System Care Antivirus entfernen

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-06-2013
Ran by Maus at 2013-06-22 18:11:58
Running from C:\Users\Maus\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

2007 Microsoft Office Suite Service Pack 2 (SP2) (x32)
ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.1395.4512)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Photoshop CS3 (x32 Version: 10.0)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Adobe Setup (x32 Version: 1.0)
AMD Accelerated Video Transcoding (Version: 12.10.100.30328)
AMD APP SDK Runtime (Version: 2.4.595.1)
AMD Catalyst Install Manager (Version: 8.0.911.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2013.0328.2218.38225)
AMD Media Foundation Decoders (Version: 1.0.80328.2204)
AMD VISION Engine Control Center (x32 Version: 2013.0328.2218.38225)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
ATI AVIVO64 Codecs (Version: 11.6.0.10309)
AuroBinaryEA (x32 Version: 1.0.4)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Avira Free Antivirus (x32 Version: 13.0.0.3640)
Bonjour (Version: 3.0.0.10)
Casino Las Vegas (x32)
Casino Tropez (HKCU)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225)
CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225)
CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225)
CCC Help Czech (x32 Version: 2013.0328.2217.38225)
CCC Help Danish (x32 Version: 2013.0328.2217.38225)
CCC Help Dutch (x32 Version: 2013.0328.2217.38225)
CCC Help English (x32 Version: 2013.0328.2217.38225)
CCC Help Finnish (x32 Version: 2013.0328.2217.38225)
CCC Help French (x32 Version: 2013.0328.2217.38225)
CCC Help German (x32 Version: 2013.0328.2217.38225)
CCC Help Greek (x32 Version: 2013.0328.2217.38225)
CCC Help Hungarian (x32 Version: 2013.0328.2217.38225)
CCC Help Italian (x32 Version: 2013.0328.2217.38225)
CCC Help Japanese (x32 Version: 2013.0328.2217.38225)
CCC Help Korean (x32 Version: 2013.0328.2217.38225)
CCC Help Norwegian (x32 Version: 2013.0328.2217.38225)
CCC Help Polish (x32 Version: 2013.0328.2217.38225)
CCC Help Portuguese (x32 Version: 2013.0328.2217.38225)
CCC Help Russian (x32 Version: 2013.0328.2217.38225)
CCC Help Spanish (x32 Version: 2013.0328.2217.38225)
CCC Help Swedish (x32 Version: 2013.0328.2217.38225)
CCC Help Thai (x32 Version: 2013.0328.2217.38225)
CCC Help Turkish (x32 Version: 2013.0328.2217.38225)
ccc-utility64 (Version: 2013.0328.2218.38225)
CDBurnerXP (x32 Version: 4.4.1.3341)
DHTML Editing Component (x32 Version: 6.02.0001)
Disketch Disc Label Software (x32)
doPDF 7.3 printer
Epson Easy Photo Print 2 (x32 Version: 2.0.0.0)
Epson Event Manager (x32 Version: 2.01.00)
EPSON Scan (x32)
EPSON Stylus Office BX600FW_Office TX600FW_SX600FW Handbuch (x32)
EPU-4 Engine (x32 Version: 1.02.01)
ESET Online Scanner v3 (x32)
EuroGrand Casino (HKCU)
Europa Casino (x32)
EVEREST Home Edition v2.20 (x32 Version: 2.20)
Express Burn (x32)
HydraVision (x32 Version: 4.2.188.0)
iTunes (Version: 11.0.4.4)
Java 7 Update 17 (x32 Version: 7.0.170)
Java Auto Updater (x32 Version: 2.1.9.0)
Java(TM) 6 Update 26 (x32 Version: 6.0.260)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mein Büro (x32 Version: 13.0)
MemoMaster 5 (x32 Version: 5)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6425.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6425.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MozBackup 1.5.1 (x32)
Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0)
Mozilla Maintenance Service (x32 Version: 21.0)
Mozilla Thunderbird 17.0.6 (x86 de) (x32 Version: 17.0.6)
MyFreeCodec (HKCU)
NVIDIA Drivers (Version: 1.10.57.35)
NVIDIA ForceWare Network Access Manager (x32 Version: 1.00.7325.0)
NVIDIA PhysX (x32 Version: 9.10.0129)
Picasa 3 (x32 Version: 3.9)
Platform (x32 Version: 1.34)
Radio.fx (x32)
Roulette Bot Plus (x32 Version: 1.3.8.2)
Samsung Kies (x32 Version: 2.3.3.12085_7)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.23.0)
Sony Ericsson Update Engine (x32 Version: 2.13.6.201305161305)
Sony PC Companion 2.10.155 (x32 Version: 2.10.155)
Swiss Casino (x32)
Turbo Lister 2 (x32 Version: 2.00.0000)
VIA Plattform-Geräte-Manager (x32 Version: 1.34)
VideoPad Video Editor (x32)
WavePad Sound Editor (x32)
William Hill CASINO CLUB (x32)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)

==================== Restore Points =========================

10-06-2013 15:49:17 Installed iTunes
21-06-2013 13:33:07 Geplanter Prüfpunkt

==================== Scheduled Tasks (whitelisted) =============

Task: {4F0E4372-7770-45B5-BB43-F72B48E4EDA1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-17] (Adobe Systems Incorporated)
Task: {6C9B6A0F-9E0E-4B94-903D-AEF153D038CD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {7872AABA-0C47-4497-BC79-D1E46A4343EC} - System32\Tasks\NCH Software\WavePadReminder => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe [2013-05-21] (NCH Software)
Task: {B1034F51-B9E2-4E19-AE10-D055085A9F3B} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {DCFD7C73-B70C-4442-9B06-2B328BA5513D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {DE1F96C3-4CBD-4DDE-BC62-82DA419E3AE9} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe [2010-02-03] (ASUSTeK Computer Inc.)

==================== Faulty Device Manager Devices =============

Name: Android Composite ADB Interface
Description: Android Composite ADB Interface
Class Guid: {3f966bd9-fa04-4ec5-991c-d326973b5128}
Manufacturer: Google, Inc.
Service: WinUSB
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click Update Driver to update the drivers for this device.
On the General Properties tab of the device, click Troubleshoot to start the troubleshooting wizard.

Name: Videocontroller für Multimedia
Description: Videocontroller für Multimedia
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click Update Driver, which starts the Hardware Update wizard.

Name: Multimediacontroller
Description: Multimediacontroller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click Update Driver, which starts the Hardware Update wizard.

Name: Multimediacontroller
Description: Multimediacontroller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click Update Driver, which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/22/2013 05:56:13 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11045

Error: (06/22/2013 05:56:13 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11045

Error: (06/22/2013 05:56:13 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/22/2013 05:56:12 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10046

Error: (06/22/2013 05:56:12 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10046

Error: (06/22/2013 05:56:12 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/22/2013 05:56:11 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9048

Error: (06/22/2013 05:56:11 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9048

Error: (06/22/2013 05:56:11 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/22/2013 05:56:10 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8034


System errors:
=============
Error: (06/21/2013 07:59:58 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst Windows Media Player-Netzwerkfreigabedienst wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (06/21/2013 07:59:58 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht.

Error: (06/19/2013 07:40:42 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.

Error: (06/17/2013 03:16:16 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst AMD External Events Utility wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (06/17/2013 03:16:16 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst AMD External Events Utility erreicht.

Error: (06/17/2013 02:52:08 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \...\DR268 gefunden.

Error: (06/17/2013 02:26:21 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR147 gefunden.

Error: (06/17/2013 02:25:39 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR138 gefunden.

Error: (06/17/2013 02:16:35 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR70 gefunden.

Error: (06/17/2013 02:12:45 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR38 gefunden.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2013-05-13 22:30:01.507
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:30:01.498
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:56.345
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:56.336
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:51.276
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:51.263
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:45.566
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:45.548
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:40.520
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:40.511
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 19%
Total physical RAM: 8191.23 MB
Available physical RAM: 6565.44 MB
Total Pagefile: 16380.65 MB
Available Pagefile: 13851.81 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:1763.01 GB) (Free:1548.25 GB) NTFS (Disk=0 Partition=1) ==>[Drive with boot components (obtained from BCD)]
Drive d: (Volume) (Fixed) (Total:100 GB) (Free:0.79 GB) NTFS (Disk=0 Partition=2)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 3D066C12)
Partition 1: (Active) - (Size=-306000691200) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)

==================== End Of Log ============================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

==================== Registry (Whitelisted) ==================

HKCU\...\Run: [rfxsrvtray] C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKCU\...\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload [1561968 2013-04-23] (Samsung)
HKCU\...\Run: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKCU\...\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844168 2013-05-13] (Samsung)
HKCU\...\Run: [Sony PC Companion] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe /Background [448736 2013-03-18] (Sony)
HKCU\...\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844168 2013-05-13] (Samsung)
HKCU\...\Run: [HydraVisionDesktopManager] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-03-09] (AMD)
MountPoints2: {821b8717-a363-11e2-872d-bcaec5b5d978} - F:\Startme.exe
HKLM-x32\...\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [2439072 2010-05-24] (VIA)
HKLM-x32\...\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe [591696 2008-05-07] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-04-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe /min [345312 2013-04-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun [642656 2013-03-28] (Advanced Micro Devices, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp
HKCU SearchScopes: DefaultScope {4F3E80A3-FC4D-4212-9D6F-4A02B37DC4E2} URL =
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Maus\AppData\Roaming\Mozilla\Firefox\Profiles\r5qqullj.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752 2013-02-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816 2013-02-25] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()

==================== Drivers (Whitelisted) ====================

S3 AODDriver4.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-05-09] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378432 2013-05-09] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-02-26] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-02-26] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-04-18] ()
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-04-18] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-22 18:11 - 2013-06-22 18:11 - 00000000 ____D C:\FRST
2013-06-22 18:10 - 2013-06-22 18:10 - 01931364 ____A (Farbar) C:\Users\Maus\Downloads\FRST64.exe
2013-06-22 16:48 - 2013-06-22 16:48 - 00000000 ____D C:\Program Files (x86)\ESET
2013-06-22 16:47 - 2013-06-22 16:48 - 02347384 ____A (ESET) C:\Users\Maus\Downloads\esetsmartinstaller_enu.exe
2013-06-17 15:19 - 2013-06-17 15:19 - 00000000 ____D C:\ProgramData\ATI
2013-06-17 15:18 - 2013-06-17 15:18 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-06-10 18:28 - 2013-06-10 18:28 - 00001789 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files\iTunes
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files\iPod
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-10 18:27 - 2012-08-21 13:01 - 00033240 ____A (GEAR Software Inc.) C:\Windows\System32\Drivers\GEARAspiWDM.sys
2013-06-10 17:50 - 2013-06-10 18:27 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:51 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:50 - 00000000 ____D C:\Users\Maus\AppData\Local\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:50 - 00000000 ____D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2013-06-10 17:50 - 2012-08-21 13:01 - 00125872 ____A (GEAR Software Inc.) C:\Windows\System32\GEARAspi64.dll
2013-06-10 17:50 - 2012-08-21 13:01 - 00106928 ____A (GEAR Software Inc.) C:\Windows\SysWOW64\GEARAspi.dll
2013-06-10 17:49 - 2013-06-10 17:49 - 00000000 ____D C:\Users\Maus\AppData\Local\Apple
2013-06-10 17:49 - 2013-06-10 17:49 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\ProgramData\Apple
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files\Bonjour
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-06-09 13:20 - 2013-06-09 13:20 - 05387983 ____A C:\Users\Maus\Documents\Pfoetchenshop steuer.xlsx
2013-06-07 08:53 - 2013-06-07 08:53 - 00000000 ____D C:\PS_CS2_Gr_NonRet
2013-06-06 09:37 - 2013-06-06 09:37 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-06-03 20:16 - 2013-06-03 20:16 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Avira
2013-06-03 17:18 - 2013-06-03 17:17 - 00083160 ____A (Avira GmbH) C:\Windows\System32\Drivers\avnetflt.sys
2013-06-03 17:13 - 2013-06-03 17:13 - 00002072 ____A C:\Users\Public\Desktop\Avira Control Center.lnk
2013-06-03 17:13 - 2013-06-03 17:13 - 00000000 ____D C:\ProgramData\Avira
2013-06-03 17:13 - 2013-06-03 17:13 - 00000000 ____D C:\Program Files (x86)\Avira
2013-06-03 17:13 - 2013-03-06 16:13 - 00028600 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avkmgr.sys
2013-06-03 17:13 - 2013-02-26 16:56 - 00130016 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-06-03 17:13 - 2013-02-26 16:56 - 00100712 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2013-06-03 15:56 - 2013-06-03 16:25 - 102323272 ____A C:\Users\Maus\Downloads\avira_free3640_antivirus_de.exe
2013-06-02 15:39 - 2013-06-02 15:39 - 00000000 ____A C:\Windows\SysWOW64\sho6844.tmp
2013-05-29 17:12 - 2013-05-29 17:12 - 00001115 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Malwarebytes
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-05-29 17:12 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-05-29 17:01 - 2013-05-29 17:01 - 00000000 ____A C:\Users\Maus\defogger_reenable
2013-05-28 15:01 - 2013-05-28 15:01 - 00002054 ____A C:\Users\Maus\Desktop\System Care Antivirus.lnk
2013-05-28 14:53 - 2013-05-29 17:18 - 00000000 ____D C:\ProgramData\E809C9ACCDD670A50000E808E1A8752E
2013-05-24 08:01 - 2013-05-24 08:01 - 00001140 ____A C:\Users\Public\Desktop\VideoPad Video Editor.lnk
2013-05-24 08:00 - 2013-06-02 15:23 - 00000000 ____D C:\Users\Maus\AppData\Roaming\NCH Software
2013-05-24 08:00 - 2013-06-02 15:23 - 00000000 ____D C:\ProgramData\NCH Software
2013-05-24 08:00 - 2013-05-24 08:01 - 00000000 ____D C:\Program Files (x86)\NCH Software
2013-05-24 08:00 - 2013-05-24 08:00 - 00001154 ____A C:\Users\Public\Desktop\Disketch Disc Label Software.lnk
2013-05-24 08:00 - 2013-05-24 08:00 - 00001152 ____A C:\Users\Public\Desktop\Express Burn.lnk
2013-05-24 08:00 - 2013-05-24 08:00 - 00001124 ____A C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2013-05-24 07:59 - 2013-05-24 08:00 - 00790096 ____A (NCH Software) C:\Users\Maus\Downloads\burnsetup_4.65.exe
2013-05-24 07:41 - 2013-05-24 07:41 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Canneverbe Limited
2013-05-24 07:41 - 2013-05-24 07:41 - 00000000 ____D C:\ProgramData\Canneverbe Limited

==================== Installed Programs =======================

2007 Microsoft Office Suite Service Pack 2 (SP2) (x32)
ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.1395.4512)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Photoshop CS3 (x32 Version: 10.0)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Adobe Setup (x32 Version: 1.0)
AMD Accelerated Video Transcoding (Version: 12.10.100.30328)
AMD APP SDK Runtime (Version: 2.4.595.1)
AMD Catalyst Install Manager (Version: 8.0.911.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2013.0328.2218.38225)
AMD Media Foundation Decoders (Version: 1.0.80328.2204)
AMD VISION Engine Control Center (x32 Version: 2013.0328.2218.38225)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
ATI AVIVO64 Codecs (Version: 11.6.0.10309)
AuroBinaryEA (x32 Version: 1.0.4)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Avira Free Antivirus (x32 Version: 13.0.0.3640)
Bonjour (Version: 3.0.0.10)
Casino Las Vegas (x32)
Casino Tropez (HKCU)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225)
CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225)
CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225)
CCC Help Czech (x32 Version: 2013.0328.2217.38225)
CCC Help Danish (x32 Version: 2013.0328.2217.38225)
CCC Help Dutch (x32 Version: 2013.0328.2217.38225)
CCC Help English (x32 Version: 2013.0328.2217.38225)
CCC Help Finnish (x32 Version: 2013.0328.2217.38225)
CCC Help French (x32 Version: 2013.0328.2217.38225)
CCC Help German (x32 Version: 2013.0328.2217.38225)
CCC Help Greek (x32 Version: 2013.0328.2217.38225)
CCC Help Hungarian (x32 Version: 2013.0328.2217.38225)
CCC Help Italian (x32 Version: 2013.0328.2217.38225)
CCC Help Japanese (x32 Version: 2013.0328.2217.38225)
CCC Help Korean (x32 Version: 2013.0328.2217.38225)
CCC Help Norwegian (x32 Version: 2013.0328.2217.38225)
CCC Help Polish (x32 Version: 2013.0328.2217.38225)
CCC Help Portuguese (x32 Version: 2013.0328.2217.38225)
CCC Help Russian (x32 Version: 2013.0328.2217.38225)
CCC Help Spanish (x32 Version: 2013.0328.2217.38225)
CCC Help Swedish (x32 Version: 2013.0328.2217.38225)
CCC Help Thai (x32 Version: 2013.0328.2217.38225)
CCC Help Turkish (x32 Version: 2013.0328.2217.38225)
ccc-utility64 (Version: 2013.0328.2218.38225)
CDBurnerXP (x32 Version: 4.4.1.3341)
DHTML Editing Component (x32 Version: 6.02.0001)
Disketch Disc Label Software (x32)
doPDF 7.3 printer
Epson Easy Photo Print 2 (x32 Version: 2.0.0.0)
Epson Event Manager (x32 Version: 2.01.00)
EPSON Scan (x32)
EPSON Stylus Office BX600FW_Office TX600FW_SX600FW Handbuch (x32)
EPU-4 Engine (x32 Version: 1.02.01)
ESET Online Scanner v3 (x32)
EuroGrand Casino (HKCU)
Europa Casino (x32)
EVEREST Home Edition v2.20 (x32 Version: 2.20)
Express Burn (x32)
HydraVision (x32 Version: 4.2.188.0)
iTunes (Version: 11.0.4.4)
Java 7 Update 17 (x32 Version: 7.0.170)
Java Auto Updater (x32 Version: 2.1.9.0)
Java(TM) 6 Update 26 (x32 Version: 6.0.260)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mein Büro (x32 Version: 13.0)
MemoMaster 5 (x32 Version: 5)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6425.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6425.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MozBackup 1.5.1 (x32)
Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0)
Mozilla Maintenance Service (x32 Version: 21.0)
Mozilla Thunderbird 17.0.6 (x86 de) (x32 Version: 17.0.6)
MyFreeCodec (HKCU)
NVIDIA Drivers (Version: 1.10.57.35)
NVIDIA ForceWare Network Access Manager (x32 Version: 1.00.7325.0)
NVIDIA PhysX (x32 Version: 9.10.0129)
Picasa 3 (x32 Version: 3.9)
Platform (x32 Version: 1.34)
Radio.fx (x32)
Roulette Bot Plus (x32 Version: 1.3.8.2)
Samsung Kies (x32 Version: 2.3.3.12085_7)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.23.0)
Sony Ericsson Update Engine (x32 Version: 2.13.6.201305161305)
Sony PC Companion 2.10.155 (x32 Version: 2.10.155)
Swiss Casino (x32)
Turbo Lister 2 (x32 Version: 2.00.0000)
VIA Plattform-Geräte-Manager (x32 Version: 1.34)
VideoPad Video Editor (x32)
WavePad Sound Editor (x32)
William Hill CASINO CLUB (x32)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)

==================== Restore Points =========================

10-06-2013 15:49:17 Installed iTunes
21-06-2013 13:33:07 Geplanter Prüfpunkt

==================== Scheduled Tasks (whitelisted) =============

Task: {4F0E4372-7770-45B5-BB43-F72B48E4EDA1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-17] (Adobe Systems Incorporated)
Task: {6C9B6A0F-9E0E-4B94-903D-AEF153D038CD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {7872AABA-0C47-4497-BC79-D1E46A4343EC} - System32\Tasks\NCH Software\WavePadReminder => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe [2013-05-21] (NCH Software)
Task: {B1034F51-B9E2-4E19-AE10-D055085A9F3B} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {DCFD7C73-B70C-4442-9B06-2B328BA5513D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {DE1F96C3-4CBD-4DDE-BC62-82DA419E3AE9} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe [2010-02-03] (ASUSTeK Computer Inc.)

==================== Faulty Device Manager Devices =============

Name: Android Composite ADB Interface
Description: Android Composite ADB Interface
Class Guid: {3f966bd9-fa04-4ec5-991c-d326973b5128}
Manufacturer: Google, Inc.
Service: WinUSB
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click Update Driver to update the drivers for this device.
On the General Properties tab of the device, click Troubleshoot to start the troubleshooting wizard.

Name: Videocontroller für Multimedia
Description: Videocontroller für Multimedia
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click Update Driver, which starts the Hardware Update wizard.

Name: Multimediacontroller
Description: Multimediacontroller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click Update Driver, which starts the Hardware Update wizard.

Name: Multimediacontroller
Description: Multimediacontroller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click Update Driver, which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:
==================
Error: (06/22/2013 05:56:13 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11045

Error: (06/22/2013 05:56:13 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11045

Error: (06/22/2013 05:56:13 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/22/2013 05:56:12 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10046

Error: (06/22/2013 05:56:12 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10046

Error: (06/22/2013 05:56:12 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/22/2013 05:56:11 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9048

Error: (06/22/2013 05:56:11 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9048

Error: (06/22/2013 05:56:11 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/22/2013 05:56:10 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8034


System errors:
=============
Error: (06/21/2013 07:59:58 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst Windows Media Player-Netzwerkfreigabedienst wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (06/21/2013 07:59:58 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht.

Error: (06/19/2013 07:40:42 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.

Error: (06/17/2013 03:16:16 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst AMD External Events Utility wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (06/17/2013 03:16:16 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst AMD External Events Utility erreicht.

Error: (06/17/2013 02:52:08 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \...\DR268 gefunden.

Error: (06/17/2013 02:26:21 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR147 gefunden.

Error: (06/17/2013 02:25:39 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR138 gefunden.

Error: (06/17/2013 02:16:35 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR70 gefunden.

Error: (06/17/2013 02:12:45 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR38 gefunden.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2013-05-13 22:30:01.507
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:30:01.498
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:56.345
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:56.336
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:51.276
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:51.263
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:45.566
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:45.548
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:40.520
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-05-13 22:29:40.511
Description: Windows konnte die Abbildintegrität der Datei \Device\HarddiskVolume1\Windows\SysWOW64\FsUsbExDisk.Sys nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 19%
Total physical RAM: 8191.23 MB
Available physical RAM: 6565.44 MB
Total Pagefile: 16380.65 MB
Available Pagefile: 13851.81 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:1763.01 GB) (Free:1548.25 GB) NTFS (Disk=0 Partition=1) ==>[Drive with boot components (obtained from BCD)]
Drive d: (Volume) (Fixed) (Total:100 GB) (Free:0.79 GB) NTFS (Disk=0 Partition=2)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 3D066C12)
Partition 1: (Active) - (Size=-306000691200) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2013
Ran by Maus (administrator) on 22-06-2013 18:11:22
Running from C:\Users\Maus\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

==================== Registry (Whitelisted) ==================

HKCU\...\Run: [rfxsrvtray] C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKCU\...\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload [1561968 2013-04-23] (Samsung)
HKCU\...\Run: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKCU\...\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844168 2013-05-13] (Samsung)
HKCU\...\Run: [Sony PC Companion] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe /Background [448736 2013-03-18] (Sony)
HKCU\...\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844168 2013-05-13] (Samsung)
HKCU\...\Run: [HydraVisionDesktopManager] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-03-09] (AMD)
MountPoints2: {821b8717-a363-11e2-872d-bcaec5b5d978} - F:\Startme.exe
HKLM-x32\...\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [2439072 2010-05-24] (VIA)
HKLM-x32\...\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe [591696 2008-05-07] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-04-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe /min [345312 2013-04-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun [642656 2013-03-28] (Advanced Micro Devices, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp
HKCU SearchScopes: DefaultScope {4F3E80A3-FC4D-4212-9D6F-4A02B37DC4E2} URL =
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Maus\AppData\Roaming\Mozilla\Firefox\Profiles\r5qqullj.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752 2013-02-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816 2013-02-25] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()

==================== Drivers (Whitelisted) ====================

S3 AODDriver4.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-05-09] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378432 2013-05-09] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-02-26] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-02-26] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-04-18] ()
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-04-18] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-22 18:11 - 2013-06-22 18:11 - 00000000 ____D C:\FRST
2013-06-22 18:10 - 2013-06-22 18:10 - 01931364 ____A (Farbar) C:\Users\Maus\Downloads\FRST64.exe
2013-06-22 16:48 - 2013-06-22 16:48 - 00000000 ____D C:\Program Files (x86)\ESET
2013-06-22 16:47 - 2013-06-22 16:48 - 02347384 ____A (ESET) C:\Users\Maus\Downloads\esetsmartinstaller_enu.exe
2013-06-17 15:19 - 2013-06-17 15:19 - 00000000 ____D C:\ProgramData\ATI
2013-06-17 15:18 - 2013-06-17 15:18 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-06-10 18:28 - 2013-06-10 18:28 - 00001789 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files\iTunes
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files\iPod
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-10 18:27 - 2012-08-21 13:01 - 00033240 ____A (GEAR Software Inc.) C:\Windows\System32\Drivers\GEARAspiWDM.sys
2013-06-10 17:50 - 2013-06-10 18:27 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:51 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:50 - 00000000 ____D C:\Users\Maus\AppData\Local\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:50 - 00000000 ____D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2013-06-10 17:50 - 2012-08-21 13:01 - 00125872 ____A (GEAR Software Inc.) C:\Windows\System32\GEARAspi64.dll
2013-06-10 17:50 - 2012-08-21 13:01 - 00106928 ____A (GEAR Software Inc.) C:\Windows\SysWOW64\GEARAspi.dll
2013-06-10 17:49 - 2013-06-10 17:49 - 00000000 ____D C:\Users\Maus\AppData\Local\Apple
2013-06-10 17:49 - 2013-06-10 17:49 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\ProgramData\Apple
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files\Bonjour
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-06-09 13:20 - 2013-06-09 13:20 - 05387983 ____A C:\Users\Maus\Documents\Pfoetchenshop steuer.xlsx
2013-06-07 08:53 - 2013-06-07 08:53 - 00000000 ____D C:\PS_CS2_Gr_NonRet
2013-06-06 09:37 - 2013-06-06 09:37 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-06-03 20:16 - 2013-06-03 20:16 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Avira
2013-06-03 17:18 - 2013-06-03 17:17 - 00083160 ____A (Avira GmbH) C:\Windows\System32\Drivers\avnetflt.sys
2013-06-03 17:13 - 2013-06-03 17:13 - 00002072 ____A C:\Users\Public\Desktop\Avira Control Center.lnk
2013-06-03 17:13 - 2013-06-03 17:13 - 00000000 ____D C:\ProgramData\Avira
2013-06-03 17:13 - 2013-06-03 17:13 - 00000000 ____D C:\Program Files (x86)\Avira
2013-06-03 17:13 - 2013-03-06 16:13 - 00028600 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avkmgr.sys
2013-06-03 17:13 - 2013-02-26 16:56 - 00130016 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-06-03 17:13 - 2013-02-26 16:56 - 00100712 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2013-06-03 15:56 - 2013-06-03 16:25 - 102323272 ____A C:\Users\Maus\Downloads\avira_free3640_antivirus_de.exe
2013-06-02 15:39 - 2013-06-02 15:39 - 00000000 ____A C:\Windows\SysWOW64\sho6844.tmp
2013-05-29 17:12 - 2013-05-29 17:12 - 00001115 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Malwarebytes
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-05-29 17:12 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-05-29 17:01 - 2013-05-29 17:01 - 00000000 ____A C:\Users\Maus\defogger_reenable
2013-05-28 15:01 - 2013-05-28 15:01 - 00002054 ____A C:\Users\Maus\Desktop\System Care Antivirus.lnk
2013-05-28 14:53 - 2013-05-29 17:18 - 00000000 ____D C:\ProgramData\E809C9ACCDD670A50000E808E1A8752E
2013-05-24 08:01 - 2013-05-24 08:01 - 00001140 ____A C:\Users\Public\Desktop\VideoPad Video Editor.lnk
2013-05-24 08:00 - 2013-06-02 15:23 - 00000000 ____D C:\Users\Maus\AppData\Roaming\NCH Software
2013-05-24 08:00 - 2013-06-02 15:23 - 00000000 ____D C:\ProgramData\NCH Software
2013-05-24 08:00 - 2013-05-24 08:01 - 00000000 ____D C:\Program Files (x86)\NCH Software
2013-05-24 08:00 - 2013-05-24 08:00 - 00001154 ____A C:\Users\Public\Desktop\Disketch Disc Label Software.lnk
2013-05-24 08:00 - 2013-05-24 08:00 - 00001152 ____A C:\Users\Public\Desktop\Express Burn.lnk
2013-05-24 08:00 - 2013-05-24 08:00 - 00001124 ____A C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2013-05-24 07:59 - 2013-05-24 08:00 - 00790096 ____A (NCH Software) C:\Users\Maus\Downloads\burnsetup_4.65.exe
2013-05-24 07:41 - 2013-05-24 07:41 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Canneverbe Limited
2013-05-24 07:41 - 2013-05-24 07:41 - 00000000 ____D C:\ProgramData\Canneverbe Limited

==================== One Month Modified Files and Folders =======

2013-06-22 18:11 - 2013-06-22 18:11 - 00000000 ____D C:\FRST
2013-06-22 18:10 - 2013-06-22 18:10 - 01931364 ____A (Farbar) C:\Users\Maus\Downloads\FRST64.exe
2013-06-22 17:25 - 2013-03-11 14:50 - 00724019 ____A C:\Windows\WindowsUpdate.log
2013-06-22 17:18 - 2013-03-17 22:03 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-22 16:48 - 2013-06-22 16:48 - 00000000 ____D C:\Program Files (x86)\ESET
2013-06-22 16:48 - 2013-06-22 16:47 - 02347384 ____A (ESET) C:\Users\Maus\Downloads\esetsmartinstaller_enu.exe
2013-06-22 16:37 - 2009-07-14 06:45 - 00021664 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-22 16:37 - 2009-07-14 06:45 - 00021664 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-22 16:29 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-22 16:29 - 2009-07-14 06:51 - 00053731 ____A C:\Windows\setupact.log
2013-06-19 08:09 - 2013-03-15 07:47 - 00000000 ____D C:\Users\Maus\AppData\Roaming\SoftGrid Client
2013-06-17 15:19 - 2013-06-17 15:19 - 00000000 ____D C:\ProgramData\ATI
2013-06-17 15:18 - 2013-06-17 15:18 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-06-17 15:18 - 2013-03-12 09:35 - 00000000 ____D C:\ProgramData\AMD
2013-06-17 15:18 - 2013-03-12 09:33 - 00000000 ____D C:\Program Files\ATI Technologies
2013-06-17 14:29 - 2013-03-17 12:22 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-17 14:29 - 2013-03-17 12:22 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-15 08:56 - 2010-11-21 08:50 - 00696576 ____A C:\Windows\System32\perfh007.dat
2013-06-15 08:56 - 2010-11-21 08:50 - 00147614 ____A C:\Windows\System32\perfc007.dat
2013-06-15 08:56 - 2009-07-14 07:13 - 01612672 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-10 18:28 - 2013-06-10 18:28 - 00001789 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files\iTunes
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files\iPod
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-10 18:27 - 2013-06-10 17:50 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-10 17:51 - 2013-06-10 17:50 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:50 - 00000000 ____D C:\Users\Maus\AppData\Local\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:50 - 00000000 ____D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2013-06-10 17:49 - 2013-06-10 17:49 - 00000000 ____D C:\Users\Maus\AppData\Local\Apple
2013-06-10 17:49 - 2013-06-10 17:49 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\ProgramData\Apple
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files\Bonjour
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-06-09 13:20 - 2013-06-09 13:20 - 05387983 ____A C:\Users\Maus\Documents\Pfoetchenshop steuer.xlsx
2013-06-07 08:53 - 2013-06-07 08:53 - 00000000 ____D C:\PS_CS2_Gr_NonRet
2013-06-06 09:46 - 2013-04-27 11:47 - 00000000 ____D C:\Users\Maus\Desktop\Handy Fotos
2013-06-06 09:37 - 2013-06-06 09:37 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-06-03 20:16 - 2013-06-03 20:16 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Avira
2013-06-03 20:09 - 2010-11-21 05:47 - 00122188 ____A C:\Windows\PFRO.log
2013-06-03 20:05 - 2013-03-12 10:29 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-03 17:17 - 2013-06-03 17:18 - 00083160 ____A (Avira GmbH) C:\Windows\System32\Drivers\avnetflt.sys
2013-06-03 17:13 - 2013-06-03 17:13 - 00002072 ____A C:\Users\Public\Desktop\Avira Control Center.lnk
2013-06-03 17:13 - 2013-06-03 17:13 - 00000000 ____D C:\ProgramData\Avira
2013-06-03 17:13 - 2013-06-03 17:13 - 00000000 ____D C:\Program Files (x86)\Avira
2013-06-03 16:25 - 2013-06-03 15:56 - 102323272 ____A C:\Users\Maus\Downloads\avira_free3640_antivirus_de.exe
2013-06-02 15:39 - 2013-06-02 15:39 - 00000000 ____A C:\Windows\SysWOW64\sho6844.tmp
2013-06-02 15:23 - 2013-05-24 08:00 - 00000000 ____D C:\Users\Maus\AppData\Roaming\NCH Software
2013-06-02 15:23 - 2013-05-24 08:00 - 00000000 ____D C:\ProgramData\NCH Software
2013-05-29 17:18 - 2013-05-28 14:53 - 00000000 ____D C:\ProgramData\E809C9ACCDD670A50000E808E1A8752E
2013-05-29 17:12 - 2013-05-29 17:12 - 00001115 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Malwarebytes
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-05-29 17:01 - 2013-05-29 17:01 - 00000000 ____A C:\Users\Maus\defogger_reenable
2013-05-29 17:01 - 2013-03-11 15:12 - 00000000 ____D C:\users\Maus
2013-05-28 15:01 - 2013-05-28 15:01 - 00002054 ____A C:\Users\Maus\Desktop\System Care Antivirus.lnk
2013-05-27 15:00 - 2013-03-17 20:41 - 00000000 ____D C:\Users\Maus\AppData\Roaming\RBotPlus
2013-05-27 15:00 - 2013-03-17 20:39 - 00000000 ____D C:\Program Files (x86)\RBPlus
2013-05-27 14:45 - 2013-04-21 19:37 - 00000000 ____D C:\ProgramData\Sony Ericsson
2013-05-27 14:45 - 2013-04-21 19:37 - 00000000 ____D C:\Program Files (x86)\Sony Ericsson
2013-05-24 08:01 - 2013-05-24 08:01 - 00001140 ____A C:\Users\Public\Desktop\VideoPad Video Editor.lnk
2013-05-24 08:01 - 2013-05-24 08:00 - 00000000 ____D C:\Program Files (x86)\NCH Software
2013-05-24 08:00 - 2013-05-24 08:00 - 00001154 ____A C:\Users\Public\Desktop\Disketch Disc Label Software.lnk
2013-05-24 08:00 - 2013-05-24 08:00 - 00001152 ____A C:\Users\Public\Desktop\Express Burn.lnk
2013-05-24 08:00 - 2013-05-24 08:00 - 00001124 ____A C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2013-05-24 08:00 - 2013-05-24 07:59 - 00790096 ____A (NCH Software) C:\Users\Maus\Downloads\burnsetup_4.65.exe
2013-05-24 07:41 - 2013-05-24 07:41 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Canneverbe Limited
2013-05-24 07:41 - 2013-05-24 07:41 - 00000000 ____D C:\ProgramData\Canneverbe Limited

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Exec.exe
c:\windows\SysWow64\muzapp.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-05-23 bis 2013-06-23 ))))))))))))))))))))))))))))))
.
.
2013-06-23 17:46 . 2013-06-23 17:46 -------- d-----w- c:\users\Mauser\AppData\Local\temp
2013-06-23 17:46 . 2013-06-23 17:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-23 12:05 . 2013-06-23 17:22 -------- d-----w- c:\users\Maus\AppData\Roaming\redsn0w
2013-06-23 09:21 . 2013-06-23 09:21 -------- d-----w- c:\windows\LastGood
2013-06-22 16:11 . 2013-06-22 16:11 -------- d-----w- C:\FRST
2013-06-22 14:48 . 2013-06-22 14:48 -------- d-----w- c:\program files (x86)\ESET
2013-06-17 13:19 . 2013-06-17 13:19 -------- d-----w- c:\programdata\ATI
2013-06-17 13:18 . 2013-06-17 13:18 -------- d-----w- c:\program files (x86)\AMD AVT
2013-06-10 16:27 . 2012-08-21 11:01 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2013-06-10 16:27 . 2013-06-10 16:27 -------- d-----w- c:\program files\iPod
2013-06-10 16:27 . 2013-06-10 16:27 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-10 16:27 . 2013-06-10 16:27 -------- d-----w- c:\program files\iTunes
2013-06-10 16:27 . 2013-06-10 16:27 -------- d-----w- c:\program files (x86)\iTunes
2013-06-10 15:50 . 2013-06-23 09:21 -------- d-----w- c:\users\Maus\AppData\Roaming\Apple Computer
2013-06-10 15:50 . 2013-06-10 15:50 -------- d-----w- c:\users\Maus\AppData\Local\Apple Computer
2013-06-10 15:50 . 2013-06-10 16:27 -------- dc----w- c:\windows\system32\DRVSTORE
2013-06-10 15:50 . 2012-08-21 11:01 125872 ----a-w- c:\windows\system32\GEARAspi64.dll
2013-06-10 15:50 . 2012-08-21 11:01 106928 ----a-w- c:\windows\SysWow64\GEARAspi.dll
2013-06-10 15:50 . 2013-06-10 16:27 -------- d-----w- c:\programdata\Apple Computer
2013-06-10 15:50 . 2013-06-10 15:50 -------- d-----w- c:\programdata\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2013-06-10 15:49 . 2013-06-10 15:49 -------- d-----w- c:\users\Maus\AppData\Local\Apple
2013-06-10 15:49 . 2013-06-10 15:49 -------- d-----w- c:\program files (x86)\Apple Software Update
2013-06-10 15:48 . 2013-06-10 15:48 -------- d-----w- c:\program files\Common Files\Apple
2013-06-10 15:48 . 2013-06-10 15:48 -------- d-----w- c:\program files\Bonjour
2013-06-10 15:48 . 2013-06-10 15:48 -------- d-----w- c:\program files (x86)\Bonjour
2013-06-10 15:48 . 2013-06-10 16:27 -------- d-----w- c:\program files (x86)\Common Files\Apple
2013-06-10 15:48 . 2013-06-10 15:48 -------- d-----w- c:\programdata\Apple
2013-06-07 06:53 . 2013-06-07 06:53 -------- d-----w- C:\PS_CS2_Gr_NonRet
2013-06-03 18:16 . 2013-06-03 18:16 -------- d-----w- c:\users\Maus\AppData\Roaming\Avira
2013-06-03 15:18 . 2013-06-03 15:17 83160 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2013-06-03 15:13 . 2013-03-06 14:13 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2013-06-03 15:13 . 2013-02-26 14:56 130016 ----a-w- c:\windows\system32\drivers\avipbb.sys
2013-06-03 15:13 . 2013-02-26 14:56 100712 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2013-06-03 15:13 . 2013-06-03 15:13 -------- d-----w- c:\programdata\Avira
2013-06-03 15:13 . 2013-06-03 15:13 -------- d-----w- c:\program files (x86)\Avira
2013-06-02 13:39 . 2013-06-02 13:39 0 ----a-w- c:\windows\SysWow64\sho6844.tmp
2013-05-29 15:12 . 2013-05-29 15:12 -------- d-----w- c:\users\Maus\AppData\Roaming\Malwarebytes
2013-05-29 15:12 . 2013-05-29 15:12 -------- d-----w- c:\programdata\Malwarebytes
2013-05-29 15:12 . 2013-05-29 15:12 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-05-29 15:12 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-05-28 12:53 . 2013-05-29 15:18 -------- d-----w- c:\programdata\E809C9ACCDD670A50000E808E1A8752E
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-17 12:29 . 2013-03-17 10:22 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-17 12:29 . 2013-03-17 10:22 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-09 08:59 . 2013-03-12 08:29 378432 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-05-09 08:59 . 2013-03-12 08:29 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-05-09 08:59 . 2013-03-12 08:29 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-05-09 08:59 . 2013-03-12 08:29 1025808 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-05-09 08:59 . 2013-03-12 08:29 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-05-09 08:59 . 2013-03-12 08:29 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-05-09 08:59 . 2013-03-12 08:29 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-05-09 08:59 . 2013-03-12 08:29 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-05-09 08:58 . 2013-03-12 08:28 41664 ----a-w- c:\windows\avastSS.scr
2013-05-09 08:58 . 2013-03-12 08:29 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-04-18 10:09 . 2013-05-13 20:29 37344 ----a-w- c:\windows\SysWow64\FsUsbExDisk.Sys
2013-04-18 10:09 . 2013-05-13 20:29 233472 ----a-w- c:\windows\SysWow64\FsUsbExService.Exe
2013-04-15 14:36 . 2013-03-17 10:44 3326232 ----a-w- c:\windows\RXSUnins.exe
2013-04-15 14:36 . 2013-03-17 10:44 3326232 ----a-w- c:\windows\RXCUnins.exe
2013-04-03 16:00 . 2013-04-03 16:00 70328 ----a-r- c:\users\Maus\AppData\Roaming\Microsoft\Installer\{5FE975B7-E584-41CE-BA5E-77817F5310F1}\MMaster.exe1_826E89BC189645D3B662EE314C1F1CFF_1.exe
2013-04-03 16:00 . 2013-04-03 16:00 70328 ----a-r- c:\users\Maus\AppData\Roaming\Microsoft\Installer\{5FE975B7-E584-41CE-BA5E-77817F5310F1}\MMaster.exe_826E89BC189645D3B662EE314C1F1CFF.exe
2013-04-03 16:00 . 2013-04-03 16:00 70328 ----a-r- c:\users\Maus\AppData\Roaming\Microsoft\Installer\{5FE975B7-E584-41CE-BA5E-77817F5310F1}\ARPPRODUCTICON.exe
2013-04-03 07:58 . 2013-05-16 20:27 21320 ----a-w- c:\windows\system32\drivers\sscdmdfl.sys
2013-04-03 07:58 . 2013-05-16 20:27 188232 ----a-w- c:\windows\system32\drivers\sscdmdm.sys
2013-04-03 07:58 . 2013-05-16 20:27 17736 ----a-w- c:\windows\system32\drivers\sscdwhnt.sys
2013-04-03 07:58 . 2013-05-16 20:27 17736 ----a-w- c:\windows\system32\drivers\sscdwh.sys
2013-04-03 07:58 . 2013-05-16 20:27 17224 ----a-w- c:\windows\system32\drivers\sscdcmnt.sys
2013-04-03 07:58 . 2013-05-16 20:27 17224 ----a-w- c:\windows\system32\drivers\sscdcm.sys
2013-04-03 07:58 . 2013-05-16 20:27 169288 ----a-w- c:\windows\system32\drivers\sscdbus.sys
2013-04-03 07:58 . 2013-05-16 20:28 38080 ----a-w- c:\windows\system32\drivers\ssadadb.sys
2013-04-03 07:58 . 2013-05-16 20:28 21320 ----a-w- c:\windows\system32\drivers\ssadmdfl.sys
2013-04-03 07:58 . 2013-05-16 20:28 188232 ----a-w- c:\windows\system32\drivers\ssadmdm.sys
2013-04-03 07:58 . 2013-05-16 20:28 17736 ----a-w- c:\windows\system32\drivers\ssadwhnt.sys
2013-04-03 07:58 . 2013-05-16 20:28 17224 ----a-w- c:\windows\system32\drivers\ssadcmnt.sys
2013-04-03 07:58 . 2013-05-16 20:28 169288 ----a-w- c:\windows\system32\drivers\ssadbus.sys
2013-04-03 07:58 . 2013-05-16 20:28 158024 ----a-w- c:\windows\system32\drivers\ssadserd.sys
2013-04-03 07:58 . 2013-05-13 20:31 1919168 ----a-w- c:\windows\system32\WdfCoInstaller01005.dll
2013-04-03 07:58 . 2013-05-13 20:31 1919168 ----a-w- c:\windows\system32\drivers\WdfCoInstaller01005.dll
2013-04-03 07:58 . 2013-05-13 20:31 17736 ----a-w- c:\windows\system32\drivers\ssadwh.sys
2013-04-03 07:58 . 2013-05-13 20:31 17224 ----a-w- c:\windows\system32\drivers\ssadcm.sys
2013-04-02 14:09 . 2013-04-02 14:09 4550656 ----a-w- c:\windows\SysWow64\GPhotos.scr
2013-03-29 02:37 . 2013-03-29 02:37 78432 ----a-w- c:\windows\system32\atimpc64.dll
2013-03-29 02:37 . 2013-03-29 02:37 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2013-03-29 02:37 . 2013-03-29 02:37 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2013-03-29 02:37 . 2013-03-29 02:37 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2013-03-29 02:37 . 2011-03-10 02:14 139696 ----a-w- c:\windows\system32\atiuxp64.dll
2013-03-29 02:37 . 2013-03-29 02:37 118584 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2013-03-29 02:37 . 2013-03-29 02:37 112440 ----a-w- c:\windows\system32\atiu9p64.dll
2013-03-29 02:37 . 2011-03-10 02:14 92304 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2013-03-29 02:37 . 2011-03-10 02:53 1155264 ----a-w- c:\windows\system32\aticfx64.dll
2013-03-29 02:37 . 2013-03-29 02:37 970912 ----a-w- c:\windows\SysWow64\aticfx32.dll
2013-03-29 02:36 . 2011-03-10 02:38 8272136 ----a-w- c:\windows\system32\atidxx64.dll
2013-03-29 02:36 . 2013-03-29 02:36 7233336 ----a-w- c:\windows\SysWow64\atidxx32.dll
2013-03-29 02:36 . 2013-03-29 02:36 4450264 ----a-w- c:\windows\SysWow64\atiumdva.dll
2013-03-29 02:36 . 2013-03-29 02:36 5944264 ----a-w- c:\windows\SysWow64\atiumdag.dll
2013-03-29 02:36 . 2013-03-29 02:36 5000320 ----a-w- c:\windows\system32\atiumd6a.dll
2013-03-29 02:36 . 2013-03-29 02:36 6985624 ----a-w- c:\windows\system32\atiumd64.dll
2013-03-29 02:35 . 2013-03-29 02:35 11658752 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2013-03-29 02:13 . 2013-03-29 02:13 222720 ----a-w- c:\windows\system32\clinfo.exe
2013-03-29 02:13 . 2013-03-29 02:13 798734 ----a-w- c:\windows\SysWow64\amdocl_ld32.exe
2013-03-29 02:13 . 2013-03-29 02:13 1187342 ----a-w- c:\windows\system32\amdocl_as64.exe
2013-03-29 02:13 . 2013-03-29 02:13 1061902 ----a-w- c:\windows\system32\amdocl_ld64.exe
2013-03-29 02:13 . 2013-03-29 02:13 995342 ----a-w- c:\windows\SysWow64\amdocl_as32.exe
2013-03-29 02:13 . 2013-03-29 02:13 76288 ----a-w- c:\windows\system32\OpenVideo64.dll
2013-03-29 02:13 . 2013-03-29 02:13 65536 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2013-03-29 02:13 . 2013-03-29 02:13 64000 ----a-w- c:\windows\system32\OVDecode64.dll
2013-03-29 02:12 . 2013-03-29 02:12 56320 ----a-w- c:\windows\SysWow64\OVDecode.dll
2013-03-29 02:12 . 2013-03-29 02:12 29150720 ----a-w- c:\windows\system32\amdocl64.dll
2013-03-29 02:10 . 2013-03-29 02:10 23810560 ----a-w- c:\windows\SysWow64\amdocl.dll
2013-03-29 02:09 . 2013-03-29 02:09 54784 ----a-w- c:\windows\system32\OpenCL.dll
2013-03-29 02:09 . 2013-03-29 02:09 50176 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-03-29 02:04 . 2013-03-29 02:04 24229376 ----a-w- c:\windows\system32\atio6axx.dll
2013-03-29 02:00 . 2013-03-29 02:00 76800 ----a-w- c:\windows\system32\coinst_12.104.dll
2013-03-29 01:57 . 2013-03-29 01:57 163840 ----a-w- c:\windows\system32\atiapfxx.exe
2013-03-29 01:55 . 2013-03-29 01:55 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2013-03-29 01:55 . 2013-03-29 01:55 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2013-03-29 01:55 . 2013-03-29 01:55 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2013-03-29 01:55 . 2013-03-29 01:55 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2013-03-29 01:55 . 2013-03-29 01:55 16082944 ----a-w- c:\windows\system32\aticaldd64.dll
2013-03-29 01:51 . 2013-03-29 01:51 13703168 ----a-w- c:\windows\SysWow64\aticaldd.dll
2013-03-29 01:48 . 2013-03-29 01:48 19870720 ----a-w- c:\windows\SysWow64\atioglxx.dll
2013-03-29 01:35 . 2013-03-29 01:35 442368 ----a-w- c:\windows\system32\atidemgy.dll
2013-03-29 01:35 . 2013-03-29 01:35 562688 ----a-w- c:\windows\system32\atieclxx.exe
2013-03-29 01:34 . 2013-03-29 01:34 241152 ----a-w- c:\windows\system32\atiesrxx.exe
2013-03-29 01:33 . 2013-03-29 01:33 120320 ----a-w- c:\windows\system32\atitmm64.dll
2013-03-29 01:32 . 2013-03-29 01:32 26112 ----a-w- c:\windows\system32\atimuixx.dll
2013-03-29 01:32 . 2013-03-29 01:32 59392 ----a-w- c:\windows\system32\atiedu64.dll
2013-03-29 01:32 . 2013-03-29 01:32 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2013-03-29 01:10 . 2011-03-10 02:15 636416 ----a-w- c:\windows\system32\atiadlxx.dll
2013-03-29 01:10 . 2013-03-29 01:10 430080 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2013-03-29 01:10 . 2013-03-29 01:10 17920 ----a-w- c:\windows\system32\atig6pxx.dll
2013-03-29 01:10 . 2013-03-29 01:10 14848 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2013-03-29 01:10 . 2013-03-29 01:10 14848 ----a-w- c:\windows\system32\atiglpxx.dll
2013-03-29 01:10 . 2013-03-29 01:10 44032 ----a-w- c:\windows\system32\atig6txx.dll
2013-03-29 01:09 . 2013-03-29 01:09 34816 ----a-w- c:\windows\SysWow64\atigktxx.dll
2013-03-29 01:09 . 2013-03-29 01:09 581120 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2013-03-29 01:07 . 2013-03-29 01:07 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
.

(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
rfxsrvtray=c:\program files (x86)\Tobit Radio.fx\Client\rfx-tray.exe [2013-02-07 1838872]
KiesPreload=c:\program files (x86)\Samsung\Kies\Kies.exe [2013-04-23 1561968]
KiesPDLR=c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2013-05-13 844168]
Sony PC Companion=c:\program files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2013-03-18 448736]
HydraVisionDesktopManager=c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2011-03-09 393216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
HDAudDeck=c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2010-05-24 2439072]
SunJavaUpdateSched=c:\program files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
Adobe ARM=c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
avast=c:\program files\AVAST Software\Avast\avastUI.exe [2013-05-09 4858968]
EEventManager=c:\progra~2\EPSONS~1\EVENTM~1\EEventManager.exe [2008-05-07 591696]
GrooveMonitor=c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
KiesTrayAgent=c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe [2013-04-23 311152]
avgnt=c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe [2013-04-04 345312]
APSDaemon=c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
iTunesHelper=c:\program files (x86)\iTunes\iTunesHelper.exe [2013-05-31 152392]
StartCCC=c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-03-28 642656]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
ConsentPromptBehaviorAdmin= 5 (0x5)
ConsentPromptBehaviorUser= 3 (0x3)
EnableUIADesktopToggle= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 AODDriver4.0;AODDriver4.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\SysWOW64\FsUsbExDisk.SYS;c:\windows\SysWOW64\FsUsbExDisk.SYS [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 Radio.fx;Radio.fx Server;c:\program files (x86)\Tobit Radio.fx\Server\rfx-server.exe;c:\program files (x86)\Tobit Radio.fx\Server\rfx-server.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
Inhalt des geplante Tasks Ordners
.
2013-06-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-17 12:29]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@={472083B0-C522-11CF-8763-00608CC02F24}
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Maus\AppData\Roaming\Mozilla\Firefox\Profiles\r5qqullj.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-KiesAirMessage - c:\program files (x86)\Samsung\Kies\KiesAirMessage.exe
Toolbar-Locked - (no file)
.
.

--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@=FlashBroker
LocalizedString=@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
Enabled=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@=c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@={FAB3E735-69C7-453B-A446-B6823C6DF1C9}
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@=IFlashBroker5
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@={00020424-0000-0000-C000-000000000046}
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@={FAB3E735-69C7-453B-A446-B6823C6DF1C9}
Version=1.0
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@=FlashBroker
LocalizedString=@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
Enabled=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@=c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@={FAB3E735-69C7-453B-A446-B6823C6DF1C9}
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@=Shockwave Flash Object
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@=c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx
ThreadingModel=Apartment
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@=0
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@=ShockwaveFlash.ShockwaveFlash.11
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@=c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@={D27CDB6B-AE6D-11cf-96B8-444553540000}
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@=1.0
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@=ShockwaveFlash.ShockwaveFlash
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@=Macromedia Flash Factory Object
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@=c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx
ThreadingModel=Apartment
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@=FlashFactory.FlashFactory.1
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@=c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@={D27CDB6B-AE6D-11cf-96B8-444553540000}
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@=1.0
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@=FlashFactory.FlashFactory
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@=IFlashBroker5
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@={00020424-0000-0000-C000-000000000046}
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@={FAB3E735-69C7-453B-A446-B6823C6DF1C9}
Version=1.0
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
BlindDial=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
BlindDial=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
BlindDial=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
BlindDial=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-06-23 20:05:54
ComboFix-quarantined-files.txt 2013-06-23 18:05
.
Vor Suchlauf: 19 Verzeichnis(se), 1.661.646.024.704 Bytes frei
Nach Suchlauf: 27 Verzeichnis(se), 1.662.576.365.568 Bytes frei
.
- - End Of File - - 84E7D74589B22A1C1DB7A8DB5687D68F
A36C5E4F47E84449FF07ED3517B43A31

AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Users\Maus\Documents\AutoBinaryEA.com\AuroBinaryEA\AutoBinaryEA.exe
(Awesomium Technologies) C:\Users\Maus\Documents\AutoBinaryEA.com\AuroBinaryEA\awesomium_process
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

==================== Registry (Whitelisted) ==================

HKCU\...\Run: [rfxsrvtray] C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKCU\...\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload [1561968 2013-04-23] (Samsung)
HKCU\...\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844168 2013-05-13] (Samsung)
HKCU\...\Run: [Sony PC Companion] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe /Background [449248 2013-05-29] (Sony)
HKCU\...\Run: [HydraVisionDesktopManager] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-03-09] (AMD)
HKCU\...\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844168 2013-05-13] (Samsung)
HKLM-x32\...\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [2439072 2010-05-24] (VIA)
HKLM-x32\...\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe [591696 2008-05-07] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-04-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe /min [345144 2013-06-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun [642656 2013-03-28] (Advanced Micro Devices, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Maus\AppData\Roaming\Mozilla\Firefox\Profiles\r5qqullj.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()

==================== Drivers (Whitelisted) ====================

S3 AODDriver4.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-02-26] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-02-26] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-04-18] ()
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-04-18] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-06-27 22:49 - 2013-06-27 22:49 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-27 15:27 - 2013-06-28 07:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-06-26 20:06 - 2013-06-27 22:49 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-26 20:06 - 2013-06-27 22:49 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-26 16:56 - 2013-06-26 16:56 - 00001205 ____A C:\AdwCleaner[S2].txt
2013-06-26 16:55 - 2013-06-26 16:55 - 00001143 ____A C:\AdwCleaner[R2].txt
2013-06-26 16:53 - 2013-06-26 16:53 - 00648201 ____A C:\Users\Maus\Downloads\adwcleaner.exe
2013-06-23 20:06 - 2013-06-23 20:06 - 00027521 ____A C:\ComboFix.txt
2013-06-23 19:32 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-06-23 19:32 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-06-23 19:32 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-06-23 19:32 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-06-23 19:32 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-06-23 19:32 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-06-23 19:32 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-06-23 19:32 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-06-23 19:31 - 2013-06-23 20:06 - 00000000 ____D C:\Qoobox
2013-06-23 19:31 - 2013-06-23 20:01 - 00000000 ____D C:\Windows\erdnt
2013-06-23 19:28 - 2013-06-23 19:30 - 05082201 ____R (Swearware) C:\Users\Maus\Downloads\ComboFix.exe
2013-06-23 14:10 - 2013-06-23 18:29 - 938891219 ____A C:\Users\Maus\Downloads\iPhone3,1_6.1.3_10B329_Restore.ipsw
2013-06-23 14:05 - 2013-06-23 19:22 - 00000000 ____D C:\Users\Maus\AppData\Roaming\redsn0w
2013-06-23 14:04 - 2013-06-23 14:04 - 00000000 ____D C:\Users\Maus\Desktop\redsn0w_win_0.9.15b3
2013-06-23 11:30 - 2013-06-23 11:35 - 17279732 ____A C:\Users\Maus\Desktop\redsn0w_win_0.9.15b3.zip
2013-06-22 18:33 - 2013-06-22 18:33 - 00024462 ____A C:\Users\Maus\Desktop\FRST.txt
2013-06-22 18:33 - 2013-06-22 18:33 - 00018546 ____A C:\Users\Maus\Desktop\Addition.txt
2013-06-22 18:11 - 2013-06-22 18:12 - 00018546 ____A C:\Users\Maus\Downloads\Addition.txt
2013-06-22 18:11 - 2013-06-22 18:11 - 00000000 ____D C:\FRST
2013-06-22 18:10 - 2013-06-22 18:10 - 01931364 ____A (Farbar) C:\Users\Maus\Downloads\FRST64.exe
2013-06-22 16:48 - 2013-06-22 16:48 - 00000000 ____D C:\Program Files (x86)\ESET
2013-06-22 16:47 - 2013-06-22 16:48 - 02347384 ____A (ESET) C:\Users\Maus\Downloads\esetsmartinstaller_enu.exe
2013-06-17 15:19 - 2013-06-17 15:19 - 00000000 ____D C:\ProgramData\ATI
2013-06-17 15:18 - 2013-06-17 15:18 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-06-10 18:28 - 2013-06-10 18:28 - 00001789 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files\iTunes
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files\iPod
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-10 18:27 - 2012-08-21 13:01 - 00033240 ____A (GEAR Software Inc.) C:\Windows\System32\Drivers\GEARAspiWDM.sys
2013-06-10 17:50 - 2013-06-23 11:21 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Apple Computer
2013-06-10 17:50 - 2013-06-10 18:27 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:50 - 00000000 ____D C:\Users\Maus\AppData\Local\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:50 - 00000000 ____D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2013-06-10 17:50 - 2012-08-21 13:01 - 00125872 ____A (GEAR Software Inc.) C:\Windows\System32\GEARAspi64.dll
2013-06-10 17:50 - 2012-08-21 13:01 - 00106928 ____A (GEAR Software Inc.) C:\Windows\SysWOW64\GEARAspi.dll
2013-06-10 17:49 - 2013-06-10 17:49 - 00000000 ____D C:\Users\Maus\AppData\Local\Apple
2013-06-10 17:49 - 2013-06-10 17:49 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\ProgramData\Apple
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files\Bonjour
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-06-09 13:20 - 2013-06-09 13:20 - 05387983 ____A C:\Users\Maus\Documents\Pfoetchenshop steuer.xlsx
2013-06-07 08:53 - 2013-06-07 08:53 - 00000000 ____D C:\PS_CS2_Gr_NonRet
2013-06-06 09:37 - 2013-06-06 09:37 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-06-03 20:16 - 2013-06-03 20:16 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Avira
2013-06-03 17:18 - 2013-06-27 14:59 - 00083672 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2013-06-03 17:13 - 2013-06-03 17:13 - 00002072 ____A C:\Users\Public\Desktop\Avira Control Center.lnk
2013-06-03 17:13 - 2013-06-03 17:13 - 00000000 ____D C:\ProgramData\Avira
2013-06-03 17:13 - 2013-06-03 17:13 - 00000000 ____D C:\Program Files (x86)\Avira
2013-06-03 17:13 - 2013-03-06 16:13 - 00028600 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avkmgr.sys
2013-06-03 17:13 - 2013-02-26 16:56 - 00130016 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-06-03 17:13 - 2013-02-26 16:56 - 00100712 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2013-06-03 15:56 - 2013-06-03 16:25 - 102323272 ____A C:\Users\Maus\Downloads\avira_free3640_antivirus_de.exe
2013-06-02 15:39 - 2013-06-02 15:39 - 00000000 ____A C:\Windows\SysWOW64\sho6844.tmp
2013-05-29 17:12 - 2013-05-29 17:12 - 00001115 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Malwarebytes
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-05-29 17:12 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-05-29 17:01 - 2013-05-29 17:01 - 00000000 ____A C:\Users\Maus\defogger_reenable

==================== One Month Modified Files and Folders =======

2013-06-28 16:18 - 2013-03-17 22:03 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-28 15:36 - 2009-07-14 06:45 - 00021664 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-28 15:36 - 2009-07-14 06:45 - 00021664 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-28 15:28 - 2013-03-11 15:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-28 15:28 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-28 15:28 - 2009-07-14 06:51 - 00054291 ____A C:\Windows\setupact.log
2013-06-28 07:44 - 2013-03-11 14:50 - 00767562 ____A C:\Windows\WindowsUpdate.log
2013-06-28 07:39 - 2013-06-27 15:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-06-27 22:49 - 2013-06-27 22:49 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-27 22:49 - 2013-06-26 20:06 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-27 22:49 - 2013-06-26 20:06 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-27 22:49 - 2013-03-12 10:29 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-27 22:49 - 2013-03-12 10:29 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-27 22:49 - 2013-03-12 10:29 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-06-27 14:59 - 2013-06-03 17:18 - 00083672 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2013-06-26 17:35 - 2013-03-17 20:41 - 00000000 ____D C:\Users\Maus\AppData\Roaming\RBotPlus
2013-06-26 17:35 - 2013-03-17 20:39 - 00000000 ____D C:\Program Files (x86)\RBPlus
2013-06-26 16:56 - 2013-06-26 16:56 - 00001205 ____A C:\AdwCleaner[S2].txt
2013-06-26 16:55 - 2013-06-26 16:55 - 00001143 ____A C:\AdwCleaner[R2].txt
2013-06-26 16:53 - 2013-06-26 16:53 - 00648201 ____A C:\Users\Maus\Downloads\adwcleaner.exe
2013-06-24 21:02 - 2013-03-15 07:47 - 00000000 ____D C:\Users\Maus\AppData\Roaming\SoftGrid Client
2013-06-24 14:29 - 2013-04-12 15:55 - 00221012 ____A C:\Windows\DPINST.LOG
2013-06-24 14:29 - 2013-04-12 15:54 - 00002032 ____A C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2013-06-24 14:29 - 2013-03-11 15:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-24 07:39 - 2010-11-21 05:47 - 00122728 ____A C:\Windows\PFRO.log
2013-06-23 20:06 - 2013-06-23 20:06 - 00027521 ____A C:\ComboFix.txt
2013-06-23 20:06 - 2013-06-23 19:31 - 00000000 ____D C:\Qoobox
2013-06-23 20:01 - 2013-06-23 19:31 - 00000000 ____D C:\Windows\erdnt
2013-06-23 19:47 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-06-23 19:30 - 2013-06-23 19:28 - 05082201 ____R (Swearware) C:\Users\Maus\Downloads\ComboFix.exe
2013-06-23 19:22 - 2013-06-23 14:05 - 00000000 ____D C:\Users\Maus\AppData\Roaming\redsn0w
2013-06-23 18:29 - 2013-06-23 14:10 - 938891219 ____A C:\Users\Maus\Downloads\iPhone3,1_6.1.3_10B329_Restore.ipsw
2013-06-23 14:04 - 2013-06-23 14:04 - 00000000 ____D C:\Users\Maus\Desktop\redsn0w_win_0.9.15b3
2013-06-23 11:35 - 2013-06-23 11:30 - 17279732 ____A C:\Users\Maus\Desktop\redsn0w_win_0.9.15b3.zip
2013-06-23 11:21 - 2013-06-10 17:50 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Apple Computer
2013-06-22 18:33 - 2013-06-22 18:33 - 00024462 ____A C:\Users\Maus\Desktop\FRST.txt
2013-06-22 18:33 - 2013-06-22 18:33 - 00018546 ____A C:\Users\Maus\Desktop\Addition.txt
2013-06-22 18:12 - 2013-06-22 18:11 - 00018546 ____A C:\Users\Maus\Downloads\Addition.txt
2013-06-22 18:11 - 2013-06-22 18:11 - 00000000 ____D C:\FRST
2013-06-22 18:10 - 2013-06-22 18:10 - 01931364 ____A (Farbar) C:\Users\Maus\Downloads\FRST64.exe
2013-06-22 16:48 - 2013-06-22 16:48 - 00000000 ____D C:\Program Files (x86)\ESET
2013-06-22 16:48 - 2013-06-22 16:47 - 02347384 ____A (ESET) C:\Users\Maus\Downloads\esetsmartinstaller_enu.exe
2013-06-17 15:19 - 2013-06-17 15:19 - 00000000 ____D C:\ProgramData\ATI
2013-06-17 15:18 - 2013-06-17 15:18 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-06-17 15:18 - 2013-03-12 09:35 - 00000000 ____D C:\ProgramData\AMD
2013-06-17 15:18 - 2013-03-12 09:33 - 00000000 ____D C:\Program Files\ATI Technologies
2013-06-17 14:29 - 2013-03-17 12:22 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-17 14:29 - 2013-03-17 12:22 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-15 08:56 - 2010-11-21 08:50 - 00696576 ____A C:\Windows\System32\perfh007.dat
2013-06-15 08:56 - 2010-11-21 08:50 - 00147614 ____A C:\Windows\System32\perfc007.dat
2013-06-15 08:56 - 2009-07-14 07:13 - 01612672 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-10 18:28 - 2013-06-10 18:28 - 00001789 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files\iTunes
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files\iPod
2013-06-10 18:27 - 2013-06-10 18:27 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-10 18:27 - 2013-06-10 17:50 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:50 - 00000000 ____D C:\Users\Maus\AppData\Local\Apple Computer
2013-06-10 17:50 - 2013-06-10 17:50 - 00000000 ____D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2013-06-10 17:49 - 2013-06-10 17:49 - 00000000 ____D C:\Users\Maus\AppData\Local\Apple
2013-06-10 17:49 - 2013-06-10 17:49 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\ProgramData\Apple
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files\Bonjour
2013-06-10 17:48 - 2013-06-10 17:48 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-06-09 13:20 - 2013-06-09 13:20 - 05387983 ____A C:\Users\Maus\Documents\Pfoetchenshop steuer.xlsx
2013-06-07 08:53 - 2013-06-07 08:53 - 00000000 ____D C:\PS_CS2_Gr_NonRet
2013-06-06 09:46 - 2013-04-27 11:47 - 00000000 ____D C:\Users\Maus\Desktop\Handy Fotos
2013-06-06 09:37 - 2013-06-06 09:37 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-06-03 20:16 - 2013-06-03 20:16 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Avira
2013-06-03 20:05 - 2013-03-12 10:29 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-03 17:13 - 2013-06-03 17:13 - 00002072 ____A C:\Users\Public\Desktop\Avira Control Center.lnk
2013-06-03 17:13 - 2013-06-03 17:13 - 00000000 ____D C:\ProgramData\Avira
2013-06-03 17:13 - 2013-06-03 17:13 - 00000000 ____D C:\Program Files (x86)\Avira
2013-06-03 16:25 - 2013-06-03 15:56 - 102323272 ____A C:\Users\Maus\Downloads\avira_free3640_antivirus_de.exe
2013-06-02 15:39 - 2013-06-02 15:39 - 00000000 ____A C:\Windows\SysWOW64\sho6844.tmp
2013-06-02 15:23 - 2013-05-24 08:00 - 00000000 ____D C:\Users\Maus\AppData\Roaming\NCH Software
2013-06-02 15:23 - 2013-05-24 08:00 - 00000000 ____D C:\ProgramData\NCH Software
2013-05-29 17:18 - 2013-05-28 14:53 - 00000000 ____D C:\ProgramData\E809C9ACCDD670A50000E808E1A8752E
2013-05-29 17:12 - 2013-05-29 17:12 - 00001115 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\Users\Maus\AppData\Roaming\Malwarebytes
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-05-29 17:12 - 2013-05-29 17:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-05-29 17:01 - 2013-05-29 17:01 - 00000000 ____A C:\Users\Maus\defogger_reenable
2013-05-29 17:01 - 2013-03-11 15:12 - 00000000 ____D C:\users\Maus

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-23 12:25

==================== End Of Log ============================