lachs99

In addition, SPYBOT prevents two registry entries from
- msmdev.dll and
- msmhost.dll

Another observation:
seconds before the warnings and blockings a command windows opens and does something. In the window title it just reads the path to cmd.exe and the black screen remains emty - after 1 or 2 seconds the window / shell disappears. Then avast! and spybot come up with the described warnings.