Guten Tag, und vielen Dank für die Hilfe - schon im Voraus!

Mein Mbam kann nicht starten. ich habe alle 13 Chameleons probiert und immer mit der Antwort: SCAN KANN NICHT GESTARTET WERDEN quittiert bekommen. Wie soll ich vorgehen?

Ich habe die folgenden Scans zur Vorbereitung durchgeführt:

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 08:21 on 10/06/2014 (Markus *****)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-06-2014
Ran by Markus ****** (administrator) on MARKUS******PC on 10-06-2014 08:28:32
Running from C:\Users\Markus ******\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY InfoPoisk LLC) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
( ) C:\Windows\System32\lxeecoms.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\PLFSetI.exe
(sonix) C:\Windows\PLFSetL.exe
() C:\Windows\snuvcdsm.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(sonix) C:\Windows\PLFSetL.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Dropbox, Inc.) C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\hh.exe
(MalwareBytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\mbam-chameleon.pif
() C:\Users\Markus ******\Desktop\Defogger (1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13656792 2013-10-04] (Realtek Semiconductor)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2010-11-17] ()
HKLM\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [99712 2010-01-13] (sonix)
HKLM\...\Run: [SNUVCDSM] => C:\Windows\snuvcdsm.exe [30080 2010-01-13] ()
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-11] (Dritek System Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-15] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [99712 2010-01-13] (sonix)
HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY Production LLC)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-05-09] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-3706524009-4250397638-3171320869-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-11-16] (Google Inc.)
HKU\S-1-5-21-3706524009-4250397638-3171320869-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-11-16] (Google Inc.)
HKU\S-1-5-21-3706524009-4250397638-3171320869-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-11-16] (Google Inc.)
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\businesscardreader.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\express.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\finecmd.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\images2pdf.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\pdf architect.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PHOTOfunSTUDIO 9.1 PE.lnk
ShortcutTarget: PHOTOfunSTUDIO 9.1 PE.lnk -> C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe (Panasonic Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://meteo.srf.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.meteocentrale.ch/de/europa/schweiz/wetter-zuerich/details/N-3518042/
hxxp://www.nzz.ch/wetter/radarbild/
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {3A08CD5B-FF07-4DCB-809E-8A916279267C} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
SearchScopes: HKCU - {CD10120B-C165-4f8d-8C74-639629E238FF} URL = hxxp://mystart.magentic.com/?search={searchTerms}&loc=search_box
SearchScopes: HKCU - {F757135D-0CDC-4514-AC7F-C7E7284BCAF7} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10262&src=kw&q={searchTerms}&locale=de_CH&apn_ptnrs=^AGT&apn_dtid=^YYYYYY^YY^CH&apn_uid=e03eee1c-e153-4d97-a2da-0885b8125138&apn_sauid=D157CB26-7450-4F55-9CA6-149BCFEC1E7F
BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} -  No File
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {8AE3BCD6-ADBC-42E5-91BB-BF81E65B5911} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://oas.support.microsoft.com/ActiveX/MSDcode.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (NPLastPass) - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File
CHR Extension: (Google Docs) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-16]
CHR Extension: (Google Drive) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-16]
CHR Extension: (WOT) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-05-22]
CHR Extension: (YouTube) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-08-27]
CHR Extension: (Google-Suche) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-08-27]
CHR Extension: (Avira Browser Safety) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-05-01]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-06-09]
CHR Extension: (Google Wallet) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-16]
CHR Extension: (Google Mail) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-08-27]

==================== Services (Whitelisted) =================

S4 ABBYY.Licensing.BCR.Windows.2.0; C:\Program Files (x86)\NetworkLicenseServer.exe [821808 2012-04-28] (ABBYY)
R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY InfoPoisk LLC)
R2 ABBYY.Licensing.PDFTransformer.Classic.4.0; C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe [959184 2014-04-03] (ABBYY Production LLC)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [811088 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [124496 2014-05-05] (Avira Operations GmbH & Co. KG)
S3 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S4 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxeeserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [1052328 2010-01-07] ( )
R2 lxee_device; C:\Windows\SysWOW64\lxeecoms.exe [598696 2010-01-07] ( )
S4 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
S4 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S4 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [272024 2006-12-19] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1223704 2013-02-07] (Secunia)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-05-09] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [295800 2014-05-09] (Western Digital Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-04-29] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-04-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-19] (Avira Operations GmbH & Co. KG)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-02-07] (Secunia)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SjtWinIo; C:\Windows\System32\DRIVERS\SjtWinIo.sys [9216 2011-05-08] (SpeedJet Technology INC.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806592 2010-01-13] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 AVFSFilter; system32\DRIVERS\avfsfilter.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-10 08:28 - 2014-06-10 08:29 - 00023207 _____ () C:\Users\Markus ******\Desktop\FRST.txt
2014-06-10 08:28 - 2014-06-10 08:28 - 00000000 ____D () C:\FRST
2014-06-10 08:26 - 2014-06-10 08:26 - 02080768 _____ (Farbar) C:\Users\Markus ******\Desktop\FRST64.exe
2014-06-10 08:21 - 2014-06-10 08:21 - 00000490 _____ () C:\Users\Markus ******\Desktop\defogger_disable.log
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus ******\Desktop\Defogger (1).exe
2014-06-10 08:18 - 2014-06-10 08:19 - 00000490 _____ () C:\Users\Markus ******\Downloads\defogger_disable.log
2014-06-10 08:18 - 2014-06-10 08:18 - 00000000 _____ () C:\Users\Markus ******\defogger_reenable
2014-06-10 08:17 - 2014-06-10 08:17 - 00050477 _____ () C:\Users\Markus ******\Downloads\Defogger.exe
2014-06-09 13:17 - 2014-06-10 08:29 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-09 13:17 - 2014-06-09 13:17 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-09 13:17 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-09 13:16 - 2014-06-09 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (5).exe
2014-06-09 12:04 - 2014-06-09 12:05 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (4).exe
2014-06-09 12:00 - 2014-06-09 12:00 - 00128904 _____ () C:\Users\Markus ******\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-09 11:53 - 2014-06-10 07:44 - 00000224 _____ () C:\Windows\setupact.log
2014-06-09 11:53 - 2014-06-09 11:53 - 00498384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00007236 _____ () C:\Windows\PFRO.log
2014-06-09 11:53 - 2014-06-09 11:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-09 11:48 - 2014-06-09 11:48 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (3).exe
2014-06-09 11:31 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-09 11:30 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-09 11:17 - 2014-06-09 11:18 - 00000000 ____D () C:\Program Files (x86)\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00001198 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:15 - 2014-06-09 11:15 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64 (1).exe
2014-06-09 10:40 - 2014-06-09 10:41 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\PDFCreator
2014-06-09 09:52 - 2014-06-10 07:48 - 00000000 ___RD () C:\Users\Markus ******\Dropbox
2014-06-09 09:52 - 2014-06-09 09:52 - 00001059 _____ () C:\Users\Markus ******\Desktop\Dropbox.lnk
2014-06-09 09:51 - 2014-06-09 09:51 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (2).exe
2014-06-09 09:16 - 2014-06-09 09:17 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 08:54 - 2014-06-09 11:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\pdfforge
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Program Files\PDFCreator
2014-06-09 08:54 - 2014-04-17 19:36 - 00110776 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-06-09 08:48 - 2014-06-09 08:49 - 25055960 _____ (pdfforge ) C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe
2014-06-08 13:11 - 2014-06-09 10:03 - 00000000 ____D () C:\Users\Markus ******\Desktop\Mueti Teneriffa 2014
2014-06-01 09:40 - 2014-06-01 09:40 - 00000000 ____H () C:\Users\Markus ******\Documents\Default.rdp
2014-05-28 07:10 - 2014-06-10 07:48 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\DropboxMaster
2014-05-28 07:10 - 2014-06-09 09:52 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-28 07:06 - 2014-06-09 09:52 - 00000692 _____ () C:\Windows\wininit.ini
2014-05-28 07:06 - 2014-05-28 07:06 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (1).exe
2014-05-28 07:05 - 2014-06-10 07:48 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Dropbox
2014-05-28 07:05 - 2014-05-28 07:05 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller.exe
2014-05-27 08:42 - 2014-05-27 08:42 - 00000000 ____D () C:\Analytics
2014-05-27 08:41 - 2014-05-27 08:41 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-05-26 09:58 - 2014-05-26 09:59 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64.exe
2014-05-24 00:03 - 2014-05-24 00:03 - 00000731 _____ () C:\Users\Markus ******\Downloads\vcard-MarcelR-Saluz.vcf
2014-05-23 09:17 - 2014-06-09 10:43 - 00000000 ____D () C:\Users\Markus ******\Desktop\Ferien Portugal
2014-05-22 23:16 - 2014-05-22 23:16 - 00000000 ____D () C:\Windows\TEMPDIR
2014-05-22 10:29 - 2014-05-22 10:29 - 00000000 ____D () C:\Users\Küde\AppData\Roaming\com.wd.WDMyCloud
2014-05-21 17:55 - 2014-06-10 07:46 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-05-20 08:43 - 2014-05-20 08:43 - 00001218 _____ () C:\Users\Markus ******\Desktop\WD Quick View.lnk
2014-05-20 08:41 - 2014-05-20 08:41 - 04398333 _____ () C:\Users\Markus ******\Downloads\WD_Quick_View_Setup_for_Windows.zip
2014-05-20 08:40 - 2014-05-20 08:40 - 00001172 _____ () C:\Users\Markus ******\Desktop\WD SmartWare.lnk
2014-05-20 08:17 - 2014-05-20 08:18 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader (1).zip
2014-05-20 08:08 - 2014-05-20 08:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 08:07 - 2014-05-20 08:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 08:07 - 2014-05-20 08:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55.exe
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55 (1).exe
2014-05-18 22:28 - 2014-05-18 22:28 - 00013312 ___SH () C:\Users\Markus ******\Downloads\Thumbs.db
2014-05-18 22:17 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western_Digital_Technolog
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-05-18 22:14 - 2014-05-18 22:14 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader.zip
2014-05-16 23:05 - 2014-05-18 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-05-16 23:05 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-05-16 23:05 - 2014-05-16 23:06 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\com.wd.WDMyCloud
2014-05-16 23:05 - 2014-05-16 23:05 - 00001157 _____ () C:\Users\Public\Desktop\WD My Cloud.lnk
2014-05-16 23:04 - 2014-05-18 22:15 - 00000000 ____D () C:\ProgramData\Western Digital
2014-05-16 23:04 - 2014-05-16 23:04 - 00000204 _____ () C:\Users\Markus ******\Desktop\Lerncenter WD My Cloud.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000156 _____ () C:\Users\Markus ******\Desktop\WD My Cloud – Öffentliche Freigabe.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000152 _____ () C:\Users\Markus ******\Desktop\WD My Cloud-Dashboard.url
2014-05-16 23:00 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western Digital
2014-05-16 22:59 - 2014-05-16 23:00 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup (1).exe
2014-05-16 22:58 - 2014-05-16 22:59 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup.exe
2014-05-15 23:58 - 2014-05-15 23:58 - 09518328 _____ () C:\Users\Markus ******\Downloads\avira_secure_backup_int.exe
2014-05-15 00:25 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 00:25 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 00:25 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 00:25 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 00:25 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 00:25 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 23:58 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 23:58 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 23:58 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 23:58 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 23:58 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 23:58 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 23:58 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 23:58 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 23:58 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 23:58 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 23:58 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 23:58 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 23:58 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 23:58 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 23:58 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 23:58 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 23:58 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-14 07:35 - 2014-05-14 07:35 - 17352880 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-12 23:32 - 2014-05-12 23:32 - 02171144 _____ (IncrediMail ) C:\Users\Markus ******\Downloads\protectioncenter.exe

==================== One Month Modified Files and Folders =======

2014-06-10 08:29 - 2014-06-10 08:28 - 00023207 _____ () C:\Users\Markus ******\Desktop\FRST.txt
2014-06-10 08:29 - 2014-06-09 13:17 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-10 08:29 - 2011-02-11 19:52 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Temp
2014-06-10 08:28 - 2014-06-10 08:28 - 00000000 ____D () C:\FRST
2014-06-10 08:26 - 2014-06-10 08:26 - 02080768 _____ (Farbar) C:\Users\Markus ******\Desktop\FRST64.exe
2014-06-10 08:21 - 2014-06-10 08:21 - 00000490 _____ () C:\Users\Markus ******\Desktop\defogger_disable.log
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus ******\Desktop\Defogger (1).exe
2014-06-10 08:19 - 2014-06-10 08:18 - 00000490 _____ () C:\Users\Markus ******\Downloads\defogger_disable.log
2014-06-10 08:18 - 2014-06-10 08:18 - 00000000 _____ () C:\Users\Markus ******\defogger_reenable
2014-06-10 08:18 - 2011-02-11 19:52 - 00000000 ____D () C:\Users\Markus ******
2014-06-10 08:17 - 2014-06-10 08:17 - 00050477 _____ () C:\Users\Markus ******\Downloads\Defogger.exe
2014-06-10 07:53 - 2009-07-14 06:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-10 07:53 - 2009-07-14 06:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-10 07:49 - 2010-11-17 03:10 - 01941757 _____ () C:\Windows\WindowsUpdate.log
2014-06-10 07:48 - 2014-06-09 09:52 - 00000000 ___RD () C:\Users\Markus ******\Dropbox
2014-06-10 07:48 - 2014-05-28 07:10 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\DropboxMaster
2014-06-10 07:48 - 2014-05-28 07:05 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Dropbox
2014-06-10 07:46 - 2014-05-21 17:55 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-06-10 07:45 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-10 07:44 - 2014-06-09 11:53 - 00000224 _____ () C:\Windows\setupact.log
2014-06-10 07:28 - 2013-04-19 09:35 - 00000000 ____D () C:\Users\Küde\AppData\Local\temp
2014-06-09 22:35 - 2013-12-15 14:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-09 13:17 - 2014-06-09 13:17 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-09 13:16 - 2014-06-09 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (5).exe
2014-06-09 12:05 - 2014-06-09 12:04 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (4).exe
2014-06-09 12:00 - 2014-06-09 12:00 - 00128904 _____ () C:\Users\Markus ******\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00498384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00007236 _____ () C:\Windows\PFRO.log
2014-06-09 11:53 - 2014-06-09 11:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-09 11:48 - 2014-06-09 11:48 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (3).exe
2014-06-09 11:31 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-09 11:31 - 2014-06-09 11:30 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-09 11:18 - 2014-06-09 11:17 - 00000000 ____D () C:\Program Files (x86)\LastPass
2014-06-09 11:18 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:17 - 2014-06-09 11:17 - 00001198 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2011-02-24 01:39 - 00000000 ___RD () C:\Users\Internetdummy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:17 - 2011-02-11 23:58 - 00000000 ___RD () C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:15 - 2014-06-09 11:15 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64 (1).exe
2014-06-09 11:14 - 2014-06-09 08:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-09 10:44 - 2011-03-12 11:11 - 00003696 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-06-09 10:43 - 2014-05-23 09:17 - 00000000 ____D () C:\Users\Markus ******\Desktop\Ferien Portugal
2014-06-09 10:41 - 2014-06-09 10:40 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\PDFCreator
2014-06-09 10:03 - 2014-06-08 13:11 - 00000000 ____D () C:\Users\Markus ******\Desktop\Mueti Teneriffa 2014
2014-06-09 09:52 - 2014-06-09 09:52 - 00001059 _____ () C:\Users\Markus ******\Desktop\Dropbox.lnk
2014-06-09 09:52 - 2014-05-28 07:10 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-09 09:52 - 2014-05-28 07:06 - 00000692 _____ () C:\Windows\wininit.ini
2014-06-09 09:52 - 2011-02-11 20:00 - 00000000 ___RD () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 09:51 - 2014-06-09 09:51 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (2).exe
2014-06-09 09:17 - 2014-06-09 09:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\pdfforge
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Program Files\PDFCreator
2014-06-09 08:49 - 2014-06-09 08:48 - 25055960 _____ (pdfforge ) C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe
2014-06-09 08:47 - 2012-01-16 12:03 - 00000000 ____D () C:\Users\Markus ******\Desktop\Infos Ferien Teneriffa
2014-06-07 09:52 - 2010-11-17 03:50 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-06-07 09:52 - 2010-11-17 03:50 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-06-07 09:52 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-07 07:15 - 2011-03-18 22:39 - 00000000 ____D () C:\ProgramData\Lx_cats
2014-06-05 14:02 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-01 09:40 - 2014-06-01 09:40 - 00000000 ____H () C:\Users\Markus ******\Documents\Default.rdp
2014-05-30 17:42 - 2013-02-18 23:42 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-05-30 12:18 - 2014-01-28 00:53 - 00013954 _____ () C:\Users\Markus ******\Desktop\Telefonliste MA AURORA.xlsx
2014-05-30 08:51 - 2013-09-11 17:53 - 00000000 ____D () C:\Users\Markus ******\Desktop\Unterlagen Liquidation für Mario
2014-05-29 09:13 - 2011-02-11 20:28 - 00000000 ____D () C:\Users\Markus ******\Documents\Kundennummern und Zugangscodes
2014-05-28 07:06 - 2014-05-28 07:06 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (1).exe
2014-05-28 07:05 - 2014-05-28 07:05 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller.exe
2014-05-27 08:42 - 2014-05-27 08:42 - 00000000 ____D () C:\Analytics
2014-05-27 08:41 - 2014-05-27 08:41 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-05-26 09:59 - 2014-05-26 09:58 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64.exe
2014-05-24 00:03 - 2014-05-24 00:03 - 00000731 _____ () C:\Users\Markus ******\Downloads\vcard-MarcelR-Saluz.vcf
2014-05-22 23:16 - 2014-05-22 23:16 - 00000000 ____D () C:\Windows\TEMPDIR
2014-05-22 10:29 - 2014-05-22 10:29 - 00000000 ____D () C:\Users\Küde\AppData\Roaming\com.wd.WDMyCloud
2014-05-20 08:43 - 2014-05-20 08:43 - 00001218 _____ () C:\Users\Markus ******\Desktop\WD Quick View.lnk
2014-05-20 08:41 - 2014-05-20 08:41 - 04398333 _____ () C:\Users\Markus ******\Downloads\WD_Quick_View_Setup_for_Windows.zip
2014-05-20 08:40 - 2014-05-20 08:40 - 00001172 _____ () C:\Users\Markus ******\Desktop\WD SmartWare.lnk
2014-05-20 08:18 - 2014-05-20 08:17 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader (1).zip
2014-05-20 08:08 - 2014-05-20 08:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 08:07 - 2014-05-20 08:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 08:07 - 2014-05-20 08:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 08:07 - 2013-02-18 19:24 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55.exe
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55 (1).exe
2014-05-18 22:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-18 22:28 - 2014-05-18 22:28 - 00013312 ___SH () C:\Users\Markus ******\Downloads\Thumbs.db
2014-05-18 22:21 - 2013-04-17 07:48 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-18 22:17 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western_Digital_Technolog
2014-05-18 22:17 - 2014-05-16 23:00 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western Digital
2014-05-18 22:16 - 2014-05-16 23:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-05-18 22:15 - 2014-05-16 23:05 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-05-18 22:15 - 2014-05-16 23:04 - 00000000 ____D () C:\ProgramData\Western Digital
2014-05-18 22:15 - 2013-03-15 00:20 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-18 22:14 - 2014-05-18 22:14 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader.zip
2014-05-16 23:06 - 2014-05-16 23:05 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\com.wd.WDMyCloud
2014-05-16 23:05 - 2014-05-16 23:05 - 00001157 _____ () C:\Users\Public\Desktop\WD My Cloud.lnk
2014-05-16 23:04 - 2014-05-16 23:04 - 00000204 _____ () C:\Users\Markus ******\Desktop\Lerncenter WD My Cloud.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000156 _____ () C:\Users\Markus ******\Desktop\WD My Cloud – Öffentliche Freigabe.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000152 _____ () C:\Users\Markus ******\Desktop\WD My Cloud-Dashboard.url
2014-05-16 23:00 - 2014-05-16 22:59 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup (1).exe
2014-05-16 22:59 - 2014-05-16 22:58 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup.exe
2014-05-16 08:30 - 2011-02-16 00:39 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-16 00:17 - 2011-02-11 23:39 - 00000000 ___DC () C:\Users\Markus ******\AppData\Local\MigWiz
2014-05-15 23:58 - 2014-05-15 23:58 - 09518328 _____ () C:\Users\Markus ******\Downloads\avira_secure_backup_int.exe
2014-05-15 12:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 11:53 - 2011-02-11 23:58 - 00000000 ___RD () C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 09:05 - 2011-02-11 20:00 - 00000000 ___RD () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 08:59 - 2014-05-07 16:43 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 00:28 - 2011-02-11 22:34 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 00:24 - 2013-08-15 02:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 00:21 - 2011-02-12 11:56 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 08:24 - 2011-03-18 22:11 - 00559534 _____ () C:\ProgramData\lxeescan.log
2014-05-14 07:35 - 2014-05-14 07:35 - 17352880 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-14 07:35 - 2013-12-15 14:04 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 07:35 - 2013-12-15 14:04 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 07:35 - 2013-12-15 14:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-13 08:04 - 2011-02-13 10:45 - 00000000 ____D () C:\Users\Küde\AppData\Local\IM
2014-05-13 08:03 - 2011-02-11 23:59 - 00128904 _____ () C:\Users\Küde\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-13 00:07 - 2014-04-10 23:14 - 00001077 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-05-12 23:59 - 2011-02-11 22:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-12 23:55 - 2010-09-16 02:19 - 00000000 ____D () C:\Windows\ShellNew
2014-05-12 23:33 - 2013-01-28 12:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail
2014-05-12 23:33 - 2011-02-12 12:26 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\IM
2014-05-12 23:32 - 2014-05-12 23:32 - 02171144 _____ (IncrediMail ) C:\Users\Markus ******\Downloads\protectioncenter.exe
2014-05-12 13:04 - 2013-04-30 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-12 13:04 - 2012-12-17 09:11 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-05-12 07:26 - 2014-06-09 13:17 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-09 13:17 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-11 06:43 - 2011-02-11 20:29 - 00000000 ____D () C:\Users\Markus ******\Documents\Vereinsleben

Some content of TEMP:
====================
C:\Users\Internetdummy\AppData\Local\Temp\avgnt.exe
C:\Users\Küde\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe
C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkl7yak.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-09 13:58

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-06-2014
Ran by Markus ******* at 2014-06-10 08:30:15
Running from C:\Users\Markus *******\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

ABBYY Business Card Reader 2.0 (HKLM-x32\...\{BC200000-0001-0000-0000-074957833700}) (Version: 2.0.55 - ABBYY)
ABBYY FineReader 11 (HKLM-x32\...\{F11000FE-0010-0000-0000-074957833700}) (Version: 11.11.194 - ABBYY Production LLC)
ABBYY PDF Transformer+ (HKLM\...\{FA400000-0001-6400-0000-074957833700}) (Version: 4.1.159 - ABBYY Production LLC)
Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.68 - NewTech Infosystems)
Acer Crystal Eye webcam Ver:1.1.192.810 (HKLM-x32\...\{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}) (Version: 1.1.192.810 - Chicony Electronics Co.,Ltd.)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3005 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0423.2010 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated)
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{DD89CE29-BC88-40C6-A845-E2548682C5D6}) (Version: 1.9.17.06019 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.9.17.06019 - Alcor Micro Corp.) Hidden
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros)
ATI Catalyst Install Manager (HKLM\...\{75FDB05A-C1C2-CD17-35CE-3C1A454CC79F}) (Version: 3.0.778.0 - ATI Technologies, Inc.)
Avery Wizard 4.0 (HKLM-x32\...\{F5D84887-8A6F-4993-8560-B3AA44CB620D}) (Version: 4.0.201 - Avery)
Avira (HKLM-x32\...\{70a79d1f-686d-4d5c-962b-07aa1294eae0}) (Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG) Hidden
Avira Internet Security Suite (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Backup Manager Basic (x32 Version: 2.0.0.68 - NewTech Infosystems) Hidden
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 15.0.7.1 - Broadcom Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0825.2205.37769 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help English (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help French (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help German (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
ccc-utility64 (Version: 2010.0825.2205.37769 - ATI) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3814.50 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.3814.50 - CyberLink Corp.) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version:  - Microsoft)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.3 - Dropbox, Inc.)
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version:  - DVD Shrink)
DVDStyler v2.7.2 (HKLM-x32\...\DVDStyler_is1) (Version:  - )
Elevated Installer (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
FileAlyzer 2 (HKLM-x32\...\{29D3773E-54F4-23C2-D523-236A4453B845}_is1) (Version: 2.0.0.10 - Safer Networking Limited)
Free Disc Burner version 3.0.7.1206 (HKLM-x32\...\Free Disc Burner_is1) (Version:  - DVDVideoSoft Ltd.)
Free MP4 Video Converter version 5.0.20.1031 (HKLM-x32\...\Free MP4 Video Converter_is1) (Version: 5.0.20.1031 - DVDVideoSoft Ltd.)
Free Studio version 5.9.0.1212 (HKLM-x32\...\Free Studio_is1) (Version: 5.9.0.1212 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.1.40.1031 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.1.40.1031 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.10.11.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Ltd.)
Garmin Express (HKLM-x32\...\{9471d6bd-67a9-40f6-a420-2ae4f08ef003}) (Version: 2.3.14.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin WebUpdater (HKLM-x32\...\{AE1EC58E-B2AC-4959-A4C2-C38202A25239}) (Version: 2.5.6 - Garmin Ltd or its subsidiaries)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated)
IncrediBackup (x32 Version: 1.0.0.1039 - IncrediMail) Hidden
IncrediMail (x32 Version: 6.3.9.5274 - IncrediMail) Hidden
IncrediMail 2.0 (HKLM-x32\...\IncrediMail) (Version: 6.3.9.5274 - IncrediMail Ltd.)
IncrediMail Protection Center (HKLM-x32\...\Protection Center) (Version: 6001076 - IncrediMail Ltd.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1002 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.6 - Intel)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Kochtopf Easy (HKLM-x32\...\{FF8FB99F-1C60-4220-976B-4940D39F7941}) (Version: 14.11.2006 - Carosoft, 8733 Eschenbach)
LastPass (Nur deinstallieren) (HKLM-x32\...\LastPass) (Version:  - LastPass)
Lexmark  (HKLM-x32\...\{D2C5E510-BE6D-42CC-9F61-E4F939078474}) (Version: 1.0.0.0 - )
Lexmark Pro700 Series (HKLM\...\Lexmark Pro700 Series) (Version:  - Lexmark International, Inc.)
Lexmark Tools for Office (HKLM-x32\...\{10812DE7-2E57-4740-B226-6B3BE34AF9D7}) (Version: 1.41.0.0 - )
LibreOffice 4.2.4.2 (HKLM-x32\...\{6B4977CB-5B9F-4B24-8310-3BA527A8AF22}) (Version: 4.2.4.2 - The Document Foundation)
LoiLoScope 2 (HKLM-x32\...\{CAB75FFC-2377-4B95-A8FA-C9234B812A92}_is1) (Version: 2.5.3.2 - LoiLo inc)
LoiLoScope Herunterladen (HKLM-x32\...\{C2A254F4-AC74-482F-8F09-DB2843AC2AAE}_is1) (Version: 2.0 - LoiLo inc)
LUMIX Map Tool (HKLM-x32\...\InstallShield_{7DCF5B1D-79C2-4F24-9746-511436EBC6B4}) (Version: 1.1.0 - Panasonic Corporation)
LUMIX Map Tool (x32 Version: 1.1.0 - Panasonic Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.145.0 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (Version: 2.3.145.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSVC80_x64 (Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86 (x32 Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.9.3 - pdfforge)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - Ihr Firmenname) Hidden
PHOTOfunSTUDIO 9.1 PE (HKLM-x32\...\{C13FE7DE-D34D-48CC-9FA3-8DB9A3621B98}) (Version: 9.01.709 - Panasonic Corporation)
PowerDirector (HKLM-x32\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version:  - )
PowerProducer (HKLM-x32\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version:  - )
Private Tax 2012 2.0 (HKLM-x32\...\6753-7911-9438-6061) (Version: 2.0 - Information Factory AG)
Private Tax 2013 1.4.0 (HKLM-x32\...\0579-4231-5684-8562) (Version: 1.4.0 - Information Factory AG)
Protection Center (x32 Version: 6.0.0.1076 - IncrediMail) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7058 - Realtek Semiconductor Corp.)
Secunia PSI (3.0.0.6005) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.6005 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.6.0 - Synaptics Incorporated)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.296 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4410.1 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.2160.11 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
WavePurity (HKLM-x32\...\WavePurity) (Version:  - )
WD My Cloud (HKLM\...\{8F19C800-80A5-4636-B560-39A58112D45B}) (Version: 1.0.4.37 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{9A265E7E-5602-44DB-8B4D-A25C58D02489}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{0CADB637-714E-4F47-83C7-F11FEFC930D6}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM-x32\...\{9af08980-8d36-4304-a8d0-53dc0c7d93a5}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WebCam (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.54.007 - Sonix)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3004 - Acer Incorporated)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows-Treiberpaket - ATI Technologies Inc. (amdkmdap) Display  (06/13/2011 8.840.7.4000) (HKLM\...\1DE0DA68FB9DE6759FF33A74F6DF5523389FA513) (Version: 06/13/2011 8.840.7.4000 - ATI Technologies Inc.)
Windows-Treiberpaket - Broadcom (k57nd60a) Net  (10/15/2012 15.6.0.2) (HKLM\...\04AD368CB9CF50B30DB1552B0C6653E2EFFC7966) (Version: 10/15/2012 15.6.0.2 - Broadcom)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\03558EE026C7D1019B4A138DD4B58B8AE39211C4) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\BF1AD0105EBDCA6E730BE93DE583343339830A7A) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\CAC45647A959F237CE25C052FDB9A4A914C34830) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel USB  (07/25/2013 9.1.9.1005) (HKLM\...\A86AAC18EC59E9369A037083AC25A97B89713EC8) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Realtek Semiconductor Corp. HD Audio Driver (10/07/2013 6.0.1.7058) (HKLM\...\DE7597D60A9A5CE6DE9AAA75BF05E6A6722AE298) (Version: 10/07/2013 6.0.1.7058 - Realtek Semiconductor Corp.)
WOT für Internet Explorer (HKLM\...\{DCAEC601-735C-41AE-B84F-D792F09FB7D1}) (Version: 12.8.2.0 - WOT Services Oy)

==================== Restore Points  =========================

25-05-2014 11:31:03 Geplanter Prüfpunkt
01-06-2014 16:01:36 Geplanter Prüfpunkt
09-06-2014 08:59:30 Removed Bonjour
09-06-2014 09:00:25 Removed Bonjour-Druckdienste

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-04-15 00:25 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {07FE6F92-D444-42C0-889F-68C95941C05F} - System32\Tasks\launchspotflux => C:\Program Files (x86)\spotflux\.\spotflux.exe
Task: {0A1F5F73-36C4-4F05-93CB-2712CE5C6598} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: {30652F9D-91E4-4C1F-9F33-BF0A4710BD9F} - System32\Tasks\{206A70D1-01F2-4196-9221-000636522535} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {3F021A4B-D233-483E-BB52-D8F629426F17} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-09-04] (Microsoft)
Task: {3F541924-9B98-4CA8-B2D7-C486F018B83B} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {67F5CC37-E497-4647-9CF9-5E76CE6AEF97} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
Task: {6C7F0A50-412C-4B03-951E-ABBE5DC6F204} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {74674AC7-0F42-4191-B092-B0E4D39D9280} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {7F55709A-034E-4914-A27F-40CE690C591B} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3706524009-4250397638-3171320869-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {81D7756B-58DC-4B7F-9103-984D1AA7B320} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {850AFB24-18F3-45DD-A2EA-AE87484F849E} - System32\Tasks\FGRun => C:\Users\Markus
Task: {9637B875-BEC4-452E-B587-5F3D14DE8820} - System32\Tasks\Google Updater and Installer => C:\Users\Markus *******\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {983283BC-F494-4178-91F4-39E933087691} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3706524009-4250397638-3171320869-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {9C5F10B0-804B-4A4D-8857-64BD5409C01E} - System32\Tasks\Western Digital\SmartWare\____Volume_edd7a140_f1e6_11df_b892_806e6f6e6963__dropbox_c0de6ce1_5657_41e8_800c_858feb0a3768_dropbox_ => C:\Program Files (x86)\Western Digital\WD SmartWare\BackupTask.exe [2014-05-09] (Western Digital Technologies, Inc.)
Task: {9E0E5119-43FD-407D-BD05-1A59E915EEE6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: {A73C02F3-4334-41C1-8E95-D72E83DBC766} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {AC3F5984-5C73-4BDC-8EF7-075138133231} - System32\Tasks\{4E9B0226-A400-466C-A753-64E3F9F604E9} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {B82F9D1F-6BC9-435E-A1C8-41AEF458729A} - System32\Tasks\{969DD5E3-8FD4-4B20-BE2B-29A1165A141E} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {C76FB41A-69E8-4107-9CAC-83450B2DD022} - System32\Tasks\{E75F870D-0780-4A2A-AFDC-53CAC00B717E} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {CF84C6B6-AC15-463F-95C4-D94C94325191} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {EC68C63E-3DC5-4E8E-899B-4BC13A49C2F2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {F48A4817-33A4-4EE2-BC73-662FE8B7F715} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {FCF6100D-2F42-4507-9A1B-22DA1193953D} - System32\Tasks\{E2596B35-B99D-40DF-80DD-684E1D3224FA} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {FEBC2A27-5244-4EFC-84A4-C4F933910FBA} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2014-04-15] (TuneUp Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-03-18 22:10 - 2009-11-04 14:18 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxeedrpp.dll
2014-04-15 15:59 - 2014-04-15 15:59 - 00675640 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2010-11-17 03:18 - 2010-11-17 03:18 - 00206208 _____ () C:\Windows\PLFSetI.exe
2013-12-16 08:12 - 2010-01-13 11:55 - 00030080 _____ () C:\Windows\snuvcdsm.exe
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus *******\Desktop\Defogger (1).exe
2010-06-29 00:20 - 2010-06-29 00:20 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-06-29 00:12 - 2010-06-29 00:12 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00138320 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-06-07 07:08 - 2014-05-05 10:37 - 00049744 _____ () C:\Users\Markus *******\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-06-10 07:47 - 2014-06-10 07:47 - 00043008 _____ () C:\Users\Markus *******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkl7yak.dll
2014-05-28 07:10 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Markus *******\AppData\Roaming\Dropbox\bin\libcef.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
2014-06-09 13:17 - 2014-05-12 07:24 - 01181496 _____ () C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\mbam-killer.exe

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:288D55E3

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/10/2014 08:29:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xfb8
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/10/2014 08:18:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xc30
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/10/2014 08:09:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1590
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/10/2014 08:02:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xad4
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/10/2014 08:00:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x94c
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/10/2014 07:47:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LManager.exe, Version: 4.0.14.854, Zeitstempel: 0x4c611672
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xe70
Startzeit der fehlerhaften Anwendung: 0xLManager.exe0
Pfad der fehlerhaften Anwendung: LManager.exe1
Pfad des fehlerhaften Moduls: LManager.exe2
Berichtskennung: LManager.exe3

Error: (06/10/2014 07:15:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LManager.exe, Version: 4.0.14.854, Zeitstempel: 0x4c611672
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xc3c
Startzeit der fehlerhaften Anwendung: 0xLManager.exe0
Pfad der fehlerhaften Anwendung: LManager.exe1
Pfad des fehlerhaften Moduls: LManager.exe2
Berichtskennung: LManager.exe3

Error: (06/09/2014 10:44:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xae0
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/09/2014 10:36:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x234
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/09/2014 10:36:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1768
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3


System errors:
=============
Error: (06/10/2014 08:29:43 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/10/2014 08:29:43 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/10/2014 08:28:37 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/10/2014 08:28:38 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/10/2014 08:22:47 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/10/2014 08:22:48 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/10/2014 08:21:49 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/10/2014 08:21:50 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/10/2014 08:15:52 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/10/2014 08:15:52 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422


Microsoft Office Sessions:
=========================
Error: (06/10/2014 08:29:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdfb801cf8475460b22bfC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll84511957-f068-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 08:18:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdc3001cf8473dc0c9525C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll1affe547-f067-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 08:09:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd159001cf8472950a13deC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dlld3330c29-f065-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 08:02:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdad401cf847199d3c236C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dlld8d40ad8-f064-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 08:00:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd94c01cf84714c419901C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll8a223c9d-f064-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 07:47:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: LManager.exe4.0.14.8544c611672unknown0.0.0.000000000c000000500000000e7001cf846f5e6f05e7C:\Program Files (x86)\Launch Manager\LManager.exeunknowna6123aaf-f062-11e3-aed4-206a8a1c06e5

Error: (06/10/2014 07:15:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: LManager.exe4.0.14.8544c611672unknown0.0.0.000000000c000000500000000c3c01cf846ad38eefb7C:\Program Files (x86)\Launch Manager\LManager.exeunknown31df1598-f05e-11e3-9684-206a8a1c06e5

Error: (06/09/2014 10:44:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdae001cf84239294ecb0C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dlld18c56d6-f016-11e3-b003-206a8a1c06e5

Error: (06/09/2014 10:36:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd23401cf84228cd80902C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dllcaa385c6-f015-11e3-b003-206a8a1c06e5

Error: (06/09/2014 10:36:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd176801cf842287a30665C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dllc682a2c8-f015-11e3-b003-206a8a1c06e5


CodeIntegrity Errors:
===================================
  Date: 2014-02-08 08:25:44.964
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 08:25:44.792
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 01:40:37.359
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 01:40:37.094
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:58:46.384
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:58:46.212
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:49:05.878
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:49:05.628
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:19:16.318
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:19:16.147
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 54%
Total physical RAM: 3956.43 MB
Available physical RAM: 1797.52 MB
Total Pagefile: 7911.05 MB
Available Pagefile: 5210.78 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:685.35 GB) (Free:430.76 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: EDA0EDA0)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=685 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-06-10 08:48:30
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD75 rev.01.0 698.64GB
Running: Gmer-19357.exe; Driver: C:\Users\MARKUS~1\AppData\Local\Temp\afkyypog.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                                                                                                               fffff800031ef000 45 bytes [00, 00, 00, 00, 00, 00, 00, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575                                                                                                                                                               fffff800031ef02f 16 bytes [00, 00, 00, 00, 00, 00, 00, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe[2472] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                    0000000075e61465 2 bytes [E6, 75]
.text     C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe[2472] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                   0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
.text     C:\Program Files (x86)\Secunia\PSI\PSIA.exe[2532] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                        0000000075e61465 2 bytes [E6, 75]
.text     C:\Program Files (x86)\Secunia\PSI\PSIA.exe[2532] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                       0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
.text     C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe[2208] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                     0000000075e61465 2 bytes [E6, 75]
.text     C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe[2208] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                    0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\ksuser.dll!KsCreatePin + 35                                                                                                                                                    000000006b6011a8 2 bytes [60, 6B]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\ksuser.dll!KsCreateAllocator + 21                                                                                                                                              000000006b6013a8 2 bytes [60, 6B]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\ksuser.dll!KsCreateClock + 21                                                                                                                                                  000000006b601422 2 bytes [60, 6B]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\ksuser.dll!KsCreateTopologyNode + 19                                                                                                                                           000000006b601498 2 bytes [60, 6B]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 195                                                                                                                                000000006a781b41 2 bytes [78, 6A]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 362                                                                                                                                000000006a781be8 2 bytes [78, 6A]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 418                                                                                                                                000000006a781c20 2 bytes [78, 6A]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 596                                                                                                                                000000006a781cd2 2 bytes [78, 6A]
.text     C:\Windows\snuvcdsm.exe[4080] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 628                                                                                                                                000000006a781cf2 2 bytes [78, 6A]
.text     C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe[3936] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69                                                                                                         0000000075e61465 2 bytes [E6, 75]
.text     C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe[3936] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155                                                                                                        0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
.text     C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[4564] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                    0000000075e61465 2 bytes [E6, 75]
.text     C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[4564] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                   0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
.text     C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe[4584] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 69                                                                                                    0000000075e61465 2 bytes [E6, 75]
.text     C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe[4584] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 155                                                                                                   0000000075e614bb 2 bytes [E6, 75]
.text     ...                                                                                                                                                                                                                              * 2
---- Processes - GMER 2.1 ----

Library   C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe [4584](2014-05-28 05:10:30)                                          0000000004030000
Library   c:\users\markus~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkl7yak.dll (*** suspicious ***) @ C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe [4584](2014-06-10 05:47:46)  0000000003eb0000
Library   C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe [4584](2014-05-28 05:10:30)                                                000000005e0b0000
Library   C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe [4584] (ICU Data DLL/The ICU Project)(2014-05-28 05:10:30)                  000000005ca60000

---- EOF - GMER 2.1 ----
         

Danke für die Antwort und liebe Grüsse aus Zürich
Markus

Hallo und willkommen an Board, MarkusZürich

Mein Name ist Machiavelli und werde bei Deinem Malware Problemen behilflich sein. Falls Du Dich im abgesicherten Modus befindest, würde ich Dir raten, alle Anweisungen von mir auszudrucken, um besseren Überblick auf die Gesamtsituation zu bekommen. Ich bin hier im Malwareteam und daher ist es mir möglich, Dir zu helfen.

Damit eine Bereinigung ermöglicht werden kann, musst Du ein paar Regeln/Tipps beachten:

• Malware zu entfernen ist normalerweise recht schwierig
  Heutige Malware kann sich sehr gut verstecken, so kann es sein, dass es bestimmte Tools nicht sehen. Eine Neuinstallation ist daher oft das klügere.
• Bitte folge meinen Anweisung bis in das kleinste Detail
  Falls Du was falsches machst, wie z.B. irgendwas fixt, was nicht durch mich genehmigt wurde, kann der PC dadurch beschädigt werden. Daher folge meinen Anweisungen ganz genau
• Bleibe mit mir in Kontakt, bis Deine Probleme vollständig gelöst sind
  Themen, in welchen innerhalb von 4 Tagen keine Antwort gepostet wird, werden geschlossen.
• Bitte lasse keine anderen Tools laufen, während ich bereinige
  Wenn Du Tools wie z.B. Malwarebytes etc. ohne meines Wissens laufen lässt, kann es unter Umständen Ergebnisse verfälschen.
• Ließ meine Posts vollständig durch
  Falls nicht, kann das zu schwerwiegenden Problemen (z.B. PC bootet nicht mehr) führen oder der Prozess der Malwareentfernung wird länger

Schritt 1
Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 3
Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Bitte poste mir die Inhalte der Logs von Adwarecleaner, MBAM, JRT und FRST hier in den Thread.

Hallo Machiavelli,
schön dich kennen zu lernen!

Ich danke dir für deine Unterstützung.

Hier die erforderlichen Logdateien:

******AdwCleaner Logfile:

	
	
# AdwCleaner v3.212 - Bericht erstellt am 10/06/2014 um 10:23:56
# Aktualisiert 05/06/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Markus ****** - MARKUS******PC
# Gestartet von : C:\Users\Markus ******\Desktop\adwcleaner_3.212.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Alawar
Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Users\Küde\AppData\LocalLow\magentictb
Ordner Gelöscht : C:\Users\Markus ******\AppData\Local\genienext
Ordner Gelöscht : C:\Users\Markus ******\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Markus ******\AppData\LocalLow\DataMngr
Ordner Gelöscht : C:\Users\Markus ******\AppData\Roaming\magentictb
Ordner Gelöscht : C:\Users\Markus ******\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\Markus ******\AppData\Roaming\Alawar

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-youtube-download[1]_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-youtube-download[1]_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_switch-audio-file-converter_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_switch-audio-file-converter_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0E44BB13-2523-468B-BF51-58D5F52A84F6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CD10120B-C165-4F8D-8C74-639629E238FF}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKLM\Software\ImInstaller
Schlüssel Gelöscht : HKLM\Software\Uniblue

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Google Chrome v35.0.1916.114

[ Datei : C:\Users\Küde\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://websearch.soft-quick.info/?l=1&q={searchTerms}
Gelöscht [Extension] : fjpdnoojnohifgekbkmnfbiobhcbedka
Gelöscht [Extension] : ndibdjnfmopecpmkdieinmbadjfpblof

*************************

AdwCleaner[R0].txt - [6060 octets] - [10/06/2014 10:16:08]
AdwCleaner[S0].txt - [5686 octets] - [10/06/2014 10:23:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5746 octets] ##########
         
 
--- --- ---


[CODE~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Markus ****** on 10.06.2014 at 10:30:17.42
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{F757135D-0CDC-4514-AC7F-C7E7284BCAF7}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\fighters"
Successfully deleted: [Folder] "C:\Users\Markus ******\AppData\Roaming\fighters"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10.06.2014 at 10:35:57.38
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
]Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-06-2014
Ran by Markus ****** at 2014-06-10 10:42:14
Running from C:\Users\Markus ******\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

ABBYY Business Card Reader 2.0 (HKLM-x32\...\{BC200000-0001-0000-0000-074957833700}) (Version: 2.0.55 - ABBYY)
ABBYY FineReader 11 (HKLM-x32\...\{F11000FE-0010-0000-0000-074957833700}) (Version: 11.11.194 - ABBYY Production LLC)
ABBYY PDF Transformer+ (HKLM\...\{FA400000-0001-6400-0000-074957833700}) (Version: 4.1.159 - ABBYY Production LLC)
Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.68 - NewTech Infosystems)
Acer Crystal Eye webcam Ver:1.1.192.810 (HKLM-x32\...\{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}) (Version: 1.1.192.810 - Chicony Electronics Co.,Ltd.)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3005 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0423.2010 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated)
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{DD89CE29-BC88-40C6-A845-E2548682C5D6}) (Version: 1.9.17.06019 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.9.17.06019 - Alcor Micro Corp.) Hidden
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros)
ATI Catalyst Install Manager (HKLM\...\{75FDB05A-C1C2-CD17-35CE-3C1A454CC79F}) (Version: 3.0.778.0 - ATI Technologies, Inc.)
Avery Wizard 4.0 (HKLM-x32\...\{F5D84887-8A6F-4993-8560-B3AA44CB620D}) (Version: 4.0.201 - Avery)
Avira (HKLM-x32\...\{70a79d1f-686d-4d5c-962b-07aa1294eae0}) (Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG) Hidden
Avira Internet Security Suite (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Backup Manager Basic (x32 Version: 2.0.0.68 - NewTech Infosystems) Hidden
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 15.0.7.1 - Broadcom Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0825.2205.37769 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help English (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help French (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help German (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
ccc-utility64 (Version: 2010.0825.2205.37769 - ATI) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3814.50 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.3814.50 - CyberLink Corp.) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version:  - Microsoft)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.3 - Dropbox, Inc.)
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version:  - DVD Shrink)
DVDStyler v2.7.2 (HKLM-x32\...\DVDStyler_is1) (Version:  - )
Elevated Installer (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
FileAlyzer 2 (HKLM-x32\...\{29D3773E-54F4-23C2-D523-236A4453B845}_is1) (Version: 2.0.0.10 - Safer Networking Limited)
Free Disc Burner version 3.0.7.1206 (HKLM-x32\...\Free Disc Burner_is1) (Version:  - DVDVideoSoft Ltd.)
Free MP4 Video Converter version 5.0.20.1031 (HKLM-x32\...\Free MP4 Video Converter_is1) (Version: 5.0.20.1031 - DVDVideoSoft Ltd.)
Free Studio version 5.9.0.1212 (HKLM-x32\...\Free Studio_is1) (Version: 5.9.0.1212 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.1.40.1031 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.1.40.1031 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.10.11.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Ltd.)
Garmin Express (HKLM-x32\...\{9471d6bd-67a9-40f6-a420-2ae4f08ef003}) (Version: 2.3.14.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin WebUpdater (HKLM-x32\...\{AE1EC58E-B2AC-4959-A4C2-C38202A25239}) (Version: 2.5.6 - Garmin Ltd or its subsidiaries)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated)
IncrediBackup (x32 Version: 1.0.0.1039 - IncrediMail) Hidden
IncrediMail (x32 Version: 6.3.9.5274 - IncrediMail) Hidden
IncrediMail 2.0 (HKLM-x32\...\IncrediMail) (Version: 6.3.9.5274 - IncrediMail Ltd.)
IncrediMail Protection Center (HKLM-x32\...\Protection Center) (Version: 6001076 - IncrediMail Ltd.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1002 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.6 - Intel)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Kochtopf Easy (HKLM-x32\...\{FF8FB99F-1C60-4220-976B-4940D39F7941}) (Version: 14.11.2006 - Carosoft, 8733 Eschenbach)
LastPass (Nur deinstallieren) (HKLM-x32\...\LastPass) (Version:  - LastPass)
Lexmark  (HKLM-x32\...\{D2C5E510-BE6D-42CC-9F61-E4F939078474}) (Version: 1.0.0.0 - )
Lexmark Pro700 Series (HKLM\...\Lexmark Pro700 Series) (Version:  - Lexmark International, Inc.)
Lexmark Tools for Office (HKLM-x32\...\{10812DE7-2E57-4740-B226-6B3BE34AF9D7}) (Version: 1.41.0.0 - )
LibreOffice 4.2.4.2 (HKLM-x32\...\{6B4977CB-5B9F-4B24-8310-3BA527A8AF22}) (Version: 4.2.4.2 - The Document Foundation)
LoiLoScope 2 (HKLM-x32\...\{CAB75FFC-2377-4B95-A8FA-C9234B812A92}_is1) (Version: 2.5.3.2 - LoiLo inc)
LoiLoScope Herunterladen (HKLM-x32\...\{C2A254F4-AC74-482F-8F09-DB2843AC2AAE}_is1) (Version: 2.0 - LoiLo inc)
LUMIX Map Tool (HKLM-x32\...\InstallShield_{7DCF5B1D-79C2-4F24-9746-511436EBC6B4}) (Version: 1.1.0 - Panasonic Corporation)
LUMIX Map Tool (x32 Version: 1.1.0 - Panasonic Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.145.0 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (Version: 2.3.145.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSVC80_x64 (Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86 (x32 Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.9.3 - pdfforge)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - Ihr Firmenname) Hidden
PHOTOfunSTUDIO 9.1 PE (HKLM-x32\...\{C13FE7DE-D34D-48CC-9FA3-8DB9A3621B98}) (Version: 9.01.709 - Panasonic Corporation)
PowerDirector (HKLM-x32\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version:  - )
PowerProducer (HKLM-x32\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version:  - )
Private Tax 2012 2.0 (HKLM-x32\...\6753-7911-9438-6061) (Version: 2.0 - Information Factory AG)
Private Tax 2013 1.4.0 (HKLM-x32\...\0579-4231-5684-8562) (Version: 1.4.0 - Information Factory AG)
Protection Center (x32 Version: 6.0.0.1076 - IncrediMail) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7058 - Realtek Semiconductor Corp.)
Secunia PSI (3.0.0.6005) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.6005 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.6.0 - Synaptics Incorporated)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.296 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4410.1 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.2160.11 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
WavePurity (HKLM-x32\...\WavePurity) (Version:  - )
WD My Cloud (HKLM\...\{8F19C800-80A5-4636-B560-39A58112D45B}) (Version: 1.0.4.37 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{9A265E7E-5602-44DB-8B4D-A25C58D02489}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{0CADB637-714E-4F47-83C7-F11FEFC930D6}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM-x32\...\{9af08980-8d36-4304-a8d0-53dc0c7d93a5}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WebCam (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.54.007 - Sonix)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3004 - Acer Incorporated)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows-Treiberpaket - ATI Technologies Inc. (amdkmdap) Display  (06/13/2011 8.840.7.4000) (HKLM\...\1DE0DA68FB9DE6759FF33A74F6DF5523389FA513) (Version: 06/13/2011 8.840.7.4000 - ATI Technologies Inc.)
Windows-Treiberpaket - Broadcom (k57nd60a) Net  (10/15/2012 15.6.0.2) (HKLM\...\04AD368CB9CF50B30DB1552B0C6653E2EFFC7966) (Version: 10/15/2012 15.6.0.2 - Broadcom)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\03558EE026C7D1019B4A138DD4B58B8AE39211C4) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\BF1AD0105EBDCA6E730BE93DE583343339830A7A) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\CAC45647A959F237CE25C052FDB9A4A914C34830) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel USB  (07/25/2013 9.1.9.1005) (HKLM\...\A86AAC18EC59E9369A037083AC25A97B89713EC8) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Realtek Semiconductor Corp. HD Audio Driver (10/07/2013 6.0.1.7058) (HKLM\...\DE7597D60A9A5CE6DE9AAA75BF05E6A6722AE298) (Version: 10/07/2013 6.0.1.7058 - Realtek Semiconductor Corp.)
WOT für Internet Explorer (HKLM\...\{DCAEC601-735C-41AE-B84F-D792F09FB7D1}) (Version: 12.8.2.0 - WOT Services Oy)

==================== Restore Points  =========================

25-05-2014 11:31:03 Geplanter Prüfpunkt
01-06-2014 16:01:36 Geplanter Prüfpunkt
09-06-2014 08:59:30 Removed Bonjour
09-06-2014 09:00:25 Removed Bonjour-Druckdienste

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-04-15 00:25 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {07FE6F92-D444-42C0-889F-68C95941C05F} - System32\Tasks\launchspotflux => C:\Program Files (x86)\spotflux\.\spotflux.exe
Task: {0A1F5F73-36C4-4F05-93CB-2712CE5C6598} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: {30652F9D-91E4-4C1F-9F33-BF0A4710BD9F} - System32\Tasks\{206A70D1-01F2-4196-9221-000636522535} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {3F021A4B-D233-483E-BB52-D8F629426F17} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-09-04] (Microsoft)
Task: {3F541924-9B98-4CA8-B2D7-C486F018B83B} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {67F5CC37-E497-4647-9CF9-5E76CE6AEF97} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
Task: {6C7F0A50-412C-4B03-951E-ABBE5DC6F204} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {74674AC7-0F42-4191-B092-B0E4D39D9280} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {7F55709A-034E-4914-A27F-40CE690C591B} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3706524009-4250397638-3171320869-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {81D7756B-58DC-4B7F-9103-984D1AA7B320} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {850AFB24-18F3-45DD-A2EA-AE87484F849E} - System32\Tasks\FGRun => C:\Users\Markus
Task: {9637B875-BEC4-452E-B587-5F3D14DE8820} - System32\Tasks\Google Updater and Installer => C:\Users\Markus ******\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {983283BC-F494-4178-91F4-39E933087691} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3706524009-4250397638-3171320869-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {9C5F10B0-804B-4A4D-8857-64BD5409C01E} - System32\Tasks\Western Digital\SmartWare\____Volume_edd7a140_f1e6_11df_b892_806e6f6e6963__dropbox_c0de6ce1_5657_41e8_800c_858feb0a3768_dropbox_ => C:\Program Files (x86)\Western Digital\WD SmartWare\BackupTask.exe [2014-05-09] (Western Digital Technologies, Inc.)
Task: {9E0E5119-43FD-407D-BD05-1A59E915EEE6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: {A73C02F3-4334-41C1-8E95-D72E83DBC766} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {AC3F5984-5C73-4BDC-8EF7-075138133231} - System32\Tasks\{4E9B0226-A400-466C-A753-64E3F9F604E9} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {B82F9D1F-6BC9-435E-A1C8-41AEF458729A} - System32\Tasks\{969DD5E3-8FD4-4B20-BE2B-29A1165A141E} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {C76FB41A-69E8-4107-9CAC-83450B2DD022} - System32\Tasks\{E75F870D-0780-4A2A-AFDC-53CAC00B717E} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {CF84C6B6-AC15-463F-95C4-D94C94325191} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {EC68C63E-3DC5-4E8E-899B-4BC13A49C2F2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {F48A4817-33A4-4EE2-BC73-662FE8B7F715} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {FCF6100D-2F42-4507-9A1B-22DA1193953D} - System32\Tasks\{E2596B35-B99D-40DF-80DD-684E1D3224FA} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {FEBC2A27-5244-4EFC-84A4-C4F933910FBA} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2014-04-15] (TuneUp Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-03-18 22:10 - 2009-11-04 14:18 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxeedrpp.dll
2010-11-17 03:18 - 2010-11-17 03:18 - 00206208 _____ () C:\Windows\PLFSetI.exe
2013-12-16 08:12 - 2010-01-13 11:55 - 00030080 _____ () C:\Windows\snuvcdsm.exe
2014-04-15 15:59 - 2014-04-15 15:59 - 00675640 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2014-06-07 07:08 - 2014-05-05 10:37 - 00049744 _____ () C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00138320 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-06-10 10:27 - 2014-06-10 10:27 - 00043008 _____ () C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1bekmo.dll
2014-05-28 07:10 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\libcef.dll
2010-06-29 00:20 - 2010-06-29 00:20 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-06-29 00:12 - 2010-06-29 00:12 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:288D55E3

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-02-08 08:25:44.964
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 08:25:44.792
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 01:40:37.359
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 01:40:37.094
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:58:46.384
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:58:46.212
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:49:05.878
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:49:05.628
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:19:16.318
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:19:16.147
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 40%
Total physical RAM: 3956.43 MB
Available physical RAM: 2343.54 MB
Total Pagefile: 7911.05 MB
Available Pagefile: 6050.01 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:685.35 GB) (Free:430.6 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: EDA0EDA0)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=685 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

[CODE
FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-06-2014
Ran by Markus ****** (administrator) on MARKUS******PC on 10-06-2014 10:40:21
Running from C:\Users\Markus ******\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(ABBYY InfoPoisk LLC) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
( ) C:\Windows\System32\lxeecoms.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\PLFSetI.exe
(sonix) C:\Windows\PLFSetL.exe
() C:\Windows\snuvcdsm.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(sonix) C:\Windows\PLFSetL.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Dropbox, Inc.) C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13656792 2013-10-04] (Realtek Semiconductor)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2010-11-17] ()
HKLM\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [99712 2010-01-13] (sonix)
HKLM\...\Run: [SNUVCDSM] => C:\Windows\snuvcdsm.exe [30080 2010-01-13] ()
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-11] (Dritek System Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-15] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [99712 2010-01-13] (sonix)
HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY Production LLC)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-05-09] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\businesscardreader.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\express.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\finecmd.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\images2pdf.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\pdf architect.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PHOTOfunSTUDIO 9.1 PE.lnk
ShortcutTarget: PHOTOfunSTUDIO 9.1 PE.lnk -> C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe (Panasonic Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://meteo.srf.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.meteocentrale.ch/de/europa/schweiz/wetter-zuerich/details/N-3518042/
hxxp://www.nzz.ch/wetter/radarbild/
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {3A08CD5B-FF07-4DCB-809E-8A916279267C} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} -  No File
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {8AE3BCD6-ADBC-42E5-91BB-BF81E65B5911} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://oas.support.microsoft.com/ActiveX/MSDcode.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (NPLastPass) - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File
CHR Extension: (Google Docs) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-16]
CHR Extension: (Google Drive) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-16]
CHR Extension: (WOT) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-05-22]
CHR Extension: (YouTube) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-08-27]
CHR Extension: (Google-Suche) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-08-27]
CHR Extension: (Avira Browser Safety) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-05-01]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-06-09]
CHR Extension: (Google Wallet) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-16]
CHR Extension: (Google Mail) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-08-27]

==================== Services (Whitelisted) =================

S4 ABBYY.Licensing.BCR.Windows.2.0; C:\Program Files (x86)\NetworkLicenseServer.exe [821808 2012-04-28] (ABBYY)
R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY InfoPoisk LLC)
R2 ABBYY.Licensing.PDFTransformer.Classic.4.0; C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe [959184 2014-04-03] (ABBYY Production LLC)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [811088 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [124496 2014-05-05] (Avira Operations GmbH & Co. KG)
S3 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S4 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxeeserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [1052328 2010-01-07] ( )
R2 lxee_device; C:\Windows\SysWOW64\lxeecoms.exe [598696 2010-01-07] ( )
S4 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
S4 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S4 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [272024 2006-12-19] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1223704 2013-02-07] (Secunia)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-05-09] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [295800 2014-05-09] (Western Digital Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-04-29] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-04-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-19] (Avira Operations GmbH & Co. KG)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-02-07] (Secunia)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SjtWinIo; C:\Windows\System32\DRIVERS\SjtWinIo.sys [9216 2011-05-08] (SpeedJet Technology INC.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806592 2010-01-13] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 AVFSFilter; system32\DRIVERS\avfsfilter.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-10 10:40 - 2014-06-10 10:41 - 00021232 _____ () C:\Users\Markus ******\Desktop\FRST.txt
2014-06-10 10:28 - 2014-06-10 10:39 - 00000000 ____D () C:\Users\Markus ******\Desktop\Log dateien Macchiavelli 10.6
2014-06-10 10:16 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-10 10:15 - 2014-06-10 10:24 - 00000000 ____D () C:\AdwCleaner
2014-06-10 10:14 - 2014-06-10 10:14 - 01016261 _____ (Thisisu) C:\Users\Markus ******\Desktop\JRT.exe
2014-06-10 10:09 - 2014-06-10 10:09 - 01333465 _____ () C:\Users\Markus ******\Desktop\adwcleaner_3.212.exe
2014-06-10 09:28 - 2014-06-10 09:28 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (4).exe
2014-06-10 09:27 - 2014-06-10 09:27 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (3).exe
2014-06-10 09:15 - 2014-06-10 09:16 - 00000000 ____D () C:\Users\Markus ******\Desktop\Scans vom 10.6
2014-06-10 08:33 - 2014-06-10 08:33 - 00380416 _____ () C:\Users\Markus ******\Desktop\Gmer-19357.exe
2014-06-10 08:28 - 2014-06-10 10:40 - 00000000 ____D () C:\FRST
2014-06-10 08:26 - 2014-06-10 08:26 - 02080768 _____ (Farbar) C:\Users\Markus ******\Desktop\FRST64.exe
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus ******\Desktop\Defogger (1).exe
2014-06-10 08:18 - 2014-06-10 08:19 - 00000490 _____ () C:\Users\Markus ******\Downloads\defogger_disable.log
2014-06-10 08:18 - 2014-06-10 08:18 - 00000000 _____ () C:\Users\Markus ******\defogger_reenable
2014-06-10 08:17 - 2014-06-10 08:17 - 00050477 _____ () C:\Users\Markus ******\Downloads\Defogger.exe
2014-06-09 13:17 - 2014-06-10 08:29 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-09 13:17 - 2014-06-09 13:17 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-09 13:17 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-09 13:16 - 2014-06-09 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (5).exe
2014-06-09 12:04 - 2014-06-09 12:05 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (4).exe
2014-06-09 12:00 - 2014-06-09 12:00 - 00128904 _____ () C:\Users\Markus ******\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-09 11:53 - 2014-06-10 10:25 - 00007550 _____ () C:\Windows\PFRO.log
2014-06-09 11:53 - 2014-06-10 10:25 - 00000336 _____ () C:\Windows\setupact.log
2014-06-09 11:53 - 2014-06-09 11:53 - 00498384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-09 11:48 - 2014-06-09 11:48 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (3).exe
2014-06-09 11:31 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-09 11:30 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-09 11:17 - 2014-06-09 11:18 - 00000000 ____D () C:\Program Files (x86)\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00001198 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:15 - 2014-06-09 11:15 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64 (1).exe
2014-06-09 10:40 - 2014-06-09 10:41 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\PDFCreator
2014-06-09 09:52 - 2014-06-10 10:28 - 00000000 ___RD () C:\Users\Markus ******\Dropbox
2014-06-09 09:52 - 2014-06-09 09:52 - 00001059 _____ () C:\Users\Markus ******\Desktop\Dropbox.lnk
2014-06-09 09:51 - 2014-06-09 09:51 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (2).exe
2014-06-09 09:16 - 2014-06-09 09:17 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 08:54 - 2014-06-09 11:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Program Files\PDFCreator
2014-06-09 08:54 - 2014-04-17 19:36 - 00110776 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-06-09 08:48 - 2014-06-09 08:49 - 25055960 _____ (pdfforge ) C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe
2014-06-08 13:11 - 2014-06-09 10:03 - 00000000 ____D () C:\Users\Markus ******\Desktop\Mueti Teneriffa 2014
2014-06-01 09:40 - 2014-06-01 09:40 - 00000000 ____H () C:\Users\Markus ******\Documents\Default.rdp
2014-05-28 07:10 - 2014-06-10 10:27 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\DropboxMaster
2014-05-28 07:10 - 2014-06-09 09:52 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-28 07:06 - 2014-06-09 09:52 - 00000692 _____ () C:\Windows\wininit.ini
2014-05-28 07:06 - 2014-05-28 07:06 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (1).exe
2014-05-28 07:05 - 2014-06-10 10:27 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Dropbox
2014-05-28 07:05 - 2014-05-28 07:05 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller.exe
2014-05-27 08:42 - 2014-05-27 08:42 - 00000000 ____D () C:\Analytics
2014-05-27 08:41 - 2014-05-27 08:41 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-05-26 09:58 - 2014-05-26 09:59 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64.exe
2014-05-24 00:03 - 2014-05-24 00:03 - 00000731 _____ () C:\Users\Markus ******\Downloads\vcard-MarcelR-Saluz.vcf
2014-05-23 09:17 - 2014-06-09 10:43 - 00000000 ____D () C:\Users\Markus ******\Desktop\Ferien Portugal
2014-05-22 23:16 - 2014-05-22 23:16 - 00000000 ____D () C:\Windows\TEMPDIR
2014-05-22 10:29 - 2014-05-22 10:29 - 00000000 ____D () C:\Users\Küde\AppData\Roaming\com.wd.WDMyCloud
2014-05-21 17:55 - 2014-06-10 10:27 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-05-20 08:43 - 2014-05-20 08:43 - 00001218 _____ () C:\Users\Markus ******\Desktop\WD Quick View.lnk
2014-05-20 08:41 - 2014-05-20 08:41 - 04398333 _____ () C:\Users\Markus ******\Downloads\WD_Quick_View_Setup_for_Windows.zip
2014-05-20 08:40 - 2014-05-20 08:40 - 00001172 _____ () C:\Users\Markus ******\Desktop\WD SmartWare.lnk
2014-05-20 08:17 - 2014-05-20 08:18 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader (1).zip
2014-05-20 08:08 - 2014-05-20 08:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 08:07 - 2014-05-20 08:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 08:07 - 2014-05-20 08:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55.exe
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55 (1).exe
2014-05-18 22:28 - 2014-05-18 22:28 - 00013312 ___SH () C:\Users\Markus ******\Downloads\Thumbs.db
2014-05-18 22:17 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western_Digital_Technolog
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-05-18 22:14 - 2014-05-18 22:14 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader.zip
2014-05-16 23:05 - 2014-05-18 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-05-16 23:05 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-05-16 23:05 - 2014-05-16 23:06 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\com.wd.WDMyCloud
2014-05-16 23:05 - 2014-05-16 23:05 - 00001157 _____ () C:\Users\Public\Desktop\WD My Cloud.lnk
2014-05-16 23:04 - 2014-05-18 22:15 - 00000000 ____D () C:\ProgramData\Western Digital
2014-05-16 23:04 - 2014-05-16 23:04 - 00000204 _____ () C:\Users\Markus ******\Desktop\Lerncenter WD My Cloud.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000156 _____ () C:\Users\Markus ******\Desktop\WD My Cloud – Öffentliche Freigabe.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000152 _____ () C:\Users\Markus ******\Desktop\WD My Cloud-Dashboard.url
2014-05-16 23:00 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western Digital
2014-05-16 22:59 - 2014-05-16 23:00 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup (1).exe
2014-05-16 22:58 - 2014-05-16 22:59 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup.exe
2014-05-15 23:58 - 2014-05-15 23:58 - 09518328 _____ () C:\Users\Markus ******\Downloads\avira_secure_backup_int.exe
2014-05-15 00:25 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 00:25 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 00:25 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 00:25 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 00:25 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 00:25 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 23:58 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 23:58 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 23:58 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 23:58 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 23:58 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 23:58 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 23:58 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 23:58 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 23:58 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 23:58 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 23:58 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 23:58 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 23:58 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 23:58 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 23:58 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 23:58 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 23:58 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-14 07:35 - 2014-05-14 07:35 - 17352880 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-12 23:32 - 2014-05-12 23:32 - 02171144 _____ (IncrediMail ) C:\Users\Markus ******\Downloads\protectioncenter.exe

==================== One Month Modified Files and Folders =======

2014-06-10 10:41 - 2014-06-10 10:40 - 00021232 _____ () C:\Users\Markus ******\Desktop\FRST.txt
2014-06-10 10:41 - 2011-02-11 19:52 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Temp
2014-06-10 10:40 - 2014-06-10 08:28 - 00000000 ____D () C:\FRST
2014-06-10 10:39 - 2014-06-10 10:28 - 00000000 ____D () C:\Users\Markus ******\Desktop\Log dateien Macchiavelli 10.6
2014-06-10 10:35 - 2013-12-15 14:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-10 10:35 - 2009-07-14 06:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-10 10:35 - 2009-07-14 06:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-10 10:32 - 2010-11-17 03:10 - 01959097 _____ () C:\Windows\WindowsUpdate.log
2014-06-10 10:30 - 2013-04-19 09:37 - 00000000 ____D () C:\Windows\ERUNT
2014-06-10 10:28 - 2014-06-09 09:52 - 00000000 ___RD () C:\Users\Markus ******\Dropbox
2014-06-10 10:27 - 2014-05-28 07:10 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\DropboxMaster
2014-06-10 10:27 - 2014-05-28 07:05 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Dropbox
2014-06-10 10:27 - 2014-05-21 17:55 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-06-10 10:25 - 2014-06-09 11:53 - 00007550 _____ () C:\Windows\PFRO.log
2014-06-10 10:25 - 2014-06-09 11:53 - 00000336 _____ () C:\Windows\setupact.log
2014-06-10 10:25 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-10 10:24 - 2014-06-10 10:15 - 00000000 ____D () C:\AdwCleaner
2014-06-10 10:14 - 2014-06-10 10:14 - 01016261 _____ (Thisisu) C:\Users\Markus ******\Desktop\JRT.exe
2014-06-10 10:09 - 2014-06-10 10:09 - 01333465 _____ () C:\Users\Markus ******\Desktop\adwcleaner_3.212.exe
2014-06-10 09:28 - 2014-06-10 09:28 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (4).exe
2014-06-10 09:27 - 2014-06-10 09:27 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (3).exe
2014-06-10 09:16 - 2014-06-10 09:15 - 00000000 ____D () C:\Users\Markus ******\Desktop\Scans vom 10.6
2014-06-10 08:33 - 2014-06-10 08:33 - 00380416 _____ () C:\Users\Markus ******\Desktop\Gmer-19357.exe
2014-06-10 08:29 - 2014-06-09 13:17 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-10 08:26 - 2014-06-10 08:26 - 02080768 _____ (Farbar) C:\Users\Markus ******\Desktop\FRST64.exe
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus ******\Desktop\Defogger (1).exe
2014-06-10 08:19 - 2014-06-10 08:18 - 00000490 _____ () C:\Users\Markus ******\Downloads\defogger_disable.log
2014-06-10 08:18 - 2014-06-10 08:18 - 00000000 _____ () C:\Users\Markus ******\defogger_reenable
2014-06-10 08:18 - 2011-02-11 19:52 - 00000000 ____D () C:\Users\Markus ******
2014-06-10 08:17 - 2014-06-10 08:17 - 00050477 _____ () C:\Users\Markus ******\Downloads\Defogger.exe
2014-06-10 07:28 - 2013-04-19 09:35 - 00000000 ____D () C:\Users\Küde\AppData\Local\temp
2014-06-09 13:17 - 2014-06-09 13:17 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-09 13:16 - 2014-06-09 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (5).exe
2014-06-09 12:05 - 2014-06-09 12:04 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (4).exe
2014-06-09 12:00 - 2014-06-09 12:00 - 00128904 _____ () C:\Users\Markus ******\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00498384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-09 11:48 - 2014-06-09 11:48 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (3).exe
2014-06-09 11:31 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-09 11:31 - 2014-06-09 11:30 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-09 11:18 - 2014-06-09 11:17 - 00000000 ____D () C:\Program Files (x86)\LastPass
2014-06-09 11:18 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:17 - 2014-06-09 11:17 - 00001198 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2011-02-24 01:39 - 00000000 ___RD () C:\Users\Internetdummy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:17 - 2011-02-11 23:58 - 00000000 ___RD () C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:15 - 2014-06-09 11:15 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64 (1).exe
2014-06-09 11:14 - 2014-06-09 08:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-09 10:44 - 2011-03-12 11:11 - 00003696 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-06-09 10:43 - 2014-05-23 09:17 - 00000000 ____D () C:\Users\Markus ******\Desktop\Ferien Portugal
2014-06-09 10:41 - 2014-06-09 10:40 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\PDFCreator
2014-06-09 10:03 - 2014-06-08 13:11 - 00000000 ____D () C:\Users\Markus ******\Desktop\Mueti Teneriffa 2014
2014-06-09 09:52 - 2014-06-09 09:52 - 00001059 _____ () C:\Users\Markus ******\Desktop\Dropbox.lnk
2014-06-09 09:52 - 2014-05-28 07:10 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-09 09:52 - 2014-05-28 07:06 - 00000692 _____ () C:\Windows\wininit.ini
2014-06-09 09:52 - 2011-02-11 20:00 - 00000000 ___RD () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 09:51 - 2014-06-09 09:51 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (2).exe
2014-06-09 09:17 - 2014-06-09 09:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Program Files\PDFCreator
2014-06-09 08:49 - 2014-06-09 08:48 - 25055960 _____ (pdfforge ) C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe
2014-06-09 08:47 - 2012-01-16 12:03 - 00000000 ____D () C:\Users\Markus ******\Desktop\Infos Ferien Teneriffa
2014-06-07 09:52 - 2010-11-17 03:50 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-06-07 09:52 - 2010-11-17 03:50 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-06-07 09:52 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-07 07:15 - 2011-03-18 22:39 - 00000000 ____D () C:\ProgramData\Lx_cats
2014-06-05 14:02 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-01 09:40 - 2014-06-01 09:40 - 00000000 ____H () C:\Users\Markus ******\Documents\Default.rdp
2014-05-30 17:42 - 2013-02-18 23:42 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-05-30 12:18 - 2014-01-28 00:53 - 00013954 _____ () C:\Users\Markus ******\Desktop\Telefonliste MA AURORA.xlsx
2014-05-30 08:51 - 2013-09-11 17:53 - 00000000 ____D () C:\Users\Markus ******\Desktop\Unterlagen Liquidation für Mario
2014-05-29 09:13 - 2011-02-11 20:28 - 00000000 ____D () C:\Users\Markus ******\Documents\Kundennummern und Zugangscodes
2014-05-28 07:06 - 2014-05-28 07:06 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (1).exe
2014-05-28 07:05 - 2014-05-28 07:05 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller.exe
2014-05-27 08:42 - 2014-05-27 08:42 - 00000000 ____D () C:\Analytics
2014-05-27 08:41 - 2014-05-27 08:41 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-05-26 09:59 - 2014-05-26 09:58 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64.exe
2014-05-24 00:03 - 2014-05-24 00:03 - 00000731 _____ () C:\Users\Markus ******\Downloads\vcard-MarcelR-Saluz.vcf
2014-05-22 23:16 - 2014-05-22 23:16 - 00000000 ____D () C:\Windows\TEMPDIR
2014-05-22 10:29 - 2014-05-22 10:29 - 00000000 ____D () C:\Users\Küde\AppData\Roaming\com.wd.WDMyCloud
2014-05-20 08:43 - 2014-05-20 08:43 - 00001218 _____ () C:\Users\Markus ******\Desktop\WD Quick View.lnk
2014-05-20 08:41 - 2014-05-20 08:41 - 04398333 _____ () C:\Users\Markus ******\Downloads\WD_Quick_View_Setup_for_Windows.zip
2014-05-20 08:40 - 2014-05-20 08:40 - 00001172 _____ () C:\Users\Markus ******\Desktop\WD SmartWare.lnk
2014-05-20 08:18 - 2014-05-20 08:17 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader (1).zip
2014-05-20 08:08 - 2014-05-20 08:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 08:07 - 2014-05-20 08:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 08:07 - 2014-05-20 08:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 08:07 - 2013-02-18 19:24 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55.exe
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55 (1).exe
2014-05-18 22:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-18 22:28 - 2014-05-18 22:28 - 00013312 ___SH () C:\Users\Markus ******\Downloads\Thumbs.db
2014-05-18 22:21 - 2013-04-17 07:48 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-18 22:17 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western_Digital_Technolog
2014-05-18 22:17 - 2014-05-16 23:00 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western Digital
2014-05-18 22:16 - 2014-05-16 23:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-05-18 22:15 - 2014-05-16 23:05 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-05-18 22:15 - 2014-05-16 23:04 - 00000000 ____D () C:\ProgramData\Western Digital
2014-05-18 22:15 - 2013-03-15 00:20 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-18 22:14 - 2014-05-18 22:14 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader.zip
2014-05-16 23:06 - 2014-05-16 23:05 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\com.wd.WDMyCloud
2014-05-16 23:05 - 2014-05-16 23:05 - 00001157 _____ () C:\Users\Public\Desktop\WD My Cloud.lnk
2014-05-16 23:04 - 2014-05-16 23:04 - 00000204 _____ () C:\Users\Markus ******\Desktop\Lerncenter WD My Cloud.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000156 _____ () C:\Users\Markus ******\Desktop\WD My Cloud – Öffentliche Freigabe.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000152 _____ () C:\Users\Markus ******\Desktop\WD My Cloud-Dashboard.url
2014-05-16 23:00 - 2014-05-16 22:59 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup (1).exe
2014-05-16 22:59 - 2014-05-16 22:58 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup.exe
2014-05-16 08:30 - 2011-02-16 00:39 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-16 00:17 - 2011-02-11 23:39 - 00000000 ___DC () C:\Users\Markus ******\AppData\Local\MigWiz
2014-05-15 23:58 - 2014-05-15 23:58 - 09518328 _____ () C:\Users\Markus ******\Downloads\avira_secure_backup_int.exe
2014-05-15 12:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 11:53 - 2011-02-11 23:58 - 00000000 ___RD () C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 09:05 - 2011-02-11 20:00 - 00000000 ___RD () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 08:59 - 2014-05-07 16:43 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 00:28 - 2011-02-11 22:34 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 00:24 - 2013-08-15 02:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 00:21 - 2011-02-12 11:56 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 08:24 - 2011-03-18 22:11 - 00559534 _____ () C:\ProgramData\lxeescan.log
2014-05-14 07:35 - 2014-05-14 07:35 - 17352880 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-14 07:35 - 2013-12-15 14:04 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 07:35 - 2013-12-15 14:04 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 07:35 - 2013-12-15 14:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-13 08:04 - 2011-02-13 10:45 - 00000000 ____D () C:\Users\Küde\AppData\Local\IM
2014-05-13 08:03 - 2011-02-11 23:59 - 00128904 _____ () C:\Users\Küde\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-13 00:07 - 2014-04-10 23:14 - 00001077 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-05-12 23:59 - 2011-02-11 22:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-12 23:55 - 2010-09-16 02:19 - 00000000 ____D () C:\Windows\ShellNew
2014-05-12 23:33 - 2013-01-28 12:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail
2014-05-12 23:33 - 2011-02-12 12:26 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\IM
2014-05-12 23:32 - 2014-05-12 23:32 - 02171144 _____ (IncrediMail ) C:\Users\Markus ******\Downloads\protectioncenter.exe
2014-05-12 13:04 - 2013-04-30 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-12 13:04 - 2012-12-17 09:11 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-05-12 07:26 - 2014-06-09 13:17 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-09 13:17 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-11 06:43 - 2011-02-11 20:29 - 00000000 ____D () C:\Users\Markus ******\Documents\Vereinsleben

Some content of TEMP:
====================
C:\Users\Internetdummy\AppData\Local\Temp\avgnt.exe
C:\Users\Küde\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe
C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1bekmo.dll
C:\Users\Markus ******\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-09 13:58

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Von Mbam gibt es keine Logdateien, da es sich immer noch nicht starten lässt.

Ich hoffe, alles richtig gemacht zu haben und schicke dir freundliche Grüsse aus Zürich

Markus

Ich sehe das Du sogenannte Registry Cleaner am System hast.
In deinem Fall TuneUp Utilities 2014.

Wir empfehlen auf keinen Fall jegliche Art von Registry Cleaner.

Der Grund ist ganz einfach:

Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich.
Wir lesen oft genug von Hilfesuchenden, dass deren System nach der Nutzung von Registry Cleanern nicht mehr booted.

• Wie soll der Cleaner zu 100% wissen ob der Eintrag benötigt wird oder nicht ?
• Es ist vollkommen egal ob ein paar verwaiste Registry Einträge am System sind oder nicht.
• Auch die dauernd angepriesene Beschleunigung des Systems ist nur bedingt wahr. Du würdest es nicht merken.

Ein sogenanntes False Positive von einem Cleaner kann auch dein System unbootbar machen.
Zerstörst Du die Registry, zerstörst Du Windows.

Ich empfehle Dir hiermit die oben genannte Software zu deinstallieren und in Zukunft auf solche Art von Software zu verzichten.

Schritt 1: FRST Fix

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} -  No File
Toolbar: HKCU - No Name - {8AE3BCD6-ADBC-42E5-91BB-BF81E65B5911} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
C:\Users\Internetdummy\AppData\Local\Temp\avgnt.exe
C:\Users\Küde\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe
C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1bekmo.dll
C:\Users\Markus ******\AppData\Local\Temp\Quarantine.exe
AlternateDataStreams: C:\ProgramData\Temp:288D55E3
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Schritt 2: FRST Scan



Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Schritt 3: ESET


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 4: Frage

Wie läuft Dein PC?

Guten Tag Machiavelli,

ich habe die Schritte alle ausgeführt und TuneUp 2014 deinstalliert. Hier sende ich dir die Logs/Scans:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-06-2014
Ran by Markus ****** at 2014-06-11 05:14:00 Run:1
Running from C:\Users\Markus ******\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} -  No File
Toolbar: HKCU - No Name - {8AE3BCD6-ADBC-42E5-91BB-BF81E65B5911} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
C:\Users\Internetdummy\AppData\Local\Temp\avgnt.exe
C:\Users\Küde\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe
C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1bekmo.dll
C:\Users\Markus ******\AppData\Local\Temp\Quarantine.exe
AlternateDataStreams: C:\ProgramData\Temp:288D55E3
*****************

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} => value deleted successfully.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}' => Key deleted successfully.
'HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'=> Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} => value deleted successfully.
'HKCR\Wow6432Node\CLSID\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}'=> Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{8AE3BCD6-ADBC-42E5-91BB-BF81E65B5911} => value deleted successfully.
'HKCR\CLSID\{8AE3BCD6-ADBC-42E5-91BB-BF81E65B5911}'=> Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{1017A80C-6F09-4548-A84D-EDD6AC9525F0} => value deleted successfully.
'HKCR\CLSID\{1017A80C-6F09-4548-A84D-EDD6AC9525F0}'=> Key not found.
'HKLM\Software\MozillaPlugins\FF Plugin: @microsoft.com/GENUINE - disabled No File'=> Key not found.
"FF Plugin: @microsoft.com/GENUINE - disabled No File" => not found.
'HKLM\Software\Wow6432Node\MozillaPlugins\FF Plugin-x32: @microsoft.com/GENUINE - disabled No File'=> Key not found.
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File not found.
C:\Users\Internetdummy\AppData\Local\Temp\avgnt.exe => Moved successfully.
C:\Users\Küde\AppData\Local\Temp\avgnt.exe => Moved successfully.
"C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1bekmo.dll" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\Quarantine.exe" => File/Directory not found.
C:\ProgramData\Temp => ":288D55E3" ADS removed successfully.

==== End of Fixlog ====
         

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=e07df424adefb54e8b93a1c010ed4d93
# engine=18552
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-06-11 05:33:19
# local_time=2014-06-11 07:33:19 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1807 16777213 100 100 9244 147016977 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 29021667 154094649 0 0
# scanned=261204
# found=11
# cleaned=0
# scan_time=6906
sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir"
sh=359D977D432E4F90FE627B2717144AE873990AC4 ft=1 fh=63c7b0ee3e7f229d vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\DVDVideoSoftTB.exe.vir"
sh=CAC2EE8DDF6A64B037A357017CA4C4221141BD70 ft=1 fh=6d3baa21187c5208 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Markus ******\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DaemonProcess.exe.vir"
sh=079F5212D0CC3059077736D55C4B04C6CBBFD2B8 ft=1 fh=573a726a370e6e65 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Markus ******\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\Mobogenie.exe.vir"
sh=95924D930E42925FCF9C31F268569AF088229675 ft=0 fh=0000000000000000 vn="Variante von Android/Mobserv.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Markus ******\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\MUServer.apk.vir"
sh=678148EE00B38B9AAD38C549719F66F1D4E16604 ft=1 fh=0b483d240f3d026b vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Markus ******\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\New_UpdateMoboGenie.exe.vir"
sh=40235157E8BA4C16F3189D522C630DB08F21E207 ft=1 fh=f7f0f065ad49f39c vn="Variante von Win32/SProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SoftQuick\sprotector.dll"
sh=A1280B1F085B8284DC157EC359BD1ADA091CFE7E ft=1 fh=d8aa3384d1249a40 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Internetdummy\AppData\LocalLow\DVDVideoSoftTB_DE\ldrtbDVDV.dll"
sh=92E84D2216A7763D580E42FA2493CCF67D0D0560 ft=1 fh=e8efc42494afd9f6 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Internetdummy\AppData\LocalLow\DVDVideoSoftTB_DE\tbDVDV.dll"
sh=ABF759CA3BFB16DE62197DD7C417AC5039A43AE0 ft=1 fh=1801af74030ebca1 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Internetdummy\AppData\LocalLow\DVDVideoSoftTB_DE\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll"
sh=47DA0A4A23B5F6FA4C8DD6BD9B6055691E4339EB ft=1 fh=2ec24482c96e1f8f vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe"
         

Das Mbam Programm lässt sich leider immer noch nicht starten, liegt es vielleicht an den 11 Bedrohungen, die der Eset online Scanner gefunden hat?

Liebe Grüsse und einen schönen Tag
Markus

Was ist mit Schritt 2?

Hallo Machiavelli,

bitte entschuldige; schritt 2 habe ich auch ausgeführt, aber die Log resp. Fix-Dateien nicht gepostet. Hier, zu deiner Info diese Dateien:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-06-2014
Ran by Markus ****** at 2014-06-11 05:14:00 Run:1
Running from C:\Users\Markus ******\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} -  No File
Toolbar: HKCU - No Name - {8AE3BCD6-ADBC-42E5-91BB-BF81E65B5911} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
C:\Users\Internetdummy\AppData\Local\Temp\avgnt.exe
C:\Users\Küde\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe
C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1bekmo.dll
C:\Users\Markus ******\AppData\Local\Temp\Quarantine.exe
AlternateDataStreams: C:\ProgramData\Temp:288D55E3
*****************

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} => value deleted successfully.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}' => Key deleted successfully.
'HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'=> Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} => value deleted successfully.
'HKCR\Wow6432Node\CLSID\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}'=> Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{8AE3BCD6-ADBC-42E5-91BB-BF81E65B5911} => value deleted successfully.
'HKCR\CLSID\{8AE3BCD6-ADBC-42E5-91BB-BF81E65B5911}'=> Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{1017A80C-6F09-4548-A84D-EDD6AC9525F0} => value deleted successfully.
'HKCR\CLSID\{1017A80C-6F09-4548-A84D-EDD6AC9525F0}'=> Key not found.
'HKLM\Software\MozillaPlugins\FF Plugin: @microsoft.com/GENUINE - disabled No File'=> Key not found.
"FF Plugin: @microsoft.com/GENUINE - disabled No File" => not found.
'HKLM\Software\Wow6432Node\MozillaPlugins\FF Plugin-x32: @microsoft.com/GENUINE - disabled No File'=> Key not found.
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File not found.
C:\Users\Internetdummy\AppData\Local\Temp\avgnt.exe => Moved successfully.
C:\Users\Küde\AppData\Local\Temp\avgnt.exe => Moved successfully.
"C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1bekmo.dll" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\Quarantine.exe" => File/Directory not found.
C:\ProgramData\Temp => ":288D55E3" ADS removed successfully.

==== End of Fixlog ====
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-06-2014
Ran by Markus ** at 2014-06-11 05:18:21
Running from C:\Users\Markus **\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
ABBYY Business Card Reader 2.0 (HKLM-x32\...\{BC200000-0001-0000-0000-074957833700}) (Version: 2.0.55 - ABBYY)
ABBYY FineReader 11 (HKLM-x32\...\{F11000FE-0010-0000-0000-074957833700}) (Version: 11.11.194 - ABBYY Production LLC)
ABBYY PDF Transformer+ (HKLM\...\{FA400000-0001-6400-0000-074957833700}) (Version: 4.1.159 - ABBYY Production LLC)
Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.68 - NewTech Infosystems)
Acer Crystal Eye webcam Ver:1.1.192.810 (HKLM-x32\...\{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}) (Version: 1.1.192.810 - Chicony Electronics Co.,Ltd.)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3005 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0423.2010 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated)
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{DD89CE29-BC88-40C6-A845-E2548682C5D6}) (Version: 1.9.17.06019 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.9.17.06019 - Alcor Micro Corp.) Hidden
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros)
ATI Catalyst Install Manager (HKLM\...\{75FDB05A-C1C2-CD17-35CE-3C1A454CC79F}) (Version: 3.0.778.0 - ATI Technologies, Inc.)
Avery Wizard 4.0 (HKLM-x32\...\{F5D84887-8A6F-4993-8560-B3AA44CB620D}) (Version: 4.0.201 - Avery)
Avira (HKLM-x32\...\{70a79d1f-686d-4d5c-962b-07aa1294eae0}) (Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG) Hidden
Avira Internet Security Suite (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.672 - Avira)
Backup Manager Basic (x32 Version: 2.0.0.68 - NewTech Infosystems) Hidden
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 15.0.7.1 - Broadcom Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0825.2205.37769 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help English (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help French (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help German (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
ccc-utility64 (Version: 2010.0825.2205.37769 - ATI) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3814.50 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.3814.50 - CyberLink Corp.) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version:  - Microsoft)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.3 - Dropbox, Inc.)
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version:  - DVD Shrink)
DVDStyler v2.7.2 (HKLM-x32\...\DVDStyler_is1) (Version:  - )
Elevated Installer (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
FileAlyzer 2 (HKLM-x32\...\{29D3773E-54F4-23C2-D523-236A4453B845}_is1) (Version: 2.0.0.10 - Safer Networking Limited)
Free Disc Burner version 3.0.7.1206 (HKLM-x32\...\Free Disc Burner_is1) (Version:  - DVDVideoSoft Ltd.)
Free MP4 Video Converter version 5.0.20.1031 (HKLM-x32\...\Free MP4 Video Converter_is1) (Version: 5.0.20.1031 - DVDVideoSoft Ltd.)
Free Studio version 5.9.0.1212 (HKLM-x32\...\Free Studio_is1) (Version: 5.9.0.1212 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.1.40.1031 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.1.40.1031 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.10.11.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Ltd.)
Garmin Express (HKLM-x32\...\{9471d6bd-67a9-40f6-a420-2ae4f08ef003}) (Version: 2.3.14.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin WebUpdater (HKLM-x32\...\{AE1EC58E-B2AC-4959-A4C2-C38202A25239}) (Version: 2.5.6 - Garmin Ltd or its subsidiaries)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated)
IncrediBackup (x32 Version: 1.0.0.1039 - IncrediMail) Hidden
IncrediMail (x32 Version: 6.3.9.5274 - IncrediMail) Hidden
IncrediMail 2.0 (HKLM-x32\...\IncrediMail) (Version: 6.3.9.5274 - IncrediMail Ltd.)
IncrediMail Protection Center (HKLM-x32\...\Protection Center) (Version: 6001076 - IncrediMail Ltd.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1002 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.6 - Intel)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Kochtopf Easy (HKLM-x32\...\{FF8FB99F-1C60-4220-976B-4940D39F7941}) (Version: 14.11.2006 - Carosoft, 8733 Eschenbach)
LastPass (Nur deinstallieren) (HKLM-x32\...\LastPass) (Version:  - LastPass)
Lexmark  (HKLM-x32\...\{D2C5E510-BE6D-42CC-9F61-E4F939078474}) (Version: 1.0.0.0 - )
Lexmark Pro700 Series (HKLM\...\Lexmark Pro700 Series) (Version:  - Lexmark International, Inc.)
Lexmark Tools for Office (HKLM-x32\...\{10812DE7-2E57-4740-B226-6B3BE34AF9D7}) (Version: 1.41.0.0 - )
LibreOffice 4.2.4.2 (HKLM-x32\...\{6B4977CB-5B9F-4B24-8310-3BA527A8AF22}) (Version: 4.2.4.2 - The Document Foundation)
LoiLoScope 2 (HKLM-x32\...\{CAB75FFC-2377-4B95-A8FA-C9234B812A92}_is1) (Version: 2.5.3.2 - LoiLo inc)
LoiLoScope Herunterladen (HKLM-x32\...\{C2A254F4-AC74-482F-8F09-DB2843AC2AAE}_is1) (Version: 2.0 - LoiLo inc)
LUMIX Map Tool (HKLM-x32\...\InstallShield_{7DCF5B1D-79C2-4F24-9746-511436EBC6B4}) (Version: 1.1.0 - Panasonic Corporation)
LUMIX Map Tool (x32 Version: 1.1.0 - Panasonic Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.145.0 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (Version: 2.3.145.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSVC80_x64 (Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86 (x32 Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.9.3 - pdfforge)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - Ihr Firmenname) Hidden
PHOTOfunSTUDIO 9.1 PE (HKLM-x32\...\{C13FE7DE-D34D-48CC-9FA3-8DB9A3621B98}) (Version: 9.01.709 - Panasonic Corporation)
PowerDirector (HKLM-x32\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version:  - )
PowerProducer (HKLM-x32\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version:  - )
Private Tax 2012 2.0 (HKLM-x32\...\6753-7911-9438-6061) (Version: 2.0 - Information Factory AG)
Private Tax 2013 1.4.0 (HKLM-x32\...\0579-4231-5684-8562) (Version: 1.4.0 - Information Factory AG)
Protection Center (x32 Version: 6.0.0.1076 - IncrediMail) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7058 - Realtek Semiconductor Corp.)
Secunia PSI (3.0.0.6005) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.6005 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.6.0 - Synaptics Incorporated)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4410.1 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.2160.11 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
WavePurity (HKLM-x32\...\WavePurity) (Version:  - )
WD My Cloud (HKLM\...\{8F19C800-80A5-4636-B560-39A58112D45B}) (Version: 1.0.4.37 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{9A265E7E-5602-44DB-8B4D-A25C58D02489}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{0CADB637-714E-4F47-83C7-F11FEFC930D6}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM-x32\...\{9af08980-8d36-4304-a8d0-53dc0c7d93a5}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WebCam (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.54.007 - Sonix)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3004 - Acer Incorporated)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows-Treiberpaket - ATI Technologies Inc. (amdkmdap) Display  (06/13/2011 8.840.7.4000) (HKLM\...\1DE0DA68FB9DE6759FF33A74F6DF5523389FA513) (Version: 06/13/2011 8.840.7.4000 - ATI Technologies Inc.)
Windows-Treiberpaket - Broadcom (k57nd60a) Net  (10/15/2012 15.6.0.2) (HKLM\...\04AD368CB9CF50B30DB1552B0C6653E2EFFC7966) (Version: 10/15/2012 15.6.0.2 - Broadcom)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\03558EE026C7D1019B4A138DD4B58B8AE39211C4) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\BF1AD0105EBDCA6E730BE93DE583343339830A7A) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\CAC45647A959F237CE25C052FDB9A4A914C34830) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel USB  (07/25/2013 9.1.9.1005) (HKLM\...\A86AAC18EC59E9369A037083AC25A97B89713EC8) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Realtek Semiconductor Corp. HD Audio Driver (10/07/2013 6.0.1.7058) (HKLM\...\DE7597D60A9A5CE6DE9AAA75BF05E6A6722AE298) (Version: 10/07/2013 6.0.1.7058 - Realtek Semiconductor Corp.)
WOT für Internet Explorer (HKLM\...\{DCAEC601-735C-41AE-B84F-D792F09FB7D1}) (Version: 12.8.2.0 - WOT Services Oy)

==================== Restore Points  =========================

25-05-2014 11:31:03 Geplanter Prüfpunkt
01-06-2014 16:01:36 Geplanter Prüfpunkt
09-06-2014 08:59:30 Removed Bonjour
09-06-2014 09:00:25 Removed Bonjour-Druckdienste
11-06-2014 03:05:21 TuneUp Utilities 2014 wird entfernt
11-06-2014 03:06:58 TuneUp Utilities 2014 (de-DE) wird entfernt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-04-15 00:25 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {07FE6F92-D444-42C0-889F-68C95941C05F} - System32\Tasks\launchspotflux => C:\Program Files (x86)\spotflux\.\spotflux.exe
Task: {0A1F5F73-36C4-4F05-93CB-2712CE5C6598} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: {30652F9D-91E4-4C1F-9F33-BF0A4710BD9F} - System32\Tasks\{206A70D1-01F2-4196-9221-000636522535} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {3F021A4B-D233-483E-BB52-D8F629426F17} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-09-04] (Microsoft)
Task: {3F541924-9B98-4CA8-B2D7-C486F018B83B} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {67F5CC37-E497-4647-9CF9-5E76CE6AEF97} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
Task: {6C7F0A50-412C-4B03-951E-ABBE5DC6F204} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {74674AC7-0F42-4191-B092-B0E4D39D9280} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {7F55709A-034E-4914-A27F-40CE690C591B} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3706524009-4250397638-3171320869-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {81D7756B-58DC-4B7F-9103-984D1AA7B320} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {850AFB24-18F3-45DD-A2EA-AE87484F849E} - System32\Tasks\FGRun => C:\Users\Markus
Task: {9637B875-BEC4-452E-B587-5F3D14DE8820} - System32\Tasks\Google Updater and Installer => C:\Users\Markus **\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {983283BC-F494-4178-91F4-39E933087691} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3706524009-4250397638-3171320869-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {9C5F10B0-804B-4A4D-8857-64BD5409C01E} - System32\Tasks\Western Digital\SmartWare\____Volume_edd7a140_f1e6_11df_b892_806e6f6e6963__dropbox_c0de6ce1_5657_41e8_800c_858feb0a3768_dropbox_ => C:\Program Files (x86)\Western Digital\WD SmartWare\BackupTask.exe [2014-05-09] (Western Digital Technologies, Inc.)
Task: {9E0E5119-43FD-407D-BD05-1A59E915EEE6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: {A73C02F3-4334-41C1-8E95-D72E83DBC766} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {AC3F5984-5C73-4BDC-8EF7-075138133231} - System32\Tasks\{4E9B0226-A400-466C-A753-64E3F9F604E9} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {B82F9D1F-6BC9-435E-A1C8-41AEF458729A} - System32\Tasks\{969DD5E3-8FD4-4B20-BE2B-29A1165A141E} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {C76FB41A-69E8-4107-9CAC-83450B2DD022} - System32\Tasks\{E75F870D-0780-4A2A-AFDC-53CAC00B717E} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {CF84C6B6-AC15-463F-95C4-D94C94325191} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {EC68C63E-3DC5-4E8E-899B-4BC13A49C2F2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {F48A4817-33A4-4EE2-BC73-662FE8B7F715} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {FCF6100D-2F42-4507-9A1B-22DA1193953D} - System32\Tasks\{E2596B35-B99D-40DF-80DD-684E1D3224FA} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-03-18 22:10 - 2009-11-04 14:18 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxeedrpp.dll
2010-11-17 03:18 - 2010-11-17 03:18 - 00206208 _____ () C:\Windows\PLFSetI.exe
2013-12-16 08:12 - 2010-01-13 11:55 - 00030080 _____ () C:\Windows\snuvcdsm.exe
2010-06-29 00:20 - 2010-06-29 00:20 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-06-29 00:12 - 2010-06-29 00:12 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00138320 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-06-07 07:08 - 2014-05-05 10:37 - 00049744 _____ () C:\Users\Markus **\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-06-11 04:54 - 2014-06-11 04:54 - 00043008 _____ () C:\Users\Markus **\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpse0lgg.dll
2014-05-28 07:10 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Markus **\AppData\Roaming\Dropbox\bin\libcef.dll
2014-04-28 10:05 - 2014-04-28 10:05 - 00033128 _____ () C:\Program Files (x86)\IncrediMail\Bin\IMHttpComm.dll
2014-04-28 10:05 - 2014-04-28 10:05 - 00072104 _____ () C:\Program Files (x86)\IncrediMail\Bin\wlessfp1.dll
2014-04-28 10:05 - 2014-04-28 10:05 - 00268712 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImLookExU.dll
2013-07-21 11:54 - 2013-07-21 11:54 - 00108888 _____ () C:\Program Files (x86)\IncrediMail\Bin\pmc.dll
2014-04-28 10:05 - 2014-04-28 10:05 - 00133544 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImComUtlU.dll
2014-04-28 10:05 - 2014-04-28 10:05 - 00080296 _____ () C:\Program Files (x86)\IncrediMail\bin\ImAppRU.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-22 08:18 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/11/2014 05:11:57 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (06/11/2014 04:54:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LManager.exe, Version: 4.0.14.854, Zeitstempel: 0x4c611672
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x4d8
Startzeit der fehlerhaften Anwendung: 0xLManager.exe0
Pfad der fehlerhaften Anwendung: LManager.exe1
Pfad des fehlerhaften Moduls: LManager.exe2
Berichtskennung: LManager.exe3

Error: (06/10/2014 11:11:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LManager.exe, Version: 4.0.14.854, Zeitstempel: 0x4c611672
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x40c
Startzeit der fehlerhaften Anwendung: 0xLManager.exe0
Pfad der fehlerhaften Anwendung: LManager.exe1
Pfad des fehlerhaften Moduls: LManager.exe2
Berichtskennung: LManager.exe3

Error: (06/10/2014 11:10:51 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (06/10/2014 11:08:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LManager.exe, Version: 4.0.14.854, Zeitstempel: 0x4c611672
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xaec
Startzeit der fehlerhaften Anwendung: 0xLManager.exe0
Pfad der fehlerhaften Anwendung: LManager.exe1
Pfad des fehlerhaften Moduls: LManager.exe2
Berichtskennung: LManager.exe3

Error: (06/10/2014 10:44:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1628
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3


System errors:
=============
Error: (06/11/2014 04:55:44 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/11/2014 04:55:43 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/11/2014 04:54:15 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/11/2014 04:53:09 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/11/2014 04:52:59 AM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Net.Tcp-Listeneradapter" ist von folgendem Dienst abhängig: was. Dieser Dienst ist eventuell nicht installiert.

Error: (06/11/2014 04:52:59 AM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Net.Pipe-Listeneradapter" ist von folgendem Dienst abhängig: was. Dieser Dienst ist eventuell nicht installiert.

Error: (06/11/2014 04:52:59 AM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Net.Msmq-Listeneradapter" ist von folgendem Dienst abhängig: msmq. Dieser Dienst ist eventuell nicht installiert.

Error: (06/10/2014 11:14:33 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (06/10/2014 11:13:07 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (06/10/2014 11:12:30 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422


Microsoft Office Sessions:
=========================
Error: (06/11/2014 05:11:57 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (06/11/2014 04:54:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: LManager.exe4.0.14.8544c611672unknown0.0.0.000000000c0000005000000004d801cf852069e8db39C:\Program Files (x86)\Launch Manager\LManager.exeunknownb259df97-f113-11e3-8346-206a8a1c06e5

Error: (06/10/2014 11:11:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LManager.exe4.0.14.8544c611672unknown0.0.0.000000000c00000050000000040c01cf84f07c1b24ecC:\Program Files (x86)\Launch Manager\LManager.exeunknownc3f78a57-f0e3-11e3-af67-206a8a1c06e5

Error: (06/10/2014 11:10:51 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (06/10/2014 11:08:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: LManager.exe4.0.14.8544c611672unknown0.0.0.000000000c000000500000000aec01cf848b7f9377ddC:\Program Files (x86)\Launch Manager\LManager.exeunknowncce776cd-f07e-11e3-b4cb-206a8a1c06e5

Error: (06/10/2014 10:44:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd162801cf8488278b38f1C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll6638d86f-f07b-11e3-a916-206a8a1c06e5


CodeIntegrity Errors:
===================================
  Date: 2014-02-08 08:25:44.964
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 08:25:44.792
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 01:40:37.359
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 01:40:37.094
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:58:46.384
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:58:46.212
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:49:05.878
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:49:05.628
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:19:16.318
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:19:16.147
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 52%
Total physical RAM: 3956.43 MB
Available physical RAM: 1861.22 MB
Total Pagefile: 7911.05 MB
Available Pagefile: 5296.9 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:685.35 GB) (Free:428.98 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: EDA0EDA0)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=685 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

und der Fist Scan:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-06-2014
Ran by Markus ****** (administrator) on MARKUS******PC on 11-06-2014 05:15:46
Running from C:\Users\Markus ******\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY InfoPoisk LLC) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
( ) C:\Windows\System32\lxeecoms.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\PLFSetI.exe
(sonix) C:\Windows\PLFSetL.exe
() C:\Windows\snuvcdsm.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(sonix) C:\Windows\PLFSetL.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Dropbox, Inc.) C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(ABBYY) C:\Program Files (x86)\NetworkLicenseServer.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13656792 2013-10-04] (Realtek Semiconductor)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2010-11-17] ()
HKLM\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [99712 2010-01-13] (sonix)
HKLM\...\Run: [SNUVCDSM] => C:\Windows\snuvcdsm.exe [30080 2010-01-13] ()
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-11] (Dritek System Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-15] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [99712 2010-01-13] (sonix)
HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY Production LLC)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-05-09] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PHOTOfunSTUDIO 9.1 PE.lnk
ShortcutTarget: PHOTOfunSTUDIO 9.1 PE.lnk -> C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe (Panasonic Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Markus ******\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://meteo.srf.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.meteocentrale.ch/de/europa/schweiz/wetter-zuerich/details/N-3518042/
hxxp://www.nzz.ch/wetter/radarbild/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {3A08CD5B-FF07-4DCB-809E-8A916279267C} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://oas.support.microsoft.com/ActiveX/MSDcode.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (NPLastPass) - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File
CHR Extension: (Google Docs) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-16]
CHR Extension: (Google Drive) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-16]
CHR Extension: (WOT) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-05-22]
CHR Extension: (YouTube) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-08-27]
CHR Extension: (Google-Suche) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-08-27]
CHR Extension: (Avira Browser Safety) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-05-01]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-06-09]
CHR Extension: (Google Wallet) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-16]
CHR Extension: (Google Mail) - C:\Users\Markus ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-08-27]

==================== Services (Whitelisted) =================

R2 ABBYY.Licensing.BCR.Windows.2.0; C:\Program Files (x86)\NetworkLicenseServer.exe [821808 2012-04-28] (ABBYY)
R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY InfoPoisk LLC)
R2 ABBYY.Licensing.PDFTransformer.Classic.4.0; C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe [959184 2014-04-03] (ABBYY Production LLC)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [811088 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [124496 2014-05-05] (Avira Operations GmbH & Co. KG)
S3 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S4 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxeeserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [1052328 2010-01-07] ( )
R2 lxee_device; C:\Windows\SysWOW64\lxeecoms.exe [598696 2010-01-07] ( )
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S4 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [272024 2006-12-19] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1223704 2013-02-07] (Secunia)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-05-09] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [295800 2014-05-09] (Western Digital Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-04-29] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-04-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-19] (Avira Operations GmbH & Co. KG)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-02-07] (Secunia)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SjtWinIo; C:\Windows\System32\DRIVERS\SjtWinIo.sys [9216 2011-05-08] (SpeedJet Technology INC.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806592 2010-01-13] ()
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 AVFSFilter; system32\DRIVERS\avfsfilter.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-11 05:15 - 2014-06-11 05:17 - 00020843 _____ () C:\Users\Markus ******\Desktop\FRST.txt
2014-06-11 05:13 - 2014-06-11 05:13 - 00000000 ____D () C:\Users\Markus ******\Desktop\FRST-OlderVersion
2014-06-10 11:19 - 2014-06-10 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-06-10 11:19 - 2014-06-10 11:19 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-06-10 11:13 - 2014-06-10 11:13 - 01110476 _____ () C:\Users\Markus ******\Desktop\7z920.exe
2014-06-10 10:28 - 2014-06-11 05:12 - 00000000 ____D () C:\Users\Markus ******\Desktop\Log dateien Macchiavelli 10.6
2014-06-10 10:16 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-10 10:15 - 2014-06-10 10:24 - 00000000 ____D () C:\AdwCleaner
2014-06-10 10:14 - 2014-06-10 10:14 - 01016261 _____ (Thisisu) C:\Users\Markus ******\Desktop\JRT.exe
2014-06-10 10:09 - 2014-06-10 10:09 - 01333465 _____ () C:\Users\Markus ******\Desktop\adwcleaner_3.212.exe
2014-06-10 09:28 - 2014-06-10 09:28 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (4).exe
2014-06-10 09:27 - 2014-06-10 09:27 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (3).exe
2014-06-10 09:15 - 2014-06-10 09:16 - 00000000 ____D () C:\Users\Markus ******\Desktop\Scans vom 10.6
2014-06-10 08:33 - 2014-06-10 08:33 - 00380416 _____ () C:\Users\Markus ******\Desktop\Gmer-19357.exe
2014-06-10 08:28 - 2014-06-11 05:16 - 00000000 ____D () C:\FRST
2014-06-10 08:26 - 2014-06-11 05:13 - 02081792 _____ (Farbar) C:\Users\Markus ******\Desktop\FRST64.exe
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus ******\Desktop\Defogger (1).exe
2014-06-10 08:18 - 2014-06-10 08:19 - 00000490 _____ () C:\Users\Markus ******\Downloads\defogger_disable.log
2014-06-10 08:18 - 2014-06-10 08:18 - 00000000 _____ () C:\Users\Markus ******\defogger_reenable
2014-06-10 08:17 - 2014-06-10 08:17 - 00050477 _____ () C:\Users\Markus ******\Downloads\Defogger.exe
2014-06-09 13:17 - 2014-06-10 08:29 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-09 13:17 - 2014-06-09 13:17 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-09 13:17 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-09 13:16 - 2014-06-09 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (5).exe
2014-06-09 12:04 - 2014-06-09 12:05 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (4).exe
2014-06-09 12:00 - 2014-06-09 12:00 - 00128904 _____ () C:\Users\Markus ******\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-09 11:53 - 2014-06-11 04:52 - 00000504 _____ () C:\Windows\setupact.log
2014-06-09 11:53 - 2014-06-10 10:25 - 00007550 _____ () C:\Windows\PFRO.log
2014-06-09 11:53 - 2014-06-09 11:53 - 00498384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-09 11:48 - 2014-06-09 11:48 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (3).exe
2014-06-09 11:31 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-09 11:30 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-09 11:17 - 2014-06-09 11:18 - 00000000 ____D () C:\Program Files (x86)\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00001198 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:15 - 2014-06-09 11:15 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64 (1).exe
2014-06-09 10:40 - 2014-06-09 10:41 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\PDFCreator
2014-06-09 09:52 - 2014-06-11 04:55 - 00000000 ___RD () C:\Users\Markus ******\Dropbox
2014-06-09 09:52 - 2014-06-09 09:52 - 00001059 _____ () C:\Users\Markus ******\Desktop\Dropbox.lnk
2014-06-09 09:51 - 2014-06-09 09:51 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (2).exe
2014-06-09 09:16 - 2014-06-09 09:17 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 08:54 - 2014-06-09 11:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Program Files\PDFCreator
2014-06-09 08:54 - 2014-04-17 19:36 - 00110776 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-06-09 08:48 - 2014-06-09 08:49 - 25055960 _____ (pdfforge ) C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe
2014-06-08 13:11 - 2014-06-09 10:03 - 00000000 ____D () C:\Users\Markus ******\Desktop\Mueti Teneriffa 2014
2014-06-01 09:40 - 2014-06-01 09:40 - 00000000 ____H () C:\Users\Markus ******\Documents\Default.rdp
2014-05-28 07:10 - 2014-06-11 04:55 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\DropboxMaster
2014-05-28 07:10 - 2014-06-09 09:52 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-28 07:06 - 2014-06-09 09:52 - 00000692 _____ () C:\Windows\wininit.ini
2014-05-28 07:06 - 2014-05-28 07:06 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (1).exe
2014-05-28 07:05 - 2014-06-11 04:55 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Dropbox
2014-05-28 07:05 - 2014-05-28 07:05 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller.exe
2014-05-27 08:42 - 2014-05-27 08:42 - 00000000 ____D () C:\Analytics
2014-05-27 08:41 - 2014-05-27 08:41 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-05-26 09:58 - 2014-05-26 09:59 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64.exe
2014-05-24 00:03 - 2014-05-24 00:03 - 00000731 _____ () C:\Users\Markus ******\Downloads\vcard-MarcelR-Saluz.vcf
2014-05-23 09:17 - 2014-06-09 10:43 - 00000000 ____D () C:\Users\Markus ******\Desktop\Ferien Portugal
2014-05-22 23:16 - 2014-05-22 23:16 - 00000000 ____D () C:\Windows\TEMPDIR
2014-05-22 10:29 - 2014-05-22 10:29 - 00000000 ____D () C:\Users\Küde\AppData\Roaming\com.wd.WDMyCloud
2014-05-21 17:55 - 2014-06-11 04:53 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-05-20 08:43 - 2014-05-20 08:43 - 00001218 _____ () C:\Users\Markus ******\Desktop\WD Quick View.lnk
2014-05-20 08:41 - 2014-05-20 08:41 - 04398333 _____ () C:\Users\Markus ******\Downloads\WD_Quick_View_Setup_for_Windows.zip
2014-05-20 08:40 - 2014-05-20 08:40 - 00001172 _____ () C:\Users\Markus ******\Desktop\WD SmartWare.lnk
2014-05-20 08:17 - 2014-05-20 08:18 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader (1).zip
2014-05-20 08:08 - 2014-05-20 08:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 08:07 - 2014-05-20 08:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 08:07 - 2014-05-20 08:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55.exe
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55 (1).exe
2014-05-18 22:28 - 2014-05-18 22:28 - 00013312 ___SH () C:\Users\Markus ******\Downloads\Thumbs.db
2014-05-18 22:17 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western_Digital_Technolog
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-05-18 22:14 - 2014-05-18 22:14 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader.zip
2014-05-16 23:05 - 2014-05-18 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-05-16 23:05 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-05-16 23:05 - 2014-05-16 23:06 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\com.wd.WDMyCloud
2014-05-16 23:05 - 2014-05-16 23:05 - 00001157 _____ () C:\Users\Public\Desktop\WD My Cloud.lnk
2014-05-16 23:04 - 2014-05-18 22:15 - 00000000 ____D () C:\ProgramData\Western Digital
2014-05-16 23:04 - 2014-05-16 23:04 - 00000204 _____ () C:\Users\Markus ******\Desktop\Lerncenter WD My Cloud.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000156 _____ () C:\Users\Markus ******\Desktop\WD My Cloud – Öffentliche Freigabe.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000152 _____ () C:\Users\Markus ******\Desktop\WD My Cloud-Dashboard.url
2014-05-16 23:00 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western Digital
2014-05-16 22:59 - 2014-05-16 23:00 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup (1).exe
2014-05-16 22:58 - 2014-05-16 22:59 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup.exe
2014-05-15 23:58 - 2014-05-15 23:58 - 09518328 _____ () C:\Users\Markus ******\Downloads\avira_secure_backup_int.exe
2014-05-15 00:25 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 00:25 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 00:25 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 00:25 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 00:25 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 00:25 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 23:58 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 23:58 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 23:58 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 23:58 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 23:58 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 23:58 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 23:58 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 23:58 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 23:58 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 23:58 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 23:58 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 23:58 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 23:58 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 23:58 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 23:58 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 23:58 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 23:58 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 23:58 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 23:58 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 23:58 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 23:58 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-14 07:35 - 2014-05-14 07:35 - 17352880 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-12 23:32 - 2014-05-12 23:32 - 02171144 _____ (IncrediMail ) C:\Users\Markus ******\Downloads\protectioncenter.exe

==================== One Month Modified Files and Folders =======

2014-06-11 05:17 - 2014-06-11 05:15 - 00020843 _____ () C:\Users\Markus ******\Desktop\FRST.txt
2014-06-11 05:17 - 2011-02-11 19:52 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Temp
2014-06-11 05:16 - 2014-06-10 08:28 - 00000000 ____D () C:\FRST
2014-06-11 05:14 - 2013-04-19 09:35 - 00000000 ____D () C:\Users\Küde\AppData\Local\temp
2014-06-11 05:14 - 2013-04-19 09:35 - 00000000 ____D () C:\Users\Internetdummy\AppData\Local\temp
2014-06-11 05:13 - 2014-06-11 05:13 - 00000000 ____D () C:\Users\Markus ******\Desktop\FRST-OlderVersion
2014-06-11 05:13 - 2014-06-10 08:26 - 02081792 _____ (Farbar) C:\Users\Markus ******\Desktop\FRST64.exe
2014-06-11 05:12 - 2014-06-10 10:28 - 00000000 ____D () C:\Users\Markus ******\Desktop\Log dateien Macchiavelli 10.6
2014-06-11 05:05 - 2011-03-12 11:11 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-06-11 05:04 - 2010-11-17 03:10 - 02081564 _____ () C:\Windows\WindowsUpdate.log
2014-06-11 05:00 - 2009-07-14 06:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-11 05:00 - 2009-07-14 06:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-11 04:55 - 2014-06-09 09:52 - 00000000 ___RD () C:\Users\Markus ******\Dropbox
2014-06-11 04:55 - 2014-05-28 07:10 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\DropboxMaster
2014-06-11 04:55 - 2014-05-28 07:05 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Dropbox
2014-06-11 04:53 - 2014-05-21 17:55 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-06-11 04:52 - 2014-06-09 11:53 - 00000504 _____ () C:\Windows\setupact.log
2014-06-11 04:52 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-10 20:35 - 2013-12-15 14:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-10 11:19 - 2014-06-10 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-06-10 11:19 - 2014-06-10 11:19 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-06-10 11:13 - 2014-06-10 11:13 - 01110476 _____ () C:\Users\Markus ******\Desktop\7z920.exe
2014-06-10 10:30 - 2013-04-19 09:37 - 00000000 ____D () C:\Windows\ERUNT
2014-06-10 10:25 - 2014-06-09 11:53 - 00007550 _____ () C:\Windows\PFRO.log
2014-06-10 10:24 - 2014-06-10 10:15 - 00000000 ____D () C:\AdwCleaner
2014-06-10 10:14 - 2014-06-10 10:14 - 01016261 _____ (Thisisu) C:\Users\Markus ******\Desktop\JRT.exe
2014-06-10 10:09 - 2014-06-10 10:09 - 01333465 _____ () C:\Users\Markus ******\Desktop\adwcleaner_3.212.exe
2014-06-10 09:28 - 2014-06-10 09:28 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (4).exe
2014-06-10 09:27 - 2014-06-10 09:27 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (3).exe
2014-06-10 09:16 - 2014-06-10 09:15 - 00000000 ____D () C:\Users\Markus ******\Desktop\Scans vom 10.6
2014-06-10 08:33 - 2014-06-10 08:33 - 00380416 _____ () C:\Users\Markus ******\Desktop\Gmer-19357.exe
2014-06-10 08:29 - 2014-06-09 13:17 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus ******\Desktop\Defogger (1).exe
2014-06-10 08:19 - 2014-06-10 08:18 - 00000490 _____ () C:\Users\Markus ******\Downloads\defogger_disable.log
2014-06-10 08:18 - 2014-06-10 08:18 - 00000000 _____ () C:\Users\Markus ******\defogger_reenable
2014-06-10 08:18 - 2011-02-11 19:52 - 00000000 ____D () C:\Users\Markus ******
2014-06-10 08:17 - 2014-06-10 08:17 - 00050477 _____ () C:\Users\Markus ******\Downloads\Defogger.exe
2014-06-09 13:17 - 2014-06-09 13:17 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-09 13:16 - 2014-06-09 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (5).exe
2014-06-09 12:05 - 2014-06-09 12:04 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (4).exe
2014-06-09 12:00 - 2014-06-09 12:00 - 00128904 _____ () C:\Users\Markus ******\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00498384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-09 11:48 - 2014-06-09 11:48 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (3).exe
2014-06-09 11:31 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-09 11:31 - 2014-06-09 11:30 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-09 11:18 - 2014-06-09 11:17 - 00000000 ____D () C:\Program Files (x86)\LastPass
2014-06-09 11:18 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:17 - 2014-06-09 11:17 - 00001198 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2011-02-24 01:39 - 00000000 ___RD () C:\Users\Internetdummy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:17 - 2011-02-11 23:58 - 00000000 ___RD () C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:15 - 2014-06-09 11:15 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64 (1).exe
2014-06-09 11:14 - 2014-06-09 08:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-09 10:43 - 2014-05-23 09:17 - 00000000 ____D () C:\Users\Markus ******\Desktop\Ferien Portugal
2014-06-09 10:41 - 2014-06-09 10:40 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\PDFCreator
2014-06-09 10:03 - 2014-06-08 13:11 - 00000000 ____D () C:\Users\Markus ******\Desktop\Mueti Teneriffa 2014
2014-06-09 09:52 - 2014-06-09 09:52 - 00001059 _____ () C:\Users\Markus ******\Desktop\Dropbox.lnk
2014-06-09 09:52 - 2014-05-28 07:10 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-09 09:52 - 2014-05-28 07:06 - 00000692 _____ () C:\Windows\wininit.ini
2014-06-09 09:52 - 2011-02-11 20:00 - 00000000 ___RD () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 09:51 - 2014-06-09 09:51 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (2).exe
2014-06-09 09:17 - 2014-06-09 09:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ******\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Program Files\PDFCreator
2014-06-09 08:49 - 2014-06-09 08:48 - 25055960 _____ (pdfforge ) C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe
2014-06-09 08:47 - 2012-01-16 12:03 - 00000000 ____D () C:\Users\Markus ******\Desktop\Infos Ferien Teneriffa
2014-06-07 09:52 - 2010-11-17 03:50 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-06-07 09:52 - 2010-11-17 03:50 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-06-07 09:52 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-07 07:15 - 2011-03-18 22:39 - 00000000 ____D () C:\ProgramData\Lx_cats
2014-06-05 14:02 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-01 09:40 - 2014-06-01 09:40 - 00000000 ____H () C:\Users\Markus ******\Documents\Default.rdp
2014-05-30 17:42 - 2013-02-18 23:42 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-05-30 12:18 - 2014-01-28 00:53 - 00013954 _____ () C:\Users\Markus ******\Desktop\Telefonliste MA AURORA.xlsx
2014-05-30 08:51 - 2013-09-11 17:53 - 00000000 ____D () C:\Users\Markus ******\Desktop\Unterlagen Liquidation für Mario
2014-05-29 09:13 - 2011-02-11 20:28 - 00000000 ____D () C:\Users\Markus ******\Documents\Kundennummern und Zugangscodes
2014-05-28 07:06 - 2014-05-28 07:06 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller (1).exe
2014-05-28 07:05 - 2014-05-28 07:05 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ******\Downloads\DropboxInstaller.exe
2014-05-27 08:42 - 2014-05-27 08:42 - 00000000 ____D () C:\Analytics
2014-05-27 08:41 - 2014-05-27 08:41 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-05-26 09:59 - 2014-05-26 09:58 - 14936064 _____ (LastPass) C:\Users\Markus ******\Downloads\lastpass_x64.exe
2014-05-24 00:03 - 2014-05-24 00:03 - 00000731 _____ () C:\Users\Markus ******\Downloads\vcard-MarcelR-Saluz.vcf
2014-05-22 23:16 - 2014-05-22 23:16 - 00000000 ____D () C:\Windows\TEMPDIR
2014-05-22 10:29 - 2014-05-22 10:29 - 00000000 ____D () C:\Users\Küde\AppData\Roaming\com.wd.WDMyCloud
2014-05-20 08:43 - 2014-05-20 08:43 - 00001218 _____ () C:\Users\Markus ******\Desktop\WD Quick View.lnk
2014-05-20 08:41 - 2014-05-20 08:41 - 04398333 _____ () C:\Users\Markus ******\Downloads\WD_Quick_View_Setup_for_Windows.zip
2014-05-20 08:40 - 2014-05-20 08:40 - 00001172 _____ () C:\Users\Markus ******\Desktop\WD SmartWare.lnk
2014-05-20 08:18 - 2014-05-20 08:17 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader (1).zip
2014-05-20 08:08 - 2014-05-20 08:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 08:07 - 2014-05-20 08:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 08:07 - 2014-05-20 08:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 08:07 - 2013-02-18 19:24 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55.exe
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ******\Downloads\chromeinstall-7u55 (1).exe
2014-05-18 22:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-18 22:28 - 2014-05-18 22:28 - 00013312 ___SH () C:\Users\Markus ******\Downloads\Thumbs.db
2014-05-18 22:21 - 2013-04-17 07:48 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-18 22:17 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western_Digital_Technolog
2014-05-18 22:17 - 2014-05-16 23:00 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\Western Digital
2014-05-18 22:16 - 2014-05-16 23:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-05-18 22:15 - 2014-05-16 23:05 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-05-18 22:15 - 2014-05-16 23:04 - 00000000 ____D () C:\ProgramData\Western Digital
2014-05-18 22:15 - 2013-03-15 00:20 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-18 22:14 - 2014-05-18 22:14 - 37257919 _____ () C:\Users\Markus ******\Downloads\SmartWare_Windows_Upgrader.zip
2014-05-16 23:06 - 2014-05-16 23:05 - 00000000 ____D () C:\Users\Markus ******\AppData\Roaming\com.wd.WDMyCloud
2014-05-16 23:05 - 2014-05-16 23:05 - 00001157 _____ () C:\Users\Public\Desktop\WD My Cloud.lnk
2014-05-16 23:04 - 2014-05-16 23:04 - 00000204 _____ () C:\Users\Markus ******\Desktop\Lerncenter WD My Cloud.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000156 _____ () C:\Users\Markus ******\Desktop\WD My Cloud – Öffentliche Freigabe.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000152 _____ () C:\Users\Markus ******\Desktop\WD My Cloud-Dashboard.url
2014-05-16 23:00 - 2014-05-16 22:59 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup (1).exe
2014-05-16 22:59 - 2014-05-16 22:58 - 71601392 _____ () C:\Users\Markus ******\Downloads\mc_windows_setup.exe
2014-05-16 08:30 - 2011-02-16 00:39 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-16 00:17 - 2011-02-11 23:39 - 00000000 ___DC () C:\Users\Markus ******\AppData\Local\MigWiz
2014-05-15 23:58 - 2014-05-15 23:58 - 09518328 _____ () C:\Users\Markus ******\Downloads\avira_secure_backup_int.exe
2014-05-15 12:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 11:53 - 2011-02-11 23:58 - 00000000 ___RD () C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 09:05 - 2011-02-11 20:00 - 00000000 ___RD () C:\Users\Markus ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 08:59 - 2014-05-07 16:43 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 00:28 - 2011-02-11 22:34 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 00:24 - 2013-08-15 02:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 00:21 - 2011-02-12 11:56 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 08:24 - 2011-03-18 22:11 - 00559534 _____ () C:\ProgramData\lxeescan.log
2014-05-14 07:35 - 2014-05-14 07:35 - 17352880 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-14 07:35 - 2013-12-15 14:04 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 07:35 - 2013-12-15 14:04 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 07:35 - 2013-12-15 14:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-13 08:04 - 2011-02-13 10:45 - 00000000 ____D () C:\Users\Küde\AppData\Local\IM
2014-05-13 08:03 - 2011-02-11 23:59 - 00128904 _____ () C:\Users\Küde\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-13 00:07 - 2014-04-10 23:14 - 00001077 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-05-12 23:59 - 2011-02-11 22:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-12 23:55 - 2010-09-16 02:19 - 00000000 ____D () C:\Windows\ShellNew
2014-05-12 23:33 - 2013-01-28 12:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail
2014-05-12 23:33 - 2011-02-12 12:26 - 00000000 ____D () C:\Users\Markus ******\AppData\Local\IM
2014-05-12 23:32 - 2014-05-12 23:32 - 02171144 _____ (IncrediMail ) C:\Users\Markus ******\Downloads\protectioncenter.exe
2014-05-12 13:04 - 2013-04-30 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-12 13:04 - 2012-12-17 09:11 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-05-12 07:26 - 2014-06-09 13:17 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-09 13:17 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

Some content of TEMP:
====================
C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe
C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpse0lgg.dll
C:\Users\Markus ******\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Markus ******\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Markus ******\AppData\Local\Temp\Quarantine.exe
C:\Users\Markus ******\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Markus ******\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Markus ******\AppData\Local\Temp\TUUUninstallHelper.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-09 13:58

==================== End Of Log ============================
         

--- --- ---

--- --- ---



Sorry und danke für dein Verständnis!
Haben wir nun alles, was du zu meiner Unterstützung brauchst?

Liebe Grüsse und einen schönen Abend
Markus

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Users\Internetdummy\AppData\LocalLow\DVDVideoSoftTB_DE
C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe
C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpse0lgg.dll
C:\Users\Markus ******\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Markus ******\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Markus ******\AppData\Local\Temp\Quarantine.exe
C:\Users\Markus ******\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Markus ******\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Markus ******\AppData\Local\Temp\TUUUninstallHelper.exe
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Wie läuft der PC?

Hallo Machiavelli,

hier die Fixlist:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-06-2014
Ran by Markus Jacober at 2014-06-12 09:37:34 Run:2
Running from C:\Users\Markus Jacober\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Internetdummy\AppData\LocalLow\DVDVideoSoftTB_DE
C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe
C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpse0lgg.dll
C:\Users\Markus ******\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Markus ******\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Markus ******\AppData\Local\Temp\Quarantine.exe
C:\Users\Markus ******\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Markus ******\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Markus ******\AppData\Local\Temp\TUUUninstallHelper.exe
*****************

C:\Users\Internetdummy\AppData\LocalLow\DVDVideoSoftTB_DE => Moved successfully.
"C:\Users\Markus ******\Downloads\PDFCreator-1_9_3-setup.exe" => File/Directory not found.
'HKLM\Software\MozillaPlugins\FF Plugin: @microsoft.com/GENUINE - disabled No File'=> Key not found.
"FF Plugin: @microsoft.com/GENUINE - disabled No File" => not found.
'HKLM\Software\Wow6432Node\MozillaPlugins\FF Plugin-x32: @microsoft.com/GENUINE - disabled No File'=> Key not found.
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File not found.
"C:\Users\Markus ******\AppData\Local\Temp\avgnt.exe" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\Avira Secure Backup.exe" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpse0lgg.dll" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\DseShExt-x64.dll" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\DseShExt-x86.dll" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\Quarantine.exe" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\SDShelEx-win32.dll" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\SDShelEx-x64.dll" => File/Directory not found.
"C:\Users\Markus ******\AppData\Local\Temp\TUUUninstallHelper.exe" => File/Directory not found.

==== End of Fixlog ====
         

Der Computer läuft einigermassen, aber Mbam lässt sich immer noch nicht nicht starten.

Übrigens: Bei deinen letzten Anweisungen hattest du mich gebeten, alle Externa vor dem Scan anzuschliessen. Leider war ich nicht in der Lage, meine neue WD Cloud anzuschliessen, sie hängt mit einem Ethernetkabel am Router und mein Compi ist per W-Lan damit verbunden. Besteht da ein Problem, dem wir noch unsere Aufmerksamkeit schenken sollten?

Liebe Grüsse aus Zürich

Markus

Besteht da ein Problem, dem wir noch unsere Aufmerksamkeit schenken sollten?

Denke nicht.

Gibt es irgendwelche Fehlermeldung, wenn Du MBAM startest?

Guten Tag Machiavelli

weder beim Startversuch von Mbam mit Doppelklick als auch "Als Administrator ausführen" keine Fehlermeldungen: einfach keine Reaktion, es geschieht nichts.
Ich habe allerdings bisher die 13 Chameleons nicht wieder ausprobiert. Soll ich noch einmal versuchen Mbam mit den Chameleons zu starten?

Haben wir denn Jetzt schon irgendwelche Würmer, Plagegeister oder Trojaner entfernt, oder haben wir bisher nur durch Scans solche Dinge geortet?
Ich führe einfach deine Anweisungen aus, ohne genau zu verstehen, was die einzelnen Schritte bewirken. Ich bin ein recht guter Anwender, aber halt nur Anwender.

Herzliche Grüsse aus Zürich

Markus

Probiere mal alle Chameleons aus.



Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Guten Tag Machiavelli,

Ich habe nocheimal die 13 Chameleons von Mbam nacheinander durchlaufen lassen, leider ohne einen Erfolg: Mbam startet nicht.

Hier die aktuellen Scans:


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-06-2014
Ran by Markus *** (administrator) on MARKUS***PC on 14-06-2014 09:32:45
Running from C:\Users\Markus ***\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files (x86)\NetworkLicenseServer.exe
(ABBYY InfoPoisk LLC) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
( ) C:\Windows\System32\lxeecoms.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\PLFSetI.exe
(sonix) C:\Windows\PLFSetL.exe
() C:\Windows\snuvcdsm.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(sonix) C:\Windows\PLFSetL.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Dropbox, Inc.) C:\Users\Markus ***\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\System32\LocationNotifications.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13656792 2013-10-04] (Realtek Semiconductor)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2010-11-17] ()
HKLM\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [99712 2010-01-13] (sonix)
HKLM\...\Run: [SNUVCDSM] => C:\Windows\snuvcdsm.exe [30080 2010-01-13] ()
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-11] (Dritek System Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-15] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [99712 2010-01-13] (sonix)
HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY Production LLC)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-05-09] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PHOTOfunSTUDIO 9.1 PE.lnk
ShortcutTarget: PHOTOfunSTUDIO 9.1 PE.lnk -> C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe (Panasonic Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Markus ***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Markus ***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://meteo.srf.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.meteocentrale.ch/de/europa/schweiz/wetter-zuerich/details/N-3518042/
hxxp://www.nzz.ch/wetter/radarbild/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {3A08CD5B-FF07-4DCB-809E-8A916279267C} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://oas.support.microsoft.com/ActiveX/MSDcode.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (NPLastPass) - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File
CHR Extension: (Google Docs) - C:\Users\Markus ***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-16]
CHR Extension: (Google Drive) - C:\Users\Markus ***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-16]
CHR Extension: (WOT) - C:\Users\Markus ***\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-05-22]
CHR Extension: (YouTube) - C:\Users\Markus ***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-08-27]
CHR Extension: (Google-Suche) - C:\Users\Markus ***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-08-27]
CHR Extension: (Avira Browser Safety) - C:\Users\Markus ***\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-05-01]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Markus ***\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-06-09]
CHR Extension: (Google Wallet) - C:\Users\Markus ***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-16]
CHR Extension: (Google Mail) - C:\Users\Markus ***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-08-27]

==================== Services (Whitelisted) =================

R2 ABBYY.Licensing.BCR.Windows.2.0; C:\Program Files (x86)\NetworkLicenseServer.exe [821808 2012-04-28] (ABBYY)
R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY InfoPoisk LLC)
R2 ABBYY.Licensing.PDFTransformer.Classic.4.0; C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe [959184 2014-04-03] (ABBYY Production LLC)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [811088 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [124496 2014-05-05] (Avira Operations GmbH & Co. KG)
S3 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S4 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxeeserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [1052328 2010-01-07] ( )
R2 lxee_device; C:\Windows\SysWOW64\lxeecoms.exe [598696 2010-01-07] ( )
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S4 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [272024 2006-12-19] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1223704 2013-02-07] (Secunia)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-05-09] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [295800 2014-05-09] (Western Digital Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-04-29] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-04-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-19] (Avira Operations GmbH & Co. KG)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-02-07] (Secunia)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SjtWinIo; C:\Windows\System32\DRIVERS\SjtWinIo.sys [9216 2011-05-08] (SpeedJet Technology INC.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806592 2010-01-13] ()
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 AVFSFilter; system32\DRIVERS\avfsfilter.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-14 09:32 - 2014-06-14 09:34 - 00020265 _____ () C:\Users\Markus ***\Desktop\FRST.txt
2014-06-14 09:11 - 2014-06-14 09:11 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-06-11 05:25 - 2014-06-11 05:25 - 00000000 ____D () C:\Users\Markus ***\Desktop\Log dateien Macchiavelli 11.6
2014-06-11 05:13 - 2014-06-11 05:13 - 00000000 ____D () C:\Users\Markus ***\Desktop\FRST-OlderVersion
2014-06-11 05:04 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-11 05:04 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 05:04 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-11 05:04 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-11 05:04 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 05:04 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 05:04 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-11 05:04 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-11 05:04 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-11 05:04 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-11 05:04 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-11 05:04 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-11 05:04 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-11 05:04 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 05:04 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-11 05:04 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 05:04 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-11 05:04 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-11 05:04 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-11 05:04 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 05:04 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 05:04 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-11 05:04 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 05:04 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-11 05:04 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-11 05:04 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-11 05:04 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 05:04 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-11 05:04 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-11 05:03 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-11 05:03 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-11 05:03 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 05:03 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 05:03 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 05:03 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-11 05:03 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 05:03 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 05:03 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 05:03 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-11 05:03 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 05:03 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 05:03 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 05:03 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-11 05:03 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 05:03 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 05:03 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-11 05:03 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 05:03 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 05:03 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-11 05:03 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 05:03 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 05:03 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 05:03 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 05:03 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-11 05:03 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 05:03 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 05:03 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-11 05:03 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 05:03 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 05:03 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-11 05:03 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-11 05:03 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 05:03 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-11 05:03 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 05:03 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-11 05:03 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-11 05:03 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-11 05:03 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-10 11:19 - 2014-06-10 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-06-10 11:19 - 2014-06-10 11:19 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-06-10 11:13 - 2014-06-10 11:13 - 01110476 _____ () C:\Users\Markus ***\Desktop\7z920.exe
2014-06-10 10:28 - 2014-06-11 05:12 - 00000000 ____D () C:\Users\Markus ***\Desktop\Log dateien Macchiavelli 10.6
2014-06-10 10:16 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-10 10:15 - 2014-06-10 10:24 - 00000000 ____D () C:\AdwCleaner
2014-06-10 10:14 - 2014-06-10 10:14 - 01016261 _____ (Thisisu) C:\Users\Markus ***\Desktop\JRT.exe
2014-06-10 10:09 - 2014-06-10 10:09 - 01333465 _____ () C:\Users\Markus ***\Desktop\adwcleaner_3.212.exe
2014-06-10 09:28 - 2014-06-10 09:28 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ***\Downloads\DropboxInstaller (4).exe
2014-06-10 09:27 - 2014-06-10 09:27 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ***\Downloads\DropboxInstaller (3).exe
2014-06-10 09:15 - 2014-06-10 09:16 - 00000000 ____D () C:\Users\Markus ***\Desktop\Scans vom 10.6
2014-06-10 08:33 - 2014-06-10 08:33 - 00380416 _____ () C:\Users\Markus ***\Desktop\Gmer-19357.exe
2014-06-10 08:28 - 2014-06-14 09:32 - 00000000 ____D () C:\FRST
2014-06-10 08:26 - 2014-06-11 05:13 - 02081792 _____ (Farbar) C:\Users\Markus ***\Desktop\FRST64.exe
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus ***\Desktop\Defogger (1).exe
2014-06-10 08:18 - 2014-06-10 08:19 - 00000490 _____ () C:\Users\Markus ***\Downloads\defogger_disable.log
2014-06-10 08:18 - 2014-06-10 08:18 - 00000000 _____ () C:\Users\Markus ***\defogger_reenable
2014-06-10 08:17 - 2014-06-10 08:17 - 00050477 _____ () C:\Users\Markus ***\Downloads\Defogger.exe
2014-06-09 13:17 - 2014-06-14 09:13 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-09 13:17 - 2014-06-09 13:17 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-09 13:17 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-09 13:16 - 2014-06-09 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012 (5).exe
2014-06-09 12:04 - 2014-06-09 12:05 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012 (4).exe
2014-06-09 12:00 - 2014-06-09 12:00 - 00128904 _____ () C:\Users\Markus ***\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-09 11:53 - 2014-06-14 09:27 - 00001568 _____ () C:\Windows\setupact.log
2014-06-09 11:53 - 2014-06-11 08:00 - 00009412 _____ () C:\Windows\PFRO.log
2014-06-09 11:53 - 2014-06-09 11:53 - 00498384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-09 11:48 - 2014-06-09 11:48 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012 (3).exe
2014-06-09 11:31 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-09 11:30 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-09 11:17 - 2014-06-09 11:18 - 00000000 ____D () C:\Program Files (x86)\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00001198 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\Users\Markus ***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:15 - 2014-06-09 11:15 - 14936064 _____ (LastPass) C:\Users\Markus ***\Downloads\lastpass_x64 (1).exe
2014-06-09 10:40 - 2014-06-09 10:41 - 00000000 ____D () C:\Users\Markus ***\AppData\Local\PDFCreator
2014-06-09 09:52 - 2014-06-14 09:29 - 00000000 ___RD () C:\Users\Markus ***\Dropbox
2014-06-09 09:52 - 2014-06-09 09:52 - 00001059 _____ () C:\Users\Markus ***\Desktop\Dropbox.lnk
2014-06-09 09:51 - 2014-06-09 09:51 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ***\Downloads\DropboxInstaller (2).exe
2014-06-09 09:16 - 2014-06-09 09:17 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 08:54 - 2014-06-09 11:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Program Files\PDFCreator
2014-06-09 08:54 - 2014-04-17 19:36 - 00110776 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-06-09 08:48 - 2014-06-09 08:49 - 25055960 _____ (pdfforge ) C:\Users\Markus ***\Downloads\PDFCreator-1_9_3-setup.exe
2014-06-08 13:11 - 2014-06-09 10:03 - 00000000 ____D () C:\Users\Markus ***\Desktop\Mueti Teneriffa 2014
2014-06-01 09:40 - 2014-06-01 09:40 - 00000000 ____H () C:\Users\Markus ***\Documents\Default.rdp
2014-05-28 07:10 - 2014-06-14 09:29 - 00000000 ____D () C:\Users\Markus ***\AppData\Roaming\DropboxMaster
2014-05-28 07:10 - 2014-06-09 09:52 - 00000000 ____D () C:\Users\Markus ***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-28 07:06 - 2014-06-09 09:52 - 00000692 _____ () C:\Windows\wininit.ini
2014-05-28 07:06 - 2014-05-28 07:06 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ***\Downloads\DropboxInstaller (1).exe
2014-05-28 07:05 - 2014-06-14 09:29 - 00000000 ____D () C:\Users\Markus ***\AppData\Roaming\Dropbox
2014-05-28 07:05 - 2014-05-28 07:05 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ***\Downloads\DropboxInstaller.exe
2014-05-27 08:42 - 2014-05-27 08:42 - 00000000 ____D () C:\Analytics
2014-05-27 08:41 - 2014-05-27 08:41 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-05-26 09:58 - 2014-05-26 09:59 - 14936064 _____ (LastPass) C:\Users\Markus ***\Downloads\lastpass_x64.exe
2014-05-24 00:03 - 2014-05-24 00:03 - 00000731 _____ () C:\Users\Markus ***\Downloads\vcard-MarcelR-Saluz.vcf
2014-05-23 09:17 - 2014-06-09 10:43 - 00000000 ____D () C:\Users\Markus ***\Desktop\Ferien Portugal
2014-05-22 23:16 - 2014-05-22 23:16 - 00000000 ____D () C:\Windows\TEMPDIR
2014-05-22 10:29 - 2014-05-22 10:29 - 00000000 ____D () C:\Users\Küde\AppData\Roaming\com.wd.WDMyCloud
2014-05-21 17:55 - 2014-06-14 09:27 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-05-20 08:43 - 2014-05-20 08:43 - 00001218 _____ () C:\Users\Markus ***\Desktop\WD Quick View.lnk
2014-05-20 08:41 - 2014-05-20 08:41 - 04398333 _____ () C:\Users\Markus ***\Downloads\WD_Quick_View_Setup_for_Windows.zip
2014-05-20 08:40 - 2014-05-20 08:40 - 00001172 _____ () C:\Users\Markus ***\Desktop\WD SmartWare.lnk
2014-05-20 08:17 - 2014-05-20 08:18 - 37257919 _____ () C:\Users\Markus ***\Downloads\SmartWare_Windows_Upgrader (1).zip
2014-05-20 08:08 - 2014-05-20 08:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 08:07 - 2014-05-20 08:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 08:07 - 2014-05-20 08:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ***\Downloads\chromeinstall-7u55.exe
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ***\Downloads\chromeinstall-7u55 (1).exe
2014-05-18 22:28 - 2014-05-18 22:28 - 00013312 ___SH () C:\Users\Markus ***\Downloads\Thumbs.db
2014-05-18 22:17 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ***\AppData\Local\Western_Digital_Technolog
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-05-18 22:14 - 2014-05-18 22:14 - 37257919 _____ () C:\Users\Markus ***\Downloads\SmartWare_Windows_Upgrader.zip
2014-05-16 23:05 - 2014-05-18 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-05-16 23:05 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-05-16 23:05 - 2014-05-16 23:06 - 00000000 ____D () C:\Users\Markus ***\AppData\Roaming\com.wd.WDMyCloud
2014-05-16 23:05 - 2014-05-16 23:05 - 00001157 _____ () C:\Users\Public\Desktop\WD My Cloud.lnk
2014-05-16 23:04 - 2014-05-18 22:15 - 00000000 ____D () C:\ProgramData\Western Digital
2014-05-16 23:04 - 2014-05-16 23:04 - 00000204 _____ () C:\Users\Markus ***\Desktop\Lerncenter WD My Cloud.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000156 _____ () C:\Users\Markus ***\Desktop\WD My Cloud – Öffentliche Freigabe.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000152 _____ () C:\Users\Markus ***\Desktop\WD My Cloud-Dashboard.url
2014-05-16 23:00 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ***\AppData\Local\Western Digital
2014-05-16 22:59 - 2014-05-16 23:00 - 71601392 _____ () C:\Users\Markus ***\Downloads\mc_windows_setup (1).exe
2014-05-16 22:58 - 2014-05-16 22:59 - 71601392 _____ () C:\Users\Markus ***\Downloads\mc_windows_setup.exe
2014-05-15 23:58 - 2014-05-15 23:58 - 09518328 _____ () C:\Users\Markus ***\Downloads\avira_secure_backup_int.exe

==================== One Month Modified Files and Folders =======

2014-06-14 09:34 - 2014-06-14 09:32 - 00020265 _____ () C:\Users\Markus ***\Desktop\FRST.txt
2014-06-14 09:34 - 2011-02-11 19:52 - 00000000 ____D () C:\Users\Markus ***\AppData\Local\Temp
2014-06-14 09:32 - 2014-06-10 08:28 - 00000000 ____D () C:\FRST
2014-06-14 09:30 - 2010-11-17 03:10 - 01340460 _____ () C:\Windows\WindowsUpdate.log
2014-06-14 09:29 - 2014-06-09 09:52 - 00000000 ___RD () C:\Users\Markus ***\Dropbox
2014-06-14 09:29 - 2014-05-28 07:10 - 00000000 ____D () C:\Users\Markus ***\AppData\Roaming\DropboxMaster
2014-06-14 09:29 - 2014-05-28 07:05 - 00000000 ____D () C:\Users\Markus ***\AppData\Roaming\Dropbox
2014-06-14 09:27 - 2014-06-09 11:53 - 00001568 _____ () C:\Windows\setupact.log
2014-06-14 09:27 - 2014-05-21 17:55 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-06-14 09:27 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-14 09:13 - 2014-06-09 13:17 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-14 09:11 - 2014-06-14 09:11 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-06-14 08:35 - 2013-12-15 14:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-13 23:22 - 2009-07-14 06:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-13 23:22 - 2009-07-14 06:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-13 21:07 - 2013-04-19 09:35 - 00000000 ____D () C:\Users\Küde\AppData\Local\temp
2014-06-11 17:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-11 08:00 - 2014-06-09 11:53 - 00009412 _____ () C:\Windows\PFRO.log
2014-06-11 07:57 - 2013-08-15 02:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-11 07:55 - 2011-02-12 11:56 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-11 07:54 - 2011-02-11 22:34 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-11 07:53 - 2014-05-07 16:43 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-11 05:25 - 2014-06-11 05:25 - 00000000 ____D () C:\Users\Markus ***\Desktop\Log dateien Macchiavelli 11.6
2014-06-11 05:14 - 2013-04-19 09:35 - 00000000 ____D () C:\Users\Internetdummy\AppData\Local\temp
2014-06-11 05:13 - 2014-06-11 05:13 - 00000000 ____D () C:\Users\Markus ***\Desktop\FRST-OlderVersion
2014-06-11 05:13 - 2014-06-10 08:26 - 02081792 _____ (Farbar) C:\Users\Markus ***\Desktop\FRST64.exe
2014-06-11 05:12 - 2014-06-10 10:28 - 00000000 ____D () C:\Users\Markus ***\Desktop\Log dateien Macchiavelli 10.6
2014-06-11 05:05 - 2011-03-12 11:11 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-06-10 11:19 - 2014-06-10 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-06-10 11:19 - 2014-06-10 11:19 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-06-10 11:13 - 2014-06-10 11:13 - 01110476 _____ () C:\Users\Markus ***\Desktop\7z920.exe
2014-06-10 10:30 - 2013-04-19 09:37 - 00000000 ____D () C:\Windows\ERUNT
2014-06-10 10:24 - 2014-06-10 10:15 - 00000000 ____D () C:\AdwCleaner
2014-06-10 10:14 - 2014-06-10 10:14 - 01016261 _____ (Thisisu) C:\Users\Markus ***\Desktop\JRT.exe
2014-06-10 10:09 - 2014-06-10 10:09 - 01333465 _____ () C:\Users\Markus ***\Desktop\adwcleaner_3.212.exe
2014-06-10 09:28 - 2014-06-10 09:28 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ***\Downloads\DropboxInstaller (4).exe
2014-06-10 09:27 - 2014-06-10 09:27 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ***\Downloads\DropboxInstaller (3).exe
2014-06-10 09:16 - 2014-06-10 09:15 - 00000000 ____D () C:\Users\Markus ***\Desktop\Scans vom 10.6
2014-06-10 08:33 - 2014-06-10 08:33 - 00380416 _____ () C:\Users\Markus ***\Desktop\Gmer-19357.exe
2014-06-10 08:20 - 2014-06-10 08:20 - 00050477 _____ () C:\Users\Markus ***\Desktop\Defogger (1).exe
2014-06-10 08:19 - 2014-06-10 08:18 - 00000490 _____ () C:\Users\Markus ***\Downloads\defogger_disable.log
2014-06-10 08:18 - 2014-06-10 08:18 - 00000000 _____ () C:\Users\Markus ***\defogger_reenable
2014-06-10 08:18 - 2011-02-11 19:52 - 00000000 ____D () C:\Users\Markus ***
2014-06-10 08:17 - 2014-06-10 08:17 - 00050477 _____ () C:\Users\Markus ***\Downloads\Defogger.exe
2014-06-09 13:17 - 2014-06-09 13:17 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-09 13:17 - 2014-06-09 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-09 13:16 - 2014-06-09 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012 (5).exe
2014-06-09 12:05 - 2014-06-09 12:04 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012 (4).exe
2014-06-09 12:00 - 2014-06-09 12:00 - 00128904 _____ () C:\Users\Markus ***\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00498384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-09 11:53 - 2014-06-09 11:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-09 11:48 - 2014-06-09 11:48 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012 (3).exe
2014-06-09 11:31 - 2014-06-09 11:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-09 11:31 - 2014-06-09 11:30 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-09 11:18 - 2014-06-09 11:17 - 00000000 ____D () C:\Program Files (x86)\LastPass
2014-06-09 11:18 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:17 - 2014-06-09 11:17 - 00001198 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\Users\Markus ***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2014-06-09 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-06-09 11:17 - 2011-02-24 01:39 - 00000000 ___RD () C:\Users\Internetdummy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:17 - 2011-02-11 23:58 - 00000000 ___RD () C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 11:15 - 2014-06-09 11:15 - 14936064 _____ (LastPass) C:\Users\Markus ***\Downloads\lastpass_x64 (1).exe
2014-06-09 11:14 - 2014-06-09 08:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-09 10:43 - 2014-05-23 09:17 - 00000000 ____D () C:\Users\Markus ***\Desktop\Ferien Portugal
2014-06-09 10:41 - 2014-06-09 10:40 - 00000000 ____D () C:\Users\Markus ***\AppData\Local\PDFCreator
2014-06-09 10:03 - 2014-06-08 13:11 - 00000000 ____D () C:\Users\Markus ***\Desktop\Mueti Teneriffa 2014
2014-06-09 09:52 - 2014-06-09 09:52 - 00001059 _____ () C:\Users\Markus ***\Desktop\Dropbox.lnk
2014-06-09 09:52 - 2014-05-28 07:10 - 00000000 ____D () C:\Users\Markus ***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-09 09:52 - 2014-05-28 07:06 - 00000692 _____ () C:\Windows\wininit.ini
2014-06-09 09:52 - 2011-02-11 20:00 - 00000000 ___RD () C:\Users\Markus ***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-09 09:51 - 2014-06-09 09:51 - 00318872 _____ (Dropbox, Inc.) C:\Users\Markus ***\Downloads\DropboxInstaller (2).exe
2014-06-09 09:17 - 2014-06-09 09:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Markus ***\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 08:54 - 2014-06-09 08:54 - 00000000 ____D () C:\Program Files\PDFCreator
2014-06-09 08:49 - 2014-06-09 08:48 - 25055960 _____ (pdfforge ) C:\Users\Markus ***\Downloads\PDFCreator-1_9_3-setup.exe
2014-06-09 08:47 - 2012-01-16 12:03 - 00000000 ____D () C:\Users\Markus ***\Desktop\Infos Ferien Teneriffa
2014-06-08 11:13 - 2014-06-11 05:03 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-11 05:03 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 09:52 - 2010-11-17 03:50 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-06-07 09:52 - 2010-11-17 03:50 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-06-07 09:52 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-07 07:15 - 2011-03-18 22:39 - 00000000 ____D () C:\ProgramData\Lx_cats
2014-06-05 14:02 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-01 09:40 - 2014-06-01 09:40 - 00000000 ____H () C:\Users\Markus ***\Documents\Default.rdp
2014-05-30 17:42 - 2013-02-18 23:42 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-05-30 12:21 - 2014-06-11 05:03 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 12:18 - 2014-01-28 00:53 - 00013954 _____ () C:\Users\Markus ***\Desktop\Telefonliste MA AURORA.xlsx
2014-05-30 12:02 - 2014-06-11 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 12:02 - 2014-06-11 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 11:45 - 2014-06-11 05:03 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 11:39 - 2014-06-11 05:03 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 11:39 - 2014-06-11 05:03 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 11:38 - 2014-06-11 05:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 11:28 - 2014-06-11 05:03 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 11:27 - 2014-06-11 05:03 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 11:24 - 2014-06-11 05:03 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 11:21 - 2014-06-11 05:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 11:21 - 2014-06-11 05:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 11:20 - 2014-06-11 05:03 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-11 05:04 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-30 11:11 - 2014-06-11 05:03 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 11:08 - 2014-06-11 05:03 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-11 05:03 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 11:02 - 2014-06-11 05:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-30 10:55 - 2014-06-11 05:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:49 - 2014-06-11 05:03 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:46 - 2014-06-11 05:03 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-11 05:03 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-30 10:44 - 2014-06-11 05:03 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-11 05:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-30 10:42 - 2014-06-11 05:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-11 05:04 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-11 05:03 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 10:34 - 2014-06-11 05:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-30 10:33 - 2014-06-11 05:03 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-30 10:30 - 2014-06-11 05:03 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-30 10:29 - 2014-06-11 05:03 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 10:28 - 2014-06-11 05:03 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-30 10:27 - 2014-06-11 05:04 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-30 10:24 - 2014-06-11 05:03 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 10:23 - 2014-06-11 05:03 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-11 05:04 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-30 10:10 - 2014-06-11 05:04 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-11 05:03 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-30 10:04 - 2014-06-11 05:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-11 05:03 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-11 05:03 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-11 05:03 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:54 - 2014-06-11 05:04 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-30 09:50 - 2014-06-11 05:03 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-11 05:04 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-11 05:03 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-11 05:03 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-11 05:04 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-11 05:03 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-11 05:04 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-11 05:03 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-11 05:03 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-30 08:51 - 2013-09-11 17:53 - 00000000 ____D () C:\Users\Markus ***\Desktop\Unterlagen Liquidation für Mario
2014-05-29 09:13 - 2011-02-11 20:28 - 00000000 ____D () C:\Users\Markus ***\Documents\Kundennummern und Zugangscodes
2014-05-28 07:06 - 2014-05-28 07:06 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ***\Downloads\DropboxInstaller (1).exe
2014-05-28 07:05 - 2014-05-28 07:05 - 00318776 _____ (Dropbox, Inc.) C:\Users\Markus ***\Downloads\DropboxInstaller.exe
2014-05-27 08:42 - 2014-05-27 08:42 - 00000000 ____D () C:\Analytics
2014-05-27 08:41 - 2014-05-27 08:41 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-05-26 09:59 - 2014-05-26 09:58 - 14936064 _____ (LastPass) C:\Users\Markus ***\Downloads\lastpass_x64.exe
2014-05-24 00:03 - 2014-05-24 00:03 - 00000731 _____ () C:\Users\Markus ***\Downloads\vcard-MarcelR-Saluz.vcf
2014-05-22 23:16 - 2014-05-22 23:16 - 00000000 ____D () C:\Windows\TEMPDIR
2014-05-22 10:29 - 2014-05-22 10:29 - 00000000 ____D () C:\Users\Küde\AppData\Roaming\com.wd.WDMyCloud
2014-05-20 08:43 - 2014-05-20 08:43 - 00001218 _____ () C:\Users\Markus ***\Desktop\WD Quick View.lnk
2014-05-20 08:41 - 2014-05-20 08:41 - 04398333 _____ () C:\Users\Markus ***\Downloads\WD_Quick_View_Setup_for_Windows.zip
2014-05-20 08:40 - 2014-05-20 08:40 - 00001172 _____ () C:\Users\Markus ***\Desktop\WD SmartWare.lnk
2014-05-20 08:18 - 2014-05-20 08:17 - 37257919 _____ () C:\Users\Markus ***\Downloads\SmartWare_Windows_Upgrader (1).zip
2014-05-20 08:08 - 2014-05-20 08:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 08:07 - 2014-05-20 08:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 08:07 - 2014-05-20 08:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 08:07 - 2014-05-20 08:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 08:07 - 2013-02-18 19:24 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ***\Downloads\chromeinstall-7u55.exe
2014-05-20 08:04 - 2014-05-20 08:04 - 00921512 _____ (Oracle Corporation) C:\Users\Markus ***\Downloads\chromeinstall-7u55 (1).exe
2014-05-18 22:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-18 22:28 - 2014-05-18 22:28 - 00013312 ___SH () C:\Users\Markus ***\Downloads\Thumbs.db
2014-05-18 22:21 - 2013-04-17 07:48 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-18 22:17 - 2014-05-18 22:17 - 00000000 ____D () C:\Users\Markus ***\AppData\Local\Western_Digital_Technolog
2014-05-18 22:17 - 2014-05-16 23:00 - 00000000 ____D () C:\Users\Markus ***\AppData\Local\Western Digital
2014-05-18 22:16 - 2014-05-16 23:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Western Digital
2014-05-18 22:15 - 2014-05-18 22:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-05-18 22:15 - 2014-05-16 23:05 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-05-18 22:15 - 2014-05-16 23:04 - 00000000 ____D () C:\ProgramData\Western Digital
2014-05-18 22:15 - 2013-03-15 00:20 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-18 22:14 - 2014-05-18 22:14 - 37257919 _____ () C:\Users\Markus ***\Downloads\SmartWare_Windows_Upgrader.zip
2014-05-16 23:06 - 2014-05-16 23:05 - 00000000 ____D () C:\Users\Markus ***\AppData\Roaming\com.wd.WDMyCloud
2014-05-16 23:05 - 2014-05-16 23:05 - 00001157 _____ () C:\Users\Public\Desktop\WD My Cloud.lnk
2014-05-16 23:04 - 2014-05-16 23:04 - 00000204 _____ () C:\Users\Markus ***\Desktop\Lerncenter WD My Cloud.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000156 _____ () C:\Users\Markus ***\Desktop\WD My Cloud – Öffentliche Freigabe.url
2014-05-16 23:04 - 2014-05-16 23:04 - 00000152 _____ () C:\Users\Markus ***\Desktop\WD My Cloud-Dashboard.url
2014-05-16 23:00 - 2014-05-16 22:59 - 71601392 _____ () C:\Users\Markus ***\Downloads\mc_windows_setup (1).exe
2014-05-16 22:59 - 2014-05-16 22:58 - 71601392 _____ () C:\Users\Markus ***\Downloads\mc_windows_setup.exe
2014-05-16 08:30 - 2011-02-16 00:39 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-16 00:17 - 2011-02-11 23:39 - 00000000 ___DC () C:\Users\Markus ***\AppData\Local\MigWiz
2014-05-15 23:58 - 2014-05-15 23:58 - 09518328 _____ () C:\Users\Markus ***\Downloads\avira_secure_backup_int.exe
2014-05-15 11:53 - 2011-02-11 23:58 - 00000000 ___RD () C:\Users\Küde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 09:05 - 2011-02-11 20:00 - 00000000 ___RD () C:\Users\Markus ***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

Some content of TEMP:
====================
C:\Users\Küde\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ***\AppData\Local\Temp\avgnt.exe
C:\Users\Markus ***\AppData\Local\Temp\Avira Secure Backup.exe
C:\Users\Markus ***\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpztyla6.dll
C:\Users\Markus ***\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Markus ***\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Markus ***\AppData\Local\Temp\Quarantine.exe
C:\Users\Markus ***\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Markus ***\AppData\Local\Temp\SDShelEx-x64.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-09 13:58

==================== End Of Log ============================
         

--- --- ---


und Add.Txt:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-06-2014
Ran by Markus *** at 2014-06-14 09:35:12
Running from C:\Users\Markus ***\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
ABBYY Business Card Reader 2.0 (HKLM-x32\...\{BC200000-0001-0000-0000-074957833700}) (Version: 2.0.55 - ABBYY)
ABBYY FineReader 11 (HKLM-x32\...\{F11000FE-0010-0000-0000-074957833700}) (Version: 11.11.194 - ABBYY Production LLC)
ABBYY PDF Transformer+ (HKLM\...\{FA400000-0001-6400-0000-074957833700}) (Version: 4.1.159 - ABBYY Production LLC)
Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.68 - NewTech Infosystems)
Acer Crystal Eye webcam Ver:1.1.192.810 (HKLM-x32\...\{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}) (Version: 1.1.192.810 - Chicony Electronics Co.,Ltd.)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3005 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0423.2010 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated)
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{DD89CE29-BC88-40C6-A845-E2548682C5D6}) (Version: 1.9.17.06019 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.9.17.06019 - Alcor Micro Corp.) Hidden
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros)
ATI Catalyst Install Manager (HKLM\...\{75FDB05A-C1C2-CD17-35CE-3C1A454CC79F}) (Version: 3.0.778.0 - ATI Technologies, Inc.)
Avery Wizard 4.0 (HKLM-x32\...\{F5D84887-8A6F-4993-8560-B3AA44CB620D}) (Version: 4.0.201 - Avery)
Avira (HKLM-x32\...\{70a79d1f-686d-4d5c-962b-07aa1294eae0}) (Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG) Hidden
Avira Internet Security Suite (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.672 - Avira)
Backup Manager Basic (x32 Version: 2.0.0.68 - NewTech Infosystems) Hidden
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 15.0.7.1 - Broadcom Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0825.2205.37769 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help English (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help French (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help German (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0825.2204.37769 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0825.2205.37769 - ATI) Hidden
ccc-utility64 (Version: 2010.0825.2205.37769 - ATI) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3814.50 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.3814.50 - CyberLink Corp.) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{CA75CBF9-B078-47CB-ABA3-74EFD4FC9A43}) (Version:  - Microsoft)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.3 - Dropbox, Inc.)
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version:  - DVD Shrink)
DVDStyler v2.7.2 (HKLM-x32\...\DVDStyler_is1) (Version:  - )
Elevated Installer (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
FileAlyzer 2 (HKLM-x32\...\{29D3773E-54F4-23C2-D523-236A4453B845}_is1) (Version: 2.0.0.10 - Safer Networking Limited)
Free Disc Burner version 3.0.7.1206 (HKLM-x32\...\Free Disc Burner_is1) (Version:  - DVDVideoSoft Ltd.)
Free MP4 Video Converter version 5.0.20.1031 (HKLM-x32\...\Free MP4 Video Converter_is1) (Version: 5.0.20.1031 - DVDVideoSoft Ltd.)
Free Studio version 5.9.0.1212 (HKLM-x32\...\Free Studio_is1) (Version: 5.9.0.1212 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.1.40.1031 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.1.40.1031 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.10.11.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Ltd.)
Garmin Express (HKLM-x32\...\{9471d6bd-67a9-40f6-a420-2ae4f08ef003}) (Version: 2.3.14.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.3.14.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin WebUpdater (HKLM-x32\...\{AE1EC58E-B2AC-4959-A4C2-C38202A25239}) (Version: 2.5.6 - Garmin Ltd or its subsidiaries)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated)
IncrediBackup (x32 Version: 1.0.0.1039 - IncrediMail) Hidden
IncrediMail (x32 Version: 6.3.9.5274 - IncrediMail) Hidden
IncrediMail 2.0 (HKLM-x32\...\IncrediMail) (Version: 6.3.9.5274 - IncrediMail Ltd.)
IncrediMail Protection Center (HKLM-x32\...\Protection Center) (Version: 6001076 - IncrediMail Ltd.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1002 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.6 - Intel)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Kochtopf Easy (HKLM-x32\...\{FF8FB99F-1C60-4220-976B-4940D39F7941}) (Version: 14.11.2006 - Carosoft, 8733 Eschenbach)
LastPass (Nur deinstallieren) (HKLM-x32\...\LastPass) (Version:  - LastPass)
Lexmark  (HKLM-x32\...\{D2C5E510-BE6D-42CC-9F61-E4F939078474}) (Version: 1.0.0.0 - )
Lexmark Pro700 Series (HKLM\...\Lexmark Pro700 Series) (Version:  - Lexmark International, Inc.)
Lexmark Tools for Office (HKLM-x32\...\{10812DE7-2E57-4740-B226-6B3BE34AF9D7}) (Version: 1.41.0.0 - )
LibreOffice 4.2.4.2 (HKLM-x32\...\{6B4977CB-5B9F-4B24-8310-3BA527A8AF22}) (Version: 4.2.4.2 - The Document Foundation)
LoiLoScope 2 (HKLM-x32\...\{CAB75FFC-2377-4B95-A8FA-C9234B812A92}_is1) (Version: 2.5.3.2 - LoiLo inc)
LoiLoScope Herunterladen (HKLM-x32\...\{C2A254F4-AC74-482F-8F09-DB2843AC2AAE}_is1) (Version: 2.0 - LoiLo inc)
LUMIX Map Tool (HKLM-x32\...\InstallShield_{7DCF5B1D-79C2-4F24-9746-511436EBC6B4}) (Version: 1.1.0 - Panasonic Corporation)
LUMIX Map Tool (x32 Version: 1.1.0 - Panasonic Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.145.0 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (Version: 2.3.145.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSVC80_x64 (Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86 (x32 Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.9.3 - pdfforge)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - Ihr Firmenname) Hidden
PHOTOfunSTUDIO 9.1 PE (HKLM-x32\...\{C13FE7DE-D34D-48CC-9FA3-8DB9A3621B98}) (Version: 9.01.709 - Panasonic Corporation)
PowerDirector (HKLM-x32\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version:  - )
PowerProducer (HKLM-x32\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version:  - )
Private Tax 2012 2.0 (HKLM-x32\...\6753-7911-9438-6061) (Version: 2.0 - Information Factory AG)
Private Tax 2013 1.4.0 (HKLM-x32\...\0579-4231-5684-8562) (Version: 1.4.0 - Information Factory AG)
Protection Center (x32 Version: 6.0.0.1076 - IncrediMail) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7058 - Realtek Semiconductor Corp.)
Secunia PSI (3.0.0.6005) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.6005 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.6.0 - Synaptics Incorporated)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4410.1 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.2160.11 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version:  - Microsoft)
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
WavePurity (HKLM-x32\...\WavePurity) (Version:  - )
WD My Cloud (HKLM\...\{8F19C800-80A5-4636-B560-39A58112D45B}) (Version: 1.0.4.37 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{9A265E7E-5602-44DB-8B4D-A25C58D02489}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{0CADB637-714E-4F47-83C7-F11FEFC930D6}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM-x32\...\{9af08980-8d36-4304-a8d0-53dc0c7d93a5}) (Version: 2.4.0.39 - Western Digital Technologies, Inc.)
WebCam (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.54.007 - Sonix)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3004 - Acer Incorporated)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows-Treiberpaket - ATI Technologies Inc. (amdkmdap) Display  (06/13/2011 8.840.7.4000) (HKLM\...\1DE0DA68FB9DE6759FF33A74F6DF5523389FA513) (Version: 06/13/2011 8.840.7.4000 - ATI Technologies Inc.)
Windows-Treiberpaket - Broadcom (k57nd60a) Net  (10/15/2012 15.6.0.2) (HKLM\...\04AD368CB9CF50B30DB1552B0C6653E2EFFC7966) (Version: 10/15/2012 15.6.0.2 - Broadcom)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\03558EE026C7D1019B4A138DD4B58B8AE39211C4) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\BF1AD0105EBDCA6E730BE93DE583343339830A7A) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\CAC45647A959F237CE25C052FDB9A4A914C34830) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Intel USB  (07/25/2013 9.1.9.1005) (HKLM\...\A86AAC18EC59E9369A037083AC25A97B89713EC8) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows-Treiberpaket - Realtek Semiconductor Corp. HD Audio Driver (10/07/2013 6.0.1.7058) (HKLM\...\DE7597D60A9A5CE6DE9AAA75BF05E6A6722AE298) (Version: 10/07/2013 6.0.1.7058 - Realtek Semiconductor Corp.)
WOT für Internet Explorer (HKLM\...\{DCAEC601-735C-41AE-B84F-D792F09FB7D1}) (Version: 12.8.2.0 - WOT Services Oy)

==================== Restore Points  =========================

25-05-2014 11:31:03 Geplanter Prüfpunkt
01-06-2014 16:01:36 Geplanter Prüfpunkt
09-06-2014 08:59:30 Removed Bonjour
09-06-2014 09:00:25 Removed Bonjour-Druckdienste
11-06-2014 03:05:21 TuneUp Utilities 2014 wird entfernt
11-06-2014 03:06:58 TuneUp Utilities 2014 (de-DE) wird entfernt
11-06-2014 05:52:15 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-04-15 00:25 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {07FE6F92-D444-42C0-889F-68C95941C05F} - System32\Tasks\launchspotflux => C:\Program Files (x86)\spotflux\.\spotflux.exe
Task: {0A1F5F73-36C4-4F05-93CB-2712CE5C6598} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: {30652F9D-91E4-4C1F-9F33-BF0A4710BD9F} - System32\Tasks\{206A70D1-01F2-4196-9221-000636522535} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-05-15] (Microsoft Corporation)
Task: {3F021A4B-D233-483E-BB52-D8F629426F17} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-09-04] (Microsoft)
Task: {3F541924-9B98-4CA8-B2D7-C486F018B83B} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {67F5CC37-E497-4647-9CF9-5E76CE6AEF97} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
Task: {6C7F0A50-412C-4B03-951E-ABBE5DC6F204} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {74674AC7-0F42-4191-B092-B0E4D39D9280} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {7F55709A-034E-4914-A27F-40CE690C591B} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3706524009-4250397638-3171320869-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {81D7756B-58DC-4B7F-9103-984D1AA7B320} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {850AFB24-18F3-45DD-A2EA-AE87484F849E} - System32\Tasks\FGRun => C:\Users\Markus
Task: {9637B875-BEC4-452E-B587-5F3D14DE8820} - System32\Tasks\Google Updater and Installer => C:\Users\Markus ***\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {983283BC-F494-4178-91F4-39E933087691} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3706524009-4250397638-3171320869-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {9C5F10B0-804B-4A4D-8857-64BD5409C01E} - System32\Tasks\Western Digital\SmartWare\____Volume_edd7a140_f1e6_11df_b892_806e6f6e6963__dropbox_c0de6ce1_5657_41e8_800c_858feb0a3768_dropbox_ => C:\Program Files (x86)\Western Digital\WD SmartWare\BackupTask.exe [2014-05-09] (Western Digital Technologies, Inc.)
Task: {9E0E5119-43FD-407D-BD05-1A59E915EEE6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: {A73C02F3-4334-41C1-8E95-D72E83DBC766} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation)
Task: {AC3F5984-5C73-4BDC-8EF7-075138133231} - System32\Tasks\{4E9B0226-A400-466C-A753-64E3F9F604E9} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-05-15] (Microsoft Corporation)
Task: {B82F9D1F-6BC9-435E-A1C8-41AEF458729A} - System32\Tasks\{969DD5E3-8FD4-4B20-BE2B-29A1165A141E} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-05-15] (Microsoft Corporation)
Task: {C76FB41A-69E8-4107-9CAC-83450B2DD022} - System32\Tasks\{E75F870D-0780-4A2A-AFDC-53CAC00B717E} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-05-15] (Microsoft Corporation)
Task: {CF84C6B6-AC15-463F-95C4-D94C94325191} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {EC68C63E-3DC5-4E8E-899B-4BC13A49C2F2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {F48A4817-33A4-4EE2-BC73-662FE8B7F715} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation)
Task: {FCF6100D-2F42-4507-9A1B-22DA1193953D} - System32\Tasks\{E2596B35-B99D-40DF-80DD-684E1D3224FA} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2014-05-15] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-03-18 22:10 - 2009-11-04 14:18 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxeedrpp.dll
2010-11-17 03:18 - 2010-11-17 03:18 - 00206208 _____ () C:\Windows\PLFSetI.exe
2013-12-16 08:12 - 2010-01-13 11:55 - 00030080 _____ () C:\Windows\snuvcdsm.exe
2010-06-29 00:20 - 2010-06-29 00:20 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-06-29 00:12 - 2010-06-29 00:12 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00138320 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-06-07 07:08 - 2014-05-05 10:37 - 00049744 _____ () C:\Users\Markus ***\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-06-14 09:28 - 2014-06-14 09:28 - 00043008 _____ () C:\Users\Markus ***\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpztyla6.dll
2014-05-28 07:10 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Markus ***\AppData\Roaming\Dropbox\bin\libcef.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/14/2014 09:28:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LManager.exe, Version: 4.0.14.854, Zeitstempel: 0x4c611672
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xf48
Startzeit der fehlerhaften Anwendung: 0xLManager.exe0
Pfad der fehlerhaften Anwendung: LManager.exe1
Pfad des fehlerhaften Moduls: LManager.exe2
Berichtskennung: LManager.exe3

Error: (06/14/2014 09:24:02 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (06/14/2014 09:24:02 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (06/14/2014 09:23:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x594
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/14/2014 09:23:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x538
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/14/2014 09:20:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x6a0
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/14/2014 09:20:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x6d0
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/14/2014 09:19:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x460
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/14/2014 09:19:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x138
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (06/14/2014 09:18:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x510
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3


System errors:
=============
Error: (06/14/2014 09:29:42 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/14/2014 09:29:28 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80070422

Error: (06/14/2014 09:28:14 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/14/2014 09:27:30 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (06/14/2014 09:27:17 AM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Net.Tcp-Listeneradapter" ist von folgendem Dienst abhängig: was. Dieser Dienst ist eventuell nicht installiert.

Error: (06/14/2014 09:27:17 AM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Net.Pipe-Listeneradapter" ist von folgendem Dienst abhängig: was. Dieser Dienst ist eventuell nicht installiert.

Error: (06/14/2014 09:27:17 AM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Net.Msmq-Listeneradapter" ist von folgendem Dienst abhängig: msmq. Dieser Dienst ist eventuell nicht installiert.

Error: (06/14/2014 09:23:45 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1068WDBackup{59484148-65C9-4467-A092-3F8380023772}

Error: (06/14/2014 09:23:45 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1068WDBackup{81213AB4-5937-4340-88CD-66B4BC80DF73}

Error: (06/14/2014 09:22:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================
Error: (06/14/2014 09:28:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: LManager.exe4.0.14.8544c611672unknown0.0.0.000000000c000000500000000f4801cf87a22d3a9422C:\Program Files (x86)\Launch Manager\LManager.exeunknown6e82b4ec-f395-11e3-9254-206a8a1c06e5

Error: (06/14/2014 09:24:02 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (06/14/2014 09:24:02 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (06/14/2014 09:23:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd59401cf87a18faf3330C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dlld6572f59-f394-11e3-857c-fec484cac48b

Error: (06/14/2014 09:23:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd53801cf87a17fec76bfC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dllc7afb6a9-f394-11e3-857c-fec484cac48b

Error: (06/14/2014 09:20:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd6a001cf87a123be6ed0C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll6a77149b-f394-11e3-893f-206a8a1c06e5

Error: (06/14/2014 09:20:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd6d001cf87a111ad5d1bC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll58614026-f394-11e3-893f-206a8a1c06e5

Error: (06/14/2014 09:19:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd46001cf87a0fe399e5eC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll44ed8169-f394-11e3-893f-206a8a1c06e5

Error: (06/14/2014 09:19:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd13801cf87a0ebfdb3e5C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll32b196ef-f394-11e3-893f-206a8a1c06e5

Error: (06/14/2014 09:18:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd51001cf87a0d98fcc86C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll2043af90-f394-11e3-893f-206a8a1c06e5


CodeIntegrity Errors:
===================================
  Date: 2014-02-08 08:25:44.964
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 08:25:44.792
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 01:40:37.359
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 01:40:37.094
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:58:46.384
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:58:46.212
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:49:05.878
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:49:05.628
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:19:16.318
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-07 11:19:16.147
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\athrx.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 41%
Total physical RAM: 3956.43 MB
Available physical RAM: 2315 MB
Total Pagefile: 7911.05 MB
Available Pagefile: 6092.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:685.35 GB) (Free:424.25 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: EDA0EDA0)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=685 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Liebe Grüsse und ein schönes Weekend
Markus

Malwarebytes Removal Tool: http://www.malwarebytes.org/mbam-clean.exe

Ausführen. Danach Malwarebytes neu installieren. Hat das geholfen?

Hallo Machiavelli,

ja das hat sogar sehr geholfen!

Mbam läuft wieder und ich bin sehr froh, wenn auch erstaunt, dass kein Befall gefunden wurde:

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 15.06.2014
Suchlauf-Zeit: 08:11:05
Logdatei: Mbam-Scan vom.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.06.15.02
Rootkit Datenbank: v2014.06.02.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Markus ***

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 355794
Verstrichene Zeit: 15 Min, 49 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)
         

Vielen Dank für deine Unterstützung und Geduld!

Herzliche Grüsse und die besten Wünsche für einen schönen Sonntag aus Zürich

Markus