E-Mail gehackt? Freunde bekommen dubiose Mails von mir...

Ändere zuerst mal Dein Passwort zu von Deinem Mail Konto.
Danach sollten die unerwünschten Mails versiegen.

Solltest Du Dein Mailpasswort auch anderweitig verwenden,  ist es dringend erforderich dieses an anderer Stelle ebenfalls zu ändern.

Hi,

Scanne das System bitte mit Malwarebytes Anti-Malware, wenn was gefunden wird würde ich gern das Log sehen.

Hi,

danke für die prompte Antwort! Ich hab mein Passwort geändert und Malware drüberlaufen lassen. Es hat tatsächlich was gefunden:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 12.06.2014
Scan Time: 17:19:58
Logfile: Log.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.06.12.06
Rootkit Database: v2014.06.02.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows Vista
CPU: x86
File System: NTFS
User: Mr. X

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 264232
Time Elapsed: 27 min, 46 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 6
IPH.GenericBHO, HKLM\SOFTWARE\CLASSES\CLSID\{FCADDC14-BD46-408A-9842-CDBE1C6D37EB}, , [7e18a4d37ffca49216a27e82e51bcb35],
IPH.GenericBHO, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{FCADDC14-BD46-408A-9842-CDBE1C6D37EB}, , [7e18a4d37ffca49216a27e82e51bcb35],
IPH.GenericBHO, HKU\S-1-5-21-4243490113-4014038942-3326257900-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FCADDC14-BD46-408A-9842-CDBE1C6D37EB}, , [7e18a4d37ffca49216a27e82e51bcb35],
IPH.GenericBHO, HKU\S-1-5-21-4243490113-4014038942-3326257900-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{FCADDC14-BD46-408A-9842-CDBE1C6D37EB}, , [7e18a4d37ffca49216a27e82e51bcb35],
IPH.GenericBHO, HKLM\SOFTWARE\CLASSES\CLSID\{FCADDC14-BD46-408A-9842-CDBE1C6D37EB}\INPROCSERVER32, , [7e18a4d37ffca49216a27e82e51bcb35],
PUP.Optional.Softonic.A, HKU\S-1-5-21-4243490113-4014038942-3326257900-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [247285f24437330315524667c73bb64a],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 8
IPH.GenericBHO, C:\Users\Mr. X\AppData\LocalLow\systems ie bho\bho.dll, , [7e18a4d37ffca49216a27e82e51bcb35],
Trojan.Agent, C:\Users\Mr. X\AppData\Local\Temp\doUjqaOr.exe.part, , [ebab661158235fd73499b6a761a001ff],
PUP.Optional.Bandoo, C:\Users\Mr. X\AppData\Local\Temp\XTm_Be2I.exe.part, , [1d79284fde9db5812968987411f027d9],
PUP.Optional.Bandoo, C:\Users\Mr. X\AppData\Local\Temp\VFzn0bN+.exe.part, , [0a8ccfa8cfac93a3721f38d4ad54d828],
PUP.Optional.Linkey.A, C:\Users\Mr. X\AppData\Local\Temp\SettingsManagerSetup.exe, , [088e86f1c7b462d4db4b7c0d39c8d729],
PUP.OfferBundler.ST, C:\Users\Mr. X\Downloads\SoftonicDownloader_fuer_freepdf.exe, , [bdd942354e2d2313b7d4b5d808f858a8],
PUP.Optional.Softonic.A, C:\Users\Mr. X\Downloads\SoftonicDownloader_fuer_pdfeditor.exe, , [8511562132494de9faf5ef33b849ae52],
PUP.OfferBundler.ST, C:\Users\Mr. X\Downloads\SoftonicDownloader_fuer_vlc-media-player.exe, , [0294086fd2a938fe1a714647b24e5aa6],

Physical Sectors: 0
(No malicious items detected)


(end)

Was würdet ihr mir raten, wie man weiter vorgeht?

Hi,

Das ist fasr nur Adware. Diese dann bitte mit Adwcleaner und JRT entfernen. Die Kontos werden normalerweise online gehackt oder die Absenderadresse gefaket.

Anleitung - AdwCleaner/JRT

Dann bitte ein FRST Log erstellen. Einfach die .exe starten und auf Scan drücken. Die zwei Logs über mehrere Beiträge aufteilen.

Download FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:12-06-2014 02
Ran by Mr. X (administrator) on Mr. X-PC on 13-06-2014 11:25:01
Running from C:\Users\Mr. X\Downloads
Platform: Microsoft® Windows Vista™ Home Premium  (X86) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
() C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
(TOSHIBA) C:\Program Files\TOSHIBA\Toshiba Online Product Information\TOPI.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
(Interactive Digital Media) C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe
(Geek Software GmbH) C:\Users\Mr. X\PDF24\pdf24.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\pptd40nt.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(PixelPlanet) C:\Program Files\Common Files\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(TOSHIBA) C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATIEJE.EXE
(Spotify Ltd) C:\Users\Mr. X\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Dropbox, Inc.) C:\Users\Mr. X\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynToshiba.exe
(Microsoft Corporation) C:\Program Files\Windows Mail\WinMail.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1006264 2007-07-12] (Microsoft Corporation)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe
HKLM\...\Run: [KeNotify] => C:\Program Files\TOSHIBA\Utilities\KeNotify.exe [34352 2006-11-06] ()
HKLM\...\Run: [SVPWUTIL] => C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe [438272 2006-03-22] (TOSHIBA)
HKLM\...\Run: [topi] => C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [577536 2007-04-02] (TOSHIBA)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4489216 2007-06-13] (Realtek Semiconductor)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [411192 2007-03-29] (TOSHIBA Corporation)
HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [55416 2006-12-07] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [509496 2007-05-23] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [538744 2007-05-22] (TOSHIBA Corporation)
HKLM\...\Run: [HWSetup] => \HWSetup.exe hwSetUP
HKLM\...\Run: [NDSTray.exe] => NDSTray.exe
HKLM\...\Run: [Desktop SMS] => C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe [1507328 2007-06-18] (Interactive Digital Media)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [90112 2006-11-10] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [894512 2007-06-08] (Synaptics, Inc.)
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe [571024 2007-02-19] (Toshiba)
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [174872 2007-02-12] (Intel Corporation)
HKLM\...\Run: [FreePDF Assistant] => C:\Program Files\FreePDF_XP\fpassist.exe [370176 2010-06-17] (shbox.de)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [PDFPrint] => C:\Users\Mr. X\PDF24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-03] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [IndexSearch] => C:\Program Files\Nuance\PaperPort\IndexSearch.exe [46952 2011-08-02] (Nuance Communications, Inc.)
HKLM\...\Run: [PaperPort PTD] => C:\Program Files\Nuance\PaperPort\pptd40nt.exe [30568 2011-08-02] (Nuance Communications, Inc.)
HKLM\...\Run: [PDFHook] => C:\Program Files\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [PDF5 Registry Controller] => C:\Program Files\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM\...\Run: [PixelPlanet PdfPrinter-Monitor] => C:\Program Files\Common Files\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe [3786880 2013-07-12] (PixelPlanet)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-4243490113-4014038942-3326257900-1000\...\Run: [TOSCDSPD] => C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [413696 2006-11-13] (TOSHIBA)
HKU\S-1-5-21-4243490113-4014038942-3326257900-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-11-17] (Google Inc.)
HKU\S-1-5-21-4243490113-4014038942-3326257900-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125440 2006-11-02] (Microsoft Corporation)
HKU\S-1-5-21-4243490113-4014038942-3326257900-1000\...\Run: [UWUB9FXD4I5W7H6BRZVAASAZKJZCH] => C:\okdfuhsduyv\okdfuhsduyv.exe /q
HKU\S-1-5-21-4243490113-4014038942-3326257900-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [201728 2006-11-02] (Microsoft Corporation)
HKU\S-1-5-21-4243490113-4014038942-3326257900-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-4243490113-4014038942-3326257900-1000\...\Run: [EPSON BX300F Series] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIEJE.EXE [188928 2008-01-22] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-4243490113-4014038942-3326257900-1000\...\Run: [Spotify] => C:\Users\Mr. X\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-13] (Spotify Ltd)
HKU\S-1-5-21-4243490113-4014038942-3326257900-1000\...\Run: [Spotify Web Helper] => C:\Users\Mr. X\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-13] (Spotify Ltd)
HKU\S-1-5-21-4243490113-4014038942-3326257900-1000\...\MountPoints2: {238a41c0-ca94-11e0-b617-001b38ab8503} - G:\Install_Nokia_Ovi_Suite.exe
HKU\S-1-5-21-4243490113-4014038942-3326257900-1000\...\MountPoints2: {b63fd1c4-f593-11df-8ff0-001b38ab8503} - G:\LaunchU3.exe -a
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\Users\Mr. X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Mr. X\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Mr. X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk
ShortcutTarget: OpenOffice.org 3.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search
BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: No Name - {FCADDC14-BD46-408A-9842-CDBE1C6D37EB} - C:\Users\Mr. X\AppData\LocalLow\systems ie bho\bho.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Mr. X\AppData\Roaming\Mozilla\Firefox\Profiles\mz3u66n8.default
FF Homepage: hxxp://de.yahoo.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Foxy Security - C:\Users\Mr. X\AppData\Roaming\Mozilla\Firefox\Profiles\mz3u66n8.default\Extensions\[email protected] [2014-04-27]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Mr. X\AppData\Roaming\Mozilla\Firefox\Profiles\mz3u66n8.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-11-26]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Mr. X\AppData\Roaming\Mozilla\Firefox\Profiles\mz3u66n8.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1039440 2014-06-03] (Avira Operations GmbH & Co. KG)
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
R2 CFSvcs; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2006-11-14] (TOSHIBA CORPORATION) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [145256 2011-08-02] (Nuance Communications, Inc.)
R2 TNaviSrv; C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [114688 2007-05-17] (TOSHIBA Corporation) [File not signed]
R2 TODDSrv; C:\Windows\system32\TODDSrv.exe [114688 2006-05-25] (TOSHIBA Corporation) [File not signed]
R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-08-23] (Ulead Systems, Inc.) [File not signed]
S2 TOSHIBA Bluetooth Service; c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-06-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-25] (Avira Operations GmbH & Co. KG)
R0 CplIR; C:\Windows\System32\DRIVERS\CplIR.SYS [14848 2007-03-06] (COMPAL ELECTRONIC INC.)
R0 LPCFilter; C:\Windows\System32\DRIVERS\LPCFilter.sys [19456 2006-07-28] (COMPAL ELECTRONIC INC.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-06-13] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-07] (Avira GmbH)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 igfx; system32\DRIVERS\igdkmd32.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 Tosrfcom; No ImagePath
S3 TpChoice; system32\DRIVERS\TpChoice.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-13 11:25 - 2014-06-13 11:25 - 00019113 _____ () C:\Users\Mr. X\Downloads\FRST.txt
2014-06-13 11:24 - 2014-06-13 11:25 - 00000000 ____D () C:\FRST
2014-06-13 11:23 - 2014-06-13 11:24 - 01073152 _____ (Farbar) C:\Users\Mr. X\Downloads\FRST.exe
2014-06-13 11:20 - 2014-06-13 11:20 - 00006728 _____ () C:\Users\Mr. X\Desktop\AdwCleaner[S0].txt
2014-06-13 10:50 - 2014-06-13 11:13 - 00000000 ____D () C:\AdwCleaner
2014-06-13 10:48 - 2014-06-13 10:48 - 01333465 _____ () C:\Users\Mr. X\Downloads\adwcleaner_3.212.exe
2014-06-13 10:28 - 2014-06-13 10:28 - 00005316 _____ () C:\Users\Mr. X\Desktop\JRT.txt
2014-06-13 10:10 - 2014-06-13 10:10 - 00000000 ____D () C:\Windows\ERUNT
2014-06-13 10:09 - 2014-06-13 10:09 - 01016261 _____ (Thisisu) C:\Users\Mr. X\Downloads\JRT.exe
2014-06-12 17:00 - 2014-06-13 11:17 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-12 16:59 - 2014-06-12 16:59 - 00000904 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-12 16:59 - 2014-06-12 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-12 16:59 - 2014-06-12 16:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-12 16:59 - 2014-06-12 16:59 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-06-12 16:59 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-12 16:59 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-12 16:59 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-12 16:52 - 2014-06-12 16:53 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mr. X\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-10 14:38 - 2014-06-10 14:38 - 00038642 _____ () C:\Users\Mr. X\Downloads\Extras.Txt
2014-06-10 14:37 - 2014-06-10 14:37 - 00099258 _____ () C:\Users\Mr. X\Downloads\OTL.Txt
2014-06-10 14:22 - 2014-06-10 14:22 - 00602112 _____ (OldTimer Tools) C:\Users\Mr. X\Downloads\OTL.exe
2014-06-01 15:59 - 2014-06-01 15:59 - 10082624 _____ () C:\Users\Mr. X\Downloads\Anhänge_201461.zip
2014-05-25 21:18 - 2014-05-25 21:18 - 00117939 _____ () C:\Users\Mr. X\Downloads\Lehrversuch - Einführung Schlagballwurf.odt
2014-05-16 12:03 - 2014-05-16 12:04 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-16 10:57 - 2014-06-13 11:19 - 00000000 ____D () C:\Users\Mr. X\AppData\Roaming\DropboxMaster

==================== One Month Modified Files and Folders =======

2014-06-13 11:25 - 2014-06-13 11:25 - 00019113 _____ () C:\Users\Mr. X\Downloads\FRST.txt
2014-06-13 11:25 - 2014-06-13 11:24 - 00000000 ____D () C:\FRST
2014-06-13 11:25 - 2010-11-16 18:52 - 00000000 ____D () C:\Users\Mr. X\AppData\Local\Temp
2014-06-13 11:24 - 2014-06-13 11:23 - 01073152 _____ (Farbar) C:\Users\Mr. X\Downloads\FRST.exe
2014-06-13 11:22 - 2010-11-16 17:37 - 01579642 _____ () C:\Windows\WindowsUpdate.log
2014-06-13 11:21 - 2013-08-22 18:51 - 00094556 _____ () C:\Windows\system32\scansoftprint.log
2014-06-13 11:21 - 2013-08-22 18:51 - 00055260 _____ () C:\Windows\system32\scansoftpint.log
2014-06-13 11:20 - 2014-06-13 11:20 - 00006728 _____ () C:\Users\Mr. X\Desktop\AdwCleaner[S0].txt
2014-06-13 11:20 - 2014-01-08 19:04 - 00000000 ____D () C:\Users\Mr. X\AppData\Roaming\Spotify
2014-06-13 11:20 - 2013-06-14 13:31 - 00000000 ____D () C:\Users\Mr. X\AppData\Roaming\Dropbox
2014-06-13 11:19 - 2014-05-16 10:57 - 00000000 ____D () C:\Users\Mr. X\AppData\Roaming\DropboxMaster
2014-06-13 11:19 - 2013-06-14 13:34 - 00000000 ___RD () C:\Users\Mr. X\Dropbox
2014-06-13 11:17 - 2014-06-12 17:00 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-13 11:15 - 2010-11-17 18:39 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-13 11:15 - 2007-04-16 08:16 - 00111592 _____ () C:\Windows\PFRO.log
2014-06-13 11:15 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-13 11:15 - 2006-11-02 14:47 - 00003456 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-13 11:15 - 2006-11-02 14:47 - 00003456 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-13 11:14 - 2006-11-02 15:01 - 00032546 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-13 11:13 - 2014-06-13 10:50 - 00000000 ____D () C:\AdwCleaner
2014-06-13 11:13 - 2010-12-26 01:55 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-06-13 10:48 - 2014-06-13 10:48 - 01333465 _____ () C:\Users\Mr. X\Downloads\adwcleaner_3.212.exe
2014-06-13 10:43 - 2010-11-17 18:39 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-13 10:28 - 2014-06-13 10:28 - 00005316 _____ () C:\Users\Mr. X\Desktop\JRT.txt
2014-06-13 10:10 - 2014-06-13 10:10 - 00000000 ____D () C:\Windows\ERUNT
2014-06-13 10:09 - 2014-06-13 10:09 - 01016261 _____ (Thisisu) C:\Users\Mr. X\Downloads\JRT.exe
2014-06-13 10:08 - 2012-08-31 09:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-13 03:05 - 2014-02-18 01:57 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-13 03:01 - 2006-11-02 12:24 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-06-12 17:15 - 2006-11-02 10:31 - 00000000 ___HD () C:\okdfuhsduyv
2014-06-12 16:59 - 2014-06-12 16:59 - 00000904 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-12 16:59 - 2014-06-12 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-12 16:59 - 2014-06-12 16:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-12 16:59 - 2014-06-12 16:59 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-06-12 16:57 - 2013-04-06 11:29 - 00000000 ____D () C:\Users\Mr. X\Desktop\Jan
2014-06-12 16:53 - 2014-06-12 16:52 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mr. X\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-10 14:38 - 2014-06-10 14:38 - 00038642 _____ () C:\Users\Mr. X\Downloads\Extras.Txt
2014-06-10 14:37 - 2014-06-10 14:37 - 00099258 _____ () C:\Users\Mr. X\Downloads\OTL.Txt
2014-06-10 14:22 - 2014-06-10 14:22 - 00602112 _____ (OldTimer Tools) C:\Users\Mr. X\Downloads\OTL.exe
2014-06-03 20:46 - 2013-08-07 13:18 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-03 20:46 - 2013-08-07 13:18 - 00093528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-02 17:47 - 2006-11-02 12:33 - 01461736 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-01 15:59 - 2014-06-01 15:59 - 10082624 _____ () C:\Users\Mr. X\Downloads\Anhänge_201461.zip
2014-05-28 07:19 - 2013-06-14 13:34 - 00000927 _____ () C:\Users\Mr. X\Desktop\Dropbox.lnk
2014-05-28 07:19 - 2013-06-14 13:32 - 00000000 ____D () C:\Users\Mr. X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-25 21:18 - 2014-05-25 21:18 - 00117939 _____ () C:\Users\Mr. X\Downloads\Lehrversuch - Einführung Schlagballwurf.odt
2014-05-25 10:43 - 2013-08-22 18:56 - 00026120 _____ () C:\Windows\BRRBCOM.INI
2014-05-25 10:42 - 2006-11-02 14:52 - 00102647 _____ () C:\Windows\setupact.log
2014-05-21 22:03 - 2012-05-03 23:39 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-05-18 21:05 - 2014-03-31 23:05 - 00000000 ____D () C:\Program Files\Mozilla Firefox.bak
2014-05-16 12:04 - 2014-05-16 12:03 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-16 11:08 - 2012-08-31 09:12 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-16 11:08 - 2011-06-14 18:59 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Mr. X\AppData\Local\Temp\avgnt.exe
C:\Users\Mr. X\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpv8hune.dll
C:\Users\Mr. X\AppData\Local\Temp\FoxySecuritySetup.exe
C:\Users\Mr. X\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe
C:\Users\Mr. X\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\Mr. X\AppData\Local\Temp\PixelPlanetpdrv7.dll
C:\Users\Mr. X\AppData\Local\Temp\PixelPlanetpdui7.dll
C:\Users\Mr. X\AppData\Local\Temp\Quarantine.exe
C:\Users\Mr. X\AppData\Local\Temp\SettingsManagerSetup.exe
C:\Users\Mr. X\AppData\Local\Temp\setup.exe
C:\Users\Mr. X\AppData\Local\Temp\SymLCSVC.EXE
C:\Users\Mr. X\AppData\Local\Temp\_isF165.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-13 11:22

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version:12-06-2014 02
Ran by Mr. X at 2014-06-13 11:26:30
Running from C:\Users\Mr. X\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================


==================== Installed Programs ======================

7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.7) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.7 - Adobe Systems Incorporated)
Atheros Driver Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.1 - Atheros)
ATI Catalyst Install Manager (HKLM\...\{4160DC5B-4C56-D0C3-C5FD-F5BDAD3C882B}) (Version: 3.0.641.0 - ATI Technologies, Inc.)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v5.10.06(T) - )
Brother MFL-Pro Suite DCP-J4110DW (HKLM\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
capella professionell Version 5.3 (HKLM\...\capella 5.0) (Version:  - )
Catalyst Control Center - Branding (HKLM\...\{22543949-70E8-45D0-A938-F38143EB8BF8}) (Version: 1.00.0000 - ATI)
Catalyst Control Center Core Implementation (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Graphics Full New (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Graphics Light (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Chinese Standard (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Chinese Traditional (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Czech (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Danish (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Dutch (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Finnish (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization French (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization German (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Greek (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Hungarian (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Italian (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Japanese (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Korean (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Norwegian (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Polish (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Portuguese (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Russian (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Spanish (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Swedish (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Thai (Version: 2007.0621.1715.28924 - ATI) Hidden
Catalyst Control Center Localization Turkish (Version: 2007.0621.1715.28924 - ATI) Hidden
CCC Help Chinese Standard (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Chinese Traditional (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Czech (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Danish (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Dutch (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help English (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Finnish (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help French (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help German (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Greek (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Hungarian (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Italian (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Japanese (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Korean (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Norwegian (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Polish (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Portuguese (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Russian (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Spanish (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Swedish (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Thai (Version: 2007.0621.1714.28924 - ATI) Hidden
CCC Help Turkish (Version: 2007.0621.1714.28924 - ATI) Hidden
ccc-core-static (Version: 2007.0621.1715.28924 - Ihr Firmenname) Hidden
ccc-utility (Version: 2007.0621.1715.28924 - ATI) Hidden
CD/DVD Drive Acoustic Silencer (HKLM\...\{9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}) (Version: 2.00.02 - TOSHIBA)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4643 - CDBurnerXP)
Desktop SMS (HKLM\...\{5980B928-1C95-4B3E-957B-B02D8147FF9E}) (Version: 1.2.0 - IDM)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
Druckerdeinstallation für EPSON BX300F Series (HKLM\...\EPSON BX300F Series) (Version:  - SEIKO EPSON Corporation)
DVD MovieFactory for TOSHIBA (HKLM\...\{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}) (Version: 5.3 - Ulead Systems, Inc.)
ElsterFormular (HKLM\...\ElsterFormular) (Version: 14.1.20130301 - Landesfinanzdirektion Thüringen)
Emdedded IR Driver (HKLM\...\InstallShield_{A6D4234C-CB02-4048-AC3E-AD09404FA35A}) (Version: 0.0.0.6C - Compal Electronics, Inc.)
Emdedded IR Driver (Version: 0.0.0.6C - Compal Electronics, Inc.) Hidden
Firebird SQL Server - MAGIX Edition 2.0.0.1 (D) (HKLM\...\Firebird SQL Server D) (Version: 2.0.0.1 - MAGIX AG)
Foxy Security (HKLM\...\Foxy Security) (Version:  - )
Free Audio CD Burner version 1.4.7 (HKLM\...\Free Audio CD Burner_is1) (Version:  - DVDVideoSoft Limited.)
Free YouTube to MP3 Converter version 3.10.11.923 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Ltd.)
FreePDF (Remove only) (HKLM\...\FreePDF_XP) (Version:  - )
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden
Intel Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - )
Java 7 Update 21 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle)
Java Auto Updater (Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Java(TM) SE Runtime Environment 6 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160000}) (Version: 1.6.0.0 - Sun Microsystems, Inc.)
MAGIX Digital Foto Maker SE 4.1.0.835 (D) (HKLM\...\MAGIX Digital Foto Maker SE D) (Version: 4.1.0.835 - MAGIX AG)
MAGIX Foto Suite 1.12.0.89 (D) (HKLM\...\MAGIX Foto Suite D) (Version: 1.12.0.89 - MAGIX AG)
MAGIX Online Druck Service 2.3.2.0 (D) (HKLM\...\MAGIX Online Druck Service D) (Version: 2.3.2.0 - MAGIX AG)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Word 2000 (HKLM\...\{00170407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)
Microsoft XML Parser (Version: 8.0.7820.0 - Microsoft Corporation) Hidden
Microsoft XML Parser (Version: 8.20.8730.4 - Microsoft Corporation) Hidden
Mozilla Firefox 29.0.1 (x86 de) (HKLM\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
myphotobook 3.1 (HKLM\...\myphotobook) (Version: 3.1 - myphotobook)
Nuance PaperPort 12 (HKLM\...\{88B5FBDC-967D-4B1F-B291-39284AE12201}) (Version: 12.1.0005 - Nuance Communications, Inc.)
Nuance PDF Viewer Plus (HKLM\...\{28656860-4728-433C-8AD4-D1A930437BC8}) (Version: 5.30.3290 - Nuance Communications, Inc)
OpenOffice.org 3.1 (HKLM\...\{99E862CC-6F69-4D39-99AA-DBF71BF3B585}) (Version: 3.1.9420 - OpenOffice.org)
PaperPort Image Printer (HKLM\...\{6EF2FDAB-7FBF-4AB9-92CD-594BDDB6A56B}) (Version: 14.00.0000 - Nuance Communications, Inc.)
PDF24 Creator 5.2.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PdfEditor 2.0 (32bit) (HKLM\...\{B3C0371A-5745-463E-88DC-DB31EC0CAC9D}) (Version: 2.0 - PixelPlanet)
PixelPlanet PdfPrinter 7 (32bit) (HKLM\...\{000F58F3-A544-4BB5-AF1B-761EA1C8595C}) (Version: 7.0.60 - PixelPlanet)
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5433 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Scansoft PDF Professional (Version:  - ) Hidden
Skins (Version: 2007.0621.1715.28924 - ATI) Hidden
Spotify (HKCU\...\Spotify) (Version: 0.9.7.16.g4b197456 - Spotify AB)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.0.1.0 - Synaptics)
Texas Instruments PCIxx21/x515/xx12 drivers. (HKLM\...\InstallShield_{DB780B85-B4B5-4864-A49C-9B706B169C93}) (Version: 2.00.0001 - Ihr Firmenname)
TIPCI (Version: 2.00.0001 - Ihr Firmenname) Hidden
TOSHIBA Assist (HKLM\...\{12B3A009-A080-4619-9A2A-C6DB151D8D67}) (Version: 2.01.02 - )
TOSHIBA ConfigFree (HKLM\...\{78C6A78A-8B03-48C8-A47C-78BA1FCA2307}) (Version: 7.00.29 - TOSHIBA)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.0.0.8 - TOSHIBA Corporation)
TOSHIBA DVD PLAYER (HKLM\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 1.00.24A - TOSHIBA Corporation)
TOSHIBA Extended Tiles for Windows Mobility Center (HKLM\...\InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}) (Version: 1.01.00 - Toshiba)
TOSHIBA Extended Tiles for Windows Mobility Center (Version: 1.01.00 - Toshiba) Hidden
TOSHIBA Flash Cards Support Utility (HKLM\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.48.0.3C - TOSHIBA)
TOSHIBA Flash Cards Support Utility (Version: 1.48.0.3C - TOSHIBA) Hidden
TOSHIBA Hardware Setup (HKLM\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.48.0.11C - TOSHIBA)
TOSHIBA Hardware Setup (Version: 1.48.0.11C - TOSHIBA) Hidden
Toshiba Online Product Information (HKLM\...\{2290A680-4083-410A-ADCC-7092C67FC052}) (Version: 1.00.0009 - TOSHIBA)
TOSHIBA SD Memory Utilities (HKLM\...\{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}) (Version: 1.8.1.1 - TOSHIBA)
TOSHIBA Software Modem (HKLM\...\TOSHIBA Software Modem) (Version: 2.1.77 (SM2177ALD03) - Agere Systems)
TOSHIBA Supervisor Password (Version: 1.48.0.8C - TOSHIBA) Hidden
TOSHIBA Supervisorkennwort (HKLM\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.48.0.8C - TOSHIBA)
TOSHIBA Value Added Package (HKLM\...\InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}) (Version: 1.0.24 - TOSHIBA Corporation)
TOSHIBA Value Added Package (Version: 1.0.24 - TOSHIBA Corporation) Hidden
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Utility Common Driver (Version: 0.0.1.1C - TOSHIBA) Hidden
VLC media player 1.1.9 (HKLM\...\VLC media player) (Version: 1.1.9 - VideoLAN)
Windows Media Encoder 9-Reihe (HKLM\...\Windows Media Encoder 9) (Version:  - )
Windows Media Encoder 9-Reihe (Version: 9.00.2980 - Microsoft Corporation) Hidden
WinRAR 4.00 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)

==================== Restore Points  =========================

21-05-2014 22:57:29 Geplanter Prüfpunkt
28-05-2014 05:45:05 Geplanter Prüfpunkt
31-05-2014 19:26:59 Geplanter Prüfpunkt
13-06-2014 01:00:19 Windows Update

==================== Hosts content: ==========================

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2006-11-02] (Microsoft Corporation)
Task: {848B8467-E03D-4C2B-9D93-5322B9CC0B7E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-17] (Google Inc.)
Task: {9EB44560-63F6-4CA3-8294-048D3F7D340B} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {C163B221-706C-430D-8905-A1453502F28A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-16] (Adobe Systems Incorporated)
Task: {D6A44F1C-03ED-4761-A9F3-15AB71F9E5A2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-17] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2006-11-02] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-06-25 20:58 - 2010-06-17 21:56 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2007-01-18 09:30 - 2007-01-18 09:30 - 00094208 _____ () C:\Program Files\IDM\Desktop SMS\oehook.dll
2014-04-27 20:46 - 2014-04-16 16:21 - 03309568 _____ () C:\Users\Mr. X\AppData\LocalLow\systems ie bho\bho.dll
2007-07-12 10:54 - 2007-06-21 11:27 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll
2013-08-22 18:53 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2006-11-06 17:14 - 2006-11-06 17:14 - 00034352 _____ () C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
2007-05-31 16:38 - 2007-05-31 16:38 - 00958464 _____ () C:\Program Files\TOSHIBA\FlashCards\de\TCrdMain.resources.dll
2006-11-09 18:27 - 2006-11-09 18:27 - 00090112 _____ () C:\Program Files\TOSHIBA\FlashCards\TWarnMsg\TWarnMsg.dll
2007-07-12 10:40 - 2006-10-10 11:44 - 00009728 _____ () C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll
2006-11-08 19:08 - 2006-11-08 19:08 - 00009216 _____ () C:\Program Files\Toshiba\PCDiag\NotifyPCD.dll
2007-07-12 10:34 - 2007-04-23 10:38 - 00009216 _____ () C:\Program Files\Toshiba\ConfigFree\NotifyCFF.dll
2006-10-07 12:57 - 2006-10-07 12:57 - 00053248 _____ () C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll
2006-12-01 18:55 - 2006-12-01 18:55 - 00009216 _____ () C:\Program Files\Toshiba\TBS\NotifyTBS.dll
2013-04-12 16:09 - 2013-04-12 16:09 - 00638976 _____ () C:\Program Files\Common Files\BCL Technologies\PixelPlanet7\bepprint.dll
2014-06-13 11:19 - 2014-06-13 11:19 - 00043008 _____ () c:\users\Mr. X\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpv8hune.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Mr. X\AppData\Roaming\Dropbox\bin\libcef.dll
2009-08-18 16:54 - 2009-08-18 16:54 - 00970752 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll
2014-05-16 12:03 - 2014-05-16 12:04 - 03839088 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-05-16 11:08 - 2014-05-16 11:08 - 16361136 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll
2007-05-31 11:12 - 2007-05-31 11:12 - 00016384 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/13/2014 11:21:43 AM) (Source: WerSvc) (EventID: 5007) (User: )
Description: Die Zieldatei für die Windows-Feedbackplattform (eine DLL-Datei, die eine Liste der auf diesem Computer aufgetretenen Probleme enthält, für deren Diagnose das Sammeln zusätzlicher Daten erforderlich ist) konnte nicht analysiert werden. Fehlercode 8014FFF9.

Error: (06/13/2014 10:50:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung explorer.exe, Version 6.0.6000.16771, Zeitstempel 0x4907deda, fehlerhaftes Modul bho.dll_unloaded, Version 0.0.0.0, Zeitstempel 0x534e91e7, Ausnahmecode 0xc0000005, Fehleroffset 0x0719cd94,
Prozess-ID 0x1054, Anwendungsstartzeit explorer.exe0.


System errors:
=============
Error: (06/13/2014 11:19:04 AM) (Source: DCOM) (EventID: 10000) (User: )
Description: C:\Windows\system32\igfxext.exe -Embedding2{7160A13D-73DA-4CEA-95B9-37356478588A}

Error: (06/13/2014 11:17:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: TOSHIBA Bluetooth Service%%2

Error: (06/13/2014 11:17:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Parallel port driver%%1058

Error: (06/13/2014 11:15:06 AM) (Source: atikmdag) (EventID: 10266) (User: )
Description: Unknown EDID version

Error: (06/13/2014 11:15:06 AM) (Source: atikmdag) (EventID: 10266) (User: )
Description: Unknown EDID version

Error: (06/13/2014 11:15:06 AM) (Source: atikmdag) (EventID: 10266) (User: )
Description: Unknown EDID version


Microsoft Office Sessions:
=========================
Error: (06/13/2014 11:21:43 AM) (Source: WerSvc) (EventID: 5007) (User: )
Description: 8014FFF9

Error: (06/13/2014 10:50:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: explorer.exe6.0.6000.167714907dedabho.dll_unloaded0.0.0.0534e91e7c000 00050719cd94105401cf86e09d6c9f36


CodeIntegrity Errors:
===================================
  Date: 2014-06-13 11:26:21.639
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-13 11:26:21.560
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-13 11:26:21.479
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-13 11:26:21.403
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-13 11:26:21.081
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-13 11:26:21.004
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-13 11:26:20.930
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-13 11:26:20.838
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-12 17:30:50.293
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-12 17:30:50.223
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 55%
Total physical RAM: 2045.81 MB
Available physical RAM: 909.45 MB
Total Pagefile: 4308.67 MB
Available Pagefile: 2704.81 MB
Total Virtual: 2047.88 MB
Available Virtual: 1937.92 MB

==================== Drives ================================

Drive c: (Vista) (Fixed) (Total:74.22 GB) (Free:20.01 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (Data) (Fixed) (Total:73.36 GB) (Free:73.19 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 149 GB) (Disk ID: 837A0583)
Partition 1: (Not Active) - (Size=1 GB) - (Type=27)
Partition 2: (Active) - (Size=74 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=73 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Hi Keckrem,

kannst du mir darüber was sagen?

Danke dir?