Lollipop adware nach wifi remote installation

punkerchen

Hallo! Ich bitte um Hilfe!
Habe mir die Adware Lollipop eingefangen, als ich ein Desktop-Programm für eine gratis Wifi-Remote App installiert habe. Ich habe bereits einige ungewollt installierte Programme mit Hilfe der Systemsteuerung (Programme deinstallieren und ändern) entfernt, jedoch kommen immer wieder Pop-ups von angeblicher Sicherheitssoftware usw.

Defrogger wurde ausgeführt und virtuelle Laufwerke sind aus, FRST-Logs folgen:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 01
Ran by Dominik (administrator) on BLACKHOLE on 09-01-2014 11:56:19
Running from C:\Users\Dominik\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Logitech, Inc.) C:\Program Files\Logitech\FlowScroll\KhalScroll.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
() C:\Program Files (x86)\QPAD\QPAD MK-85 Gaming Keyboard Software\HID.exe
(Dropbox, Inc.) C:\Users\Dominik (Standard)\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
(Microsoft Corporation) C:\Windows\System32\slui.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
() C:\Program Files (x86)\foobar2000\foobar2000.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Blizzard Entertainment) D:\BattleNet\Battle.net\Battle.net.3968\Battle.net.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunes.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\javaw.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Blizzard Entertainment) D:\BattleNet\Battle.net\Battle.net.4047\Battle.net.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe
(Mozilla Messaging) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
() C:\Users\Dominik (Standard)\Desktop\shutdown.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Systweak) C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\Dominik\Downloads\Defogger.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [613536 2010-10-27] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379040 2010-10-27] (Atheros Commnucations)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [499608 2011-03-15] (Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [LogiScrollApp] - C:\Program Files\Logitech\FlowScroll\KhalScroll.exe [166680 2012-02-08] (Logitech, Inc.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028896 2013-07-27] (NVIDIA Corporation)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [ione] - C:\Program Files (x86)\QPAD\QPAD MK-85 Gaming Keyboard Software\HID.exe [1685504 2011-11-17] ()
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [415232 2009-07-14] (Microsoft Corporation)
HKLM\...\Runonce: [MSPCLOCK] - rundll32.exe streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000}
HKLM\...\Runonce: [MSPQM] - rundll32.exe streamci,StreamingDeviceSetup {DDF4358E-BB2C-11D0-A42F-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196}
HKLM\...\Runonce: [MSKSSRV] - rundll32.exe streamci,StreamingDeviceSetup {96E080C7-143C-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196}
HKLM\...\Runonce: [MSTEE.CxTransform] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [MSTEE.Splitter] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [WDM_DRMKAUD] - rundll32.exe streamci,StreamingDeviceSetup {EEC12DB6-AD9C-4168-8658-B03DAEF417FE},{ABD61E00-9350-47e2-A632-4438B90C6641},{FFBB6E3F-CCFE-4D84-90D9-421418B03A8E},C:\Windows\inf\WDMAUDIO.inf,WDM_DRMKAUD.Interface.Install
HKLM-x32\...\Runonce: [SpUninstallCleanUp] - REG delete HKEY_LOCAL_MACHINE\Software\SearchProtect /f [x]
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.)
HKCU\...\Run: [MediaFire Tray] - C:\Users\Dominik\AppData\Local\MediaFire Express\mf_systray.exe [2177608 2012-07-02] (MediaFire LLC)
HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\Dominik\AppData\Local\Smartbar\Application\Shopop.exe [21040 2013-12-31] (Smartbar)
HKCU\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Dominik\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKCU\...\Run: [lollipop] - C:\Users\Dominik\AppData\Local\Lollipop\Lollipop.exe [3507200 2014-01-09] ()
AppInit_DLLs: C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxinput.dll [653600 2013-07-27] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\NVSTRE~1\rxinput.dll [593696 2013-07-27] (NVIDIA Corporation)
Startup: C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
Startup: C:\Users\Dominik (Standard)\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Dominik\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)
Startup: C:\Users\Dominik (Standard)\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-search.com/?affID=119370&tt=040413_9114&babsrc=HP_ss&mntrId=405D00268333CC2A
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xEF7DAC8708DACC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119370&tt=040413_9114&babsrc=SP_ss&mntrId=405D00268333CC2A
BHO: Shopop WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Logitech Flow Scroll - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\LogiSmooth.dll (Logitech, Inc.)
BHO-x32: Shopop WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Logitech Flow Scroll - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\32-bit\LogiSmooth.dll (Logitech, Inc.)
Toolbar: HKLM - Shopop Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Shopop Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome:
=======
CHR HomePage: hxxp://www.delta-search.com/?affID=119370&tt=040413_9114&babsrc=HP_ss&mntrId=405D00268333CC2A
CHR DefaultSearchKeyword: delta-search.com
CHR DefaultSearchProvider: Delta Search
CHR DefaultSearchURL: hxxp://www.delta-search.com/?q={searchTerms}&affID=119370&tt=040413_9114&babsrc=SP_ss&mntrId=405D00268333CC2A
CHR DefaultNewTabURL:
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_278.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Extension: (Shopop Widget) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0
CHR Extension: (Logitech Flow Scroll) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\geooogfhpjdpeiphckpbgkhpbeobcaoi\4.0.33_0
CHR Extension: (Google Wallet) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR HKLM-x32\...\Chrome\Extension: [geooogfhpjdpeiphckpbgkhpbeobcaoi] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [38440 2013-09-19] (Just Develop It)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [398184 2012-12-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [682344 2012-12-14] (Malwarebytes Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14984480 2013-07-27] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-09-05] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R3 I1KBFLTR; C:\Windows\System32\drivers\I1KBFLTR.sys [29440 2011-10-19] ()
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24176 2012-12-14] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-05-14] (NVIDIA Corporation)
R0 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [75384 2009-02-03] (Protection Technology (StarForce))
S0 sfsync02; C:\Windows\System32\drivers\sfsync02.sys [22936 2006-07-10] (Protection Technology)
R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [107384 2007-02-08] (Protection Technology (StarForce))
S3 WinRing0_1_2_0; C:\Program Files (x86)\RealTemp_370\WinRing0x64.sys [14544 2008-07-26] (OpenLibSys.org)
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-09 11:56 - 2014-01-09 11:56 - 00000476 _____ C:\Users\Dominik\Downloads\defogger_disable.log
2014-01-09 11:56 - 2014-01-09 11:56 - 00000000 _____ C:\Users\Dominik\defogger_reenable
2014-01-09 11:55 - 2014-01-09 11:55 - 00050477 _____ C:\Users\Dominik\Downloads\Defogger.exe
2014-01-09 01:30 - 2014-01-09 01:34 - 00030795 _____ C:\Users\Dominik\Downloads\Addition.txt
2014-01-09 01:28 - 2014-01-09 11:56 - 00020232 _____ C:\Users\Dominik\Downloads\FRST.txt
2014-01-09 01:27 - 2014-01-09 01:27 - 00000000 ____D C:\FRST
2014-01-09 01:25 - 2014-01-09 01:25 - 01931770 _____ (Farbar) C:\Users\Dominik\Downloads\FRST64.exe
2014-01-09 01:19 - 2014-01-09 01:29 - 00001985 _____ C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2014-01-09 01:19 - 2014-01-09 01:19 - 00000000 ____D C:\Users\Dominik\AppData\Local\Lollipop
2014-01-09 01:19 - 2014-01-09 01:19 - 00000000 ____D C:\Users\Dominik\AppData\Local\cache
2014-01-09 01:19 - 2014-01-09 01:19 - 00000000 ____D C:\Users\Dominik\.android
2014-01-09 01:18 - 2014-01-09 11:09 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\newnext.me
2014-01-09 01:18 - 2014-01-09 01:22 - 00000000 ____D C:\Users\Dominik\AppData\Local\Mobogenie
2014-01-09 01:18 - 2014-01-09 01:22 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2014-01-09 01:18 - 2014-01-09 01:19 - 00000000 ____D C:\Users\Dominik\AppData\Local\genienext
2014-01-09 01:18 - 2014-01-09 01:18 - 00000000 ____D C:\Users\Dominik\Documents\Mobogenie
2014-01-09 01:18 - 2014-01-09 01:18 - 00000000 _____ C:\Users\Dominik\daemonprocess.txt
2014-01-09 01:17 - 2014-01-09 01:17 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2014-01-09 01:17 - 2014-01-09 01:17 - 00000000 ____D C:\Users\Dominik\AppData\Local\Smartbar
2014-01-09 01:16 - 2014-01-09 01:16 - 00003330 _____ C:\Windows\System32\Tasks\Advanced System Protector
2014-01-09 01:16 - 2014-01-09 01:16 - 00001211 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-01-09 01:16 - 2014-01-09 01:16 - 00001097 _____ C:\Users\Dominik\Desktop\MyPC Backup.lnk
2014-01-09 01:16 - 2014-01-09 01:16 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-01-09 01:16 - 2014-01-09 01:16 - 00000000 ____D C:\ProgramData\Systweak
2014-01-09 01:16 - 2014-01-09 01:16 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2014-01-09 01:16 - 2014-01-09 01:16 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2014-01-09 01:16 - 2012-07-25 12:03 - 00016896 _____ C:\Windows\system32\sasnative64.exe
2014-01-09 01:15 - 2014-01-09 01:21 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2014-01-09 01:15 - 2014-01-09 01:20 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Systweak
2014-01-09 01:15 - 2013-08-22 18:36 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-01-09 01:14 - 2014-01-09 01:14 - 00001352 _____ C:\Users\Dominik\Desktop\Continue Mouse server.lnk
2014-01-09 01:08 - 2014-01-09 01:08 - 00000000 ___RD C:\Users\Dominik (Standard)\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-12-26 21:53 - 2013-12-26 21:54 - 23060265 _____ C:\Users\Dominik\Downloads\LEFT FOR DEAD - 1 -2013.rar
2013-12-26 17:20 - 2013-12-26 17:32 - 111208561 _____ C:\Users\Dominik\Downloads\BAD MANNERS - YOU'RE JUST TOO GOOD TO BE TRUE -2013.rar
2013-12-26 17:20 - 2013-12-26 17:31 - 66146226 _____ C:\Users\Dominik\Downloads\SLACKERS - BED IS A BOAT -2013.rar
2013-12-26 17:20 - 2013-12-26 17:29 - 44854281 _____ C:\Users\Dominik\Downloads\TRANSIT - FUTURES AND SUTURES EP -2013.rar
2013-12-26 17:20 - 2013-12-26 17:28 - 48242367 _____ C:\Users\Dominik\Downloads\AUTISTIC YOUTH - NONAGE -2013.rar
2013-12-26 17:20 - 2013-12-26 17:28 - 33628934 _____ C:\Users\Dominik\Downloads\BOLLOCKS - WE ARE NOT A FUCKING NUMBER -2013.rar
2013-12-26 17:20 - 2013-12-26 17:27 - 26564566 _____ C:\Users\Dominik\Downloads\SPLIT - ANTI-FLAG & WORSHIP - 20 YEARS OF HELL VOL.3 -2013.rar
2013-12-26 17:20 - 2013-12-26 17:26 - 23287172 _____ C:\Users\Dominik\Downloads\JIMMY EAT WORLD - LAST CHRISTMAS EP -2013.rar
2013-12-25 12:04 - 2013-12-26 22:14 - 701531371 _____ C:\Users\Dominik\Downloads\OneClickMoviez.Com-CBGB-GECKOS.mkv
2013-12-25 12:03 - 2013-12-25 12:23 - 115880536 _____ C:\Users\Dominik\Downloads\RAT-ZINGER - CRONICAS DE LA DESTRUCCION -2013.rar
2013-12-25 12:03 - 2013-12-25 12:15 - 84725736 _____ C:\Users\Dominik\Downloads\AGROTOXICO - XX -2013.rar
2013-12-25 12:03 - 2013-12-25 12:09 - 32389183 _____ C:\Users\Dominik\Downloads\BRIXTON CATS - QUARTIER MAUDIT -2014.rar
2013-12-25 12:03 - 2013-12-25 12:08 - 35596408 _____ C:\Users\Dominik\Downloads\BRAVES - BRAVES -2013.rar
2013-12-25 12:03 - 2013-12-25 12:03 - 05373094 _____ C:\Users\Dominik\Downloads\BAD RELIGION - FATHER CHRISTMAS -2013.rar
2013-12-19 13:09 - 2013-12-19 13:33 - 76964494 _____ C:\Users\Dominik\Downloads\HOUSE AND HAWK - HOUSE AND HAWK -2013.rar
2013-12-19 13:09 - 2013-12-19 13:18 - 40643709 _____ C:\Users\Dominik\Downloads\DEAD WORDS - THERE MUST BE SOMEONE OUT THERE -2013.rar
2013-12-19 13:09 - 2013-12-19 13:13 - 25218612 _____ C:\Users\Dominik\Downloads\HELL - SOUTHERN MEDICINE EP -2013.rar
2013-12-19 13:09 - 2013-12-19 13:11 - 102350677 _____ C:\Users\Dominik\Downloads\OneClickMoviez.Com-santi-machetekills.avi.part
2013-12-18 12:44 - 2013-12-18 12:43 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-18 12:44 - 2013-12-18 12:43 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-18 12:44 - 2013-12-18 12:43 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-18 12:44 - 2013-12-18 12:43 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-18 12:34 - 2013-12-18 12:44 - 00000000 ____D C:\ProgramData\Oracle
2013-12-18 12:34 - 2013-12-18 12:33 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-18 12:34 - 2013-12-18 12:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-18 12:34 - 2013-12-18 12:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-18 12:34 - 2013-12-18 12:33 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-12-18 12:33 - 2013-12-18 12:33 - 00000000 ____D C:\Program Files\Java
2013-12-17 03:02 - 2013-12-17 03:02 - 06314969 _____ C:\Users\Dominik (Standard)\Downloads\Love A - Sweet Jesus (1).zip
2013-12-17 03:01 - 2013-12-17 03:02 - 18315367 _____ C:\Users\Dominik (Standard)\Downloads\Love A - Sweet Jesus.zip
2013-12-11 22:44 - 2013-12-11 22:44 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Local\Blizzard
2013-12-11 21:08 - 2013-12-11 21:08 - 00000889 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2013-12-11 21:04 - 2014-01-09 11:56 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Local\Battle.net
2013-12-11 21:04 - 2013-12-11 21:05 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Roaming\Battle.net
2013-12-11 21:04 - 2013-12-11 21:04 - 00000781 _____ C:\Users\Public\Desktop\Battle.net.lnk
2013-12-11 21:04 - 2013-12-11 21:04 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Local\Blizzard Entertainment
2013-12-11 21:04 - 2013-12-11 21:04 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-12-11 21:01 - 2013-12-11 21:01 - 05933240 _____ (Blizzard Entertainment) C:\Users\Dominik (Standard)\Downloads\Hearthstone-Beta-Setup-deDE.exe
2013-12-11 21:00 - 2013-12-11 21:00 - 00000000 ____D C:\ProgramData\Battle.net
2013-12-11 17:02 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 17:02 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 17:02 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 17:02 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 17:02 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 17:02 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 17:02 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 17:02 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 17:02 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 17:02 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 17:02 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 17:02 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 17:02 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 17:02 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 17:02 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 17:02 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 17:02 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 17:02 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 17:02 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 17:02 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 17:02 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 17:02 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 17:02 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 17:02 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 17:02 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 17:02 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 17:02 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 17:02 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 17:02 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 17:02 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 17:02 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 13:12 - 2013-12-11 13:12 - 00000394 _____ C:\Users\Dominik (Standard)\Downloads\Wechseldatenträger (M) - Verknüpfung.lnk
2013-12-11 12:18 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 12:18 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 12:18 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 12:18 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 12:18 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 12:18 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 12:18 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 12:18 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 12:18 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 12:18 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 12:18 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 12:18 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 12:18 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 12:18 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 12:18 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-10 10:34 - 2013-12-10 10:34 - 00000222 _____ C:\Users\Dominik (Standard)\Desktop\Path of Exile.url

==================== One Month Modified Files and Folders =======

2014-01-09 11:56 - 2014-01-09 11:56 - 00000476 _____ C:\Users\Dominik\Downloads\defogger_disable.log
2014-01-09 11:56 - 2014-01-09 11:56 - 00000000 _____ C:\Users\Dominik\defogger_reenable
2014-01-09 11:56 - 2014-01-09 01:28 - 00020232 _____ C:\Users\Dominik\Downloads\FRST.txt
2014-01-09 11:56 - 2013-12-11 21:04 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Local\Battle.net
2014-01-09 11:56 - 2012-01-23 19:52 - 00000000 ____D C:\Users\Dominik
2014-01-09 11:55 - 2014-01-09 11:55 - 00050477 _____ C:\Users\Dominik\Downloads\Defogger.exe
2014-01-09 11:55 - 2012-01-24 12:06 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Roaming\Skype
2014-01-09 11:43 - 2012-06-24 22:57 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 11:25 - 2012-10-03 12:57 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-09 11:21 - 2012-10-03 12:57 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-09 11:19 - 2012-01-24 02:45 - 02078431 _____ C:\Windows\WindowsUpdate.log
2014-01-09 11:09 - 2014-01-09 01:18 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\newnext.me
2014-01-09 11:09 - 2012-01-23 20:29 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-01-09 11:09 - 2009-07-14 05:45 - 00026112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-09 11:09 - 2009-07-14 05:45 - 00026112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-09 01:34 - 2014-01-09 01:30 - 00030795 _____ C:\Users\Dominik\Downloads\Addition.txt
2014-01-09 01:33 - 2012-01-24 02:00 - 00000000 ____D C:\Users\Dominik (Standard)
2014-01-09 01:29 - 2014-01-09 01:19 - 00001985 _____ C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2014-01-09 01:27 - 2014-01-09 01:27 - 00000000 ____D C:\FRST
2014-01-09 01:25 - 2014-01-09 01:25 - 01931770 _____ (Farbar) C:\Users\Dominik\Downloads\FRST64.exe
2014-01-09 01:22 - 2014-01-09 01:18 - 00000000 ____D C:\Users\Dominik\AppData\Local\Mobogenie
2014-01-09 01:22 - 2014-01-09 01:18 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2014-01-09 01:21 - 2014-01-09 01:15 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2014-01-09 01:20 - 2014-01-09 01:15 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Systweak
2014-01-09 01:19 - 2014-01-09 01:19 - 00000000 ____D C:\Users\Dominik\AppData\Local\Lollipop
2014-01-09 01:19 - 2014-01-09 01:19 - 00000000 ____D C:\Users\Dominik\AppData\Local\cache
2014-01-09 01:19 - 2014-01-09 01:19 - 00000000 ____D C:\Users\Dominik\.android
2014-01-09 01:19 - 2014-01-09 01:18 - 00000000 ____D C:\Users\Dominik\AppData\Local\genienext
2014-01-09 01:18 - 2014-01-09 01:18 - 00000000 ____D C:\Users\Dominik\Documents\Mobogenie
2014-01-09 01:18 - 2014-01-09 01:18 - 00000000 _____ C:\Users\Dominik\daemonprocess.txt
2014-01-09 01:17 - 2014-01-09 01:17 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2014-01-09 01:17 - 2014-01-09 01:17 - 00000000 ____D C:\Users\Dominik\AppData\Local\Smartbar
2014-01-09 01:16 - 2014-01-09 01:16 - 00003330 _____ C:\Windows\System32\Tasks\Advanced System Protector
2014-01-09 01:16 - 2014-01-09 01:16 - 00001211 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-01-09 01:16 - 2014-01-09 01:16 - 00001097 _____ C:\Users\Dominik\Desktop\MyPC Backup.lnk
2014-01-09 01:16 - 2014-01-09 01:16 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-01-09 01:16 - 2014-01-09 01:16 - 00000000 ____D C:\ProgramData\Systweak
2014-01-09 01:16 - 2014-01-09 01:16 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2014-01-09 01:16 - 2014-01-09 01:16 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2014-01-09 01:16 - 2012-01-23 19:52 - 00000000 ___RD C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-09 01:14 - 2014-01-09 01:14 - 00001352 _____ C:\Users\Dominik\Desktop\Continue Mouse server.lnk
2014-01-09 01:09 - 2012-01-24 02:01 - 00000000 ____D C:\Users\Dominik (Standard)\Documents\Bluetooth Folder
2014-01-09 01:08 - 2014-01-09 01:08 - 00000000 ___RD C:\Users\Dominik (Standard)\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-01-08 22:27 - 2009-07-14 05:51 - 00116274 _____ C:\Windows\setupact.log
2014-01-08 18:25 - 2012-01-25 13:26 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Roaming\vlc
2014-01-08 15:53 - 2012-01-28 22:06 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Roaming\TS3Client
2014-01-08 10:49 - 2012-08-26 14:28 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-08 01:24 - 2012-10-03 12:57 - 00002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-30 02:08 - 2013-07-06 23:00 - 00000000 ____D C:\Users\Dominik (Standard)\Documents\My Games
2013-12-26 22:14 - 2013-12-25 12:04 - 701531371 _____ C:\Users\Dominik\Downloads\OneClickMoviez.Com-CBGB-GECKOS.mkv
2013-12-26 21:54 - 2013-12-26 21:53 - 23060265 _____ C:\Users\Dominik\Downloads\LEFT FOR DEAD - 1 -2013.rar
2013-12-26 17:32 - 2013-12-26 17:20 - 111208561 _____ C:\Users\Dominik\Downloads\BAD MANNERS - YOU'RE JUST TOO GOOD TO BE TRUE -2013.rar
2013-12-26 17:31 - 2013-12-26 17:20 - 66146226 _____ C:\Users\Dominik\Downloads\SLACKERS - BED IS A BOAT -2013.rar
2013-12-26 17:29 - 2013-12-26 17:20 - 44854281 _____ C:\Users\Dominik\Downloads\TRANSIT - FUTURES AND SUTURES EP -2013.rar
2013-12-26 17:28 - 2013-12-26 17:20 - 48242367 _____ C:\Users\Dominik\Downloads\AUTISTIC YOUTH - NONAGE -2013.rar
2013-12-26 17:28 - 2013-12-26 17:20 - 33628934 _____ C:\Users\Dominik\Downloads\BOLLOCKS - WE ARE NOT A FUCKING NUMBER -2013.rar
2013-12-26 17:27 - 2013-12-26 17:20 - 26564566 _____ C:\Users\Dominik\Downloads\SPLIT - ANTI-FLAG & WORSHIP - 20 YEARS OF HELL VOL.3 -2013.rar
2013-12-26 17:26 - 2013-12-26 17:20 - 23287172 _____ C:\Users\Dominik\Downloads\JIMMY EAT WORLD - LAST CHRISTMAS EP -2013.rar
2013-12-26 17:19 - 2012-01-24 11:12 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Local\Adobe
2013-12-25 12:23 - 2013-12-25 12:03 - 115880536 _____ C:\Users\Dominik\Downloads\RAT-ZINGER - CRONICAS DE LA DESTRUCCION -2013.rar
2013-12-25 12:15 - 2013-12-25 12:03 - 84725736 _____ C:\Users\Dominik\Downloads\AGROTOXICO - XX -2013.rar
2013-12-25 12:09 - 2013-12-25 12:03 - 32389183 _____ C:\Users\Dominik\Downloads\BRIXTON CATS - QUARTIER MAUDIT -2014.rar
2013-12-25 12:08 - 2013-12-25 12:03 - 35596408 _____ C:\Users\Dominik\Downloads\BRAVES - BRAVES -2013.rar
2013-12-25 12:03 - 2013-12-25 12:03 - 05373094 _____ C:\Users\Dominik\Downloads\BAD RELIGION - FATHER CHRISTMAS -2013.rar
2013-12-19 13:33 - 2013-12-19 13:09 - 76964494 _____ C:\Users\Dominik\Downloads\HOUSE AND HAWK - HOUSE AND HAWK -2013.rar
2013-12-19 13:18 - 2013-12-19 13:09 - 40643709 _____ C:\Users\Dominik\Downloads\DEAD WORDS - THERE MUST BE SOMEONE OUT THERE -2013.rar
2013-12-19 13:13 - 2013-12-19 13:09 - 25218612 _____ C:\Users\Dominik\Downloads\HELL - SOUTHERN MEDICINE EP -2013.rar
2013-12-19 13:11 - 2013-12-19 13:09 - 102350677 _____ C:\Users\Dominik\Downloads\OneClickMoviez.Com-santi-machetekills.avi.part
2013-12-19 11:05 - 2012-01-24 02:14 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-12-18 17:17 - 2013-05-02 10:17 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-18 17:17 - 2013-03-27 10:52 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-18 17:17 - 2013-03-27 10:52 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-18 12:44 - 2013-12-18 12:34 - 00000000 ____D C:\ProgramData\Oracle
2013-12-18 12:43 - 2013-12-18 12:44 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-18 12:43 - 2013-12-18 12:44 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-18 12:43 - 2013-12-18 12:44 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-18 12:43 - 2013-12-18 12:44 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-18 12:43 - 2012-01-24 02:21 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-18 12:33 - 2013-12-18 12:34 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-18 12:33 - 2013-12-18 12:34 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-18 12:33 - 2013-12-18 12:34 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-18 12:33 - 2013-12-18 12:34 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-12-18 12:33 - 2013-12-18 12:33 - 00000000 ____D C:\Program Files\Java
2013-12-18 12:14 - 2012-02-13 20:16 - 00000000 ___RD C:\Users\Dominik (Standard)\Dropbox
2013-12-18 12:14 - 2012-02-13 20:08 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Roaming\Dropbox
2013-12-18 12:07 - 2012-01-23 20:38 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-18 12:07 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-17 16:49 - 2010-11-21 07:50 - 00696848 _____ C:\Windows\system32\perfh007.dat
2013-12-17 16:49 - 2010-11-21 07:50 - 00148144 _____ C:\Windows\system32\perfc007.dat
2013-12-17 16:49 - 2009-07-14 06:13 - 01613412 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-17 03:02 - 2013-12-17 03:02 - 06314969 _____ C:\Users\Dominik (Standard)\Downloads\Love A - Sweet Jesus (1).zip
2013-12-17 03:02 - 2013-12-17 03:01 - 18315367 _____ C:\Users\Dominik (Standard)\Downloads\Love A - Sweet Jesus.zip
2013-12-15 03:04 - 2013-08-15 02:02 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 03:02 - 2012-01-23 21:06 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-12 23:04 - 2012-01-25 21:26 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Roaming\foobar2000
2013-12-12 02:29 - 2013-08-24 20:57 - 00001076 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-12-11 22:44 - 2013-12-11 22:44 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Local\Blizzard
2013-12-11 22:43 - 2012-06-24 22:57 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 22:43 - 2012-04-12 01:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 22:43 - 2012-01-23 22:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 21:08 - 2013-12-11 21:08 - 00000889 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2013-12-11 21:05 - 2013-12-11 21:04 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Roaming\Battle.net
2013-12-11 21:04 - 2013-12-11 21:04 - 00000781 _____ C:\Users\Public\Desktop\Battle.net.lnk
2013-12-11 21:04 - 2013-12-11 21:04 - 00000000 ____D C:\Users\Dominik (Standard)\AppData\Local\Blizzard Entertainment
2013-12-11 21:04 - 2013-12-11 21:04 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-12-11 21:01 - 2013-12-11 21:01 - 05933240 _____ (Blizzard Entertainment) C:\Users\Dominik (Standard)\Downloads\Hearthstone-Beta-Setup-deDE.exe
2013-12-11 21:00 - 2013-12-11 21:00 - 00000000 ____D C:\ProgramData\Battle.net
2013-12-11 20:52 - 2012-01-24 11:56 - 00000000 ____D C:\ProgramData\Skype
2013-12-11 20:51 - 2013-02-14 11:55 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-11 20:47 - 2009-07-14 05:45 - 04855928 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 13:12 - 2013-12-11 13:12 - 00000394 _____ C:\Users\Dominik (Standard)\Downloads\Wechseldatenträger (M) - Verknüpfung.lnk
2013-12-10 10:34 - 2013-12-10 10:34 - 00000222 _____ C:\Users\Dominik (Standard)\Desktop\Path of Exile.url

ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-3284314702-2009516747-2173830343-1004\$f48d662592a3029eb3bd7026b78402a0

Files to move or delete:
====================
C:\ProgramData\9436105.bat
C:\ProgramData\9436105.js
C:\ProgramData\9436105.pad
C:\ProgramData\9436105.reg
C:\Users\Dominik (Standard)\shutdown.exe


Some content of TEMP:
====================
C:\Users\Dominik\AppData\Local\Temp\1_Offer_8.exe
C:\Users\Dominik\AppData\Local\Temp\AskSLib.dll
C:\Users\Dominik\AppData\Local\Temp\BackupSetup.exe
C:\Users\Dominik\AppData\Local\Temp\DownloadManager.exe
C:\Users\Dominik\AppData\Local\Temp\LMkRstPt.exe
C:\Users\Dominik\AppData\Local\Temp\nse39B0.exe
C:\Users\Dominik\AppData\Local\Temp\nsm9BCD.exe
C:\Users\Dominik\AppData\Local\Temp\nsnE5D9.exe
C:\Users\Dominik\AppData\Local\Temp\nss99CA.exe
C:\Users\Dominik\AppData\Local\Temp\nsxE7EC.exe
C:\Users\Dominik\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Dominik\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Dominik\AppData\Local\Temp\nvStereoApiI64.dll
C:\Users\Dominik\AppData\Local\Temp\nvStInst.exe
C:\Users\Dominik\AppData\Local\Temp\qc_a402013b_7656_4f6f_b57f_5a8ef69f5fc4_64.exe
C:\Users\Dominik\AppData\Local\Temp\SearchProtectINT.exe
C:\Users\Dominik\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Dominik\AppData\Local\Temp\sfextra.dll
C:\Users\Dominik\AppData\Local\Temp\sonarinst.exe
C:\Users\Dominik\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Dominik\AppData\Local\Temp\uninst1.exe
C:\Users\Dominik\AppData\Local\Temp\vlc-2.0.2-win32.exe
C:\Users\Dominik\AppData\Local\Temp\_is889F.exe
C:\Users\Dominik (Standard)\AppData\Local\Temp\avgnt.exe
C:\Users\Dominik (Standard)\AppData\Local\Temp\drm_dyndata_7390006.dll
C:\Users\Dominik (Standard)\AppData\Local\Temp\vlc-2.1.1-win32.exe
C:\Users\Dominik (Standard)\AppData\Local\Temp\vlc-2.1.2-win32.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-20 00:01

==================== End Of Log ============================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-01-2014 01
Ran by Dominik at 2014-01-09 11:56:50
Running from C:\Users\Dominik\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

µTorrent (x32 Version: 3.3.0.29082 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (x32 Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 2.5.1.17730 - Adobe Systems Inc.) Hidden
Adobe Community Help (x32 Version: 3.4.980 - Adobe Systems Incorporated.)
Adobe Community Help (x32 Version: 3.4.980 - Adobe Systems Incorporated.) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Photoshop CS5.1 (x32 Version: 12.1 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 3.6 64-bit (Version: 3.6.1 - Adobe)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated)
Advanced System Protector (x32 Version: 2.1.1000.12580 - Systweak Software) <==== ATTENTION
Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17 - Amazon Services LLC)
Angry Video Game Nerd Adventures (x32 Version: - FreakZone Games)
Apple Application Support (x32 Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ARMA 2 (x32 Version: - Bohemia Interactive)
ARMA 2: Operation Arrowhead (x32 Version: - Bohemia Interactive)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.10.0.0 - Asmedia Technology)
Auto Shutdown Free Version 2.4.0.1 (x32 Version: 2.4.0.1 - Auto Shutdown Pro)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Battle.net (x32 Version: - Blizzard Entertainment)
Battlelog Web Plugins (x32 Version: 2.1.7 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (x32 Version: - )
BattlEye Uninstall (x32 Version: - )
Bluetooth Win7 Suite (64) (Version: 7.2.0.40 - Atheros Communications)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Borderlands 2 (x32 Version: - Gearbox Software)
CameraHelperMsi (x32 Version: 13.50.854.0 - Logitech) Hidden
CDBurnerXP (x32 Version: 4.5.2.4214 - CDBurnerXP)
CDex - Open Source Digital Audio CD Extractor (x32 Version: 1.70.4.2009 - Georgy Berdyshev)
DayZ Commander (x32 Version: 0.9.80 - Dotjosh Studios)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESN Sonar (x32 Version: 0.70.4 - ESN Social Software AB)
foobar2000 v1.1.10 (x32 Version: 1.1.10 - Peter Pawlowski)
Google Chrome (x32 Version: 32.0.1700.72 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
GT Legends 1.0.0.0 (x32 Version: v1.0.0.0 - 10tacle Studios Publishing)
Hearthstone (x32 Version: - Blizzard Entertainment)
Intel(R) Network Connections 15.6.25.0 (Version: 15.6.25.0 - Intel)
Intel(R) Network Connections 15.6.25.0 (Version: 15.6.25.0 - Intel) Hidden
IrfanView (remove only) (x32 Version: 4.35 - Irfan Skiljan)
iTunes (Version: 11.0.5.5 - Apple Inc.)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (x32 Version: 0.9 - AppWork GmbH)
JMicron JMB36X Driver (x32 Version: 1.17.58.2 - JMicron Technology Corp.)
K-Lite Codec Pack 7.9.0 (Full) (x32 Version: 7.9.0 - )
League of Legends (x32 Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Logitech Flow Scroll 4.0 (Version: 4.00.33 - Logitech)
Logitech Webcam-Software (x32 Version: 2.30 - Logitech Inc.)
Lollipop (HKCU Version: - Lollipop Network, S.L.) <==== ATTENTION
LOLReplay (x32 Version: 0.8.5.1 - www.leaguereplays.com)
LWS Facebook (x32 Version: 13.50.854.0 - Logitech) Hidden
LWS Gallery (x32 Version: 13.50.854.0 - Logitech) Hidden
LWS Help_main (x32 Version: 13.50.862.0 - Logitech) Hidden
LWS Launcher (x32 Version: 13.50.859.0 - Logitech) Hidden
LWS Motion Detection (x32 Version: 13.30.1395.0 - Logitech) Hidden
LWS Pictures And Video (x32 Version: 13.50.861.0 - Logitech) Hidden
LWS Twitter (x32 Version: 13.30.1346.0 - Logitech) Hidden
LWS Video Mask Maker (x32 Version: 13.30.1379.0 - Logitech) Hidden
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
LWS Webcam Software (x32 Version: 13.31.1038.0 - Logitech) Hidden
LWS WLM Plugin (x32 Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (x32 Version: 13.31.1038.0 - Logitech) Hidden
Malwarebytes Anti-Malware Version 1.70.0.1100 (x32 Version: 1.70.0.1100 - Malwarebytes Corporation)
MediaFire Express (x32 Version: 0.13.3.3927 - MediaFire)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Access database engine 2010 (English) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0 - Microsoft)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFCLOC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Mortal Kombat Kollection (x32 Version: - Other Ocean Interactive)
Mozilla Thunderbird 11.0.1 (x86 de) (x32 Version: 11.0.1 - Mozilla)
Mp3tag v2.57 (x32 Version: v2.57 - Florian Heidenreich)
MyPC Backup (Version: - MyPC Backup) <==== ATTENTION
NVIDIA 3D Vision Controller Driver (x32 Version: 270.61 - NVIDIA Corporation) Hidden
NVIDIA 3D Vision Controller-Treiber 320.49 (Version: 320.49 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 320.49 (Version: 320.49 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.6 (Version: 1.6 - NVIDIA Corporation)
NVIDIA Grafiktreiber 320.49 (Version: 320.49 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.24.2 (Version: 1.3.24.2 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.131.854 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0604 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0604 (Version: 9.13.0604 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2049 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 320.49 (Version: 320.49 - NVIDIA Corporation) Hidden
NVIDIA Update 7.2.17 (Version: 7.2.17 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 7.2.17 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.1 (Version: 1.2.1 - NVIDIA Corporation)
OpenOffice.org 3.3 (x32 Version: 3.3.9567 - OpenOffice.org)
Opera 12.16 (x32 Version: 12.16.1860 - Opera Software ASA)
Origin (x32 Version: 9.3.2.2730 - Electronic Arts, Inc.)
osu! (x32 Version: 0.0.0.0 - peppy)
Pando Media Booster (x32 Version: 2.6.0.8 - Pando Networks Inc.)
Papers, Please (x32 Version: - 3909)
Path of Exile (x32 Version: - Grinding Gear Games)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PunkBuster Services (x32 Version: 0.991 - Even Balance, Inc.)
Qpad 5K L.E. Gaming Mouse Software (x32 Version: 1.00 - Qpad)
QPAD MK-85 (x32 Version: - )
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6235 - Realtek Semiconductor Corp.)
Scribblenauts Unlimited (x32 Version: - 5th Cell Media)
SHIELD Streaming (Version: 1.05.19 - NVIDIA Corporation) Hidden
Shopop (x32 Version: 10.203.68.14274 - My Pop Shop Ltd.)
Six Updater (x32 Version: 2.09.7016 - Six Projects)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
SopCast 3.5.0 (x32 Version: 3.5.0 - www.sopcast.com)
SpeedFan (remove only) (x32 Version: - )
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (Version: 3.0.12 - TeamSpeak Systems GmbH)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Veetle TV (x32 Version: 0.9.19 - Veetle, Inc)
VirtualCloneDrive (x32 Version: - Elaborate Bytes)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 4.10 (64-bit) (Version: 4.10.0 - win.rar GmbH)

==================== Restore Points =========================


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {206B7087-2727-407F-ABD9-A80C06777EF5} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [2013-12-23] (Systweak) <==== ATTENTION
Task: {498D5175-3678-46CB-986A-3DD2F1B161EA} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {49E6570F-9968-4A46-A3A0-E19DF01F4F18} - System32\Tasks\{1D6A86C0-1E54-464D-9724-9A7959107674} => C:\Program Files (x86)\Opera\opera.exe [2013-07-05] (Opera Software)
Task: {700F4AA7-557E-4614-9A9B-D9C470CFA8DE} - System32\Tasks\Advanced System Protector => C:\Program Files (x86)\RegClean Pro\SystweakASP.exe <==== ATTENTION
Task: {934A2F07-A9ED-401B-94EE-C296D6595BE3} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {D1C19F6D-EB96-47AE-9CCC-4278593DA998} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {D6EC3259-EA69-4EBD-902A-BC007F3EB979} - System32\Tasks\AdobeAAMUpdater-1.0-BlackHole-Dominik (Standard) => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2011-03-15] (Adobe Systems Incorporated)
Task: {E25D55C9-4B3D-4D61-9BCD-81F428267C28} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-03] (Google Inc.)
Task: {EAE989E3-BABC-4D71-859A-723F279FA678} - System32\Tasks\ASUS\i-Setup195822 => C:\Windows\Chipset\AsusSetup.exe [2010-08-12] (ASUSTeK Computer Inc.)
Task: {ED383397-6137-4585-A18A-55D80C4D000E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-03] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-04-07 23:19 - 2013-06-21 11:23 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-08-10 17:32 - 2013-07-27 09:48 - 00267040 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libzmq.dll
2012-01-25 14:23 - 2012-01-09 19:44 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2013-09-19 23:37 - 2013-09-19 23:37 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll
2013-09-19 23:32 - 2013-09-19 23:32 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2011-11-01 23:26 - 2011-11-01 23:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-11-01 23:26 - 2011-11-01 23:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-05-07 18:35 - 2010-05-07 18:35 - 02143576 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2010-05-07 18:35 - 2010-05-07 18:35 - 07954776 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2010-05-07 18:36 - 2010-05-07 18:36 - 00340824 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2010-05-07 18:37 - 2010-05-07 18:37 - 00027480 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2010-05-07 18:37 - 2010-05-07 18:37 - 00126808 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2013-11-07 09:10 - 2013-11-07 09:10 - 00377856 _____ () C:\Program Files (x86)\LOLReplay\LOLUtils.dll
2013-09-06 17:12 - 2013-09-06 17:12 - 00040448 _____ () C:\Program Files (x86)\LOLReplay\Compression.dll
2012-07-23 14:10 - 2012-07-23 14:10 - 00336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
2013-03-13 21:48 - 2013-03-13 21:48 - 24978944 _____ () C:\Users\Dominik (Standard)\AppData\Roaming\Dropbox\bin\libcef.dll
2011-01-17 16:19 - 2012-02-13 11:01 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2013-02-28 15:52 - 2013-02-23 07:50 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2010-04-21 13:48 - 2010-04-21 13:48 - 00066560 _____ () C:\Program Files (x86)\foobar2000\zlib1.dll
2011-12-02 16:04 - 2011-12-02 16:04 - 00148480 _____ () C:\Program Files (x86)\foobar2000\shared.dll
2011-12-02 16:06 - 2011-12-02 16:06 - 00276480 _____ () C:\Program Files (x86)\foobar2000\components\foo_dsp_std.dll
2012-01-25 21:28 - 2011-08-21 11:50 - 00230912 _____ () C:\Users\Dominik (Standard)\AppData\Roaming\foobar2000\user-components\foo_playcount\foo_playcount.dll
2011-12-02 16:05 - 2011-12-02 16:05 - 00237568 _____ () C:\Program Files (x86)\foobar2000\components\foo_freedb2.dll
2011-12-02 16:05 - 2011-12-02 16:05 - 01483264 _____ () C:\Program Files (x86)\foobar2000\components\foo_input_std.dll
2012-01-25 21:28 - 2008-12-27 20:15 - 01263616 _____ () C:\Users\Dominik (Standard)\AppData\Roaming\foobar2000\user-components\foo_ui_columns\foo_ui_columns.dll
2011-12-02 16:06 - 2011-12-02 16:06 - 00299008 _____ () C:\Program Files (x86)\foobar2000\components\foo_cdda.dll
2011-12-02 16:05 - 2011-12-02 16:05 - 00283136 _____ () C:\Program Files (x86)\foobar2000\components\foo_rgscan.dll
2012-01-25 21:28 - 2011-08-21 11:50 - 00078848 _____ () C:\Users\Dominik (Standard)\AppData\Roaming\foobar2000\user-components\foo_lock\foo_lock.dll
2011-12-02 16:05 - 2011-12-02 16:05 - 00276480 _____ () C:\Program Files (x86)\foobar2000\components\foo_fileops.dll
2011-12-02 16:05 - 2011-12-02 16:05 - 00483840 _____ () C:\Program Files (x86)\foobar2000\components\foo_converter.dll
2011-12-02 16:06 - 2011-12-02 16:06 - 01130496 _____ () C:\Program Files (x86)\foobar2000\components\foo_ui_std.dll
2012-01-25 21:28 - 2008-12-12 10:39 - 00365568 _____ () C:\Users\Dominik (Standard)\AppData\Roaming\foobar2000\user-components\foo_uie_lyrics\foo_uie_lyrics.dll
2011-12-02 16:06 - 2011-12-02 16:06 - 00365056 _____ () C:\Program Files (x86)\foobar2000\components\foo_albumlist.dll
2012-01-25 21:28 - 2011-08-21 12:06 - 00748032 _____ () C:\Users\Dominik (Standard)\AppData\Roaming\foobar2000\user-components\foo_lyricsgrabber2\foo_lyricsgrabber2.dll
2012-01-25 21:28 - 2011-08-21 11:50 - 00098304 _____ () C:\Users\Dominik (Standard)\AppData\Roaming\foobar2000\user-components\foo_input_alac\foo_input_alac.dll
2012-01-25 21:28 - 2011-08-21 12:06 - 00053248 _____ () C:\Users\Dominik (Standard)\AppData\Roaming\foobar2000\user-components\foo_lyricsgrabber2\pygrabber\system\_socket.pyd
2013-12-11 21:04 - 2013-12-11 21:04 - 26118656 _____ () D:\BattleNet\Battle.net\Battle.net.3968\libcef.dll
2013-12-20 17:15 - 2013-12-20 17:15 - 26118656 _____ () D:\BattleNet\Battle.net\Battle.net.4047\libcef.dll
2013-12-20 17:15 - 2013-12-20 17:15 - 00739840 _____ () D:\BattleNet\Battle.net\Battle.net.4047\libglesv2.dll
2013-12-20 17:15 - 2013-12-20 17:15 - 00130048 _____ () D:\BattleNet\Battle.net\Battle.net.4047\libegl.dll
2012-03-25 23:50 - 2012-03-29 07:35 - 01969112 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2012-03-25 23:50 - 2012-03-29 07:35 - 00162776 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2012-03-25 23:50 - 2012-03-29 07:35 - 00021976 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2012-09-23 19:43 - 2012-09-23 19:43 - 00313992 _____ () C:\Program Files (x86)\Adobe\Reader 11.0\Reader\sqlite.dll
2012-12-18 20:08 - 2012-12-18 20:08 - 14588632 _____ () C:\Program Files (x86)\Adobe\Reader 11.0\Reader\NPSWF32.dll
2013-08-10 17:32 - 2013-07-27 09:50 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\detoured.dll
2014-01-08 10:48 - 2013-12-12 23:19 - 00142848 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-01-08 10:48 - 2013-11-05 02:12 - 00890592 _____ () C:\Program Files (x86)\Steam\libavutil-52.dll
2013-03-12 17:10 - 2013-12-12 23:04 - 00716800 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2012-08-26 14:29 - 2014-01-07 22:00 - 01138088 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2012-08-26 14:29 - 2013-12-12 23:04 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2012-08-26 14:29 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-08-26 14:29 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-08-26 14:29 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-12-11 22:43 - 2013-12-11 22:43 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll
2014-01-09 01:16 - 2012-07-25 12:03 - 00886272 _____ () C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll
2014-01-09 01:16 - 2013-12-23 11:40 - 01730928 _____ () C:\Program Files (x86)\Advanced System Protector\aspsys.dll
2014-01-09 01:16 - 2012-07-25 12:03 - 00168448 _____ () C:\Program Files (x86)\Advanced System Protector\UNRAR.DLL
2014-01-08 01:24 - 2014-01-07 05:04 - 00715544 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\libglesv2.dll
2014-01-08 01:24 - 2014-01-07 05:04 - 00100120 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\libegl.dll
2014-01-08 01:24 - 2014-01-07 05:05 - 04055320 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\pdf.dll
2014-01-08 01:24 - 2014-01-07 05:05 - 00399640 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\ppGoogleNaClPluginChrome.dll
2014-01-08 01:24 - 2014-01-07 05:04 - 01634584 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/09/2014 01:42:08 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 16270

Error: (01/09/2014 01:42:08 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 16270

Error: (01/09/2014 01:42:08 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/09/2014 01:42:07 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15272

Error: (01/09/2014 01:42:07 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15272

Error: (01/09/2014 01:42:07 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/09/2014 01:42:06 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 14258

Error: (01/09/2014 01:42:06 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 14258

Error: (01/09/2014 01:42:06 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/09/2014 01:42:05 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13260


System errors:
=============
Error: (01/09/2014 01:08:11 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst UmRdpService erreicht.

Error: (01/08/2014 11:42:54 PM) (Source: TermDD) (User: )
Description: Von der Terminalserver-Sicherheitsschicht wurde ein Fehler im Protokollablauf erkannt, und die Clientverbindung wurde getrennt.
Client-IP: 192.168.2.6.

Error: (01/08/2014 10:49:21 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (01/08/2014 10:49:21 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (01/07/2014 02:21:20 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (01/07/2014 02:21:19 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (01/06/2014 02:51:07 AM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: 490@01010004

Error: (01/06/2014 02:51:07 AM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: 490@01010004

Error: (01/05/2014 01:33:32 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (01/05/2014 01:33:32 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.


Microsoft Office Sessions:
=========================
Error: (01/09/2014 01:42:08 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 16270

Error: (01/09/2014 01:42:08 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 16270

Error: (01/09/2014 01:42:08 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/09/2014 01:42:07 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15272

Error: (01/09/2014 01:42:07 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15272

Error: (01/09/2014 01:42:07 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/09/2014 01:42:06 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 14258

Error: (01/09/2014 01:42:06 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 14258

Error: (01/09/2014 01:42:06 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/09/2014 01:42:05 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13260


CodeIntegrity Errors:
===================================
Date: 2014-01-09 01:08:21.396
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume9\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 31%
Total physical RAM: 8168.84 MB
Available physical RAM: 5580.16 MB
Total Pagefile: 16335.85 MB
Available Pagefile: 9685.55 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:172.57 GB) (Free:2.49 GB) NTFS
Drive d: (Volume) (Fixed) (Total:292.97 GB) (Free:0 GB) NTFS
Drive e: () (Fixed) (Total:47.3 GB) (Free:4.07 GB) FAT32
Drive f: (DATA) (Fixed) (Total:43.14 GB) (Free:0.92 GB) FAT32
Drive h: (My Book) (Fixed) (Total:931.51 GB) (Free:11 GB) NTFS
Drive i: (FreeAgent GoFlex Drive) (Fixed) (Total:1863.01 GB) (Free:14.86 GB) NTFS
Drive l: (Adobe.Photoshop.) (CDROM) (Total:0.96 GB) (Free:0 GB) CDFS
Drive m: () (Removable) (Total:3.69 GB) (Free:2.14 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 112 GB) (Disk ID: FAFDFAFD)
Partition 1: (Active) - (Size=4 GB) - (Type=1B)
Partition 2: (Active) - (Size=47 GB) - (Type=0B)
Partition 3: (Not Active) - (Size=52 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=8 GB) - (Type=83)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 00000000)

Partition: GPT Partition Type
========================================================
Disk: 2 (Size: 932 GB) (Disk ID: E8900690)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 1863 GB) (Disk ID: A4B57300)
Partition 1: (Not Active) - (Size=-198626934272) - (Type=07 NTFS)

========================================================
Disk: 5 (Size: 4 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)

==================== End Of Log ============================

Vielen Dank!