Win7: Doppelt grün/blau unterstrichene Wörter im Browser mit Verlinkungen
Hallo zusammen,
seit einigen Tagen werden bei mir im Browser (Firefox 23.01) scheinbar zufällig ausgewählte Wörter doppelt unterstrichen (erst grün, nun blau). Wenn man mit der Maus darüber fährt wird eine Verlinkung auf monstermarketplace.com, neuerdings auf otrkey.com angezeigt.
Desweiteren werden in Thunderbird werden nun manche Mails nicht angezeigt und der Rechner kommt mir im allgemeinen etwas langsamer vor.
Hier die Logfiles:
Defogger Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:03 on 11/09/2013 (A)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCU:DAEMON Tools Lite -> Removed
Checking for services/drivers...
-=E.O.F=-
Addition Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-09-2013
Ran by A at 2013-09-11 17:10:01
Running from C:\Users\A\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
µTorrent (x32 Version: 3.2.0)
2007 Microsoft Office Suite Service Pack 3 (SP3) (x32)
7-Zip 9.20 (x32)
Adobe AIR (x32 Version: 3.8.0.870)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.168)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)
Anki (x32)
Anzeige am Bildschirm (Version: 6.62.01)
Bewerbungsfoto-/Passbild-Generator v3.5b (x32)
BisonCam Twain Pro (x32 Version: 1.5.4.7)
Botanicula (x32)
Broadcom InConcert Maestro (Version: 1.0.1.2200)
Burn.Now 4.5 (x32 Version: 4.5.0)
CCleaner (Version: 4.02)
Cisco Systems VPN Client 5.0.07.0290 (Version: 5.0.7)
Citavi (x32 Version: 3.3.0.0)
CivCity (x32 Version: 1.00.0000)
Conexant HD Audio (Version: 8.32.27.0)
ConvertHelper 2.2 (x32)
Corel Burn.Now Lenovo Edition (x32 Version: 4.5.0)
Corel DVD MovieFactory 7 (x32 Version: 7.0.0)
Corel DVD MovieFactory Lenovo Edition (x32 Version: 7.0.0)
Corel WinDVD (x32 Version: 10.0.5.828)
Create Recovery Media (x32 Version: 1.20.0.00)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Lite (x32 Version: 4.45.4.0316)
Digitale Bibliothek 5 (x32 Version: )
Direct DiscRecorder (x32 Version: 1.00.0000)
Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7 (Version: 1.00)
Elevated Installer (x32 Version: 2.2.20)
Energie-Manager (x32 Version: 6.32)
Evernote v. 4.2.3 (x32 Version: 4.2.3.15)
Fallout New Vegas Ultimate Edition (x32)
Flashtool (x32 Version: 0.9.11.0)
Formosus Graecus 2011 (x32)
Free YouTube to MP3 Converter version 3.11.32.918 (x32 Version: 3.11.32.918)
Freemake Video Downloader (x32 Version: 3.0.0)
G Data AntiVirus 2014 (x32 Version: 24.0.2.5)
Garmin Express (x32 Version: 2.2.20)
Garmin Express Tray (x32 Version: 2.2.20)
Garmin Update Service (x32 Version: 2.2.20)
GIMP 2.8.2 (Version: 2.8.2)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
grafstat4 (x32 Version: 4.255)
Hawken (HKCU)
Integrated Camera Driver Installer Package Ver.1.1.0.1147 (x32 Version: 1.1.0.1147)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Identity Protection Technology 1.1.2.0 (x32 Version: 1.1.2.0)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2509)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.2.0000)
Intel(R) WiDi (x32 Version: 2.1.41.0)
Intel(R) Wireless Display
IrfanView (remove only) (x32 Version: 4.32)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
JDownloader 0.9 (x32 Version: 0.9)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Lenovo Auto Scroll Utility (Version: 1.11)
Lenovo Patch Utility (x32 Version: 1.0.1.1)
Lenovo Patch Utility (x32 Version: 1.3.0.007)
Lenovo Patch Utility (x32 Version: 1.3.0.9)
Lenovo Patch Utility 64 bit (Version: 1.2.0.1)
Lenovo Patch Utility 64 bit (Version: 1.3.0.007)
Lenovo Patch Utility 64 bit (Version: 1.3.0.9)
Lenovo Power Management Driver (Version: 1.65.05.21)
Lenovo Registration (x32 Version: 1.0.4)
Lenovo SimpleTap (Version: 3.0.0010.00)
Lenovo Solution Center (Version: 2.1.003.00)
Lenovo System Interface Driver (Version: 1.05)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo ThinkVantage Toolbox (Version: 6.0.5849.23)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0005.00)
Lenovo Welcome (x32 Version: 3.00.006.0)
Magic The Gathering - Duels of the Planeswalkers 2013 (x32)
Magic Workstation 0.94f (x32 Version: 1.8.0)
Magic: The Gathering — Duels of the Planeswalkers 2012 (x32)
MailStore Home 7.1.0.7815 (x32 Version: 7.1.0.7815)
Media Go (x32 Version: 2.5.290)
Media Go Video Playback Engine 1.120.104.05010 (x32 Version: 1.120.104.05010)
Mesh Runtime (x32 Version: 15.4.5722.2)
Message Center Plus (x32 Version: 2.0.0012.00)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Games for Windows - LIVE (x32 Version: 3.0.89.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.0.19.0)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)
MOBILedit! Support Libraries (x32 Version: 4.0.0)
MOBILedit! ver. 6.9.0.2831 (x32 Version: 6.9.0.2831)
MozBackup 1.5.1 (x32)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86_v2 (x32 Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (x32 Version: 1.0.1.2)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyMicroBalance (x32 Version: 2.5.5)
MyPhoneExplorer (x32 Version: 1.8.5)
No23 Recorder (x32 Version: 2.1.0.3)
Nokia Connectivity Cable Driver (x32 Version: 7.1.101.0)
Nokia PC Suite (x32 Version: 7.1.180.94)
Nokia Suite (x32 Version: 3.7.22.0)
Opera 12.16 (Version: 12.16.1860)
PC Connectivity Solution (x32 Version: 12.0.76.0)
PhotoFiltre 7 (HKCU)
PlayStation(R)Store (x32 Version: 4.14.6.15183)
Polipo 1.0.4.1 (x32)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14)
PunkBuster Services (x32 Version: 0.990)
Radio.fx (x32)
RapidBoot (Version: 1.11)
Realtek Ethernet Controller Driver (x32 Version: 7.37.1229.2010)
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00)
RICOH_Media_Driver_v2.14.18.01 (x32 Version: 2.14.18.01)
Rossmann Fotowelt Software 4.12.1 (x32 Version: 4.12.1)
SDFormatter (x32 Version: 3.1.0)
Skype™ 6.6 (x32 Version: 6.6.106)
Sony Ericsson Update Engine (x32 Version: 2.13.9.201308081522)
Sony PC Companion 2.10.173 (x32 Version: 2.10.173)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
Spybot - Search & Destroy (x32 Version: 2.0.12)
Steam (x32 Version: 1.0.0.0)
TeamSpeak 3 Client (Version: 3.0.10)
TeamViewer 8 (x32 Version: 8.0.19045)
The War Z version alpha (x32 Version: alpha)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.4.0.2200)
ThinkPad UltraNav Driver (Version: 15.3.8.0)
ThinkVantage Access Connections (x32 Version: 5.97)
ThinkVantage AutoLock (Version: 1.03)
ThinkVantage Communications Utility (Version: 2.09)
ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.9)
Tor 0.2.2.35 (x32)
TubeSaver (x32)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2768023) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
Vidalia 0.2.15 (x32)
VIP Access (x32 Version: 2.0.5.13)
VirtualDJ PRO Full (x32 Version: 7.3)
VLC media player 2.0.7 (Version: 2.0.7)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows-Treiberpaket - Intel (iaStor) hdc (11/06/2010 10.1.0.1008) (Version: 11/06/2010 10.1.0.1008)
Windows-Treiberpaket - Lenovo 1.64.00.00 (07/28/2011 1.64.00.00) (Version: 07/28/2011 1.64.00.00)
Windows-Treiberpaket - Nokia Modem (02/25/2011 4.7) (Version: 02/25/2011 4.7)
Windows-Treiberpaket - Nokia Modem (02/25/2011 7.01.0.9) (Version: 02/25/2011 7.01.0.9)
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)
Windows-Treiberpaket - Realtek (RTL8167) Net (12/29/2010 7.037.1229.2010) (Version: 12/29/2010 7.037.1229.2010)
Windows-Treiberpaket - Synaptics (SynTP) Mouse (05/19/2011 15.3.8.0) (Version: 05/19/2011 15.3.8.0)
WinMerge 2.12.4 (x32 Version: 2.12.4)
WinPcap 4.1.2 (x32 Version: 4.1.0.2001)
WinRAR 4.10 beta 2 (64-bit) (Version: 4.10.2)
World of Tanks (x32)
World of Warplanes (x32)
==================== Restore Points =========================
27-08-2013 12:23:27 Windows Update
30-08-2013 13:57:40 Windows Update
31-08-2013 23:45:17 Uninstalled Sony Ericsson Drivers
31-08-2013 23:45:53 Installed Sony Ericsson Drivers
01-09-2013 19:10:08 Windows Update
06-09-2013 13:27:32 Windows Update
10-09-2013 14:15:15 Windows Update
10-09-2013 19:32:09 Windows Defender Checkpoint
==================== Hosts content: ==========================
2009-07-14 04:34 - 2012-12-24 02:26 - 00444830 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.10sek.com
127.0.0.1 10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 www.123fporn.info
127.0.0.1 123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {002E7CFC-B872-4A7E-A1C0-A3DD4544EF3F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)
Task: {01B1F2F7-42BD-4DE7-818E-717CDD116533} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-05-17] ()
Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {260585C1-90DC-43F3-A042-85B9845E109E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {2D06D758-5960-4797-8023-872DAA133112} - System32\Tasks\{BA552EAC-807E-4F0F-B0C5-96CF564FF557} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.115/de/go/help.faq.installer?LastError=1603
Task: {3B35CEAD-35E2-4AEB-810F-BEA33C72C2D5} - System32\Tasks\{01AF41EB-B272-4408-923F-50ACEE067DB7} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {3FAA887D-9F3D-48D5-A0E1-9DC2C45C7F76} - System32\Tasks\{CBE60268-A06A-4633-9D05-6C00751D169E} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {40E98F9E-7482-4B95-8E8E-C01CCAA91E68} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {64032559-0290-4574-891C-4EBA1AD174F9} - System32\Tasks\{2D6C87D2-22D7-4B03-80FD-B483DAEFE713} => Firefox.exe hxxp://ui.skype.com/ui/0/5.8.0.156/de/go/help.faq.installer?LastError=1603
Task: {675FF1B9-7D3D-4A0F-8751-C00C42EEB6A1} - System32\Tasks\{CD182552-5327-4F40-AA11-D1E26EDE012D} => Firefox.exe hxxp://ui.skype.com/ui/0/5.8.0.158/de/go/help.faq.installer?LastError=1603
Task: {69AE6C3C-1E95-4E13-9EB7-E251CA3A212B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {6AFD167B-611F-4051-85D9-5D508A950358} - System32\Tasks\{53748904-9F07-48E3-A58F-AEC443D1CA98} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.115/de/go/help.faq.installer?LastError=1603
Task: {6B01B9CF-0215-4012-8492-08330437FE01} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-05-17] (Lenovo)
Task: {74D374A9-AB9F-42F2-9C17-54726D3F5DD8} - System32\Tasks\{36596DC5-7009-46D6-9F78-A6552C756C1C} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.115/de/go/help.faq.installer?LastError=1603
Task: {7F0D9BC7-298F-456F-95E1-ACC3410424AD} - System32\Tasks\{6798B3C0-7F82-477A-A5D6-18171E6396C2} => Firefox.exe hxxp://ui.skype.com/ui/0/5.8.0.156/de/go/help.faq.installer?LastError=1603
Task: {86988D84-45DC-4E98-82CB-CAB12AB05FB4} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {8B0FECA5-72AA-4CE4-9CC5-4915210BCD0C} - System32\Tasks\{75DE4255-020B-4A30-A0C6-302AA8038FBB} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.115/de/go/help.faq.installer?LastError=1603
Task: {8C3F1EF7-C659-4780-AC9C-DCFA74AE65C6} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {910C2841-45EC-424C-94E1-8951977DCBC3} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {94F24FDF-D367-47BA-B201-C4829A738822} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for ThinkpadE520.A => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2011-12-21] (Lenovo)
Task: {A889E2A6-77F2-4819-9A38-BCFC778CE7FF} - System32\Tasks\MCP => C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-27] ()
Task: {AF9764DC-37C5-4264-804A-7C0E93D662B3} - System32\Tasks\{3C69F9EF-46E7-4732-B070-CF2B03EB90B9} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B7E5815B-F9D8-4087-A83C-EAD9CFEB9866} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {BEDBED6E-5266-4D40-8CEC-224DED116685} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-11] (Adobe Systems Incorporated)
Task: {D1CEDB16-4758-4AB4-8BC7-AD81F76A30CF} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-05-17] (Lenovo)
Task: {D5D98FF6-26DC-41CE-B0E8-77F718DB1A2C} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {DF43A8C0-4985-4AD0-8AF0-28ED3C34DBD0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {F199B72D-62C1-4C56-BF24-E8344362C818} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe
==================== Loaded Modules (whitelisted) =============
2011-12-05 14:06 - 2012-05-16 07:32 - 00103936 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL
2011-03-29 20:16 - 2011-03-29 20:16 - 00021864 _____ (Lenovo.) C:\Windows\system32\Sensor64.dll
2012-02-03 18:54 - 2011-10-23 01:24 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2013-02-25 05:15 - 2013-02-25 05:15 - 00536016 ____N (G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\ShellExt64.dll
2012-12-23 23:54 - 2011-09-01 04:22 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2011-12-05 22:22 - 2011-05-19 14:04 - 00411944 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2011-12-05 22:22 - 2011-05-19 14:04 - 00226600 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2011-12-05 22:22 - 2011-05-19 14:04 - 00057640 _____ () C:\Program Files\Synaptics\SynTP\SynTPEnhPS.dll
2011-07-27 21:44 - 2011-07-27 21:44 - 01077248 _____ (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\PsRegApi.dll
2011-07-27 21:07 - 2011-07-27 21:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-07-27 22:20 - 2011-07-27 22:20 - 00045568 _____ (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\LangResources\DEU\FrWrkDEU.dll
2011-07-27 21:55 - 2011-07-27 21:55 - 01746432 _____ (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\FrameworkPlugins\PanTray.dll
2011-07-27 21:46 - 2011-07-27 21:46 - 01045504 _____ (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\TraceAPI.DLL
2011-07-27 21:44 - 2011-07-27 21:44 - 00234496 _____ (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\WiMAXCoEx.dll
2011-07-27 21:50 - 2011-07-27 21:50 - 02072576 _____ (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\PfMgrApi.dll
2011-07-27 21:51 - 2011-07-27 21:51 - 01278976 _____ (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\MurocApi.dll
2011-07-27 21:46 - 2011-07-27 21:46 - 00841728 _____ (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\IntStngs.dll
2011-07-27 21:53 - 2011-07-27 21:53 - 00570368 _____ (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\PanApi.dll
2011-07-27 21:44 - 2011-07-27 21:44 - 00177152 _____ (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\S24MUDLL.dll
2011-07-27 21:44 - 2011-07-27 21:44 - 00846336 _____ (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\DbEngine.dll
2011-07-27 22:24 - 2011-07-27 22:24 - 00097280 _____ (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\LangResources\DEU\PanTrDEU.dll
2011-03-29 20:16 - 2011-03-29 20:16 - 00021864 _____ (Lenovo.) C:\Windows\System32\Sensor64.dll
2011-12-05 14:02 - 2011-08-19 07:20 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-02-25 04:57 - 2013-02-25 04:57 - 00305104 ____N (G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\BanksafeLDR64.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 21230944 _____ (Opera Software) C:\Program Files\Opera x64\Opera.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 01022464 _____ () C:\Program Files\Opera x64\gstreamer\gstreamer.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 00108544 _____ () C:\Program Files\Opera x64\gstreamer\plugins\gstaudioconvert.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 00106496 _____ () C:\Program Files\Opera x64\gstreamer\plugins\gstaudioresample.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 00062464 _____ () C:\Program Files\Opera x64\gstreamer\plugins\gstautodetect.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 00108032 _____ () C:\Program Files\Opera x64\gstreamer\plugins\gstcoreplugins.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 00073216 _____ () C:\Program Files\Opera x64\gstreamer\plugins\gstdecodebin2.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 00074752 _____ () C:\Program Files\Opera x64\gstreamer\plugins\gstdirectsound.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 00201216 _____ () C:\Program Files\Opera x64\gstreamer\plugins\gstffmpegcolorspace.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 00340480 _____ () C:\Program Files\Opera x64\gstreamer\plugins\gstoggdec.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 00045056 _____ () C:\Program Files\Opera x64\gstreamer\plugins\gstwaveform.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 00077312 _____ () C:\Program Files\Opera x64\gstreamer\plugins\gstwavparse.dll
2013-06-10 02:11 - 2013-09-11 16:43 - 00115712 _____ () C:\Program Files\Opera x64\gstreamer\plugins\gstwebmdec.dll
2013-07-11 15:06 - 2013-07-11 15:06 - 22225800 _____ () C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll
2011-02-14 23:02 - 2011-02-14 23:02 - 02417664 _____ () C:\Program Files (x86)\Vidalia Bundle\Vidalia\QtCore4.dll
2010-03-07 05:31 - 2010-03-07 05:31 - 00024110 _____ () C:\Program Files (x86)\Vidalia Bundle\Vidalia\mingwm10.dll
2009-06-22 20:42 - 2009-06-22 20:42 - 00043008 _____ () C:\Program Files (x86)\Vidalia Bundle\Vidalia\libgcc_s_dw2-1.dll
2010-02-10 18:36 - 2010-02-10 18:36 - 09565184 _____ () C:\Program Files (x86)\Vidalia Bundle\Vidalia\QtGui4.dll
2010-02-10 18:11 - 2010-02-10 18:11 - 01148416 _____ () C:\Program Files (x86)\Vidalia Bundle\Vidalia\QtNetwork4.dll
2010-02-10 18:08 - 2010-02-10 18:08 - 00398336 _____ () C:\Program Files (x86)\Vidalia Bundle\Vidalia\QtXml4.dll
2013-05-05 12:18 - 2013-05-21 08:57 - 00593920 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\NewUI.dll
2013-05-05 12:18 - 2013-02-05 12:49 - 00701952 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\bvrpctln.dll
2013-05-05 12:18 - 2012-04-30 11:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll
2013-05-05 12:18 - 2013-08-27 09:26 - 00920064 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\Device.dll
2013-05-05 12:18 - 2013-05-17 10:51 - 00207872 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll
2013-05-05 12:18 - 2011-04-04 14:14 - 00113664 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\WUNPACLN.dll
2013-05-05 12:18 - 2013-07-24 11:10 - 00991232 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.dll
2013-05-05 12:18 - 2012-12-26 15:44 - 00287744 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\PluginManager.dll
2013-05-05 12:18 - 2013-04-23 17:27 - 00342528 _____ (TODO: <Company name>) C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdateTools.dll
2013-05-05 12:18 - 2012-07-11 17:39 - 00329728 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\DownloadManager.dll
2013-05-14 09:36 - 2013-05-14 09:36 - 00913408 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\BackupRestore.dll
2011-07-07 14:54 - 2011-07-07 14:54 - 00233984 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll
2013-05-05 12:18 - 2013-05-20 12:58 - 00620718 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\sqlite3.dll
2013-02-18 15:53 - 2013-02-18 15:53 - 00789504 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\GMailSync.dll
2013-05-06 13:34 - 2013-05-06 13:34 - 00161792 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\MapiThk.DLL
2013-05-27 12:22 - 2013-05-27 12:22 - 00339456 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\CrashDump.dll
2013-05-21 08:58 - 2013-05-21 08:58 - 00883200 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\ContactSetup.dll
2013-05-05 12:18 - 2010-01-11 16:44 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll
2013-05-14 09:38 - 2013-05-14 09:38 - 00607744 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdate.dll
2013-05-05 12:18 - 2013-06-10 17:46 - 00285696 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\Statistics.dll
2013-05-05 12:18 - 2013-06-07 11:38 - 00183296 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\WebServices.dll
2012-05-29 10:50 - 2012-05-29 10:50 - 00326656 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\SyncDataProviders.dll
2013-01-08 17:03 - 2013-01-08 17:03 - 00086016 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CalEngine.dll
2012-04-04 14:33 - 2012-04-04 14:33 - 00139776 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CAgdLNotes.dll
2013-01-08 17:02 - 2013-01-08 17:02 - 00163840 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CAgdOutlook.dll
2012-07-26 11:51 - 2012-07-26 11:51 - 00208896 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VistaCalendar.dll
2011-05-19 10:06 - 2011-05-19 10:06 - 00061440 _____ (BVRP Software) C:\Program Files (x86)\Sony\Sony PC Companion\PBKENGINE.dll
2012-03-06 14:45 - 2012-03-06 14:45 - 00158720 _____ (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\SyncData.dll
2012-12-24 01:36 - 2012-11-13 15:06 - 00528288 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2012-12-24 01:36 - 2012-11-13 15:06 - 00108960 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2012-12-24 01:36 - 2012-11-13 15:06 - 03643352 _____ (Project JEDI) C:\Program Files (x86)\Spybot - Search & Destroy 2\Jcl150.bpl
2012-12-24 01:36 - 2012-11-13 15:06 - 00416160 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2012-12-24 01:36 - 2012-11-13 15:06 - 00158624 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2012-12-24 01:36 - 2012-11-13 15:06 - 00554400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2013-02-25 14:59 - 2013-02-25 14:59 - 01633768 _____ (G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\Common\AVKRes.dll
2013-02-25 04:57 - 2013-02-25 04:57 - 00264144 ____N (G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\BanksafeLDR.dll
2013-08-17 04:15 - 2013-08-17 04:15 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-04-26 03:59 - 2013-04-26 03:59 - 00266704 ____N (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\Banksafe.dll
2013-01-15 18:10 - 2013-01-15 18:10 - 00122880 _____ () C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox\components\CitaviPickerCommunication.dll
2013-07-11 15:06 - 2013-07-11 15:06 - 16166280 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
2013-02-25 14:59 - 2013-02-25 14:59 - 00814056 ____N (G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKScanJobC.dll
2013-02-25 04:13 - 2013-02-25 04:13 - 00182736 ____N (G DATA Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKScanP\AVKScanP.dll
2013-08-06 18:19 - 2013-08-06 18:19 - 02244504 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-08-06 18:19 - 2013-08-06 18:19 - 00158104 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-08-06 18:19 - 2013-08-06 18:19 - 00022424 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2013-08-06 18:19 - 2013-08-06 18:19 - 00579480 _____ (sqlite.org) C:\Program Files (x86)\Mozilla Thunderbird\mozsqlite3.dll
2013-03-21 17:08 - 2013-02-11 09:55 - 00209408 _____ (Mozilla Foundation) C:\Users\A\AppData\Roaming\Thunderbird\Profiles\gsf2cf2n.default\extensions\{e2fda1a4-762b-4020-b5ad-a41df1933103}\components\calbasecomps.dll
==================== Alternate Data Streams (whitelisted) ==========
==================== Faulty Device Manager Devices =============
Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/11/2013 04:31:56 PM) (Source: PC-Doctor) (User: )
Description: (7344) Asapi: (16:31:56:8200)(7344) S3LogPusherPlugin.Helper - Error -- 340 Unable to storage the test log to medium
Error: (09/11/2013 04:30:08 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (09/11/2013 04:30:08 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (09/11/2013 04:30:08 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (09/11/2013 04:23:58 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/11/2013 05:05:16 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 23.0.1.4974, Zeitstempel: 0x520bc252
Name des fehlerhaften Moduls: xul.dll, Version: 23.0.1.4974, Zeitstempel: 0x520bc166
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017af08
ID des fehlerhaften Prozesses: 0x1b8c
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Error: (09/10/2013 11:03:55 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (09/10/2013 11:03:55 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (09/10/2013 11:03:55 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (09/10/2013 10:58:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (09/11/2013 04:24:22 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AVKService erreicht.
Error: (09/09/2013 07:50:41 PM) (Source: Service Control Manager) (User: )
Description: Dienst "AcSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/09/2013 06:02:14 AM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (09/09/2013 05:41:55 AM) (Source: Service Control Manager) (User: )
Description: Dienst "AcSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/07/2013 03:04:04 PM) (Source: Service Control Manager) (User: )
Description: Dienst "AcSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/05/2013 06:10:20 PM) (Source: Service Control Manager) (User: )
Description: Dienst "AcSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/05/2013 06:46:54 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AVKService erreicht.
Error: (09/04/2013 09:30:04 PM) (Source: Service Control Manager) (User: )
Description: Dienst "AcSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/04/2013 03:34:11 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AVKService erreicht.
Error: (09/03/2013 10:22:00 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 45%
Total physical RAM: 8103.23 MB
Available physical RAM: 4402.03 MB
Total Pagefile: 16204.65 MB
Available Pagefile: 12188.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (Windows7_OS) (Fixed) (Total:452.58 GB) (Free:108.74 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: () (Removable) (Total:1.89 GB) (Free:0.49 GB) FAT
Drive q: (Lenovo_Recovery) (Fixed) (Total:11.72 GB) (Free:1.88 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: E0535BE1)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=453 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=12 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 2 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=2 GB) - (Type=06)
==================== End Of Log ============================
FRST Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-09-2013
Ran by A (administrator) on THINKPADE520 on 11-09-2013 17:09:02
Running from C:\Users\A\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlX64.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
(Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Microsoft) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SAsrv.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\Vidalia Bundle\Vidalia\vidalia.exe
(Spotify Ltd) C:\Users\A\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlk.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\MKRMSG.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
() C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Lenovo Group Limited) C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Opera Software) C:\Program Files\Opera x64\opera.exe
(Opera Software) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
() C:\Users\A\Desktop\Defogger.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2789160 2011-05-19] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-27] (Intel(R) Corporation)
HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [380776 2011-03-29] (Lenovo.)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [310912 2011-04-26] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] - C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [44096 2012-01-16] (Lenovo Group Limited)
HKLM\...\Run: [AcWin7Hlpr] - C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63376 2012-09-07] (Lenovo)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKCU\...\Run: [Vidalia] - C:\Program Files (x86)\Vidalia Bundle\Vidalia\vidalia.exe [5407850 2011-12-14] ()
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [Spotify Web Helper] - C:\Users\A\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-08] (Spotify Ltd)
HKCU\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
MountPoints2: {0119f946-1f36-11e1-a4d8-806e6f6e6963} - Q:\LenovoQDrive.exe
MountPoints2: {05a760d8-b4e2-11e2-9918-c63653f66dd6} - F:\Startme.exe
MountPoints2: {b522fca4-4e73-11e1-9098-f0def1aacfd1} - F:\Payne.exe
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [PWMTRV] - C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL [5941344 2012-05-16] (Lenovo Group Limited)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe [1444304 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [] - [x]
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2009-03-24] ()
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-05-17] (Lenovo)
HKU\Default User\...\RunOnce: [] - [x]
HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2009-03-24] ()
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-05-17] (Lenovo)
Lsa: [Notification Packages] scecli ACGina
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
BHO-x32: TubeSaver - {cca7d48b-fc0b-4188-9377-02709473bc85} - C:\Program Files (x86)\TubeSaver\132.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default
FF user.js: detected! => C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\user.js
FF Homepage: hxxp://de.wikipedia.org
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: sony.com/MediaGoDetector - C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll (Sony Network Entertainment International LLC)
FF SearchPlugin: C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\searchplugins\chip-online-suche.xml
FF SearchPlugin: C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\searchplugins\ebookpedianet.xml
FF SearchPlugin: C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\searchplugins\youtube.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\Extensions\ich@maltegoetz.de
FF Extension: No Name - C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\Extensions\nostmp
FF Extension: No Name - C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\Extensions\staged
FF Extension: Garmin Communicator - C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: DownloadHelper - C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Adobe DLM (powered by getPlus(R)) - C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\Extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
FF Extension: tineye - C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\Extensions\tineye@ideeinc.com.xpi
FF Extension: YoutubeDownloader - C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi
FF Extension: No Name - C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\Extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}.xpi
FF Extension: No Name - C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\Extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi
FF Extension: No Name - C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\o6pnzop0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\
FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\
FF HKLM-x32\...\Firefox\Extensions: [VIP1X@verisign.com] C:\Program Files (x86)\Symantec\VIP Access Client\
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF HKLM-x32\...\Firefox\Extensions: [VIP2X@verisign.com] C:\Program Files (x86)\Symantec\VIP Access Client\
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\
FF HKCU\...\Firefox\Extensions: [{c4cf403f-d86b-4e5a-a55a-ef6a06352881}] C:\Program Files (x86)\TubeSaver\132.xpi
FF Extension: No Name - C:\Program Files (x86)\TubeSaver\132.xpi
==================== Services (Whitelisted) =================
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1957840 2013-03-22] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe [635344 2013-02-25] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlX64.exe [2556384 2013-07-02] (G Data Software AG)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [76288 2012-02-01] (Freemake)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [8704 2012-02-01] (Microsoft)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [220504 2013-08-15] (Garmin Ltd or its subsidiaries)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [696808 2013-02-25] (G Data Software AG)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-27] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2012-03-19] ()
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [84080 2012-04-19] (Symantec Corporation)
==================== Drivers (Whitelisted) ====================
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-09-11] (DT Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-06-05] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-07-23] (G Data Software AG)
S3 GdNetMon; C:\Windows\system32\drivers\GdNetMon64.sys [31448 2012-02-03] (G Data Software AG)
S3 GdNetMon; C:\Windows\system32\drivers\GdNetMon64.sys [31448 2012-02-03] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [62808 2013-05-17] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-07-23] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-06-22] (G Data Software)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-06-22] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-06-05] (G Data Software AG)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
R1 PHCORE; C:\Program Files\Lenovo\RapidBoot\PHCORE64.SYS [32104 2011-07-08] (Lenovo Group Limited)
S3 s125bus; C:\Windows\System32\DRIVERS\s125bus.sys [108296 2007-04-24] (MCCI Corporation)
S3 s125mdfl; C:\Windows\System32\DRIVERS\s125mdfl.sys [19720 2007-04-24] (MCCI Corporation)
S3 s125mdm; C:\Windows\System32\DRIVERS\s125mdm.sys [144648 2007-04-24] (MCCI Corporation)
S3 s125mgmt; C:\Windows\System32\DRIVERS\s125mgmt.sys [126216 2007-04-24] (MCCI Corporation)
S3 s125obex; C:\Windows\System32\DRIVERS\s125obex.sys [123656 2007-04-24] (MCCI Corporation)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2008-01-09] (Sony Ericsson Mobile Communications)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-11 17:04 - 2013-09-11 17:04 - 01949408 _____ (Farbar) C:\Users\A\Desktop\FRST64.exe
2013-09-11 17:03 - 2013-09-11 17:03 - 00000534 _____ C:\Users\A\Desktop\defogger_disable.log
2013-09-11 17:03 - 2013-09-11 17:03 - 00000168 _____ C:\Users\A\defogger_reenable
2013-09-11 17:02 - 2013-09-11 17:02 - 00050477 _____ C:\Users\A\Desktop\Defogger.exe
2013-09-10 22:58 - 2013-09-11 16:23 - 00000112 _____ C:\Windows\setupact.log
2013-09-05 21:41 - 2013-09-11 04:44 - 00000000 ____D C:\Program Files (x86)\TubeSaver
2013-09-05 16:12 - 2013-09-05 16:12 - 07441760 _____ C:\Users\A\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-08-31 16:28 - 2013-08-31 16:28 - 00603239 _____ C:\Users\A\Downloads\https _www.facebook.com_.htm
2013-08-29 17:53 - 2013-08-29 17:53 - 03466248 _____ (TrueCrypt Foundation) C:\Users\A\Downloads\TrueCrypt_Setup_7.1a.exe
2013-08-23 14:56 - 2013-08-23 14:56 - 00000000 ____D C:\Users\A\Documents\Garmin
2013-08-23 14:55 - 2013-08-23 14:55 - 00000000 ____D C:\Users\A\AppData\Roaming\Garmin
2013-08-23 14:52 - 2013-08-23 14:52 - 00000000 ____D C:\Users\A\AppData\Local\Garmin
2013-08-23 14:50 - 2013-08-23 14:50 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-23 14:50 - 2013-08-23 14:50 - 00000000 ____D C:\ProgramData\Garmin
2013-08-23 14:50 - 2013-08-23 14:50 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-08-23 14:48 - 2013-08-23 14:49 - 12331768 _____ (Garmin Ltd or its subsidiaries) C:\Users\A\Downloads\GarminExpress.exe
2013-08-17 04:15 - 2013-08-17 04:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 14:48 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 14:48 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 14:48 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-15 14:48 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 14:48 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 14:48 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 14:48 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 14:48 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 14:48 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 14:48 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 14:48 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-15 14:48 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-15 14:48 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 14:48 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-15 14:48 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 14:48 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 14:48 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 14:48 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 14:48 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-15 14:48 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 14:48 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-15 14:48 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 14:48 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 14:48 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-15 14:48 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-15 14:48 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 14:48 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 14:48 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-15 14:48 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 14:48 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-15 14:48 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-15 14:38 - 2013-08-15 14:43 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 00:30 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-15 00:30 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-15 00:30 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-15 00:30 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-15 00:30 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-15 00:30 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-15 00:30 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-15 00:30 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 00:30 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-15 00:30 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 00:30 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 00:30 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-15 00:30 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-15 00:30 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-15 00:30 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-15 00:30 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-15 00:30 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-15 00:30 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-15 00:30 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-15 00:30 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-15 00:30 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-15 00:30 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-15 00:30 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-15 00:30 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-15 00:30 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-15 00:30 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-15 00:30 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 20:27 - 2013-08-14 20:27 - 00000000 ____D C:\Games
2013-08-14 20:26 - 2013-08-14 20:27 - 08775080 _____ (Wargaming.net ) C:\Users\A\Downloads\WoWP_internet_install_eu.exe
==================== One Month Modified Files and Folders =======
2013-09-11 17:07 - 2013-09-11 17:07 - 00000000 ____D C:\FRST
2013-09-11 17:04 - 2013-09-11 17:04 - 01949408 _____ (Farbar) C:\Users\A\Desktop\FRST64.exe
2013-09-11 17:03 - 2013-09-11 17:03 - 00000534 _____ C:\Users\A\Desktop\defogger_disable.log
2013-09-11 17:03 - 2013-09-11 17:03 - 00000168 _____ C:\Users\A\defogger_reenable
2013-09-11 17:03 - 2012-02-03 15:27 - 00000000 ____D C:\Users\A
2013-09-11 17:02 - 2013-09-11 17:02 - 00050477 _____ C:\Users\A\Desktop\Defogger.exe
2013-09-11 17:00 - 2011-10-31 18:15 - 00000000 ____D C:\Users\A\Desktop\Desktop 2
2013-09-11 16:57 - 2012-04-03 22:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-11 16:57 - 2012-04-03 22:28 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-11 16:57 - 2012-04-03 22:28 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-11 16:57 - 2012-02-03 16:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-11 16:50 - 2012-02-03 20:01 - 00000000 ____D C:\Users\A\Images - Spiele
2013-09-11 16:44 - 2012-02-03 15:28 - 00000466 _____ C:\Windows\Tasks\SystemToolsDailyTest.job
2013-09-11 16:44 - 2011-12-05 14:17 - 00003492 _____ C:\Windows\System32\Tasks\SystemToolsDailyTest
2013-09-11 16:43 - 2013-06-10 02:11 - 00000000 ____D C:\Program Files (x86)\Opera x64
2013-09-11 16:43 - 2012-10-26 15:24 - 00000000 ____D C:\Program Files\Opera x64
2013-09-11 16:35 - 2011-12-05 13:44 - 01985332 _____ C:\Windows\WindowsUpdate.log
2013-09-11 16:34 - 2012-02-03 18:48 - 00000000 ____D C:\Users\A\AppData\Roaming\Tor
2013-09-11 16:31 - 2012-02-03 15:28 - 00003448 _____ C:\Windows\System32\Tasks\PCDEventLauncher
2013-09-11 16:31 - 2009-07-14 06:45 - 00024400 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-11 16:31 - 2009-07-14 06:45 - 00024400 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-11 16:30 - 2011-12-05 22:27 - 11483814 _____ C:\Windows\system32\perfh007.dat
2013-09-11 16:30 - 2011-12-05 22:27 - 03634422 _____ C:\Windows\system32\perfc007.dat
2013-09-11 16:30 - 2009-07-14 07:13 - 00006252 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-11 16:24 - 2012-02-03 18:48 - 00000000 ____D C:\Users\A\AppData\Roaming\Vidalia
2013-09-11 16:24 - 2012-02-03 17:11 - 00000000 _____ C:\sniffer.log
2013-09-11 16:23 - 2013-09-10 22:58 - 00000112 _____ C:\Windows\setupact.log
2013-09-11 16:23 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-11 04:46 - 2013-03-08 02:23 - 00016944 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2013-09-11 04:44 - 2013-09-05 21:41 - 00000000 ____D C:\Program Files (x86)\TubeSaver
2013-09-11 04:30 - 2012-06-29 11:26 - 00000000 ____D C:\Users\A\AppData\Roaming\Spotify
2013-09-10 23:09 - 2013-01-06 18:59 - 00001738 _____ C:\Users\A\AppData\Roaming\MyMicroBalanceConfig.ini
2013-09-10 19:11 - 2012-06-29 11:27 - 00000000 ____D C:\Users\A\AppData\Local\Spotify
2013-09-10 16:14 - 2013-06-24 19:33 - 00022100 _____ C:\Windows\DPINST.LOG
2013-09-10 16:14 - 2013-05-05 12:18 - 00002037 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2013-09-10 16:13 - 2011-12-05 13:48 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-09 06:20 - 2012-02-03 19:54 - 00000000 ____D C:\Users\A\AppData\Roaming\vlc
2013-09-09 05:56 - 2010-12-16 16:16 - 00000000 ____D C:\Users\A\Desktop\USB
2013-09-07 21:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-05 21:42 - 2013-05-06 22:55 - 00002114 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-09-05 21:42 - 2013-05-06 22:55 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer - Neu
2013-09-05 21:40 - 2013-05-02 12:40 - 00000000 ____D C:\Users\A\Documents\SMS
2013-09-05 16:23 - 2013-03-08 18:36 - 00000000 ____D C:\Users\A\AppData\Roaming\MyPhoneExplorer
2013-09-05 16:12 - 2013-09-05 16:12 - 07441760 _____ C:\Users\A\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-09-03 22:16 - 2012-02-03 18:42 - 00000000 ____D C:\Users\A\AppData\Roaming\Skype
2013-09-02 20:42 - 2013-07-17 16:45 - 00000000 ____D C:\Users\A\Documents\VirtualDJ
2013-09-01 01:44 - 2013-05-02 10:42 - 00000000 ____D C:\ProgramData\Sony Ericsson
2013-09-01 01:44 - 2013-05-02 10:41 - 00000000 ____D C:\Program Files (x86)\Sony Ericsson
2013-08-31 16:28 - 2013-08-31 16:28 - 00603239 _____ C:\Users\A\Downloads\https _www.facebook.com_.htm
2013-08-30 16:52 - 2012-09-27 01:45 - 00000000 ____D C:\Users\A\.gimp-2.8
2013-08-29 17:53 - 2013-08-29 17:53 - 03466248 _____ (TrueCrypt Foundation) C:\Users\A\Downloads\TrueCrypt_Setup_7.1a.exe
2013-08-29 11:56 - 2012-02-03 15:28 - 00000528 _____ C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2013-08-29 01:00 - 2011-12-05 14:17 - 00004232 _____ C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2013-08-23 19:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-23 14:56 - 2013-08-23 14:56 - 00000000 ____D C:\Users\A\Documents\Garmin
2013-08-23 14:55 - 2013-08-23 14:55 - 00000000 ____D C:\Users\A\AppData\Roaming\Garmin
2013-08-23 14:52 - 2013-08-23 14:52 - 00000000 ____D C:\Users\A\AppData\Local\Garmin
2013-08-23 14:50 - 2013-08-23 14:50 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-23 14:50 - 2013-08-23 14:50 - 00000000 ____D C:\ProgramData\Garmin
2013-08-23 14:50 - 2013-08-23 14:50 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-08-23 14:49 - 2013-08-23 14:48 - 12331768 _____ (Garmin Ltd or its subsidiaries) C:\Users\A\Downloads\GarminExpress.exe
2013-08-21 18:39 - 2012-12-24 00:25 - 00000000 ____D C:\ldiag
2013-08-17 15:42 - 2012-05-05 03:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-17 04:15 - 2013-08-17 04:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-16 05:48 - 2012-07-17 04:27 - 00000000 ____D C:\Users\A\AppData\Roaming\wargaming.net
2013-08-15 14:48 - 2012-02-06 14:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-15 14:43 - 2013-08-15 14:38 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 14:38 - 2012-02-03 21:30 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 20:27 - 2013-08-14 20:27 - 00000000 ____D C:\Games
2013-08-14 20:27 - 2013-08-14 20:26 - 08775080 _____ (Wargaming.net ) C:\Users\A\Downloads\WoWP_internet_install_eu.exe
2013-08-14 20:27 - 2012-07-17 04:23 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-08-14 20:27 - 2012-02-03 20:35 - 00000000 ____D C:\Windows\SysWOW64\directx
Files to move or delete:
====================
C:\Users\A\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\A\AppData\Local\Temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-01 19:47
==================== End Of Log ============================
GMER Code:
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-11 17:29:19
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST950042 rev.0003 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\A\AppData\Local\Temp\pxdyyfow.sys
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe[1756] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe[1756] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe[1832] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe[1832] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe[1996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe[1996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe[2136] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe[2136] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe[2436] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe[2436] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe[2508] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe[2508] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Windows\SysWOW64\PnkBstrA.exe[2832] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322 00000000727e1a22 2 bytes [7E, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[2832] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496 00000000727e1ad0 2 bytes [7E, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[2832] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552 00000000727e1b08 2 bytes [7E, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[2832] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730 00000000727e1bba 2 bytes [7E, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[2832] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762 00000000727e1bda 2 bytes [7E, 72]
.text C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe[2904] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter 00000000756c87b1 5 bytes JMP 000000010067b780
.text C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe[2904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe[2904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe[3004] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe[3004] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe[3288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe[3288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4204] C:\Windows\syswow64\USER32.dll!GetMenu + 412 0000000074f651dd 7 bytes JMP 0000000110053ac0
.text C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4204] C:\Windows\syswow64\USER32.dll!PeekMessageA + 407 0000000074f6610b 7 bytes JMP 0000000110053c10
.text C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4204] C:\Windows\syswow64\USER32.dll!CreateDialogIndirectParamW + 131 0000000074f6c6c1 7 bytes JMP 0000000110053bf0
.text C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4204] C:\Windows\syswow64\USER32.dll!MessageBoxIndirectA + 199 0000000074fafc98 7 bytes JMP 0000000110053c60
.text C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4204] C:\Windows\syswow64\USER32.dll!MessageBoxIndirectW + 52 0000000074fafcd1 7 bytes JMP 0000000110053d30
.text C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4204] C:\Windows\syswow64\USER32.dll!MessageBoxExA + 31 0000000074fafcf5 7 bytes JMP 0000000110053ce0
.text C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4204] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4204] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[4400] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[4400] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[4424] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[4424] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe[5796] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe[5796] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
.text C:\Windows\SysWOW64\DllHost.exe[7916] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757c1465 2 bytes [7C, 75]
.text C:\Windows\SysWOW64\DllHost.exe[7916] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757c14bb 2 bytes [7C, 75]
.text ... * 2
---- Threads - GMER 2.1 ----
Thread C:\Windows\System32\svchost.exe [7256:5076] 000007fef46a9688
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\60d819ba5ca6
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\60d819ba5ca6 (not active ControlSet)
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
Da dies mein erster Post hier ist hoffe ich, dass ich soweit alles richtig gemacht habe und keine unnötige Arbeit verursache. Im Anhang befinden sich noch die Protokolldateien der Antivirensoftware GData, welche in den letzten Tagen gemacht wurden (Viren wurden gefunden, teilweise entfernt - erneute Scans zeigen keine Befunde - das Problem besteht aber weiterhin)
Vielen Dank schon mal für die Aufmerksamkeit und liebe Grüße,
A. |
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
