Moin Moin

Antivir sagte mir gerade das ein Virus gefunden wurde, tr/agent 6225408,

über google.de bin ich hier gelandet und hoffe jetz auf Hilfe,


falls ich das hier in die falsche Rubrick gesetzt hab, sorry,


vielen Dank schonmal im voraus

mfg

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

ok, danke





FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-04-2015
Ran by flo (administrator) on PEPE on 13-04-2015 15:08:53
Running from C:\Users\flo\Downloads
Loaded Profiles: flo (Available profiles: flo)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Windows\System32\PSIService.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Users\flo\AppData\Local\RGMService\RGMUpdater.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Wistron) C:\Program Files\Launch Manager\HotkeyApp.exe
(Wistron Corp.) C:\Program Files\Launch Manager\OSD.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WButton.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WisLMSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATIILE.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(The Chromium Authors) C:\Users\flo\AppData\Local\Chrome\Application\chrome.exe
(The Chromium Authors) C:\Users\flo\AppData\Local\Chrome\Application\chrome.exe
(The Chromium Authors) C:\Users\flo\AppData\Local\Chrome\Application\chrome.exe
(The Chromium Authors) C:\Users\flo\AppData\Local\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HotkeyApp] => C:\Program Files\Launch Manager\HotkeyApp.exe [200704 2009-12-14] (Wistron)
HKLM\...\Run: [LMgrVolOSD] => C:\Program Files\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.)
HKLM\...\Run: [Wbutton] => C:\Program Files\Launch Manager\Wbutton.exe [413696 2010-01-13] (Wistron Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2009-12-11] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8522272 2010-03-02] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [678432 2010-03-02] (Realtek Semiconductor)
HKLM\...\Run: [Ocs_SM] => C:\Users\flo\AppData\Roaming\OCS\SM\SearchAnonymizer.exe [106496 2012-12-07] (OCS)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-02-13] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)
HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.)
HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5529880 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIILE.EXE [249440 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-99378946-2197382736-718538521-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-99378946-2197382736-718538521-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-99378946-2197382736-718538521-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-99378946-2197382736-718538521-1000\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKU\S-1-5-21-99378946-2197382736-718538521-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
SearchScopes: HKLM -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
BHO: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-10-17] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-05-26] (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-10-17] (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-05-26] (Microsoft Corporation.)
Toolbar: HKLM - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
Toolbar: HKU\S-1-5-21-99378946-2197382736-718538521-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default
FF DefaultSearchEngine: Web Search
FF SelectedSearchEngine: Web Search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-06] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-10-17] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll No File
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll No File
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-12-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-12-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-12-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-12-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-12-02] (Apple Inc.)
FF Extension: FireJump - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\Extensions\firejump@firejump.net [2012-12-07]
FF Extension: WEB.DE MailCheck - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\Extensions\toolbar@web.de [2014-08-11]
FF Extension: Yahoo Community Smartbar - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\Extensions\{b2cf394e-7762-2a77-ecb7-15a2e6be2ecc} [2014-09-09]
FF Extension: Preispilot - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\Extensions\extension@preispilot.com.xpi [2012-12-10]
FF HKLM\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on [2015-02-04]
FF HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Firefox\Extensions: [extension@preispilot.com] - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\extensions\extension@preispilot.com
FF HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Firefox\Extensions: [firejump@firejump.net] - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\extensions\firejump@firejump.net
FF Extension: No Name - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\extensions\ffxtlbr@incredibar.com [Not Found]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
StartMenuInternet: Chrome.WNH2J3SGYMZLCY4K7I3N2ACZMU - C:\Users\flo\AppData\Local\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-04-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-13] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1004032 2015-04-13] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [122000 2011-12-12] (Seiko Epson Corporation)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 RGMUpdater; C:\Users\flo\AppData\Local\RGMService\RGMUpdater.exe [85504 2015-03-24] () [File not signed]
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118560 2009-10-22] (Wistron Corp.)
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.) [File not signed]
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-10] (Avira Operations GmbH & Co. KG)
S3 ksapi; C:\Windows\system32\drivers\ksapi.sys [81768 2014-12-10] (Kingsoft Corporation)
S3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [786400 2009-08-13] (DiBcom SA)
S3 RTL2832UBDA; C:\Windows\System32\drivers\RTL2832UBDA.sys [188520 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832UUSB; C:\Windows\System32\Drivers\RTL2832UUSB.sys [32872 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832U_IRHID; C:\Windows\System32\DRIVERS\RTL2832U_IRHID.sys [42728 2011-06-13] (Realtek)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [104744 2009-03-25] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [124016 2010-03-15] (MCCI Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-12-12] (Avira GmbH)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13720 2009-05-13] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27160 2009-05-13] (X10 Wireless Technology, Inc.)
U3 mbr; C:\Users\flo\AppData\Local\Temp\mbr.sys [25088 2015-04-13] () [File not signed]
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\flo\AppData\Local\Temp\catchme.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 Profos; \??\C:\Program Files\BullGuard Ltd\BullGuard\antirootkit\profos.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
U5 TMUSB; C:\Windows\System32\DRIVERS\TMUSBXP.SYS [49408 2014-03-19] (Seiko Epson Corporation)
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-13 15:08 - 2015-04-13 15:09 - 00018792 _____ () C:\Users\flo\Downloads\FRST.txt
2015-04-13 15:08 - 2015-04-13 15:08 - 01135616 _____ (Farbar) C:\Users\flo\Downloads\FRST.exe
2015-04-13 15:08 - 2015-04-13 15:08 - 00000000 ____D () C:\FRST
2015-04-13 14:20 - 2015-04-13 14:20 - 00000056 _____ () C:\Windows\setupact.log
2015-04-13 14:20 - 2015-04-13 14:20 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-13 14:19 - 2015-04-13 14:19 - 00000552 _____ () C:\Windows\PFRO.log
2015-04-13 14:08 - 2015-04-13 14:26 - 00000000 ____D () C:\ComboFix
2015-04-13 14:08 - 2015-04-13 14:08 - 00000000 ____D () C:\Qoobox
2015-04-13 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-04-13 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-04-13 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-04-13 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-04-13 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-04-13 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-04-13 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-04-13 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-04-13 14:07 - 2015-04-13 14:19 - 00000000 ____D () C:\Windows\erdnt
2015-04-13 10:35 - 2015-03-25 05:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-13 10:35 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-13 10:35 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-13 10:35 - 2015-03-23 04:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-13 10:32 - 2015-04-13 10:32 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-13 10:27 - 2015-04-13 10:28 - 04218880 _____ (Piriform Ltd) C:\Users\flo\Downloads\ccsetup504_slim.exe
2015-03-26 10:11 - 2015-03-26 10:14 - 00000000 ____D () C:\Program Files\ProductUI
2015-03-26 10:11 - 2015-03-26 10:11 - 00000000 ____D () C:\ProgramData\Packer7abd1f03-4407-4053-a033-724f570d658c
2015-03-21 10:36 - 2015-04-13 11:09 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-03-16 13:59 - 2015-03-16 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-03-16 13:58 - 2015-03-16 13:59 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
2015-03-16 13:58 - 2015-03-16 13:59 - 00000000 ____D () C:\Program Files\iTunes
2015-03-16 13:58 - 2015-03-16 13:58 - 00000000 ____D () C:\Program Files\iPod

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-13 14:38 - 2012-07-02 15:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-13 14:31 - 2009-07-14 06:34 - 00018928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-13 14:31 - 2009-07-14 06:34 - 00018928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-13 14:27 - 2010-03-02 07:02 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-13 14:24 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2015-04-13 14:20 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-13 10:48 - 2014-12-15 14:41 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-13 10:48 - 2014-05-07 14:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-13 10:48 - 2014-01-28 09:58 - 01890989 ____N () C:\Windows\WindowsUpdate.log
2015-04-13 10:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-04-13 10:28 - 2012-01-29 14:58 - 00000000 ____D () C:\Program Files\CCleaner
2015-04-13 09:56 - 2012-12-12 12:37 - 00000000 ____D () C:\Users\flo\AppData\Roaming\Avira
2015-04-13 09:56 - 2012-12-12 12:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-04-13 09:54 - 2010-09-16 19:02 - 00000000 ____D () C:\ProgramData\Avira
2015-04-13 09:44 - 2014-08-06 09:19 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-13 09:44 - 2012-12-12 12:36 - 00000000 ____D () C:\Program Files\Avira
2015-04-13 09:43 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2015-03-29 13:35 - 2012-01-21 22:45 - 00000000 ____D () C:\Users\flo\AppData\Roaming\vlc
2015-03-26 10:11 - 2014-12-10 11:04 - 00000000 ____D () C:\Users\flo\AppData\Local\RGMService
2015-03-26 10:10 - 2010-03-02 07:52 - 00000000 ____D () C:\ProgramData\Adobe
2015-03-21 16:44 - 2010-06-19 18:08 - 00000000 ____D () C:\Users\flo\AppData\Local\Microsoft Help
2015-03-21 12:17 - 2014-12-14 13:02 - 00000000 ____D () C:\Users\flo\Desktop\Bilder für Kalender 15
2015-03-21 12:12 - 2010-06-19 17:05 - 00000000 ____D () C:\Alles
2015-03-21 11:20 - 2010-06-16 19:56 - 00000000 ____D () C:\Users\flo
2015-03-21 10:47 - 2010-06-17 21:36 - 00000000 ____D () C:\Users\flo\AppData\Roaming\Adobe
2015-03-21 10:36 - 2012-01-17 12:50 - 00000000 ____D () C:\Program Files\Adobe
2015-03-21 10:36 - 2010-11-27 08:51 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-03-21 10:35 - 2012-08-27 20:19 - 00000000 ____D () C:\Users\flo\Desktop\LTG63
2015-03-21 10:35 - 2010-06-18 11:45 - 00000000 ____D () C:\Users\flo\AppData\Local\Adobe
2015-03-16 15:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2015-03-16 13:58 - 2010-08-31 18:21 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-03-16 13:24 - 2014-12-10 13:49 - 00384664 _____ () C:\Windows\system32\FNTCACHE.DAT

==================== Files in the root of some directories =======

2010-09-27 07:41 - 2010-11-03 21:23 - 0289847 _____ () C:\Users\flo\AppData\Roaming\mdbu.bin
2010-07-02 09:56 - 2011-06-13 13:37 - 0000112 _____ () C:\Users\flo\AppData\Roaming\wklnhst.dat
2011-06-07 13:58 - 2011-06-07 14:02 - 0009216 _____ () C:\Users\flo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-06-18 12:23 - 2010-06-18 12:23 - 0000000 _____ () C:\ProgramData\cmn_upld.log
2010-06-18 15:47 - 2010-06-18 18:23 - 0000504 _____ () C:\ProgramData\FastPics.log
2010-06-18 18:23 - 2013-08-15 09:44 - 0106682 _____ () C:\ProgramData\lxea.log
2010-08-30 14:06 - 2013-08-08 20:28 - 0001163 _____ () C:\ProgramData\lxeaDiagnostics.log
2010-06-18 18:23 - 2010-08-05 09:06 - 0010274 _____ () C:\ProgramData\lxeaJSW.log
2010-06-18 15:47 - 2013-08-15 09:44 - 0422729 _____ () C:\ProgramData\lxeascan.log
2010-06-18 12:23 - 2010-06-18 12:23 - 0000000 _____ () C:\ProgramData\LxWbGwLog.log
2010-06-18 12:22 - 2010-06-18 12:22 - 0000000 _____ () C:\ProgramData\UpdaterLog.txt

Some content of TEMP:
====================
C:\Users\flo\AppData\Local\temp\avgnt.exe
C:\Users\flo\AppData\Local\temp\catchme.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-27 10:42

==================== End Of Log ============================
         

--- --- ---

--- --- ---






und

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-04-2015
Ran by flo at 2015-04-13 15:09:44
Running from C:\Users\flo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.00.631.5823 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.00.631.5823 - ABBYY) Hidden
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.42.34 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-2E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ask Toolbar (HKLM\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.15.13.0 - Ask.com) <==== ATTENTION
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.23 - Atheros Communications Inc.)
Avanquest update (HKLM\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.28 - Avanquest Software)
Avira (HKLM\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)
Avira SearchFree Toolbar plus Web Protection Updater (HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.3.33021 - Ask.com) <==== ATTENTION
Benutzerhandbuch EPSON XP-205 207 Series (HKLM\...\EPSON XP-205 207 Series Useg) (Version:  - )
Bing Bar (HKLM\...\{F6A6DFF9-F71C-4BA6-B437-F18872866D3D}) (Version: 7.0.791.0 - Microsoft Corporation)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.04 - Piriform)
Chromium Browser (HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Chromium) (Version: 41.0.2231.0 - Chrome)
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Epson Connect Printer Setup (HKLM\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION)
Epson E-Web Print (HKLM\...\{682A3328-9621-4BAD-91FA-873A076610C4}) (Version: 1.21.0000 - SEIKO EPSON CORPORATION)
EPSON Printer Finder (HKLM\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-205 207 Series Printer Uninstall (HKLM\...\EPSON XP-205 207 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
FireJump (HKLM\...\{D85FFE92-BF14-4E9B-BCCD-E5C16069E65F}_is1) (Version: 1.0.2.5 - FireJump.net)
Fotogalerie (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2092 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.0.1037 - Intel Corporation)
iTunes (HKLM\...\{3A9FE6B1-EE7F-40AC-B831-AC7C9ABB58A0}) (Version: 12.1.1.4 - Apple Inc.)
Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Junk Mail filter update (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Launch Manager V1.5.0.8 (HKLM\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.5.0.8 - Wistron Corp.)
Lexmark Tools for Office (HKLM\...\{10812DE7-2E57-4740-B226-6B3BE34AF9D7}) (Version: 1.29.0.0 - )
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)
Movie Maker (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Netzwerkhandbuch EPSON XP-205 207 Series (HKLM\...\EPSON XP-205 207 Series Netg) (Version:  - )
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Pixum Fotobuch (HKLM\...\Pixum Fotobuch) (Version: 5.1.3 - CEWE Stiftung u Co. KGaA)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
PlayStation(R)Network Downloader (HKLM\...\{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}) (Version: 2.00.00005 - Sony Computer Entertainment Inc.)
PlayStation(R)Store (HKLM\...\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}) (Version: 2.7.6.06777 - Sony Computer Entertainment Inc.)
Preispilot für Firefox (HKLM\...\{0D8E6567-7082-48DB-A305-293873AC8B39}_is1) (Version: 2.0 - Preispilot)
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
REALTEK DTV USB DEVICE (HKLM\...\{DDBB7C89-1A09-441E-AA0F-6AA465755C17}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6057 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30101 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM\...\{9D3D8C60-A55F-4fed-B2B9-173F09590E16}) (Version: 1.00.0145 - REALTEK Semiconductor Corp.)
RGMUpdater Monetization Control (HKLM\...\RGMUpdater Monetization Control7abd1f03-4407-4053-a033-724f570d658c) (Version: 2.2.0322.1140 -  )
SearchAnonymizer (HKLM\...\SearchAnonymizer) (Version: 1.0.1 (de) - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Software Updater (HKLM\...\{FA7EE274-7370-43B7-9A45-A39B17CCCDC5}) (Version: 4.3.3 - SEIKO EPSON CORPORATION)
Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.12.13.28 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.221 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.221 - Sony)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.19.0 - Synaptics Incorporated)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR 4.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
X10 Hardware(TM) (HKLM\...\X10Hardware) (Version:  - )
Yahoo Community Smartbar Engine (HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\{9175b5d1-0957-49c6-adbd-8b216e906126}) (Version: 11.112.66.19229 - Linkury Inc.) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{A0307B42-4A5B-39CA-E417-14D9FA480C5D}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}\localserver32 -> C:\Users\flo\AppData\Local\Chrome\Application\41.0.2231.0\delegate_execute.exe (The Chromium Authors)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\FileSyncApi.dll (Microsoft Corporation)

==================== Restore Points  =========================

21-03-2015 10:34:18 Windows Update
26-03-2015 10:19:39 Windows Update
13-04-2015 09:52:30 Windows Update
13-04-2015 10:31:37 Windows Update
13-04-2015 10:35:19 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2015-04-13 14:19 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0D80E487-ACB9-482E-B45A-49BB7DC12FFD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06] (Adobe Systems Incorporated)
Task: {11DCACB2-672E-4D09-AD48-AB9B3C274C47} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {317D4A26-F524-4EB2-B2DA-7E696454FB02} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {3E52A8CF-29E4-414B-8E4F-B0D40F97C8E3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-03-13] (Piriform Ltd)
Task: {71D403B6-8D8F-475C-BCFB-100530B76C66} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {7FAC839F-CF5C-4145-BAC4-64209D3D21EE} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {836022D0-1331-43BE-B294-B7B75650A2BA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {8C454AF1-8AB4-418F-97F9-2045EEEB66EB} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {C8F37DD2-CDF0-4A31-8E1D-63A66220CD65} - System32\Tasks\{8592DDF9-881B-40D2-B719-8EAF0326214F} => pcalua.exe -a C:\Users\flo\Downloads\setup-hochzeit-albfreetheme.exe -d C:\Users\flo\Downloads
Task: {F7B12E58-C5F7-457C-8743-6134C9E83AEF} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2007-06-05 13:20 - 2007-06-05 13:20 - 00177704 _____ () C:\Windows\system32\PSIService.exe
2015-03-24 14:37 - 2015-03-24 14:37 - 00085504 _____ () C:\Users\flo\AppData\Local\RGMService\RGMUpdater.exe
2010-03-02 07:17 - 2009-10-02 14:18 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-04-13 14:25 - 2015-04-13 14:25 - 00053248 _____ () C:\Users\flo\AppData\Local\Temp\catchme.dll
2011-11-06 10:14 - 2011-05-28 23:04 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll
2012-01-10 21:12 - 2012-01-10 21:12 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2015-03-13 15:54 - 2015-03-13 15:54 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-12-10 11:05 - 2014-12-01 07:48 - 01409536 _____ () C:\Users\flo\AppData\Local\Chrome\Application\41.0.2231.0\libglesv2.dll
2014-12-10 11:05 - 2014-12-01 07:48 - 00223744 _____ () C:\Users\flo\AppData\Local\Chrome\Application\41.0.2231.0\libegl.dll
2014-12-10 11:05 - 2014-12-01 07:48 - 09528320 _____ () C:\Users\flo\AppData\Local\Chrome\Application\41.0.2231.0\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-99378946-2197382736-718538521-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\flo\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^flo^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: ICQ => "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
MSCONFIG\startupreg: PDFPrint => C:\Program Files\PDF24\pdf24.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Sony Ericsson PC Companion => "C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background
MSCONFIG\startupreg: Sony Ericsson PC Suite => "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon

==================== Accounts: =============================

Administrator (S-1-5-21-99378946-2197382736-718538521-500 - Administrator - Disabled)
flo (S-1-5-21-99378946-2197382736-718538521-1000 - Administrator - Enabled) => C:\Users\flo
Gast (S-1-5-21-99378946-2197382736-718538521-501 - Limited - Disabled)

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/13/2015 09:52:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: avguard.exe, Version: 15.0.8.652, Zeitstempel: 0x55070e77
Name des fehlerhaften Moduls: gpsauth.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x55070a54
Ausnahmecode: 0xc0000005
Fehleroffset: 0x62c6f93a
ID des fehlerhaften Prozesses: 0x64c
Startzeit der fehlerhaften Anwendung: 0xavguard.exe0
Pfad der fehlerhaften Anwendung: avguard.exe1
Pfad des fehlerhaften Moduls: avguard.exe2
Berichtskennung: avguard.exe3

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (03/26/2015 10:11:28 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:28 AM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden.


Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))


System errors:
=============
Error: (04/13/2015 02:21:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (04/13/2015 02:20:24 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎13.‎04.‎2015 um 14:19:05 unerwartet heruntergefahren.

Error: (04/13/2015 02:15:04 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (04/13/2015 02:10:04 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (04/13/2015 02:07:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "RG Manage Updater" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/13/2015 10:00:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) Rapid Storage Technology" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (04/13/2015 10:00:25 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) Rapid Storage Technology erreicht.

Error: (03/26/2015 08:30:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/26/2015 08:30:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht.

Error: (03/26/2015 04:37:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (04/13/2015 09:52:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: avguard.exe15.0.8.65255070e77gpsauth.dll_unloaded0.0.0.055070a54c000000562c6f93a64c01d075bd3e1972dcC:\Program Files\Avira\AntiVir Desktop\avguard.exegpsauth.dll0ab19135-e1b2-11e4-93e1-00262df9056b

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (03/26/2015 10:11:28 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore

Error: (03/26/2015 10:11:28 AM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
4700

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: 
Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Percentage of memory in use: 47%
Total physical RAM: 3510.6 MB
Available physical RAM: 1855.1 MB
Total Pagefile: 7019.5 MB
Available Pagefile: 5028.41 MB
Total Virtual: 2047.88 MB
Available Virtual: 1901.77 MB

==================== Drives ================================

Drive c: (Alles) (Fixed) (Total:424.66 GB) (Free:130.43 GB) NTFS
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:32.91 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: A995CA8E)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=424.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================
         

Was ist mit meiner Frage nach bisherigen Virenscannerfunden und wenn es welche gab den entsprechenden Logs dazu? Außerdem:

Running from C:\Users\flo\Downloads

Bitte die Anleitung in Zukunft genauer lesen und umsetzen!

Leider hast du unsere Anleitung nicht richtig befolgt:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind.
Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen.
Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter.

FRST jetzt nicht nochmal starten, es war nur ein Hinweis, dass du bitte fortan alle unsere Tools auf den Desktop ablegst!

Verzeihung,

ausser den Antivirfund hab ich nichts anderes

und jetzt vom Desktop...


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-04-2015
Ran by flo (administrator) on PEPE on 13-04-2015 15:34:30
Running from C:\Users\flo\Desktop
Loaded Profiles: flo (Available profiles: flo)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Windows\System32\PSIService.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Users\flo\AppData\Local\RGMService\RGMUpdater.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Wistron) C:\Program Files\Launch Manager\HotkeyApp.exe
(Wistron Corp.) C:\Program Files\Launch Manager\OSD.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WButton.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WisLMSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATIILE.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(The Chromium Authors) C:\Users\flo\AppData\Local\Chrome\Application\chrome.exe
(The Chromium Authors) C:\Users\flo\AppData\Local\Chrome\Application\chrome.exe
(The Chromium Authors) C:\Users\flo\AppData\Local\Chrome\Application\chrome.exe
(The Chromium Authors) C:\Users\flo\AppData\Local\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HotkeyApp] => C:\Program Files\Launch Manager\HotkeyApp.exe [200704 2009-12-14] (Wistron)
HKLM\...\Run: [LMgrVolOSD] => C:\Program Files\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.)
HKLM\...\Run: [Wbutton] => C:\Program Files\Launch Manager\Wbutton.exe [413696 2010-01-13] (Wistron Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2009-12-11] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8522272 2010-03-02] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [678432 2010-03-02] (Realtek Semiconductor)
HKLM\...\Run: [Ocs_SM] => C:\Users\flo\AppData\Roaming\OCS\SM\SearchAnonymizer.exe [106496 2012-12-07] (OCS)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-02-13] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)
HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.)
HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5529880 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIILE.EXE [249440 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-99378946-2197382736-718538521-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-99378946-2197382736-718538521-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-99378946-2197382736-718538521-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-99378946-2197382736-718538521-1000\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKU\S-1-5-21-99378946-2197382736-718538521-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
SearchScopes: HKLM -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
BHO: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-10-17] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-05-26] (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-10-17] (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-05-26] (Microsoft Corporation.)
Toolbar: HKLM - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
Toolbar: HKU\S-1-5-21-99378946-2197382736-718538521-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default
FF DefaultSearchEngine: Web Search
FF SelectedSearchEngine: Web Search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-06] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-10-17] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll No File
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll No File
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-12-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-12-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-12-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-12-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-12-02] (Apple Inc.)
FF Extension: FireJump - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\Extensions\firejump@firejump.net [2012-12-07]
FF Extension: WEB.DE MailCheck - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\Extensions\toolbar@web.de [2014-08-11]
FF Extension: Yahoo Community Smartbar - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\Extensions\{b2cf394e-7762-2a77-ecb7-15a2e6be2ecc} [2014-09-09]
FF Extension: Preispilot - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\Extensions\extension@preispilot.com.xpi [2012-12-10]
FF HKLM\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on [2015-02-04]
FF HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Firefox\Extensions: [extension@preispilot.com] - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\extensions\extension@preispilot.com
FF HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Firefox\Extensions: [firejump@firejump.net] - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\extensions\firejump@firejump.net
FF Extension: No Name - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\93pgu8ix.default\extensions\ffxtlbr@incredibar.com [Not Found]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
StartMenuInternet: Chrome.WNH2J3SGYMZLCY4K7I3N2ACZMU - C:\Users\flo\AppData\Local\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-04-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-13] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1004032 2015-04-13] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [122000 2011-12-12] (Seiko Epson Corporation)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 RGMUpdater; C:\Users\flo\AppData\Local\RGMService\RGMUpdater.exe [85504 2015-03-24] () [File not signed]
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118560 2009-10-22] (Wistron Corp.)
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.) [File not signed]
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-10] (Avira Operations GmbH & Co. KG)
S3 ksapi; C:\Windows\system32\drivers\ksapi.sys [81768 2014-12-10] (Kingsoft Corporation)
S3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [786400 2009-08-13] (DiBcom SA)
S3 RTL2832UBDA; C:\Windows\System32\drivers\RTL2832UBDA.sys [188520 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832UUSB; C:\Windows\System32\Drivers\RTL2832UUSB.sys [32872 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832U_IRHID; C:\Windows\System32\DRIVERS\RTL2832U_IRHID.sys [42728 2011-06-13] (Realtek)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [104744 2009-03-25] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [124016 2010-03-15] (MCCI Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-12-12] (Avira GmbH)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13720 2009-05-13] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27160 2009-05-13] (X10 Wireless Technology, Inc.)
U3 mbr; C:\Users\flo\AppData\Local\Temp\mbr.sys [25088 2015-04-13] () [File not signed]
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\flo\AppData\Local\Temp\catchme.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 Profos; \??\C:\Program Files\BullGuard Ltd\BullGuard\antirootkit\profos.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
U5 TMUSB; C:\Windows\System32\DRIVERS\TMUSBXP.SYS [49408 2014-03-19] (Seiko Epson Corporation)
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-13 15:34 - 2015-04-13 15:34 - 00018986 _____ () C:\Users\flo\Desktop\FRST.txt
2015-04-13 15:09 - 2015-04-13 15:10 - 00030669 _____ () C:\Users\flo\Downloads\Addition.txt
2015-04-13 15:08 - 2015-04-13 15:34 - 00000000 ____D () C:\FRST
2015-04-13 15:08 - 2015-04-13 15:10 - 00028348 _____ () C:\Users\flo\Downloads\FRST.txt
2015-04-13 15:08 - 2015-04-13 15:08 - 01135616 _____ (Farbar) C:\Users\flo\Desktop\FRST.exe
2015-04-13 14:20 - 2015-04-13 14:20 - 00000056 _____ () C:\Windows\setupact.log
2015-04-13 14:20 - 2015-04-13 14:20 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-13 14:19 - 2015-04-13 14:19 - 00000552 _____ () C:\Windows\PFRO.log
2015-04-13 14:08 - 2015-04-13 14:26 - 00000000 ____D () C:\ComboFix
2015-04-13 14:08 - 2015-04-13 14:08 - 00000000 ____D () C:\Qoobox
2015-04-13 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-04-13 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-04-13 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-04-13 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-04-13 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-04-13 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-04-13 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-04-13 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-04-13 14:07 - 2015-04-13 14:19 - 00000000 ____D () C:\Windows\erdnt
2015-04-13 10:35 - 2015-03-25 05:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-13 10:35 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-13 10:35 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-13 10:35 - 2015-03-25 05:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-13 10:35 - 2015-03-23 05:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-13 10:35 - 2015-03-23 04:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-13 10:32 - 2015-04-13 10:32 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-13 10:27 - 2015-04-13 10:28 - 04218880 _____ (Piriform Ltd) C:\Users\flo\Downloads\ccsetup504_slim.exe
2015-03-26 10:11 - 2015-03-26 10:14 - 00000000 ____D () C:\Program Files\ProductUI
2015-03-26 10:11 - 2015-03-26 10:11 - 00000000 ____D () C:\ProgramData\Packer7abd1f03-4407-4053-a033-724f570d658c
2015-03-21 10:36 - 2015-04-13 11:09 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-03-16 13:59 - 2015-03-16 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-03-16 13:58 - 2015-03-16 13:59 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
2015-03-16 13:58 - 2015-03-16 13:59 - 00000000 ____D () C:\Program Files\iTunes
2015-03-16 13:58 - 2015-03-16 13:58 - 00000000 ____D () C:\Program Files\iPod

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-13 14:38 - 2012-07-02 15:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-13 14:31 - 2009-07-14 06:34 - 00018928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-13 14:31 - 2009-07-14 06:34 - 00018928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-13 14:27 - 2010-03-02 07:02 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-13 14:24 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2015-04-13 14:20 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-13 10:48 - 2014-12-15 14:41 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-13 10:48 - 2014-05-07 14:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-13 10:48 - 2014-01-28 09:58 - 01890989 ____N () C:\Windows\WindowsUpdate.log
2015-04-13 10:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-04-13 10:28 - 2012-01-29 14:58 - 00000000 ____D () C:\Program Files\CCleaner
2015-04-13 09:56 - 2012-12-12 12:37 - 00000000 ____D () C:\Users\flo\AppData\Roaming\Avira
2015-04-13 09:56 - 2012-12-12 12:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-04-13 09:54 - 2010-09-16 19:02 - 00000000 ____D () C:\ProgramData\Avira
2015-04-13 09:44 - 2014-08-06 09:19 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-13 09:44 - 2012-12-12 12:36 - 00000000 ____D () C:\Program Files\Avira
2015-04-13 09:43 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2015-03-29 13:35 - 2012-01-21 22:45 - 00000000 ____D () C:\Users\flo\AppData\Roaming\vlc
2015-03-26 10:11 - 2014-12-10 11:04 - 00000000 ____D () C:\Users\flo\AppData\Local\RGMService
2015-03-26 10:10 - 2010-03-02 07:52 - 00000000 ____D () C:\ProgramData\Adobe
2015-03-21 16:44 - 2010-06-19 18:08 - 00000000 ____D () C:\Users\flo\AppData\Local\Microsoft Help
2015-03-21 12:17 - 2014-12-14 13:02 - 00000000 ____D () C:\Users\flo\Desktop\Bilder für Kalender 15
2015-03-21 12:12 - 2010-06-19 17:05 - 00000000 ____D () C:\Alles
2015-03-21 11:20 - 2010-06-16 19:56 - 00000000 ____D () C:\Users\flo
2015-03-21 10:47 - 2010-06-17 21:36 - 00000000 ____D () C:\Users\flo\AppData\Roaming\Adobe
2015-03-21 10:36 - 2012-01-17 12:50 - 00000000 ____D () C:\Program Files\Adobe
2015-03-21 10:36 - 2010-11-27 08:51 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-03-21 10:35 - 2012-08-27 20:19 - 00000000 ____D () C:\Users\flo\Desktop\LTG63
2015-03-21 10:35 - 2010-06-18 11:45 - 00000000 ____D () C:\Users\flo\AppData\Local\Adobe
2015-03-16 15:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2015-03-16 13:58 - 2010-08-31 18:21 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-03-16 13:24 - 2014-12-10 13:49 - 00384664 _____ () C:\Windows\system32\FNTCACHE.DAT

==================== Files in the root of some directories =======

2010-09-27 07:41 - 2010-11-03 21:23 - 0289847 _____ () C:\Users\flo\AppData\Roaming\mdbu.bin
2010-07-02 09:56 - 2011-06-13 13:37 - 0000112 _____ () C:\Users\flo\AppData\Roaming\wklnhst.dat
2011-06-07 13:58 - 2011-06-07 14:02 - 0009216 _____ () C:\Users\flo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-06-18 12:23 - 2010-06-18 12:23 - 0000000 _____ () C:\ProgramData\cmn_upld.log
2010-06-18 15:47 - 2010-06-18 18:23 - 0000504 _____ () C:\ProgramData\FastPics.log
2010-06-18 18:23 - 2013-08-15 09:44 - 0106682 _____ () C:\ProgramData\lxea.log
2010-08-30 14:06 - 2013-08-08 20:28 - 0001163 _____ () C:\ProgramData\lxeaDiagnostics.log
2010-06-18 18:23 - 2010-08-05 09:06 - 0010274 _____ () C:\ProgramData\lxeaJSW.log
2010-06-18 15:47 - 2013-08-15 09:44 - 0422729 _____ () C:\ProgramData\lxeascan.log
2010-06-18 12:23 - 2010-06-18 12:23 - 0000000 _____ () C:\ProgramData\LxWbGwLog.log
2010-06-18 12:22 - 2010-06-18 12:22 - 0000000 _____ () C:\ProgramData\UpdaterLog.txt

Some content of TEMP:
====================
C:\Users\flo\AppData\Local\temp\avgnt.exe
C:\Users\flo\AppData\Local\temp\catchme.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-27 10:42

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-04-2015
Ran by flo at 2015-04-13 15:34:52
Running from C:\Users\flo\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.00.631.5823 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.00.631.5823 - ABBYY) Hidden
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.42.34 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-2E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ask Toolbar (HKLM\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.15.13.0 - Ask.com) <==== ATTENTION
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.23 - Atheros Communications Inc.)
Avanquest update (HKLM\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.28 - Avanquest Software)
Avira (HKLM\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)
Avira SearchFree Toolbar plus Web Protection Updater (HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.3.33021 - Ask.com) <==== ATTENTION
Benutzerhandbuch EPSON XP-205 207 Series (HKLM\...\EPSON XP-205 207 Series Useg) (Version:  - )
Bing Bar (HKLM\...\{F6A6DFF9-F71C-4BA6-B437-F18872866D3D}) (Version: 7.0.791.0 - Microsoft Corporation)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.04 - Piriform)
Chromium Browser (HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\Chromium) (Version: 41.0.2231.0 - Chrome)
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Epson Connect Printer Setup (HKLM\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION)
Epson E-Web Print (HKLM\...\{682A3328-9621-4BAD-91FA-873A076610C4}) (Version: 1.21.0000 - SEIKO EPSON CORPORATION)
EPSON Printer Finder (HKLM\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-205 207 Series Printer Uninstall (HKLM\...\EPSON XP-205 207 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
FireJump (HKLM\...\{D85FFE92-BF14-4E9B-BCCD-E5C16069E65F}_is1) (Version: 1.0.2.5 - FireJump.net)
Fotogalerie (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2092 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.0.1037 - Intel Corporation)
iTunes (HKLM\...\{3A9FE6B1-EE7F-40AC-B831-AC7C9ABB58A0}) (Version: 12.1.1.4 - Apple Inc.)
Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Junk Mail filter update (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Launch Manager V1.5.0.8 (HKLM\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.5.0.8 - Wistron Corp.)
Lexmark Tools for Office (HKLM\...\{10812DE7-2E57-4740-B226-6B3BE34AF9D7}) (Version: 1.29.0.0 - )
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)
Movie Maker (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Netzwerkhandbuch EPSON XP-205 207 Series (HKLM\...\EPSON XP-205 207 Series Netg) (Version:  - )
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Pixum Fotobuch (HKLM\...\Pixum Fotobuch) (Version: 5.1.3 - CEWE Stiftung u Co. KGaA)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
PlayStation(R)Network Downloader (HKLM\...\{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}) (Version: 2.00.00005 - Sony Computer Entertainment Inc.)
PlayStation(R)Store (HKLM\...\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}) (Version: 2.7.6.06777 - Sony Computer Entertainment Inc.)
Preispilot für Firefox (HKLM\...\{0D8E6567-7082-48DB-A305-293873AC8B39}_is1) (Version: 2.0 - Preispilot)
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
REALTEK DTV USB DEVICE (HKLM\...\{DDBB7C89-1A09-441E-AA0F-6AA465755C17}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6057 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30101 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM\...\{9D3D8C60-A55F-4fed-B2B9-173F09590E16}) (Version: 1.00.0145 - REALTEK Semiconductor Corp.)
RGMUpdater Monetization Control (HKLM\...\RGMUpdater Monetization Control7abd1f03-4407-4053-a033-724f570d658c) (Version: 2.2.0322.1140 -  )
SearchAnonymizer (HKLM\...\SearchAnonymizer) (Version: 1.0.1 (de) - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Software Updater (HKLM\...\{FA7EE274-7370-43B7-9A45-A39B17CCCDC5}) (Version: 4.3.3 - SEIKO EPSON CORPORATION)
Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.12.13.28 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.221 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.221 - Sony)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.19.0 - Synaptics Incorporated)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR 4.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
X10 Hardware(TM) (HKLM\...\X10Hardware) (Version:  - )
Yahoo Community Smartbar Engine (HKU\S-1-5-21-99378946-2197382736-718538521-1000\...\{9175b5d1-0957-49c6-adbd-8b216e906126}) (Version: 11.112.66.19229 - Linkury Inc.) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{A0307B42-4A5B-39CA-E417-14D9FA480C5D}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}\localserver32 -> C:\Users\flo\AppData\Local\Chrome\Application\41.0.2231.0\delegate_execute.exe (The Chromium Authors)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-99378946-2197382736-718538521-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\flo\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\FileSyncApi.dll (Microsoft Corporation)

==================== Restore Points  =========================

21-03-2015 10:34:18 Windows Update
26-03-2015 10:19:39 Windows Update
13-04-2015 09:52:30 Windows Update
13-04-2015 10:31:37 Windows Update
13-04-2015 10:35:19 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2015-04-13 14:19 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0D80E487-ACB9-482E-B45A-49BB7DC12FFD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06] (Adobe Systems Incorporated)
Task: {11DCACB2-672E-4D09-AD48-AB9B3C274C47} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {317D4A26-F524-4EB2-B2DA-7E696454FB02} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {3E52A8CF-29E4-414B-8E4F-B0D40F97C8E3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-03-13] (Piriform Ltd)
Task: {71D403B6-8D8F-475C-BCFB-100530B76C66} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {7FAC839F-CF5C-4145-BAC4-64209D3D21EE} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {836022D0-1331-43BE-B294-B7B75650A2BA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {8C454AF1-8AB4-418F-97F9-2045EEEB66EB} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {C8F37DD2-CDF0-4A31-8E1D-63A66220CD65} - System32\Tasks\{8592DDF9-881B-40D2-B719-8EAF0326214F} => pcalua.exe -a C:\Users\flo\Downloads\setup-hochzeit-albfreetheme.exe -d C:\Users\flo\Downloads
Task: {F7B12E58-C5F7-457C-8743-6134C9E83AEF} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2007-06-05 13:20 - 2007-06-05 13:20 - 00177704 _____ () C:\Windows\system32\PSIService.exe
2015-03-24 14:37 - 2015-03-24 14:37 - 00085504 _____ () C:\Users\flo\AppData\Local\RGMService\RGMUpdater.exe
2010-03-02 07:17 - 2009-10-02 14:18 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-04-13 14:25 - 2015-04-13 14:25 - 00053248 _____ () C:\Users\flo\AppData\Local\Temp\catchme.dll
2011-11-06 10:14 - 2011-05-28 23:04 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll
2012-01-10 21:12 - 2012-01-10 21:12 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2015-03-13 15:54 - 2015-03-13 15:54 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-12-10 11:05 - 2014-12-01 07:48 - 01409536 _____ () C:\Users\flo\AppData\Local\Chrome\Application\41.0.2231.0\libglesv2.dll
2014-12-10 11:05 - 2014-12-01 07:48 - 00223744 _____ () C:\Users\flo\AppData\Local\Chrome\Application\41.0.2231.0\libegl.dll
2014-12-10 11:05 - 2014-12-01 07:48 - 09528320 _____ () C:\Users\flo\AppData\Local\Chrome\Application\41.0.2231.0\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-99378946-2197382736-718538521-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\flo\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^flo^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: ICQ => "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
MSCONFIG\startupreg: PDFPrint => C:\Program Files\PDF24\pdf24.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Sony Ericsson PC Companion => "C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background
MSCONFIG\startupreg: Sony Ericsson PC Suite => "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon

==================== Accounts: =============================

Administrator (S-1-5-21-99378946-2197382736-718538521-500 - Administrator - Disabled)
flo (S-1-5-21-99378946-2197382736-718538521-1000 - Administrator - Enabled) => C:\Users\flo
Gast (S-1-5-21-99378946-2197382736-718538521-501 - Limited - Disabled)

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/13/2015 09:52:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: avguard.exe, Version: 15.0.8.652, Zeitstempel: 0x55070e77
Name des fehlerhaften Moduls: gpsauth.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x55070a54
Ausnahmecode: 0xc0000005
Fehleroffset: 0x62c6f93a
ID des fehlerhaften Prozesses: 0x64c
Startzeit der fehlerhaften Anwendung: 0xavguard.exe0
Pfad der fehlerhaften Anwendung: avguard.exe1
Pfad des fehlerhaften Moduls: avguard.exe2
Berichtskennung: avguard.exe3

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (03/26/2015 10:11:28 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:28 AM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden.


Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))


System errors:
=============
Error: (04/13/2015 02:21:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (04/13/2015 02:20:24 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎13.‎04.‎2015 um 14:19:05 unerwartet heruntergefahren.

Error: (04/13/2015 02:15:04 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (04/13/2015 02:10:04 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (04/13/2015 02:07:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "RG Manage Updater" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/13/2015 10:00:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) Rapid Storage Technology" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (04/13/2015 10:00:25 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) Rapid Storage Technology erreicht.

Error: (03/26/2015 08:30:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/26/2015 08:30:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht.

Error: (03/26/2015 04:37:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (04/13/2015 09:52:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: avguard.exe15.0.8.65255070e77gpsauth.dll_unloaded0.0.0.055070a54c000000562c6f93a64c01d075bd3e1972dcC:\Program Files\Avira\AntiVir Desktop\avguard.exegpsauth.dll0ab19135-e1b2-11e4-93e1-00262df9056b

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/26/2015 10:11:30 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (03/26/2015 10:11:28 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore

Error: (03/26/2015 10:11:28 AM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
4700

Error: (03/26/2015 10:11:27 AM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: 
Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Percentage of memory in use: 43%
Total physical RAM: 3510.6 MB
Available physical RAM: 1982.9 MB
Total Pagefile: 7019.5 MB
Available Pagefile: 5176.55 MB
Total Virtual: 2047.88 MB
Available Virtual: 1909.11 MB

==================== Drives ================================

Drive c: (Alles) (Fixed) (Total:424.66 GB) (Free:130.42 GB) NTFS
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:32.91 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: A995CA8E)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=424.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================
         

ausser den Antivirfund hab ich nichts anderes

Dazu wollte ich das Logfile haben

und jetzt vom Desktop...

Sry aber, was stand in meinem letzten Posting dick und fett?

ich versuch das mal weiterhin zu verstehen


das einzige was ich von Antivir hab ist,

bzw das hier ?

Free Antivirus
Erstellungsdatum der Reportdatei: Montag, 13. April 2015  14:27


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer   : Avira Antivirus Free
Seriennummer   : 0000149996-AVHOE-0000001
Plattform      : Windows 7 Home Premium
Windowsversion : (Service Pack 1)  [6.1.7601]
Boot Modus     : Normal gebootet
Benutzername   : SYSTEM
Computername   : PEPE

Versionsinformationen:
BUILD.DAT      : 15.0.9.504     94784 Bytes  24.03.2015 14:59:00
AVSCAN.EXE     : 15.0.9.504   1027528 Bytes  13.04.2015 07:47:27
AVSCANRC.DLL   : 15.0.9.460     64760 Bytes  13.04.2015 07:47:27
LUKE.DLL       : 15.0.9.460     60664 Bytes  13.04.2015 07:47:45
AVSCPLR.DLL    : 15.0.9.460     95536 Bytes  13.04.2015 07:47:27
REPAIR.DLL     : 15.0.9.504    374064 Bytes  13.04.2015 07:47:25
REPAIR.RDF     : 1.0.7.0       832596 Bytes  13.04.2015 09:11:57
AVREG.DLL      : 15.0.9.460    273712 Bytes  13.04.2015 07:47:24
AVLODE.DLL     : 15.0.9.504    596272 Bytes  13.04.2015 07:47:23
AVLODE.RDF     : 14.0.4.64      79226 Bytes  13.04.2015 07:47:17
XBV00018.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00019.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00020.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00021.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00022.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00023.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00024.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00025.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00026.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00027.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00028.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00029.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00030.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00031.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00032.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00033.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00034.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00035.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00036.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00037.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00038.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00039.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00040.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00041.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 08:23:22
XBV00186.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:44
XBV00187.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:44
XBV00188.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:44
XBV00189.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:44
XBV00190.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:44
XBV00191.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:44
XBV00192.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:44
XBV00193.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:44
XBV00194.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00195.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00196.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00197.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00198.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00199.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00200.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00201.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00202.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00203.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00204.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00205.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00206.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00207.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00208.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00209.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00210.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00211.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00212.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00213.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:45
XBV00214.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00215.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00216.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00217.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00218.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00219.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00220.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00221.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00222.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00223.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00224.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00225.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00226.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00227.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00228.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00229.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:46
XBV00230.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00231.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00232.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00233.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00234.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00235.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00236.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00237.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00238.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00239.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00240.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00241.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00242.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00243.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00244.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00245.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00246.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00247.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00248.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00249.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00250.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00251.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00252.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:47
XBV00253.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:48
XBV00254.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:48
XBV00255.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 08:14:48
XBV00000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 07:04:20
XBV00001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 07:48:47
XBV00002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 06:41:01
XBV00003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 16:03:36
XBV00004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 12:13:36
XBV00005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 08:30:47
XBV00006.VDF   : 7.11.139.38 15708672 Bytes  27.03.2014 11:14:02
XBV00007.VDF   : 7.11.152.100  4193792 Bytes  02.06.2014 09:10:27
XBV00008.VDF   : 8.11.165.192  4251136 Bytes  07.08.2014 08:23:22
XBV00009.VDF   : 8.11.172.30  2094080 Bytes  15.09.2014 17:59:46
XBV00010.VDF   : 8.11.178.32  1581056 Bytes  14.10.2014 07:11:21
XBV00011.VDF   : 8.11.184.50  2178560 Bytes  11.11.2014 07:35:14
XBV00012.VDF   : 8.11.190.32  1876992 Bytes  03.12.2014 19:59:15
XBV00013.VDF   : 8.11.201.28  2973696 Bytes  14.01.2015 07:52:55
XBV00014.VDF   : 8.11.206.252  2695680 Bytes  04.02.2015 16:43:04
XBV00015.VDF   : 8.11.213.84  3175936 Bytes  03.03.2015 08:20:51
XBV00016.VDF   : 8.11.213.176   212480 Bytes  05.03.2015 19:39:34
XBV00017.VDF   : 8.11.219.166  2033664 Bytes  25.03.2015 08:14:34
XBV00042.VDF   : 8.11.219.194    36864 Bytes  25.03.2015 08:14:34
XBV00043.VDF   : 8.11.219.218     7168 Bytes  25.03.2015 08:14:34
XBV00044.VDF   : 8.11.219.242     6144 Bytes  25.03.2015 08:14:34
XBV00045.VDF   : 8.11.219.244     7680 Bytes  25.03.2015 08:14:34
XBV00046.VDF   : 8.11.219.246     5632 Bytes  26.03.2015 08:14:35
XBV00047.VDF   : 8.11.219.250    38400 Bytes  26.03.2015 08:14:35
XBV00048.VDF   : 8.11.219.252    14336 Bytes  26.03.2015 16:42:00
XBV00049.VDF   : 8.11.219.254    18432 Bytes  26.03.2015 16:42:00
XBV00050.VDF   : 8.11.220.0      7680 Bytes  26.03.2015 16:42:00
XBV00051.VDF   : 8.11.220.2     10240 Bytes  26.03.2015 16:42:00
XBV00052.VDF   : 8.11.220.6      2048 Bytes  26.03.2015 16:42:00
XBV00053.VDF   : 8.11.220.8      2560 Bytes  26.03.2015 16:42:00
XBV00054.VDF   : 8.11.220.10    17408 Bytes  26.03.2015 16:42:00
XBV00055.VDF   : 8.11.220.12     2048 Bytes  26.03.2015 16:42:00
XBV00056.VDF   : 8.11.220.16    23040 Bytes  26.03.2015 16:42:00
XBV00057.VDF   : 8.11.220.18     8704 Bytes  26.03.2015 16:42:00
XBV00058.VDF   : 8.11.220.22    30720 Bytes  27.03.2015 16:42:00
XBV00059.VDF   : 8.11.220.24     6144 Bytes  27.03.2015 16:42:00
XBV00060.VDF   : 8.11.220.26     2048 Bytes  27.03.2015 16:42:00
XBV00061.VDF   : 8.11.220.48     9728 Bytes  27.03.2015 16:42:00
XBV00062.VDF   : 8.11.220.68    14848 Bytes  27.03.2015 16:42:00
XBV00063.VDF   : 8.11.220.88    23552 Bytes  27.03.2015 16:42:00
XBV00064.VDF   : 8.11.220.108     9216 Bytes  27.03.2015 16:42:00
XBV00065.VDF   : 8.11.220.110    15360 Bytes  27.03.2015 16:42:00
XBV00066.VDF   : 8.11.220.116    27648 Bytes  27.03.2015 16:42:01
XBV00067.VDF   : 8.11.220.118    10752 Bytes  27.03.2015 16:42:01
XBV00068.VDF   : 8.11.220.120     6144 Bytes  27.03.2015 16:42:01
XBV00069.VDF   : 8.11.220.122    62976 Bytes  28.03.2015 16:42:01
XBV00070.VDF   : 8.11.220.124     2048 Bytes  28.03.2015 16:42:01
XBV00071.VDF   : 8.11.220.126     9728 Bytes  28.03.2015 16:42:01
XBV00072.VDF   : 8.11.220.128    20992 Bytes  28.03.2015 16:42:01
XBV00073.VDF   : 8.11.220.148    54784 Bytes  29.03.2015 07:47:49
XBV00074.VDF   : 8.11.220.176     7680 Bytes  29.03.2015 07:47:49
XBV00075.VDF   : 8.11.220.196    32768 Bytes  30.03.2015 07:47:49
XBV00076.VDF   : 8.11.220.216     2048 Bytes  30.03.2015 07:47:49
XBV00077.VDF   : 8.11.220.236     9728 Bytes  30.03.2015 07:47:49
XBV00078.VDF   : 8.11.220.238    15360 Bytes  30.03.2015 07:47:49
XBV00079.VDF   : 8.11.220.240     9216 Bytes  30.03.2015 07:47:49
XBV00080.VDF   : 8.11.220.242     4608 Bytes  30.03.2015 07:47:49
XBV00081.VDF   : 8.11.220.248    58368 Bytes  30.03.2015 07:47:49
XBV00082.VDF   : 8.11.220.250     2048 Bytes  30.03.2015 07:47:50
XBV00083.VDF   : 8.11.220.252     2048 Bytes  30.03.2015 07:47:50
XBV00084.VDF   : 8.11.220.254    39424 Bytes  31.03.2015 07:47:50
XBV00085.VDF   : 8.11.221.0      2048 Bytes  31.03.2015 07:47:50
XBV00086.VDF   : 8.11.221.6     40960 Bytes  31.03.2015 07:47:50
XBV00087.VDF   : 8.11.221.8      2048 Bytes  31.03.2015 07:47:50
XBV00088.VDF   : 8.11.221.10    16896 Bytes  31.03.2015 07:47:50
XBV00089.VDF   : 8.11.221.30    10240 Bytes  31.03.2015 07:47:51
XBV00090.VDF   : 8.11.221.48    29184 Bytes  31.03.2015 07:47:51
XBV00091.VDF   : 8.11.221.50     2048 Bytes  31.03.2015 07:47:51
XBV00092.VDF   : 8.11.221.70    27648 Bytes  31.03.2015 07:47:51
XBV00093.VDF   : 8.11.221.88     3584 Bytes  31.03.2015 07:47:51
XBV00094.VDF   : 8.11.221.90    32256 Bytes  31.03.2015 07:47:51
XBV00095.VDF   : 8.11.221.94    34816 Bytes  01.04.2015 07:47:51
XBV00096.VDF   : 8.11.221.96     8704 Bytes  01.04.2015 07:47:51
XBV00097.VDF   : 8.11.221.100     8704 Bytes  01.04.2015 07:47:51
XBV00098.VDF   : 8.11.221.102     7680 Bytes  01.04.2015 07:47:51
XBV00099.VDF   : 8.11.221.106    39936 Bytes  01.04.2015 07:47:51
XBV00100.VDF   : 8.11.221.124     8704 Bytes  01.04.2015 07:47:51
XBV00101.VDF   : 8.11.221.142    12288 Bytes  01.04.2015 07:47:52
XBV00102.VDF   : 8.11.221.160     7168 Bytes  01.04.2015 07:47:52
XBV00103.VDF   : 8.11.221.178     7168 Bytes  01.04.2015 07:47:52
XBV00104.VDF   : 8.11.221.196     8192 Bytes  01.04.2015 07:47:52
XBV00105.VDF   : 8.11.221.200    33280 Bytes  02.04.2015 07:47:52
XBV00106.VDF   : 8.11.221.202     2048 Bytes  02.04.2015 07:47:52
XBV00107.VDF   : 8.11.221.204    28160 Bytes  02.04.2015 07:47:52
XBV00108.VDF   : 8.11.221.206     2048 Bytes  02.04.2015 07:47:52
XBV00109.VDF   : 8.11.221.208    33792 Bytes  02.04.2015 07:47:52
XBV00110.VDF   : 8.11.221.210    24576 Bytes  02.04.2015 07:47:52
XBV00111.VDF   : 8.11.221.214    18944 Bytes  02.04.2015 07:47:52
XBV00112.VDF   : 8.11.221.216    11264 Bytes  02.04.2015 07:47:52
XBV00113.VDF   : 8.11.221.220    29696 Bytes  03.04.2015 07:47:53
XBV00114.VDF   : 8.11.221.222     2048 Bytes  03.04.2015 07:47:53
XBV00115.VDF   : 8.11.221.224    31232 Bytes  03.04.2015 07:47:53
XBV00116.VDF   : 8.11.221.242     3584 Bytes  03.04.2015 07:47:53
XBV00117.VDF   : 8.11.222.2     11776 Bytes  03.04.2015 07:47:53
XBV00118.VDF   : 8.11.222.18     7168 Bytes  03.04.2015 07:47:53
XBV00119.VDF   : 8.11.222.34     6656 Bytes  03.04.2015 07:47:53
XBV00120.VDF   : 8.11.222.38    15360 Bytes  03.04.2015 07:47:53
XBV00121.VDF   : 8.11.222.40     5632 Bytes  03.04.2015 07:47:53
XBV00122.VDF   : 8.11.222.42     6144 Bytes  03.04.2015 07:47:53
XBV00123.VDF   : 8.11.222.44    46592 Bytes  04.04.2015 07:47:53
XBV00124.VDF   : 8.11.222.46     2048 Bytes  04.04.2015 07:47:53
XBV00125.VDF   : 8.11.222.48     2048 Bytes  04.04.2015 07:47:53
XBV00126.VDF   : 8.11.222.50    36864 Bytes  04.04.2015 07:47:53
XBV00127.VDF   : 8.11.222.52     2048 Bytes  04.04.2015 07:47:53
XBV00128.VDF   : 8.11.222.68    68096 Bytes  05.04.2015 07:47:53
XBV00129.VDF   : 8.11.222.84     2048 Bytes  05.04.2015 07:47:53
XBV00130.VDF   : 8.11.222.116    18432 Bytes  05.04.2015 07:47:53
XBV00131.VDF   : 8.11.222.132    62464 Bytes  06.04.2015 07:47:53
XBV00132.VDF   : 8.11.222.134    10752 Bytes  06.04.2015 07:47:53
XBV00133.VDF   : 8.11.222.138     2048 Bytes  06.04.2015 07:47:53
XBV00134.VDF   : 8.11.222.154    13312 Bytes  06.04.2015 07:47:53
XBV00135.VDF   : 8.11.222.156     8704 Bytes  06.04.2015 07:47:53
XBV00136.VDF   : 8.11.222.158     9216 Bytes  06.04.2015 07:47:53
XBV00137.VDF   : 8.11.222.160     2048 Bytes  06.04.2015 07:47:53
XBV00138.VDF   : 8.11.222.164    18432 Bytes  06.04.2015 07:47:53
XBV00139.VDF   : 8.11.222.166    10752 Bytes  06.04.2015 07:47:53
XBV00140.VDF   : 8.11.222.182     7168 Bytes  06.04.2015 07:47:54
XBV00141.VDF   : 8.11.222.196     8704 Bytes  07.04.2015 07:47:54
XBV00142.VDF   : 8.11.222.212    29696 Bytes  07.04.2015 07:47:54
XBV00143.VDF   : 8.11.222.226     6656 Bytes  07.04.2015 07:47:54
XBV00144.VDF   : 8.11.222.228    10752 Bytes  07.04.2015 07:47:54
XBV00145.VDF   : 8.11.222.230     4096 Bytes  07.04.2015 07:47:54
XBV00146.VDF   : 8.11.222.232     5120 Bytes  07.04.2015 07:47:54
XBV00147.VDF   : 8.11.222.234     5632 Bytes  07.04.2015 07:47:54
XBV00148.VDF   : 8.11.222.240    34816 Bytes  07.04.2015 07:47:54
XBV00149.VDF   : 8.11.222.242     2048 Bytes  07.04.2015 07:47:54
XBV00150.VDF   : 8.11.222.244     3584 Bytes  07.04.2015 07:47:54
XBV00151.VDF   : 8.11.222.246    24576 Bytes  07.04.2015 07:47:54
XBV00152.VDF   : 8.11.222.250    37888 Bytes  08.04.2015 07:47:54
XBV00153.VDF   : 8.11.223.8     12800 Bytes  08.04.2015 07:47:54
XBV00154.VDF   : 8.11.223.22     2048 Bytes  08.04.2015 07:47:54
XBV00155.VDF   : 8.11.223.36    10752 Bytes  08.04.2015 07:47:54
XBV00156.VDF   : 8.11.223.52    35328 Bytes  08.04.2015 07:47:54
XBV00157.VDF   : 8.11.223.66     7168 Bytes  08.04.2015 07:47:54
XBV00158.VDF   : 8.11.223.68     2048 Bytes  08.04.2015 07:47:54
XBV00159.VDF   : 8.11.223.72    15360 Bytes  08.04.2015 07:47:54
XBV00160.VDF   : 8.11.223.74     7168 Bytes  09.04.2015 07:47:54
XBV00161.VDF   : 8.11.223.78    38400 Bytes  09.04.2015 07:47:54
XBV00162.VDF   : 8.11.223.80     2048 Bytes  09.04.2015 07:47:54
XBV00163.VDF   : 8.11.223.82    35328 Bytes  09.04.2015 07:47:54
XBV00164.VDF   : 8.11.223.90    80896 Bytes  09.04.2015 07:47:54
XBV00165.VDF   : 8.11.223.92     2048 Bytes  09.04.2015 07:47:55
XBV00166.VDF   : 8.11.223.94    30208 Bytes  09.04.2015 07:47:55
XBV00167.VDF   : 8.11.223.108    30208 Bytes  10.04.2015 07:47:55
XBV00168.VDF   : 8.11.223.120    35840 Bytes  10.04.2015 07:47:55
XBV00169.VDF   : 8.11.223.124     3072 Bytes  10.04.2015 07:47:55
XBV00170.VDF   : 8.11.223.136    20480 Bytes  10.04.2015 07:47:55
XBV00171.VDF   : 8.11.223.148    14848 Bytes  10.04.2015 07:47:55
XBV00172.VDF   : 8.11.223.150     2048 Bytes  10.04.2015 07:47:55
XBV00173.VDF   : 8.11.223.154    23552 Bytes  10.04.2015 07:47:55
XBV00174.VDF   : 8.11.223.156     8192 Bytes  10.04.2015 07:47:55
XBV00175.VDF   : 8.11.223.158     7680 Bytes  11.04.2015 07:47:55
XBV00176.VDF   : 8.11.223.162    49152 Bytes  11.04.2015 07:47:55
XBV00177.VDF   : 8.11.223.164     2048 Bytes  11.04.2015 07:47:55
XBV00178.VDF   : 8.11.223.176    18944 Bytes  11.04.2015 07:47:55
XBV00179.VDF   : 8.11.223.192    68096 Bytes  12.04.2015 07:47:55
XBV00180.VDF   : 8.11.223.194     2048 Bytes  12.04.2015 07:47:55
XBV00181.VDF   : 8.11.223.196     2048 Bytes  12.04.2015 07:47:55
XBV00182.VDF   : 8.11.223.208    13312 Bytes  12.04.2015 07:47:55
XBV00183.VDF   : 8.11.223.210     6144 Bytes  12.04.2015 07:47:55
XBV00184.VDF   : 8.11.223.222    75776 Bytes  13.04.2015 11:57:22
XBV00185.VDF   : 8.11.223.224     2048 Bytes  13.04.2015 11:57:22
LOCAL001.VDF   : 8.11.223.224 127187456 Bytes  13.04.2015 11:57:46
Engineversion  : 8.3.30.16 
AEVDF.DLL      : 8.3.1.6       133992 Bytes  21.08.2014 12:53:56
AESCRIPT.DLL   : 8.2.2.58      560248 Bytes  21.03.2015 08:25:15
AESCN.DLL      : 8.3.2.2       139456 Bytes  23.07.2014 15:40:45
AESBX.DLL      : 8.2.20.34    1615784 Bytes  05.03.2015 19:39:34
AERDL.DLL      : 8.2.1.20      731040 Bytes  16.02.2015 09:16:56
AEPACK.DLL     : 8.4.0.62      793456 Bytes  26.02.2015 16:17:35
AEOFFICE.DLL   : 8.3.1.16      359280 Bytes  28.03.2015 16:42:00
AEMOBILE.DLL   : 8.1.7.0       281456 Bytes  10.03.2015 17:57:12
AEHEUR.DLL     : 8.1.4.1634   8259496 Bytes  13.04.2015 07:47:17
AEHELP.DLL     : 8.3.2.0       281456 Bytes  21.03.2015 08:25:06
AEGEN.DLL      : 8.1.7.40      456608 Bytes  20.12.2014 07:27:18
AEEXP.DLL      : 8.4.2.82      260968 Bytes  13.04.2015 07:47:17
AEEMU.DLL      : 8.1.3.4       399264 Bytes  11.08.2014 08:23:16
AEDROID.DLL    : 8.4.3.116    1050536 Bytes  10.03.2015 17:57:12
AECORE.DLL     : 8.3.4.0       243624 Bytes  16.12.2014 19:01:50
AEBB.DLL       : 8.1.2.0        60448 Bytes  11.08.2014 08:23:16
AVWINLL.DLL    : 15.0.9.460     26872 Bytes  13.04.2015 07:47:14
AVPREF.DLL     : 15.0.9.460     52984 Bytes  13.04.2015 07:47:24
AVREP.DLL      : 15.0.9.460    220464 Bytes  13.04.2015 07:47:25
AVARKT.DLL     : 15.0.9.460    228088 Bytes  13.04.2015 07:47:18
AVEVTLOG.DLL   : 15.0.9.460    193328 Bytes  13.04.2015 07:47:20
SQLITE3.DLL    : 15.0.9.460    455472 Bytes  13.04.2015 07:47:48
AVSMTP.DLL     : 15.0.9.460     79096 Bytes  13.04.2015 07:47:27
NETNT.DLL      : 15.0.9.460     15152 Bytes  13.04.2015 07:47:45
CommonImageRc.dll: 15.0.9.460   4355376 Bytes  13.04.2015 07:47:14
CommonTextRc.DLL: 15.0.9.476     70960 Bytes  13.04.2015 07:47:14

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: AVGuardAsyncScan
Konfigurationsdatei...................: C:\ProgramData\Avira\Antivirus\TEMP\AVGUARD_552bb4c0\guard_slideup.avp
Protokollierung.......................: standard
Primäre Aktion........................: Reparieren
Sekundäre Aktion......................: Quarantäne
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: aus
Durchsuche aktive Programme...........: ein
Durchsuche Registrierung..............: aus
Suche nach Rootkits...................: aus
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: Vollständig

Beginn des Suchlaufs: Montag, 13. April 2015  14:27

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'avscan.exe' - '112' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'WMIADAP.EXE' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'CCleaner.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'APSDaemon.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'SynTPHelper.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'iPodService.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'E_FATIILE.EXE' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'iCloudServices.exe' - '74' Modul(e) wurden durchsucht
Durchsuche Prozess 'ApplePhotoStreams.exe' - '122' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.Systray.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '74' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '103' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxpers.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'hkcmd.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxtray.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'RtHDVBg.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'RtHDVCpl.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'SynTPEnh.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'WisLMSvc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'WButton.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'OSD.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'HotkeyApp.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '66' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '188' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '125' Modul(e) wurden durchsucht
Durchsuche Prozess 'UNS.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'sppsvc.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAStorDataMgrSvc.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSvcM.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'x10nets.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSVC.EXE' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'RGMUpdater.exe' - '10' Modul(e) wurden durchsucht
Durchsuche Prozess 'PsiService_2.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'PSIService.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMS.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'EscSvc.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '125' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '23' Modul(e) wurden durchsucht
Durchsuche Prozess 'NetworkLicenseServer.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '71' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '83' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '86' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '176' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '88' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '101' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '87' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht

Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\Users\flo\Downloads\ComboFix.exe'
C:\Users\flo\Downloads\ComboFix.exe
  [FUND]      Ist das Trojanische Pferd TR/Agent.5617275
  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '56d426e1.qua' verschoben!


Ende des Suchlaufs: Montag, 13. April 2015  14:27
Benötigte Zeit: 00:28 Minute(n)

Der Suchlauf wurde vollständig durchgeführt.

      0 Verzeichnisse wurden überprüft
   1027 Dateien wurden geprüft
      1 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      1 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
   1026 Dateien ohne Befall
     23 Archive wurden durchsucht
      0 Warnungen
      1 Hinweise
         

Beginne mit der Suche in 'C:\Users\flo\Downloads\ComboFix.exe'
C:\Users\flo\Downloads\ComboFix.exe
[FUND] Ist das Trojanische Pferd TR/Agent.5617275

Auman...

1. soll Combofix niemals ohne Absprache runtergeladen/ausgeführt werden - bitte mal erklären warum du es trotzdem runtergeladen hast, aus Langeweile wird das ja nicht passieren!

2. wenn du es trotzdem ohne Absprache tust kannst du ruhig mal die Meldung des Virenscanners komplett lesen und mal überlegen aus welchem Kontext heraus der angebliche Fund ist. Wenn man sieht, dass da Combofix angemeckert wird, sollte man erkennen, dass es sich um einen Fehlalarm handelt, Combofix ist ein Spezialreinigungstool und keine Malware