Windows XP: Datei-Explorer stürzt ständig ab

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:00 on 10/06/2014 (Frank)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:09-06-2014 03
Ran by Frank (administrator) on TOWER on 10-06-2014 14:50:17
Running from D:\Tools
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Teruten) C:\WINDOWS\system32\FsUsbExService.Exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(Logitech Inc.) C:\Programme\Gemeinsame Dateien\LogiShrd\LVCOMSER\LVComSer.exe
(Logitech Inc.) C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe
(moka5, Inc.) C:\Programme\mokafive\Engine\bin\m5authd.exe
(Symantec Corporation) C:\Programme\Norton Management\Engine\3.2.2.12\ccsvchst.exe
(Symantec Corporation) C:\Programme\Norton 360 Premier Edition\Engine\21.3.0.12\n360.exe
(Prolific Technology Inc.) C:\WINDOWS\system32\IoctlSvc.exe
() C:\WINDOWS\system32\PSIService.exe
(SANDBOXIE L.T.D) C:\Programme\Sandboxie\SbieSvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\tcpsvcs.exe
(Microsoft Corporation) C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Programme\TeamViewer\Version9\TeamViewer_Service.exe
(TuneUp Software) C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
(Nero AG) C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
(Microsoft Corporation.) C:\Programme\Microsoft\BingBar\7.1.355.0\SeaPort.EXE
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Logitech Inc.) C:\Programme\Gemeinsame Dateien\LogiShrd\LVCOMSER\LVComSer.exe
(Symantec Corporation) C:\Programme\Norton 360 Premier Edition\Engine\21.3.0.12\n360.exe
(Symantec Corporation) C:\Programme\Norton Management\Engine\3.2.2.12\ccsvchst.exe
() C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Programme\HP\HP Software Update\hpwuschd2.exe
(Saitek plc) C:\Programme\Saitek plc\Saitek Gaming Extensions\SaiCnfig.exe
(Safer-Networking Ltd.) C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
(Microsoft Corporation) C:\Programme\Microsoft Office\Office14\MSOSYNC.EXE
(Microsoft Corporation) C:\Programme\Microsoft ActiveSync\wcescomm.exe
(Microsoft Corporation) C:\PROGRA~1\MI3AA1~1\rapimgr.exe
(Hewlett-Packard Co.) C:\Programme\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe
(Logitech Inc.) C:\Programme\Logitech\SetPoint\SetPoint.exe
(Logitech Inc.) C:\Programme\Gemeinsame Dateien\Logitech\KhalShared\KHALMNPR.exe
(Dropbox, Inc.) C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\Dropbox\bin\Dropbox.exe
(Hewlett-Packard Co.) C:\Programme\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicatorCom.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\plugin-container.exe
(Hewlett-Packard Co.) C:\Programme\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicator.exe
(Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
(Malwarebytes Corporation) C:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes Corporation) C:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Programme\ Malwarebytes Anti-Malware \mbam.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NeroFilterCheck] => C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe [570664 2008-05-28] (Nero AG)
HKLM\...\Run: [LogitechCommunicationsManager] => C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe [564496 2008-06-04] ()
HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SearchSettings] => C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe [1123720 2012-11-28] (Spigot, Inc.)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\windows\KHALMNPR.EXE [56080 2007-04-11] (Logitech Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [HP Software Update] => C:\Programme\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM\...\Run: [SaitekAutoConfigure] => C:\Programme\Saitek plc\Saitek Gaming Extensions\saicnfig.exe [40960 1999-08-20] (Saitek plc)
Winlogon\Notify\AtiExtEvent: C:\windows\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\S-1-5-21-854245398-583907252-839522115-1003\...\Run: [SpybotSD TeaTimer] => C:\Programme\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKU\S-1-5-21-854245398-583907252-839522115-1003\...\Run: [OfficeSyncProcess] => C:\Programme\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
HKU\S-1-5-21-854245398-583907252-839522115-1003\...\Run: [H/PC Connection Agent] => C:\Programme\Microsoft ActiveSync\wcescomm.exe [1289000 2006-11-13] (Microsoft Corporation)
HKU\S-1-5-21-854245398-583907252-839522115-1003\...\Run: [HP Officejet 4620 series (NET)] => C:\Programme\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-854245398-583907252-839522115-1003\...\Policies\Explorer: [NoDrives] 0x00000000
HKU\S-1-5-21-854245398-583907252-839522115-1003\...\Policies\Explorer: [NoSharedDocuments] 0x00000000
HKU\S-1-5-21-854245398-583907252-839522115-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [SpybotSD TeaTimer] => C:\Programme\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKU\S-1-5-21-854245398-583907252-839522115-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [OfficeSyncProcess] => C:\Programme\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
HKU\S-1-5-21-854245398-583907252-839522115-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [H/PC Connection Agent] => C:\Programme\Microsoft ActiveSync\wcescomm.exe [1289000 2006-11-13] (Microsoft Corporation)
HKU\S-1-5-21-854245398-583907252-839522115-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [HP Officejet 4620 series (NET)] => C:\Programme\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-854245398-583907252-839522115-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [NoDrives] 0x00000000
HKU\S-1-5-21-854245398-583907252-839522115-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [NoSharedDocuments] 0x00000000
HKU\S-1-5-21-854245398-583907252-839522115-1004\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe [152872 2008-01-22] (Nero AG)
HKU\S-1-5-21-854245398-583907252-839522115-1004\...\Run: [H/PC Connection Agent] => C:\Programme\Microsoft ActiveSync\wcescomm.exe [1289000 2006-11-13] (Microsoft Corporation)
HKU\S-1-5-21-854245398-583907252-839522115-1004\...\Run: [1&1_1&1 Office-Drive Manager] => C:\Programme\1&1\1&1 Office-Drive Manager\DAVSRV.EXE [964688 2011-08-03] (1&1 Internet AG)
HKU\S-1-5-21-854245398-583907252-839522115-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe [152872 2008-01-22] (Nero AG)
HKU\S-1-5-21-854245398-583907252-839522115-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [H/PC Connection Agent] => C:\Programme\Microsoft ActiveSync\wcescomm.exe [1289000 2006-11-13] (Microsoft Corporation)
HKU\S-1-5-21-854245398-583907252-839522115-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [1&1_1&1 Office-Drive Manager] => C:\Programme\1&1\1&1 Office-Drive Manager\DAVSRV.EXE [964688 2011-08-03] (1&1 Internet AG)
HKU\S-1-5-21-854245398-583907252-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [NeroHomeFirstStart] - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMFirstStart.exe [16680 2008-01-22] (Nero AG)
AppInit_DLLs: acaptuser32.dll => C:\windows\system32\acaptuser32.dll [112056 2009-12-21] (Adobe Systems Incorporated)
IFEO\mediabuilder.exe: [Debugger] "C:\Programme\TuneUp Utilities 2012\TUAutoReactivator32.exe"
IFEO\nxpowerlite.exe: [Debugger] "C:\Programme\TuneUp Utilities 2012\TUAutoReactivator32.exe"
IFEO\softwareupdate.exe: [Debugger] "C:\Programme\TuneUp Utilities 2012\TUAutoReactivator32.exe"
IFEO\sse.exe: [Debugger] "C:\Programme\TuneUp Utilities 2012\TUAutoReactivator32.exe"
IFEO\startcenter.exe: [Debugger] "C:\Programme\TuneUp Utilities 2012\TUAutoReactivator32.exe"
IFEO\trueimage.exe: [Debugger] "C:\Programme\TuneUp Utilities 2012\TUAutoReactivator32.exe"
IFEO\vmplayer.exe: [Debugger] "C:\Programme\TuneUp Utilities 2012\TUAutoReactivator32.exe"
Lsa: [Authentication Packages] msv1_0 relog_ap
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech SetPoint.lnk
ShortcutTarget: Logitech SetPoint.lnk -> C:\Programme\Logitech\SetPoint\SetPoint.exe (Logitech Inc.)
Startup: C:\Dokumente und Einstellungen\Frank\Startmenü\Programme\Autostart\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Dokumente und Einstellungen\Frank\Startmenü\Programme\Autostart\Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk -> C:\Programme\HP\HP Officejet 4620 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Dokumente und Einstellungen\Stefanie\Startmenü\Programme\Autostart\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ig
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKCU - YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Programme\YTD Toolbar\IE\6.6\ytdToolbarIE.dll (Spigot, Inc.)
URLSearchHook: HKCU - (No Name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} -  No File
URLSearchHook: HKCU - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Anwendungsdaten\DVDVideoSoftTB\prxtbDVD0.dll (ClientConnect Ltd.)
SearchScopes: HKCU - DefaultScope {3471218C-6416-4DB7-95A2-46D96C4C452B} URL = hxxp://www.google.de/search?source=ig&hl=de&rlz=1G1GGLQ_DEDE332&q={searchTerms}&meta=lr%3D&aq=f&oq=
SearchScopes: HKCU - {31CF9EBE-5755-4a1d-AC25-2834D952D9B4} URL = hxxp://search.pdfcreator-toolbar.org/search?p=Q&ts=ne&w={searchTerms}&csrc=search-field
SearchScopes: HKCU - {3471218C-6416-4DB7-95A2-46D96C4C452B} URL = hxxp://www.google.de/search?source=ig&hl=de&rlz=1G1GGLQ_DEDE332&q={searchTerms}&meta=lr%3D&aq=f&oq=
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=360&chn=retail&geo=DE&ver=21&locale=de_DE&gct=sb&qsrc=2869
SearchScopes: HKCU - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = 
SearchScopes: HKCU - {C5F9AF4F-61CF-47AB-BC5C-A6BE7387FC03} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Programme\Norton 360 Premier Edition\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO: DebugBar BHO - {69FC0024-10EB-480A-BBF2-3BF4E78E17B1} - C:\Programme\Core Services\DebugBar\DebugInfoBar.dll (Core Services)
BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Programme\Norton 360 Premier Edition\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Anwendungsdaten\DVDVideoSoftTB\prxtbDVD0.dll (ClientConnect Ltd.)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Programme\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Programme\YTD Toolbar\IE\6.6\ytdToolbarIE.dll (Spigot, Inc.)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - DebugBar - {3E1201F4-1707-409F-BB45-A5F192381DA0} - C:\Programme\Core Services\DebugBar\DebugToolBar.dll (Core Services)
Toolbar: HKLM - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Anwendungsdaten\DVDVideoSoftTB\prxtbDVD0.dll (ClientConnect Ltd.)
Toolbar: HKLM - YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Programme\YTD Toolbar\IE\6.6\ytdToolbarIE.dll (Spigot, Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Programme\Norton 360 Premier Edition\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Programme\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\windows\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\windows\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - No Name - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} -  No File
Toolbar: HKCU - DebugBar - {3E1201F4-1707-409F-BB45-A5F192381DA0} - C:\Programme\Core Services\DebugBar\DebugToolBar.dll (Core Services)
Toolbar: HKCU - DVDVideoSoftTB Toolbar - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Anwendungsdaten\DVDVideoSoftTB\prxtbDVD0.dll (ClientConnect Ltd.)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Programme\Norton 360 Premier Edition\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll [304128 2009-05-24] (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\Mozilla\Firefox\Profiles\u1x9lrnz.default-1381867009828
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Programme\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npOGAPlugin.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\Mozilla\Firefox\Profiles\u1x9lrnz.default-1381867009828\Extensions\staged [2014-06-10]
FF Extension: NoScript - C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\Mozilla\Firefox\Profiles\u1x9lrnz.default-1381867009828\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-10-23]
FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} [2014-05-11]
FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\{8545daff-ad1e-493f-a37e-eed1ac79682b} [2014-05-11]
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-05-11]
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} [2014-05-11]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ []
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2013-11-18]

========================== Services (Whitelisted) =================

S4 AAV UpdateService; C:\Programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S4 AcrSch2Svc; C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe [427288 2007-12-03] (Acronis)
S4 Application Updater; C:\Programme\Application Updater\ApplicationUpdater.exe [793600 2012-11-28] (Spigot, Inc.) [File not signed]
S2 BBSvc; C:\Programme\Microsoft\BingBar\7.1.355.0\BBSvc.exe [192792 2012-01-25] (Microsoft Corporation.)
R3 BBUpdate; C:\Programme\Microsoft\BingBar\7.1.355.0\SeaPort.exe [240408 2012-01-25] (Microsoft Corporation.)
S4 FirebirdServerMAGIXInstance; C:\Programme\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®) [File not signed]
S3 FLEXnet Licensing Service; C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [655624 2008-11-24] (Acresso Software Inc.)
R2 FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [233472 2013-02-05] (Teruten) [File not signed]
S2 gupdate1c950d0f2c8d53c; C:\Programme\Google\Update\GoogleUpdate.exe [133104 2008-11-29] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [133104 2008-11-29] (Google Inc.)
S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [136120 2011-02-08] (Google)
S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 JavaQuickStarterService; C:\Programme\Java\jre7\bin\jqs.exe [182696 2013-12-18] (Oracle Corporation)
R2 LVCOMSer; C:\Programme\Gemeinsame Dateien\LogiShrd\LVCOMSER\LVComSer.exe [186904 2008-05-20] (Logitech Inc.)
R2 LVPrcSrv; C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe [150040 2008-05-20] (Logitech Inc.)
R2 MBAMScheduler; C:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 MCLIENT; C:\Programme\Norton Management\Engine\3.2.2.12\ccSvcHst.exe [143928 2012-12-05] (Symantec Corporation)
S3 Microsoft SharePoint Workspace Audit Service; C:\Programme\Microsoft Office\Office14\GROOVE.EXE [30814400 2013-12-19] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [119408 2014-05-11] (Mozilla Foundation)
R2 MSSQL$JTLWAWI; C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S4 MSSQLServerADHelper; C:\Programme\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 N360; C:\Programme\Norton 360 Premier Edition\Engine\21.3.0.12\N360.exe [265040 2014-05-11] (Symantec Corporation)
S3 NBService; C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe [800040 2008-04-08] (Nero AG)
R3 NMIndexingService; C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe [275752 2008-01-22] (Nero AG)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [149352 2010-01-09] (Microsoft Corporation)
R3 osppsvc; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [4640000 2010-01-09] (Microsoft Corporation)
R2 PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [177704 2007-06-05] ()
R2 SbieSvc; C:\Programme\Sandboxie\SbieSvc.exe [72976 2011-10-12] (SANDBOXIE L.T.D)
S3 ServiceLayer; C:\Programme\PC Connectivity Solution\ServiceLayer.exe [732648 2012-12-19] (Nokia)
S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies)
R2 SQLBrowser; C:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe [238944 2010-12-10] (Microsoft Corporation)
R2 SQLWriter; C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe [86880 2010-12-10] (Microsoft Corporation)
R2 TeamViewer9; C:\Programme\TeamViewer\Version9\TeamViewer_Service.exe [4915040 2014-02-05] (TeamViewer GmbH)
S4 TryAndDecideService; C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe [498792 2007-12-03] ()
R2 TuneUp.UtilitiesSvc; C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe [1514304 2011-12-14] (TuneUp Software)
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
R2 m5authd; C:/Programme/mokafive/Engine/bin/m5authd.exe run [X]

==================== Drivers (Whitelisted) ====================

R2 ACEDRV09; C:\WINDOWS\system32\drivers\ACEDRV09.sys [110304 2010-05-07] (Protect Software GmbH)
R1 AmdK8; C:\windows\System32\DRIVERS\AmdK8.sys [36352 2005-03-09] (Advanced Micro Devices)
R3 AnyDVD; C:\windows\System32\Drivers\AnyDVD.sys [121464 2011-06-09] (SlySoft, Inc.)
R1 BHDrvx86; C:\Programme\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20140606.001\BHDrvx86.sys [1101616 2014-05-10] (Symantec Corporation)
S3 CCDECODE; C:\windows\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R1 ccSet_MCLIENT; C:\windows\system32\drivers\MCLIENT\0302020.00C\ccSetx86.sys [134304 2012-10-03] (Symantec Corporation)
R1 ccSet_N360; C:\windows\system32\drivers\N360\1503000.00C\ccSetx86.sys [127064 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Programme\Gemeinsame Dateien\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-11-22] (Symantec Corporation)
R3 ElbyCDFL; C:\windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.)
R1 ElbyCDIO; C:\windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
R3 EraserUtilRebootDrv; C:\Programme\Gemeinsame Dateien\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-11-22] (Symantec Corporation)
S3 FilterService; C:\windows\System32\DRIVERS\lvuvcflt.sys [23832 2008-05-20] (Logitech Inc.)
R3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [37344 2013-02-05] () [File not signed]
S3 HCF_MSFT; C:\windows\System32\DRIVERS\HCF_MSFT.sys [908352 2001-08-18] (Conexant)
R0 hotcore2; C:\windows\System32\drivers\hotcore2.sys [30808 2006-11-08] (Paragon Software Group) [File not signed]
R3 IDSxpx86; C:\Programme\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20140608.001\IDSxpx86.sys [383120 2014-05-09] (Symantec Corporation)
R3 LUsbFilt; C:\windows\System32\Drivers\LUsbFilt.Sys [28688 2007-04-11] (Logitech, Inc.)
R3 LVPr2Mon; C:\windows\System32\DRIVERS\LVPr2Mon.sys [25624 2008-05-20] ()
R3 LVUSBSta; C:\windows\System32\drivers\LVUSBSta.sys [41752 2008-05-20] (Logitech Inc.)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-06-10] (Malwarebytes Corporation)
R3 NAVENG; C:\Programme\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20140609.033\NAVENG.SYS [93272 2013-12-23] (Symantec Corporation)
R3 NAVEX15; C:\Programme\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20140609.033\NAVEX15.SYS [1612376 2013-12-23] (Symantec Corporation)
S3 NdisIP; C:\windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R0 nvata; C:\windows\System32\DRIVERS\nvata.sys [105344 2006-08-14] (NVIDIA Corporation)
S3 NVENETFD; C:\windows\System32\DRIVERS\NVENETFD.sys [57856 2006-07-11] (NVIDIA Corporation)
S3 nvnetbus; C:\windows\System32\DRIVERS\nvnetbus.sys [20480 2006-07-11] (NVIDIA Corporation)
R3 SbieDrv; C:\Programme\Sandboxie\SbieDrv.sys [131344 2011-10-12] (SANDBOXIE L.T.D)
R1 SCDEmu; C:\windows\system32\Drivers\SCDEmu.sys [59388 2010-04-12] (PowerISO Computing, Inc.) [File not signed]
S3 SONYPVU1; C:\windows\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation)
R3 SRTSP; C:\windows\System32\Drivers\N360\1503000.00C\SRTSP.SYS [664280 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\windows\system32\drivers\N360\1503000.00C\SRTSPX.SYS [32344 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\windows\System32\drivers\N360\1503000.00C\SYMDS.SYS [367704 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\windows\System32\drivers\N360\1503000.00C\SYMEFA.SYS [936152 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT.SYS [142936 2013-11-16] (Symantec Corporation)
R1 SymIRON; C:\windows\system32\drivers\N360\1503000.00C\Ironx86.SYS [206936 2013-09-27] (Symantec Corporation)
R1 SYMTDI; C:\windows\System32\Drivers\N360\1503000.00C\SYMTDI.SYS [423256 2014-02-18] (Symantec Corporation)
R3 tap0901; C:\windows\System32\DRIVERS\tap0901.sys [26624 2011-07-01] (The OpenVPN Project) [File not signed]
S3 tbhsd; C:\windows\System32\drivers\tbhsd.sys [39016 2012-08-20] (RapidSolution Software AG)
R0 tdrpman; C:\windows\System32\DRIVERS\tdrpman.sys [368480 2008-10-19] (Acronis)
S3 teamviewervpn; C:\windows\System32\DRIVERS\teamviewervpn.sys [25088 2008-01-25] (TeamViewer GmbH)
R2 tifsfilter; C:\windows\System32\DRIVERS\tifsfilt.sys [44384 2008-10-19] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys [10064 2011-11-08] (TuneUp Software)
R1 ui11drdr; C:\windows\System32\DRIVERS\ui11drdr.sys [148992 2011-08-03] (1&1 Internet AG) [File not signed]
S3 wceusbsh; C:\windows\System32\DRIVERS\wceusbsh.sys [28672 2006-11-06] (Microsoft Corporation)
U2 ccEvtMgr; 
U2 ccSetMgr; 
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 GMSIPCI; \??\G:\INSTALL\GMSIPCI.SYS [X]
S4 IntelIde; No ImagePath
U3 navapsvc; 
U3 SAVRT; 
U1 SAVRTPEL; 
U5 ScsiPort; C:\windows\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-10 14:50 - 2014-06-10 14:50 - 00000000 ____D () C:\FRST
2014-06-10 14:46 - 2014-06-10 14:46 - 00000000 _____ () C:\Dokumente und Einstellungen\Frank\defogger_reenable
2014-06-10 14:32 - 2014-06-10 14:33 - 00110296 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-10 14:31 - 2014-06-10 14:31 - 00000758 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-10 14:31 - 2014-06-10 14:31 - 00000000 ____D () C:\Programme\ Malwarebytes Anti-Malware 
2014-06-10 14:31 - 2014-06-10 14:31 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ Malwarebytes Anti-Malware 
2014-06-10 14:31 - 2014-05-12 07:26 - 00053208 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-06-10 14:31 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-06-05 19:09 - 2014-06-05 19:10 - 00000225 _____ () C:\windows\DHCPUPG.LOG
2014-06-05 19:09 - 2014-06-05 19:09 - 00000413 _____ () C:\windows\WINNT32.LOG
2014-05-31 21:59 - 2014-06-10 14:01 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\doublecmd
2014-05-31 21:59 - 2014-05-31 21:59 - 00000000 ____D () C:\Programme\Double Commander
2014-05-30 16:30 - 2014-05-30 16:31 - 00001931 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\SteuerSparErklärung 2014.lnk
2014-05-18 03:00 - 2014-05-18 03:00 - 00012557 _____ () C:\windows\KB946648.log
2014-05-17 22:21 - 2013-12-26 07:41 - 00184248 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\windows\system32\Drivers\ssudmdm.sys
2014-05-17 22:21 - 2013-12-26 07:41 - 00088632 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\windows\system32\Drivers\ssudbus.sys
2014-05-17 20:38 - 2014-05-07 17:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\windows\system32\secman.dll
2014-05-17 20:27 - 2014-05-17 20:27 - 00000777 _____ () C:\Dokumente und Einstellungen\NetworkService\Startmenü\Programme\Windows Media Player.lnk
2014-05-17 20:27 - 2014-05-17 20:27 - 00000236 _____ () C:\windows\DtcInstall.log
2014-05-17 20:26 - 2014-05-17 20:26 - 00000187 _____ () C:\windows\spupdsvc.log.1.log
2014-05-17 19:54 - 2013-08-21 06:31 - 01112288 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01007.dll
2014-05-17 19:54 - 2013-08-21 06:31 - 00581192 _____ (Microsoft Corporation) C:\windows\system32\WinUSBCoInstaller.dll
2014-05-17 19:52 - 2014-05-17 19:52 - 00000311 _____ () C:\windows\sessmgr.setup.log
2014-05-17 19:52 - 2014-05-17 19:52 - 00000173 _____ () C:\windows\cmsetacl.log
2014-05-17 19:51 - 2008-04-14 07:52 - 00081920 ____N (Microsoft Corporation) C:\windows\system32\ieencode.dll
2014-05-17 19:51 - 2008-04-14 07:52 - 00010752 ____N (Microsoft Corporation) C:\windows\system32\smtpapi.dll
2014-05-17 19:51 - 2008-04-14 07:52 - 00009728 ____N (Microsoft Corporation) C:\windows\system32\rwnh.dll
2014-05-17 19:50 - 2006-12-29 00:31 - 00019569 _____ () C:\windows\000001_.tmp
2014-05-17 19:45 - 2014-05-17 20:21 - 00132375 _____ () C:\windows\svcpack.log
2014-05-17 18:30 - 2014-06-10 12:56 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\DropboxMaster
2014-05-16 14:42 - 2014-05-16 14:42 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\DESIGNER
2014-05-11 15:56 - 2014-05-11 15:56 - 00000000 ____D () C:\Programme\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2014-06-10 14:51 - 2008-10-19 13:45 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temp
2014-06-10 14:50 - 2014-06-10 14:50 - 00000000 ____D () C:\FRST
2014-06-10 14:49 - 2010-10-07 22:55 - 00000418 ____H () C:\windows\Tasks\User_Feed_Synchronization-{ADC7B015-BBCA-4596-A5FA-67773950DA35}.job
2014-06-10 14:46 - 2014-06-10 14:46 - 00000000 _____ () C:\Dokumente und Einstellungen\Frank\defogger_reenable
2014-06-10 14:46 - 2008-10-19 13:45 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank
2014-06-10 14:36 - 2008-10-24 13:43 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\UseNeXT
2014-06-10 14:35 - 2012-04-07 17:10 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-06-10 14:34 - 2009-06-30 09:19 - 00001090 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-10 14:33 - 2014-06-10 14:32 - 00110296 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-10 14:31 - 2014-06-10 14:31 - 00000758 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-10 14:31 - 2014-06-10 14:31 - 00000000 ____D () C:\Programme\ Malwarebytes Anti-Malware 
2014-06-10 14:31 - 2014-06-10 14:31 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ Malwarebytes Anti-Malware 
2014-06-10 14:31 - 2009-07-11 14:44 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2014-06-10 14:31 - 2008-10-19 14:15 - 00000000 ____D () C:\Programme
2014-06-10 14:31 - 2008-10-19 14:15 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2014-06-10 14:09 - 2008-10-19 13:41 - 00031776 _____ () C:\windows\SchedLgU.Txt
2014-06-10 14:01 - 2014-05-31 21:59 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\doublecmd
2014-06-10 14:00 - 2014-03-27 21:23 - 00000456 _____ () C:\windows\Tasks\At4.job
2014-06-10 13:09 - 2010-12-26 14:31 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\vlc
2014-06-10 13:08 - 2008-11-05 06:46 - 00000069 _____ () C:\windows\NeroDigital.ini
2014-06-10 12:58 - 2010-04-29 20:47 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\Dropbox
2014-06-10 12:56 - 2014-05-17 18:30 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\DropboxMaster
2014-06-10 12:55 - 2004-08-04 14:00 - 00012598 _____ () C:\windows\system32\wpa.dbl
2014-06-10 12:54 - 2008-10-19 22:52 - 00000000 ____D () C:\Dokumente und Einstellungen\Stefanie\Lokale Einstellungen\Temp
2014-06-10 12:35 - 2008-10-19 13:23 - 01168778 _____ () C:\windows\WindowsUpdate.log
2014-06-10 12:30 - 2014-05-04 13:25 - 00000000 ____D () C:\Dokumente und Einstellungen\Stefanie\Anwendungsdaten\DropboxMaster
2014-06-10 12:30 - 2011-10-08 15:25 - 00000000 ____D () C:\Dokumente und Einstellungen\Stefanie\Anwendungsdaten\Dropbox
2014-06-10 12:29 - 2014-03-25 17:36 - 00000228 _____ () C:\windows\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
2014-06-10 12:29 - 2009-06-30 09:19 - 00001086 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-10 12:27 - 2009-03-14 22:59 - 00000000 _____ () C:\windows\system32\Drivers\lvuvc.hs
2014-06-10 12:27 - 2009-03-14 22:59 - 00000000 _____ () C:\windows\system32\Drivers\logiflt.iad
2014-06-10 12:27 - 2008-10-19 14:17 - 00000159 _____ () C:\windows\wiadebug.log
2014-06-10 12:27 - 2008-10-19 14:17 - 00000050 _____ () C:\windows\wiaservc.log
2014-06-10 12:27 - 2008-10-19 13:41 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-06-10 12:27 - 2008-10-19 13:27 - 00000000 ____D () C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temp
2014-06-06 12:27 - 2008-11-16 12:08 - 00393216 _____ () C:\windows\system32\config\TuneUp.evt
2014-06-06 12:27 - 2008-10-19 22:52 - 00000190 ___SH () C:\Dokumente und Einstellungen\Stefanie\ntuser.ini
2014-06-06 12:27 - 2008-10-19 22:52 - 00000000 ____D () C:\Dokumente und Einstellungen\Stefanie
2014-06-06 11:33 - 2010-08-03 23:26 - 00002489 _____ () C:\Dokumente und Einstellungen\Stefanie\Desktop\Microsoft Word 2010.lnk
2014-06-05 21:14 - 2008-10-19 13:45 - 00000190 ___SH () C:\Dokumente und Einstellungen\Frank\ntuser.ini
2014-06-05 20:40 - 2014-03-27 21:23 - 00000456 _____ () C:\windows\Tasks\At2.job
2014-06-05 20:23 - 2014-03-27 21:23 - 00000456 _____ () C:\windows\Tasks\At3.job
2014-06-05 19:10 - 2014-06-05 19:09 - 00000225 _____ () C:\windows\DHCPUPG.LOG
2014-06-05 19:09 - 2014-06-05 19:09 - 00000413 _____ () C:\windows\WINNT32.LOG
2014-06-05 19:09 - 2010-01-13 15:13 - 01675676 _____ () C:\windows\iis6.log
2014-06-05 19:09 - 2010-01-13 15:13 - 01544388 _____ () C:\windows\FaxSetup.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00747448 _____ () C:\windows\ocgen.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00710563 _____ () C:\windows\tsoc.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00516715 _____ () C:\windows\comsetup.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00473284 _____ () C:\windows\msmqinst.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00313435 _____ () C:\windows\ntdtcsetup.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00272277 _____ () C:\windows\netfxocm.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00164582 _____ () C:\windows\setupact.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00108997 _____ () C:\windows\MedCtrOC.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00085881 _____ () C:\windows\ocmsn.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00078217 _____ () C:\windows\tabletoc.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00076005 _____ () C:\windows\msgsocm.log
2014-06-05 19:09 - 2010-01-13 15:13 - 00001891 _____ () C:\windows\imsins.log
2014-06-05 19:01 - 2010-01-13 15:13 - 00001891 _____ () C:\windows\imsins.BAK
2014-06-05 18:50 - 2008-11-05 22:58 - 00000157 _____ () C:\Dokumente und Einstellungen\Frank\default.pls
2014-06-05 18:49 - 2008-10-19 16:24 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Utilities
2014-06-03 14:52 - 2010-07-04 09:50 - 00131072 _____ () C:\windows\system32\config\OAlerts.evt
2014-05-31 21:59 - 2014-05-31 21:59 - 00000000 ____D () C:\Programme\Double Commander
2014-05-31 21:53 - 2008-11-29 18:39 - 00110592 _____ () C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-30 16:31 - 2014-05-30 16:30 - 00001931 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\SteuerSparErklärung 2014.lnk
2014-05-30 13:52 - 2008-10-19 13:45 - 00000000 ___RD () C:\Dokumente und Einstellungen\Frank\Startmenü
2014-05-30 13:02 - 2009-02-23 11:23 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\foobar2000
2014-05-29 20:54 - 2014-05-06 19:14 - 00000708 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\calibre - E-book management.lnk
2014-05-29 20:54 - 2014-05-06 19:13 - 00000000 ____D () C:\Programme\Calibre2
2014-05-29 17:29 - 2011-10-08 15:27 - 00001054 _____ () C:\Dokumente und Einstellungen\Stefanie\Desktop\Dropbox.lnk
2014-05-29 17:29 - 2008-10-19 22:52 - 00000000 ___RD () C:\Dokumente und Einstellungen\Stefanie\Startmenü\Programme\Autostart
2014-05-25 10:10 - 2014-03-27 21:23 - 00000456 _____ () C:\windows\Tasks\At1.job
2014-05-24 19:57 - 2008-10-19 13:45 - 00000000 ___RD () C:\Dokumente und Einstellungen\Frank\Startmenü\Programme\Autostart
2014-05-24 19:56 - 2010-04-29 20:50 - 00001035 _____ () C:\Dokumente und Einstellungen\Frank\Desktop\Dropbox.lnk
2014-05-24 14:18 - 2008-10-20 00:42 - 00113376 _____ () C:\Dokumente und Einstellungen\Stefanie\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2014-05-22 08:27 - 2012-12-13 00:17 - 00001968 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\Norton 360 Premier Edition.LNK
2014-05-22 08:27 - 2012-12-13 00:15 - 00000000 ____D () C:\windows\system32\Drivers\N360
2014-05-18 11:15 - 2008-10-19 14:15 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart
2014-05-18 03:00 - 2014-05-18 03:00 - 00012557 _____ () C:\windows\KB946648.log
2014-05-18 03:00 - 2014-05-02 18:36 - 00023393 _____ () C:\windows\KB2964358-IE8.log
2014-05-18 03:00 - 2014-04-09 10:34 - 00028871 _____ () C:\windows\KB2936068-IE8.log
2014-05-18 03:00 - 2008-10-19 13:21 - 00000000 ____D () C:\Programme\Messenger
2014-05-17 22:23 - 2009-12-31 17:47 - 00599242 _____ () C:\windows\setupapi.log
2014-05-17 22:23 - 2009-03-14 22:59 - 00012783 _____ () C:\windows\system32\lvcoinst.log
2014-05-17 22:15 - 2012-12-23 04:16 - 02961424 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-854245398-583907252-839522115-1003-0.dat
2014-05-17 22:14 - 2012-12-23 04:16 - 00451578 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
2014-05-17 22:10 - 2013-01-10 23:03 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Anwendungsdaten\Samsung
2014-05-17 22:10 - 2013-01-10 22:59 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung
2014-05-17 22:02 - 2013-01-10 22:46 - 00000000 ____D () C:\Programme\Samsung
2014-05-17 20:38 - 2013-01-10 23:03 - 00000000 ____D () C:\Dokumente und Einstellungen\Frank\Anwendungsdaten\Samsung
2014-05-17 20:38 - 2008-10-19 15:50 - 00000000 ___HD () C:\Programme\InstallShield Installation Information
2014-05-17 20:28 - 2010-10-15 10:33 - 00033063 _____ () C:\windows\spupdsvc.log
2014-05-17 20:27 - 2014-05-17 20:27 - 00000777 _____ () C:\Dokumente und Einstellungen\NetworkService\Startmenü\Programme\Windows Media Player.lnk
2014-05-17 20:27 - 2014-05-17 20:27 - 00000236 _____ () C:\windows\DtcInstall.log
2014-05-17 20:27 - 2013-06-10 21:20 - 00000000 ____D () C:\Dokumente und Einstellungen\NetworkService\Startmenü\Programme
2014-05-17 20:27 - 2010-09-30 21:31 - 00005319 _____ () C:\windows\wmsetup.log
2014-05-17 20:26 - 2014-05-17 20:26 - 00000187 _____ () C:\windows\spupdsvc.log.1.log
2014-05-17 20:26 - 2008-10-19 16:15 - 00000090 _____ () C:\windows\system32\spupdwxp.log
2014-05-17 20:24 - 2008-10-19 15:08 - 00000000 ____D () C:\windows\security
2014-05-17 20:21 - 2014-05-17 19:45 - 00132375 _____ () C:\windows\svcpack.log
2014-05-17 19:52 - 2014-05-17 19:52 - 00000311 _____ () C:\windows\sessmgr.setup.log
2014-05-17 19:52 - 2014-05-17 19:52 - 00000173 _____ () C:\windows\cmsetacl.log
2014-05-17 19:52 - 2008-10-19 14:15 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü
2014-05-17 19:52 - 2008-10-19 13:24 - 00001572 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programmzugriff und -standards.lnk
2014-05-17 19:51 - 2010-01-13 15:13 - 00112582 _____ () C:\windows\updspapi.log
2014-05-17 19:51 - 2008-10-19 15:08 - 00000000 ____D () C:\windows\system32\inetsrv
2014-05-17 19:51 - 2008-10-19 15:08 - 00000000 ____D () C:\windows\Help
2014-05-17 19:51 - 2008-10-19 13:20 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zubehör
2014-05-17 19:16 - 2008-10-22 22:50 - 00002193 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft ActiveSync.lnk
2014-05-16 14:45 - 2008-10-19 22:40 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help
2014-05-16 14:42 - 2014-05-16 14:42 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\DESIGNER
2014-05-16 14:42 - 2013-08-18 23:06 - 00000000 ____D () C:\windows\system32\MRT
2014-05-16 14:39 - 2008-10-19 16:17 - 90547776 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-05-16 12:35 - 2014-04-30 09:35 - 17938608 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerInstaller.exe
2014-05-16 12:35 - 2012-04-07 17:10 - 00692400 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2014-05-16 12:35 - 2011-05-17 21:25 - 00070832 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2014-05-16 11:37 - 2014-03-25 17:36 - 00000222 _____ () C:\windows\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
2014-05-14 21:36 - 2013-02-16 18:29 - 00002347 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader XI.lnk
2014-05-14 21:28 - 2012-05-05 19:21 - 00000000 ____D () C:\Programme\Mozilla Maintenance Service
2014-05-12 07:26 - 2014-06-10 14:31 - 00053208 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:25 - 2014-06-10 14:31 - 00023256 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-05-11 21:06 - 2014-05-06 20:57 - 00499600 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
2014-05-11 15:56 - 2014-05-11 15:56 - 00000000 ____D () C:\Programme\Mozilla Firefox

Files to move or delete:
====================
C:\Windows\Tasks\At1.job
C:\Windows\Tasks\At2.job
C:\Windows\Tasks\At3.job
C:\Windows\Tasks\At4.job


Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp3h4euq.dll
C:\Dokumente und Einstellungen\Stefanie\Lokale Einstellungen\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdvvikf.dll


==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================