Windows Vista 32 Bit: Browserseiten/fenster werden selbständig aufgerufen

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 14-05-2015 01
Ran by user at 2015-05-18 21:06:06 Run:2
Running from C:\Users\user\Desktop
Loaded Profiles: user (Available profiles: user)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
start
CloseProcesses:
C:\Users\user\Downloads\ReimageRepai*.exe
C:\Users\user\AppData\Local\Apps\2.0\8X9PQCZW.KW8
C:\Windows\System32\config\systemprofile\AppData\LocalLow\SweetNT.crx
EmptyTemp:
end
*****************

Processes closed successfully.
C:\Users\user\Downloads\ReimageRepai*.exe => Moved successfully.
C:\Users\user\AppData\Local\Apps\2.0\8X9PQCZW.KW8 => Moved successfully.
C:\Windows\System32\config\systemprofile\AppData\LocalLow\SweetNT.crx => Moved successfully.
EmptyTemp: => Removed 287.3 MB temporary data.


The system needed a reboot. 

==== End of Fixlog 21:06:24 ====
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-05-2015 01
Ran by user (administrator) on USER-PC on 18-05-2015 21:11:29
Running from C:\Users\user\Desktop
Loaded Profiles: user (Available profiles: user)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
() C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe
( ) C:\Windows\System32\lxdncoms.exe
(Skype Technologies) C:\Program Files\Skype\Updater\Updater.exe
(Fujitsu Siemens Computers) C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Lexmark International Inc.) C:\Program Files\Lexmark 2600 Series\ezprint.exe
(FIC) C:\Program Files\Launch Pad\LaunchPad.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Program Files\Lexmark 2600 Series\lxdnmon.exe
( ) C:\Program Files\Google\Google EULA\GoogleEULALauncher.exe
() C:\Program Files\Hotkey Utility\tray.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Google Inc.) C:\Program Files\Picasa2\PicasaMediaDetector.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\ielowutil.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-21] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jaureg.exe [232368 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [EzPrint] => C:\Program Files\Lexmark 2600 Series\ezprint.exe [107176 2008-03-27] (Lexmark International Inc.)
HKLM\...\Run: [FSCRecovery] => c:\Program Files\Fujitsu Siemens Computers\Fujitsu Siemens Computers Recovery\FSCRecoveryReminder.exe [268096 2008-06-18] (Fujitsu Siemens Computers GmbH)
HKLM\...\Run: [PowerManager] => C:\Program Files\Power Manager\PM.exe [1675264 2008-05-22] ()
HKLM\...\Run: [LaunchPad] => C:\Program Files\Launch Pad\LaunchPad.exe [2260992 2008-07-12] (FIC)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [159744 2008-01-25] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6139904 2008-05-08] (Realtek Semiconductor)
HKLM\...\Run: [NPCTray] => C:\Program Files\Norman\npc\bin\npc_tray.exe /LOAD
HKLM\...\Run: [lxdnmon.exe] => C:\Program Files\Lexmark 2600 Series\lxdnmon.exe [660136 2008-03-27] ()
HKLM\...\Run: [Google EULA Launcher] => c:\Program Files\Google\Google EULA\GoogleEULALauncher.exe [20480 2008-05-28] ( )
HKLM\...\Run: [FIC HotKey] => C:\Program Files\Hotkey Utility\tray.exe [520192 2008-06-05] ()
HKU\S-1-5-21-3645637860-4088369842-987407559-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [31282304 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3645637860-4088369842-987407559-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3645637860-4088369842-987407559-1000\...\Run: [fsc-reg] => C:\fsc-reg\fscreg.exe [380688 2008-08-01] (Fujitsu Siemens)
HKU\S-1-5-21-3645637860-4088369842-987407559-1000\...\Run: [Picasa Media Detector] => C:\Program Files\Picasa2\PicasaMediaDetector.exe [443968 2008-02-26] (Google Inc.)
HKU\S-1-5-21-3645637860-4088369842-987407559-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-18\...\Run: [Picasa Media Detector] => C:\Program Files\Picasa2\PicasaMediaDetector.exe [443968 2008-02-26] (Google Inc.)
HKU\S-1-5-18\...\Run: [fsc-reg] => c:\fsc-reg\fscreg.exe [380688 2008-08-01] (Fujitsu Siemens)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?PC=AV01
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3645637860-4088369842-987407559-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3645637860-4088369842-987407559-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3645637860-4088369842-987407559-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-11] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-11] (Oracle Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hro1k7bb.default
FF Homepage: about:home
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll [2013-03-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-03-11] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-02-16] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hro1k7bb.default\searchplugins\bing-avast.xml [2015-05-13]
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hro1k7bb.default\searchplugins\google-images.xml [2014-11-21]
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hro1k7bb.default\searchplugins\google-maps.xml [2014-11-21]
FF Extension: Avira Browser Safety - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hro1k7bb.default\Extensions\abs@avira.com [2015-05-13]
FF Extension: Speed Dial - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hro1k7bb.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2012-10-06]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-06-07]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 FSCLBaseUpdaterService; C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe [65536 2007-06-04] () [File not signed]
R2 lxdn_device; C:\Windows\system32\lxdncoms.exe [594600 2008-02-28] ( )
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
R2 TestHandler; C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [303104 2008-04-25] (Fujitsu Siemens Computers) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 ahcix86s; C:\Windows\system32\drivers\ahcix86s.sys [173576 2008-05-27] (AMD Technologies Inc.)
S4 JRAID; C:\Windows\system32\drivers\jraid.sys [76688 2008-04-03] (JMicron Technology Corp.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2015-04-16] (Avira GmbH)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2015-05-10] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-18 21:11 - 2015-05-18 21:12 - 00012328 _____ () C:\Users\user\Desktop\FRST.txt.txt
2015-05-18 20:59 - 2015-05-18 21:00 - 16502728 _____ (Malwarebytes Corp.) C:\Users\user\Desktop\mbar-1.09.1.1004.exe
2015-05-18 20:59 - 2015-05-18 20:59 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\user\Desktop\tdsskiller.exe
2015-05-17 13:53 - 2015-05-17 13:53 - 00000000 ____D () C:\Windows\CheckSur
2015-05-16 19:02 - 2015-05-16 15:02 - 00852630 _____ () C:\Users\user\Desktop\SecurityCheck.exe
2015-05-16 14:51 - 2015-05-16 14:50 - 02347384 _____ (ESET) C:\Users\user\Desktop\esetsmartinstaller_deu.exe
2015-05-15 22:32 - 2015-05-15 22:34 - 00008383 _____ () C:\zoek-results.log
2015-05-15 22:28 - 2015-05-15 22:28 - 00000000 ____D () C:\zoek_backup
2015-05-15 22:25 - 2015-05-15 22:20 - 01308672 _____ () C:\Users\user\Desktop\zoek.exe
2015-05-15 13:27 - 2015-05-15 13:27 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-USER-PC-Windows-Vista-(TM)-Home-Premium-(32-bit).dat
2015-05-15 13:27 - 2015-05-15 13:27 - 00000000 ____D () C:\RegBackup
2015-05-15 11:01 - 2015-05-15 11:05 - 00000000 ____D () C:\AdwCleaner
2015-05-15 11:00 - 2015-05-15 10:56 - 02721175 _____ (Thisisu) C:\Users\user\Desktop\JRT.exe
2015-05-15 11:00 - 2015-05-15 10:56 - 02209792 _____ () C:\Users\user\Desktop\AdwCleaner_4.204.exe
2015-05-14 18:07 - 2015-05-14 18:07 - 00011175 _____ () C:\ComboFix.txt
2015-05-14 14:48 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-14 14:48 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-14 14:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-14 14:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-14 14:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-14 14:48 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-14 14:48 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-14 14:48 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-14 14:45 - 2015-05-14 18:07 - 00000000 ____D () C:\Qoobox
2015-05-14 14:45 - 2015-05-14 16:56 - 00000000 ____D () C:\Windows\erdnt
2015-05-14 14:42 - 2015-05-14 14:41 - 05623645 ____R (Swearware) C:\Users\user\Desktop\ComboFix.exe
2015-05-14 13:27 - 2015-05-18 21:11 - 00000000 ____D () C:\FRST
2015-05-14 13:26 - 2015-05-14 13:26 - 00000000 _____ () C:\Users\user\defogger_reenable
2015-05-14 13:21 - 2015-05-14 13:21 - 01144832 _____ (Farbar) C:\Users\user\Desktop\FRST.exe
2015-05-14 13:21 - 2015-05-14 13:21 - 00050477 _____ () C:\Users\user\Desktop\Defogger.exe
2015-05-14 12:44 - 2015-05-14 12:36 - 00380416 _____ () C:\Users\user\Desktop\rhuxjylw.exe
2015-05-13 17:11 - 2015-04-16 15:23 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2015-05-13 16:26 - 2015-05-15 13:22 - 00000000 ____D () C:\Program Files\Avira
2015-05-13 16:26 - 2015-05-15 13:19 - 00000000 ____D () C:\ProgramData\Avira
2015-05-13 14:34 - 2015-04-10 17:30 - 12379136 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 14:34 - 2015-04-10 17:25 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 14:34 - 2015-04-10 17:25 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 14:34 - 2015-04-10 17:24 - 09750528 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 14:34 - 2015-04-10 17:21 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 14:34 - 2015-04-10 17:20 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 14:34 - 2015-04-10 17:20 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 14:34 - 2015-04-10 17:19 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 14:34 - 2015-04-10 17:19 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 14:34 - 2015-04-10 17:19 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 14:34 - 2015-04-10 17:19 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 14:34 - 2015-04-10 17:19 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-13 14:34 - 2015-04-10 17:19 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-05-13 14:34 - 2015-04-10 17:19 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-13 14:34 - 2015-04-10 17:19 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-13 14:34 - 2015-04-10 17:18 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-13 14:34 - 2015-04-10 17:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 14:34 - 2015-04-10 17:18 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 14:34 - 2015-04-10 17:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 14:34 - 2015-04-10 17:18 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-05-13 14:34 - 2015-04-10 17:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-05-13 14:34 - 2015-04-10 17:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-05-13 14:06 - 2015-04-30 18:03 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 13:57 - 2015-05-13 13:58 - 00000000 ____D () C:\Windows\Temp4FD5DB48-835C-1300-F19C-D227D2B8B20C-Signatures
2015-05-13 13:49 - 2015-05-15 11:09 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-13 13:48 - 2015-05-13 13:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-05-13 13:47 - 2015-05-13 13:48 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2015-05-13 13:47 - 2015-05-13 13:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-13 13:47 - 2015-04-19 23:24 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2015-05-13 13:47 - 2015-04-19 23:24 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2015-05-13 13:47 - 2015-04-19 23:24 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2015-05-13 13:47 - 2015-04-19 23:24 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2015-05-13 13:47 - 2015-04-19 22:19 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-05-13 13:47 - 2015-04-19 22:18 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2015-05-13 13:47 - 2015-04-19 22:13 - 00682496 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-05-13 13:47 - 2015-04-19 22:12 - 00801792 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 13:47 - 2015-04-19 06:59 - 02065408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 13:47 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-13 13:47 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-13 13:47 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-13 13:46 - 2015-04-19 22:12 - 01072640 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 13:45 - 2015-05-13 15:20 - 00000000 ____D () C:\Windows\pss
2015-05-13 13:39 - 2015-04-30 15:14 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 11:53 - 2015-04-11 01:22 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-10 23:45 - 2015-05-18 21:06 - 00000000 ____D () C:\Users\user\AppData\Local\Apps\2.0
2015-05-10 17:39 - 2008-03-17 15:45 - 01414440 _____ (Nero AG) C:\Windows\system32\ShellManager310E2D762.dll
2015-05-10 17:39 - 2008-03-11 20:30 - 00774144 _____ () C:\Windows\system32\NEROINSTAEC43759.DB
2015-05-10 13:55 - 2015-05-10 13:55 - 00001024 _____ () C:\Users\user\.rnd
2015-05-10 13:55 - 2015-05-10 13:55 - 00000000 _____ () C:\Windows\Irremote.ini
2015-04-23 19:09 - 2015-05-15 13:29 - 00000000 ____D () C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-18 21:09 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-18 21:09 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-18 21:09 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-18 21:07 - 2012-06-05 12:25 - 01674582 _____ () C:\Windows\WindowsUpdate.log
2015-05-18 21:07 - 2006-11-02 15:01 - 00032538 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-17 13:51 - 2012-06-05 18:53 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2015-05-16 19:16 - 2008-01-21 04:47 - 00587538 _____ () C:\Windows\PFRO.log
2015-05-16 18:45 - 2012-06-13 18:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-15 13:20 - 2015-02-03 12:52 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-14 18:07 - 2006-11-02 13:18 - 00000000 __RHD () C:\Users\Default
2015-05-14 18:07 - 2006-11-02 13:18 - 00000000 ___RD () C:\Users\Public
2015-05-14 17:59 - 2006-11-02 12:23 - 00000215 _____ () C:\Windows\system.ini
2015-05-14 16:49 - 2006-11-02 12:22 - 38273024 _____ () C:\Windows\system32\config\COMPON~3.bak
2015-05-14 16:49 - 2006-11-02 12:22 - 00524288 _____ () C:\Windows\system32\config\default.bak
2015-05-14 16:49 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security.bak
2015-05-14 16:49 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam.bak
2015-05-13 22:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-13 21:38 - 2006-11-02 13:18 - 00000000 __RSD () C:\Windows\Media
2015-05-13 21:38 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\spool
2015-05-13 21:38 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc
2015-05-13 21:38 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\registration
2015-05-13 21:38 - 2006-11-02 12:22 - 40894464 _____ () C:\Windows\system32\config\software_previous
2015-05-13 21:38 - 2006-11-02 12:22 - 17301504 _____ () C:\Windows\system32\config\system_previous
2015-05-13 21:35 - 2006-11-02 12:22 - 38273024 _____ () C:\Windows\system32\config\components_previous
2015-05-13 21:35 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous
2015-05-13 15:54 - 2008-01-21 09:16 - 00976356 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-13 15:26 - 2014-11-25 11:12 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-05-13 15:25 - 2014-11-25 11:12 - 00001832 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-05-13 15:25 - 2014-11-25 11:11 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-05-13 14:38 - 2006-11-02 14:47 - 00303800 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-13 14:36 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Branding
2015-05-13 13:54 - 2008-08-14 04:01 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-05-13 13:41 - 2006-11-02 14:37 - 00000000 ____D () C:\Windows\system32\XPSViewer
2015-05-13 13:39 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-13 11:56 - 2013-09-15 10:41 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-13 11:56 - 2012-06-05 18:42 - 00000840 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-13 11:56 - 2012-06-05 18:42 - 00000840 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-13 11:56 - 2006-11-02 12:24 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-05-13 11:50 - 2006-11-02 14:52 - 00103582 _____ () C:\Windows\setupact.log
2015-05-13 11:14 - 2006-11-02 12:22 - 00524288 _____ () C:\Windows\system32\config\default_previous
2015-05-13 11:14 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security_previous
2015-05-10 23:45 - 2012-06-05 12:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fujitsu Siemens Computers
2015-05-10 20:05 - 2012-10-05 18:41 - 00000000 ____D () C:\temp
2015-05-10 17:38 - 2013-01-31 11:17 - 00000000 ____D () C:\Users\user\AppData\Roaming\elsterformular
2015-05-10 17:38 - 2013-01-31 11:16 - 00000000 ____D () C:\ProgramData\elsterformular
2015-05-10 17:33 - 2014-09-09 20:02 - 00000000 ____D () C:\Program Files\DriverUpdate
2015-05-10 15:19 - 2014-09-09 20:02 - 00013464 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2015-05-10 13:56 - 2008-08-14 03:59 - 00000722 _____ () C:\Windows\system32\MsiExec.exe.log
2015-05-10 13:47 - 2012-06-05 12:30 - 00000000 ____D () C:\Program Files\Google
2015-05-09 17:25 - 2012-06-05 12:34 - 00000000 ____D () C:\Users\user\AppData\Local\Google
2015-05-05 14:28 - 2012-06-05 18:53 - 00000000 ____D () C:\ProgramData\Skype
2015-05-01 08:24 - 2014-09-23 18:30 - 00028672 _____ () C:\Users\user\Documents\lisste.wps
2015-05-01 08:24 - 2012-07-01 19:01 - 00000462 _____ () C:\Users\user\AppData\Roaming\wklnhst.dat
2015-04-27 08:13 - 2012-06-05 18:42 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-04-26 10:29 - 2014-10-10 09:18 - 00000000 ___RD () C:\Program Files\Skype

==================== Files in the root of some directories =======

2012-07-01 19:01 - 2015-05-01 08:24 - 0000462 _____ () C:\Users\user\AppData\Roaming\wklnhst.dat
2014-10-19 10:13 - 2015-02-13 21:49 - 0000680 _____ () C:\Users\user\AppData\Local\d3d9caps.dat
2012-06-13 18:16 - 2014-05-10 22:07 - 0007168 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-06-05 19:50 - 2012-06-05 19:50 - 0000252 _____ () C:\ProgramData\FastPics.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-18 21:15

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-05-2015 01
Ran by user at 2015-05-18 21:14:07
Running from C:\Users\user\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3645637860-4088369842-987407559-500 - Administrator - Disabled)
Gast (S-1-5-21-3645637860-4088369842-987407559-501 - Limited - Disabled)
user (S-1-5-21-3645637860-4088369842-987407559-1000 - Administrator - Enabled) => C:\Users\user

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.6.0.5970 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 9 ActiveX (HKLM\...\{58BAA8D0-404E-4585-9FD3-ED1BB72AC2EE}) (Version: 9.0.124.0 - Adobe Systems, Inc.)
Adobe Reader X (10.1.6) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.6 - Adobe Systems Incorporated)
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version:  - )
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
dm-Fotowelt (HKLM\...\dm-Fotowelt) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
FSCLounge (HKLM\...\{9A3BC157-B94F-4EFD-ABA9-1E56DEB00655}) (Version: 1.0.0 - Fujitsu Siemens Computers)
Fujitsu Siemens Computers Recovery (HKLM\...\{AFC454ED-A26F-4816-826B-C35129D82E1F}) (Version: 1.3.9 - Fujitsu Siemens Computers)
Hotkey Utility (HKLM\...\Hotkey Utility_is1) (Version: 1.5.5 - )
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version:  - )
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version:  - )
Java 7 Update 17 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217017FF}) (Version: 7.0.170 - Oracle)
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Launch Pad 1.0.3 (HKLM\...\Launch Pad_is1) (Version: 1.0.3 - FIC, Inc.)
Lexmark 2600 Series (HKLM\...\Lexmark 2600 Series) (Version:  - Lexmark International, Inc.)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 de) (HKLM\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
Nero 8 Essentials (HKLM\...\{854C47D1-C2A0-4492-8655-C3F8D49C1031}) (Version: 8.3.161 - Nero AG)
Picasa 2 (HKLM\...\Picasa2) (Version: 2.0 - Google, Inc.)
Power Manager 2.8.3 (HKLM\...\Power Manager_is1) (Version: 2.8.3 - FIC, Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - Realtek Semiconductor Corp.)
Skype™ 7.4 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
System Checkup 3.4 (HKLM\...\{4AC7B4E7-59B7-4E48-A60D-263C486FC33A}_is1) (Version: 3.4.2.29 - iolo technologies, LLC)
SystemDiagnostics (HKLM\...\{2F926AE7-9FB7-4B34-906F-9C29A6D146A7}) (Version: 2.01.0004 - Fujitsu Siemens Computers       )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

13-05-2015 15:22:28 Windows Update
15-05-2015 12:24:14 Geplanter Prüfpunkt
15-05-2015 22:32:21 zoek.exe restore point
17-05-2015 13:52:13 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 12:23 - 2015-05-15 22:32 - 00000781 ____A C:\Windows\system32\Drivers\etc\hosts
 
127.0.0.1       localhost 
::1             localhost 

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {9EDB8E42-4974-4F46-AB83-3B5F8EF5F166} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: {EC5A3411-8C0C-4A3A-9EB2-97752241BDC1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2012-06-05 19:54 - 2008-02-27 13:05 - 00115200 _____ () C:\Windows\system32\spool\PRTPROCS\W32X86\lxdndrpp.dll
2007-06-04 15:20 - 2007-06-04 15:20 - 00065536 _____ () C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe
2007-08-27 10:54 - 2007-08-27 10:54 - 00155648 _____ () C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWUpdater\0.18\FSCWUpdater.dll
2014-05-19 14:30 - 2015-05-18 21:09 - 00176128 _____ () C:\Windows\assembly\GAC_MSIL\FSCWCOM\1.0.0.0__8a33c55e43c2707f\FSCWCOM.dll
2014-05-19 14:30 - 2015-05-18 21:09 - 05881856 _____ () C:\Windows\assembly\GAC_MSIL\FSCWorld\6.0.6000.0__8a33c55e43c2707f\FSCWorld.dll
2014-05-19 14:30 - 2015-05-18 21:09 - 00040960 _____ () C:\Windows\assembly\GAC_MSIL\iFSCWTransfer\1.0.0.0__8a33c55e43c2707f\iFSCWTransfer.dll
2012-06-05 19:50 - 2007-10-13 04:24 - 00364544 _____ () C:\Program Files\Lexmark 2600 Series\iptk.dll
2012-06-05 19:50 - 2008-03-27 17:13 - 00660136 _____ () C:\Program Files\Lexmark 2600 Series\lxdnmon.exe
2012-06-05 19:50 - 2008-03-15 07:33 - 00380928 _____ () C:\Program Files\Lexmark 2600 Series\lxdnscw.dll
2012-06-05 19:50 - 2007-05-29 17:39 - 00589824 _____ () C:\Program Files\Lexmark 2600 Series\lxdndatr.dll
2012-06-05 19:50 - 2008-03-15 07:34 - 00782336 _____ () C:\Program Files\Lexmark 2600 Series\lxdnDRS.dll
2012-06-05 19:50 - 2007-11-21 01:44 - 00081920 _____ () C:\Program Files\Lexmark 2600 Series\lxdncaps.dll
2012-06-05 19:50 - 2007-10-03 00:51 - 00069632 _____ () C:\Program Files\Lexmark 2600 Series\lxdncnv4.dll
2008-08-14 03:53 - 2008-06-05 15:42 - 00520192 _____ () C:\Program Files\Hotkey Utility\tray.exe

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3645637860-4088369842-987407559-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\user\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
DNS Servers: Media is not connected to internet.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Socialbox.lnk => C:\Windows\pss\Socialbox.lnk.Startup

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [{59FEA07F-9D66-48DE-B647-77D5A3B3ED24}] => (Allow) C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe
FirewallRules: [{A85D6F64-BF32-4ABE-A5AB-F3620322C4BD}] => (Allow) C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe
FirewallRules: [{1BD03ACF-39F9-4CE7-A0CA-8F9A674639F2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{A803E4B2-042B-4E11-8FE9-AB85B240B628}] => (Allow) C:\Windows\System32\lxdncoms.exe
FirewallRules: [{9AAB19CB-2AF5-4F9F-82C5-DD05F817BAEB}] => (Allow) C:\Windows\System32\lxdncoms.exe
FirewallRules: [TCP Query User{0E7BA879-F112-4E38-B1C4-21FC0B0332DD}C:\program files\lexmark 2600 series\lxdnmon.exe] => (Block) C:\program files\lexmark 2600 series\lxdnmon.exe
FirewallRules: [UDP Query User{522E79D1-10DA-41FC-ACC3-A3C260CD7EF4}C:\program files\lexmark 2600 series\lxdnmon.exe] => (Block) C:\program files\lexmark 2600 series\lxdnmon.exe
FirewallRules: [TCP Query User{9211D5FC-CCA0-4967-8201-5E638FD3342B}C:\windows\system32\spool\drivers\w32x86\3\lxdnpswx.exe] => (Block) C:\windows\system32\spool\drivers\w32x86\3\lxdnpswx.exe
FirewallRules: [UDP Query User{FD53FF4D-5C40-4066-B30A-E7C0278E6E06}C:\windows\system32\spool\drivers\w32x86\3\lxdnpswx.exe] => (Block) C:\windows\system32\spool\drivers\w32x86\3\lxdnpswx.exe
FirewallRules: [{A3843E23-8966-472D-B9A6-8959C1A720F9}] => (Allow) LPort=80
FirewallRules: [{D4917D1B-C290-446B-8A46-495698BB12D4}] => (Allow) LPort=80
FirewallRules: [{C7D0718C-3852-4BDD-A249-D0A376257421}] => (Allow) LPort=80
FirewallRules: [TCP Query User{3B3E148F-BEAA-4936-B25B-3823D20EE6A4}C:\program files\lexmark 2600 series\lxdnlscn.exe] => (Block) C:\program files\lexmark 2600 series\lxdnlscn.exe
FirewallRules: [UDP Query User{FBF22A7C-4579-45BE-944F-B505392B0902}C:\program files\lexmark 2600 series\lxdnlscn.exe] => (Block) C:\program files\lexmark 2600 series\lxdnlscn.exe
FirewallRules: [{B5026DFD-228D-4378-A39F-9340D781F9B6}] => (Allow) C:\Windows\System32\msiexec.exe
FirewallRules: [{2BC4FAF0-7636-49CB-A9DB-488BC0995A31}] => (Allow) C:\Windows\System32\msiexec.exe
FirewallRules: [{CDBE4533-3201-4302-BA8B-96912FF4A7CB}] => (Allow) %SystemRoot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
FirewallRules: [TCP Query User{3E1E1DB2-8359-44F0-B88F-2E3490F5416F}C:\program files\lexmark 2600 series\lxdnmon.exe] => (Block) C:\program files\lexmark 2600 series\lxdnmon.exe
FirewallRules: [UDP Query User{F239AF1A-8725-47C6-97BC-E50B0DD35B9D}C:\program files\lexmark 2600 series\lxdnmon.exe] => (Block) C:\program files\lexmark 2600 series\lxdnmon.exe
FirewallRules: [TCP Query User{0E98F6F7-646E-4E12-8B57-B1AB2C168A7C}C:\windows\system32\spool\drivers\w32x86\3\lxdnpswx.exe] => (Block) C:\windows\system32\spool\drivers\w32x86\3\lxdnpswx.exe
FirewallRules: [UDP Query User{37A3E145-BCD9-4EF5-BB5F-BE41B70129BE}C:\windows\system32\spool\drivers\w32x86\3\lxdnpswx.exe] => (Block) C:\windows\system32\spool\drivers\w32x86\3\lxdnpswx.exe
FirewallRules: [{3BFDA529-4BCD-47D3-A222-EA35C8299CE1}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [{1562587F-AFA5-46CC-993C-65BBCC8A76D8}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [{EAAC344C-A7F1-48E4-A74E-7BED8978F3B2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{21F1B04D-CD00-4E54-8B78-F678598F9B19}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{E3E2AA12-D157-4D7A-BE05-E4FB0FC5D522}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{B9C43742-2864-4033-BBC6-A4EDEB61F905}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/18/2015 09:10:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung fscreg.exe, Version 2.0.1.0, Zeitstempel 0x486cbaaa, fehlerhaftes Modul MSHTML.dll, Version 9.0.8112.16644, Zeitstempel 0x5527ec3d, Ausnahmecode 0xc0000005, Fehleroffset 0x004479c1,
Prozess-ID 0xd08, Anwendungsstartzeit fscreg.exe0.

Error: (05/18/2015 09:10:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/18/2015 09:05:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung fscreg.exe, Version 2.0.1.0, Zeitstempel 0x486cbaaa, fehlerhaftes Modul MSHTML.dll, Version 9.0.8112.16644, Zeitstempel 0x5527ec3d, Ausnahmecode 0xc0000005, Fehleroffset 0x004479c1,
Prozess-ID 0xc5c, Anwendungsstartzeit fscreg.exe0.

Error: (05/18/2015 09:04:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/17/2015 01:50:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung fscreg.exe, Version 2.0.1.0, Zeitstempel 0x486cbaaa, fehlerhaftes Modul MSHTML.dll, Version 9.0.8112.16644, Zeitstempel 0x5527ec3d, Ausnahmecode 0xc0000005, Fehleroffset 0x004479c1,
Prozess-ID 0xbb0, Anwendungsstartzeit fscreg.exe0.

Error: (05/17/2015 01:49:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2015 05:33:29 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iexplore.exe, Version 9.0.8112.16644 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 1190
Anfangszeit: 01d08fe0b68efb16
Zeitpunkt der Beendigung: 0

Error: (05/16/2015 04:00:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung fscreg.exe, Version 2.0.1.0, Zeitstempel 0x486cbaaa, fehlerhaftes Modul MSHTML.dll, Version 9.0.8112.16644, Zeitstempel 0x5527ec3d, Ausnahmecode 0xc0000005, Fehleroffset 0x004479c1,
Prozess-ID 0xbf8, Anwendungsstartzeit fscreg.exe0.

Error: (05/16/2015 03:59:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2015 03:05:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung fscreg.exe, Version 2.0.1.0, Zeitstempel 0x486cbaaa, fehlerhaftes Modul MSHTML.dll, Version 9.0.8112.16644, Zeitstempel 0x5527ec3d, Ausnahmecode 0xc0000005, Fehleroffset 0x004479c1,
Prozess-ID 0xc08, Anwendungsstartzeit fscreg.exe0.


System errors:
=============
Error: (05/18/2015 09:06:37 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: 1Neustart des DienstsWindows Search%%1056

Error: (05/18/2015 09:06:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Windows Search1300001Neustart des Diensts

Error: (05/18/2015 09:06:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Windows Media Player-Netzwerkfreigabedienst1300001Neustart des Diensts

Error: (05/18/2015 09:06:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Fujitsu Siemens Computers Diagnostic Testhandler1

Error: (05/18/2015 09:06:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: lxdn_device1

Error: (05/18/2015 09:06:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: FSCLBaseUpdaterService1

Error: (05/18/2015 09:06:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Adobe Acrobat Update Service1

Error: (05/18/2015 09:06:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Druckwarteschlange1600001Neustart des Diensts

Error: (05/18/2015 09:06:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Softwarelizenzierung11200001Neustart des Diensts

Error: (05/16/2015 07:23:31 PM) (Source: Microsoft Antimalware) (EventID: 3002) (User: )
Description: Vom Echtzeitschutz-Feature von %%860 wurde ein Fehler festgestellt

	Feature: %%886

	Fehlercode: 0x8007006d

	Fehlerbeschreibung: Die Pipe wurde beendet. 

	Grund: %%892


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2015-05-18 21:13:26.552
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-18 21:13:25.981
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-18 21:13:25.420
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-18 21:13:24.858
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-18 21:13:23.837
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-18 21:13:23.237
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-18 21:13:22.651
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-18 21:13:22.059
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-18 21:12:35.087
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-18 21:12:34.523
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Percentage of memory in use: 73%
Total physical RAM: 2008.18 MB
Available physical RAM: 537.13 MB
Total Pagefile: 4257.65 MB
Available Pagefile: 2498.75 MB
Total Virtual: 2047.88 MB
Available Virtual: 1909.08 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:67.37 GB) (Free:24.95 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:156.73 GB) (Free:156.22 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: D56DB547)
Partition 1: (Not Active) - (Size=8.8 GB) - (Type=27)
Partition 2: (Active) - (Size=67.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=156.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================