Hallo,

ich habe seit ca. 1 Woche das Problem, dass sich der PC ganz zufällig nach dem Hochfahren komplett aufhängt. Strg-Alt-Entf geht dann auch nicht mehr. Ich kann zwar die Maus noch bewegen, hin und wieder lässt sich das Startmenü noch öffnen, aber kein Klick wird dann angenommen. Es passiert nichts nachdem ich auf Herunterfahren oder irgendwo anders hinklicke.
Nach einem erzwungenen Shutdown - 5+ Sek. auf Ein/Ausknopf - geht er dann meistens wieder. Kann auch sein, dass ich ihn 2 mal killen muss.
Jedenfalls passiert es nur unmittelbar nach dem Hochfahren, wenn er mal läuft, läuft er.
Hab schon - auch hier im Forum - gesucht, was das sein könnte, aber nichts gefunden, das meinem Problem ähnelt. Meine Vermutung ist, dass ich vielleicht einen falschen Treiber installiert habe. Da das Problem erst seit einer Woche besteht, und ich zu diesem Zeitpunkt mit DriverUpdate meine Treiber aktualisiert habe. Steh aber ziemlich an, also ich weiß nicht was ich machen soll und ob es sich vielleicht nicht doch um eine Malware handelt?!
Habe jetzt Malware-Bytes laufen lassen, hat aber nichts gefunden. Soll ich den Suchlauf posten?
Avast hat gerade bei einer Schnellüberprüfung folgendes zu sagen:
Einige Dateien konnte nicht überprüft werden.
"Disk\\....Vol ... Boot Record" "Fehler Falsche Parameter (87)"

Kann mir da bitte jemand weiterhelfen? Danke schon mal dem-/derjenigen der/die sich meinem Problem annimmt!

Hab jetzt GMER und FRST laufen lassen. Hier sind die Files:

sorry, hab das erst jetzt gelesen, dass hier keine Anhänge erwünscht sind, sofern nicht verlangt. Hoffe das funktioniert so...

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2014
Ran by affenmann at 2014-05-11 12:20:05
Running from C:\Users\affenmann\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

µTorrent (HKCU\...\uTorrent) (Version: 3.3.2.30570 - BitTorrent Inc.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.06 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{3C378793-5288-0165-FCA4-D319D5E4A490}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
avast! Internet Security (HKLM-x32\...\Avast) (Version: 9.0.2018 - Avast Software)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Brinno Incorporated Brinno GardenWatchCam 1.69.0 (HKLM-x32\...\Brinno GardenWatchCam) (Version: 1.69.0 - Brinno Incorporated)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CLICKBIOSII (HKLM-x32\...\{EBCB111F-4907-4B28-BD03-F5BD901106D2}_is1) (Version: 1.0.123 - MSI)
Command & Conquer 2: Red Alert - Megabox (HKLM-x32\...\{C8698AF0-9C5E-42CE-B6CB-FFD614AAF487}_is1) (Version: 3.03g - RAF)
Command & Conquer™ Alarmstufe Rot 3 (HKLM-x32\...\{296D8550-CB06-48E4-9A8B-E5034FB64715}) (Version: 1.0.1.0 - Electronic Arts)
Company of Heroes (HKLM-x32\...\{BA801B94-C28D-46EE-B806-E1E021A3D519}) (Version: 1.0.0.78 - THQ Inc.)
dLAN Cockpit (HKLM-x32\...\Cockpit.92121A72F826FA9D0BD3A830E7F04987B31AFB22.1) (Version: 3 (23.12.2010) - devolo AG)
dLAN Cockpit (x32 Version: 3.23.12 - devolo AG) Hidden
Dll-Files Fixer (HKLM-x32\...\Dll-Files Fixer_is1) (Version: 1.0 - Dll-Files.com)
DriverUpdate (HKLM-x32\...\{65C92136-6AF0-4E70-88D2-D19E739CE285}) (Version: 2.2.35415 - SlimWare Utilities, Inc.)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.0 - Dropbox, Inc.)
Dropbox Folder Sync addon (HKLM-x32\...\{E0B7CA7A-98B0-4EF1-87F5-FF6B02DC06A9}_is1) (Version: 2.7 - Sowrabh & Satyadeep)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
FileZilla Client 3.7.4.1 (HKCU\...\FileZilla Client) (Version: 3.7.4.1 - Tim Kosse)
Free YouTube Download version 3.2.20.1230 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.20.1230 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.17.1127 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.17.1127 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.)
Holiday Island Version 1.2 by Energizer (HKLM-x32\...\{9A1D4104-85F4-48A6-8A26-69F10D7D2BE3}_is1) (Version: 1.2 by Energizer - Sunflowers)
HP Deskjet 1000 J110 series Hilfe (HKLM-x32\...\{DDDFCC77-7F9C-45E9-B38E-721BA599BA0C}) (Version: 140.0.65.65 - Hewlett Packard)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.10.255 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KeePass Password Safe 2.26 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.26 - Dominik Reichl)
K-Lite Codec Pack 10.3.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.3.0 - )
M.A.X. 1 and 2 (HKLM-x32\...\M.A.X. 1 and 2_is1) (Version:  - GOG.com)
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Max Payne Trilogy Edition MULTi-2 1.0 (HKLM-x32\...\Max Payne Trilogy Edition MULTi-2 1.0) (Version:  - )
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Monitor Switcher (HKLM-x32\...\Monitor Switcher) (Version: 2.1.2.9 - CASIC Ltd.)
Monitor Switcher (x32 Version: 2.1.2.9 - CASIC Ltd.) Hidden
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
My Lockbox 3.0.5 (HKLM\...\My Lockbox_is1) (Version: 3.0.5 - )
No-IP DUC (HKLM-x32\...\NoIPDUC) (Version: 4.0.1 - Vitalwerks Internet Solutions LLC)
PDF-Over (HKLM-x32\...\{1A08CCCC-5F44-4F11-AB48-E5ECDA86E315}) (Version: 4.0.2 - A-SIT (Secure Information Technology Center - Austria))
PFPortChecker 1.0.39 (HKLM-x32\...\PFPortChecker) (Version: 1.0.39 - Portforward.com)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games)
Samsung Easy Wireless Setup (HKLM-x32\...\Easy Wireless Setup) (Version: 3.60.05 - Samsung Electronics Co., Ltd.)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.3.0 - Samsung Electronics)
Samsung SCX-4500W Series (HKLM-x32\...\Samsung SCX-4500W Series) (Version:  - Samsung Electronics CO.,LTD)
Samsung Universal Print Driver (HKLM-x32\...\Samsung Universal Print Driver) (Version: 2.03.09.00 - Samsung Electronics Co., Ltd.)
Samsung Universal Scan Driver (HKLM-x32\...\Samsung Universal Scan Driver) (Version: 1.2.5.0 - Samsung Electronics Co., Ltd.)
Security Task Manager 1.8g (HKLM-x32\...\Security Task Manager) (Version: 1.8g - Neuber Software)
SetIP (HKLM-x32\...\SetIP) (Version: 1.05.08.00 - Samsung Electronics Co., Ltd.)
Shutdown7 2.0 (HKLM-x32\...\Shutdown7 2.0) (Version:  - )
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SlimCleaner (HKLM-x32\...\{6B8D6199-EE44-4FD7-813A-6D8C62C9B384}) (Version: 4.0.30878 - SlimWare Utilities, Inc.)
SmarThru Office (HKLM-x32\...\{9BC1E722-AE07-46A3-B7A6-556DBE18E22A}) (Version: 2.10.000 - Samsung Electronics Co., Ltd.)
Spotify (HKCU\...\Spotify) (Version: 0.9.7.16.g4b197456 - Spotify AB)
Starcraft (HKLM-x32\...\Starcraft) (Version:  - )
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
TP-LINK TL-WN781ND Driver (HKLM-x32\...\{87C7B472-9BC2-43C8-9F03-86D2908E1A51}) (Version: 1.3.1 - TP-LINK)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version:  - )
Warcraft III: All Products (HKCU\...\Warcraft III) (Version:  - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Z (HKLM-x32\...\{2667DF7B-7239-42B1-BD01-2F73374FC6AE}_is1) (Version:  - STiGMaTa)

==================== Restore Points  =========================

17-04-2014 11:20:30 Installed PDF-Over
18-04-2014 08:56:41 Windows Update
22-04-2014 08:08:43 Installed Java 7 Update 55
22-04-2014 10:29:54 Windows Update
29-04-2014 07:30:03 Windows Update
02-05-2014 13:41:35 Windows Update
04-05-2014 08:36:08 Windows Update
05-05-2014 08:57:57 avast! antivirus system restore point
07-05-2014 06:13:48 Windows Update
07-05-2014 07:04:37 DriverUpdate Installing Drivers
07-05-2014 07:05:19 Removed SlimDrivers
07-05-2014 07:15:03 Windows Update
07-05-2014 07:43:09 Removed SlimCleaner Plus
07-05-2014 07:57:09 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2014-02-23 19:42 - 00001074 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 lm.licenses.adobe.com8.
127.0.0.1 systweak.com
127.0.0.1 www.systweak.com
127.0.0.1 www.systweak.com/asov2
127.0.0.1 hxxp://www.systweak.com
127.0.0.1 hxxp://www.systweak.com/asov2


==================== Scheduled Tasks (whitelisted) =============

Task: {0AD604EC-141A-47D3-A219-0370A209656F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-01] (Google Inc.)
Task: {0CD3AA9A-68B5-4BE8-971F-B1421FD3AE25} - System32\Tasks\Freemium1ClickMaint => C:\Program Files (x86)\Covus Freemium\Free System Utilities\1Click.exe
Task: {257832B0-F712-4264-B05C-867DC128AD19} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-05-05] (AVAST Software)
Task: {2D37624B-1E1D-4696-8695-216CD8351B35} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29] (Adobe Systems Incorporated)
Task: {609349FE-9059-4048-A9D4-9D67449888FC} - System32\Tasks\DLL-Files.Com Fixer_MONTHLY => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2013-04-12] (Dll-FIles.Com)
Task: {819243D7-6BE9-4AC1-B0D3-50F9C2ECEBC3} - \Software Updater No Task File <==== ATTENTION
Task: {8F27017E-E817-43AD-A69F-7C7A92456013} - System32\Tasks\{EE9D3A26-32EB-4F07-AD1B-8D4BCB97F239} => E:\games\theme hospital\Theme Hospital\HOSPITAL.EXE
Task: {95F5CC07-18E1-4C0B-AD63-65D1EC2213F6} - System32\Tasks\SlimCleaner Run => C:\Program Files (x86)\SlimCleaner\SlimCleaner.exe [2013-07-10] (SlimWare Utilities, Inc.)
Task: {B993D3C1-8E10-42E3-9AC0-8DE0AC6660A4} - System32\Tasks\{809B64F5-EF1B-467F-8448-2D6AF37F663D} => E:\games\theme hospital\Theme Hospital\HOSPITAL.EXE
Task: {C0502BBE-CA49-4CD7-AAED-2EC99CD0085F} - System32\Tasks\{8BC5B7F7-9BEE-4E00-828B-87BCC32065EB} => E:\games\Command and Conquer 10 Jahre\Command and Conquer Red Alert\RA95_TLF_(TFD).exe [2006-07-17] ()
Task: {CD537F3E-02F3-44C7-B9EA-DFE2E7145988} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-01] (Google Inc.)
Task: {CECA88AD-AD7D-4482-8C6D-60EC3F1728BD} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - affenmann) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
Task: {EAB9CDE4-18B6-405F-A307-1DCA1251E136} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: {F89810B2-E5D3-4A6A-86C0-294B3888A500} - System32\Tasks\DLL-Files.Com Fixer_Updates => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2013-04-12] (Dll-FIles.Com)
Task: {FED6E1B4-4BEE-4D42-8564-E95EF157BD86} - \Software Updater Ui No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: C:\Windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - affenmann).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe

==================== Loaded Modules (whitelisted) =============

2012-12-01 15:19 - 2011-04-11 07:26 - 00034304 _____ () C:\Windows\System32\spd__l.dll
2012-12-01 15:19 - 2012-09-10 17:07 - 01212928 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\spd__du.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-05-10 11:10 - 2014-05-10 11:10 - 02253312 _____ () C:\Program Files\AVAST Software\Avast\defs\14051000\algo.dll
2014-05-11 11:24 - 2014-05-11 11:24 - 02253312 _____ () C:\Program Files\AVAST Software\Avast\defs\14051100\algo.dll
2014-05-11 11:24 - 2014-05-11 11:24 - 00043008 _____ () e:\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpph_jkr.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\affenmann\AppData\Roaming\Dropbox\bin\libcef.dll
2013-12-09 12:36 - 2013-11-28 13:14 - 00013824 _____ () C:\Program Files (x86)\Samsung SSD Magician\SAMSUNG_SSD.dll
2013-12-09 12:36 - 2013-11-28 19:59 - 00098816 _____ () C:\Program Files (x86)\Samsung SSD Magician\PAL.dll
2013-12-09 12:36 - 2013-11-28 19:59 - 00034304 _____ () C:\Program Files (x86)\Samsung SSD Magician\SATA.dll
2013-12-09 12:36 - 2013-11-28 19:59 - 00032768 _____ () C:\Program Files (x86)\Samsung SSD Magician\SAT.dll
2013-12-09 12:36 - 2013-11-28 20:00 - 00031232 _____ () C:\Program Files (x86)\Samsung SSD Magician\SMINI.dll
2013-12-09 12:36 - 2013-11-28 19:59 - 00029696 _____ () C:\Program Files (x86)\Samsung SSD Magician\SAS.dll
2014-02-14 09:46 - 2014-02-14 09:46 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-05-10 11:40 - 2014-05-10 11:40 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-05-01 20:03 - 2014-05-01 20:03 - 03019888 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-05-01 20:03 - 2014-05-01 20:03 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-05-01 20:03 - 2014-05-01 20:03 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2014-04-29 14:17 - 2014-04-29 14:17 - 16351920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll
2014-05-07 09:08 - 2000-01-01 02:00 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: AODDriver4.2
Description: AODDriver4.2
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: AODDriver4.2
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/11/2014 11:26:14 AM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2014 11:23:40 AM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2014 11:11:57 AM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2014 00:04:51 AM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/09/2014 08:58:32 AM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/08/2014 05:46:44 PM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/08/2014 09:34:30 AM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/08/2014 09:29:39 AM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/07/2014 11:03:43 AM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/07/2014 10:02:57 AM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (05/11/2014 11:24:26 AM) (Source: Service Control Manager) (User: ) (EventID: 7000)
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/11/2014 11:24:26 AM) (Source: Service Control Manager) (User: ) (EventID: 7000)
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/11/2014 11:24:24 AM) (Source: EventLog) (User: ) (EventID: 6008)
Description: Das System wurde zuvor am ‎11.‎05.‎2014 um 11:22:57 unerwartet heruntergefahren.

Error: (05/11/2014 11:22:05 AM) (Source: Service Control Manager) (User: ) (EventID: 7000)
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/11/2014 11:22:05 AM) (Source: Service Control Manager) (User: ) (EventID: 7000)
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/11/2014 11:22:03 AM) (Source: EventLog) (User: ) (EventID: 6008)
Description: Das System wurde zuvor am ‎11.‎05.‎2014 um 11:19:58 unerwartet heruntergefahren.

Error: (05/11/2014 11:20:59 AM) (Source: Service Control Manager) (User: ) (EventID: 7011)
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (05/11/2014 11:20:29 AM) (Source: Service Control Manager) (User: ) (EventID: 7011)
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Schedule erreicht.

Error: (05/11/2014 11:20:28 AM) (Source: Service Control Manager) (User: ) (EventID: 7011)
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Netman erreicht.

Error: (05/11/2014 11:19:58 AM) (Source: Service Control Manager) (User: ) (EventID: 7011)
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Wlansvc erreicht.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-12-08 22:59:07.505
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\TMP\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-12-08 22:59:07.464
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\TMP\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-12-08 22:59:07.390
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-12-08 22:59:07.346
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-12-08 22:55:29.767
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-12-08 22:55:29.727
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-12-10 23:32:46.415
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\TMP\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-12-10 23:32:46.404
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\TMP\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-12-10 23:32:46.367
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-12-10 23:32:46.356
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 40%
Total physical RAM: 8140.09 MB
Available physical RAM: 4839.47 MB
Total Pagefile: 8338.27 MB
Available Pagefile: 4778.92 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:238.37 GB) (Free:152.47 GB) NTFS
Drive e: (Volume) (Fixed) (Total:1396.16 GB) (Free:1297.63 GB) NTFS
Drive i: (Volume) (Fixed) (Total:931.51 GB) (Free:309.94 GB) NTFS
Drive j: (Volume) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238 GB) (Disk ID: D24AB5CA)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A602C8E3)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 1397 GB) (Disk ID: 2BD2C32A)
Partition 1: (Not Active) - (Size=99 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=-699904557056) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014
Ran by affenmann (administrator) on AFFENMANN-PC on 11-05-2014 12:19:49
Running from C:\Users\affenmann\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(FSPro Labs) C:\Program Files\My Lockbox\mylbx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(CASIC Ltd.) C:\Program Files (x86)\Monitor Switcher\MonitorSwitcher.exe
(Dropbox, Inc.) C:\Users\affenmann\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Samsung Electronics.) C:\Program Files (x86)\Samsung SSD Magician\Samsung Magician.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Elaborate Bytes AG) C:\Program Files (x86)\VirtualCloneDrive\VCDDaemon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\SmarThru Office\BackUpSvr.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [mylbx] => C:\Program Files\My Lockbox\mylbx.exe [2289952 2013-10-28] (FSPro Labs)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7541976 2000-01-01] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-05-05] (AVAST Software)
HKLM-x32\...\Run: [avgnt] => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2000-01-01] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [STO Backup Service] => C:\Program Files (x86)\SmarThru Office\BackUpSvr.exe [199800 2012-09-27] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [STO Launcher Service] => C:\Program Files (x86)\SmarThru Office\x64\LegacyLauncher.exe [405624 2012-09-27] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478392 2013-12-21] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2099200 2014-04-13] (Dominik Reichl)
HKU\S-1-5-21-1214612080-828757990-3276071510-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-1214612080-828757990-3276071510-1000\...\Run: [SlimCleaner Plus] => "C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe" /minimize
HKU\S-1-5-21-1214612080-828757990-3276071510-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000
HKU\S-1-5-21-1214612080-828757990-3276071510-1000\...\Policies\Explorer: [NoCDBurning] 1
HKU\S-1-5-21-1214612080-828757990-3276071510-1000\...\MountPoints2: {4ce161de-6a6f-11e3-9229-9886f7258069} - K:\Autorun.exe
Startup: C:\Users\affenmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\affenmann\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\affenmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Magician.lnk
ShortcutTarget: Samsung Magician.lnk -> C:\Program Files (x86)\Samsung SSD Magician\Samsung Magician.exe (Samsung Electronics.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Switcher.lnk
ShortcutTarget: Monitor Switcher.lnk -> C:\Program Files (x86)\Monitor Switcher\MonitorSwitcher.exe (CASIC Ltd.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCB67EA31C1CFCD01
SearchScopes: HKLM-x32 - SuggestionsURL_JSON hxxp://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=44393&gid=44393-3820-1369161508315-4C7A7910D04BABD41904AD6B6E348D5B&dbCode=1&command={searchTerms}
SearchScopes: HKLM-x32 - TopResultURLFallback hxxp://search.certified-toolbar.com?si=44393&st=bs&tid=3820&ver=1.1&ts=2013-5-22&tguid=44393-3820-1369221588848-89052&q={searchTerms}
SearchScopes: HKLM-x32 - URL hxxp://search.certified-toolbar.com?si=44393&st=bs&tid=3820&ver=1.1&ts=2013-5-22&tguid=44393-3820-1369221588848-89052&q={searchTerms}
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=44393&gid=44393-3820-1369161508315-4C7A7910D04BABD41904AD6B6E348D5B&dbCode=1&command={searchTerms}
SearchScopes: HKCU - TopResultURLFallback hxxp://search.certified-toolbar.com?si=44393&st=bs&tid=3820&ver=1.1&ts=2013-5-22&tguid=44393-3820-1369221588848-89052&q={searchTerms}
SearchScopes: HKCU - URL hxxp://search.certified-toolbar.com?si=44393&st=bs&tid=3820&ver=1.1&ts=2013-5-22&tguid=44393-3820-1369221588848-89052&q={searchTerms}
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{7533B7FD-E118-4E4F-8C39-0F417B958EAE}: [NameServer]195.34.133.21,195.34.133.22

FireFox:
========
FF ProfilePath: C:\Users\affenmann\AppData\Roaming\Mozilla\Firefox\Profiles\5twuq1jk.default
FF Homepage: hxxp://www.google.at/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\affenmann\AppData\Roaming\Mozilla\Firefox\Profiles\5twuq1jk.default\searchplugins\leo-eng-deu-v20.xml
FF SearchPlugin: C:\Users\affenmann\AppData\Roaming\Mozilla\Firefox\Profiles\5twuq1jk.default\searchplugins\twitchtv.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Flash Video Downloader - Full HD Download - C:\Users\affenmann\AppData\Roaming\Mozilla\Firefox\Profiles\5twuq1jk.default\Extensions\artur.dubovoy@gmail.com [2014-05-10]
FF Extension: Youtube MP3 Downloader using youtube-mp3.org - C:\Users\affenmann\AppData\Roaming\Mozilla\Firefox\Profiles\5twuq1jk.default\Extensions\jid1-xKH0EoS44u1a2w@jetpack.xpi [2014-03-01]
FF Extension: Google Analytics Opt-out Browser Add-on - C:\Users\affenmann\AppData\Roaming\Mozilla\Firefox\Profiles\5twuq1jk.default\Extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi [2012-12-02]
FF Extension: Binnen-I be gone - C:\Users\affenmann\AppData\Roaming\Mozilla\Firefox\Profiles\5twuq1jk.default\Extensions\{b65d7d9a-4ec0-4974-b07f-83e30f6e973f}.xpi [2012-12-02]
FF Extension: Adblock Plus - C:\Users\affenmann\AppData\Roaming\Mozilla\Firefox\Profiles\5twuq1jk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-12-02]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-08-24]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-02-23]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-05] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109048 2014-05-05] (AVAST Software)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2000-01-01] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
S3 Samsung UPD Service2; C:\Windows\System32\SUPDSvc2.exe [158208 2012-04-06] (Samsung Electronics)

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-05] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-04-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-05] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [447888 2014-05-05] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-05] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-05] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-05] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-05] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-05] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-05] ()
U5 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [42856 2010-11-21] (Microsoft Corporation)
R0 FSProFilter2; C:\Windows\System32\Drivers\FSPFltd2.sys [57648 2011-06-04] (FSPro Labs)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-11] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2000-01-01] (Intel Corporation)
S2 AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-11 12:19 - 2014-05-11 12:19 - 00018401 _____ () C:\Users\affenmann\Desktop\FRST.txt
2014-05-11 12:19 - 2014-05-11 12:19 - 00000000 ____D () C:\FRST
2014-05-11 12:18 - 2014-05-11 12:19 - 02066432 _____ (Farbar) C:\Users\affenmann\Desktop\FRST64.exe
2014-05-11 11:49 - 2014-05-11 11:49 - 00001154 _____ () C:\Users\affenmann\Desktop\Suchlauf 9.5..txt
2014-05-10 11:40 - 2014-05-10 11:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-10 01:43 - 2014-05-10 01:43 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-05-07 09:59 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-07 09:59 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-07 09:59 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-07 09:59 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-07 09:40 - 2014-05-10 12:40 - 00000438 _____ () C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - affenmann).job
2014-05-07 09:40 - 2014-05-07 09:43 - 00000000 ____D () C:\Program Files\SlimCleaner Plus
2014-05-07 09:40 - 2014-05-07 09:40 - 00003062 _____ () C:\Windows\System32\Tasks\SlimCleaner Plus (Scheduled Scan - affenmann)
2014-05-07 09:40 - 2014-05-07 09:40 - 00000000 ____D () C:\ProgramData\SlimWare Utilities Inc
2014-05-07 09:32 - 2014-05-07 09:32 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-07 09:32 - 2014-05-07 09:32 - 00000000 ____D () C:\Program Files\Realtek
2014-05-07 09:32 - 2000-01-01 02:00 - 03872984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-05-07 09:32 - 2000-01-01 02:00 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 02792152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-05-07 09:32 - 2000-01-01 02:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 01024216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00946392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00757301 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-05-07 09:32 - 2000-01-01 02:00 - 00628504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00563992 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-05-07 09:32 - 2000-01-01 02:00 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2014-05-07 09:32 - 2000-01-01 02:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-05-07 09:09 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-05-07 09:09 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-05-07 09:09 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-05-07 09:09 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-05-07 09:09 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-05-07 09:09 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-05-07 09:09 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-05-07 09:09 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-05-07 09:09 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-05-07 09:09 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-05-07 09:09 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-05-07 09:09 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-05-07 09:09 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-05-07 09:09 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-05-07 09:09 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-05-07 09:09 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-05-07 09:09 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-05-07 09:09 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-05-07 09:09 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-05-07 09:09 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-05-07 09:08 - 2014-05-07 09:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-05-07 09:08 - 2000-01-01 02:00 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2014-05-07 09:08 - 2000-01-01 02:00 - 00100312 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys
2014-05-07 09:07 - 2000-01-01 02:00 - 00795632 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2014-05-07 09:07 - 2000-01-01 02:00 - 00358896 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2014-05-07 09:07 - 2000-01-01 02:00 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2014-05-07 09:06 - 2014-05-11 11:48 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-07 09:06 - 2014-05-07 09:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-07 09:06 - 2014-05-07 09:06 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-07 09:06 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-07 09:06 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-07 09:01 - 2014-05-07 09:01 - 00002469 _____ () C:\Users\Public\Desktop\DriverUpdate.lnk
2014-05-07 09:01 - 2014-05-07 09:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate
2014-05-07 09:01 - 2014-05-07 09:01 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-05-07 08:57 - 2014-05-07 09:28 - 00000414 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-05-07 08:57 - 2014-05-07 08:57 - 00003826 _____ () C:\Windows\System32\Tasks\DriverEasy Scheduled Scan
2014-05-07 08:57 - 2014-05-07 08:57 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Easeware
2014-05-07 08:51 - 2014-05-07 08:51 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-07 08:14 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-07 08:14 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-07 08:14 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-07 08:14 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-07 08:14 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-07 08:14 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-07 08:14 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-07 08:14 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-07 08:14 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-07 08:14 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-07 08:14 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-07 08:14 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-07 08:14 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-07 08:14 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-07 08:14 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-07 08:14 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-07 08:14 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-07 08:14 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-07 08:14 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-07 08:14 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-07 08:14 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-07 08:14 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-07 08:14 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-07 08:14 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-07 08:14 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-07 08:14 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-07 08:14 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-07 08:14 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-07 08:14 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-07 08:14 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-07 08:14 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-07 08:14 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-07 08:14 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-07 08:14 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-07 08:14 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-07 08:14 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-07 08:14 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-07 08:14 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-07 08:14 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-07 08:14 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-07 08:14 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-07 08:14 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-07 08:14 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-07 08:14 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-05 10:58 - 2014-05-05 10:58 - 00447888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-05-05 10:58 - 2014-05-05 10:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-05 10:58 - 2014-05-05 10:58 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-01 20:03 - 2014-05-02 08:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-22 10:28 - 2014-04-22 10:28 - 00000000 ____D () C:\Program Files (x86)\Samsung Printers
2014-04-22 10:09 - 2014-04-22 10:09 - 00000000 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-21 18:53 - 2014-04-21 18:53 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Dropbox Folder Sync
2014-04-21 18:53 - 2014-04-21 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox Folder Sync
2014-04-21 18:53 - 2014-04-21 18:53 - 00000000 ____D () C:\Program Files (x86)\Dropbox Folder Sync
2014-04-21 18:52 - 2014-05-11 11:24 - 00000000 ___RD () C:\Users\affenmann\Dropbox
2014-04-21 18:52 - 2014-05-09 08:57 - 00001033 _____ () C:\Users\affenmann\Desktop\Dropbox.lnk
2014-04-21 18:51 - 2014-05-11 11:35 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Dropbox
2014-04-21 18:51 - 2014-05-11 11:24 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\DropboxMaster
2014-04-21 18:51 - 2014-05-09 08:57 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-04-17 13:21 - 2014-04-17 13:22 - 00000000 ____D () C:\Users\affenmann\.pdf-over
2014-04-17 13:20 - 2014-04-17 13:20 - 00000937 _____ () C:\Users\Public\Desktop\PDF-Over.lnk
2014-04-17 13:20 - 2014-04-17 13:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-Over
2014-04-17 13:20 - 2014-04-17 13:20 - 00000000 ____D () C:\Program Files (x86)\PDF-Over
2014-04-15 11:58 - 2014-05-11 11:35 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\KeePass
2014-04-15 10:55 - 2014-04-15 10:55 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2014-04-15 10:55 - 2014-04-15 10:55 - 00001105 _____ () C:\Users\affenmann\Desktop\KeePass 2.lnk
2014-04-15 10:55 - 2014-04-15 10:55 - 00000000 ____D () C:\Program Files (x86)\KeePass Password Safe 2

==================== One Month Modified Files and Folders =======

2014-05-11 12:19 - 2014-05-11 12:19 - 00018401 _____ () C:\Users\affenmann\Desktop\FRST.txt
2014-05-11 12:19 - 2014-05-11 12:19 - 00000000 ____D () C:\FRST
2014-05-11 12:19 - 2014-05-11 12:18 - 02066432 _____ (Farbar) C:\Users\affenmann\Desktop\FRST64.exe
2014-05-11 12:17 - 2012-12-02 18:26 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-11 12:11 - 2012-12-01 14:48 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-11 11:49 - 2014-05-11 11:49 - 00001154 _____ () C:\Users\affenmann\Desktop\Suchlauf 9.5..txt
2014-05-11 11:48 - 2014-05-07 09:06 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-11 11:35 - 2014-04-21 18:51 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Dropbox
2014-05-11 11:35 - 2014-04-15 11:58 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\KeePass
2014-05-11 11:31 - 2009-07-14 06:45 - 00029776 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-11 11:31 - 2009-07-14 06:45 - 00029776 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-11 11:30 - 2010-11-21 08:50 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2014-05-11 11:30 - 2010-11-21 08:50 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2014-05-11 11:30 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-11 11:27 - 2013-11-23 15:27 - 02034506 _____ () C:\Windows\WindowsUpdate.log
2014-05-11 11:24 - 2014-04-21 18:52 - 00000000 ___RD () C:\Users\affenmann\Dropbox
2014-05-11 11:24 - 2014-04-21 18:51 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\DropboxMaster
2014-05-11 11:24 - 2013-12-21 18:10 - 03642939 _____ () C:\Windows\setupact.log
2014-05-11 11:24 - 2012-12-01 15:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-11 11:24 - 2012-12-01 14:48 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-11 11:24 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-10 16:18 - 2014-01-30 17:18 - 00000300 _____ () C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job
2014-05-10 12:40 - 2014-05-07 09:40 - 00000438 _____ () C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - affenmann).job
2014-05-10 12:39 - 2012-12-01 15:33 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Skype
2014-05-10 11:40 - 2014-05-10 11:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-10 01:43 - 2014-05-10 01:43 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-05-10 01:43 - 2013-11-12 21:14 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\vlc
2014-05-10 00:03 - 2013-11-12 22:43 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-05-09 14:06 - 2012-12-01 14:48 - 00004112 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-09 14:06 - 2012-12-01 14:48 - 00003860 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-09 08:57 - 2014-04-21 18:52 - 00001033 _____ () C:\Users\affenmann\Desktop\Dropbox.lnk
2014-05-09 08:57 - 2014-04-21 18:51 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-09 08:57 - 2012-12-01 13:46 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-08 10:02 - 2013-09-21 12:20 - 00000000 ____D () C:\Users\affenmann\Documents\Lisa
2014-05-07 16:01 - 2014-02-10 15:13 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\uTorrent
2014-05-07 16:01 - 2013-11-27 00:37 - 00000000 ____D () C:\Windows\Minidump
2014-05-07 16:01 - 2012-12-01 15:30 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Winamp
2014-05-07 12:11 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-07 10:01 - 2010-11-21 05:47 - 00263838 _____ () C:\Windows\PFRO.log
2014-05-07 10:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\IME
2014-05-07 09:57 - 2013-11-23 15:33 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-05-07 09:43 - 2014-05-07 09:40 - 00000000 ____D () C:\Program Files\SlimCleaner Plus
2014-05-07 09:40 - 2014-05-07 09:40 - 00003062 _____ () C:\Windows\System32\Tasks\SlimCleaner Plus (Scheduled Scan - affenmann)
2014-05-07 09:40 - 2014-05-07 09:40 - 00000000 ____D () C:\ProgramData\SlimWare Utilities Inc
2014-05-07 09:40 - 2014-01-26 17:56 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-05-07 09:32 - 2014-05-07 09:32 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-05-07 09:32 - 2014-05-07 09:32 - 00000000 ____D () C:\Program Files\Realtek
2014-05-07 09:28 - 2014-05-07 08:57 - 00000414 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-05-07 09:08 - 2014-05-07 09:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-05-07 09:06 - 2014-05-07 09:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-07 09:06 - 2014-05-07 09:06 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-07 09:06 - 2014-02-13 18:28 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-07 09:06 - 2014-02-13 18:28 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-07 09:06 - 2014-01-30 12:16 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Malwarebytes
2014-05-07 09:06 - 2014-01-30 12:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-07 09:01 - 2014-05-07 09:01 - 00002469 _____ () C:\Users\Public\Desktop\DriverUpdate.lnk
2014-05-07 09:01 - 2014-05-07 09:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate
2014-05-07 09:01 - 2014-05-07 09:01 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-05-07 08:57 - 2014-05-07 08:57 - 00003826 _____ () C:\Windows\System32\Tasks\DriverEasy Scheduled Scan
2014-05-07 08:57 - 2014-05-07 08:57 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Easeware
2014-05-07 08:56 - 2014-01-02 18:32 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-07 08:51 - 2014-05-07 08:51 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-07 08:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-05 10:58 - 2014-05-05 10:58 - 00447888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-05-05 10:58 - 2014-05-05 10:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-05 10:58 - 2014-05-05 10:58 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-05 10:58 - 2014-02-14 10:45 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-05-05 10:58 - 2014-02-14 09:46 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-05 10:58 - 2014-02-14 09:46 - 00001972 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-05-05 10:58 - 2013-08-24 10:36 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-05-05 10:58 - 2013-08-24 10:36 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-05-05 10:58 - 2013-08-24 10:36 - 00208416 _____ () C:\Windows\system32\Drivers\aswvmm.sys
2014-05-05 10:58 - 2013-08-24 10:36 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-05-05 10:58 - 2013-08-24 10:36 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-05-05 10:58 - 2013-08-24 10:36 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-05-02 08:32 - 2014-05-01 20:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-30 19:09 - 2014-01-30 17:18 - 00000284 _____ () C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job
2014-04-29 16:01 - 2014-05-07 09:59 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-07 09:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-07 09:59 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-07 09:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 14:17 - 2012-12-02 18:26 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 14:17 - 2012-12-02 18:26 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 14:17 - 2012-12-02 18:26 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 10:08 - 2014-01-19 15:33 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-04-29 10:08 - 2014-01-19 15:33 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-04-25 13:44 - 2012-12-01 15:12 - 00000000 ____D () C:\Program Files (x86)\StarCraft II
2014-04-24 11:26 - 2012-12-04 11:34 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-04-24 10:07 - 2014-01-20 11:00 - 00472064 ___SH () C:\Users\affenmann\Desktop\Thumbs.db
2014-04-22 10:28 - 2014-04-22 10:28 - 00000000 ____D () C:\Program Files (x86)\Samsung Printers
2014-04-22 10:28 - 2012-12-01 15:18 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
2014-04-22 10:09 - 2014-04-22 10:09 - 00000000 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-22 10:09 - 2014-01-26 18:17 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-21 18:53 - 2014-04-21 18:53 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Dropbox Folder Sync
2014-04-21 18:53 - 2014-04-21 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox Folder Sync
2014-04-21 18:53 - 2014-04-21 18:53 - 00000000 ____D () C:\Program Files (x86)\Dropbox Folder Sync
2014-04-21 18:53 - 2012-12-02 17:29 - 00000000 ____D () C:\Users\affenmann\Desktop\Verschiedenes
2014-04-21 18:52 - 2013-11-23 15:12 - 00000000 ____D () C:\Users\affenmann
2014-04-17 13:22 - 2014-04-17 13:21 - 00000000 ____D () C:\Users\affenmann\.pdf-over
2014-04-17 13:20 - 2014-04-17 13:20 - 00000937 _____ () C:\Users\Public\Desktop\PDF-Over.lnk
2014-04-17 13:20 - 2014-04-17 13:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-Over
2014-04-17 13:20 - 2014-04-17 13:20 - 00000000 ____D () C:\Program Files (x86)\PDF-Over
2014-04-15 16:58 - 2014-03-07 09:59 - 00000000 ____D () C:\Users\affenmann\AppData\Roaming\Spotify
2014-04-15 10:55 - 2014-04-15 10:55 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2014-04-15 10:55 - 2014-04-15 10:55 - 00001105 _____ () C:\Users\affenmann\Desktop\KeePass 2.lnk
2014-04-15 10:55 - 2014-04-15 10:55 - 00000000 ____D () C:\Program Files (x86)\KeePass Password Safe 2

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-09 11:26

==================== End Of Log ============================
         

--- --- ---

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-05-11 12:54:48
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_SSD_830_Series rev.CXM03B1Q 238,47GB
Running: Gmer-19357.exe; Driver: E:\TEMP\aglcruoc.sys


---- User code sections - GMER 2.1 ----

.text    C:\Windows\system32\wininit.exe[724] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                                             0000000076e3ef8d 1 byte [62]
.text    C:\Windows\system32\services.exe[788] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                                            0000000076e3ef8d 1 byte [62]
.text    C:\Windows\system32\winlogon.exe[972] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                                            0000000076e3ef8d 1 byte [62]
.text    C:\Windows\system32\atiesrxx.exe[624] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                                            0000000076e3ef8d 1 byte [62]
.text    C:\Windows\System32\svchost.exe[1032] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                                            0000000076e3ef8d 1 byte [62]
.text    C:\Windows\system32\svchost.exe[1096] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                                            0000000076e3ef8d 1 byte [62]
.text    C:\Program Files\AVAST Software\Avast\afwServ.exe[1860] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter                                                                                   0000000074d78791 8 bytes [31, C0, C2, 04, 00, 90, 90, ...]
.text    C:\Program Files\AVAST Software\Avast\afwServ.exe[1860] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                          0000000074d9a2fd 1 byte [62]
.text    C:\Windows\Explorer.EXE[1884] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                                                    0000000076e3ef8d 1 byte [62]
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[2028] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                               0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[2188] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                         0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[2188] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                       00000000765e1465 2 bytes [5E, 76]
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[2188] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                      00000000765e14bb 2 bytes [5E, 76]
.text    ...                                                                                                                                                                                                    * 2
.text    C:\Program Files\My Lockbox\mylbx.exe[2324] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                                      0000000074d9a2fd 1 byte [62]
.text    C:\Program Files\My Lockbox\mylbx.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                    00000000765e1465 2 bytes [5E, 76]
.text    C:\Program Files\My Lockbox\mylbx.exe[2324] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                   00000000765e14bb 2 bytes [5E, 76]
.text    ...                                                                                                                                                                                                    * 2
.text    C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe[2416] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                           0000000076e3ef8d 1 byte [62]
.text    C:\Windows\System32\StikyNot.exe[2440] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                                           0000000076e3ef8d 1 byte [62]
.text    C:\Users\affenmann\AppData\Roaming\Dropbox\bin\Dropbox.exe[2744] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                 0000000074d9a2fd 1 byte [62]
.text    C:\Users\affenmann\AppData\Roaming\Dropbox\bin\Dropbox.exe[2744] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 69                                                                               00000000765e1465 2 bytes [5E, 76]
.text    C:\Users\affenmann\AppData\Roaming\Dropbox\bin\Dropbox.exe[2744] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 155                                                                              00000000765e14bb 2 bytes [5E, 76]
.text    ...                                                                                                                                                                                                    * 2
.text    C:\Program Files (x86)\Samsung SSD Magician\Samsung Magician.exe[2860] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                           0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\Skype\Updater\Updater.exe[3024] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                           0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\Skype\Updater\Updater.exe[3024] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                         00000000765e1465 2 bytes [5E, 76]
.text    C:\Program Files (x86)\Skype\Updater\Updater.exe[3024] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                        00000000765e14bb 2 bytes [5E, 76]
.text    ...                                                                                                                                                                                                    * 2
.text    C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe[2844] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                          0000000074d9a2fd 1 byte [62]
.text    C:\Program Files\AVAST Software\Avast\AvastUI.exe[3016] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter                                                                                   0000000074d78791 8 bytes [31, C0, C2, 04, 00, 90, 90, ...]
.text    C:\Program Files\AVAST Software\Avast\AvastUI.exe[3016] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                          0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe[3216] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                         0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe[3320] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                   0000000074d9a2fd 1 byte [62]
.text    C:\Windows\system32\wbem\wmiprvse.exe[3700] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                                      0000000076e3ef8d 1 byte [62]
.text    C:\Program Files (x86)\VirtualCloneDrive\VCDDaemon.exe[3932] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                     0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[4044] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                           0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\SmarThru Office\BackUpSvr.exe[1160] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                       0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe[1552] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                             0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe[4128] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                  0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe[4468] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                      0000000074d9a2fd 1 byte [62]
.text    C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe[4504] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                      0000000076e3ef8d 1 byte [62]
.text    C:\Windows\sysWOW64\wbem\wmiprvse.exe[4840] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                                      0000000074d9a2fd 1 byte [62]
.text    C:\Users\affenmann\Desktop\Gmer-19357.exe[2964] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                                  0000000074d9a2fd 1 byte [62]
---- Processes - GMER 2.1 ----

Library  C:\Users\affenmann\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\affenmann\AppData\Roaming\Dropbox\bin\Dropbox.exe [2744](2014-01-03 01:09:26)                          0000000004020000
Library  C:\Users\affenmann\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\affenmann\AppData\Roaming\Dropbox\bin\Dropbox.exe [2744](2013-08-23 19:01:44)                                0000000068460000
Library  C:\Users\affenmann\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\affenmann\AppData\Roaming\Dropbox\bin\Dropbox.exe [2744] (ICU Data DLL/The ICU Project)(2013-08-23 19:01:42)  0000000067a90000

---- Registry - GMER 2.1 ----

Reg      HKLM\SYSTEM\CurrentControlSet\services\LanmanServer\Shares@mp3\xb4s                                                                                                                                    CSCFlags=2048?MaxUses=4294967295?Path=I:\mp3?s?Permissions=0?Remark=?ShareName=mp3?s?Type=0?
Reg      HKLM\SYSTEM\ControlSet002\services\LanmanServer\Shares@mp3\xb4s                                                                                                                                        CSCFlags=2048?MaxUses=4294967295?Path=I:\mp3?s?Permissions=0?Remark=?ShareName=mp3?s?Type=0?

---- EOF - GMER 2.1 ----
         

Hallo,

leider wurde Dein Thema aus (technischen Gründen) übersehen. Da mehrere Antworten in Deinem Thema vorhanden waren, wurde es versehentlich als 'bereits in Arbeit' eingestuft.

Dies bitten wir zu entschuldigen.

Wir versuchen jedem Hilfesuchenden binnen kurzer Zeit zu antworten und Lösungen für das Problem anzubieten.

Bitte erstelle ggf. ein neues Thema, damit sich ein Teammitglied deinem Problem annehmen kann.

Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?

Vielen Dank für Dein Verständnis.