Funde: PUA/DownloadSponsor.Gen

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by Susi (ATTENTION: The logged in user is not administrator) on NOTEBOOK on 17-03-2015 07:45:05
Running from C:\Users\Susi\Desktop
Loaded Profiles: Susanne & Susi (Available profiles: Susanne & Susi & Paula)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

Failed to access process -> smss.exe
Failed to access process -> csrss.exe
Failed to access process -> wininit.exe
Failed to access process -> csrss.exe
Failed to access process -> services.exe
Failed to access process -> lsass.exe
Failed to access process -> lsm.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> winlogon.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> spoolsv.exe
Failed to access process -> sched.exe
Failed to access process -> svchost.exe
Failed to access process -> armsvc.exe
Failed to access process -> avguard.exe
Failed to access process -> HSMServiceEntry.exe
Failed to access process -> LMS.exe
Failed to access process -> MDM.EXE
Failed to access process -> PassThruSvr.exe
Failed to access process -> PsiService_2.exe
Failed to access process -> RichVideo.exe
Failed to access process -> SeaPort.exe
Failed to access process -> svchost.exe
Failed to access process -> TeamViewer_Service.exe
Failed to access process -> Avira.OE.ServiceHost.exe
Failed to access process -> avshadow.exe
Failed to access process -> avwebgrd.exe
() C:\Program Files\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Wistron) C:\Program Files\Launch Manager\HotkeyApp.exe
(Wistron Corp.) C:\Program Files\Launch Manager\OSD.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WButton.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
Failed to access process -> WisLMSvc.exe
() C:\Users\Susi\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
Failed to access process -> svchost.exe
Failed to access process -> SearchIndexer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
Failed to access process -> wmpnetwk.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
Failed to access process -> SearchProtocolHost.exe
Failed to access process -> svchost.exe
Failed to access process -> IAStorDataMgrSvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
Failed to access process -> NASvc.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
Failed to access process -> UNS.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> SearchFilterHost.exe
Failed to access process -> WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1493608 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [HotkeyApp] => C:\Program Files\Launch Manager\HotkeyApp.exe [200704 2009-12-14] (Wistron)
HKLM\...\Run: [LMgrVolOSD] => C:\Program Files\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.)
HKLM\...\Run: [LMgrOSD] => "C:\Program Files\Launch Manager\OSDCtrl.exe"
HKLM\...\Run: [Wbutton] => C:\Program Files\Launch Manager\Wbutton.exe [436264 2010-06-21] (Wistron Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2009-12-11] (Synaptics Incorporated)
HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703280 2015-03-15] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-11] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1848648 2008-03-18] (CANON INC.)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG)
HKLM\...\RunOnce: [*Restore] => C:\Windows\system32\rstrui.exe [262656 2015-02-03] (Microsoft Corporation)
HKU\S-1-5-21-4268347659-1046126219-2503854065-1002\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-12-14] (Google Inc.)
HKU\S-1-5-21-4268347659-1046126219-2503854065-1002\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Susi\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-4268347659-1046126219-2503854065-1002\...\Run: [Alamandi tray notifier] => C:\Program Files\Intenium\Alamandi\TaskBarNotifier.exe
HKU\S-1-5-21-4268347659-1046126219-2503854065-1002\...\MountPoints2: F - F:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-4268347659-1046126219-2503854065-1002\...\MountPoints2: {21411169-4265-11e4-93d7-00262dc25d3b} - F:\HTC_Sync_Manager_PC.exe
Startup: C:\Users\Paula\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-4268347659-1046126219-2503854065-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com
HKU\S-1-5-21-4268347659-1046126219-2503854065-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
URLSearchHook: [S-1-5-21-4268347659-1046126219-2503854065-1000] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-13] (Oracle Corporation)
BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-15] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-13] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-15] (Google Inc.)
Toolbar: HKU\S-1-5-21-4268347659-1046126219-2503854065-1002 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-15] (Google Inc.)
Toolbar: HKU\S-1-5-21-4268347659-1046126219-2503854065-1002 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Susi\AppData\Roaming\Mozilla\Firefox\Profiles\e4qciti5.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Keyword.URL: 
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-06] ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2012-09-13] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2012-09-13] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation)
FF Plugin: @nullsoft.com/winampDetector;version=1 -> C:\Program Files\Winamp Detect\npwachk.dll [2013-12-13] (Nullsoft, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4268347659-1046126219-2503854065-1002: @protectdisc.com/NPMPDRM -> C:\Users\Susi\AppData\Local\mpDRM\Binaries\NPMPDRM.dll [2011-10-11] ( )
FF Plugin HKU\S-1-5-21-4268347659-1046126219-2503854065-1002: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Susi\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll [2013-05-22] (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2012-09-13] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2012-09-13] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2012-09-13] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2012-09-13] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2012-09-13] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2012-09-13] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2012-09-13] (Apple Inc.)
FF Extension: Avira Browser Safety - C:\Users\Susi\AppData\Roaming\Mozilla\Firefox\Profiles\e4qciti5.default\Extensions\abs@avira.com [2015-02-02]
FF Extension: dp Launcher Plugin - C:\Users\Susi\AppData\Roaming\Mozilla\Firefox\Profiles\e4qciti5.default\Extensions\dplauncher@digitalpublishing.de [2012-09-13]
FF Extension: WEB.DE MailCheck - C:\Users\Susi\AppData\Roaming\Mozilla\Firefox\Profiles\e4qciti5.default\Extensions\toolbar@web.de [2014-12-17]
FF HKLM\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
FF Extension: Freemake Video Converter Plugin - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2012-09-20]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/ig/redirectdomain?brand=MDNA&bmod=MDNA
CHR StartupUrls: Default -> "hxxp://www.google.com/ig/redirectdomain?brand=MDNA&bmod=MDNA"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\41.0.2272.89\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\41.0.2272.89\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\41.0.2272.89\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.210.6) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U21) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Oracle)
CHR Plugin: (Microsoft Office 2003) - C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
CHR Plugin: (QuickTime Plug-in 7.0.4) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.0.4) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.0.4) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.0.4) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.0.4) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.0.4) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.0.4) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Profile: C:\Users\Susi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google News) - C:\Users\Susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dllkocilcinkggkchnjgegijklcililc [2012-09-20]
CHR Extension: (Notepad) - C:\Users\Susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\efgpgbcidmnhkoeceikdacelidndbfgl [2012-09-20]
CHR Extension: (Avira Browser Safety) - C:\Users\Susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-13]
CHR Extension: (Freemake Video Converter) - C:\Users\Susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj [2012-09-27]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14]
CHR Extension: (Google Wallet) - C:\Users\Susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Origami Player) - C:\Users\Susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiomepakkenneiifjocbinkmmampfbdn [2012-09-20]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2012-09-20]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2015-03-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [992504 2015-03-15] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG)
R2 HTCMonitorService; C:\Program Files\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-10] (Nero AG)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 lmhosts; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 NlaSvc; C:\Windows\System32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [244904 2010-02-10] () [File not signed]
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118560 2009-10-23] (Wistron Corp.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)
S3 DrvAgent32; C:\Windows\system32\Drivers\DrvAgent32.sys [23456 2012-08-07] (Phoenix Technologies) [File not signed]
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV32.sys [105984 2009-10-27] (QUALCOMM Incorporated) [File not signed]
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-16] (Avira GmbH)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-17 07:45 - 2015-03-17 07:46 - 00021514 _____ () C:\Users\Susi\Desktop\FRST.txt
2015-03-17 07:44 - 2015-03-17 07:44 - 01135104 _____ (Farbar) C:\Users\Susi\Desktop\FRST.exe
2015-03-17 07:42 - 2015-03-17 07:43 - 00000476 _____ () C:\Users\Susi\Desktop\defogger_disable.log
2015-03-17 07:42 - 2015-03-17 07:42 - 00000000 _____ () C:\Users\Susanne\defogger_reenable
2015-03-17 07:41 - 2015-03-17 07:41 - 00050477 _____ () C:\Users\Susi\Desktop\Defogger.exe
2015-03-16 18:09 - 2015-03-16 18:09 - 00013088 _____ () C:\Users\Susi\Desktop\Ereignisse.txt
2015-03-15 23:43 - 2015-03-15 23:43 - 00010884 _____ () C:\Users\Susi\Ereignisse.txt
2015-03-15 20:40 - 2015-03-15 20:40 - 00031237 _____ () C:\Users\Susi\Downloads\Addition.txt
2015-03-15 20:38 - 2015-03-17 07:45 - 00000000 ____D () C:\FRST
2015-03-15 20:38 - 2015-03-15 20:40 - 00044653 _____ () C:\Users\Susi\Downloads\FRST.txt
2015-03-15 20:32 - 2015-03-15 20:32 - 01135104 _____ (Farbar) C:\Users\Susi\Downloads\FRST.exe
2015-03-15 15:40 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-03-15 15:27 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-03-15 15:27 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-15 15:27 - 2015-02-03 04:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-15 15:27 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-15 15:27 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-15 15:27 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-15 15:27 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-15 15:27 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-15 15:27 - 2015-02-03 04:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-15 15:27 - 2015-02-03 04:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-15 15:27 - 2015-02-03 04:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-15 15:27 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-15 15:27 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-15 15:27 - 2015-02-03 04:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-15 15:27 - 2015-02-03 04:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-15 15:27 - 2015-02-03 04:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-15 15:27 - 2015-02-03 04:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-15 15:27 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-15 15:27 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-15 15:27 - 2015-02-03 04:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-15 15:27 - 2015-02-03 03:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-15 15:27 - 2015-01-31 00:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-15 15:27 - 2014-10-31 23:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-15 15:16 - 2015-02-24 03:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-15 15:16 - 2015-02-21 01:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-15 15:16 - 2015-02-21 01:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-15 15:16 - 2015-02-21 01:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-15 15:16 - 2015-02-21 01:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-15 15:16 - 2015-02-21 00:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-15 15:16 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-15 15:16 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-15 15:16 - 2015-02-20 05:13 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-15 15:16 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-15 15:16 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-15 15:16 - 2015-02-20 03:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-15 15:16 - 2015-02-20 03:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-15 15:16 - 2015-02-20 03:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-15 15:16 - 2015-02-20 03:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-15 15:16 - 2015-02-20 03:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-15 15:16 - 2015-02-20 03:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-15 15:16 - 2015-02-20 03:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-15 15:16 - 2015-02-20 03:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-15 15:16 - 2015-02-20 03:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-15 15:16 - 2015-02-20 02:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-15 15:16 - 2015-02-20 02:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-15 15:16 - 2015-02-20 02:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-15 15:16 - 2015-02-20 02:56 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-15 15:16 - 2015-02-20 02:50 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-15 15:16 - 2015-02-20 02:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-15 15:16 - 2015-02-20 02:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-15 15:16 - 2015-02-20 02:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-15 15:16 - 2015-02-20 02:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-15 15:16 - 2015-02-20 02:24 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-15 15:16 - 2015-02-20 02:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-15 15:16 - 2015-02-20 02:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-15 15:16 - 2015-02-20 01:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-15 15:16 - 2015-02-20 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-15 15:16 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-15 15:16 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-15 15:16 - 2015-01-09 03:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-03-15 15:16 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-03-15 15:16 - 2015-01-09 03:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-03-15 15:15 - 2015-02-20 02:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-15 15:15 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-15 15:15 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-15 15:15 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-15 15:14 - 2015-03-06 06:15 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-15 15:14 - 2015-03-06 06:15 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-15 15:14 - 2015-03-06 06:10 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-15 15:14 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-15 15:14 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-15 15:14 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-15 15:14 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-15 15:14 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-15 15:14 - 2015-03-06 06:10 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-15 15:14 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-15 15:14 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-15 15:14 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-15 15:14 - 2015-03-06 06:10 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-15 15:14 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-15 15:14 - 2015-03-06 06:09 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-15 15:14 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-15 15:14 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-15 15:14 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-15 15:14 - 2015-02-26 04:11 - 02381312 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-15 14:59 - 2015-03-15 14:59 - 00001113 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-03-15 14:57 - 2015-03-15 14:57 - 00243528 _____ () C:\Users\Susi\Downloads\Firefox Setup Stub 36.0.1.exe
2015-03-15 14:17 - 2015-03-15 14:17 - 00001875 _____ () C:\Users\Public\Desktop\Steuer 2013.lnk
2015-03-15 14:15 - 2015-03-15 14:15 - 00002011 _____ () C:\Users\Public\Desktop\KONZ-Steuer-2014.lnk
2015-03-15 14:15 - 2015-03-15 14:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KONZ
2015-03-15 14:15 - 2015-03-15 14:15 - 00000000 ____D () C:\Program Files\USM
2015-03-15 14:14 - 2015-03-15 14:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steuer 2013
2015-03-15 14:12 - 2015-03-15 14:14 - 00000000 ____D () C:\Program Files\Steuer 2013
2015-03-15 12:27 - 2015-03-15 12:55 - 00000000 ____D () C:\Users\TEMP
2015-03-12 07:41 - 2015-03-12 07:41 - 00000000 ____D () C:\Windows\system32\䙔䵁
2015-03-11 21:05 - 2015-03-12 14:50 - 00000000 ____D () C:\AdwCleaner
2015-02-27 22:48 - 2015-03-15 22:35 - 00000000 ____D () C:\GOG Games
2015-02-20 14:20 - 2015-02-20 14:20 - 00000000 __SHD () C:\Users\Susi\AppData\Local\EmieUserList
2015-02-20 14:20 - 2015-02-20 14:20 - 00000000 __SHD () C:\Users\Susi\AppData\Local\EmieSiteList
2015-02-20 14:20 - 2015-02-20 14:20 - 00000000 __SHD () C:\Users\Susi\AppData\Local\EmieBrowserModeList
2015-02-17 15:26 - 2015-02-17 15:26 - 01217184 _____ (Microsoft Corporation) C:\Windows\system32\FM20.DLL

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-17 07:42 - 2010-12-14 20:31 - 00000000 ____D () C:\Users\Susanne
2015-03-17 07:40 - 2009-07-14 05:34 - 00018704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-17 07:40 - 2009-07-14 05:34 - 00018704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-17 07:36 - 2010-01-29 08:17 - 02079115 _____ () C:\Windows\WindowsUpdate.log
2015-03-17 07:34 - 2012-03-31 18:18 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-17 07:33 - 2014-01-04 22:20 - 00000000 ____D () C:\Users\Susi\AppData\Local\HTC MediaHub
2015-03-17 07:33 - 2010-12-14 20:28 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-17 07:32 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-17 07:32 - 2009-07-14 05:39 - 00270032 _____ () C:\Windows\setupact.log
2015-03-16 22:03 - 2010-12-14 20:28 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-16 19:46 - 2010-07-06 21:23 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-16 13:45 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-03-15 23:43 - 2011-02-01 13:55 - 00000000 ____D () C:\Users\Susi
2015-03-15 23:03 - 2011-02-01 15:52 - 00000000 ____D () C:\Users\Paula
2015-03-15 23:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2015-03-15 23:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2015-03-15 23:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2015-03-15 23:02 - 2014-12-17 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DesignCAD Toolkit Holz- & Tischlerarbeiten 22 22
2015-03-15 23:02 - 2014-12-17 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DesignCAD Toolkit Architektur & Planung 22
2015-03-15 23:02 - 2014-12-17 19:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DesignCAD Toolkit Maschinenbau & Konstruktion 22
2015-03-15 23:02 - 2014-12-17 14:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DesignCAD 3D Max 22
2015-03-15 23:02 - 2014-12-12 19:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDRWIN10
2015-03-15 23:02 - 2014-06-14 10:54 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-15 23:02 - 2014-03-05 19:46 - 00000000 ____D () C:\ProgramData\FLEXnet
2015-03-15 23:02 - 2013-04-16 09:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-15 23:02 - 2013-02-19 17:21 - 00000000 ____D () C:\Users\Paula\AppData\Local\AskToolbar
2015-03-15 23:02 - 2012-08-07 20:22 - 00000000 ____D () C:\Users\Susanne\AppData\Local\eSupport.com
2015-03-15 23:02 - 2012-03-04 19:43 - 00000000 ____D () C:\Users\Susanne\AppData\Local\AskToolbar
2015-03-15 23:02 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2015-03-15 23:02 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-03-15 22:56 - 2014-03-05 19:46 - 00000000 ____D () C:\ProgramData\Rosetta Stone
2015-03-15 22:56 - 2011-02-01 13:59 - 00000000 ____D () C:\Users\Susi\AppData\Roaming\Adobe
2015-03-15 22:56 - 2011-02-01 13:57 - 00000000 ____D () C:\Users\Susi\Backgammon
2015-03-15 22:55 - 2013-04-16 09:39 - 00000000 ____D () C:\Program Files\Avira
2015-03-15 22:55 - 2011-01-28 21:25 - 00000000 __RHD () C:\MSOCache
2015-03-15 22:38 - 2015-01-03 19:44 - 00000000 ____D () C:\Users\Susi\Computerkurs
2015-03-15 22:33 - 2012-06-19 10:35 - 00000000 ____D () C:\Users\Susi\AppData\Local\GOG.com
2015-03-15 20:23 - 2010-07-07 19:31 - 00136282 _____ () C:\Windows\PFRO.log
2015-03-15 19:57 - 2013-11-24 20:57 - 00173056 ___SH () C:\Users\Susi\Thumbs.db
2015-03-15 16:05 - 2009-07-14 05:33 - 00450424 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-15 16:02 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-03-15 16:00 - 2011-03-13 11:41 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-15 15:58 - 2013-08-13 23:24 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-15 15:41 - 2010-07-06 22:03 - 119837696 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-15 15:05 - 2013-05-06 12:06 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-15 15:05 - 2013-04-16 09:39 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-15 15:05 - 2013-04-16 09:39 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-03-15 15:01 - 2012-04-28 15:12 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-03-15 14:59 - 2015-01-26 20:03 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-03-15 14:59 - 2012-04-28 15:12 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-03-15 14:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2015-03-15 14:17 - 2013-04-20 15:42 - 00000664 _____ () C:\Windows\wiso.ini
2015-03-15 14:17 - 2013-04-20 15:42 - 00000000 ____D () C:\Users\Susanne\AppData\Local\Buhl
2015-03-15 14:15 - 2010-10-06 00:32 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-03-04 07:01 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing
2015-02-27 09:55 - 2015-02-05 09:20 - 00000000 ____D () C:\Users\Susi\10wbc
2015-02-24 04:23 - 2010-07-06 22:02 - 00246920 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

==================== Files in the root of some directories =======

2014-10-18 13:44 - 2014-10-18 13:44 - 6000640 _____ () C:\Program Files\GUT91DA.tmp
2011-04-03 11:11 - 2013-08-16 14:11 - 0010752 _____ () C:\Users\Susi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-03-16 20:48 - 2013-03-16 20:48 - 0004500 _____ () C:\Users\Susi\AppData\Local\recently-used.xbel
2011-12-13 19:11 - 2011-12-13 19:11 - 0000000 _____ () C:\Users\Susi\AppData\Local\{3CDE3D51-92C6-4A67-860C-B19793B73D01}
2011-01-31 21:54 - 2014-07-03 17:03 - 0001004 ___SH () C:\ProgramData\KGyGaAvL.sys

Some content of TEMP:
====================
C:\Users\Paula\AppData\Local\Temp\AskSLib.dll
C:\Users\Paula\AppData\Local\Temp\avgnt.exe
C:\Users\Susanne\AppData\Local\Temp\AskSLib.dll
C:\Users\Susanne\AppData\Local\Temp\avgnt.exe
C:\Users\Susanne\AppData\Local\Temp\FreemakeVideoConverter_3.1.1.4.exe
C:\Users\Susanne\AppData\Local\Temp\fx-runtime.exe
C:\Users\Susanne\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Susanne\AppData\Local\Temp\ose00000.exe
C:\Users\Susanne\AppData\Local\Temp\ose00001.exe
C:\Users\Susanne\AppData\Local\Temp\ose00002.exe
C:\Users\Susanne\AppData\Local\Temp\Resource.MG2010.dll
C:\Users\Susanne\AppData\Local\Temp\Setup.exe
C:\Users\Susanne\AppData\Local\Temp\shelper.dll
C:\Users\Susi\AppData\Local\Temp\AskSLib.dll
C:\Users\Susi\AppData\Local\Temp\avgnt.exe
C:\Users\Susi\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Susi\AppData\Local\Temp\Setup_Downloader_3.0.51b.exe
C:\Users\Susi\AppData\Local\Temp\Setup_Downloader_3.6.0_stable.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015
Ran by Susi at 2015-03-17 07:46:52
Running from C:\Users\Susi\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

3DFiBs Backgammon 4.0.79 (HKLM\...\3DFiBs_is1) (Version:  - )
7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
ABC der Tiere 1 (HKLM\...\ABC der Tiere 1 1.0) (Version: 1.0 - Mildenberger)
ABC der Tiere Spiele (HKLM\...\com.mildenberger.abdeti) (Version: 1.0 - UNKNOWN)
ABC der Tiere Spiele (Version: 1.0 - UNKNOWN) Hidden
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.5.0.880 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-4268347659-1046126219-2503854065-1002\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Apple Application Support (HKLM\...\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}) (Version: 2.1.7 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio (HKLM\...\Ashampoo Burning Studio_is1) (Version: 9.23.0 - ashampoo GmbH & Co. KG)
Ashampoo Photo Commander (HKLM\...\Ashampoo Photo Commander_is1) (Version: 8.3.2 - ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer (HKLM\...\Ashampoo Photo Optimizer_is1) (Version: 3.12.0 - ashampoo GmbH & Co. KG)
Ashampoo Snap (HKLM\...\Ashampoo Snap_is1) (Version: 3.4.1 - ashampoo GmbH & Co. KG)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.27 - Atheros Communications Inc.)
Audacity 2.0.3 (HKLM\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Audiograbber 1.83 SE  (HKLM\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Avery Wizard 4.0 (HKLM\...\{F5D84887-8A6F-4993-8560-B3AA44CB620D}) (Version: 4.0.201 - Avery)
Avira (HKLM\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)
Avira (Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 15.0.8.650 - Avira)
Botanicula (HKLM\...\Botanicula) (Version: 1.0 - Daedalic Entertainment)
BrettspielWelt (HKLM\...\BSW) (Version:  - )
Canon iP3600 series Benutzerregistrierung (HKLM\...\Canon iP3600 series Benutzerregistrierung) (Version:  - )
Canon iP3600 series Printer Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP3600_series) (Version:  - )
Canon Utilities Easy-PhotoPrint EX (HKLM\...\Easy-PhotoPrint EX) (Version:  - )
Canon Utilities My Printer (HKLM\...\CanonMyPrinter) (Version:  - )
Canon Utilities Solution Menu (HKLM\...\CanonSolutionMenu) (Version:  - )
CD goes MP3 Gold Edition 12 (HKLM\...\{AAC171CE-2D9E-4A50-B1A6-2A7995A0A614}_is1) (Version: CD goes MP3 Gold Edition 12 - FRANZIS GmbH)
CdCoverCreator 2.5.3 (HKLM\...\CdCoverCreator) (Version: 2.5.3 - thyanté Software)
CDRWIN10 (Version: 10.0.5312.24918 - Engelmann Media GmbH) Hidden
CDRWIN10 Free (HKLM\...\{e4907608-f949-4e93-8910-021615fd09ef}) (Version: 10.0.5312.24939 - Engelmann Media GmbH)
Cliqz (HKLM\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.22 - Cliqz.com)
Color Pic-a-Pix Light Vol 2 (HKLM\...\{ACA937D6-A90B-4FE3-81DE-DA7274C23F1E}) (Version: 1.00.0000 - Conceptis)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
concept/design Video Jukebox (HKLM\...\{37569A10-CB38-4615-8B32-0BF9FF5D887D}_is1) (Version: Video Jukebox - concept/design GmbH)
CorelDRAW Essentials 4 - Content (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Draw (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Filters (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - ICA (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang BR (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang DE (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang EN (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang ES (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang FR (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang IT (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang NL (Version: 4.0 - Uw bedrijfsnaam) Hidden
CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Windows Shell Extension (HKLM\...\_{CF0ADC18-6D8F-4353-8EAA-DF45456B7853}) (Version:  - Corel Corporation)
CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1 - Corel Corporation) Hidden
CorelDRAW Essentials 4 (HKLM\...\_{C0237AA4-1BFB-46EA-860D-7B0EB365CA13}) (Version:  - Corel Corporation)
CorelDRAW Essentials 4 (Version: 4.0 - Corel Corporation) Hidden
Crazy Machines Elements - DEMO (HKLM\...\Crazy Machines Elements - DEMO_is1) (Version: 1.0 - dtp)
CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2602 - CyberLink Corp.)
CyberLink MediaShow (HKLM\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.0.1410a - CyberLink Corp.)
CyberLink MediaShow Espresso (HKLM\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 5.5.1412_24021a - CyberLink Corp.)
CyberLink PhotoNow (HKLM\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3101 - CyberLink Corp.)
CyberLink PowerDVD 9 (HKLM\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.2925.52 - CyberLink Corp.)
CyberLink PowerDVD Copy (HKLM\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)
CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.2.2326 - CyberLink Corp.)
CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.0.2626 - CyberLink Corp.)
Deponia (HKLM\...\Deponia) (Version: 1.0 - Daedalic Entertainment)
DesignCAD 3D Max 22 (HKLM\...\{CCB44106-246E-45A5-8507-801F39EFB55B}) (Version: 22.0.0 - IMSIDesign)
DesignCAD Toolkit Architektur & Planung 22 Version 22 (HKLM\...\DesignCAD Toolkit Architektur & Planung 22_is1) (Version: 22 - Franzis Verlag)
DesignCAD Toolkit Holz- & Tischlerarbeiten 22 Version 22 (HKLM\...\DesignCAD Toolkit Holz- & Tischlerarbeiten 22_is1) (Version: 22 - Franzis Verlag)
DesignCAD Toolkit Maschinenbau & Konstruktion 22 Version 22 (HKLM\...\DesignCAD Toolkit Maschinenbau & Konstruktion 22_is1) (Version: 22 - Franzis Verlag)
DriverAgent by eSupport.com (HKLM\...\DriverAgent.exe) (Version:  - )
ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.2.20140326 - Landesfinanzdirektion Thüringen)
eXtreme Gammon (HKLM\...\{068D970F-203E-45AF-AFFB-5D0F5BDCF80A}_is1) (Version: 1.21 - GameSite 2000, Ltd.)
eXtreme Gammon 2 (HKLM\...\{2F5AF5E1-E021-4832-A423-EF480EC58A0B}_is1) (Version: 2.10 - GameSite 2000, Ltd.)
fotokasten comfort 5.0 (HKLM\...\fotokasten comfort_is1) (Version:  - )
Free Audio Converter version 5.0.28.827 (HKLM\...\Free Audio Converter_is1) (Version: 5.0.28.827 - DVDVideoSoft Ltd.)
Freemake Video Converter Version 3.1.1 (HKLM\...\Freemake Video Converter_is1) (Version: 3.1.1 - Ellora Assets Corporation)
G DATA Logox4 Speechengine (HKLM\...\lgx4.lgx.server) (Version:  - G DATA Software AG)
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
GNU Backgammon (MAIN branch, 20110117 code) (HKLM\...\GNU Backgammon_is1) (Version:  - Free Software Foundation)
GOG.com Downloader version 3.6.0 (HKLM\...\{456A5815-604D-4D72-94DF-346D2B978A59}_is1) (Version: 3.6.0 - GOG.com)
Google Chrome (HKLM\...\Google Chrome) (Version: 41.0.2272.89 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden
GridGammon 3.8.0 (Build 896) (HKLM\...\GridGammon) (Version: 3.8.0 (Build 896) - Jensen-Barclay, LLC)
Haali Media Splitter (HKLM\...\HaaliMkx) (Version:  - )
HTC Sync Manager (HKLM\...\{368E4EF8-E840-40EE-A224-50B8D1DC2B12}) (Version: 2.4.11.0 - HTC)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2141 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
Janosch Panama (HKLM\...\{F7A85035-F253-4003-B9DF-AF02493E096D}) (Version: 1.00.0000 - Terzio Verlag)
Janosch Straßenverkehr (HKLM\...\{109CE01E-3C45-4AD0-92D0-9102E0D56648}) (Version: 1.00.0000 - Terzio Verlag)
Janosch Tigerschule (HKLM\...\{DB7DEBC2-8031-4186-A5C2-DAD6C823853C}) (Version: 1.00.0000 - Terzio Verlag)
Java 7 Update 7 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217007FF}) (Version: 7.0.70 - Oracle)
Java(TM) 6 Update 21 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216021FF}) (Version: 6.0.210 - Oracle)
Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
KONZ-Steuer-2014 (HKLM\...\InstallShield_{20F1078B-E3B6-4DA1-9570-003DE110890A}) (Version: 1.00.0000 - USM)
KONZ-Steuer-2014 (Version: 1.00.0000 - USM) Hidden
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version:  - )
Launch Manager (HKLM\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.5.1.2 - Wistron Corp.)
LeechFTP  (HKLM\...\LeechFTP) (Version:  - )
Lernen durch Wiederholung 6.2.3 (HKLM\...\Lernen durch Wiederholung_is1) (Version:  - ©Matthias Kraus)
Lernwerkstatt 9 (HKLM\...\InstallShield_{4AA318E7-344F-4A0C-A63D-82A30B1A8F74}) (Version: 9.00.0000 - Medienwerkstatt Mühlacker Verlagsgesellschaft mbH)
Lernwerkstatt 9 (Version: 9.00.0000 - Medienwerkstatt Mühlacker Verlagsgesellschaft mbH) Hidden
Macromedia HomeSite 5 (HKLM\...\{74307C3F-EBD4-11D4-A4D9-0010A4C3AFF0}) (Version:  - )
Medion Home Cinema (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.1505 - CyberLink Corp.)
Medion Home Cinema (Version: 8.0.1505 - CyberLink Corp.) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM\...\{91110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Morrowind (HKLM\...\{1D108D70-E7D1-4089-9A0A-99629C4D0CB8}) (Version:  - )
Mozilla Firefox 36.0.1 (x86 de) (HKLM\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 36.0.1 - Mozilla)
Mozilla Thunderbird (3.1.9) (HKLM\...\Mozilla Thunderbird (3.1.9)) (Version: 3.1.9 (de) - Mozilla)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero BackItUp 12 Essentials (HKLM\...\{0E3368AC-FB29-4C5E-938E-FA11C12D035E}) (Version: 12.0.01200 - Nero AG)
Nero Backup Drivers (HKLM\...\{F8EF9B71-53E7-41F5-8E54-47B4C979CB38}) (Version: 12.0.4000 - Nero AG)
Nero CoverDesigner (HKLM\...\{35F59E66-CAA0-4585-8DC4-037A04717FCF}) (Version: 12.0.01100 - Nero AG)
NVIDIA PhysX (HKLM\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
OpenAL (HKLM\...\OpenAL) (Version:  - )
OpeningCeremony (HKLM\...\{CD759771-56A9-4629-A5DD-74DB6D8CFCF9}) (Version: 1.0.0 - Opening Ceremony)
Opera 11.61 (HKU\S-1-5-21-4268347659-1046126219-2503854065-1002\...\Opera 11.61.1250) (Version: 11.61.1250 - Opera Software ASA)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.4.1 - Frank Heindörfer, Philip Chinery)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden
QuickTime (HKLM\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6167 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30121 - Realtek Semiconductor Corp.)
Rosetta Stone Version 3 (HKLM\...\{99011A6E-5200-11DE-BDB8-7ACD56D89593}) (Version: 3.4.5.0 - Rosetta Stone Ltd.)
SAMSUNG Intelli-studio (HKLM\...\Intelli-studio) (Version:  - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuer 2013 (HKLM\...\{05AEF487-8926-48A9-B5BA-9BED72BC6B1C}) (Version: 21.00.8480 - Buhl Data Service GmbH)
Streamripper (Remove only) (HKLM\...\Streamripper) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.19.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM\...\{943A8D28-80D6-41DC-AE94-81FEB42041BF}) (Version: 4.5.1.0 - Husdawg, LLC)
TeamViewer 10 (HKLM\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
TES Construction Set (HKLM\...\{58D68DF0-4E8B-4E9E-B425-670F9E37C1A8}) (Version:  - )
The Book Of Unwritten Tales Version 1.02 (HKLM\...\The Book Of Unwritten Tales_is1) (Version: 1.02 - Crimson Cow GmbH)
The Book Of Unwritten Tales: Die Vieh Chroniken Version 1.2 (HKLM\...\33B31D6D-7EFB-45A3-AC50-4DAF98042443_is1) (Version: 1.2 - Crimson Cow GmbH)
The Journey Down: Chapter One (HKLM\...\Steam App 220090) (Version:  - SkyGoblin)
TopStyle Lite (Version 2) (HKLM\...\TopStyle Lite (Version 2)) (Version:  - )
UnderCoverXP 1.23 (HKLM\...\UnderCoverXP_is1) (Version:  - Wicked & Wild Inc.)
Winamp (HKLM\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live Anmelde-Assistent (HKLM\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Encoder 9 Series (HKLM\...\Windows Media Encoder 9) (Version:  - )
WinX HD Video Converter Deluxe 5.5.3 (HKLM\...\WinX HD Video Converter Deluxe_is1) (Version:  - Digiarty Software, Inc.)
WISO Mein Geld 2011 Professional (HKLM\...\WISO Mein Geld 2011 Professional) (Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2011 Professional (Version: 12.00.02.0024 - Buhl Data Service GmbH) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

ATTENTION: System Restore is disabled.
Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)


(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => 
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => 
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => 

==================== Loaded Modules (whitelisted) ==============

2012-03-04 19:42 - 2001-12-11 15:48 - 00270336 _____ () C:\Windows\system32\CfShellFtpRds.dll
2012-03-04 19:42 - 2001-12-11 15:47 - 00442368 _____ () C:\Windows\system32\cfssvradmin.dll
2012-03-04 19:42 - 2001-12-11 15:48 - 00147456 _____ () C:\Windows\system32\CFFileProxy.dll
2013-11-14 21:32 - 2013-11-14 21:32 - 00821600 _____ () C:\Program Files\HTC\HTC Sync Manager\HTC Sync\adb.exe
2009-11-02 22:20 - 2009-11-02 22:20 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 22:23 - 2009-11-02 22:23 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll
2011-10-21 16:50 - 2011-10-21 16:50 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2013-05-22 19:50 - 2013-05-22 19:50 - 00400704 _____ () C:\Users\Susi\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
2015-02-06 20:34 - 2015-02-06 20:34 - 16852144 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:8D09CB9B

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4268347659-1046126219-2503854065-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Susi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-4268347659-1046126219-2503854065-500 - Administrator - Disabled)
Gast (S-1-5-21-4268347659-1046126219-2503854065-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4268347659-1046126219-2503854065-1011 - Limited - Enabled)
Paula (S-1-5-21-4268347659-1046126219-2503854065-1004 - Limited - Enabled) => C:\Users\Paula
Susanne (S-1-5-21-4268347659-1046126219-2503854065-1000 - Administrator - Enabled) => C:\Users\Susanne
Susi (S-1-5-21-4268347659-1046126219-2503854065-1002 - Limited - Enabled) => C:\Users\Susi

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/17/2015 07:11:12 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Failed to process session change. System.NullReferenceException: Object reference not set to an instance of an object.
   at Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
   at System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)

Error: (03/15/2015 11:15:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: gridgammon.exe, Version: 3.8.0.896, Zeitstempel: 0x495218c3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000029
Fehleroffset: 0x000905be
ID des fehlerhaften Prozesses: 0x119c
Startzeit der fehlerhaften Anwendung: 0xgridgammon.exe0
Pfad der fehlerhaften Anwendung: gridgammon.exe1
Pfad des fehlerhaften Moduls: gridgammon.exe2
Berichtskennung: gridgammon.exe3

Error: (03/15/2015 09:45:50 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.   0xc0041801 (0xc0041801)

Error: (03/15/2015 09:45:50 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=2350} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.   0xc0041801 (0xc0041801)

Error: (03/15/2015 07:37:57 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "F:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (03/15/2015 03:02:09 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!

Error: (03/15/2015 02:49:02 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Failed to process session change. System.NullReferenceException: Object reference not set to an instance of an object.
   at Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
   at System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)

Error: (03/15/2015 02:48:57 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!

Error: (03/15/2015 02:34:20 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!

Error: (03/15/2015 02:33:03 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!


System errors:
=============
Error: (03/16/2015 07:17:19 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (03/15/2015 09:53:04 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (03/15/2015 09:50:28 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Search" wurde nicht richtig gestartet.

Error: (03/15/2015 09:43:56 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (03/15/2015 09:38:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (03/15/2015 07:29:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/15/2015 07:29:49 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht.

Error: (03/15/2015 07:28:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (03/15/2015 04:08:59 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Sicherheitscenter" wurde mit folgendem Fehler beendet: 
%%1747

Error: (03/15/2015 04:02:27 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================
Error: (03/17/2015 07:11:12 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Failed to process session change. System.NullReferenceException: Object reference not set to an instance of an object.
   at Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
   at System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)

Error: (03/15/2015 11:15:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: gridgammon.exe3.8.0.896495218c3ntdll.dll6.1.7601.18247521ea91cc0000029000905be119c01d05f692709fc08C:\Program Files\GridGammon\gridgammon.exeC:\Windows\SYSTEM32\ntdll.dllbfc82527-cb60-11e4-a163-00262dc25d3b

Error: (03/15/2015 09:45:50 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.   0xc0041801 (0xc0041801)
The catalog is corrupt

Error: (03/15/2015 09:45:50 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.   0xc0041801 (0xc0041801)
2350

Error: (03/15/2015 07:37:57 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: F:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)

Error: (03/15/2015 03:02:09 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0

Error: (03/15/2015 02:49:02 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Failed to process session change. System.NullReferenceException: Object reference not set to an instance of an object.
   at Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
   at System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)

Error: (03/15/2015 02:48:57 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0

Error: (03/15/2015 02:34:20 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0

Error: (03/15/2015 02:33:03 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) CPU P6000 @ 1.87GHz
Percentage of memory in use: 37%
Total physical RAM: 3510.61 MB
Available physical RAM: 2180.44 MB
Total Pagefile: 7019.5 MB
Available Pagefile: 5342.29 MB
Total Virtual: 2047.88 MB
Available Virtual: 1916.77 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:415.13 GB) (Free:147.72 GB) NTFS
Drive d: (Recover) (Fixed) (Total:49.53 GB) (Free:5.99 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================
         

Exportierte Ereignisse:

16.03.2015 18:05 [System-Scanner] Malware gefunden
      Die Datei 
      'C:\AdwCleaner\Quarantine\C\Users\Susanne\AppData\Local\Temp\OCS\ocs_v7f.exe.vir
      '
      enthielt einen Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '49518247.qua' 
      verschoben!

16.03.2015 18:05 [System-Scanner] Malware gefunden
      Die Datei 'C:\Users\Susanne\AppData\Local\Temp\OCS\ocs_v7f.exe'
      enthielt einen Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '51c6adee.qua' 
      verschoben!

15.03.2015 23:49 [System-Scanner] Malware gefunden
      Die Datei 
      'C:\AdwCleaner\Quarantine\C\Users\Susanne\AppData\Local\Temp\OCS\ocs_v7f.exe.vir
      '
      enthielt einen Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware].
      Durchgeführte Aktion(en):
      Die Datei wurde ignoriert.

15.03.2015 19:58 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\$RECYCLE.BIN\S-1-5-21-4268347659-1046126219-2503854065-1002\$R3N2RGW.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

15.03.2015 19:58 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\$RECYCLE.BIN\S-1-5-21-4268347659-1046126219-2503854065-1002\$R3N2RGW.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

15.03.2015 19:57 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\$RECYCLE.BIN\S-1-5-21-4268347659-1046126219-2503854065-1002\$R3N2RGW.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Übergeben an Scanner

15.03.2015 19:57 [System-Scanner] Malware gefunden
      Die Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      enthielt einen Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware].
      Durchgeführte Aktion(en):
      Die Datei wurde ignoriert.

15.03.2015 19:57 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

15.03.2015 19:57 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

15.03.2015 19:57 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

15.03.2015 19:57 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

15.03.2015 19:55 [System-Scanner] Malware gefunden
      Die Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      enthielt einen Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware].
      Durchgeführte Aktion(en):
      Die Datei wurde ignoriert.

15.03.2015 19:54 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

12.03.2015 14:47 [System-Scanner] Malware gefunden
      Die Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      enthielt einen Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware].
      Durchgeführte Aktion(en):
      Die Datei wurde gelöscht.

12.03.2015 14:45 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

11.03.2015 21:25 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

11.03.2015 21:22 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

11.03.2015 21:17 [Echtzeit-Scanner] Malware gefunden
      In der Datei 
      'C:\AdwCleaner\Quarantine\C\Users\Susanne\AppData\Local\Temp\OCS\ocs_v7f.exe.vir
      '
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Übergeben an Scanner

11.03.2015 20:57 [System-Scanner] Malware gefunden
      Die Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      enthielt einen Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware].
      Durchgeführte Aktion(en):
      Die Datei wurde ignoriert.

11.03.2015 20:50 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Users\Susi\Downloads\Free PDF to Word Doc Converter - 
      CHIP-Downloader.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/DownloadSponsor.Gen' 
      [riskware] gefunden.
      Ausgeführte Aktion: Zugriff verweigern