Fenster bzw. Schrift "zuckt", Browser hängt [Win 7]

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 10:23 on 10/11/2013 (Admin)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...
SPTD -> Disabled (Service running -> reboot required)


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013
Ran by Admin (administrator) on RAMIN on 10-11-2013 10:34:52
Running from D:\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2012\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Drive Manager\ABRTMon.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ROCCAT) C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2278504 2011-10-14] (Realtek Semiconductor)
HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1
HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-14] (InstallShield Software Corporation)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-26] (Samsung)
HKCU\...\Run: [F0D0CB14CFBD725B6737B3F69F728C58F2BAD871._service_run] - C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe [1294240 2013-08-21] (Maple Studio)
HKCU\...\Run: [Google Update] - C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-06-30] (Google Inc.)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2317312 2011-09-13] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5716608 2011-07-22] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\aprp.exe [3331312 2011-10-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ROCCAT Pyra Mouse] - C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.exe [532480 2010-09-07] (ROCCAT)
HKLM-x32\...\Run: [Clarus Drive Manager] - C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe [5800512 2013-03-06] (Clarus, Inc.)
HKLM-x32\...\Run: [ApnTBMon] - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
HKU\Administrator\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] - "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe"  /PROMPT /CMPID=JUNE2013_TB
BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6E82DC9B-3425-4264-9290-081F933E22F4} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_abba_serp_ie_de_display?ie=UTF8&tag=abba-serp-de-ie-21&tagbase=abba&query={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {6E82DC9B-3425-4264-9290-081F933E22F4} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_abba_serp_ie_de_display?ie=UTF8&tag=abba-serp-de-ie-21&tagbase=abba&query={searchTerms}
BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: ividi Helper Object - {8B8B2E80-1444-451D-AC8E-EB9A847F3887} - C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\bh\ividi.dll (Unitech LLC)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: AlxHelper Class - {F443A627-5009-4323-9C1D-7FD598D0D712} - C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
Toolbar: HKLM-x32 - No Name - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} -  No File
Toolbar: HKLM-x32 - Amazon Browser Bar - {EA582743-9076-4178-9AA6-7393FDF4D5CE} - C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.123.254

FireFox:
========
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin HKCU: @tools.coowon.com/Coowon Update;version=3 - C:\Users\Admin\AppData\Local\Coowon\Update\1.3.27.1\npCoowonUpdate3.dll (Coowon.)
FF Plugin HKCU: @tools.coowon.com/Coowon Update;version=9 - C:\Users\Admin\AppData\Local\Coowon\Update\1.3.27.1\npCoowonUpdate3.dll (Coowon.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Admin\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Admin\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: ftdownloader3 - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader3@ftdownloader.com.xpi
FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG2012\Firefox4\
FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\Firefox4\
FF HKLM-x32\...\Firefox\Extensions: [speedanalysis02@SpeedAnalysis.com] - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com
FF Extension: Speed Analysis 2 - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com
FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKCU\...\Firefox\Extensions: [speedanalysis02@SpeedAnalysis.com] - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com
FF Extension: Speed Analysis 2 - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (iVidi Chrome Toolbar) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpdhgpkkloealnjnmepfhanpcleldbef\1.0_0
CHR HKLM-x32\...\Chrome\Extension: [aaaajabnoiehionljhjpclogplgillib] - C:\ProgramData\AskPartnerNetwork\Toolbar\CME-V7\CRX\ToolbarCR.crx
CHR HKLM-x32\...\Chrome\Extension: [bbffdhejhaoiflnpooogkckfdcmmjppn] - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx
CHR HKLM-x32\...\Chrome\Extension: [giacfgjdclhnmkacnfbaljbmpnelflol] - C:\Program Files (x86)\iVIDI.org plugin\ividiplg.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [kpdhgpkkloealnjnmepfhanpcleldbef] - C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\ividi.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Admin\Desktop\System\Programme\chrome.exe

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-11-02] (Advanced Micro Devices, Inc.)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-15] (APN LLC.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [5174392 2012-11-02] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [100864 2012-09-07] (Freemake)
S4 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [559168 2013-03-12] (RealNetworks, Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-09] ()
S4 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
R2 SZDrvSvc; C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe [19456 2013-03-06] (Clarus, Inc.)
S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [x]

==================== Drivers (Whitelisted) ====================

R3 AiCharger; C:\Windows\SysWow64\DRIVERS\AiCharger.sys [17152 2011-10-15] (ASUSTek Computer Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-06-21] ()
R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [127328 2012-12-10] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [307040 2012-11-08] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384800 2013-04-11] (AVG Technologies CZ, s.r.o.)
R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [38160 2007-05-11] (IVT Corporation.)
R3 BlueletAudio; C:\Windows\SysWow64\DRIVERS\blueletaudio.sys [38160 2007-05-11] (IVT Corporation.)
R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37648 2007-03-05] (IVT Corporation.)
R3 BlueletSCOAudio; C:\Windows\SysWow64\DRIVERS\BlueletSCOAudio.sys [37648 2007-03-05] (IVT Corporation.)
R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)
R3 BT; C:\Windows\SysWow64\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)
R3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [44688 2007-05-09] (IVT Corporation.)
R3 Btcsrusb; C:\Windows\SysWow64\Drivers\btcusb.sys [44688 2007-05-09] (IVT Corporation.)
R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)
R0 BTHidEnum; C:\Windows\SysWow64\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)
R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)
R0 BTHidMgr; C:\Windows\SysWow64\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-05-22] ()
S4 InCDfs; C:\Windows\SysWow64\Drivers\InCDfs.sys [88800 2003-09-15] (Ahead Software)
S1 InCDPass; C:\Windows\SysWow64\DRIVERS\InCDPass.sys [28688 2003-09-15] (Ahead Software)
U1 InCDrec; C:\Windows\SysWow64\Drivers\InCDrec.sys [5328 2003-09-15] (Ahead Software AG)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37464 2010-09-07] (Abelssoft GmbH)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-06-21] ()
R3 mdf16; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mdf16.sys [20400 2012-06-21] ()
R3 mvd23; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mvd23.sys [99248 2012-06-21] ()
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [12288 2009-08-22] ()
S0 sfdrv01a; C:\Windows\System32\drivers\sfdrv01a.sys [77688 2006-07-05] (Protection Technology (StarForce))
S0 sfsync04; C:\Windows\System32\drivers\sfsync04.sys [78208 2006-08-11] (Protection Technology (StarForce))
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [765288 2011-10-01] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [268648 2011-10-01] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [25960 2011-10-01] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [22376 2011-10-01] (Microsoft Corporation)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [828912 2012-12-22] (Duplex Secure Ltd.)
S3 tmnsusbser; C:\Windows\System32\DRIVERS\tmnsusbser.sys [124416 2013-02-04] (Wireless Device)
S3 tmusbnet; C:\Windows\System32\DRIVERS\tmusbnet.sys [129024 2013-02-04] (QUALCOMM Incorporated)
R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)
R3 VComm; C:\Windows\SysWow64\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)
R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)
R3 VcommMgr; C:\Windows\SysWow64\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [x]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [x]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-10 10:28 - 2013-11-10 10:28 - 00000000 ___DC C:\FRST
2013-11-10 10:23 - 2013-11-10 10:23 - 00000020 _____ C:\Users\Admin\defogger_reenable
2013-11-10 08:49 - 2013-11-10 08:50 - 00000000 ____D C:\Users\Admin\AppData\Local\{FE4A95C5-A191-49A2-8995-48CE56A42D87}
2013-11-09 11:51 - 2013-11-09 11:52 - 00000000 ____D C:\Users\Admin\AppData\Local\{1D11DD4C-EAE6-4D54-BDE8-6B0ECE301047}
2013-11-09 08:43 - 2013-11-09 08:43 - 00000000 ____D C:\Users\Admin\AppData\Local\{38BEE7C9-B59B-4F13-B39D-DB8D86B146DF}
2013-11-08 07:32 - 2013-11-08 07:32 - 00000000 ____D C:\Users\Admin\AppData\Local\{55BB482E-2409-49AB-B132-5D623EC0A28B}
2013-11-07 07:20 - 2013-11-07 07:20 - 00000000 ____D C:\Users\Admin\AppData\Local\{CC104D9D-E4AE-4BC8-912A-AA2AE8EBA47C}
2013-11-06 13:59 - 2013-11-06 13:59 - 00000000 ____D C:\Users\Admin\AppData\Local\{1A68A962-4A70-45FE-A792-CB03AFFBF2AC}
2013-11-05 07:12 - 2013-11-05 07:12 - 00000000 ____D C:\Users\Admin\AppData\Local\{8714240D-6A9B-4133-AE7E-13B6573363E4}
2013-11-04 17:49 - 2013-11-04 17:49 - 00030248 _____ C:\Users\Admin\.recently-used.xbel
2013-11-04 12:57 - 2013-11-04 12:57 - 00000000 ____D C:\Users\Admin\AppData\Local\{639BDD53-288D-4933-98C8-22E0A5F1F2A5}
2013-11-03 09:29 - 2013-11-03 09:30 - 00000000 ____D C:\Users\Admin\AppData\Local\{EC8C9274-BA73-4875-82CF-5FCABA79ACC6}
2013-11-02 08:27 - 2013-11-02 08:28 - 00000000 ____D C:\Users\Admin\AppData\Local\{703E1FEE-BB1D-4A7F-A669-7E12AD1DA0A4}
2013-11-01 07:33 - 2013-11-01 07:33 - 00000000 ____D C:\Users\Admin\AppData\Local\{F4E725D6-F057-4ADE-A80D-E0D2CF9BCEEF}
2013-10-31 07:03 - 2013-10-31 07:03 - 00000000 ____D C:\Users\Admin\AppData\Local\{9C732AFD-6873-4E03-813E-C5D8B9905C6A}
2013-10-30 14:09 - 2013-10-30 14:10 - 00000000 ____D C:\Users\Admin\AppData\Local\{A41699EB-B2AC-424C-A54A-358E483D9536}
2013-10-29 06:52 - 2013-10-29 06:52 - 00000000 ____D C:\Users\Admin\AppData\Local\{E643E784-5186-4048-A325-2747FCF97579}
2013-10-28 14:15 - 2013-10-28 14:15 - 00000000 ____D C:\Users\Admin\AppData\Local\{ED651199-D436-4587-A1FF-8BB4F4D89D94}
2013-10-27 11:49 - 2013-10-27 11:50 - 00000000 ____D C:\Users\Admin\AppData\Local\{6D191DC5-F369-406C-A1AC-DC3E4D29CE62}
2013-10-26 12:44 - 2013-10-27 10:15 - 00000000 ____D C:\Users\Admin\AppData\Local\Loksim3D
2013-10-26 09:14 - 2013-10-26 09:14 - 00000000 ____D C:\Users\Admin\AppData\Local\{DE71261C-B2CC-4E7F-BCDB-3E387E95610A}
2013-10-25 13:04 - 2013-10-25 13:05 - 00000000 ____D C:\Users\Admin\AppData\Local\{BFF39F04-12C6-4777-B92A-9293E61BD9F7}
2013-10-24 19:49 - 2013-10-24 19:49 - 00000000 ____D C:\Users\Admin\AppData\Local\{5143A298-7D46-4247-9F27-DE248B1A05E9}
2013-10-23 19:05 - 2013-10-23 19:06 - 00000000 ____D C:\Users\Admin\AppData\Local\{0E66FAD8-4CEC-479E-B0CE-35C92EFA4D72}
2013-10-23 18:02 - 2013-10-23 18:02 - 00000000 ____D C:\Users\Admin\AppData\Local\Cool_Mirage
2013-10-23 18:02 - 2013-10-23 18:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-10-23 18:02 - 2013-10-23 18:02 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-10-23 06:38 - 2013-10-23 06:39 - 00000000 ____D C:\Users\Admin\AppData\Local\{7D255CC7-9681-44E0-9EED-C80ADA654D3F}
2013-10-22 11:40 - 2013-10-22 11:41 - 00000000 ____D C:\Users\Admin\AppData\Local\{0AF2ED99-31F6-4944-9482-9A6BE8A91F69}
2013-10-21 05:53 - 2013-10-21 05:54 - 00000000 ____D C:\Users\Admin\AppData\Local\{C3795DF5-6E8A-4E5A-A891-C2C622D20872}
2013-10-20 17:25 - 2013-10-20 17:27 - 00000000 ____D C:\Users\Admin\AppData\Local\{5BD90FD3-0BE3-42AC-A994-7C7D0A365824}
2013-10-20 17:16 - 2013-10-20 17:16 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File-Upload.net
2013-10-20 17:16 - 2013-10-20 17:16 - 00000000 ____D C:\Program Files (x86)\File-Upload.net
2013-10-19 13:47 - 2013-10-19 13:47 - 00000000 ____D C:\Users\Admin\AppData\Local\{A3A82109-30A2-4A8A-8FEC-7A5B2638EE07}
2013-10-11 07:13 - 2013-10-11 07:14 - 00000000 ____D C:\Users\Admin\AppData\Local\{70481AA3-C13E-4C2E-948B-6B5F41040B7E}

==================== One Month Modified Files and Folders =======

2013-11-10 10:33 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-10 10:33 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-10 10:29 - 2012-01-12 14:48 - 02082485 _____ C:\Windows\WindowsUpdate.log
2013-11-10 10:28 - 2013-11-10 10:28 - 00000000 ___DC C:\FRST
2013-11-10 10:25 - 2013-10-02 14:42 - 00003356 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3025859492-1826490741-3861217815-1001
2013-11-10 10:25 - 2013-08-27 20:07 - 00033610 _____ C:\Windows\setupact.log
2013-11-10 10:25 - 2013-08-23 16:40 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-10 10:25 - 2013-06-16 15:28 - 00003222 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3025859492-1826490741-3861217815-1001
2013-11-10 10:25 - 2012-08-05 19:34 - 00000326 _____ C:\Windows\Tasks\GlaryInitialize.job
2013-11-10 10:25 - 2012-06-09 09:50 - 00045056 _____ C:\Windows\SysWOW64\acovcnt.exe
2013-11-10 10:25 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-10 10:23 - 2013-11-10 10:23 - 00000020 _____ C:\Users\Admin\defogger_reenable
2013-11-10 10:23 - 2012-06-09 09:49 - 00000000 ____D C:\Users\Admin
2013-11-10 10:07 - 2013-08-23 16:40 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-10 09:45 - 2012-06-30 14:42 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001UA.job
2013-11-10 09:37 - 2013-10-05 17:04 - 00000374 _____ C:\Windows\Tasks\WpsUpdateTask_Admin.job
2013-11-10 09:27 - 2012-12-22 10:52 - 00000000 ____D C:\Windows\system32\Drivers\AVG
2013-11-10 08:50 - 2013-11-10 08:49 - 00000000 ____D C:\Users\Admin\AppData\Local\{FE4A95C5-A191-49A2-8995-48CE56A42D87}
2013-11-09 13:29 - 2013-10-08 15:23 - 00000000 ____D C:\Program Files (x86)\Origin
2013-11-09 11:52 - 2013-11-09 11:51 - 00000000 ____D C:\Users\Admin\AppData\Local\{1D11DD4C-EAE6-4D54-BDE8-6B0ECE301047}
2013-11-09 09:44 - 2013-06-19 06:47 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype
2013-11-09 08:43 - 2013-11-09 08:43 - 00000000 ____D C:\Users\Admin\AppData\Local\{38BEE7C9-B59B-4F13-B39D-DB8D86B146DF}
2013-11-08 07:32 - 2013-11-08 07:32 - 00000000 ____D C:\Users\Admin\AppData\Local\{55BB482E-2409-49AB-B132-5D623EC0A28B}
2013-11-07 18:32 - 2011-02-19 05:24 - 00721324 _____ C:\Windows\system32\perfh007.dat
2013-11-07 18:32 - 2011-02-19 05:24 - 00158260 _____ C:\Windows\system32\perfc007.dat
2013-11-07 18:32 - 2009-07-14 06:13 - 01680404 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-07 07:20 - 2013-11-07 07:20 - 00000000 ____D C:\Users\Admin\AppData\Local\{CC104D9D-E4AE-4BC8-912A-AA2AE8EBA47C}
2013-11-06 20:05 - 2013-06-16 15:26 - 00003334 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3025859492-1826490741-3861217815-1001
2013-11-06 20:05 - 2013-06-16 15:26 - 00003200 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3025859492-1826490741-3861217815-1001
2013-11-06 20:05 - 2013-04-15 17:10 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2013-11-06 19:57 - 2013-05-08 16:15 - 00000000 ____D C:\Users\Admin\AppData\Roaming\vlc
2013-11-06 13:59 - 2013-11-06 13:59 - 00000000 ____D C:\Users\Admin\AppData\Local\{1A68A962-4A70-45FE-A792-CB03AFFBF2AC}
2013-11-06 13:31 - 2013-10-09 18:38 - 00000000 ____D C:\Users\Admin\AppData\Local\Paint.NET
2013-11-06 07:34 - 2012-06-28 07:43 - 00000000 ____D C:\Users\Admin\AppData\Roaming\SoftGrid Client
2013-11-05 07:12 - 2013-11-05 07:12 - 00000000 ____D C:\Users\Admin\AppData\Local\{8714240D-6A9B-4133-AE7E-13B6573363E4}
2013-11-04 17:54 - 2013-07-16 16:32 - 00000000 ____D C:\Users\Admin\.gimp-2.6
2013-11-04 17:49 - 2013-11-04 17:49 - 00030248 _____ C:\Users\Admin\.recently-used.xbel
2013-11-04 12:57 - 2013-11-04 12:57 - 00000000 ____D C:\Users\Admin\AppData\Local\{639BDD53-288D-4933-98C8-22E0A5F1F2A5}
2013-11-03 09:31 - 2012-08-06 10:58 - 00000000 ____D C:\Users\Admin\AppData\Local\Windows Live
2013-11-03 09:30 - 2013-11-03 09:29 - 00000000 ____D C:\Users\Admin\AppData\Local\{EC8C9274-BA73-4875-82CF-5FCABA79ACC6}
2013-11-02 17:27 - 2013-09-25 14:36 - 00238606 _____ C:\Windows\DirectX.log
2013-11-02 17:24 - 2013-01-30 13:01 - 00000000 ____D C:\Program Files (x86)\Flughafen-Feuerwehr-Simulator 2013
2013-11-02 17:20 - 2012-07-04 14:59 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-11-02 16:45 - 2012-06-30 14:42 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001Core.job
2013-11-02 08:28 - 2013-11-02 08:27 - 00000000 ____D C:\Users\Admin\AppData\Local\{703E1FEE-BB1D-4A7F-A669-7E12AD1DA0A4}
2013-11-01 17:32 - 2012-08-07 11:41 - 00019456 _____ C:\Users\Admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-01 17:31 - 2013-07-17 08:22 - 00000000 ____D C:\Users\Admin\AppData\Roaming\gtk-2.0
2013-11-01 07:33 - 2013-11-01 07:33 - 00000000 ____D C:\Users\Admin\AppData\Local\{F4E725D6-F057-4ADE-A80D-E0D2CF9BCEEF}
2013-10-31 07:03 - 2013-10-31 07:03 - 00000000 ____D C:\Users\Admin\AppData\Local\{9C732AFD-6873-4E03-813E-C5D8B9905C6A}
2013-10-30 14:10 - 2013-10-30 14:09 - 00000000 ____D C:\Users\Admin\AppData\Local\{A41699EB-B2AC-424C-A54A-358E483D9536}
2013-10-29 06:52 - 2013-10-29 06:52 - 00000000 ____D C:\Users\Admin\AppData\Local\{E643E784-5186-4048-A325-2747FCF97579}
2013-10-28 14:15 - 2013-10-28 14:15 - 00000000 ____D C:\Users\Admin\AppData\Local\{ED651199-D436-4587-A1FF-8BB4F4D89D94}
2013-10-27 13:35 - 2012-06-28 18:50 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-27 11:50 - 2013-10-27 11:49 - 00000000 ____D C:\Users\Admin\AppData\Local\{6D191DC5-F369-406C-A1AC-DC3E4D29CE62}
2013-10-27 10:15 - 2013-10-26 12:44 - 00000000 ____D C:\Users\Admin\AppData\Local\Loksim3D
2013-10-26 12:09 - 2013-05-07 15:42 - 00000000 ____D C:\Program Files (x86)\ROCCAT
2013-10-26 09:14 - 2013-10-26 09:14 - 00000000 ____D C:\Users\Admin\AppData\Local\{DE71261C-B2CC-4E7F-BCDB-3E387E95610A}
2013-10-25 13:05 - 2013-10-25 13:04 - 00000000 ____D C:\Users\Admin\AppData\Local\{BFF39F04-12C6-4777-B92A-9293E61BD9F7}
2013-10-24 19:49 - 2013-10-24 19:49 - 00000000 ____D C:\Users\Admin\AppData\Local\{5143A298-7D46-4247-9F27-DE248B1A05E9}
2013-10-24 06:05 - 2012-01-12 15:04 - 00003178 _____ C:\Windows\system32\AutoRunFilter.ini
2013-10-24 06:05 - 2012-01-12 15:04 - 00001745 _____ C:\Windows\system32\ServiceFilter.ini
2013-10-23 19:06 - 2013-10-23 19:05 - 00000000 ____D C:\Users\Admin\AppData\Local\{0E66FAD8-4CEC-479E-B0CE-35C92EFA4D72}
2013-10-23 18:02 - 2013-10-23 18:02 - 00000000 ____D C:\Users\Admin\AppData\Local\Cool_Mirage
2013-10-23 18:02 - 2013-10-23 18:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-10-23 18:02 - 2013-10-23 18:02 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-10-23 06:39 - 2013-10-23 06:38 - 00000000 ____D C:\Users\Admin\AppData\Local\{7D255CC7-9681-44E0-9EED-C80ADA654D3F}
2013-10-22 11:41 - 2013-10-22 11:40 - 00000000 ____D C:\Users\Admin\AppData\Local\{0AF2ED99-31F6-4944-9482-9A6BE8A91F69}
2013-10-21 15:30 - 2013-08-16 19:32 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Dropbox
2013-10-21 15:29 - 2013-08-16 19:38 - 00000000 ___RD C:\Users\Admin\Dropbox
2013-10-21 05:54 - 2013-10-21 05:53 - 00000000 ____D C:\Users\Admin\AppData\Local\{C3795DF5-6E8A-4E5A-A891-C2C622D20872}
2013-10-20 17:27 - 2013-10-20 17:25 - 00000000 ____D C:\Users\Admin\AppData\Local\{5BD90FD3-0BE3-42AC-A994-7C7D0A365824}
2013-10-20 17:16 - 2013-10-20 17:16 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File-Upload.net
2013-10-20 17:16 - 2013-10-20 17:16 - 00000000 ____D C:\Program Files (x86)\File-Upload.net
2013-10-19 15:40 - 2012-06-30 14:42 - 00004090 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001UA
2013-10-19 15:40 - 2012-06-30 14:42 - 00003694 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001Core
2013-10-19 15:08 - 2013-10-05 17:09 - 00000000 ____D C:\Users\Admin\AppData\Local\Kingsoft
2013-10-19 15:02 - 2013-08-23 16:40 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-19 15:02 - 2013-08-23 16:40 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-19 13:47 - 2013-10-19 13:47 - 00000000 ____D C:\Users\Admin\AppData\Local\{A3A82109-30A2-4A8A-8FEC-7A5B2638EE07}
2013-10-11 10:35 - 2012-12-20 12:54 - 00000000 ____D C:\Program Files (x86)\sixteen tons entertainment
2013-10-11 10:27 - 2013-10-09 08:49 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-10-11 07:20 - 2012-06-28 07:52 - 00000000 ____D C:\ProgramData\DatacardService
2013-10-11 07:14 - 2013-10-11 07:13 - 00000000 ____D C:\Users\Admin\AppData\Local\{70481AA3-C13E-4C2E-948B-6B5F41040B7E}
2013-10-11 07:07 - 2012-06-28 07:53 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2013-10-11 07:07 - 2012-06-28 07:53 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll

Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\comver.dll
C:\Users\Admin\AppData\Local\Temp\ICReinstall_JDownloaderSetup_jdownloader.org.exe
C:\Users\Admin\AppData\Local\Temp\iiuninst.exe
C:\Users\Admin\AppData\Local\Temp\KMP_3.7.0.109.exe
C:\Users\Admin\AppData\Local\Temp\KMP_3.7.0.113.exe
C:\Users\Admin\AppData\Local\Temp\mgsqlite3.dll
C:\Users\Admin\AppData\Local\Temp\pidgenx.dll
C:\Users\Admin\AppData\Local\Temp\proxy_vole6032017189673350064.dll
C:\Users\Admin\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Admin\AppData\Local\Temp\sonarinst.exe
C:\Users\Admin\AppData\Local\Temp\TsuA62D471D.dll
C:\Users\Admin\AppData\Local\Temp\ubiAFE0.tmp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-02 14:49

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-10-2013
Ran by Admin at 2013-11-10 10:30:28
Running from D:\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG Anti-Virus Free Edition 2012 (Enabled - Up to date) {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
AS: AVG Anti-Virus Free Edition 2012 (Enabled - Up to date) {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

18 WoS Across America (x32 Version: 0.2.0000)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
7-Zip 9.22 (x32 Version: 9.22.00.0)
Adobe AIR (x32 Version: 3.4.0.2540)
Adobe Flash Player 10 ActiveX (x32 Version: 10.1.85.3)
Adobe Flash Player 10 Plugin (x32 Version: 10.0.32.18)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Ahead InCD (x32)
Ahead NeroVision Express (x32)
Amazon Browser Bar (Version: 3.0.2012.0802)
AMD APP SDK Runtime (Version: 2.5.775.2)
AMD Catalyst Install Manager (Version: 3.0.847.0)
AMD Fuel (Version: 2011.1102.8.41498)
AMD Media Foundation Decoders (Version: 1.0.61101.2304)
AMD System Monitor (x32 Version: 1.0.8)
AMD VISION Engine Control Center (x32 Version: 2011.1102.8.41498)
AnalogX AutoTune (x32)
Anno 1701 (x32 Version: 1.00)
ANNO 2070 (x32 Version: 1.0.0.0)
ArtMoney SE v7.35.1 (x32 Version: 7.35)
Ask Toolbar (x32 Version: 12.6.0.1638)
ASUS AI Recovery (x32 Version: 1.0.19)
ASUS FaceLogon (x32 Version: 1.0.0012)
ASUS LifeFrame3 (x32 Version: 3.0.27)
ASUS Live Update (x32 Version: 3.0.8)
ASUS Power4Gear Hybrid (Version: 1.1.50)
ASUS Sonic Focus (x32 Version: 1.0.0.5)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0036)
ASUS USB Charger Plus (x32 Version: 2.0.5)
ASUS Virtual Camera (x32 Version: 1.0.24)
ASUS WebStorage (x32 Version: 3.0.108.222)
ASUS_Screensaver (x32)
AsusVibe2.0 (x32 Version: 2.0.7.142)
ATK Package (x32 Version: 1.0.0014)
AVG 2012 (Version: 12.0.3222)
AVG 2012 (Version: 12.1.2242)
AVG 2012 (Version: 2012.1.2242)
Battlefield 1942™ (x32 Version: 1.6.20.0)
Battlelog Web Plugins (x32 Version: 2.3.0)
Berlin Taxi (x32)
Blender (remove only) (x32)
Blender (Version: 2.67b)
Blue Byte Game Channel (x32)
Bluesoleil2.6.0.8 Release 070517 (x32 Version: 2.6.0.8 Release 070517)
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.1102.8.41498)
Catalyst Control Center InstallProxy (x32 Version: 2011.1102.8.41498)
Catalyst Control Center Localization All (x32 Version: 2011.1102.8.41498)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.1102.8.41498)
CCC Help Chinese Standard (x32 Version: 2011.1102.0007.41498)
CCC Help Chinese Traditional (x32 Version: 2011.1102.0007.41498)
CCC Help Czech (x32 Version: 2011.1102.0007.41498)
CCC Help Danish (x32 Version: 2011.1102.0007.41498)
CCC Help Dutch (x32 Version: 2011.1102.0007.41498)
CCC Help English (x32 Version: 2011.1102.0007.41498)
CCC Help Finnish (x32 Version: 2011.1102.0007.41498)
CCC Help French (x32 Version: 2011.1102.0007.41498)
CCC Help German (x32 Version: 2011.1102.0007.41498)
CCC Help Greek (x32 Version: 2011.1102.0007.41498)
CCC Help Hungarian (x32 Version: 2011.1102.0007.41498)
CCC Help Italian (x32 Version: 2011.1102.0007.41498)
CCC Help Japanese (x32 Version: 2011.1102.0007.41498)
CCC Help Korean (x32 Version: 2011.1102.0007.41498)
CCC Help Norwegian (x32 Version: 2011.1102.0007.41498)
CCC Help Polish (x32 Version: 2011.1102.0007.41498)
CCC Help Portuguese (x32 Version: 2011.1102.0007.41498)
CCC Help Russian (x32 Version: 2011.1102.0007.41498)
CCC Help Spanish (x32 Version: 2011.1102.0007.41498)
CCC Help Swedish (x32 Version: 2011.1102.0007.41498)
CCC Help Thai (x32 Version: 2011.1102.0007.41498)
CCC Help Turkish (x32 Version: 2011.1102.0007.41498)
ccc-utility64 (Version: 2011.1102.8.41498)
CCleaner (remove only) (x32)
Cheat Engine 6.3 (x32)
ColorKey 1 (x32)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
CoolNovo (HKCU Version: 2.0.9.20)
Coowon (HKCU Version: 1.2.0.0)
CrazyTalk v6.21 SE (x32 Version: 6.21.2325.1)
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink Media Suite (x32 Version: 8.0.2926)
CyberLink Power2Go (x32 Version: 7.0.0.1126)
D3DX10 (x32 Version: 15.4.2368.0902)
Deadtime Stories (x32)
Dev-C++ 5 beta 9 release (4.9.9.2) (x32)
Diagram Designer (x32)
DIE SIEDLER - Aufstieg eines Königreichs (x32 Version: 1.00.0000)
Dream Day First Home (x32)
Dream Vacation Solitaire (x32)
Driver San Francisco (x32 Version: 1.4.0.0)
Dropbox (HKCU Version: 2.0.26)
EAX4 Unified Redist (x32 Version: 4.001)
Emergency4 (x32 Version: 1.03.001)
ERS Berlin 2 Beta (x32 Version: 0.2011.12.04)
ESN Sonar (x32 Version: 0.70.4)
Euro Truck Simulator 2 (x32 Version: 1.2.5)
Fachzug 22 Version 1.2 (x32)
Fast Boot (Version: 1.0.10)
Feuer- und Notfallsimulation Wegberg Version 6.0 (x32 Version: 6.0)
FFN  (x32 Version: 1.00.0000)
File-Upload.net (x32 Version: 1.0)
Flashback (Demo) 1.0 (x32 Version: 1.0)
FlatOut2 (x32 Version: 1.00.0000)
Flughafen-Feuerwehr-Simulator PATCH 1.1 (x32)
FormatFactory 2.80 (x32 Version: 2.80)
Fraps (remove only) (x32)
Free Video Flip and Rotate version 2.1.9.827 (x32 Version: 2.1.9.827)
Free YouTube to MP3 Converter version 3.12.10.812 (x32 Version: 3.12.10.812)
FreeArc 0.67 alpha (x32 Version: 0.67 alpha)
FTDownloader (x32 Version: 2.1 Build 26473)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Game Park Console (x32 Version: 1.2.4.431)
GIMP 2.6.10 (x32 Version: 2.6.10)
Glary Utilities 2.47.0.1539 (x32 Version: 2.47.0.1539)
Google Chrome (HKCU Version: 30.0.1599.101)
Google Earth (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.165)
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (Version: 22.0.334.0)
HP Deskjet 2050 J510 series Hilfe (x32 Version: 140.0.61.61)
HP Photo Creations (x32 Version: 1.0.0.3341)
HP Update (x32 Version: 5.002.005.003)
indii.org/tintii (x32)
IrfanView (remove only) (x32 Version: 4.35)
iVIDI Plugin 1.3 (x32 Version: 1.3)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 29 (64-bit) (Version: 6.0.290)
JetDrive (x32 Version: 5.4)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kingsoft Office 2013 (9.1.0.4246) (x32 Version: 9.1.0.4246)
L&H TTS3000 Deutsch (x32)
L&H TTS3000 Español (x32)
L&H TTS3000 Français (x32)
L&H TTS3000 Russian (x32)
Landwirtschafts Simulator 2011 (x32 Version: 1.0)
LibreOffice 3.5 (x32 Version: 3.5.4.2)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft AutoRoute 2002 (x32 Version: 9.00.17.0200)
Microsoft Encarta Enzyklopädie 2003 (x32 Version: 2003)
Microsoft GIF Animator (x32)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.6122.5000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.6122.5000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.6137.5001)
Microsoft Silverlight (x32 Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (x32 Version: 11.0.51106.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106)
Microsoft Word 2002 (x32 Version: 10.0.6626.0)
Microsoft Works 2003-Setup-Start (x32)
Microsoft Works 7.0  (x32 Version: 07.02.0702)
Microsoft Works Suite-Add-Ins für Microsoft Word (x32 Version: 2.0.0.0000)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Microsoft_VC100_CRT_x64 (Version: 1.0.0)
Movavi Video Converter 10 (x32 Version: 10.05.000)
Movavi Video Converter 3D SE (x32 Version: 1.04.000)
Mp3tag v2.56 (x32 Version: v2.56)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0)
MyFreeCodec (HKCU)
Need for Speed™ Most Wanted (x32)
Notepad++ (x32 Version: 6.3.2)
Nuance PDF Reader (x32 Version: 6.00.0041)
NVIDIA PhysX (x32 Version: 9.10.0513)
OGL-FMS Uninstall (x32 Version: 0.1.4)
Online Games Manager v1.20 (x32 Version: 1.20.13)
Origin (x32 Version: 9.3.7.2735)
Paint.NET v3.5.11 (Version: 3.61.0)
Photomatix Pro version 4.2.7 (Version: 4.2.7)
Picasa 3 (x32 Version: 3.9)
Plants vs Zombies (x32)
PlayReady PC Runtime amd64 (Version: 1.3.0)
PosteRazor (x32 Version: 1.5.2)
PowerOff XP V.0.9.4 (x32)
PunkBuster Services (x32 Version: 0.993)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 9.2)
QuickTime (x32 Version: 7.71.80.42)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
RealDownloader (x32 Version: 1.3.2)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
RealPlayer (x32 Version: 16.0.2)
Realtek Ethernet Controller Driver (x32 Version: 7.43.321.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6482)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30127)
RealUpgrade 1.1 (x32 Version: 1.1.0)
RESCUE 2013 (HKCU Version: 1.10.00.00)
RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition (x32 Version: v2.24 MSI Master Overclocking Arena 2009 edition)
ROCCAT Power-Grid Version 0.458 (x32 Version: 0.458)
ROCCAT Pyra Mouse Driver (x32)
Samsung Drive Manager (x32 Version: 1.0.148)
Samsung Kies (x32 Version: 2.3.2.12064_9)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.24.0)
schlaegerei.de ComputerSchock 4.00 (x32 Version: 4.00)
schlaegerei.de mouseScherz 4.00 (x32 Version: 4.00)
Shockwave (x32)
Sid Meier's Civilization 4 Complete (x32 Version: 1.74)
Sid Meier's Civilization IV Colonization (x32 Version: 1.00)
Skype™ 6.5 (x32 Version: 6.5.158)
SmartSound Quicktracks Plugin (x32 Version: 3.0.2.7)
Snagit 11 (x32 Version: 11.1.0)
Studie zur Verbesserung von HP Deskjet 2050 J510 series Produkten (Version: 22.0.334.0)
TeamViewer 8 (x32 Version: 8.0.22298)
The KMPlayer (remove only) (x32 Version: 3.6.0.85)
TI Connect 1.6 (x32 Version: 1.6)
Tom Clancy's Splinter Cell (x32 Version: 1.00.000)
Tom Clancy's Splinter Cell Chaos Theory (x32 Version: 1.05.157)
Tom Clancy's Splinter Cell Double Agent (x32 Version: 1.00.0000)
Total Video Converter 3.71 100812 (x32)
Ubisoft Game Launcher (x32 Version: 1.0.0.0)
Ulead VideoStudio SE DVD (x32 Version: 10.0)
uMedia uTV (x32 Version: 1.00.000)
Unitech LLC toolbar   (x32 Version: 1.8.23.0)
Visual Studio 2008 x64 Redistributables (x32 Version: 10.0.0.2)
VLC media player 1.0.1 (x32 Version: 1.0.1)
Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB  (06/11/2009 1.0.0.0) (Version: 06/11/2009 1.0.0.0)
Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB  (09/02/2009 1.0.0.1) (Version: 09/02/2009 1.0.0.1)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Family Safety (Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Live 影像中心 (x32 Version: 15.4.3502.0922)
Windows Live 程式集 (x32 Version: 15.4.3502.0922)
WinFehler 4.0 (x32 Version: 4.0)
WinFlash (x32 Version: 2.32.0)
Winterberg Configurator Version WEM Confi 8.8 (x32 Version: WEM Confi 8.8)
Wireless Console 3 (x32 Version: 3.0.24)
Works Suite-Betriebssystem-Pack (x32 Version: 3.0.0.0000)
Wunderlist (x32 Version: 2.3.0.29)
Xilisoft Video Maker 6 (HKCU Version: 6.5.2.0907)
XSBoxGo 1.0.0.0 (x32 Version: 1.0.0.0)
Xvid Video Codec (x32 Version: 1.3.1)
YTD Video Downloader 4.3 (x32 Version: 4.3)
Zeta Producer 11 11.2.3 (nur entfernen) (HKCU Version: 11.2.3)
Zoo Tycoon 2 - Zoodirektor-Sammlung (x32 Version: 1.00.0000)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922)
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2)
بريد Windows Live (x32 Version: 15.4.3502.0922)
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (x32 Version: 15.4.5722.2)
معرض صور Windows Live (x32 Version: 15.4.3502.0922)
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-06-27 15:07 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {08414C66-B082-4699-B543-1DA767E5B131} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3025859492-1826490741-3861217815-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {15D6B625-D1DB-439D-9DAC-D8656EFC405E} - System32\Tasks\{7EFE0034-5466-4270-B25A-6AA02014AEC3} => C:\Program Files (x86)\Ahead\Nero StartSmart\NeroStartSmart.exe
Task: {181A7D7E-5668-42DF-A9D4-AB282848EFAB} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe [2011-10-03] (ASUS)
Task: {19D1C9EC-8B00-4C90-8B77-86B4515EC2D6} - System32\Tasks\{3C08B103-CE73-4D94-AA54-34DA3CBD549E} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {2064FE1E-489E-40B4-80E0-480A0FFC78AD} - System32\Tasks\{B0E5BD34-0074-4D86-9C34-5C6399EDBAF5} => C:\Program Files (x86)\Der Paketdienst\DerPaketdienst.exe
Task: {20BED05B-CE00-48C0-A095-FF04F637A7B9} - System32\Tasks\{D0311224-9410-4440-9123-10793A4157A8} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {20F41935-488B-4720-B29B-7DFFFA1C5E6B} - System32\Tasks\{7A52CBA3-7F65-4E00-ACF7-64AB453E3E72} => C:\Program Files (x86)\Electronic Arts\Battlefield 2142-Demo\BF2142.exe
Task: {238A73F7-0AF5-401E-BE42-AECCDBCD4D01} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {26DF2776-83D1-4BF9-B25A-C3E5B17329D2} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3025859492-1826490741-3861217815-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-04-16] (RealNetworks, Inc.)
Task: {28E63B86-2F70-47F5-BBCD-52DCA7058F07} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2011-11-23] (ASUS)
Task: {295E95B3-1607-4961-8D7C-95E0B2CB534F} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2011-11-17] (ASUSTeK Computer Inc.)
Task: {2D1BE826-0FEE-449A-9889-3AF0806DB0A9} - System32\Tasks\EPUpdater => C:\Users\Admin\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe
Task: {32669C18-1B1F-4D84-8DC9-15E4A01A97CB} - System32\Tasks\{6478F502-1F97-40B8-AD77-2844539294EF} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {337FA8B9-C436-4787-8E4E-4B11CD41AE1A} - System32\Tasks\{DF904FA4-4F08-4F03-885B-5FDF220EB900} => C:\Users\Admin\Downloads\ffn_isaver.exe
Task: {34EA8CCE-CBB0-4A88-A03C-2522D78B6EE8} - System32\Tasks\{0AA1DFCC-EFD0-4422-9AF7-991C623333FB} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {37403915-C13F-4517-A7D7-BCD1B3917615} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-23] (Google Inc.)
Task: {3FF8DC52-7969-406B-8E5B-2AD34215B3C8} - System32\Tasks\{9E6490F7-1983-49A7-91BD-8ECCBCB0240D} => C:\Users\Admin\Desktop\System\Spiele\Knight rider 2\KR2.exe
Task: {484DBBB7-A5CB-4F6B-9C7D-32E6CB821B60} - System32\Tasks\{CC1BEF7E-0C7C-4D34-B4F0-CE1E206AC653} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {49A75E7A-15CA-4402-B15D-D5BE51276B01} - System32\Tasks\{189B7997-6138-481A-AB70-5D88EE5EE310} => C:\Program Files (x86)\Ahead\Nero StartSmart\NeroStartSmart.exe
Task: {4BCBB227-D90B-4968-B758-EC07632820EA} - System32\Tasks\USBChargerPlus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2011-10-15] (ASUSTek Computer Inc.)
Task: {4D15C3D9-583C-4869-9005-CE7E2E056907} - System32\Tasks\{700095D7-23B3-4500-9308-0288B2F9CAFE} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {516D65F9-A672-4FFC-BE93-19350D3E01AA} - System32\Tasks\{16D291CC-89D2-4ADA-B622-848291C0A784} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {59228EF4-C726-4F30-98A5-C67198D9AAFE} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001Core => C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-30] (Google Inc.)
Task: {5B30AC6B-0539-4BB2-AA6E-244559BE071B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-23] (Google Inc.)
Task: {5C642785-1F98-4826-8DDF-6EAC03C005A4} - System32\Tasks\{89567FEE-AEAE-4FED-9F70-39E962CDED77} => E:\setup.exe
Task: {61918864-04DF-49D2-A030-89822D41AF1B} - System32\Tasks\{68ACA6C6-CB1A-4F09-8925-CFE69AB93494} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {63D82A72-5C2A-4DEC-9121-64F4C9048D31} - System32\Tasks\{D3B4AD64-4631-4A50-8C25-E89F2FC5A378} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {6819B303-5473-4B9C-ACB0-5BB6901C74A0} - System32\Tasks\{E9D0A766-E92E-4FC9-9286-7E4D70321FC6} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {6BB68C3E-D0E6-4F9B-A50D-178FE9751D4E} - System32\Tasks\{AFE665BF-E2BF-4231-A0F9-F46C419BD245} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {6DED0103-990F-4F06-83FD-4340BC4B0893} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-22] (ASUS)
Task: {707E97A6-A8AF-4241-BD5E-F18A02B54107} - System32\Tasks\{AABC9C36-F757-4F65-9A8F-5E0C4FE57BA0} => C:\Program Files (x86)\astragon\Kehrmaschinen-Simulator 2011\Bin\Launcher.exe
Task: {72385F5B-73E1-4AF4-B0D3-4FDDCA1A93C1} - System32\Tasks\Google Updater and Installer => C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-30] (Google Inc.)
Task: {751C5684-7F7B-495F-B03A-D33D9F1C6BE7} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3025859492-1826490741-3861217815-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {787CCD11-45F4-4845-BD8C-952FF9494551} - System32\Tasks\GlaryInitialize => C:\Program Files (x86)\Glary Utilities\initialize.exe [2012-07-05] (Glarysoft Ltd)
Task: {7AF9F1C6-268B-4736-9C21-9585FCC05C76} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [2010-03-12] (Hewlett-Packard)
Task: {7CC288F3-5C2F-4CD3-847F-C958BFE4C243} - System32\Tasks\WpsUpdateTask_Admin => C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsupdate.exe [2013-08-11] (Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {8C68CC35-5C85-4ECD-A9D0-8C9A39C9758C} - System32\Tasks\{C19292D8-B660-4316-A003-D4BB83BB3218} => C:\Program Files (x86)\astragon\Kehrmaschinen-Simulator 2011\Bin\Launcher.exe
Task: {9070B6A0-AA23-4C21-ADA0-87BE4CACE5AA} - System32\Tasks\{88167CD5-268A-413A-8994-BE1CE0ADEB70} => C:\Program Files (x86)\Ubisoft\Funatics\Die Siedler II - Die nächste Generation\bin\S2DNG.exe
Task: {94A96193-BB1E-4DBA-93DC-15C2A9C501A8} - System32\Tasks\{E3D66C7F-CF86-4A7E-B414-C0D7A1A697DF} => C:\Program Files (x86)\Electronic Arts\Battlefield 2142-Demo\BF2142.exe
Task: {960C9274-2261-4EC3-8A75-F054618D02A8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001UA => C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-30] (Google Inc.)
Task: {9A4EAF23-270D-4396-8DDE-7102AEE07E19} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3025859492-1826490741-3861217815-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {A054CE36-C43A-41B7-A72F-DF76C11FD535} - System32\Tasks\Physik machen!!!!!!!! => C:\Windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\wordicon.exe [2012-09-20] ()
Task: {A0A9A285-490B-4578-B012-F5CF29D2C764} - System32\Tasks\{F2BB0317-F46C-4A4D-9393-80042A26EBA0} => E:\setup.exe
Task: {B3282299-4C16-42F0-BB70-AED9ED8687AE} - System32\Tasks\{D1DB4C5B-3FA7-4911-9A6A-813A725C3430} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {B54096A7-07A8-49F1-841E-84FFAC3B7781} - System32\Tasks\{9AE307A5-AA10-475E-B9E9-DE8F6B5BF138} => C:\Users\Admin\Desktop\System\Spiele\Knight rider 2\KR2.exe
Task: {B9BFD7E8-3B68-4173-81ED-D05E88644622} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2011-11-16] (ASUS)
Task: {BA0C3AA8-F393-4248-8F97-1EF9DEFC979D} - System32\Tasks\{ED1092E0-0FB3-4D36-9256-84DE53FE014D} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {BA0C6530-9705-4201-8ADD-F87E0377306D} - System32\Tasks\{94A8FE2C-8FB2-4A6D-B29E-E899F248CE32} => C:\Program Files (x86)\Ubisoft\Funatics\Die Siedler II - Die nächste Generation\bin\S2DNG.exe
Task: {BEBCCFA0-B188-459F-A085-122360FA9756} - System32\Tasks\{304C0A34-E0BC-429B-A622-E31671BEE438} => C:\Program Files (x86)\EA GAMES\Need for Speed Underground 2\speed2.exe
Task: {CC21E7BD-9D6E-4807-8EC8-8D99D31307B8} - System32\Tasks\InstallShield Software-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [2004-06-14] (InstallShield Software Corporation)
Task: {CC4B204C-B5EE-4ABB-8F29-D8359C0C1FE5} - System32\Tasks\{8156BA6C-0F10-4ED2-A691-3EAE9702BA7C} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {CC6892BB-9F02-4465-AB69-802E05F09770} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {D80CBBB4-0D00-4359-ACC4-14885DF020F9} - System32\Tasks\{2CA502C3-6294-4761-ABD8-414C7CF67E54} => C:\Program Files (x86)\Ubisoft\Funatics\Die Siedler II - Die nächste Generation\bin\S2DNG.exe
Task: {E13FBE9C-9E69-4D84-8E2A-4F5636B5DCB3} - System32\Tasks\{354628F6-64B9-480D-87E3-2823F9965BD8} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: {E524F317-6E1D-42F3-BDFE-B221F8E491C5} - System32\Tasks\{09D89357-90F8-477F-82E0-6FDD32266319} => C:\Users\Admin\Desktop\System\Spiele\Knight rider 2\KR2.exe
Task: {E74B60C7-8353-4F6F-97B0-283C15F510AE} - System32\Tasks\{DD4A68A7-4B60-4BB1-898A-9F120DDB9B29} => C:\Users\Admin\Desktop\System\Programme\HyperCam 3\SMM_HyperCam.exe
Task: {E7C9570E-411D-4B25-9A44-96B016857E8C} - System32\Tasks\HPCustParticipation HP Deskjet 2050 J510 series => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe [2010-06-14] (Hewlett-Packard Co.)
Task: {F08FFBDA-270F-41EB-A4E3-89DEF1DADDF5} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3025859492-1826490741-3861217815-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {F7BBABE4-D978-4AB5-B894-9DE6BE4F2E7B} - System32\Tasks\{5CE4BF69-82C1-4F8C-8B7E-0C150ECAA8AD} => C:\Program Files (x86)\Ahead\Nero StartSmart\NeroStartSmart.exe
Task: {F8FDC989-66FB-4B2A-A308-0F8A04D2D7CA} - System32\Tasks\{95E8E553-5CA4-46EA-A9E3-0B39E3B1CC03} => C:\Users\Admin\Downloads\bdcamsetup.exe
Task: {FBB360E3-2707-40D4-B0BC-459CA8DEDA1F} - System32\Tasks\{7CCE9FCA-1EB0-4C38-B8D1-60337A5CFDFB} => C:\Games\icytower151\icytower15.exe
Task: {FFA3F17C-1FE9-4149-BEAE-C9D008EA50E5} - System32\Tasks\{6C10FE00-A67B-4F1A-9333-348EED471C96} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe
Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001Core.job => C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001UA.job => C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\WpsUpdateTask_Admin.job => C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsupdate.exe

==================== Loaded Modules (whitelisted) =============

2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
2010-07-15 01:11 - 2010-07-15 01:11 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2010-08-20 18:57 - 2010-08-20 18:57 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2010-08-20 18:57 - 2010-08-20 18:57 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2011-11-23 00:09 - 2011-11-23 00:09 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2011-11-17 20:33 - 2011-11-17 20:33 - 00209920 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll
2011-09-13 22:33 - 2011-09-13 22:33 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
2013-05-07 15:42 - 2009-10-31 06:13 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Pyra Mouse\hiddriver.dll
2012-11-29 22:59 - 2012-11-29 22:59 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2013-09-02 15:17 - 2013-08-21 11:48 - 00599968 _____ () C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\2.0.9.20\libglesv2.dll
2013-09-02 15:17 - 2013-08-21 11:48 - 00124832 _____ () C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\2.0.9.20\libegl.dll
2013-09-02 15:17 - 2013-08-21 11:48 - 04051408 _____ () C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\2.0.9.20\pdf.dll
2013-09-02 15:17 - 2013-08-21 11:48 - 00393120 _____ () C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\2.0.9.20\ppGoogleNaClPluginChrome.dll
2013-09-02 15:17 - 2013-08-21 11:48 - 01597856 _____ () C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\2.0.9.20\ffmpegsumo.dll
2013-04-16 02:12 - 2013-04-16 02:12 - 00060928 _____ () C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Hook\rndlpepperbrowserrecordhelper.dll
2013-09-02 15:17 - 2013-08-21 11:48 - 13136336 _____ () C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\2.0.9.20\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:2CFBE2D1
AlternateDataStreams: C:\ProgramData\Temp:373C6DC2
AlternateDataStreams: C:\ProgramData\Temp:4D066AD2
AlternateDataStreams: C:\ProgramData\Temp:5216CD26
AlternateDataStreams: C:\ProgramData\Temp:5D458568
AlternateDataStreams: C:\ProgramData\Temp:77846FFE
AlternateDataStreams: C:\ProgramData\Temp:798A3728
AlternateDataStreams: C:\ProgramData\Temp:AC57032B
AlternateDataStreams: C:\ProgramData\Temp:D20FFA63

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/10/2013 10:25:52 AM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (11/09/2013 06:40:32 PM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (11/09/2013 10:28:01 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/08/2013 01:19:52 PM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (11/07/2013 06:26:02 PM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (11/06/2013 08:05:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: realplay.exe, Version: 16.0.2.32, Zeitstempel: 0x516dab77
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x57a6aa99
ID des fehlerhaften Prozesses: 0xf94
Startzeit der fehlerhaften Anwendung: 0xrealplay.exe0
Pfad der fehlerhaften Anwendung: realplay.exe1
Pfad des fehlerhaften Moduls: realplay.exe2
Berichtskennung: realplay.exe3

Error: (11/06/2013 08:05:07 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: recordingmanager.exe, Version: 1.3.2.28, Zeitstempel: 0x516d233e
Name des fehlerhaften Moduls: sonrecordengine.dll, Version: 1.3.2.28, Zeitstempel: 0x516d2341
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00044923
ID des fehlerhaften Prozesses: 0xab8
Startzeit der fehlerhaften Anwendung: 0xrecordingmanager.exe0
Pfad der fehlerhaften Anwendung: recordingmanager.exe1
Pfad des fehlerhaften Moduls: recordingmanager.exe2
Berichtskennung: recordingmanager.exe3

Error: (11/06/2013 07:55:00 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: recordingmanager.exe, Version: 1.3.2.28, Zeitstempel: 0x516d233e
Name des fehlerhaften Moduls: QuickTime.qts_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4ea5d656
Ausnahmecode: 0xc0000005
Fehleroffset: 0x57f9aa99
ID des fehlerhaften Prozesses: 0x1b90
Startzeit der fehlerhaften Anwendung: 0xrecordingmanager.exe0
Pfad der fehlerhaften Anwendung: recordingmanager.exe1
Pfad des fehlerhaften Moduls: recordingmanager.exe2
Berichtskennung: recordingmanager.exe3

Error: (11/06/2013 07:48:48 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: RealPlay.exe, Version: 16.0.2.32, Zeitstempel: 0x516dab77
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x5933aa99
ID des fehlerhaften Prozesses: 0x16c0
Startzeit der fehlerhaften Anwendung: 0xRealPlay.exe0
Pfad der fehlerhaften Anwendung: RealPlay.exe1
Pfad des fehlerhaften Moduls: RealPlay.exe2
Berichtskennung: RealPlay.exe3

Error: (11/06/2013 07:35:49 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (11/10/2013 10:26:20 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
hwinterface
InCDPass
sfdrv01a
sfsync04

Error: (11/10/2013 10:25:01 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\InCDPass.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (11/10/2013 10:24:53 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\hwinterface.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (11/10/2013 10:24:53 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\InCDPass.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (11/10/2013 10:24:53 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\InCDrec.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (11/10/2013 10:24:48 AM) (Source: Application Popup) (User: )
Description: Treiber sfdrv01a.sys konnte nicht geladen werden.

Error: (11/10/2013 10:24:48 AM) (Source: Application Popup) (User: )
Description: Treiber sfsync04.sys konnte nicht geladen werden.

Error: (11/10/2013 10:24:08 AM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (11/10/2013 08:41:43 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
hwinterface
InCDPass
sfdrv01a
sfsync04

Error: (11/10/2013 08:39:45 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "JetDrive WindowsClosingService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (11/10/2013 10:25:52 AM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (11/09/2013 06:40:32 PM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (11/09/2013 10:28:01 AM) (Source: SideBySide)(User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{3DC873BB-FFE3-46BF-9701-26B9AE371F9F}\recordingmanager.exe

Error: (11/08/2013 01:19:52 PM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (11/07/2013 06:26:02 PM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (11/06/2013 08:05:44 PM) (Source: Application Error)(User: )
Description: realplay.exe16.0.2.32516dab77unknown0.0.0.000000000c000000557a6aa99f9401cedb23094d63c1C:\program files (x86)\real\realplayer\realplay.exeunknown6f682a07-4716-11e3-bc0b-988866001b04

Error: (11/06/2013 08:05:07 PM) (Source: Application Error)(User: )
Description: recordingmanager.exe1.3.2.28516d233esonrecordengine.dll1.3.2.28516d2341c000000500044923ab801cedb22cde6adc7C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exeC:\Program Files (x86)\RealNetworks\RealDownloader\RCAPlugins\sonrecordengine.dll59542354-4716-11e3-bc0b-988866001b04

Error: (11/06/2013 07:55:00 PM) (Source: Application Error)(User: )
Description: recordingmanager.exe1.3.2.28516d233eQuickTime.qts_unloaded0.0.0.04ea5d656c000000557f9aa991b9001cedb218ce4f970C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exeQuickTime.qtsef80c50c-4714-11e3-bc0b-988866001b04

Error: (11/06/2013 07:48:48 PM) (Source: Application Error)(User: )
Description: RealPlay.exe16.0.2.32516dab77unknown0.0.0.000000000c00000055933aa9916c001cedb20a6f79352c:\program files (x86)\real\realplayer\RealPlay.exeunknown11e9e46e-4714-11e3-bc0b-988866001b04

Error: (11/06/2013 07:35:49 PM) (Source: SideBySide)(User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{3DC873BB-FFE3-46BF-9701-26B9AE371F9F}\recordingmanager.exe


CodeIntegrity Errors:
===================================
  Date: 2013-06-29 14:32:24.144
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-29 14:32:24.104
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-29 14:32:22.022
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-29 14:32:21.982
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-29 14:32:19.921
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-29 14:32:19.880
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-29 14:32:17.697
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-29 14:32:17.657
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-29 14:32:15.580
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-29 14:32:15.539
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 52%
Total physical RAM: 3560.85 MB
Available physical RAM: 1698.79 MB
Total Pagefile: 7119.89 MB
Available Pagefile: 4784.86 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:128.18 GB) (Free:4.4 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:144.91 GB) (Free:7.76 GB) NTFS
Drive g: (Ramin's SAMSUNG Festplatte) (Fixed) (Total:2794.51 GB) (Free:2761.21 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 125FC5E1)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=128 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=145 GB) - (Type=07 NTFS)
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 1.

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-11-10 10:44:15
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\0000008a WDC_WD32 rev.01.0 298.09GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Admin\AppData\Local\Temp\pxldrpod.sys


---- User code sections - GMER 2.1 ----

.text  C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe[2136] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                    00000000755a1465 2 bytes [5A, 75]
.text  C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe[2136] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                   00000000755a14bb 2 bytes [5A, 75]
.text  ...                                                                                                                                                    * 2
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2836] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322                                                                000000006d461a22 2 bytes [46, 6D]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2836] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496                                                                000000006d461ad0 2 bytes [46, 6D]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2836] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552                                                                000000006d461b08 2 bytes [46, 6D]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2836] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730                                                                000000006d461bba 2 bytes [46, 6D]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2836] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762                                                                000000006d461bda 2 bytes [46, 6D]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2836] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                         00000000755a1465 2 bytes [5A, 75]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2836] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                        00000000755a14bb 2 bytes [5A, 75]
.text  ...                                                                                                                                                    * 2
.text  C:\Windows\AsScrPro.exe[2940] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                  00000000755a1465 2 bytes [5A, 75]
.text  C:\Windows\AsScrPro.exe[2940] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                 00000000755a14bb 2 bytes [5A, 75]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                         00000000755a1465 2 bytes [5A, 75]
.text  C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe[3296] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                        00000000755a14bb 2 bytes [5A, 75]
.text  ...                                                                                                                                                    * 2
?      C:\Windows\system32\iertutil.dll [3340] entry point in ".rdata" section                                                                                0000000075b547f9
.text  C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe[1408] C:\Windows\SysWOW64\ntdll.dll!DbgBreakPoint                             0000000077ba000c 1 byte [C3]
.text  C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe[1408] C:\Windows\SysWOW64\ntdll.dll!DbgUiRemoteBreakin                        0000000077c2f85a 5 bytes JMP 0000000177bdd571
.text  C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe[1572] C:\Windows\syswow64\kernel32.dll!LoadLibraryW                         0000000075dc4913 5 bytes JMP 00000001000141e8
.text  C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe[1572] C:\Windows\syswow64\kernel32.dll!LoadLibraryExW                       0000000075dc4945 5 bytes JMP 000000010001420c
.text  C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe[1572] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69               00000000755a1465 2 bytes [5A, 75]
.text  C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe[1572] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155              00000000755a14bb 2 bytes [5A, 75]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files (x86)\Clarus\Samsung Drive Manager\ABRTMon.exe[4084] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                          00000000755a1465 2 bytes [5A, 75]
.text  C:\Program Files (x86)\Clarus\Samsung Drive Manager\ABRTMon.exe[4084] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                         00000000755a14bb 2 bytes [5A, 75]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.exe[4276] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                 00000000755a1465 2 bytes [5A, 75]
.text  C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.exe[4276] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                00000000755a14bb 2 bytes [5A, 75]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[4580] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   00000000755a1465 2 bytes [5A, 75]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[4580] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000755a14bb 2 bytes [5A, 75]
.text  ...                                                                                                                                                    * 2

---- EOF - GMER 2.1 ----