PUP.Optional.Conduit.A gefunden. Entfernen mit Malwarebytes nicht möglich. Google warnt vor hohem Internverkehr von IP

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-01-2014 03
Ran by ******* (administrator) on *******-PC on 19-01-2014 12:16:05
Running from D:\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(NTI Corporation) C:\Program Files (x86)\NTI\NTI Backup Now EZ\BackupNowEZSvr.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
() C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
() C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe
() C:\Users\*******\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(NTI Corporation) C:\Program Files (x86)\NTI\NTI Backup Now EZ\BackupNowEZtray.exe
(Geek Software GmbH) C:\Program Files (x86)\pdf24\pdf24.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Dropbox, Inc.) C:\Users\*******\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)
HKLM\...\Run: [ASUS WebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1736704 2009-12-24] ()
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-17] (CANON INC.)
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2399632 2011-04-13] (Microsoft Corporation)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [6937216 2009-10-09] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [170624 2009-08-20] (ASUS)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [614400 2009-10-12] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [BackupNowEZtray] - C:\Program Files (x86)\NTI\NTI Backup Now EZ\BackupNowEZtray.exe [580632 2011-09-23] (NTI Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\pdf24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-19] (AVAST Software)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)
HKCU\...\Run: [GoogleDriveSync] - "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
HKCU\...\Run: [dradio-RecorderTimer] - C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe [42496 2012-10-13] ()
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\*******\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
Startup: C:\Users\*******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\*******\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.zonealarm.com/?src=hp&tbid=base2013&Lan=de&gu=2ff580dcfa3d49cda161cce1943f4687&tu=11Ig0006y1B000s&sku=&tstsId=&ver=&
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - {04372FEE-0575-4155-B9A3-D16D609A782A} URL = hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=de&q={searchTerms}&gu=2ff580dcfa3d49cda161cce1943f4687&tu=11Ig0006y1B000s&sku=&tstsId=&ver=&&r=450
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.6.0_07\bin\jp2ssv.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\*******\AppData\Roaming\Mozilla\Firefox\Profiles\c3totg2c.default
FF SelectedSearchEngine: Google
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll No File
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\*******\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ZoneAlarm Do Not Track - C:\Users\*******\AppData\Roaming\Mozilla\Firefox\Profiles\c3totg2c.default\Extensions\donottrack@checkpoint.com [2013-03-08]
FF Extension: Bloglovin - C:\Users\*******\AppData\Roaming\Mozilla\Firefox\Profiles\c3totg2c.default\Extensions\jid1-JrxwyxPdCKWWcw@jetpack [2014-01-16]
FF Extension: InvisibleHand - C:\Users\*******\AppData\Roaming\Mozilla\Firefox\Profiles\c3totg2c.default\Extensions\canitbecheaper@trafficbroker.co.uk.xpi [2012-05-07]
FF Extension: F.B. Purity - Cleans Up Facebook - C:\Users\*******\AppData\Roaming\Mozilla\Firefox\Profiles\c3totg2c.default\Extensions\fbp@fbpurity.com.xpi [2013-07-29]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-20]
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-04-13]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2003) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Extension: (Google Docs) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-05-22]
CHR Extension: (Google Drive) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-22]
CHR Extension: (YouTube) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-22]
CHR Extension: (Google-Suche) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-22]
CHR Extension: (Softonic Chrome Toolbar) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf [2013-05-22]
CHR Extension: (Skype Click to Call) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-03-08]
CHR Extension: (Google Wallet) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-01]
CHR Extension: (Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-05-22]
CHR Extension: (Google Mail) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-22]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-19] (AVAST Software)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2012-12-12] (Nero AG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG)
R2 NTI BackupNowEZSvr; C:\Program Files (x86)\NTI\NTI Backup Now EZ\BackupNowEZSvr.exe [45592 2011-09-23] (NTI Corporation)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [36352 2010-11-08] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()

==================== Drivers (Whitelisted) ====================

R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-19] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [82744 2014-01-19] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-19] ()
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799680 2009-07-17] ()
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
U3 tmlwf; 
U3 tmwfp; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-19 12:15 - 2014-01-19 12:15 - 00000000 ____D C:\FRST
2014-01-19 12:12 - 2014-01-19 12:12 - 00000000 _____ C:\Users\*******\defogger_reenable
2014-01-19 12:10 - 2014-01-19 12:11 - 00000000 ____D C:\Users\*******\Desktop\Troj
2014-01-19 11:17 - 2014-01-19 11:17 - 00000000 _____ C:\END
2014-01-19 11:13 - 2014-01-19 11:13 - 00000000 ____D C:\Program Files (x86)\Intel
2014-01-19 11:10 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-01-19 11:10 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-01-19 11:10 - 2012-08-23 15:07 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-01-19 11:10 - 2012-08-23 14:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-01-19 11:10 - 2012-08-23 14:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-01-19 11:10 - 2012-08-23 14:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-01-19 11:10 - 2012-08-23 14:40 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-01-19 11:10 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-01-19 11:10 - 2012-08-23 14:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-01-19 11:10 - 2012-08-23 14:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-01-19 11:10 - 2012-08-23 14:17 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-01-19 11:10 - 2012-08-23 14:06 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-01-19 11:10 - 2012-08-23 13:52 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-01-19 11:10 - 2012-08-23 12:20 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-01-19 11:10 - 2012-08-23 12:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-01-19 11:10 - 2012-08-23 12:14 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-01-19 11:10 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-01-19 11:10 - 2012-08-23 11:54 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-01-19 11:10 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-01-19 11:10 - 2012-08-23 11:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-01-19 11:10 - 2012-08-23 11:22 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-01-19 11:10 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-01-19 11:10 - 2012-08-23 09:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-01-19 11:10 - 2012-08-23 09:13 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-01-19 11:09 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-01-19 11:09 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-01-19 10:48 - 2014-01-19 10:48 - 00000000 ____D C:\Users\*******\AppData\Roaming\AVAST Software
2014-01-19 10:42 - 2014-01-19 10:42 - 00082744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-01-19 10:42 - 2014-01-19 10:42 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-16 09:24 - 2014-01-19 11:38 - 00003186 _____ C:\Windows\System32\Tasks\P4GIntlCtrl
2014-01-15 09:35 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 09:35 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 09:35 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 09:35 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 09:35 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 09:35 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 09:35 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 09:35 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 09:35 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-08 17:48 - 2014-01-08 17:49 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-08 17:48 - 2014-01-08 17:49 - 00000000 ____D C:\Program Files\iTunes
2014-01-08 17:48 - 2014-01-08 17:49 - 00000000 ____D C:\Program Files (x86)\iTunes
2014-01-08 17:48 - 2014-01-08 17:48 - 00000000 ____D C:\Program Files\iPod
2013-12-20 11:50 - 2013-12-20 11:50 - 00000000 ____D C:\Windows\ERUNT
2013-12-20 11:34 - 2013-12-20 11:44 - 00000000 ____D C:\AdwCleaner
2013-12-20 11:11 - 2013-12-20 11:11 - 00000000 ____D C:\Users\*******\AppData\Roaming\Malwarebytes
2013-12-20 11:11 - 2013-12-20 11:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-20 11:11 - 2013-12-20 11:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-20 11:11 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-20 08:39 - 2013-12-20 08:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2014-01-19 12:15 - 2014-01-19 12:15 - 00000000 ____D C:\FRST
2014-01-19 12:12 - 2014-01-19 12:12 - 00000000 _____ C:\Users\*******\defogger_reenable
2014-01-19 12:12 - 2010-07-01 07:56 - 00000000 ____D C:\Users\*******
2014-01-19 12:11 - 2014-01-19 12:10 - 00000000 ____D C:\Users\*******\Desktop\Troj
2014-01-19 12:06 - 2010-04-15 06:45 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-19 11:44 - 2010-04-15 06:22 - 01287763 _____ C:\Windows\WindowsUpdate.log
2014-01-19 11:43 - 2009-07-14 05:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-19 11:43 - 2009-07-14 05:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-19 11:40 - 2009-08-04 10:51 - 00708058 _____ C:\Windows\system32\perfh007.dat
2014-01-19 11:40 - 2009-08-04 10:51 - 00153382 _____ C:\Windows\system32\perfc007.dat
2014-01-19 11:40 - 2009-07-14 06:13 - 01643118 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-19 11:38 - 2014-01-16 09:24 - 00003186 _____ C:\Windows\System32\Tasks\P4GIntlCtrl
2014-01-19 11:38 - 2012-01-14 20:42 - 00000000 ___RD C:\Users\*******\Dropbox
2014-01-19 11:38 - 2012-01-14 20:37 - 00000000 ____D C:\Users\*******\AppData\Roaming\Dropbox
2014-01-19 11:37 - 2013-03-02 18:26 - 00000000 ____D C:\Users\*******\AppData\Local\HTC MediaHub
2014-01-19 11:37 - 2010-07-01 07:57 - 00128608 _____ C:\Users\*******\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-19 11:37 - 2010-04-15 06:45 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-19 11:36 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-19 11:36 - 2009-07-14 05:51 - 00511628 _____ C:\Windows\setupact.log
2014-01-19 11:36 - 2009-07-14 05:45 - 00484312 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-19 11:35 - 2010-04-15 07:06 - 00392302 _____ C:\Windows\PFRO.log
2014-01-19 11:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2014-01-19 11:30 - 2012-11-19 08:59 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-19 11:23 - 2012-11-19 08:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-19 11:23 - 2012-11-19 08:59 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-19 11:23 - 2011-06-27 20:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-19 11:23 - 2010-07-01 18:05 - 00000000 ____D C:\Users\*******\AppData\Local\Adobe
2014-01-19 11:22 - 2013-03-12 15:41 - 00000000 ____D C:\ProgramData\DivX
2014-01-19 11:22 - 2013-03-12 15:41 - 00000000 ____D C:\Program Files (x86)\DivX
2014-01-19 11:21 - 2013-04-03 11:33 - 01610046 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-19 11:21 - 2013-03-12 15:43 - 00000000 ____D C:\Users\*******\AppData\Roaming\DivX
2014-01-19 11:21 - 2013-03-12 15:42 - 00000000 ____D C:\Program Files\DivX
2014-01-19 11:17 - 2014-01-19 11:17 - 00000000 _____ C:\END
2014-01-19 11:13 - 2014-01-19 11:13 - 00000000 ____D C:\Program Files (x86)\Intel
2014-01-19 10:48 - 2014-01-19 10:48 - 00000000 ____D C:\Users\*******\AppData\Roaming\AVAST Software
2014-01-19 10:46 - 2013-12-11 16:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2014-01-19 10:46 - 2010-04-15 07:14 - 00002640 _____ C:\Windows\system32\AutoRunFilter.ini
2014-01-19 10:42 - 2014-01-19 10:42 - 00082744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-01-19 10:42 - 2014-01-19 10:42 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-19 10:42 - 2013-04-13 17:40 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-19 10:42 - 2013-04-13 17:40 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-19 10:42 - 2013-04-13 17:40 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-19 10:42 - 2013-04-13 17:40 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-19 10:42 - 2013-04-13 17:40 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-19 10:42 - 2013-04-13 17:40 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-19 10:42 - 2013-04-13 17:40 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-19 10:42 - 2013-04-13 17:40 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-19 10:42 - 2013-04-13 17:39 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-19 10:40 - 2013-04-13 17:38 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-19 10:39 - 2013-04-13 17:40 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2014-01-17 08:46 - 2012-01-14 20:41 - 00000000 ____D C:\Users\*******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-17 08:46 - 2010-07-01 07:57 - 00000000 ___RD C:\Users\*******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-16 16:18 - 2010-07-01 17:53 - 00000000 ____D C:\Users\*******\AppData\Roaming\Adobe
2014-01-16 16:18 - 2010-04-15 06:44 - 00000000 ____D C:\ProgramData\Adobe
2014-01-15 18:36 - 2010-04-15 06:29 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-15 18:34 - 2013-08-07 09:37 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 18:30 - 2010-07-11 11:57 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-08 17:49 - 2014-01-08 17:48 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-08 17:49 - 2014-01-08 17:48 - 00000000 ____D C:\Program Files\iTunes
2014-01-08 17:49 - 2014-01-08 17:48 - 00000000 ____D C:\Program Files (x86)\iTunes
2014-01-08 17:48 - 2014-01-08 17:48 - 00000000 ____D C:\Program Files\iPod
2013-12-20 11:50 - 2013-12-20 11:50 - 00000000 ____D C:\Windows\ERUNT
2013-12-20 11:45 - 2012-05-07 08:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 11:44 - 2013-12-20 11:34 - 00000000 ____D C:\AdwCleaner
2013-12-20 11:43 - 2013-06-05 13:29 - 00000000 ____D C:\ProgramData\Uniblue
2013-12-20 11:43 - 2013-03-08 11:53 - 00000000 ____D C:\Users\*******\AppData\Roaming\CheckPoint
2013-12-20 11:30 - 2010-04-15 07:14 - 00001965 _____ C:\Windows\system32\ServiceFilter.ini
2013-12-20 11:11 - 2013-12-20 11:11 - 00000000 ____D C:\Users\*******\AppData\Roaming\Malwarebytes
2013-12-20 11:11 - 2013-12-20 11:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-20 11:11 - 2013-12-20 11:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-20 08:39 - 2013-12-20 08:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

Some content of TEMP:
====================
C:\Users\*******\AppData\Local\Temp\APNStub.exe
C:\Users\*******\AppData\Local\Temp\AskSLib.dll
C:\Users\*******\AppData\Local\Temp\DivXSetup.exe
C:\Users\*******\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\*******\AppData\Local\Temp\OptimizerPro.exe
C:\Users\*******\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\*******\AppData\Local\Temp\Quarantine.exe
C:\Users\*******\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\*******\AppData\Local\Temp\SkypeSetup.exe
C:\Users\*******\AppData\Local\Temp\Softonic_chr_1-8-8-11.exe
C:\Users\*******\AppData\Local\Temp\zafwSetupWeb_110_000_054.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-09 12:40

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-01-2014 03
Ran by ********* at 2014-01-19 12:18:37
Running from D:\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32 Version:  - Microsoft)
2007 Microsoft Office system (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated)
Activation Assistant for the 2007 Microsoft Office suites (x32 Version:  - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (x32 Version: 1.0 - Microsoft Corporation) Hidden
Actualização do Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
Actualização do Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
Actualização do Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.38 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe InDesign 2.0 (x32 Version: 2.0 - Adobe Systems, Inc.)
Adobe Photoshop CS (x32 Version: CS - Adobe Systems, Inc.)
Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (x32 Version:  3.0 - Adobe Systems, Inc.)
ÅíçìåñùìÝíç Ýêäïóç Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
ÅíçìåñùìÝíç Ýêäïóç Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
ÅíçìåñùìÝíç Ýêäïóç Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482 - Alcor Micro Corp.) Hidden
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18 - Amazon Services LLC)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ASUS AI Recovery (x32 Version: 1.0.6 - ASUS)
ASUS AP Bank (x32 Version: 1.0.0.0 - ASUSTEK)
ASUS Data Security Manager (x32 Version: 1.00.0014 - ASUS)
ASUS FancyStart (x32 Version: 1.0.6 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (x32 Version: 3.0.20 - ASUS)
ASUS Live Update (x32 Version: 2.5.9 - ASUS)
ASUS MultiFrame (x32 Version: 1.0.0019 - ASUS)
ASUS Power4Gear Hybrid (Version: 1.1.25 - ASUS)
ASUS SmartLogon (x32 Version: 1.0.0007 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0028 - ASUS)
ASUS WebStorage (Version: 2.0.40.1319 - eCareme Technologies, Inc.)
Asus_ULSeries_ScreenSaver (x32 Version:  - )
ATK Generic Function Service (x32 Version: 1.00.0008 - ATK)
ATK Hotkey (x32 Version: 1.0.0053 - ASUS)
ATK Media (x32 Version: 2.0.0006 - ASUS)
ATKOSD2 (x32 Version: 7.0.0007 - ASUS)
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
Avery Wizard 3.1 (x32 Version: 3.1.8 - Avery)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Canon MP Navigator EX 2.0 (x32 Version:  - )
Canon MP630 series Benutzerregistrierung (x32 Version:  - )
Canon MP630 series MP Drivers (Version:  - )
Canon Utilities Easy-PhotoPrint EX (x32 Version:  - )
Canon Utilities My Printer (x32 Version:  - )
Canon Utilities Solution Menu (x32 Version:  - )
CD-LabelPrint (x32 Version:  - )
Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden
Cisco Systems VPN Client 5.0.07.0290 (Version: 5.0.7 - Cisco Systems, Inc.)
ControlDeck (x32 Version: 1.0.4 - ASUS)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.) Hidden
DivX-Setup (x32 Version: 2.6.1.90 - DivX, LLC)
dradio-Recorder Version 3.02.6 (x32 Version:  - )
Dream Day Wedding Married in Manhattan (x32 Version:  - Oberon Media)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
Duden-Rechtschreibprüfung (x32 Version: 8.031.31 - Bibliographisches Institut GmbH)
ETDWare PS/2-x64 7.0.5.9_WHQL (Version:  - )
Express Gate (x32 Version: 1.2.13.23 - DeviceVM, Inc.)
f4 2012 (x32 Version:  - audiotranskription.de)
f4 3.1.0 (x32 Version: 3.1.0 - MAXqda)
Fast Boot (Version: 1.0.4 - ASUS)
FileMaker Pro 10 (x32 Version: 10.0.3.0 - FileMaker, Inc.)
FileMaker Pro 12 (x32 Version: 12.0.3.0 - FileMaker, Inc.) Hidden
Fotobuchexpress24 Bestellsoftware (x32 Version: 2.9.2 - SSW Software GmbH)
Fotobuchexpress24 Bestellsoftware (x32 Version: 2.9.2 - SSW Software GmbH) Hidden
Free AVI Video Converter version 5.0.22.128 (x32 Version: 5.0.22.128 - DVDVideoSoft Ltd.)
Free Video Flip and Rotate version 2.1.6.128 (x32 Version: 2.1.6.128 - DVDVideoSoft Ltd.)
Game Park Console (x32 Version: 6.2.0.2 - Oberon Media, Inc.)
GameXN GO (HKCU Version:  - GameXN AS)
GEHA Design-Assistent (x32 Version:  - )
Google Chrome (x32 Version: 32.0.1700.76 - Google Inc.)
Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (x32 Version:  - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HTC Driver Installer (x32 Version: 4.0.1.002 - HTC Corporation)
HTC Sync Manager (x32 Version: 1.1.87.0 - HTC)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.2202 - Intel Corporation)
IPTInstaller (x32 Version: 4.0.8 - HTC)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Junk Mail filter update (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
LIMBO (x32 Version:  - )
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft IntelliPoint 8.1 (Version: 8.15.406.0 - Microsoft)
Microsoft IntelliPoint 8.1 (Version: 8.15.406.0 - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Greek) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel 2007 Help - Aggiornamento (KB963678) (x32 Version:  - Microsoft)
Microsoft Office Excel 2007 Help §ó·sµ{¦¡ (KB963678) (x32 Version:  - Microsoft)
Microsoft Office Excel 2007 Help Actualización (KB963678) (x32 Version:  - Microsoft)
Microsoft Office Excel MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Greek) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office IME (Chinese (Traditional)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office IME (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook 2003 (x32 Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Outlook 2007 Help - Aggiornamento (KB963677) (x32 Version:  - Microsoft)
Microsoft Office Outlook 2007 Help Actualización (KB963677) (x32 Version:  - Microsoft)
Microsoft Office Outlook Connector (x32 Version: 12.0.6414.1000 - Microsoft Corporation)
Microsoft Office Outlook MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Greek) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669) (x32 Version:  - Microsoft)
Microsoft Office Powerpoint 2007 Help §ó·sµ{¦¡ (KB963669) (x32 Version:  - Microsoft)
Microsoft Office Powerpoint 2007 Help Actualización (KB963669) (x32 Version:  - Microsoft)
Microsoft Office PowerPoint MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Greek) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Hybrid 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Arabic) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Basque) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Catalan) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Dutch) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Galician) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Greek) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Hebrew) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Portuguese (Brazil)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Russian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Chinese (Traditional)) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Dutch) 2007 (x32 Version: 12.0.4518.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Greek) 2007 (x32 Version: 12.0.4518.1029 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Hebrew) 2007 (x32 Version: 12.0.4518.1016 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Italian) 2007 (x32 Version: 12.0.4518.1018 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Portuguese (Portugal)) 2007 (x32 Version: 12.0.4518.1029 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Spanish) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Greek) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Chinese (Traditional)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Dutch) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Greek) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Hebrew) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Spanish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Greek) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word 2007 Help - Aggiornamento (KB963665) (x32 Version:  - Microsoft)
Microsoft Office Word 2007 Help §ó·sµ{¦¡ (KB963665) (x32 Version:  - Microsoft)
Microsoft Office Word 2007 Help Actualización (KB963665) (x32 Version:  - Microsoft)
Microsoft Office Word MUI (Chinese (Traditional)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Dutch) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Greek) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Hebrew) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Portuguese (Portugal)) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mise à jour Microsoft Office Excel 2007 Help  (KB963678) (x32 Version:  - Microsoft)
Mise à jour Microsoft Office Outlook 2007 Help  (KB963677) (x32 Version:  - Microsoft)
Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669) (x32 Version:  - Microsoft)
Mise à jour Microsoft Office Word 2007 Help  (KB963665) (x32 Version:  - Microsoft)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0 - Microsoft Corporation)
Nero 7 Essentials (x32 Version: 7.03.0966 - Nero AG)
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
NTI Backup Now EZ (x32 Version: 2.5.2.36 - NTI Corporation)
NTI Backup Now EZ (x32 Version: 2.5.2.36 - NTI Corporation) Hidden
òãëåï òáåø îñðï ãåàø äæáì ùì Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
òãëåï òáåø îñðï ãåàø äæáì ùì Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
òãëåï òáåø îñðï ãåàø äæáì ùì Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
OpenVPN 2.1.4 (x32 Version: 2.1.4 - )
PDF24 Creator 5.2.0 (x32 Version:  - PDF24.org)
Plants vs. Zombies: Game of the Year (x32 Version:  - PopCap)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
RAD Video Tools (x32 Version:  - )
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5936 - Realtek Semiconductor Corp.)
Samsung CLP-310 Series (x32 Version:  - Samsung Electronics CO.,LTD)
Samsung Universal Print Driver (x32 Version:  - Samsung Electronics CO.,LTD)
Skype Click to Call (x32 Version: 5.6.8442 - Skype Technologies S.A.)
Skype™ 6.3 (x32 Version: 6.3.107 - Skype Technologies S.A.)
SRS Premium Sound Control Panel (Version: 1.8.1200 - SRS Labs, Inc.)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
To the Moon (x32 Version:  - )
Update for 2007 Microsoft Office System (KB967642) (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Access 2007 Help (KB963663) (x32 Version:  - Microsoft)
Update for Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Help (KB963677) (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
Update for Microsoft Office Publisher 2007 Help (KB963667) (x32 Version:  - Microsoft)
Update for Microsoft Office Script Editor Help (KB963671) (x32 Version:  - Microsoft)
Update for Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32 Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
Update voor Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
Update voor Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
Update voor Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
USB 2.0 UVC 0.3M WebCam (Version:  - )
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.0.5 (x32 Version: 2.0.5 - VideoLAN)
WIDCOMM Bluetooth Software (Version: 6.2.1.800 - Broadcom Corporation)
Windows Driver Package - Broadcom Bluetooth  (05/27/2009 6.1.7100.0) (Version: 05/27/2009 6.1.7100.0 - Broadcom)
Windows Driver Package - Broadcom Bluetooth  (09/11/2009 6.2.0.9407) (Version: 09/11/2009 6.2.0.9407 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Call (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 14.0.8052.1208 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8051.1204 - Microsoft Corporation) Hidden
Windows Live ID-Anmelde-Assistent (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Mail (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029 - Microsoft Corporation)
WinFlash (x32 Version:  - )
Wireless Console 3 (x32 Version: 3.0.12 - ASUS)
World of Goo (x32 Version:  - 2D Boy)
XMedia Recode Version 3.1.4.9 (x32 Version: 3.1.4.9 - XMedia Recode)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1113E276-6956-48E6-97E2-4BDFBDE8C56F} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-04-13] (Microsoft Corporation)
Task: {180B8651-BEF4-4B4B-B638-27BE08B7AB10} - System32\Tasks\{ED6BEFDC-5DF3-4356-B53F-F77754C26090} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.120.259/en/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;systemlevelpresent
Task: {1B2122C5-FE82-4147-8772-C9E26F6D9522} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)
Task: {383409BC-A95A-40DA-B5E1-A7A058DC7253} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-19] (AVAST Software)
Task: {50B598FC-0010-4C7A-86EA-A9EBC87CA593} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2009-11-07] (ATK)
Task: {58C3FAD9-A70D-4CDD-A7CE-AC26C88B1523} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2009-09-16] ()
Task: {79B39D01-8AB8-4110-BD89-D7262771F791} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-09-24] ()
Task: {80F87C96-5622-476F-93F8-2A88275148D5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {AC53D0D6-C8F5-4194-BE4F-1960F7909926} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-19] (Adobe Systems Incorporated)
Task: {C38F81EE-9457-438E-B7BF-E60E30C117E9} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {C505AA66-E902-4CBB-973D-F164EA6BF31D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {E0712446-8DF2-4DB5-A06B-1DED49C3D08D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-15] (Google Inc.)
Task: {E4DF1D95-C58F-4717-96F2-928457EDC81B} - System32\Tasks\{60C64600-1DAB-42CA-9F37-A569FE90FDDF} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-04-19] (Skype Technologies S.A.)
Task: {E4E3D8E6-36C3-41E6-9A0C-77F21810540C} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-05-18] (ASUS)
Task: {E6B5F99E-E06D-4882-B99E-A645BC28E5D7} - System32\Tasks\P4GIntlCtrl => C:\Program Files\P4G\IntlCtrl.exe [2009-09-23] (TODO: <Company name>)
Task: {F9515DF2-7B5F-4D27-AECC-6E62B9943ECC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-15] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2007-06-15 18:28 - 2007-06-15 18:28 - 00104960 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt64.dll
2007-06-02 00:52 - 2007-06-02 00:52 - 00159744 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
2009-12-30 04:02 - 2009-12-30 04:02 - 00148752 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\EcaremeDLL.dll
2010-04-15 06:48 - 2010-04-15 06:48 - 00029968 _____ () C:\Windows\assembly\GAC_MSIL\SqliteShared\1.0.3650.22026__0d0f4b69e50e559b\SqliteShared.dll
2010-04-15 06:48 - 2010-04-15 06:48 - 00931840 _____ () C:\Windows\assembly\GAC_64\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll
2008-10-01 07:02 - 2008-10-01 07:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2009-10-23 21:40 - 2009-10-23 21:40 - 00041984 _____ () C:\Program Files\P4G\DevMng.dll
2009-09-11 20:27 - 2009-09-11 20:27 - 00029184 _____ () C:\Program Files\P4G\OvrClk.dll
2010-04-15 07:10 - 2007-03-10 02:58 - 00124416 _____ () C:\Program Files\ATKGFNEX\AGFNEX64.dll
2014-01-19 10:42 - 2014-01-18 21:47 - 02155008 _____ () C:\Program Files\AVAST Software\Avast\defs\14011801\algo.dll
2014-01-19 11:37 - 2014-01-19 09:14 - 02155520 _____ () C:\Program Files\AVAST Software\Avast\defs\14011900\algo.dll
2012-02-20 20:29 - 2012-02-20 20:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 20:28 - 2012-02-20 20:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-03-23 12:26 - 2010-03-23 12:26 - 00201512 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2013-01-25 21:49 - 2013-01-25 21:49 - 00024936 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2013-01-25 21:50 - 2013-01-25 21:50 - 00466704 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2013-01-25 21:51 - 2013-01-25 21:51 - 00044392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2013-01-25 21:51 - 2013-01-25 21:51 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2013-01-25 21:52 - 2013-01-25 21:52 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2013-01-25 22:08 - 2013-01-25 22:08 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2011-09-23 20:54 - 2011-09-23 20:54 - 00465344 _____ () C:\Program Files (x86)\NTI\NTI Backup Now EZ\sqlite3.dll
2014-01-19 10:42 - 2014-01-19 10:42 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-11-15 01:49 - 2013-11-15 01:49 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2009-11-02 22:20 - 2009-11-02 22:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 22:23 - 2009-11-02 22:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\*********\AppData\Roaming\Dropbox\bin\libcef.dll
2013-12-20 08:39 - 2013-12-20 08:39 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2007-06-15 18:28 - 2007-06-15 18:28 - 00147456 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
2007-06-02 01:08 - 2007-06-02 01:08 - 00143360 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:4CF61E54
AlternateDataStreams: C:\ProgramData\Temp:A724744F
AlternateDataStreams: C:\ProgramData\Temp:AB689DEA

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/19/2014 11:21:37 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/19/2014 11:21:36 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/19/2014 11:21:36 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/19/2014 11:21:36 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/19/2014 11:21:35 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/19/2014 11:21:34 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/19/2014 11:21:34 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/19/2014 11:20:20 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/19/2014 10:34:45 AM) (Source: Microsoft-Windows-RestartManager) (User: *********-PC)
Description: Die Anwendung oder der Dienst "Windows-Explorer" konnte nicht heruntergefahren werden.

Error: (01/15/2014 00:51:35 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.


System errors:
=============
Error: (01/19/2014 11:38:33 AM) (Source: NetBT) (User: )
Description: Ein doppelter Name wurde im TCP-Netzwerk entdeckt. Die IP-Adresse des Computers,
der die Meldung gesendet hat, steht in den Daten. Verwenden Sie NBTSTAT -n an
der Eingabeaufforderung, um den doppelten Namen zu bestimmen.

Error: (01/19/2014 11:36:30 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (01/19/2014 11:36:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/19/2014 11:20:39 AM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (01/19/2014 10:47:31 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (01/19/2014 10:46:32 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/19/2014 10:36:26 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.

Error: (01/19/2014 10:35:56 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.

Error: (01/19/2014 10:33:41 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (01/19/2014 10:32:00 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (01/09/2014 02:43:25 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 850 seconds with 780 seconds of active time.  This session ended with a crash.

Error: (12/10/2013 04:25:12 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 83813 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/04/2013 02:39:53 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 8879 seconds with 1800 seconds of active time.  This session ended with a crash.

Error: (12/04/2013 00:20:30 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 4788 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/04/2013 00:11:39 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 4257 seconds with 660 seconds of active time.  This session ended with a crash.

Error: (10/09/2013 11:58:50 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6679.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 16 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (08/15/2013 01:52:10 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 87888 seconds with 1320 seconds of active time.  This session ended with a crash.

Error: (08/08/2013 09:38:31 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 1348 seconds with 480 seconds of active time.  This session ended with a crash.

Error: (07/30/2013 00:10:00 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 1157 seconds with 240 seconds of active time.  This session ended with a crash.

Error: (06/28/2013 11:00:34 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2013-03-11 19:24:49.700
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-09 22:45:22.594
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-09 22:33:48.632
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-09 08:02:34.415
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-08 22:27:23.601
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-08 22:12:16.467
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-08 15:06:08.011
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-08 14:22:44.905
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-08 12:38:28.638
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 55%
Total physical RAM: 4061.21 MB
Available physical RAM: 1825.57 MB
Total Pagefile: 8120.6 MB
Available Pagefile: 5717.69 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:74.52 GB) (Free:4.52 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:206.97 GB) (Free:45.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 76692CA8)
Partition 1: (Not Active) - (Size=17 GB) - (Type=1C)
Partition 2: (Active) - (Size=75 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=207 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

GMER 2.1.19322 - hxxp://www.gmer.net
Rootkit scan 2014-01-19 12:39:50
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 WDC_WD32 rev.11.0 298,09GB
Running: gmer.exe; Driver: C:\Users\******~1\AppData\Local\Temp\uwlyauow.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                                                 fffff800037a5000 8 bytes [00, 00, 29, 00, 54, 64, 78, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544                                                                                                 fffff800037a5010 47 bytes [10, E0, 66, 0B, 80, FA, FF, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Windows\system32\wininit.exe[508] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                         000000007722eecd 1 byte [62]
.text     C:\Windows\system32\winlogon.exe[564] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                        000000007722eecd 1 byte [62]
.text     C:\Windows\system32\services.exe[608] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                        000000007722eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[736] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                         000000007722eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[820] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                         000000007722eecd 1 byte [62]
.text     C:\Windows\System32\svchost.exe[884] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                         000000007722eecd 1 byte [62]
.text     C:\Windows\System32\svchost.exe[960] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                         000000007722eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[1000] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                        000000007722eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[228] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                         000000007722eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[1084] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                        000000007722eecd 1 byte [62]
.text     C:\Windows\system32\FBAgent.exe[1172] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                        000000007722eecd 1 byte [62]
.text     C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe[1192] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                    00000000759aa2ba 1 byte [62]
.text     C:\Program Files\ATKGFNEX\GFNEXSrv.exe[1232] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                 00000000759aa2ba 1 byte [62]
.text     C:\Windows\System32\spoolsv.exe[1428] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                        000000007722eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[1464] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                        000000007722eecd 1 byte [62]
.text     C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1552] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                           00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[1584] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112           00000000759aa2ba 1 byte [62]
.text     C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe[1652] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                000000007722eecd 1 byte [62]
.text     C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe[1688] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                              00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe[1688] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                            0000000075601465 2 bytes [60, 75]
.text     C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe[1688] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                           00000000756014bb 2 bytes [60, 75]
.text     ...                                                                                                                                                                * 2
.text     C:\Windows\system32\svchost.exe[1732] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                        000000007722eecd 1 byte [62]
.text     C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe[1772] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                        00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe[1796] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                    00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[1832] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                      00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[1864] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                  00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[1864] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69                                0000000075601465 2 bytes [60, 75]
.text     C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE[1864] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155                               00000000756014bb 2 bytes [60, 75]
.text     ...                                                                                                                                                                * 2
.text     C:\Program Files (x86)\NTI\NTI Backup Now EZ\BackupNowEZSvr.exe[1924] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                        00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\NTI\NTI Backup Now EZ\BackupNowEZSvr.exe[1924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                      0000000075601465 2 bytes [60, 75]
.text     C:\Program Files (x86)\NTI\NTI Backup Now EZ\BackupNowEZSvr.exe[1924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                     00000000756014bb 2 bytes [60, 75]
.text     ...                                                                                                                                                                * 2
.text     C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[2044] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                       00000000759aa2ba 1 byte [62]
.text     C:\Windows\system32\svchost.exe[1340] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                        000000007722eecd 1 byte [62]
.text     C:\Windows\system32\SearchIndexer.exe[2556] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                  000000007722eecd 1 byte [62]
.text     C:\Windows\system32\Dwm.exe[3392] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                            000000007722eecd 1 byte [62]
.text     C:\Windows\Explorer.EXE[3404] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                000000007722eecd 1 byte [62]
.text     C:\Windows\system32\taskhost.exe[3480] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                       000000007722eecd 1 byte [62]
.text     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe[3568] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                          00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe[3620] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                    00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe[3652] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                           00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe[3800] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                      00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe[3816] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                     00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe[3824] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                         00000000759aa2ba 1 byte [62]
.text     C:\Program Files\Elantech\ETDCtrl.exe[3896] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                  000000007722eecd 1 byte [62]
.text     C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe[4012] C:\Windows\system32\KERNEL32.dll!GetBinaryTypeW + 189                                  000000007722eecd 1 byte [62]
.text     C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe[4044] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                 000000007722eecd 1 byte [62]
.text     C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE[3284] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                           000000007722eecd 1 byte [62]
.text     C:\Windows\System32\igfxtray.exe[3196] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                       000000007722eecd 1 byte [62]
.text     C:\Windows\System32\hkcmd.exe[3600] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                          000000007722eecd 1 byte [62]
.text     C:\Windows\System32\igfxpers.exe[668] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                        000000007722eecd 1 byte [62]
.text     C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe[3468] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                          00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe[3596] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                              00000000759aa2ba 1 byte [62]
.text     C:\Users\******len\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe[3124] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112     00000000759aa2ba 1 byte [62]
.text     C:\Users\******len\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe[3124] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000075601465 2 bytes [60, 75]
.text     C:\Users\******len\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe[3124] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000756014bb 2 bytes [60, 75]
.text     ...                                                                                                                                                                * 2
.text     C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe[3420] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                    00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3788] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                      00000000759aa2ba 1 byte [62]
.text     C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[1184] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                 000000007722eecd 1 byte [62]
.text     C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe[1744] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe[3660] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                        00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe[2720] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                       00000000759aa2ba 1 byte [62]
.text     C:\Windows\Samsung\PanelMgr\SSMMgr.exe[2724] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                 00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\NTI\NTI Backup Now EZ\BackupNowEZtray.exe[4128] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                       00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\pdf24\pdf24.exe[4152] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                 00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\iTunes\iTunesHelper.exe[4272] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                         00000000759aa2ba 1 byte [62]
.text     C:\Program Files\AVAST Software\Avast\AvastUI.exe[4348] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                      00000000759aa2ba 1 byte [62]
.text     C:\Windows\Samsung\PanelMgr\caller64.exe[4372] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                               000000007722eecd 1 byte [62]
.text     C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[4400] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                          000000007722eecd 1 byte [62]
.text     C:\Program Files\iPod\bin\iPodService.exe[4540] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                              000000007722eecd 1 byte [62]
.text     C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[4636] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                 00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[4636] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                               0000000075601465 2 bytes [60, 75]
.text     C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[4636] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                              00000000756014bb 2 bytes [60, 75]
.text     ...                                                                                                                                                                * 2
?         C:\Windows\system32\mssprxy.dll [4636] entry point in ".rdata" section                                                                                             000000006ffd71e6
.text     C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe[4800] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                  00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe[4864] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                     00000000759aa2ba 1 byte [62]
.text     C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe[5104] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                    00000000759aa2ba 1 byte [62]
.text     C:\Windows\AsScrPro.exe[4440] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                                00000000759aa2ba 1 byte [62]
.text     C:\Windows\AsScrPro.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                              0000000075601465 2 bytes [60, 75]
.text     C:\Windows\AsScrPro.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                             00000000756014bb 2 bytes [60, 75]
.text     ...                                                                                                                                                                * 2
.text     C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe[1896] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                  00000000759aa2ba 1 byte [62]
.text     C:\Users\******len\AppData\Roaming\Dropbox\bin\Dropbox.exe[2316] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                             00000000759aa2ba 1 byte [62]
.text     C:\Users\******len\AppData\Roaming\Dropbox\bin\Dropbox.exe[2316] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 69                                           0000000075601465 2 bytes [60, 75]
.text     C:\Users\******len\AppData\Roaming\Dropbox\bin\Dropbox.exe[2316] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 155                                          00000000756014bb 2 bytes [60, 75]
.text     ...                                                                                                                                                                * 2
.text     C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[3996] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                        000000007722eecd 1 byte [62]
.text     C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe[5424] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                           000000007722eecd 1 byte [62]
.text     C:\Program Files\Windows Media Player\wmpnetwk.exe[5616] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                     000000007722eecd 1 byte [62]
.text     C:\Windows\system32\taskhost.exe[4124] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                       000000007722eecd 1 byte [62]
.text     C:\Windows\splwow64.exe[3216] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                                000000007722eecd 1 byte [62]
.text     C:\Users\******len\AppData\Local\Temp\Temp1_gmer_2.1.19323.zip\gmer.exe[1496] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                00000000759aa2ba 1 byte [62]

---- Threads - GMER 2.1 ----

Thread    C:\Windows\system32\svchost.exe [2668:2904]                                                                                                                        000007fef6e52f9c
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3844:3288]                                                                                             0000000075177587
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3844:5304]                                                                                             0000000063c27712
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3844:5452]                                                                                             0000000077622e65
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3844:5880]                                                                                             0000000077623e85
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3844:5700]                                                                                             0000000077623e85
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3844:5560]                                                                                             0000000077623e85

---- Registry - GMER 2.1 ----

Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0025d3b0c158                                                                                        
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0025d3b0c158 (not active ControlSet)                                                                    

---- EOF - GMER 2.1 ----