Werbanner mit PC Leistung verbessern,updates usw.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013
Ran by Tobi (administrator) on TOBI-PC on 29-12-2013 14:32:58
Running from C:\Users\Tobi\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Abelssoft) C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(WebConnect) C:\Program Files (x86)\WebConnect\updateWebConnect.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(WebConnect) C:\Program Files (x86)\WebConnect\bin\utilWebConnect.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
(Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\WLanGUI.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
MountPoints2: {9b11a2fe-a7ed-11e2-94be-001fd0a28ec9} - H:\pushinst.exe
AppInit_DLLs: C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1317152 2013-12-16] (Conduit)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll   [1009440 2013-12-16] (Conduit)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?ctid=CT3317933&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPF17E1856-E25B-4E57-8800-2C7D0B67BB88&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD927F529BE50CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://do-search.com/?type=hp&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://do-search.com/web/?type=ds&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://do-search.com/?type=hp&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://do-search.com/?type=hp&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://do-search.com/web/?type=ds&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://do-search.com/web/?type=ds&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://do-search.com/?type=hp&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://do-search.com/?type=hp&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://do-search.com/web/?type=ds&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://do-search.com/?type=sc&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://do-search.com/web/?type=ds&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=foxtab&cd=2XzuyEtN2Y1L1QzuyB0AyBzytCzyzztB0EtAzz0EtBzyyCyCtN0D0Tzu0SyDtDzztN1L2XzutBtFtBtFtCtFyCtCzztN1L1Czu1L1C1H1B1QyDyE&cr=1997711720&ir=
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://do-search.com/web/?type=ds&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://do-search.com/web/?type=ds&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=foxtab&cd=2XzuyEtN2Y1L1QzuyB0AyBzytCzyzztB0EtAzz0EtBzyyCyCtN0D0Tzu0SyDtDzztN1L2XzutBtFtBtFtCtFyCtCzztN1L1Czu1L1C1H1B1QyDyE&cr=1997711720&ir=
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://do-search.com/web/?type=ds&ts=1384710467&from=tugs&uid=HitachiXHDT721050SLA360_STF310ME08SY2K08SY2KX&q={searchTerms}
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3317933&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPF17E1856-E25B-4E57-8800-2C7D0B67BB88&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3317933&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPF17E1856-E25B-4E57-8800-2C7D0B67BB88&q={searchTerms}&SSPV=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=foxtab&cd=2XzuyEtN2Y1L1QzuyB0AyBzytCzyzztB0EtAzz0EtBzyyCyCtN0D0Tzu0SyDtDzztN1L2XzutBtFtBtFtCtFyCtCzztN1L1Czu1L1C1H1B1QyDyE&cr=1997711720&ir=
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {75214358-A64F-D9CC-4FE4-1C34E896A35C} URL = 
BHO: Plus-HD-1.3 - {11111111-1111-1111-1111-110311121157} - C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-bho64.dll (Plus HD)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: SaveSense - {0f21b1e5-5afc-43c9-9c66-515046e92ec2} - C:\Program Files (x86)\SaveSense\SaveSenseIE.dll (SaveSense)
BHO-x32: Plus-HD-1.3 - {11111111-1111-1111-1111-110311121157} - C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-bho.dll (Plus HD)
BHO-x32: WebConnect - {2316c625-b487-4410-a1a5-ff040b65245f} - C:\Program Files (x86)\WebConnect\WebConnectBHO.dll (Web Connect)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\d7jaz0sd.default-1387616858619
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @nielsen/FirefoxTracker - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll No File
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=3 - C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=9 - C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Tobi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\do-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-1.3 - C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\d7jaz0sd.default-1387616858619\Extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com
FF HKLM-x32\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

Chrome: 
=======
CHR HomePage: hxxp://search.conduit.com/?ctid=CT3317933&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPF17E1856-E25B-4E57-8800-2C7D0B67BB88&SSPV=
CHR RestoreOnStartup: "hxxp://search.conduit.com/?ctid=CT3317933&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPF17E1856-E25B-4E57-8800-2C7D0B67BB88&SSPV="
CHR DefaultSearchKeyword: conduit.search
CHR DefaultSearchProvider: Conduit Search
CHR DefaultSearchURL: hxxp://search.conduit.com/Results.aspx?ctid=CT3317933&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPF17E1856-E25B-4E57-8800-2C7D0B67BB88&q=%s&SSPV=
CHR DefaultNewTabURL: 
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll No File
CHR Extension: (Google Docs) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Extended Protection) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0
CHR Extension: (Google Search) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: () - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjajpkikblccgefaibcafkfbanllpefi\1.0.0.2
CHR Extension: (Plus-HD-1.3) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.121_0
CHR Extension: (DivX Browser Bar DE) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkoahcaobjbihehldfimhblmhgalcipm\10.16.100.4_0
CHR Extension: (WebConnect) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon\1.0.0_0
CHR Extension: (Lightning Newtab) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.7.9_0
CHR Extension: (SaveSense) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\khcceooakamlehbimaepcldnnlnkcmfk\3.5.0.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (DealPly  Shopping) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojcgaoafcmbadjkfdippkdddgkeaipbn\3.5.0.0_0
CHR Extension: (MySearchDial __MSG_newtab__) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.3.4.1_0
CHR Extension: (Gmail) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Tobi\AppData\Local\mysearchdial-speeddial.crx
CHR HKLM-x32\...\Chrome\Extension: [gjajpkikblccgefaibcafkfbanllpefi] - C:\Users\Tobi\AppData\Roaming\7go\7go.crx
CHR HKLM-x32\...\Chrome\Extension: [hkoahcaobjbihehldfimhblmhgalcipm] - C:\Users\Tobi\AppData\Local\CRE\hkoahcaobjbihehldfimhblmhgalcipm.crx
CHR HKLM-x32\...\Chrome\Extension: [ieakfmpjhljbpbfpldjkddkjmmgjmgon] - C:\Program Files (x86)\WebConnect\ieakfmpjhljbpbfpldjkddkjmmgjmgon.crx
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
CHR HKLM-x32\...\Chrome\Extension: [khcceooakamlehbimaepcldnnlnkcmfk] - C:\Program Files (x86)\SaveSense\SaveSense.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR HKLM-x32\...\Chrome\Extension: [ojcgaoafcmbadjkfdippkdddgkeaipbn] - C:\Program Files (x86)\DealPly\DealPly.crx
CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Tobi\AppData\Local\mysearchdial-speeddial.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG)
S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88424 2013-10-10] (Perfect World Entertainment Inc)
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2251552 2013-12-16] (Conduit)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4868640 2013-08-25] (INCA Internet Co., Ltd.)
S2 savesenselive; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2013-12-21] (SaveSense)
S3 savesenselivem; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2013-12-21] (SaveSense)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [746392 2013-03-20] (Tunngle.net GmbH)
R2 Update WebConnect; C:\Program Files (x86)\WebConnect\updateWebConnect.exe [65320 2013-10-11] (WebConnect)
R2 Util WebConnect; C:\Program Files (x86)\WebConnect\bin\utilWebConnect.exe [65320 2013-10-11] (WebConnect)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-14] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
S3 cpuz136; C:\Program Files (x86)\CPUID\PC Wizard 2013\pcwiz_x64.sys [25320 2013-08-24] (CPUID)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-22] (DT Soft Ltd)
R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 cpuz135; \??\C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-29 14:31 - 2013-12-29 14:31 - 00050477 _____ C:\Users\Tobi\Downloads\Defogger.exe
2013-12-29 14:31 - 2013-12-29 14:31 - 00000540 _____ C:\Users\Tobi\Downloads\defogger_disable.log
2013-12-29 14:31 - 2013-12-29 14:31 - 00000168 _____ C:\Users\Tobi\defogger_reenable
2013-12-29 14:11 - 2013-12-29 14:12 - 00023755 _____ C:\Users\Tobi\Downloads\Addition.txt
2013-12-29 14:10 - 2013-12-29 14:32 - 00021381 _____ C:\Users\Tobi\Downloads\FRST.txt
2013-12-29 14:10 - 2013-12-29 14:10 - 00000000 ____D C:\FRST
2013-12-29 14:09 - 2013-12-29 14:09 - 01931262 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe
2013-12-27 16:04 - 2013-12-27 16:04 - 00001156 _____ C:\Users\Tobi\Desktop\PC Wizard 2013.lnk
2013-12-21 10:27 - 2013-12-21 10:27 - 00000029 _____ C:\Users\Tobi\AppData\Roaming\WB.CFG
2013-12-21 10:07 - 2013-12-21 10:07 - 00000000 ____D C:\Users\Tobi\Desktop\Alte Firefox-Daten
2013-12-21 07:28 - 2013-12-29 13:28 - 00001326 _____ C:\Windows\Tasks\Plus-HD-1.3-updater.job
2013-12-21 07:28 - 2013-12-29 13:28 - 00001228 _____ C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job
2013-12-21 07:28 - 2013-12-29 13:28 - 00001128 _____ C:\Windows\Tasks\Plus-HD-1.3-enabler.job
2013-12-21 07:28 - 2013-12-21 07:28 - 00004356 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-updater
2013-12-21 07:28 - 2013-12-21 07:28 - 00004258 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-codedownloader
2013-12-21 07:28 - 2013-12-21 07:28 - 00004158 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-enabler
2013-12-21 07:28 - 2013-12-21 07:28 - 00000000 ____D C:\Program Files (x86)\VideoPlayer
2013-12-21 07:27 - 2013-12-29 14:32 - 00000928 _____ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
2013-12-21 07:27 - 2013-12-29 14:27 - 00000288 _____ C:\Windows\Tasks\SaveSense.job
2013-12-21 07:27 - 2013-12-29 13:27 - 00002102 _____ C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
2013-12-21 07:27 - 2013-12-29 13:27 - 00001974 _____ C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job
2013-12-21 07:27 - 2013-12-29 09:27 - 00000924 _____ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
2013-12-21 07:27 - 2013-12-21 07:28 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\iSafe
2013-12-21 07:27 - 2013-12-21 07:28 - 00000000 ____D C:\Program Files (x86)\Plus-HD-1.3
2013-12-21 07:27 - 2013-12-21 07:27 - 00003924 _____ C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA
2013-12-21 07:27 - 2013-12-21 07:27 - 00003672 _____ C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore
2013-12-21 07:27 - 2013-12-21 07:27 - 00003224 _____ C:\Windows\System32\Tasks\SaveSense
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Windows\system32\log
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\SaveSense
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Users\Tobi\AppData\Local\SearchProtect
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Users\Tobi\AppData\Local\SaveSenseLive
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\ProgramData\SaveSenseLive
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Program Files (x86)\SaveSenseLive
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Program Files (x86)\SaveSense
2013-12-21 07:25 - 2013-12-21 07:25 - 00471560 _____ C:\Users\Tobi\Downloads\Setup.exe
2013-12-20 18:03 - 2013-12-20 18:03 - 00000000 ____D C:\Users\Tobi\Documents\RIFT
2013-12-20 17:50 - 2013-12-20 18:07 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\RIFT
2013-12-20 17:50 - 2013-12-20 17:50 - 00000525 _____ C:\Users\Tobi\Desktop\RIFT.lnk
2013-12-20 17:50 - 2013-12-20 17:50 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RIFT
2013-12-20 17:49 - 2013-12-20 17:49 - 19271320 _____ (Trion Worlds Inc.) C:\Users\Tobi\Downloads\RIFT-Install-59-s7c688.exe
2013-12-20 16:04 - 2013-12-20 17:00 - 00000000 ____D C:\Users\Tobi\Documents\DragonNest
2013-12-20 14:36 - 2013-12-20 14:52 - 329366329 _____ C:\Users\Tobi\Downloads\DragonNestEUGamigoSetup.exe
2013-12-20 11:07 - 2013-12-20 11:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-16 13:56 - 2013-12-16 13:56 - 08743640 _____ (Perfect World Entertainment) C:\Users\Tobi\Downloads\ArcInstall_v20131010a.exe
2013-12-16 13:56 - 2013-12-16 13:56 - 00001838 _____ C:\Users\Public\Desktop\Arc.lnk
2013-12-16 13:56 - 2013-12-16 13:56 - 00000000 ____D C:\Program Files (x86)\Perfect World Entertainment
2013-12-15 10:12 - 2013-12-16 09:23 - 00000354 _____ C:\console.log
2013-12-14 20:04 - 2013-12-14 20:04 - 00001307 _____ C:\Users\Tobi\Desktop\FurMark.lnk
2013-12-14 20:04 - 2013-12-14 20:04 - 00000000 ____D C:\Program Files (x86)\Geeks3D
2013-12-14 20:02 - 2013-12-14 20:02 - 00614784 _____ C:\Users\Tobi\Downloads\FurMark - CHIP-Downloader.exe
2013-12-14 17:04 - 2013-12-29 09:28 - 00000000 ____D C:\Users\Tobi\AppData\Local\LogMeIn Hamachi
2013-12-14 17:03 - 2013-12-14 17:03 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-14 16:46 - 2013-12-14 16:46 - 00000000 ____D C:\Users\Tobi\AppData\Local\LogMeIn
2013-12-14 16:46 - 2013-12-14 16:46 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-14 16:44 - 2013-12-14 16:44 - 06373376 _____ C:\Users\Tobi\Downloads\hamachi09.msi
2013-12-12 11:57 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 11:57 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 11:57 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-12 11:57 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-12 11:56 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 11:56 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-12 11:56 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 11:56 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 11:56 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-12 11:56 - 2013-10-25 07:17 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 11:56 - 2013-10-25 07:17 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-12 11:56 - 2013-10-25 07:17 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 11:56 - 2013-10-25 07:17 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 11:56 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-12 11:56 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-12 11:56 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-12 11:56 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-12 11:56 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-12 11:56 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-12 11:56 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-12 11:56 - 2013-10-25 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 11:56 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-12 11:56 - 2013-10-25 04:17 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-12 11:56 - 2013-10-25 03:49 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-12 11:55 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 11:55 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 11:55 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 11:55 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 11:55 - 2013-10-25 07:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 11:55 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-12 11:55 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-12 11:55 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 11:55 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-12 11:55 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-12 11:55 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-12 09:04 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 09:04 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 09:04 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 09:04 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 09:04 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 09:04 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 09:04 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 09:04 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 09:04 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 09:04 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 09:04 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 09:04 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 09:04 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 09:04 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 09:04 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 09:04 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 09:04 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 09:04 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 09:04 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-06 18:30 - 2009-10-01 18:57 - 00000000 ____D C:\Users\Tobi\Downloads\NBP_25
2013-12-06 18:30 - 2009-10-01 18:56 - 00000000 ____D C:\Users\Tobi\Downloads\NBP_33
2013-12-06 18:29 - 2013-12-06 18:29 - 11001934 _____ C:\Users\Tobi\Downloads\NobodysPerfekt(1).zip
2013-12-01 17:31 - 2013-12-01 17:31 - 00140579 _____ C:\Users\Tobi\Downloads\Titan Quest-IT german-txt.rar
2013-12-01 17:31 - 2007-03-07 23:14 - 00142396 _____ C:\Users\Tobi\Downloads\Text_DE.arc

==================== One Month Modified Files and Folders =======

2013-12-29 14:33 - 2013-12-29 14:10 - 00021381 _____ C:\Users\Tobi\Downloads\FRST.txt
2013-12-29 14:32 - 2013-12-21 07:27 - 00000928 _____ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
2013-12-29 14:31 - 2013-12-29 14:31 - 00050477 _____ C:\Users\Tobi\Downloads\Defogger.exe
2013-12-29 14:31 - 2013-12-29 14:31 - 00000540 _____ C:\Users\Tobi\Downloads\defogger_disable.log
2013-12-29 14:31 - 2013-12-29 14:31 - 00000168 _____ C:\Users\Tobi\defogger_reenable
2013-12-29 14:31 - 2013-04-18 07:08 - 00000000 ____D C:\Users\Tobi
2013-12-29 14:27 - 2013-12-21 07:27 - 00000288 _____ C:\Windows\Tasks\SaveSense.job
2013-12-29 14:12 - 2013-12-29 14:11 - 00023755 _____ C:\Users\Tobi\Downloads\Addition.txt
2013-12-29 14:10 - 2013-12-29 14:10 - 00000000 ____D C:\FRST
2013-12-29 14:09 - 2013-12-29 14:09 - 01931262 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe
2013-12-29 14:05 - 2013-04-30 07:34 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-29 14:05 - 2013-04-30 07:34 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-29 13:37 - 2013-04-18 12:19 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-29 13:28 - 2013-12-21 07:28 - 00001326 _____ C:\Windows\Tasks\Plus-HD-1.3-updater.job
2013-12-29 13:28 - 2013-12-21 07:28 - 00001228 _____ C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job
2013-12-29 13:28 - 2013-12-21 07:28 - 00001128 _____ C:\Windows\Tasks\Plus-HD-1.3-enabler.job
2013-12-29 13:27 - 2013-12-21 07:27 - 00002102 _____ C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
2013-12-29 13:27 - 2013-12-21 07:27 - 00001974 _____ C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job
2013-12-29 09:35 - 2009-07-14 05:45 - 00014608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-29 09:35 - 2009-07-14 05:45 - 00014608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-29 09:28 - 2013-12-14 17:04 - 00000000 ____D C:\Users\Tobi\AppData\Local\LogMeIn Hamachi
2013-12-29 09:27 - 2013-12-21 07:27 - 00000924 _____ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
2013-12-29 09:27 - 2013-11-18 12:18 - 00006431 _____ C:\Windows\setupact.log
2013-12-29 09:27 - 2013-04-26 08:56 - 00000286 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2013-12-29 09:27 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-28 21:04 - 2013-04-18 07:00 - 01408666 _____ C:\Windows\WindowsUpdate.log
2013-12-27 16:04 - 2013-12-27 16:04 - 00001156 _____ C:\Users\Tobi\Desktop\PC Wizard 2013.lnk
2013-12-27 16:04 - 2013-09-30 07:33 - 00000000 ____D C:\Program Files (x86)\CPUID
2013-12-24 15:50 - 2013-08-24 11:00 - 00007605 _____ C:\Users\Tobi\AppData\Local\resmon.resmoncfg
2013-12-21 10:27 - 2013-12-21 10:27 - 00000029 _____ C:\Users\Tobi\AppData\Roaming\WB.CFG
2013-12-21 10:07 - 2013-12-21 10:07 - 00000000 ____D C:\Users\Tobi\Desktop\Alte Firefox-Daten
2013-12-21 09:56 - 2013-11-18 12:18 - 00003500 _____ C:\Windows\PFRO.log
2013-12-21 07:28 - 2013-12-21 07:28 - 00004356 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-updater
2013-12-21 07:28 - 2013-12-21 07:28 - 00004258 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-codedownloader
2013-12-21 07:28 - 2013-12-21 07:28 - 00004158 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-enabler
2013-12-21 07:28 - 2013-12-21 07:28 - 00000000 ____D C:\Program Files (x86)\VideoPlayer
2013-12-21 07:28 - 2013-12-21 07:27 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\iSafe
2013-12-21 07:28 - 2013-12-21 07:27 - 00000000 ____D C:\Program Files (x86)\Plus-HD-1.3
2013-12-21 07:27 - 2013-12-21 07:27 - 00003924 _____ C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA
2013-12-21 07:27 - 2013-12-21 07:27 - 00003672 _____ C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore
2013-12-21 07:27 - 2013-12-21 07:27 - 00003224 _____ C:\Windows\System32\Tasks\SaveSense
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Windows\system32\log
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\SaveSense
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Users\Tobi\AppData\Local\SearchProtect
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Users\Tobi\AppData\Local\SaveSenseLive
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\ProgramData\SaveSenseLive
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Program Files (x86)\SaveSenseLive
2013-12-21 07:27 - 2013-12-21 07:27 - 00000000 ____D C:\Program Files (x86)\SaveSense
2013-12-21 07:25 - 2013-12-21 07:25 - 00471560 _____ C:\Users\Tobi\Downloads\Setup.exe
2013-12-21 07:22 - 2013-04-18 07:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 18:07 - 2013-12-20 17:50 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\RIFT
2013-12-20 18:03 - 2013-12-20 18:03 - 00000000 ____D C:\Users\Tobi\Documents\RIFT
2013-12-20 17:50 - 2013-12-20 17:50 - 00000525 _____ C:\Users\Tobi\Desktop\RIFT.lnk
2013-12-20 17:50 - 2013-12-20 17:50 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RIFT
2013-12-20 17:49 - 2013-12-20 17:49 - 19271320 _____ (Trion Worlds Inc.) C:\Users\Tobi\Downloads\RIFT-Install-59-s7c688.exe
2013-12-20 17:47 - 2013-10-13 17:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\gamigo
2013-12-20 17:00 - 2013-12-20 16:04 - 00000000 ____D C:\Users\Tobi\Documents\DragonNest
2013-12-20 15:54 - 2009-07-14 18:58 - 00696620 _____ C:\Windows\system32\perfh007.dat
2013-12-20 15:54 - 2009-07-14 18:58 - 00147916 _____ C:\Windows\system32\perfc007.dat
2013-12-20 15:54 - 2009-07-14 06:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-20 14:52 - 2013-12-20 14:36 - 329366329 _____ C:\Users\Tobi\Downloads\DragonNestEUGamigoSetup.exe
2013-12-20 11:07 - 2013-12-20 11:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-17 16:08 - 2013-05-07 14:14 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-17 16:08 - 2013-04-18 07:27 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-17 16:08 - 2013-04-18 07:27 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-17 16:00 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-16 15:56 - 2013-11-22 10:24 - 00317910 _____ C:\Windows\DirectX.log
2013-12-16 13:56 - 2013-12-16 13:56 - 08743640 _____ (Perfect World Entertainment) C:\Users\Tobi\Downloads\ArcInstall_v20131010a.exe
2013-12-16 13:56 - 2013-12-16 13:56 - 00001838 _____ C:\Users\Public\Desktop\Arc.lnk
2013-12-16 13:56 - 2013-12-16 13:56 - 00000000 ____D C:\Program Files (x86)\Perfect World Entertainment
2013-12-16 13:56 - 2013-04-18 08:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-16 11:05 - 2013-04-24 15:48 - 00000000 ____D C:\Users\Tobi\Downloads\Download
2013-12-16 09:23 - 2013-12-15 10:12 - 00000354 _____ C:\console.log
2013-12-16 08:56 - 2013-06-03 07:44 - 00000000 ____D C:\Users\Tobi\AppData\Local\Adobe
2013-12-16 08:56 - 2013-04-18 12:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-16 08:56 - 2013-04-18 12:19 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-16 08:56 - 2013-04-18 12:19 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-16 08:37 - 2013-08-06 14:18 - 00000000 ____D C:\Windows\system32\MRT
2013-12-16 08:35 - 2013-05-25 09:54 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-14 20:04 - 2013-12-14 20:04 - 00001307 _____ C:\Users\Tobi\Desktop\FurMark.lnk
2013-12-14 20:04 - 2013-12-14 20:04 - 00000000 ____D C:\Program Files (x86)\Geeks3D
2013-12-14 20:02 - 2013-12-14 20:02 - 00614784 _____ C:\Users\Tobi\Downloads\FurMark - CHIP-Downloader.exe
2013-12-14 17:03 - 2013-12-14 17:03 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-14 16:46 - 2013-12-14 16:46 - 00000000 ____D C:\Users\Tobi\AppData\Local\LogMeIn
2013-12-14 16:46 - 2013-12-14 16:46 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-14 16:44 - 2013-12-14 16:44 - 06373376 _____ C:\Users\Tobi\Downloads\hamachi09.msi
2013-12-14 12:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-12 14:04 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-12 14:03 - 2013-04-18 07:57 - 00000000 ____D C:\Windows\Panther
2013-12-12 14:02 - 2009-07-14 05:45 - 00283256 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 09:32 - 2013-08-23 09:05 - 00000754 _____ C:\Users\Tobi\Desktop\Games im Multiplayer.txt
2013-12-06 18:29 - 2013-12-06 18:29 - 11001934 _____ C:\Users\Tobi\Downloads\NobodysPerfekt(1).zip
2013-12-05 11:11 - 2013-11-13 16:29 - 00000022 _____ C:\Users\Tobi\Documents\aionmemo_d270313a.dat
2013-12-02 14:00 - 2013-04-30 07:34 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-02 14:00 - 2013-04-30 07:34 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-01 17:31 - 2013-12-01 17:31 - 00140579 _____ C:\Users\Tobi\Downloads\Titan Quest-IT german-txt.rar
2013-11-30 19:34 - 2013-11-25 15:36 - 00000000 ____D C:\Users\Tobi\Downloads\Data

Some content of TEMP:
====================
C:\Users\Tobi\AppData\Local\Temp\802c3d2e-de81-4e66-9d9b-c5bd9af76722.exe
C:\Users\Tobi\AppData\Local\Temp\avgnt.exe
C:\Users\Tobi\AppData\Local\Temp\BackupSetup.exe
C:\Users\Tobi\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Tobi\AppData\Local\Temp\nsg33B0.exe
C:\Users\Tobi\AppData\Local\Temp\nsm6188.exe
C:\Users\Tobi\AppData\Local\Temp\nsr391F.exe
C:\Users\Tobi\AppData\Local\Temp\nsw36CD.exe
C:\Users\Tobi\AppData\Local\Temp\nsw5F55.exe
C:\Users\Tobi\AppData\Local\Temp\nsw6521.exe
C:\Users\Tobi\AppData\Local\Temp\riftuninstall.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-24 16:20

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-12-2013
Ran by Tobi at 2013-12-29 14:11:48
Running from C:\Users\Tobi\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Aeria Ignite (x32 Version: 1.13.3296)
AION Free-To-Play (x32 Version: 2.70.0000)
Akamai NetSession Interface (HKCU)
AMD Accelerated Video Transcoding (Version: 12.5.100.30429)
AMD APP SDK Runtime (Version: 10.0.937.2)
AMD Catalyst Install Manager (Version: 8.0.911.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.80430.0002)
Arc (x32 Version: 1.0.0.5510)
Avira Free Antivirus (x32 Version: 14.0.2.286)
AVM FRITZ!WLAN (x32)
Borderlands - Game of the Year Edition (x32 Version: 1.4.1)
Borderlands 2 (x32)
Borderlands 2 All in One DLC-Pack Plus Update 12 (v.1.3.1 + Hotfix) 1.00 (x32 Version: 1.00)
Borderlands 2 Skin Packs (Madness & Supremacy & Domination) 1.00 (x32 Version: 1.00)
Borderlands 2 Tiny Tina's Assault on Dragon Keep DLC Plus Update Update 15 (v1.5.0) 1.00 (x32 Version: 1.00)
Borderlands 2 Update 14 (v1.5.0) Plus Ultimate Vault Hunters Upgrade Pack DLC Plus Psycho Pack DLC 1.00 (x32 Version: 1.00)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2013.0429.2313.39747)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0429.2313.39747)
Catalyst Control Center Localization All (x32 Version: 2013.0429.2313.39747)
CCC Help Chinese Standard (x32 Version: 2013.0429.2312.39747)
CCC Help Chinese Traditional (x32 Version: 2013.0429.2312.39747)
CCC Help Czech (x32 Version: 2013.0429.2312.39747)
CCC Help Danish (x32 Version: 2013.0429.2312.39747)
CCC Help Dutch (x32 Version: 2013.0429.2312.39747)
CCC Help English (x32 Version: 2013.0429.2312.39747)
CCC Help Finnish (x32 Version: 2013.0429.2312.39747)
CCC Help French (x32 Version: 2013.0429.2312.39747)
CCC Help German (x32 Version: 2013.0429.2312.39747)
CCC Help Greek (x32 Version: 2013.0429.2312.39747)
CCC Help Hungarian (x32 Version: 2013.0429.2312.39747)
CCC Help Italian (x32 Version: 2013.0429.2312.39747)
CCC Help Japanese (x32 Version: 2013.0429.2312.39747)
CCC Help Korean (x32 Version: 2013.0429.2312.39747)
CCC Help Norwegian (x32 Version: 2013.0429.2312.39747)
CCC Help Polish (x32 Version: 2013.0429.2312.39747)
CCC Help Portuguese (x32 Version: 2013.0429.2312.39747)
CCC Help Russian (x32 Version: 2013.0429.2312.39747)
CCC Help Spanish (x32 Version: 2013.0429.2312.39747)
CCC Help Swedish (x32 Version: 2013.0429.2312.39747)
CCC Help Thai (x32 Version: 2013.0429.2312.39747)
CCC Help Turkish (x32 Version: 2013.0429.2312.39747)
ccc-utility64 (Version: 2013.0429.2313.39747)
CCleaner (Version: 4.01)
CheckDrive (x32 Version: 4.4)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Dead Island Riptide (c) Deep Silver version 1 (x32 Version: 1)
Die Sims™ 3 (x32 Version: 1.50.56)
Die Sims™ 3 Traumkarrieren (x32 Version: 4.0.87)
DivX-Setup (x32 Version: 2.6.1.44)
DMUninstaller (x32)
Dungeon Siege III (x32)
Fable III (x32 Version: 1.0.0000.131)
Fable III (x32 Version: 1.0.0001.131)
Fable III (x32)
Fallout 3 - Unofficial Fallout 3 Patch (x32 Version: v1.2.0)
Fallout 3 (x32 Version: 1.00.0000)
Fallout Mod Manager 0.12.6 (x32)
Fallout Mod Manager 0.13.21 (x32)
Fallout New Vegas Game of the Year Edition (x32 Version: v1.4.0.525)
ffdshow v1.2.4422 [2012-04-09] (x32 Version: 1.2.4422.0)
Geeks3D FurMark 1.12.0 (x32)
Google Chrome (x32 Version: 31.0.1650.63)
Google Update Helper (x32 Version: 1.3.22.3)
Haali Media Splitter (x32)
Inversion (x32)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
JDownloader 2 (Version: 2.0)
Lilith The Will of Demon : Battles of Jalavia Masteries Edition (x32)
Lilith The Will of Demon : Battles of Jalavia v1.1 (x32)
Lilith The Will of Demon : Difficulty Changer v1.1d (x32)
LogMeIn Hamachi (x32 Version: 2.2.0.109)
McAfee Security Scan Plus (Version: 3.8.130.10)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.67.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)
Mozilla Maintenance Service (x32 Version: 26.0)
NC Launcher (GameForge) (x32)
Nexus Mod Manager (Version: 0.45.7)
NVIDIA PhysX (x32 Version: 9.13.0725)
PC Wizard 2013.2.12 (x32)
Plus-HD-1.3 (x32 Version: 1.31.153.4) <==== ATTENTION
Realtek Ethernet Controller Driver (x32 Version: 7.58.411.2012)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6650)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6873)
RESIDENT EVIL 5 (x32 Version: 1.0.0.129)
Resident Evil 6 (x32)
RIFT (HKCU)
S.T.A.L.K.E.R. Shadow of Chernobyl (x32 Version: v10006)
Sacred 2 (x32 Version: 2.64.0.0)
Saints Row IV Update and DLC pack (x32 Version: 1)
SaveSense (HKCU) <==== ATTENTION
SaveSense (remove only) (x32 Version: 5.3.0.6) <==== ATTENTION
Search Protect (x32 Version: 2.9.8.2) <==== ATTENTION
Shutdown7 2.0 (x32)
Skype™ 6.3 (x32 Version: 6.3.107)
Stalker Complete 2009 (x32)
Steam (x32 Version: 1.0.0.0)
TeamSpeak 3 Client (HKCU Version: 3.0.10)
The Elder Scrolls V Skyrim - Legendary Edition (Game of the Year) Deutsche Version 1.9.32.0.8 (x32 Version: 1.9.32.0.8)
Titan Quest (x32 Version: 1.00.0000)
Titan Quest Immortal Throne (x32 Version: 1.00.0000)
Torchlight 2 (x32 Version: 1.9.2.1)
Tunngle beta (x32)
Underlord 1.5 (x32)
Unity Web Player (HKCU Version: )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VideoPlayer v2.0.6 (x32 Version: v2.0.6)
WebConnect 3.0.0 (Version: 3.0.0) <==== ATTENTION
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Xiph.Org Open Codecs 0.85.17777 (x32 Version: 0.85.17777)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0090EB05-B543-412F-B4CB-E9C1C0B193F1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-30] (Google Inc.)
Task: {23A07DCC-6691-440A-B7EB-2C3A7780D0CE} - System32\Tasks\SaveSense => C:\Users\Tobi\AppData\Roaming\SaveSense\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {288EFE5C-D814-426D-94D4-E3DFAF4EC27B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-30] (Google Inc.)
Task: {2EF0132D-F2C4-434E-842B-0630B22E11A9} - System32\Tasks\{5EF0CF5C-7CB1-43DF-BF50-D6BAD5FF5C54} => E:\S.T.A.L.K.E.R. Shadow of Chernoby\bin\XR_3DA.exe
Task: {303790FD-4DA7-4BD8-90AF-ED11A26DA96D} - System32\Tasks\{F73D0128-7C34-46E5-B60A-FA843A81D355} => E:\S.T.A.L.K.E.R. Shadow of Chernoby\bin\XR_3DA.exe
Task: {38758903-59EA-48A5-8E95-0332DD67DBED} - System32\Tasks\Plus-HD-1.3-chromeinstaller => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-chromeinstaller.exe [2013-12-21] (Plus HD) <==== ATTENTION
Task: {4943C239-947A-443F-BD0C-C032A66DCF06} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2013-12-21] (SaveSense) <==== ATTENTION
Task: {5531F774-5632-4A5E-824B-8F2C0DFCA2AC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-16] (Adobe Systems Incorporated)
Task: {60F84026-47A4-49A3-8270-3E30D04F60E3} - System32\Tasks\Plus-HD-1.3-enabler => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-enabler.exe [2013-12-21] (Plus HD) <==== ATTENTION
Task: {690015CC-BA39-480F-808E-D411C2CC86E5} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2013-12-21] (SaveSense) <==== ATTENTION
Task: {908027CE-350B-4EB0-AB65-71DF397A5475} - System32\Tasks\Plus-HD-1.3-firefoxinstaller => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe [2013-12-21] (Plus HD) <==== ATTENTION
Task: {AB555E5C-81E8-415D-A8EA-90FE634CD5DC} - System32\Tasks\CheckDriveBackgroundGuard => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe [2012-11-09] (Abelssoft)
Task: {B19295B5-2751-4873-A3B1-57185B6D798F} - System32\Tasks\Plus-HD-1.3-codedownloader => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-codedownloader.exe [2013-12-21] (Plus HD) <==== ATTENTION
Task: {C03C1D09-A20F-4ACF-B85D-832C7DE5E4D7} - System32\Tasks\Plus-HD-1.3-updater => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-updater.exe [2013-12-21] (Plus HD) <==== ATTENTION
Task: {C17649B1-5338-447C-997D-1AF75CCFE616} - System32\Tasks\DealPlyUpdate => C:\Program
Task: {E73748C4-3C53-46AE-8945-4088FB685059} - System32\Tasks\{93E5C321-C809-4D38-88A0-90651DEAF0E2} => E:\S.T.A.L.K.E.R. Shadow of Chernoby\bin\XR_3DA.exe
Task: {F86E714E-6C79-4955-A556-3694232828D4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\CheckDriveBackgroundGuard.job => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-enabler.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-updater.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\SaveSense.job => C:\Users\Tobi\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-04-26 08:56 - 2012-11-09 10:10 - 00013776 _____ () C:\Program Files (x86)\CheckDrive\AbMessages.dll
2013-04-26 08:55 - 2012-11-09 10:10 - 00585680 _____ () C:\Program Files (x86)\CheckDrive\AbScheduler.dll
2013-06-18 15:49 - 2013-06-18 15:49 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-04-29 23:08 - 2013-04-29 23:08 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-04-18 07:27 - 2013-01-25 08:25 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-12-20 11:07 - 2013-12-20 11:07 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-12-11 09:37 - 2013-12-16 08:53 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData:gs5sys
AlternateDataStreams: C:\Users\All Users:gs5sys
AlternateDataStreams: C:\Users\Tobi:gs5sys
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:gs5sys
AlternateDataStreams: C:\ProgramData\Application Data:gs5sys
AlternateDataStreams: C:\ProgramData\TEMP:55B41E6A
AlternateDataStreams: C:\ProgramData\Templates:gs5sys
AlternateDataStreams: C:\ProgramData\Vorlagen:gs5sys
AlternateDataStreams: C:\Users\Public\Documents\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\Tobi\Anwendungsdaten:gs5sys
AlternateDataStreams: C:\Users\Tobi\Cookies:gs5sys
AlternateDataStreams: C:\Users\Tobi\Lokale Einstellungen:gs5sys
AlternateDataStreams: C:\Users\Tobi\Vorlagen:gs5sys
AlternateDataStreams: C:\Users\Tobi\Desktop\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\Tobi\AppData\Local:gs5sys
AlternateDataStreams: C:\Users\Tobi\AppData\Roaming:gs5sys
AlternateDataStreams: C:\Users\Tobi\AppData\Local\Anwendungsdaten:gs5sys
AlternateDataStreams: C:\Users\Tobi\AppData\Local\Verlauf:gs5sys
AlternateDataStreams: C:\Users\Tobi\Documents\desktop.ini:gs5sys

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/27/2013 08:39:04 AM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (12/25/2013 09:04:08 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 26.0.0.5087, Zeitstempel: 0x52a0d273
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0x1328
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (12/24/2013 07:35:09 AM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (12/23/2013 06:30:09 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16750, Zeitstempel: 0x5269c643
Name des fehlerhaften Moduls: Plus-HD-1.3-bho.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x52a4a373
Ausnahmecode: 0xc0000005
Fehleroffset: 0x043e8f18
ID des fehlerhaften Prozesses: 0xc2c
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (12/21/2013 07:27:45 AM) (Source: MsiInstaller) (User: Tobi-PC)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\GoogleUpdateHelper.msi

Error: (12/20/2013 03:34:21 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DragonNestEUGamigoSetup.exe, Version: 0.0.0.0, Zeitstempel: 0x4f6058fa
Name des fehlerhaften Moduls: SHFOLDER.DLL, Version: 6.0.2900.5512, Zeitstempel: 0x4802bdb7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001162
ID des fehlerhaften Prozesses: 0xf84
Startzeit der fehlerhaften Anwendung: 0xDragonNestEUGamigoSetup.exe0
Pfad der fehlerhaften Anwendung: DragonNestEUGamigoSetup.exe1
Pfad des fehlerhaften Moduls: DragonNestEUGamigoSetup.exe2
Berichtskennung: DragonNestEUGamigoSetup.exe3

Error: (12/20/2013 08:54:13 AM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (12/17/2013 09:06:13 AM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (12/16/2013 03:55:37 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = E:\Neverwinter\Neverwinter_en\directx_aug2009_redist\dxsetup.exe /silent; Beschreibung = DirectX wurde installiert; Fehler = 0x80070422).

Error: (12/16/2013 02:01:50 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = E:\Neverwinter\Neverwinter_en\directx_aug2009_redist\dxsetup.exe /silent; Beschreibung = DirectX wurde installiert; Fehler = 0x80070422).


System errors:
=============
Error: (12/29/2013 09:27:46 AM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (12/28/2013 05:52:05 PM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (12/28/2013 02:50:14 PM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (12/28/2013 08:37:18 AM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (12/27/2013 08:33:57 AM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (12/26/2013 09:10:46 AM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (12/25/2013 08:58:28 AM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (12/24/2013 06:10:08 PM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (12/24/2013 04:28:10 PM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (12/24/2013 03:42:39 PM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field


Microsoft Office Sessions:
=========================
Error: (12/27/2013 08:39:04 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x80070422

Error: (12/25/2013 09:04:08 AM) (Source: Application Error)(User: )
Description: firefox.exe26.0.0.508752a0d273ntdll.dll6.1.7601.18247521ea8e7c0000374000ce753132801cf01474a1a01baC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Windows\SysWOW64\ntdll.dll21180f34-6d3b-11e3-8a1a-001f3f055ae3

Error: (12/24/2013 07:35:09 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x80070422

Error: (12/23/2013 06:30:09 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE10.0.9200.167505269c643Plus-HD-1.3-bho.dll_unloaded0.0.0.052a4a373c0000005043e8f18c2c01cf00049a626c72C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEPlus-HD-1.3-bho.dllde5a99a4-6bf7-11e3-9a40-001f3f055ae3

Error: (12/21/2013 07:27:45 AM) (Source: MsiInstaller)(User: Tobi-PC)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\GoogleUpdateHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (12/20/2013 03:34:21 PM) (Source: Application Error)(User: )
Description: DragonNestEUGamigoSetup.exe0.0.0.04f6058faSHFOLDER.DLL6.0.2900.55124802bdb7c000000500001162f8401cefd908d1889e8C:\Users\Tobi\Downloads\DragonNestEUGamigoSetup.exeC:\Users\Tobi\Downloads\SHFOLDER.DLLd0125287-6983-11e3-aee3-001f3f055ae3

Error: (12/20/2013 08:54:13 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x80070422

Error: (12/17/2013 09:06:13 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x80070422

Error: (12/16/2013 03:55:37 PM) (Source: System Restore)(User: )
Description: E:\Neverwinter\Neverwinter_en\directx_aug2009_redist\dxsetup.exe /silentDirectX wurde installiert0x80070422

Error: (12/16/2013 02:01:50 PM) (Source: System Restore)(User: )
Description: E:\Neverwinter\Neverwinter_en\directx_aug2009_redist\dxsetup.exe /silentDirectX wurde installiert0x80070422


==================== Memory info =========================== 

Percentage of memory in use: 46%
Total physical RAM: 4094.49 MB
Available physical RAM: 2186.8 MB
Total Pagefile: 8187.16 MB
Available Pagefile: 5835.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:138.21 GB) (Free:32.74 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Volume) (Fixed) (Total:154.75 GB) (Free:26.87 GB) NTFS
Drive e: (Spiele) (Fixed) (Total:172.8 GB) (Free:20.88 GB) NTFS
Drive g: (raf-fnv_goty_b) (CDROM) (Total:2.01 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 8B3E8B3E)
Partition 1: (Active) - (Size=138 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=173 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=155 GB) - (Type=OF Extended)

==================== End Of Log ============================