Windows 7: Advanced System Protector Virus

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-09-2013
Ran by test (administrator) on TEST-PC on 08-09-2013 17:14:07
Running from C:\Users\test\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Woodtale Technology Inc) C:\Program Files (x86)\iSafe\iSafeSvc.exe
(Woodtale Technology Inc) C:\Program Files (x86)\iSafe\iSafeSvc2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WlanNetService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Woodtale Technology Inc) C:\Program Files (x86)\iSafe\iSafeTray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MountPoints2: {0808c6c7-a67b-11e0-805b-806e6f6e6963} - D:\autorun.exe
HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-26] (APN)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
BootExecute: autocheck autochk * esasnative64

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=6787&ver=4.4&ts=1378543042037&tguid=66920-6787-1378543042037-EB974BEC08836886408CD13CA74FC982&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=6787&ver=4.4&ts=1378543042037&tguid=66920-6787-1378543042037-EB974BEC08836886408CD13CA74FC982&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=6787&ver=4.4&ts=1378543042037&tguid=66920-6787-1378543042037-EB974BEC08836886408CD13CA74FC982&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=6787&ver=4.4&ts=1378543042037&tguid=66920-6787-1378543042037-EB974BEC08836886408CD13CA74FC982&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=6787&ver=4.4&ts=1378543042037&tguid=66920-6787-1378543042037-EB974BEC08836886408CD13CA74FC982&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=6787&ver=4.4&ts=1378543042037&tguid=66920-6787-1378543042037-EB974BEC08836886408CD13CA74FC982&q=
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=&st=bs&tid=6787&ver=4.4&ts=1378543042037&tguid=66920-6787-1378543042037-EB974BEC08836886408CD13CA74FC982&q={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3310393&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP29503C75-01DD-4F06-85FF-CACB5D146A2E&q={searchTerms}
SearchScopes: HKCU - {606DB28E-2A29-45DE-8510-340389812730} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=382950&p={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1378543042037&tguid=66920-6787-1378543042037-EB974BEC08836886408CD13CA74FC982&q={searchTerms}
SearchScopes: HKCU - {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://search.certified-toolbar.com?si=&st=bs&tid=6787&ver=4.4&ts=1378543042037&tguid=66920-6787-1378543042037-EB974BEC08836886408CD13CA74FC982&q={searchTerms}
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredimail.com/mb44/?search={searchTerms}&loc=search_box&u=1036326896266462061
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} -  No File
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: AlxHelper Class - {F443A627-5009-4323-9C1D-7FD598D0D712} - C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Amazon Browser Bar - {EA582743-9076-4178-9AA6-7393FDF4D5CE} - C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {51A86BB3-6602-4C85-92A5-130EE4864F13} -  No File
Toolbar: HKCU - No Name - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} -  No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_35 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi

Chrome: 
=======
CHR HomePage: about:blank
CHR Extension: (DVDVideoSoftTB DE) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhphemoobgnikcoofkgackkaimpfmenm\10.19.2.505_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR HKLM-x32\...\Chrome\Extension: [naipdapbimiiikbbgjcpbgmfhnlbagpj] - C:\Users\test\AppData\Local\Temp\naipdapbimiiikbbgjcpbgmfhnlbagpj.crx

==================== Services (Whitelisted) =================

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin)
R2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [341320 2013-08-30] (Woodtale Technology Inc)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [3969336 2012-04-05] (INCA Internet Co., Ltd.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-09-07] ()
R2 Updater Service for AMZN; C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.exe [222368 2013-03-21] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-08-30] ()
R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [41704 2012-08-01] (AnchorFree Inc.)
R3 iSafeKrnl; C:\Program Files (x86)\iSafe\iSafeKrnl.sys [181104 2013-08-30] (Woodtale Technology Inc)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R3 NPF; C:\Program Files (x86)\iSafe\npf.sys [38256 2013-08-30] (Riverbed Technology, Inc.)
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2004-12-31] (INCA Internet Co., Ltd.)
S3 dump_wmimmc; \??\C:\Spiele\ShotOnline\GameGuard\dump_wmimmc.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [x]
S3 X6va007; \??\C:\Users\test\AppData\Local\Temp\007AA64.tmp [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-08 17:12 - 2013-09-08 17:13 - 01948988 _____ (Farbar) C:\Users\test\Downloads\FRST64.exe
2013-09-08 10:45 - 2013-09-08 15:08 - 00000168 _____ C:\Windows\setupact.log
2013-09-08 10:45 - 2013-09-08 10:45 - 00001452 _____ C:\Windows\PFRO.log
2013-09-08 10:45 - 2013-09-08 10:45 - 00000000 _____ C:\Windows\setuperr.log
2013-09-08 10:43 - 2013-09-08 10:43 - 00633672 _____ (Woodtale Technology Inc) C:\Users\test\Downloads\iSafedl (1).exe
2013-09-08 10:38 - 2013-09-08 10:38 - 00001837 _____ C:\Users\Public\Desktop\iSafe.lnk
2013-09-08 10:38 - 2013-09-08 10:38 - 00000000 ____D C:\Users\test\AppData\Roaming\eCyber
2013-09-08 10:37 - 2013-09-08 15:36 - 00000000 ____D C:\Program Files (x86)\iSafe
2013-09-08 10:37 - 2013-09-08 15:10 - 00000000 ____D C:\Users\test\AppData\Roaming\iSafe
2013-09-08 10:37 - 2013-09-08 10:37 - 00633672 _____ (Woodtale Technology Inc) C:\Users\test\Downloads\iSafedl.exe
2013-09-08 10:28 - 2013-09-08 10:28 - 00000000 ____D C:\Users\test\AppData\Roaming\Avira
2013-09-08 09:48 - 2013-09-08 09:49 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\test\Downloads\spybotsd-2.1.21-SR2 (1).exe
2013-09-07 11:14 - 2013-09-08 10:33 - 00000000 ____D C:\Users\test\AppData\Local\Freemium
2013-09-07 11:13 - 2013-09-07 11:13 - 00003792 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-09-07 11:04 - 2013-09-07 11:06 - 30996544 _____ (Advanced System Protector                                   ) C:\Users\test\Downloads\antispyware.exe
2013-09-07 11:03 - 2013-09-07 11:04 - 01110936 _____ (Conduit) C:\Users\test\Downloads\bs_Advanced_System_Protector.exe
2013-09-07 10:56 - 2013-09-07 10:56 - 00000000 ____D C:\Users\test\AppData\Local\avgchrome
2013-09-07 10:54 - 2013-09-08 10:33 - 00000000 ____D C:\Users\test\AppData\Roaming\LavFilters
2013-09-07 10:54 - 2013-09-08 10:33 - 00000000 ____D C:\Users\test\AppData\Roaming\CDXReader
2013-09-07 10:54 - 2013-09-07 11:14 - 00000000 ____D C:\Program Files (x86)\DSP-worx
2013-09-07 10:50 - 2013-09-07 10:50 - 00714368 _____ C:\Users\test\Downloads\UltimateCodec.exe
2013-09-07 10:50 - 2013-09-07 10:50 - 00000282 _____ C:\Windows\Tasks\DSite.job
2013-09-07 10:49 - 2013-09-07 10:49 - 00714816 _____ C:\Users\test\Downloads\ZipOpenerSetup.exe
2013-09-07 10:45 - 2013-09-08 10:33 - 00000000 ____D C:\Users\test\AppData\Local\Software Updater
2013-09-07 10:38 - 2013-08-13 08:38 - 00032328 _____ C:\Windows\Launcher.exe
2013-09-07 10:37 - 2013-09-08 16:07 - 00004148 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-09-07 10:37 - 2013-09-08 16:06 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-09-07 10:36 - 2013-09-08 10:33 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-07 10:36 - 2013-09-08 10:33 - 00000000 ____D C:\ProgramData\FreeSystemUtilities
2013-09-07 10:36 - 2013-09-08 10:33 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-09-07 10:36 - 2013-09-08 10:31 - 00000000 ____D C:\Program Files (x86)\Covus Freemium
2013-09-07 10:36 - 2013-09-07 10:41 - 00001656 _____ C:\Windows\system32\ASOROSet.bin
2013-09-07 10:36 - 2013-09-07 10:36 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk
2013-09-07 10:34 - 2013-09-08 10:33 - 00000000 ____D C:\Users\test\AppData\Local\DownloadGuide
2013-09-07 10:34 - 2013-09-07 10:34 - 00444408 _____ C:\Users\test\Downloads\free-system-utilities-DE.exe
2013-09-01 16:59 - 2013-09-07 11:11 - 00000000 ____D C:\ProgramData\Systweak
2013-08-31 10:33 - 2013-09-07 10:37 - 00000000 ____D C:\Windows\system32\config\RCCBakup
2013-08-31 10:26 - 2013-09-08 10:33 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-08-31 10:20 - 2013-09-08 15:11 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-08-31 10:20 - 2013-09-08 10:34 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-08-31 10:19 - 2013-09-08 10:34 - 00000000 ____D C:\Program Files (x86)\Amazon Browser Bar
2013-08-31 10:19 - 2013-09-08 10:33 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-08-31 10:19 - 2013-09-01 08:57 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-08-31 10:19 - 2013-08-31 10:19 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.3832.dll
2013-08-31 10:18 - 2013-09-08 10:33 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-08-31 10:18 - 2013-09-08 10:32 - 00000000 ____D C:\Users\test\AppData\Roaming\Systweak
2013-08-31 10:18 - 2012-09-21 12:05 - 00017080 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2013-08-30 23:30 - 2013-09-05 15:47 - 00002236 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-30 23:27 - 2013-09-08 16:41 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-30 23:27 - 2013-09-08 15:09 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-30 23:27 - 2013-09-08 10:47 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-30 23:27 - 2013-09-01 16:59 - 00001922 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-08-30 23:27 - 2013-09-01 16:59 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-08-30 23:27 - 2013-08-30 23:36 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-30 23:27 - 2013-08-30 23:35 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-30 23:27 - 2013-08-30 23:27 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 23:27 - 2013-08-30 23:27 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 23:27 - 2013-08-30 23:27 - 00189936 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 23:27 - 2013-08-30 23:27 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum
2013-08-30 23:27 - 2013-08-30 23:27 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum
2013-08-30 23:27 - 2013-08-30 23:27 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum
2013-08-30 23:27 - 2013-05-09 10:59 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 23:27 - 2013-05-09 10:59 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 23:27 - 2013-05-09 10:59 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 23:27 - 2013-05-09 10:59 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 23:27 - 2013-05-09 10:59 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 23:27 - 2013-05-09 10:58 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 23:26 - 2013-08-30 23:26 - 00000000 ____D C:\ProgramData\AVAST Software
2013-08-30 23:26 - 2013-08-30 23:26 - 00000000 ____D C:\Program Files\AVAST Software
2013-08-30 23:26 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-08-29 19:15 - 2013-08-29 19:15 - 00163084 _____ C:\ProgramData\2433f433
2013-08-29 19:15 - 2013-08-29 19:15 - 00163047 _____ C:\Users\test\AppData\Roaming\2433f433
2013-08-29 19:15 - 2013-08-29 19:15 - 00163025 _____ C:\Users\test\AppData\Local\2433f433
2013-08-26 11:13 - 2013-08-26 11:13 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2013-08-25 12:34 - 2013-08-25 12:34 - 00502874 _____ C:\Program Files\usb.ids
2013-08-24 22:02 - 2013-08-31 00:36 - 00000000 ____D C:\Users\test\AppData\Roaming\Goto
2013-08-24 22:02 - 2013-08-29 19:16 - 00000000 ____D C:\Users\test\AppData\Roaming\Iruvpa
2013-08-24 22:02 - 2013-08-24 22:02 - 00000000 ____D C:\Users\test\AppData\Roaming\Ohyq
2013-08-24 10:30 - 2013-08-24 10:51 - 00000000 ____D C:\Users\test\Desktop\Günther Backup
2013-08-14 23:31 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 23:31 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 23:31 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-14 23:31 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 23:31 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 23:31 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 23:31 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 23:31 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 23:31 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 23:31 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 23:31 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-14 23:31 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-14 23:31 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 23:31 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-14 23:31 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 23:31 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-14 23:31 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-14 23:31 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-14 23:31 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-14 23:31 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-14 23:31 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-14 23:31 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-14 23:31 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-14 23:31 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-14 23:31 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-14 23:31 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-14 23:31 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-14 23:31 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-14 23:31 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-14 23:31 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-14 23:31 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 23:24 - 2013-08-14 23:26 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 20:27 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 20:27 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 20:27 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 20:27 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 20:27 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 20:27 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 20:27 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 20:27 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 20:26 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 20:26 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 20:26 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 20:26 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 20:26 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 20:26 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 20:26 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 20:26 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 20:26 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 20:26 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 20:26 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 20:26 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 20:26 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 20:26 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 20:26 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 20:26 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 20:26 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 20:26 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 20:26 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-10 20:44 - 2013-08-10 20:44 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-10 20:44 - 2013-08-10 20:44 - 00000000 ____D C:\ProgramData\APN
2013-08-10 20:44 - 2013-08-10 20:44 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-10 20:42 - 2013-08-31 10:17 - 00000000 ____D C:\ProgramData\Avira
2013-08-10 20:42 - 2013-08-10 20:42 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-10 18:46 - 2013-08-11 09:36 - 00000000 ____D C:\Windows\8AE3CFB678B24F55A7BE618FCFF43A03.TMP

==================== One Month Modified Files and Folders =======

2013-09-08 17:13 - 2013-09-08 17:13 - 00000000 ____D C:\FRST
2013-09-08 17:13 - 2013-09-08 17:12 - 01948988 _____ (Farbar) C:\Users\test\Downloads\FRST64.exe
2013-09-08 17:03 - 2012-09-08 08:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-08 17:02 - 2011-07-04 16:26 - 01342318 _____ C:\Windows\WindowsUpdate.log
2013-09-08 16:59 - 2011-07-07 14:15 - 00000000 ____D C:\Users\test\AppData\Roaming\Skype
2013-09-08 16:41 - 2013-08-30 23:27 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-08 16:12 - 2011-07-07 11:59 - 00000000 ____D C:\Users\test\AppData\Local\PMB Files
2013-09-08 16:12 - 2011-07-07 11:59 - 00000000 ____D C:\ProgramData\PMB Files
2013-09-08 16:07 - 2013-09-07 10:37 - 00004148 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-09-08 16:06 - 2013-09-07 10:37 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-09-08 15:36 - 2013-09-08 10:37 - 00000000 ____D C:\Program Files (x86)\iSafe
2013-09-08 15:16 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-08 15:16 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-08 15:11 - 2013-08-31 10:20 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-09-08 15:10 - 2013-09-08 10:37 - 00000000 ____D C:\Users\test\AppData\Roaming\iSafe
2013-09-08 15:09 - 2013-08-30 23:27 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-08 15:08 - 2013-09-08 10:45 - 00000168 _____ C:\Windows\setupact.log
2013-09-08 15:08 - 2011-07-04 16:36 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-08 15:08 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-08 10:47 - 2013-08-30 23:27 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-08 10:45 - 2013-09-08 10:45 - 00001452 _____ C:\Windows\PFRO.log
2013-09-08 10:45 - 2013-09-08 10:45 - 00000000 _____ C:\Windows\setuperr.log
2013-09-08 10:43 - 2013-09-08 10:43 - 00633672 _____ (Woodtale Technology Inc) C:\Users\test\Downloads\iSafedl (1).exe
2013-09-08 10:38 - 2013-09-08 10:38 - 00001837 _____ C:\Users\Public\Desktop\iSafe.lnk
2013-09-08 10:38 - 2013-09-08 10:38 - 00000000 ____D C:\Users\test\AppData\Roaming\eCyber
2013-09-08 10:37 - 2013-09-08 10:37 - 00633672 _____ (Woodtale Technology Inc) C:\Users\test\Downloads\iSafedl.exe
2013-09-08 10:34 - 2013-08-31 10:20 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-09-08 10:34 - 2013-08-31 10:19 - 00000000 ____D C:\Program Files (x86)\Amazon Browser Bar
2013-09-08 10:34 - 2011-07-07 14:26 - 00064152 _____ C:\Users\test\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-08 10:34 - 2011-07-04 16:26 - 00000000 ____D C:\Users\test
2013-09-08 10:33 - 2013-09-07 11:14 - 00000000 ____D C:\Users\test\AppData\Local\Freemium
2013-09-08 10:33 - 2013-09-07 10:54 - 00000000 ____D C:\Users\test\AppData\Roaming\LavFilters
2013-09-08 10:33 - 2013-09-07 10:54 - 00000000 ____D C:\Users\test\AppData\Roaming\CDXReader
2013-09-08 10:33 - 2013-09-07 10:45 - 00000000 ____D C:\Users\test\AppData\Local\Software Updater
2013-09-08 10:33 - 2013-09-07 10:36 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-08 10:33 - 2013-09-07 10:36 - 00000000 ____D C:\ProgramData\FreeSystemUtilities
2013-09-08 10:33 - 2013-09-07 10:36 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-09-08 10:33 - 2013-09-07 10:34 - 00000000 ____D C:\Users\test\AppData\Local\DownloadGuide
2013-09-08 10:33 - 2013-08-31 10:26 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-09-08 10:33 - 2013-08-31 10:19 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-09-08 10:33 - 2013-08-31 10:18 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-09-08 10:33 - 2013-08-02 19:44 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-08 10:33 - 2013-08-02 19:43 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-08 10:33 - 2013-05-26 17:10 - 00000000 ____D C:\Program Files\Panzar
2013-09-08 10:33 - 2013-04-05 14:09 - 00000000 ____D C:\Program Files (x86)\GameforgeLive
2013-09-08 10:33 - 2013-03-25 21:07 - 00000000 ____D C:\Program Files (x86)\DivX
2013-09-08 10:33 - 2013-03-25 21:06 - 00000000 ____D C:\ProgramData\DivX
2013-09-08 10:33 - 2012-01-14 16:31 - 00000000 ___HD C:\Users\test\Documents\Runes of Magic
2013-09-08 10:33 - 2011-07-07 14:15 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-08 10:32 - 2013-08-31 10:18 - 00000000 ____D C:\Users\test\AppData\Roaming\Systweak
2013-09-08 10:32 - 2012-10-20 20:31 - 00000000 ____D C:\Windows\Minidump
2013-09-08 10:32 - 2011-07-13 12:32 - 00000000 ____D C:\Users\test\Desktop\Henrik dateien
2013-09-08 10:32 - 2011-07-07 14:16 - 00000000 ____D C:\Users\test\AppData\Local\Google
2013-09-08 10:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-09-08 10:31 - 2013-09-07 10:36 - 00000000 ____D C:\Program Files (x86)\Covus Freemium
2013-09-08 10:31 - 2011-07-07 14:16 - 00000000 ____D C:\Program Files\Google
2013-09-08 10:28 - 2013-09-08 10:28 - 00000000 ____D C:\Users\test\AppData\Roaming\Avira
2013-09-08 10:11 - 2011-07-07 14:09 - 00000000 ____D C:\Users\test\AppData\Roaming\Macromedia
2013-09-08 09:49 - 2013-09-08 09:48 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\test\Downloads\spybotsd-2.1.21-SR2 (1).exe
2013-09-07 11:14 - 2013-09-07 10:54 - 00000000 ____D C:\Program Files (x86)\DSP-worx
2013-09-07 11:13 - 2013-09-07 11:13 - 00003792 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-09-07 11:11 - 2013-09-01 16:59 - 00000000 ____D C:\ProgramData\Systweak
2013-09-07 11:11 - 2009-07-14 06:45 - 00305504 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-07 11:06 - 2013-09-07 11:04 - 30996544 _____ (Advanced System Protector                                   ) C:\Users\test\Downloads\antispyware.exe
2013-09-07 11:04 - 2013-09-07 11:03 - 01110936 _____ (Conduit) C:\Users\test\Downloads\bs_Advanced_System_Protector.exe
2013-09-07 11:04 - 2012-11-11 17:56 - 00000000 _____ C:\END
2013-09-07 10:56 - 2013-09-07 10:56 - 00000000 ____D C:\Users\test\AppData\Local\avgchrome
2013-09-07 10:50 - 2013-09-07 10:50 - 00714368 _____ C:\Users\test\Downloads\UltimateCodec.exe
2013-09-07 10:50 - 2013-09-07 10:50 - 00000282 _____ C:\Windows\Tasks\DSite.job
2013-09-07 10:50 - 2013-03-14 11:22 - 00003218 _____ C:\Windows\System32\Tasks\DSite
2013-09-07 10:49 - 2013-09-07 10:49 - 00714816 _____ C:\Users\test\Downloads\ZipOpenerSetup.exe
2013-09-07 10:42 - 2009-07-14 04:34 - 61341696 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-09-07 10:42 - 2009-07-14 04:34 - 18874368 _____ C:\Windows\system32\config\SYSTEM.bak
2013-09-07 10:42 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2013-09-07 10:41 - 2013-09-07 10:36 - 00001656 _____ C:\Windows\system32\ASOROSet.bin
2013-09-07 10:38 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2013-09-07 10:37 - 2013-08-31 10:33 - 00000000 ____D C:\Windows\system32\config\RCCBakup
2013-09-07 10:36 - 2013-09-07 10:36 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk
2013-09-07 10:34 - 2013-09-07 10:34 - 00444408 _____ C:\Users\test\Downloads\free-system-utilities-DE.exe
2013-09-07 10:28 - 2013-04-06 00:57 - 00000859 _____ C:\Windows\client.config.ini
2013-09-05 15:47 - 2013-08-30 23:30 - 00002236 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-03 15:59 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-01 17:30 - 2013-08-02 23:37 - 00001124 _____ C:\Users\Public\Desktop\Gameforge Live.lnk
2013-09-01 17:08 - 2011-07-04 16:26 - 00000000 ___RD C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-01 16:59 - 2013-08-30 23:27 - 00001922 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-09-01 16:59 - 2013-08-30 23:27 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-01 08:57 - 2013-08-31 10:19 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-08-31 10:36 - 2011-07-04 23:19 - 00000000 ____D C:\Windows\Panther
2013-08-31 10:19 - 2013-08-31 10:19 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.3832.dll
2013-08-31 10:17 - 2013-08-10 20:42 - 00000000 ____D C:\ProgramData\Avira
2013-08-31 00:36 - 2013-08-24 22:02 - 00000000 ____D C:\Users\test\AppData\Roaming\Goto
2013-08-30 23:36 - 2013-08-30 23:27 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-30 23:35 - 2013-08-30 23:27 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-30 23:27 - 2013-08-30 23:27 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 23:27 - 2013-08-30 23:27 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 23:27 - 2013-08-30 23:27 - 00189936 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 23:27 - 2013-08-30 23:27 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum
2013-08-30 23:27 - 2013-08-30 23:27 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum
2013-08-30 23:27 - 2013-08-30 23:27 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum
2013-08-30 23:26 - 2013-08-30 23:26 - 00000000 ____D C:\ProgramData\AVAST Software
2013-08-30 23:26 - 2013-08-30 23:26 - 00000000 ____D C:\Program Files\AVAST Software
2013-08-29 19:16 - 2013-08-24 22:02 - 00000000 ____D C:\Users\test\AppData\Roaming\Iruvpa
2013-08-29 19:15 - 2013-08-29 19:15 - 00163084 _____ C:\ProgramData\2433f433
2013-08-29 19:15 - 2013-08-29 19:15 - 00163047 _____ C:\Users\test\AppData\Roaming\2433f433
2013-08-29 19:15 - 2013-08-29 19:15 - 00163025 _____ C:\Users\test\AppData\Local\2433f433
2013-08-26 11:13 - 2013-08-26 11:13 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2013-08-25 12:40 - 2011-07-07 11:50 - 00000000 ____D C:\Users\test\AppData\Roaming\TS3Client
2013-08-25 12:34 - 2013-08-25 12:34 - 00502874 _____ C:\Program Files\usb.ids
2013-08-25 12:34 - 2011-08-27 08:52 - 00000000 _____ C:\Program Files\update.ini
2013-08-25 12:34 - 2011-07-07 11:49 - 00000000 ____D C:\Program Files\translations
2013-08-25 12:34 - 2011-07-07 11:49 - 00000000 ____D C:\Program Files\styles
2013-08-25 12:34 - 2011-07-07 11:49 - 00000000 ____D C:\Program Files\soundbackends
2013-08-25 12:34 - 2011-07-07 11:49 - 00000000 ____D C:\Program Files\plugins
2013-08-25 12:34 - 2011-06-08 14:56 - 13771752 _____ (TeamSpeak Systems GmbH) C:\Program Files\ts3client_win64.exe
2013-08-25 12:34 - 2011-06-08 14:56 - 00499176 _____ (TeamSpeak Systems GmbH) C:\Program Files\update.exe
2013-08-25 12:34 - 2011-06-08 14:56 - 00230376 _____ (TeamSpeak Systems GmbH) C:\Program Files\package_inst.exe
2013-08-25 12:33 - 2011-07-07 11:49 - 00000000 ____D C:\Program Files\imageformats
2013-08-25 12:33 - 2011-07-07 11:49 - 00000000 ____D C:\Program Files\accessible
2013-08-25 08:49 - 2011-04-12 09:43 - 00664618 _____ C:\Windows\system32\perfh007.dat
2013-08-25 08:49 - 2011-04-12 09:43 - 00134786 _____ C:\Windows\system32\perfc007.dat
2013-08-25 08:49 - 2009-07-14 07:13 - 01527550 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-24 22:02 - 2013-08-24 22:02 - 00000000 ____D C:\Users\test\AppData\Roaming\Ohyq
2013-08-24 10:51 - 2013-08-24 10:30 - 00000000 ____D C:\Users\test\Desktop\Günther Backup
2013-08-21 14:03 - 2012-09-08 08:40 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-21 14:03 - 2012-09-08 08:40 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-21 14:03 - 2011-07-07 20:22 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-18 23:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-14 23:26 - 2013-08-14 23:24 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 23:24 - 2011-07-11 21:48 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-13 08:38 - 2013-09-07 10:38 - 00032328 _____ C:\Windows\Launcher.exe
2013-08-11 09:36 - 2013-08-10 18:46 - 00000000 ____D C:\Windows\8AE3CFB678B24F55A7BE618FCFF43A03.TMP
2013-08-10 20:44 - 2013-08-10 20:44 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-10 20:44 - 2013-08-10 20:44 - 00000000 ____D C:\ProgramData\APN
2013-08-10 20:44 - 2013-08-10 20:44 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-08-10 20:42 - 2013-08-10 20:42 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-10 12:16 - 2013-07-17 11:48 - 00000000 ____D C:\Users\test\AppData\Roaming\Opera Software
2013-08-10 12:16 - 2012-06-17 11:10 - 00000000 ____D C:\Program Files (x86)\Opera

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.3832.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-08 11:56

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-09-2013
Ran by test at 2013-09-08 17:14:47
Running from C:\Users\test\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
7-Zip 9.20 (x32)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7)
Advanced System Protector (x32 Version: 2.1.1000.10905)
Age of Conan: Hyborian Adventures (x32)
Amazon Browser Bar (x32 Version: 3.0)
AoC Patch 1.1c by Omega (x32 Version: 1.1.3)
Apple Application Support (x32 Version: 2.2.2)
Apple Mobile Device Support (Version: 6.0.0.59)
Apple Software Update (x32 Version: 2.1.3.127)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Avira SearchFree Toolbar plus Web Protection (x32 Version: 12.2.2.663)
AVM FRITZ!WLAN (x32)
Bonjour (Version: 3.0.0.10)
D3DX10 (x32 Version: 15.4.2368.0902)
DivX-Setup (x32 Version: 2.6.1.8)
Dota 2 (x32)
EEC Patch 2.1b by Omega (x32 Version: 1.0.0)
Forged By Chaos (x32)
Fotogalerie (x32 Version: 16.4.3505.0912)
Free System Utilities (x32 Version: 1.1.0.149)
Free SystemUtilities (x32 Version: 1.1.0.149)
Free YouTube to MP3 Converter version 3.11.35.1031 (x32 Version: 3.11.35.1031)
Gameforge Live 1.7.0 "Legend" (x32 Version: 1.7.0)
Google Chrome (x32 Version: 29.0.1547.66)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)
Google Update Helper (x32 Version: 1.3.21.153)
iSafe (x32)
iTunes (Version: 10.7.0.21)
Java Auto Updater (x32 Version: 2.0.7.1)
Java(TM) 6 Update 35 (x32 Version: 6.0.350)
League of Legends (x32 Version: 1.02.0000)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 1.1 (x32)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Maker (x32 Version: 16.4.3505.0912)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nexon Game Manager (x32)
NVIDIA 3D Vision Controller Driver (x32 Version: 280.19)
NVIDIA 3D Vision Controller-Treiber 280.19 (Version: 280.19)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA HD-Audiotreiber 1.2.23.3 (Version: 1.2.23.3)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA PhysX (x32 Version: 9.10.0514)
NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OpenOffice.org 3.3 (x32 Version: 3.3.9567)
Opera Stable 15.0.1147.141 (x32 Version: 15.0.1147.141)
Pando Media Booster (x32 Version: 2.3.6.0)
Panzar (x32 Version: 1.0)
Photo Gallery (x32 Version: 16.4.3505.0912)
QuickTime (x32 Version: 7.72.80.56)
rosoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Runes of Magic (x32 Version: 5.0.5.2592)
ShotOnline (x32 Version: 1.0)
Skype Click to Call (x32 Version: 5.9.9216)
Skype™ 6.6 (x32 Version: 6.6.106)
Spybot - Search & Destroy (x32 Version: 2.1.21)
Steam (x32 Version: 1.0.0.0)
SweetIM Bundle by SweetPacks (x32 Version: 1.0.0.0)
System Requirements Lab (x32)
Team Fortress 2 (x32)
TeamSpeak 3 Client (Version: 3.0.11.1)
TeamViewer 8 (x32 Version: 8.0.17396)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)

==================== Restore Points  =========================

01-09-2013 14:49:25 Wiederherstellungsvorgang
03-09-2013 14:05:00 Windows Update
06-09-2013 14:43:10 Windows Update
07-09-2013 08:35:19 RegClean Pro Sa, Sep 07, 13  10:35
07-09-2013 08:35:32 Free System Utilities
08-09-2013 07:56:57 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {138CBD4D-1194-4A70-B3FC-5D86D6BBAE0C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {14D4277B-EE64-45A4-9810-B567265C78CB} - System32\Tasks\Google Updater and Installer => C:\Users\test\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {14FDA12B-B08C-4CB6-BBC6-B83470AF42D1} - System32\Tasks\SmartDefrag_Startup => C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
Task: {1AC01104-A6D1-4EAE-AD5F-2415F7B812DE} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-08-23] ()
Task: {2BCF74CC-86F5-40A2-B114-F70D4B07A2AF} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {2E52EA78-78D8-4933-9D31-38F6A3D0BBE7} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {34EC0EBF-C80A-4D6C-B72A-100E625BC350} - System32\Tasks\{5265C104-E78F-4D1E-AF0E-E4078EACCB71} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {404C1CAE-6DAC-405D-8004-61358DEF84FF} - System32\Tasks\DSite => C:\Users\test\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: {413744C1-8658-45D7-95CB-F4F1551716FA} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {43D5B31F-37A1-4C6A-955F-675B0829C250} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-09-07] ()
Task: {4E0744F9-4BCC-44B8-9682-D6A6CBCAEF57} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-30] (Google Inc.)
Task: {68F3A92C-4D7D-4425-A752-D211D98C071B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {9A626B14-246A-471D-A86D-2FE1BCBDB608} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated)
Task: {B49E5CB7-6A61-41F8-80D6-F55465EFE601} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-30] (Google Inc.)
Task: {C1ACE91F-3393-4701-8CDB-D25D96CAADAA} - System32\Tasks\{16D66D41-E27A-483F-BD47-4D374B567D28} => C:\Program Files (x86)\Steam\Steam.exe [2013-03-26] (Valve Corporation)
Task: {C817DCAE-0B55-41CC-9F98-9ADBE32651CC} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {CE09775D-4CC6-4312-808B-575D67BE89C0} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [2013-05-24] (Systweak)
Task: {CE49E1E0-57F5-41F6-9F4A-9E3D4F7CCABA} - System32\Tasks\{0852D436-A8DD-49E8-835F-5A0B7BD1CA60} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {DDC7EA78-C350-4BEB-A7F8-EFA349D1E2A9} - System32\Tasks\Freemium1ClickMaint => C:\Program Files (x86)\Covus Freemium\Free System Utilities\1Click.exe [2013-08-23] (Covus Freemium GmbH)
Task: {E68955A5-3AD6-43A6-8C58-03C456F5D9BE} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-01-18] (Sun Microsystems, Inc.)
Task: {E6BEA77D-977E-44E0-93FA-214448E1972E} - System32\Tasks\Game_Booster_Startup => C:\Program Files\Game Booster 3\gbtray.exe
Task: {EBA43CEA-5176-4C02-9968-AD6F73790378} - System32\Tasks\{BDC1257A-6E1F-459D-89D1-4A886738613D} => C:\Riot Games\League of Legends\lol.launcher.exe [2011-04-28] ()
Task: {FC585867-1C00-4FED-9404-A14A25BF0A1D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {FF32BE75-EAC7-475C-B59A-B17AF4B3972D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DSite.job => C:\Users\test\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-08 10:37 - 2013-08-30 04:31 - 00376648 _____ (Woodtale Technology Inc) C:\Program Files (x86)\iSafe\sqlite3.dll
2013-09-08 10:37 - 2013-08-30 04:31 - 00053576 _____ (Woodtale Technology Inc) C:\Program Files (x86)\iSafe\iCommu.dll
2013-09-08 10:37 - 2013-08-30 04:31 - 00282440 _____ (Riverbed Technology, Inc.) C:\Program Files (x86)\iSafe\wpcap.dll
2013-09-08 10:37 - 2013-08-30 04:31 - 00098120 _____ (Riverbed Technology, Inc.) C:\Program Files (x86)\iSafe\packet.dll
2013-09-08 10:37 - 2013-08-30 04:31 - 00132936 _____ (Woodtale Technology Inc) C:\Program Files (x86)\iSafe\iSafeKrnlCall.dll
2013-09-08 09:42 - 2013-09-08 08:20 - 02098176 _____ () C:\Program Files\AVAST Software\Avast\defs\13090800\algo.dll
2011-05-26 13:41 - 2011-05-26 13:41 - 00053024 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll
2012-08-27 21:33 - 2012-08-27 21:33 - 01292136 _____ (The ICU Project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuin.dll
2012-08-27 21:33 - 2012-08-27 21:33 - 00923496 _____ (The ICU Project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuuc.dll
2012-08-27 21:33 - 2012-08-27 21:33 - 16303976 _____ (The ICU Project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\icudt46.dll
2011-08-30 23:05 - 2011-08-30 23:05 - 00085864 _____ (Apple Inc.) C:\Windows\system32\dnssd.dll
2012-08-27 21:33 - 2012-08-27 21:33 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-08-27 21:33 - 2012-08-27 21:33 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-10-22 02:00 - 2010-10-22 02:00 - 00197120 _____ (AVM GmbH) C:\Program Files (x86)\avmwlanstick\avmwlapi.dll
2010-10-22 02:00 - 2010-10-22 02:00 - 00331776 _____ (AVM Berlin) C:\Program Files (x86)\avmwlanstick\avmsysnet.dll
2013-08-02 19:43 - 2013-05-16 10:55 - 03643800 _____ (Project JEDI) C:\Program Files (x86)\Spybot - Search & Destroy 2\Jcl150.bpl
2013-08-02 19:43 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-08-02 19:43 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-08-02 19:43 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-08-02 19:43 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-08-02 19:43 - 2012-04-24 20:37 - 00356984 _____ (BitDefender) C:\Program Files (x86)\Spybot - Search & Destroy 2\av\scan.dll
2013-09-08 10:37 - 2013-08-30 04:31 - 01660232 _____ (Woodtale Technology Inc.) C:\Program Files (x86)\iSafe\ouilibx.dll
2013-09-08 10:37 - 2013-08-30 04:31 - 00187208 _____ () C:\Program Files (x86)\iSafe\libpng.dll
2013-08-29 02:25 - 2013-08-29 02:25 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2013-09-05 15:47 - 2013-09-02 22:35 - 09962960 _____ (The ICU Project) C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\icudt.dll
2013-09-05 15:47 - 2013-09-02 22:35 - 00709584 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libglesv2.dll
2013-09-05 15:47 - 2013-09-02 22:35 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libegl.dll
2013-09-05 15:47 - 2013-09-02 22:35 - 04053456 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll
2013-09-05 15:47 - 2013-09-02 22:35 - 00410576 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
2013-09-05 15:47 - 2013-09-02 22:35 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
2013-06-21 09:53 - 2013-06-21 09:53 - 00088680 ____R (Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.dll

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/08/2013 03:10:26 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2013 10:45:55 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2013 10:35:06 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2013 10:14:13 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2013 10:04:36 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2013 09:40:29 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/07/2013 11:14:33 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Launcher.exe_Opera Internet Browser, Version: 15.0.1147.141, Zeitstempel: 0x51dd27ab
Name des fehlerhaften Moduls: launcher_lib.dll, Version: 0.0.0.0, Zeitstempel: 0x51dd278e
Ausnahmecode: 0x80000003
Fehleroffset: 0x0001f920
ID des fehlerhaften Prozesses: 0x810
Startzeit der fehlerhaften Anwendung: 0xLauncher.exe_Opera Internet Browser0
Pfad der fehlerhaften Anwendung: Launcher.exe_Opera Internet Browser1
Pfad des fehlerhaften Moduls: Launcher.exe_Opera Internet Browser2
Berichtskennung: Launcher.exe_Opera Internet Browser3

Error: (09/07/2013 11:11:50 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/07/2013 10:43:43 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/07/2013 10:32:11 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Launcher.exe_Opera Internet Browser, Version: 15.0.1147.141, Zeitstempel: 0x51dd27ab
Name des fehlerhaften Moduls: launcher_lib.dll, Version: 0.0.0.0, Zeitstempel: 0x51dd278e
Ausnahmecode: 0x80000003
Fehleroffset: 0x0001f920
ID des fehlerhaften Prozesses: 0xd38
Startzeit der fehlerhaften Anwendung: 0xLauncher.exe_Opera Internet Browser0
Pfad der fehlerhaften Anwendung: Launcher.exe_Opera Internet Browser1
Pfad des fehlerhaften Moduls: Launcher.exe_Opera Internet Browser2
Berichtskennung: Launcher.exe_Opera Internet Browser3


System errors:
=============
Error: (09/08/2013 03:11:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (09/08/2013 03:11:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (09/08/2013 03:08:55 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎08.‎09.‎2013 um 15:07:10 unerwartet heruntergefahren.

Error: (09/08/2013 10:47:57 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (09/08/2013 10:47:57 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (09/08/2013 10:37:10 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (09/08/2013 10:37:10 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (09/08/2013 10:34:48 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/08/2013 10:34:48 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (09/08/2013 10:16:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069


Microsoft Office Sessions:
=========================
Error: (09/08/2013 03:10:26 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2013 10:45:55 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2013 10:35:06 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2013 10:14:13 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2013 10:04:36 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2013 09:40:29 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/07/2013 11:14:33 AM) (Source: Application Error)(User: )
Description: Launcher.exe_Opera Internet Browser15.0.1147.14151dd27ablauncher_lib.dll0.0.0.051dd278e800000030001f92081001ceabaaa790c5e0C:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\15.0.1147.141\launcher_lib.dlle88167d0-179d-11e3-b60f-00040ec28c97

Error: (09/07/2013 11:11:50 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/07/2013 10:43:43 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/07/2013 10:32:11 AM) (Source: Application Error)(User: )
Description: Launcher.exe_Opera Internet Browser15.0.1147.14151dd27ablauncher_lib.dll0.0.0.051dd278e800000030001f920d3801ceaba4bf4311a8C:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\15.0.1147.141\launcher_lib.dllfd01d498-1797-11e3-9c0f-00040ec28c97


==================== Memory info =========================== 

Percentage of memory in use: 37%
Total physical RAM: 4095.23 MB
Available physical RAM: 2545.22 MB
Total Pagefile: 8188.64 MB
Available Pagefile: 6264.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:341.09 GB) NTFS
Drive d: (EEARTH) (CDROM) (Total:0.55 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 955B108D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================