 (de-DE) wird entfernt
19-01-2014 03:30:39 Java(TM) 7 Update 3 (64-bit) wird entfernt
19-01-2014 03:32:16 Java 7 Update 45 wird entfernt

==================== Hosts content: ==========================

2013-05-10 15:17 - 2013-05-10 15:17 - 00005801 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com                                       
       127.0.0.1 192.150.14.69                                            
       127.0.0.1 192.150.18.101                                           
       127.0.0.1 192.150.18.108                                           
       127.0.0.1 192.150.22.40                                            
       127.0.0.1 192.150.8.100                                            
       127.0.0.1 192.150.8.118                                            
       127.0.0.1 209-34-83-73.ood.opsource.net                            
       127.0.0.1 3dns-1.adobe.com                                         
       127.0.0.1 3dns-2.adobe.com                                         
       127.0.0.1 3dns-2.adobe.com                                         
       127.0.0.1 3dns-3.adobe.com                                         
       127.0.0.1 3dns-3.adobe.com                                         
       127.0.0.1 3dns-4.adobe.com                                         
       127.0.0.1 3dns.adobe.com                                           
       127.0.0.1 activate-sea.adobe.com                                   
       127.0.0.1 activate-sea.adobe.com                                   
       127.0.0.1 activate-sjc0.adobe.com                                  
       127.0.0.1 activate-sjc0.adobe.com                                  
       127.0.0.1 activate.adobe.com                                       
       127.0.0.1 activate.adobe.com                                       
       127.0.0.1 activate.wip.adobe.com                                   
       127.0.0.1 activate.wip1.adobe.com                                  
       127.0.0.1 activate.wip2.adobe.com                                  
       127.0.0.1 activate.wip3.adobe.com                                  
       127.0.0.1 activate.wip3.adobe.com                                  
       127.0.0.1 activate.wip4.adobe.com                                  
       127.0.0.1 adobe-dns-1.adobe.com                                    
       127.0.0.1 adobe-dns-2.adobe.com                                    
       127.0.0.1 adobe-dns-2.adobe.com                                    
       127.0.0.1 adobe-dns-3.adobe.com                                    
       127.0.0.1 adobe-dns-3.adobe.com                                    
       127.0.0.1 adobe-dns-4.adobe.com                                    
       127.0.0.1 adobe-dns.adobe.com                                      
       127.0.0.1 adobe-dns.adobe.com                                      
       127.0.0.1 adobe.activate.com                                       
       127.0.0.1 adobeereg.com                                            
       127.0.0.1 crl.verisign.net                                         
       127.0.0.1 CRL.VERISIGN.NET.*                                       
       127.0.0.1 ereg.adobe.com                                           
       127.0.0.1 ereg.adobe.com                                           
       127.0.0.1 ereg.wip.adobe.com                                       
       127.0.0.1 ereg.wip1.adobe.com                                      
       127.0.0.1 ereg.wip2.adobe.com                                      
       127.0.0.1 ereg.wip3.adobe.com                                      
       127.0.0.1 ereg.wip3.adobe.com                                      
       127.0.0.1 ereg.wip4.adobe.com                                      
       127.0.0.1 hl2rcv.adobe.com                                         
       127.0.0.1 ood.opsource.net                                         
       127.0.0.1 practivate.adobe                                         
       127.0.0.1 practivate.adobe.*                                       
       127.0.0.1 practivate.adobe.com                                     
       127.0.0.1 practivate.adobe.com                                     
       127.0.0.1 practivate.adobe.ipp                                     
       127.0.0.1 practivate.adobe.newoa                                   
       127.0.0.1 practivate.adobe.ntp                                     
       127.0.0.1 tss-geotrust-crl.thawte.com                              
       127.0.0.1 wip.adobe.com                                            
       127.0.0.1 wip1.adobe.com                                           
       127.0.0.1 wip2.adobe.com                                           
       127.0.0.1 wip3.adobe.com                                           
       127.0.0.1 wip3.adobe.com                                           
       127.0.0.1 wip4.adobe.com                                           
       127.0.0.1 wwis-dubc1-vip60.adobe.com                               
       127.0.0.1 wwis-dubc1-vip60.adobe.com                               
       127.0.0.1 wwis-dubc1-vip60.adobe.com 

==================== Scheduled Tasks (whitelisted) =============

Task: {336E6457-63CB-4C3A-882C-50D9D71AEC09} - System32\Tasks\ASUS\ASUS ACPI Service Provider => C:\Program Files (x86)\ASUS\AASP\1.00.80\aaCenter.exe [2008-11-18] ()
Task: {35F7F919-2DA7-4966-8029-852E1DAB3764} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks
Task: {49308EFB-E538-4965-B661-16817940BE6E} - \FoxTab No Task File
Task: {4CAC8D7B-8BD9-405A-B70C-86A11D1A26BD} - \Dealply No Task File
Task: {559453D8-AB24-4407-BD65-37B2C74E693F} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: {88B1B53A-CBA3-4424-93ED-AC35EBD86F9B} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files (x86)\ASUS\EPU-6 Engine\SixEngine.exe [2008-11-13] ()
Task: {9A6B6804-5756-4325-9233-003EB352F8B1} - System32\Tasks\ASUS\Launch AI Direct Link => C:\Program Files (x86)\ASUS\AI Direct Link\AsCmd.exe [2008-06-17] ()
Task: {AC6D17FB-79DA-4C8E-B43A-E65ED32AE75D} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.00.80\AsLoader.exe [2008-07-02] ()
Task: {B440A0F3-08E8-4770-9504-4513A1356F5C} - \GoforFilesUpdate No Task File
Task: {EDCC24DE-A0E2-45ED-A4C1-D16A37E6031C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-12] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-04-08 23:09 - 2005-06-07 11:26 - 00043008 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2010-04-16 13:20 - 2010-04-16 13:20 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-05-27 11:40 - 2010-05-27 11:40 - 00270336 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-01-12 08:42 - 2013-12-09 11:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-04-13 16:23 - 2011-08-26 05:57 - 00260096 _____ () C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\sqlite3.dll
2013-05-05 18:44 - 2007-02-09 11:16 - 00245760 _____ () C:\Program Files (x86)\Portrait Displays\Pivot Software\winphook.dll
2012-04-08 21:41 - 2005-05-11 15:39 - 00565248 _____ () C:\Program Files (x86)\ASUS\EPU-6 Engine\pngio.dll
2012-04-08 22:05 - 2005-06-22 10:39 - 00204851 ____R () C:\Program Files (x86)\ASUS\AASP\1.00.80\PowerDll.dll
2012-04-08 22:05 - 2008-01-17 09:46 - 00053248 ____R () C:\Program Files (x86)\ASUS\AASP\1.00.80\cpuutil.dll
2013-12-18 19:43 - 2013-12-18 19:43 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Locale\de_DE\acrotray.deu
2012-04-08 21:37 - 2005-10-24 15:02 - 00050688 _____ () C:\Program Files (x86)\ASUS\AI Direct Link\AsMultiLang.dll
2012-04-08 21:37 - 2007-08-20 10:17 - 00094208 _____ () C:\Program Files (x86)\ASUS\AI Direct Link\AsNetlib.dll
2013-06-01 22:36 - 2014-01-09 17:37 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-12-12 06:03 - 2013-12-12 06:03 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Giankarlo\AppData\Local:jfpcV7EYgBMHBhAXuaj
AlternateDataStreams: C:\Users\Giankarlo\AppData\Local:lbWRMG8zh4DFG7nesCx5xD
AlternateDataStreams: C:\Users\Giankarlo\AppData\Local:Pps27IQE3LV9GOXJQFUUKTO3tI
AlternateDataStreams: C:\Users\Giankarlo\AppData\Local\Anwendungsdaten:jfpcV7EYgBMHBhAXuaj
AlternateDataStreams: C:\Users\Giankarlo\AppData\Local\Anwendungsdaten:lbWRMG8zh4DFG7nesCx5xD
AlternateDataStreams: C:\Users\Giankarlo\AppData\Local\Anwendungsdaten:Pps27IQE3LV9GOXJQFUUKTO3tI
AlternateDataStreams: C:\Users\Giankarlo\AppData\Local\desktop.ini:07a19238af92db80fe9045ca73c7a84e

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: avast! Firewall NDIS Filter Miniport
Description: avast! Firewall NDIS Filter Miniport
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ALWIL Software
Service: aswNdis
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/21/2014 03:34:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/21/2014 03:54:15 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2014 06:00:28 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2014 05:42:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2014 04:04:14 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/20/2014 04:04:14 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/20/2014 04:04:13 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/20/2014 04:04:13 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/20/2014 02:32:15 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2014 11:26:10 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Adobe QT32 Server.exe, Version: 7.0.1.0, Zeitstempel: 0x51907e11
Name des fehlerhaften Moduls: QuickTime.qts_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5180f322
Ausnahmecode: 0xc0000005
Fehleroffset: 0x6147cc49
ID des fehlerhaften Prozesses: 0xf08
Startzeit der fehlerhaften Anwendung: 0xAdobe QT32 Server.exe0
Pfad der fehlerhaften Anwendung: Adobe QT32 Server.exe1
Pfad des fehlerhaften Moduls: Adobe QT32 Server.exe2
Berichtskennung: Adobe QT32 Server.exe3


System errors:
=============
Error: (01/21/2014 03:53:09 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Nero BackItUp Scheduler 4.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/21/2014 03:53:09 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Nero BackItUp Scheduler 4.0 erreicht.

Error: (01/20/2014 03:14:31 PM) (Source: Service Control Manager) (User: )
Description: Dienst "CyberLink PowerDVD 11.0 Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/20/2014 02:51:13 AM) (Source: Service Control Manager) (User: )
Description: Dienst "CyberLink PowerDVD 11.0 Service" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (01/20/2014 02:47:34 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.

Error: (01/19/2014 11:00:43 PM) (Source: Service Control Manager) (User: )
Description: Dienst "CyberLink PowerDVD 11.0 Service" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.

Error: (01/19/2014 10:21:31 PM) (Source: Service Control Manager) (User: )
Description: Dienst "CyberLink PowerDVD 11.0 Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/19/2014 09:01:43 PM) (Source: DCOM) (User: )
Description: {ED1D0FDF-4414-470A-A56D-CFB68623FC58}

Error: (01/19/2014 07:22:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (01/19/2014 01:05:16 AM) (Source: Service Control Manager) (User: )
Description: Dienst "CyberLink PowerDVD 11.0 Service" wurde unerwartet beendet. Dies ist bereits 6 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (01/12/2014 07:25:50 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 11751 seconds with 4320 seconds of active time.  This session ended with a crash.

Error: (06/06/2013 07:30:32 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1458 seconds with 540 seconds of active time.  This session ended with a crash.

Error: (06/06/2013 07:06:00 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 12183 seconds with 4920 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 34%
Total physical RAM: 5119.12 MB
Available physical RAM: 3344.63 MB
Total Pagefile: 10236.41 MB
Available Pagefile: 7933.2 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (WINDOWS 7) (Fixed) (Total:121.61 GB) (Free:20.44 GB) NTFS
Drive f: (JANNHS DOKUMENTE) (Fixed) (Total:20.08 GB) (Free:16.03 GB) NTFS
Drive i: (VERBATIM) (Fixed) (Total:931.42 GB) (Free:260.81 GB) NTFS
Drive j: (A P O T H I K H  WIN7) (Fixed) (Total:111.26 GB) (Free:2.51 GB) NTFS
Drive l: () (Removable) (Total:7.44 GB) (Free:2.74 GB) NTFS
Drive z: (WIN XP) (Fixed) (Total:69.29 GB) (Free:32.65 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: BAD5BAD5)
Partition 1: (Active) - (Size=69 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=80 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 233 GB) (Disk ID: F09FF09F)
Partition 1: (Not Active) - (Size=233 GB) - (Type=OF Extended)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Active) - (Size=7 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 932 GB) (Disk ID: EE7A7A06)
Partition 1: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================
--- --- ---
__________________
Alt 22.01.2014, 10:09   #4
schrauber
/// the machine
/// TB-Ausbilder
 
Runtime Error 50003 - Standard

Runtime Error 50003


OTL ist wie FRST nur ein Scanner.

Was genau ist dein Problem? Der Thementitel "Runtime Error", ohne weitere Beschreibung, ist dürftig.


Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 22.01.2014, 12:15   #5
giankarlo
 
Runtime Error 50003 - Standard

Runtime Error 50003


Hallo,

sorry für die Art und Weise aber ich dachte wenn ich unter den Titel und nach der Beschreibung die Logfiles poste ist es ok.
Also bei mir ist Windows 7 Ultimate 64, mit Srvice Pack 1 installiert. Bis jetzt seit 1 jahr ohne Probleme.
Seit einiger Zeit kann ich weder komplett programme intallieren, noch kann ich Programme deinstallieren! Malwarebytes (das Problem trat glaube ich gleichzeitig auf) kann ich auch nicht ausführen!
Wenn ich Malwarebytes ausführen möchte kommt dann die Meldund Runtime Error 50003.
Wenn ich menen PC hochfahre kommt ein Fenster das mir dann sagt dass:
C:\Program Files (x86)\Adobe\Acrobat10.0\Acrobat\AXE8SharedExpat.dll, endweder nicht für die Ausführung unter Windows vorgesehen oder enthält einen Fehler.

Sei dem diese Meldung kommt, kann ich auch keine Programme Installieren (nicht absolut alle....bei einigen ging das schon). Dabei kommt während der installation der jeweiligen Programme ganau die gleiche Meldung wie vorhin aber betrifft andere DLL´s.

Z.B das Programm Helicon Fokus
Malwarebytes, Avast, Portrait Pro...

und deinstallieren lassen sie sich einige Programme auch nicht, wobei die Meldung kommt dass bei der Deinstallation des Programms ein Fehler aufgetretten ist und dass möglicher Weise das Programm schon installiert ist!

Vielleicht hat das alles auch damit zutun dass ich ein auf USB Bootfähiges Windows machen wollte, dabei das Programm IngBurn benutzt habe und nach dessen Installation war auf einmal das Programma Tune Up drauf. Das wiederum nervte mich einige Tage, habe es aber geschafft es bei einer erneuten Installation, erst zu deinstallieren.

Wenn es wirklich Ihnen nicht viel Mühe macht zu "erforschen" was los sein kann, wäre ich dankbar (auch neugierig!), ansonsten wartet Windows 8 schon um alles Platt zu machen!
Danke im Voraus.
ciao
giankarlo


Alt 23.01.2014, 08:35   #6
schrauber
/// the machine
/// TB-Ausbilder
 
Runtime Error 50003 - Standard

Runtime Error 50003


Downloade dir bitte Windows Repair (All In One) von hier.
  • Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
  • Klicke auf Step 2 und drücke unter Check Disk auf Do It.

  • Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.

  • Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.

  • Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
  • Hake Restart System when Finished an.
  • Drücke Start.

__________________
--> Runtime Error 50003

Alt 23.01.2014, 13:31   #7
giankarlo
 
Runtime Error 50003 - Standard

Runtime Error 50003


Hi,
danke für deine Bemühungen.....
Windows 7 lässt mich die Anwebdung nicht installieren: Uncpected Error.
Ich versuche es unrter Abgesicherten Modus.....

bis später

Alt 24.01.2014, 09:14   #8
schrauber
/// the machine
/// TB-Ausbilder
 
Runtime Error 50003 - Standard

Runtime Error 50003


Ja versuch das, wenn nicht das Teil mal neu laden
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 24.01.2014, 17:28   #9
giankarlo
 
Runtime Error 50003 - Standard

Runtime Error 50003


Hallo Kinders,

Hatte auf mein System sowieso 2 Platte mit 2 getrennten Betriebsystemen drauf. Einmal xp und einaml win7. XP ist jetzt Platt. Win 8 drauf, und ich fange an alles neu zu installieren. Solange arbeite ich auch weiter hiermit. Aber mich juckts was es sein kann! Später mache ich eine Reparatur Durchgang mit win 7 mal sehen ob das was bringt!
Auf jeden Fall, Danke für die schnelle und nette Hilfe hier!!
ciao
Giankarlo

Nochmal ich......HI,

bei der Aktion alle Daten vor der Partition zu speichern ist mir ein Ordner mit Tools aufgefallen! Dabei sah ich das Altbekannte "Spyboot, search & Destroy" ich installiertre es (es ging) ich machte einen Update, ging auch, dann Suchen......kamen so einige Einträge die ich dann repariert habe ABER auch 2 die sich mit nichts enfernen lassen. DEr Name läßt darauf schliessen dass das wohl der Übeltäter ist!
_DeadPly
_Somoto.BetterInstaller

Auch nach Neustrat lassen sich die Einträge nicht enfernen!

...fürs erste ....

Alt 25.01.2014, 13:05   #10
schrauber
/// the machine
/// TB-Ausbilder
 
Runtime Error 50003 - Standard

Runtime Error 50003


Das ist Adware.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Runtime Error 50003
adobe, antivir, autorun, avast, avg, avira, bho, canon, defender, desktop, error, excel, firefox, flash player, focus, format, hängen, logfile, mozilla, object, poweriso, realtek, registry, scan, secur, senden, software, windows


« Windows 8: Firefox + IE öffnen Werbepopups & zum Teil Träges Verhalten von Mauszeiger und Tastatur | Von Telekom auf möglichen Befall mit Schädlingssoftware hingewiesen - Systemprüfung erforderlich »


Ähnliche Themen: Runtime Error 50003


  1. Malewarebytes Anti-Maleware Runtime Error
    Log-Analyse und Auswertung - 24.03.2014 (12)
  2. Runtime Error R6034 Windows XP
    Alles rund um Windows - 27.01.2014 (11)
  3. Von Systemfehler MSVCR80.dll zu Runtime Error Windows 7
    Alles rund um Windows - 24.01.2014 (3)
  4. Windwos 8.1 - Runtime Error
    Log-Analyse und Auswertung - 16.12.2013 (3)
  5. Runtime Error 226 at 005A54597 und eine Auswertung!
    Log-Analyse und Auswertung - 16.05.2011 (5)
  6. hijackthis runtime error 50003
    Log-Analyse und Auswertung - 11.08.2010 (1)
  7. Malwarebytes Anti-Malware Runtime error 372
    Plagegeister aller Art und deren Bekämpfung - 04.08.2010 (27)
  8. Runtime Error 216 bei Rechtsklick auf Datei - und anderes
    Log-Analyse und Auswertung - 07.06.2008 (0)
  9. Trojaner? Runtime Error 216 at...
    Log-Analyse und Auswertung - 31.10.2007 (0)
  10. Runtime Error! (...) system32\rlvknlg.exe
    Log-Analyse und Auswertung - 04.03.2007 (13)
  11. Problem mit Runtime Error
    Alles rund um Windows - 28.01.2007 (2)
  12. Runtime Error!
    Alles rund um Windows - 22.01.2007 (7)
  13. Runtime Error in Internet Explorer
    Log-Analyse und Auswertung - 29.10.2006 (2)
  14. mein hijack logfile ; runtime error '5' / projekt1
    Log-Analyse und Auswertung - 14.06.2006 (7)
  15. ie runtime error
    Log-Analyse und Auswertung - 08.06.2006 (8)
  16. runtime error
    Alles rund um Windows - 09.10.2005 (1)
  17. Runtime-Error
    Alles rund um Windows - 08.09.2003 (0)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Runtime Error 50003 - OTL Logfile: Code: Alles auswählen Aufklappen ATTFilter OTL logfile created on: 20.01.2014 18:15:06 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Giankarlo\Downloads 64bit- Ultimate Edition Service Pack - Runtime Error 50003...
Archiv
Du betrachtest: Runtime Error 50003 auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58