Windows 7 mit schwarzem Bildschirm ohne Taskleiste

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-12-2014 01
Ran by Audio Laptop (administrator) on AUDIOLAPTOP on 17-12-2014 15:46:34
Running from C:\Users\Audio Laptop\Downloads
Loaded Profile: Audio Laptop (Available profiles: Audio Laptop)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(Prevx) C:\Program Files\Prevx\prevx.exe
(Synchro Arts Ltd) C:\Program Files (x86)\Common Files\Synchro Arts Shared\License.exe
(Prevx) C:\Program Files\Prevx\prevx.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\ipmgui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [ITSecMng] => C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-01] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3653136 2014-11-09] (AVG Technologies CZ, s.r.o.)
HKLM\...\RunOnce: [*Restore] => C:\Windows\System32\rstrui.exe [296960 2010-11-20] (Microsoft Corporation)
HKLM-x32\...\RunOnce: [removeSettingsManagerdatamngr] => cmd.exe /c RD /S /Q "C:\Program Files (x86)\Settings Manager"
HKU\S-1-5-21-1567850050-3633006235-1092218065-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1567850050-3633006235-1092218065-1000\...\Run: [Remote Mouse] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [2043904 2014-09-29] (RemoteMouse.net)
HKU\S-1-5-21-1567850050-3633006235-1092218065-1000\...\MountPoints2: {15356774-1286-11e4-820d-001e68c7f089} - F:\Autorun.exe
HKU\S-1-5-21-1567850050-3633006235-1092218065-1000\...\MountPoints2: {278dfe63-0f43-11e4-9c94-806e6f6e6963} - D:\Setup.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-08-13] (Microsoft Corporation)
Startup: C:\Users\Audio Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 1510 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 1510 series.lnk -> C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1567850050-3633006235-1092218065-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb_6i_xGmHax17vI5L2_MCWmPo0KNcoOH-LcL8AHWHymiJGqDcczqdKZJDqmd4qic7e_PC43ATEq6zp0PVBSktOwkyFOGCXEm4IakSBsl6uQBMq5Yz0bWb0xjHgq4Ge9nqyYqOlAvbg57cplFK6l34sOqa8e1F57A,,&q={searchTerms}
HKU\S-1-5-21-1567850050-3633006235-1092218065-1000\Software\Microsoft\Internet Explorer\Main,Start Page = Search
HKU\S-1-5-21-1567850050-3633006235-1092218065-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = msn
HKU\S-1-5-21-1567850050-3633006235-1092218065-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb_6i_xGmHax17vI5L2_MCWmPo0KNcoOH-LcL8AHWHymiJGqDcczqdKZJDqmd4qic7e_PC43ATEq6zp0PVBSktOwkyFOGCXEm4IakSBsl6uQBMq5Yz0bWb0xjHgq4Ge9nqyYqOlAvbg57cplFK6l34sOqa8e1F57A,,&q={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = hxxp://www.default-search.net/search?sid=492&aid=330&itype=n&ver=14591&tm=539&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb_6i_xGmHax17vI5L2_MCWmPo0KNcoOH-LcL8AHWHymiJGqDcczqdKZJDqmd4qic7e_PC43ATEq6zp0PVBSktOwkyFOGCXEm4IakSBsl6uQBMq5Yz0bWb0xjHgq4Ge9nqyYqOlAvbg57cpk3SmoxYhkwMtt-Tugg,,&q={searchTerms}
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb_6i_xGmHax17vI5L2_MCWmPo0KNcoOH-LcL8AHWHymiJGqDcczqdKZJDqmd4qic7e_PC43ATEq6zp0PVBSktOwkyFOGCXEm4IakSBsl6uQBMq5Yz0bWb0xjHgq4Ge9nqyYqOlAvbg57cpk3SmoxYhkwMtt-Tugg,,&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = hxxp://www.default-search.net/search?sid=492&aid=330&itype=n&ver=14591&tm=539&src=ds&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1567850050-3633006235-1092218065-1000 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb_6i_xGmHax17vI5L2_MCWmPo0KNcoOH-LcL8AHWHymiJGqDcczqdKZJDqmd4qic7e_PC43ATEq6zp0PVBSktOwkyFOGCXEm4IakSBsl6uQBMq5Yz0bWb0xjHgq4Ge9nqyYqOlAvbg57cplFK6l34sOqa8e1F57A,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1567850050-3633006235-1092218065-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb_6i_xGmHax17vI5L2_MCWmPo0KNcoOH-LcL8AHWHymiJGqDcczqdKZJDqmd4qic7e_PC43ATEq6zp0PVBSktOwkyFOGCXEm4IakSBsl6uQBMq5Yz0bWb0xjHgq4Ge9nqyYqOlAvbg57cplFK6l34sOqa8e1F57A,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1567850050-3633006235-1092218065-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = hxxp://www.default-search.net/search?sid=492&aid=330&itype=n&ver=14591&tm=539&src=ds&p={searchTerms}
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

Chrome: 
=======
CHR HomePage: Default -> hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb_6i_xGmHax17vI5L2_MCWmPo0KNcoOH-LcL8AHWHymiJGqDcczqdKZJDqmd4qic7S3KcBqBHEXTzJwoFJMlSgg1lMP78ItVRMzbIEJ7O6T7vxei77YUdgi1ykaZKuZozu0CGpXMxeFNplsAc6A9-ucOmrcpht6A,,
CHR StartupUrls: Default -> "https://www.google.de/"
CHR Profile: C:\Users\Audio Laptop\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Audio Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-23]
CHR Extension: (Google Drive) - C:\Users\Audio Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-23]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Audio Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-06]
CHR Extension: (YouTube) - C:\Users\Audio Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-23]
CHR Extension: (Google-Suche) - C:\Users\Audio Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-23]
CHR Extension: (Google Wallet) - C:\Users\Audio Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-23]
CHR Extension: (Google Mail) - C:\Users\Audio Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 avgfws; C:\Program Files (x86)\AVG\AVG2015\avgfws.exe [1486664 2014-11-09] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3488784 2014-11-09] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [298080 2014-11-09] (AVG Technologies CZ, s.r.o.)
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
R2 CSIScanner; C:\Program Files\Prevx\prevx.exe [6746280 2014-12-01] (Prevx)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 Synchro Arts License Manager; C:\Program Files (x86)\Common Files\Synchro Arts Shared\License.exe [175488 2008-02-22] (Synchro Arts Ltd) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AKAI_ACV0_MIDI; C:\Windows\System32\drivers\akaiacv0m.sys [53880 2014-09-27] (Ploytec GmbH)
S3 AKAI_ACV0_USB; C:\Windows\System32\Drivers\akaiacv0u.sys [502392 2014-09-27] (Ploytec GmbH)
S3 AKAI_ACV0_WDM; C:\Windows\System32\drivers\akaiacv0a.sys [56952 2014-09-27] (Numark)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [263960 2014-10-29] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [313624 2014-07-18] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [124184 2014-10-05] (AVG Technologies CZ, s.r.o.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-06] (Avira Operations GmbH & Co. KG)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [274200 2014-10-10] (AVG Technologies CZ, s.r.o.)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-11-06] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-07-23] (Disc Soft Ltd)
R3 pxkbf; C:\Windows\System32\drivers\pxkbf.sys [24024 2014-12-01] (Prevx)
R1 pxrts; C:\Windows\System32\drivers\pxrts.sys [65736 2014-12-01] (Prevx)
R0 pxscan; C:\Windows\System32\drivers\pxscan.sys [36384 2014-12-01] (Prevx)
S3 synusb64; C:\Windows\System32\DRIVERS\synusb64.sys [30352 2011-12-14] (Steinberg Media Technologies GmbH)
S3 Tosrfcom; No ImagePath
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-17 15:46 - 2014-12-17 15:47 - 00014724 _____ () C:\Users\Audio Laptop\Downloads\FRST.txt
2014-12-17 15:46 - 2014-12-17 15:46 - 00000000 ____D () C:\FRST
2014-12-17 15:45 - 2014-12-17 15:45 - 02119168 _____ (Farbar) C:\Users\Audio Laptop\Downloads\FRST64.exe
2014-12-17 15:35 - 2014-12-17 15:35 - 00015885 _____ () C:\Users\Audio Laptop\Documents\tencu etwas neues.odt
2014-12-17 03:01 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-17 03:01 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-17 03:01 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-12-17 03:01 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-12-17 03:01 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-12-17 03:01 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-12-17 03:01 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2014-12-17 03:01 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2014-12-17 03:01 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2014-12-17 03:01 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2014-12-16 16:43 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-16 16:43 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-16 16:43 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-16 16:43 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-16 16:43 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-16 16:43 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-16 16:43 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-16 16:43 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-16 16:43 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-16 16:43 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-16 16:43 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-16 16:43 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-16 16:43 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-16 16:43 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-08 16:28 - 2014-12-08 16:59 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\Mp3tag
2014-12-08 16:28 - 2014-12-08 16:28 - 00000983 _____ () C:\Users\Public\Desktop\Mp3tag.lnk
2014-12-08 16:28 - 2014-12-08 16:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2014-12-08 16:27 - 2014-12-08 16:28 - 00000000 ____D () C:\Program Files (x86)\Mp3tag
2014-12-08 16:27 - 2014-12-08 16:27 - 02209056 _____ () C:\Users\Audio Laptop\Downloads\avira-eu-cleaner_de.exe
2014-12-08 16:27 - 2014-12-08 16:27 - 02209056 _____ () C:\Users\Audio Laptop\Downloads\avira-eu-cleaner_de (1).exe
2014-12-08 16:27 - 2014-12-08 16:27 - 00002045 _____ () C:\Users\Audio Laptop\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-12-08 16:27 - 2014-12-08 16:27 - 00001989 _____ () C:\Users\Audio Laptop\Desktop\Avira EU-Cleaner.lnk
2014-12-08 16:26 - 2014-12-08 16:26 - 02705808 _____ () C:\Users\Audio Laptop\Downloads\mp3tagv265asetup.exe
2014-12-08 16:04 - 2014-12-08 17:03 - 00000000 ___RD () C:\Users\Audio Laptop\Desktop\Ca$H Pu$$y W€€D Mixtap€
2014-12-06 17:03 - 2014-12-06 17:03 - 00000000 ____D () C:\Users\Audio Laptop\hafti
2014-12-06 16:15 - 2014-12-06 17:00 - 379099347 _____ () C:\Users\Audio Laptop\Downloads\HARURORE_FL.rar
2014-12-01 01:54 - 2014-12-01 01:55 - 04579240 _____ (AVG Technologies) C:\Users\Audio Laptop\Downloads\avg_avct_stb_all_2015_5315_evol1.exe
2014-12-01 01:40 - 2014-12-01 01:41 - 32507072 _____ (Microsoft Corporation) C:\Users\Audio Laptop\Downloads\Windows-KB890830-x64-V5.18.exe
2014-12-01 01:36 - 2014-12-01 01:43 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\ImgBurn
2014-12-01 01:28 - 2014-12-01 01:28 - 00001881 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
2014-12-01 01:28 - 2014-12-01 01:28 - 00001869 _____ () C:\Users\Public\Desktop\ImgBurn.lnk
2014-12-01 01:28 - 2014-12-01 01:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2014-12-01 01:28 - 2014-12-01 01:28 - 00000000 ____D () C:\Program Files (x86)\ImgBurn
2014-12-01 01:24 - 2014-12-01 01:27 - 737148928 _____ () C:\Users\Audio Laptop\Downloads\xubuntu-12.04.4-desktop-i386.iso
2014-12-01 01:12 - 2014-12-01 01:13 - 00000000 ____D () C:\ProgramData\PrevxCSI
2014-12-01 01:12 - 2014-12-01 01:12 - 00945272 _____ (Prevx) C:\Users\Audio Laptop\Downloads\prevxcsifree.exe
2014-12-01 01:12 - 2014-12-01 01:12 - 00065736 _____ (Prevx) C:\Windows\system32\Drivers\pxrts.sys
2014-12-01 01:12 - 2014-12-01 01:12 - 00062976 _____ (Prevx) C:\Windows\SysWOW64\PxSecure.dll
2014-12-01 01:12 - 2014-12-01 01:12 - 00036384 _____ (Prevx) C:\Windows\system32\Drivers\pxscan.sys
2014-12-01 01:12 - 2014-12-01 01:12 - 00024024 _____ (Prevx) C:\Windows\system32\Drivers\pxkbf.sys
2014-12-01 01:12 - 2014-12-01 01:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prevx 3.0
2014-12-01 01:12 - 2014-12-01 01:12 - 00000000 ____D () C:\Program Files\Prevx
2014-12-01 00:12 - 2014-12-01 00:12 - 00001268 _____ () C:\Users\Audio Laptop\Desktop\Revo Uninstaller.lnk
2014-12-01 00:12 - 2014-12-01 00:12 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-12-01 00:11 - 2014-12-01 00:11 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Audio Laptop\Downloads\revosetup95.exe
2014-11-30 23:57 - 2014-11-30 23:57 - 00000000 __SHD () C:\Users\Audio Laptop\AppData\Local\EmieUserList
2014-11-30 23:57 - 2014-11-30 23:57 - 00000000 __SHD () C:\Users\Audio Laptop\AppData\Local\EmieSiteList
2014-11-30 23:57 - 2014-11-30 23:57 - 00000000 __SHD () C:\Users\Audio Laptop\AppData\Local\EmieBrowserModeList
2014-11-30 23:56 - 2014-11-30 23:56 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\Adobe
2014-11-30 23:38 - 2014-11-30 23:38 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\AVG2015
2014-11-30 23:37 - 2014-12-01 01:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-11-30 23:37 - 2014-11-30 23:44 - 00000000 ____D () C:\ProgramData\AVG2015
2014-11-30 23:37 - 2014-11-30 23:37 - 00000981 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2014-11-30 23:37 - 2014-11-30 23:37 - 00000000 ___HD () C:\$AVG
2014-11-30 23:36 - 2014-11-30 23:36 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-11-30 23:33 - 2014-12-17 15:40 - 00000000 ____D () C:\ProgramData\MFAData
2014-11-30 23:33 - 2014-11-30 23:39 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Local\Avg2015
2014-11-30 23:33 - 2014-11-30 23:33 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Local\MFAData
2014-11-30 23:31 - 2014-11-30 23:32 - 161258928 _____ (AVG Technologies) C:\Users\Audio Laptop\Downloads\avg_free_x86_all_2015_5557a8402.exe
2014-11-30 23:23 - 2014-11-30 23:23 - 10181710 _____ () C:\Users\Audio Laptop\Downloads\Black Panther ML BP 2card_combo_v1.347.zip
2014-11-25 22:54 - 2014-11-25 23:38 - 00014296 _____ () C:\Users\Audio Laptop\Documents\Früher war ich gangster doch schmeiß das bei seite.odt
2014-11-22 21:26 - 2014-11-24 16:11 - 00000000 ____D () C:\Users\Audio Laptop\Documents\Märtyrer Mixtape Texte 2014
2014-11-22 14:20 - 2014-11-22 14:20 - 00003566 _____ () C:\Windows\System32\Tasks\HP AR Program Upload - 01cfbdfb97bc4f6d99b31312304501915eb8d5abe3c843db904692b1972f4758
2014-11-22 12:58 - 2014-11-22 12:58 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\OpenOffice
2014-11-22 12:56 - 2014-11-22 12:56 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2014-11-22 12:56 - 2014-11-22 12:56 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2014-11-22 12:55 - 2014-11-22 12:55 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-11-22 12:49 - 2014-11-22 12:49 - 00000000 ____D () C:\Users\Audio Laptop\Desktop\OpenOffice 4.1.1 (de) Installation Files
2014-11-22 12:47 - 2014-11-22 12:47 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-11-22 12:46 - 2014-11-22 12:46 - 00000000 ____D () C:\ProgramData\2355320829
2014-11-22 12:43 - 2014-11-22 12:44 - 01125200 _____ () C:\Users\Audio Laptop\Downloads\OpenOffice - CHIP-Installer.exe
2014-11-22 12:42 - 2014-12-01 00:21 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\1H1Q1V1N1N1S1R
2014-11-22 12:33 - 2014-11-22 12:33 - 00001995 _____ () C:\Users\Audio Laptop\HP Photo Creations.lnk
2014-11-22 12:33 - 2014-11-22 12:33 - 00000000 ____D () C:\ProgramData\Visan
2014-11-22 12:33 - 2014-11-22 12:33 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-11-22 12:33 - 2014-11-22 12:33 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-11-22 12:33 - 2014-11-22 12:33 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-11-22 12:32 - 2014-11-22 12:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-11-22 12:32 - 2014-11-22 12:32 - 00003648 _____ () C:\Windows\System32\Tasks\HPCustParticipation HP Deskjet 1510 series
2014-11-22 12:32 - 2014-11-22 12:32 - 00002212 _____ () C:\Users\Public\Desktop\HP Deskjet 1510 series.lnk
2014-11-22 12:32 - 2014-11-22 12:32 - 00001159 _____ () C:\Users\Audio Laptop\Shop für Zubehör - HP Deskjet 1510 series.lnk
2014-11-22 12:32 - 2014-11-22 12:32 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\HpUpdate
2014-11-22 12:32 - 2014-11-22 12:32 - 00000000 ____D () C:\Program Files\HP
2014-11-22 12:32 - 2014-11-22 12:32 - 00000000 ____D () C:\Program Files (x86)\HP
2014-11-22 12:30 - 2014-11-22 12:30 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-11-22 12:29 - 2014-11-22 13:58 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Local\HP
2014-11-22 12:18 - 2014-11-22 12:32 - 00000000 ____D () C:\ProgramData\HP
2014-11-21 00:56 - 2014-11-21 00:56 - 00000000 ____D () C:\Program Files (x86)\InstallShield Installation Information
2014-11-21 00:53 - 2014-11-21 00:53 - 06690486 _____ () C:\Users\Audio Laptop\Downloads\tpu-20080528154815 (1).zip
2014-11-21 00:51 - 2014-11-21 00:56 - 00000000 ____D () C:\Program Files (x86)\Toshiba
2014-11-21 00:51 - 2014-11-21 00:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
2014-11-21 00:50 - 2014-11-21 00:50 - 06690486 _____ () C:\Users\Audio Laptop\Downloads\tpu-20080528154815.zip
2014-11-21 00:49 - 2014-11-21 00:49 - 40773182 _____ () C:\Users\Audio Laptop\Downloads\BT-stack-64bit-toshiba.zip
2014-11-20 22:20 - 2014-11-20 22:18 - 00001124 _____ () C:\Users\Audio Laptop\Desktop\Mukke - Verknüpfung.lnk
2014-11-20 21:59 - 2014-11-20 22:00 - 40117016 _____ (Amazon) C:\Users\Audio Laptop\Downloads\AmazonMusicInstaller.exe
2014-11-20 20:18 - 2014-11-20 22:09 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\Apple Computer
2014-11-20 20:18 - 2014-11-20 20:18 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-11-20 20:18 - 2014-11-20 20:18 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Local\Apple Computer
2014-11-20 20:18 - 2014-11-20 20:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-20 20:18 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-11-20 20:17 - 2014-11-20 20:18 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-20 20:17 - 2014-11-20 20:18 - 00000000 ____D () C:\Program Files\iTunes
2014-11-20 20:17 - 2014-11-20 20:18 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-20 20:17 - 2014-11-20 20:17 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-11-20 20:17 - 2014-11-20 20:17 - 00000000 ____D () C:\Program Files\iPod
2014-11-20 20:16 - 2014-11-20 20:17 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-20 20:16 - 2014-11-20 20:16 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-11-20 20:16 - 2014-11-20 20:16 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-11-20 20:16 - 2014-11-20 20:16 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Local\Apple
2014-11-20 20:16 - 2014-11-20 20:16 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-11-20 20:15 - 2014-11-20 20:16 - 00000000 ____D () C:\ProgramData\Apple
2014-11-20 20:15 - 2014-11-20 20:15 - 00000000 ____D () C:\Program Files\Bonjour
2014-11-20 20:15 - 2014-11-20 20:15 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-11-20 20:13 - 2014-11-20 20:14 - 122418480 _____ (Apple Inc.) C:\Users\Audio Laptop\Downloads\iTunes64Setup.exe
2014-11-20 20:12 - 2014-11-20 20:12 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-11-18 22:43 - 2014-11-18 22:43 - 00039595 _____ () C:\Users\Audio Laptop\Downloads\Texte (1).zip
2014-11-18 22:43 - 2014-11-18 22:43 - 00001544 _____ () C:\Users\Audio Laptop\Downloads\2013-08-28.17.03.17.vnt
2014-11-18 22:18 - 2014-11-18 22:20 - 00000000 ____D () C:\Users\Audio Laptop\Downloads\Texte
2014-11-18 22:15 - 2014-11-18 22:15 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\IsolatedStorage
2014-11-18 22:15 - 2014-11-18 22:15 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Local\FileViewPro
2014-11-18 22:15 - 2014-11-18 22:15 - 00000000 ____D () C:\ProgramData\IsolatedStorage
2014-11-18 22:14 - 2014-11-19 11:47 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\Solvusoft
2014-11-18 22:14 - 2014-11-18 22:14 - 00000848 _____ () C:\Users\Audio Laptop\FileViewPro.lnk
2014-11-18 22:14 - 2014-11-18 22:14 - 00000000 ____D () C:\Spacekace
2014-11-18 22:14 - 2014-11-18 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileViewPro
2014-11-18 22:14 - 2014-11-18 22:14 - 00000000 ____D () C:\Program Files\FileViewPro
2014-11-18 22:14 - 2012-10-15 17:02 - 00019888 _____ (solvusoft) C:\Windows\system32\roboot64.exe
2014-11-18 22:13 - 2014-11-18 22:13 - 02370520 _____ () C:\Users\Audio Laptop\Downloads\Setup_FileViewPro_2015.exe
2014-11-18 22:10 - 2014-11-18 22:10 - 00039595 _____ () C:\Users\Audio Laptop\Downloads\Texte.zip
2014-11-18 20:46 - 2014-11-18 20:46 - 00170844 _____ () C:\Users\Audio Laptop\Unbenannt1.bak
2014-11-18 20:38 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-18 20:38 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-18 20:38 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-18 20:38 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 20:33 - 2014-11-18 22:52 - 00000000 ____D () C:\Users\Audio Laptop\Images
2014-11-18 20:31 - 2014-11-18 20:34 - 00000000 ____D () C:\Users\Audio Laptop\Audio
2014-11-18 00:15 - 2014-11-18 00:15 - 00001054 _____ () C:\Users\Public\Desktop\Remote Mouse.lnk
2014-11-18 00:15 - 2014-11-18 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remote Mouse
2014-11-18 00:15 - 2014-11-18 00:15 - 00000000 ____D () C:\Program Files (x86)\Remote Mouse
2014-11-18 00:14 - 2014-11-18 00:14 - 00707224 _____ (Remote Mouse ) C:\Users\Audio Laptop\Downloads\RemoteMouse.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-17 15:47 - 2014-07-19 13:52 - 01297638 _____ () C:\Windows\WindowsUpdate.log
2014-12-17 15:43 - 2014-07-24 02:15 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-17 15:39 - 2014-07-24 02:15 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-17 15:35 - 2014-07-23 21:57 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-16 16:59 - 2014-07-23 21:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-16 16:42 - 2009-07-14 05:45 - 00020672 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-16 16:42 - 2009-07-14 05:45 - 00020672 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-16 16:33 - 2014-07-23 21:58 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-08 19:55 - 2009-07-14 18:58 - 00699440 _____ () C:\Windows\system32\perfh007.dat
2014-12-08 19:55 - 2009-07-14 18:58 - 00149548 _____ () C:\Windows\system32\perfc007.dat
2014-12-08 19:55 - 2009-07-14 06:13 - 01619700 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-08 17:44 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-08 17:44 - 2009-07-14 05:51 - 00032172 _____ () C:\Windows\setupact.log
2014-12-06 17:03 - 2014-07-19 13:56 - 00000000 ____D () C:\Users\Audio Laptop
2014-12-01 00:29 - 2014-07-19 15:16 - 00346102 _____ () C:\Windows\PFRO.log
2014-11-30 23:37 - 2014-07-23 22:12 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\TuneUp Software
2014-11-26 16:41 - 2014-07-23 21:56 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Local\Google
2014-11-23 12:06 - 2014-07-19 14:09 - 00064024 _____ () C:\Users\Audio Laptop\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-23 12:05 - 2009-07-14 05:45 - 00294640 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-22 12:49 - 2014-08-08 09:43 - 00000000 ____D () C:\Users\Audio Laptop\Desktop\Musik Produktion
2014-11-19 21:04 - 2014-07-20 04:01 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\MPC
2014-11-19 20:42 - 2014-11-16 22:46 - 00000000 ____D () C:\Users\Audio Laptop\AppData\Roaming\vlc

Some content of TEMP:
====================
C:\Users\Audio Laptop\AppData\Local\Temp\avgnt.exe
C:\Users\Audio Laptop\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Audio Laptop\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Audio Laptop\AppData\Local\Temp\PlaySound.dll
C:\Users\Audio Laptop\AppData\Local\Temp\pvxinst178.exe
C:\Users\Audio Laptop\AppData\Local\Temp\pvxinst647.exe
C:\Users\Audio Laptop\AppData\Local\Temp\pvxinst758.exe
C:\Users\Audio Laptop\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Audio Laptop\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Audio Laptop\AppData\Local\Temp\VSTStubSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-16 17:42

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-12-2014 01
Ran by Audio Laptop at 2014-12-17 15:48:06
Running from C:\Users\Audio Laptop\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: AVG Internet Security 2015 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2015 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: AVG Internet Security 2015 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Akai THE 809 (HKLM-x32\...\Akai The809_is1) (Version:  - )
Akai THE BANK (HKLM-x32\...\Akai TheBANK_is1) (Version:  - )
Akai THE NOISE (HKLM-x32\...\Akai TheNoise_is1) (Version:  - )
Akai THE WUB (HKLM-x32\...\Akai TheWub_is1) (Version:  - )
AMD Catalyst Install Manager (HKLM\...\{37FCE154-7F59-74F0-3A35-BF503CEB230B}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5577 - AVG Technologies)
AVG 2015 (Version: 15.0.4223 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.4253 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5577 - AVG Technologies) Hidden
Avira (HKLM-x32\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v8.00.12(T) - TOSHIBA CORPORATION)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.6.6.2134 - Steinberg Media Technologies GmbH)
FileViewPro (HKLM\...\FileViewPro_is1) (Version: 4.0 - Solvusoft Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
HP Deskjet 1510 series - Grundlegende Software für das Gerät (HKLM\...\{FD79E5D2-5CFE-49C2-9461-D011D1355696}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Deskjet 1510 series Hilfe (HKLM-x32\...\{23972F22-BA23-4C61-9F91-B9470E1563EB}) (Version: 30.0.0 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Hybrid Content (HKLM-x32\...\{9E822C67-B1C4-4E85-870C-23ADE106BB4F}) (Version: 3.0.0.18468 - AIR Music Tech GmbH)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
LUXONIX Purity (HKLM-x32\...\LUXONIX_Purity) (Version: 1.2.4 - LUXONIX)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mp3tag v2.65a (HKLM-x32\...\Mp3tag) (Version: v2.65a - Florian Heidenreich)
MPC 1.0.0 (HKLM-x32\...\MPC_is1) (Version: 1.0.0 - Akai Professional)
MPC 1.7.1 (HKLM\...\com.akaipro.mpc.standard_is1) (Version: 1.7.1 - Akai Professional)
MPC Factory Content 1.0.0 (HKLM-x32\...\MPC Factory Content_is1) (Version: 1.0.0 - Akai Professional)
MPC Renaissance driver (HKLM\...\USB_AUDIO_DEusb-audio.deAkaiACV0) (Version:  - )
Native Instruments Battery 3 (HKLM-x32\...\Native Instruments Battery 3) (Version:  - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Prevx (HKLM\...\PCSI) (Version: 3.0.5.220 - Prevx)
reFX Nexus VSTi RTAS v2.2.0 (HKLM-x32\...\reFX Nexus_is1) (Version:  - )
Remote Mouse version 2.56 (HKLM-x32\...\{01E4BC6D-3ACC-45E1-8928-C2FF626F63F3}_is1) (Version: 2.56 - Remote Mouse)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Startfenster (HKLM-x32\...\Startfenster) (Version:  - Startfenster) <==== ATTENTION!
Steinberg Cubase 7.5 64bit (HKLM\...\{C75E8AD9-C89F-4505-5E87-CFCCEBE284FA}) (Version: 7.5.0 - Steinberg Media Technologies GmbH)
Steinberg Cubase v4.1.3 (HKLM-x32\...\Steinberg Cubase_is1) (Version:  - )
Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH)
Steinberg EDM Toolbox MIDI Loops (HKLM-x32\...\{8C9B2EA8-9A30-4347-95E9-10E919C4F32E}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Eucon Adapter 6.5 64bit (HKLM\...\{95D90857-61C2-4927-85FF-A317E46E7351}) (Version: 6.5.2 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Allen Morgan Signature Drums (HKLM-x32\...\{611A7035-0172-4B9B-8BB6-5046F6867D8A}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE 64bit (HKLM\...\{A5AB0D21-21BD-4DB8-F097-02E8FC8C486A}) (Version: 4.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 2.0.1 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE Content (HKLM-x32\...\{A5051ABF-A497-4C3C-85EA-F7A4D5C19B82}) (Version: 2.0.0 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 2.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content 2 (HKLM-x32\...\{88C337F0-4CF2-4098-BDC0-D94859ECA2B4}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Padshop 64bit (HKLM\...\{75F15019-C0C2-4047-AA45-97B4BD313719}) (Version: 1.1.0 - Steinberg Media Technologies GmbH)
Steinberg Retrologue 64bit (HKLM\...\{4D65ECE6-131D-4B5F-8470-2750D3161619}) (Version: 1.1.0 - Steinberg Media Technologies GmbH)
Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH)
Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Studie zur Verbesserung von HP Deskjet 1510 series (HKLM\...\{DD935C13-2927-4061-8651-E65AB2FF9317}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
Sylenth1 v2.0 (HKLM-x32\...\Sylenth1_is1) (Version:  - )
Tone2 Firebird VSTi v1.2.1 (HKLM-x32\...\Tone2 Firebird VSTi v1.2.1) (Version:  - )
Toshiba Touchpad Utility (HKLM-x32\...\InstallShield_{576420A5-E1F0-4C09-A07C-F689082E666F}) (Version: 3.00.01.00 - TOSHIBA)
TruePianos 1.5.0 (HKLM\...\TruePianos_is1) (Version:  - 4Front Technologies)
TruePianos: Amber Module 1.4.0 (HKLM-x32\...\TruePianos: Amber Module_is1) (Version:  - 4Front Technologies)
TruePianos: Diamond Module 1.4.0 (HKLM-x32\...\TruePianos: Diamond Module_is1) (Version:  - 4Front Technologies)
TruePianos: Emerald Module 1.4.0 (HKLM-x32\...\TruePianos: Emerald Module_is1) (Version:  - 4Front Technologies)
TruePianos: Sapphire Module 1.4.0 (HKLM-x32\...\TruePianos: Sapphire Module (Pedal sounds included)_is1) (Version:  - 4Front Technologies)
TruePianos: Sapphire Module 1.4.0 (HKLM-x32\...\TruePianos: Sapphire Module_is1) (Version:  - 4Front Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VocALign Pro 4 VST (HKLM-x32\...\{EB77C666-B349-4046-8BD3-E4941119E1EF}) (Version: 4.00.0000 - Synchro Arts Ltd)
VocALign Project (HKLM-x32\...\{7E7F3882-48B3-424B-9BE2-D257D1319C59}) (Version: 2.9.1 - Synchro Arts Ltd)
V-Station 1.6 (HKLM-x32\...\{842C6AFC-7856-4fd9-99AF-8900554ACAA2}_is1) (Version: 1.6 - Novation Digital Music Systems Ltd.)
Vyzex MAX49 (HKLM-x32\...\{B35A4E5E-DAA8-4A0B-95A1-D3EE244EF933}_is1) (Version: Vyzex MAX49 1.02 - Psicraft Designs, Inc.)
Waves Complete VST RTAS TDM v7.1.16 (HKLM-x32\...\Waves Complete v7_is1) (Version:  - )
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

30-11-2014 22:35:56 Installed AVG 2015
30-11-2014 22:36:40 Installed AVG 2015
30-11-2014 23:16:16 Revo Uninstaller's restore point - Open Office Packages
30-11-2014 23:23:49 Revo Uninstaller's restore point - Settings Manager
30-11-2014 23:45:45 Wiederherstellungsvorgang
08-12-2014 16:40:21 Avira EU-Cleaner - 08.12.2014 17:40
16-12-2014 16:49:21 Geplanter Prüfpunkt
17-12-2014 02:00:17 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {6C994BA2-80D8-4483-87BA-585C62C6B319} - System32\Tasks\HPCustParticipation HP Deskjet 1510 series => C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [2014-03-06] (Hewlett-Packard Co.)
Task: {90A9A675-26FB-4195-9B29-9AA5DE208CE5} - System32\Tasks\HP AR Program Upload - 01cfbdfb97bc4f6d99b31312304501915eb8d5abe3c843db904692b1972f4758 => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2014-03-06] (TODO: <Company name>)
Task: {B679E509-7BEC-479F-B526-31692C6F1A99} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-23] (Google Inc.)
Task: {CE0D47F6-E906-4AB8-A3D5-CF0F1403BD04} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {F4739F75-60FF-4923-8E8B-916B3D6FF493} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-23] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-11-26 14:01 - 2014-11-25 07:39 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\libglesv2.dll
2014-11-26 14:01 - 2014-11-25 07:39 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\libegl.dll
2014-11-26 14:01 - 2014-11-25 07:39 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\pdf.dll
2014-11-26 14:01 - 2014-11-25 07:39 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\ffmpegsumo.dll
2014-11-26 14:01 - 2014-11-25 07:39 - 14910280 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-1567850050-3633006235-1092218065-500 - Administrator - Disabled)
Audio Laptop (S-1-5-21-1567850050-3633006235-1092218065-1000 - Administrator - Enabled) => C:\Users\Audio Laptop
Gast (S-1-5-21-1567850050-3633006235-1092218065-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1567850050-3633006235-1092218065-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: Massenspeichercontroller
Description: Massenspeichercontroller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/17/2014 03:01:50 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15616

Error: (12/17/2014 03:01:50 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15616

Error: (12/17/2014 03:01:50 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/08/2014 05:45:44 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.TypeInitializationException
Stapel:
   bei NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   bei NLog.LogFactory.get_Configuration()
   bei NLog.LogFactory.GetLogger(LoggerCacheKey)
   bei NLog.LogFactory.GetLogger(System.String)
   bei NLog.LogManager.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   bei Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (12/08/2014 05:45:33 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.TypeInitializationException
Stapel:
   bei NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   bei NLog.LogFactory.get_Configuration()
   bei NLog.LogFactory.GetLogger(LoggerCacheKey)
   bei NLog.LogFactory.GetLogger(System.String)
   bei NLog.LogManager.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   bei Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (12/08/2014 05:45:13 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.TypeInitializationException
Stapel:
   bei NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   bei NLog.LogFactory.get_Configuration()
   bei NLog.LogFactory.GetLogger(LoggerCacheKey)
   bei NLog.LogFactory.GetLogger(System.String)
   bei NLog.LogManager.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   bei Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (12/08/2014 05:13:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 122055

Error: (12/08/2014 05:13:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 122055

Error: (12/08/2014 05:13:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/08/2014 03:53:47 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.TypeInitializationException
Stapel:
   bei NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   bei NLog.LogFactory.get_Configuration()
   bei NLog.LogFactory.GetLogger(LoggerCacheKey)
   bei NLog.LogFactory.GetLogger(System.String)
   bei NLog.LogManager.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   bei Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()


System errors:
=============
Error: (12/08/2014 05:45:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (12/08/2014 05:45:33 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/08/2014 05:45:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/08/2014 05:41:46 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "CSIScanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/08/2014 03:53:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (12/08/2014 03:53:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/08/2014 03:53:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/07/2014 10:42:23 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CSIScanner" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%109

Error: (12/07/2014 10:42:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "CSIScanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/06/2014 04:03:11 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.


Microsoft Office Sessions:
=========================
Error: (12/17/2014 03:01:50 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15616

Error: (12/17/2014 03:01:50 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15616

Error: (12/17/2014 03:01:50 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/08/2014 05:45:44 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.TypeInitializationException
Stapel:
   bei NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   bei NLog.LogFactory.get_Configuration()
   bei NLog.LogFactory.GetLogger(LoggerCacheKey)
   bei NLog.LogFactory.GetLogger(System.String)
   bei NLog.LogManager.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   bei Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (12/08/2014 05:45:33 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.TypeInitializationException
Stapel:
   bei NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   bei NLog.LogFactory.get_Configuration()
   bei NLog.LogFactory.GetLogger(LoggerCacheKey)
   bei NLog.LogFactory.GetLogger(System.String)
   bei NLog.LogManager.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   bei Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (12/08/2014 05:45:13 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.TypeInitializationException
Stapel:
   bei NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   bei NLog.LogFactory.get_Configuration()
   bei NLog.LogFactory.GetLogger(LoggerCacheKey)
   bei NLog.LogFactory.GetLogger(System.String)
   bei NLog.LogManager.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   bei Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (12/08/2014 05:13:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 122055

Error: (12/08/2014 05:13:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 122055

Error: (12/08/2014 05:13:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/08/2014 03:53:47 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.TypeInitializationException
Stapel:
   bei NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   bei NLog.LogFactory.get_Configuration()
   bei NLog.LogFactory.GetLogger(LoggerCacheKey)
   bei NLog.LogFactory.GetLogger(System.String)
   bei NLog.LogManager.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   bei Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   bei Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()


CodeIntegrity Errors:
===================================
  Date: 2014-11-06 21:55:42.965
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\akaiacv0m.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-06 21:55:42.838
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\akaiacv0m.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-06 21:54:10.569
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\akaiacv0m.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-06 21:54:10.424
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\akaiacv0m.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz
Percentage of memory in use: 71%
Total physical RAM: 3070.43 MB
Available physical RAM: 866.76 MB
Total Pagefile: 6139.04 MB
Available Pagefile: 1960.61 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.88 GB) (Free:155.64 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 22741035)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)

==================== End Of Log ============================