Filesubmit.A

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-01-2014
Ran by Computer (administrator) on PC on 23-01-2014 11:06:15
Running from C:\Users\Computer\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Lucidlogix Technologies\VIRTU MVP\MVPControlPanel.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\cfosspeed.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Software Security System) C:\Program Files\Lucidlogix Technologies\VIRTU MVP\Ekag20nt.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [VIRTU_MVP_AUTORUN] - C:\Program Files\Lucidlogix Technologies\VIRTU MVP\MVPControlPanel.Exe [3010336 2012-02-05] ()
HKLM\...\Run: [XFast LAN] - C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [1441152 2011-10-19] (cFos Software GmbH)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\THXCfg64.dll [26624 2011-05-13] (Creative Technology Ltd.)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7477016 2013-04-24] (Logitech Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [THX TruStudio NB Settings] - C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe [909824 2011-05-19] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46952 2011-08-02] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [30568 2011-08-02] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFHook] - C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF5 Registry Controller] - C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ControlCenter4] - C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [emsisoft anti-malware] - c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4329408 2013-12-04] (Emsisoft GmbH)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [ASRockXTU] - [x]
HKCU\...\Run: [zASRockInstantBoot] - [x]
HKCU\...\Run: [icq] - C:\Users\Computer\AppData\Roaming\ICQM\icq.exe [27598184 2013-05-28] (ICQ)
HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
MountPoints2: {ec868dc7-933f-11e2-9c0f-806e6f6e6963} - D:\ASRSetup.exe
AppInit_DLLs: C:\Windows\system32\appinit_dll.dll => C:\Windows\system32\appinit_dll.dll [475424 2012-02-05] (Lucidlogix Inc.)
AppInit_DLLs-x32: c:\windows\syswow64\appinit_dll.dll => c:\windows\syswow64\appinit_dll.dll [429856 2012-02-05] (Lucidlogix Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.zonealarm.com/?src=hp&tbid=Solo&Lan=&gu=f115398c87ef40089e192c3b5c501f22&tu=11Ih000BT1B0001&sku=&tstsId=&ver=&
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1B676438BA41CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://mysearch.sweetpacks.com/?src=10&st=12&crg=3.5000006.10061&barid={2808FBB6-0E49-11E3-8FB9-BC5FF46EBD61}
SearchScopes: HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://mysearch.sweetpacks.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10061&barid={2808FBB6-0E49-11E3-8FB9-BC5FF46EBD61}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://mysearch.sweetpacks.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10061&barid={2808FBB6-0E49-11E3-8FB9-BC5FF46EBD61}
SearchScopes: HKCU - DefaultScope {1EA01DDE-4C8B-4B01-9269-D7D69D70D652} URL = hxxp://search.zonealarm.com/search?src=sp&tbid=Solo&Lan=&q={searchTerms}&gu=f115398c87ef40089e192c3b5c501f22&tu=11Ih000BT1B0001&sku=&tstsId=&ver=&&r=729
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=ASRK
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=CC71BC5FF46EBD61&affID=123722&tt=260813_dt&tsp=4986
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=F-ET&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=&apn_uid=7AD27A21-880D-43CD-9E8A-D66FC5AD0A1E&apn_sauid=40E9EDD8-F488-4AB4-80A8-4B18D5CF340C
SearchScopes: HKCU - {1EA01DDE-4C8B-4B01-9269-D7D69D70D652} URL = hxxp://search.zonealarm.com/search?src=sp&tbid=Solo&Lan=&q={searchTerms}&gu=f115398c87ef40089e192c3b5c501f22&tu=11Ih000BT1B0001&sku=&tstsId=&ver=&&r=729
SearchScopes: HKCU - {317BC1CB-3644-4dc0-B2F7-D128793E6014} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A6976579318&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A6976579318&q={searchTerms}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://mysearch.sweetpacks.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10061&barid={2808FBB6-0E49-11E3-8FB9-BC5FF46EBD61}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default
FF user.js: detected! => C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default\user.js
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF SearchPlugin: C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default\searchplugins\Askcom.xml
FF SearchPlugin: C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default\searchplugins\Sweetpacks Search.xml
FF SearchPlugin: C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default\searchplugins\zonealarm.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847} [2013-08-26]
FF Extension: Proxy-Listen.de - Proxyswitcher - C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default\Extensions\admin@proxy-listen.de.xpi [2013-05-30]
FF Extension: Adblock Plus - C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-06-19]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\olanxcbp.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2013-08-26]
FF HKLM\...\Firefox\Extensions: [{8E9E3331-D360-4f87-8803-52DE43566502}] - C:\Program Files\Updater By Sweetpacks\Firefox
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{8E9E3331-D360-4f87-8803-52DE43566502}] - C:\Program Files\Updater By Sweetpacks\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM-x32\...\Firefox\Extensions: [linksicle@linksicle.com] - C:\Program Files (x86)\Mozilla Firefox\extensions\linksicle@linksicle.com

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://search.zonealarm.com/?src=hp&tbid=Solo&Lan=&gu=f115398c87ef40089e192c3b5c501f22&tu=11Ih000BT1B0001&sku=&tstsId=&ver=&"
CHR DefaultSearchProvider: Search By ZoneAlarm
CHR DefaultSearchURL: hxxp://search.zonealarm.com/search?src=sp&tbid=Solo&Lan=&q={searchTerms}&gu=f115398c87ef40089e192c3b5c501f22&tu=11Ih000BT1B0001&sku=&tstsId=&ver=&
CHR Plugin: (Shockwave Flash) - C:\Users\Computer\AppData\Local\Google\Chrome\Application\26.0.1410.43\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Computer\AppData\Local\Google\Chrome\Application\26.0.1410.43\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Computer\AppData\Local\Google\Chrome\Application\26.0.1410.43\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Google Update) - C:\Users\Computer\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Extension: (Docs) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-04-04]
CHR Extension: (Google Drive) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-04-04]
CHR Extension: (YouTube) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-04]
CHR Extension: (Google Search) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-04]
CHR Extension: (Gmail) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-04]

==================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4161512 2013-12-04] (Emsisoft GmbH)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] ()
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [145256 2011-08-02] (Nuance Communications, Inc.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-03-24] ()

==================== Drivers (Whitelisted) ====================

R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [70960 2013-08-24] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [17384 2013-03-28] (Emsisoft GmbH)
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [15936 2013-03-22] (FNet Co., Ltd.)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] ()
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66800 2013-01-17] (Logitech Inc.)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-01-23] ()
S1 lsnfd; system32\drivers\lsnfd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-23 11:06 - 2014-01-23 11:06 - 00020359 _____ C:\Users\Computer\Downloads\FRST.txt
2014-01-23 10:57 - 2014-01-23 10:58 - 02077184 _____ (Farbar) C:\Users\Computer\Downloads\FRST64.exe
2014-01-23 10:56 - 2014-01-23 10:56 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2014-01-23 10:56 - 2014-01-23 10:56 - 00000056 _____ C:\Windows\setupact.log
2014-01-23 10:56 - 2014-01-23 10:56 - 00000000 _____ C:\Windows\setuperr.log
2014-01-23 10:55 - 2014-01-23 10:55 - 00000334 _____ C:\Windows\PFRO.log
2014-01-23 10:28 - 2014-01-23 10:28 - 00000000 ____D C:\FRST
2014-01-22 06:09 - 2014-01-23 10:57 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2014-01-22 06:09 - 2014-01-22 06:09 - 00001091 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2014-01-22 06:09 - 2014-01-22 06:09 - 00000000 ____D C:\Users\Computer\Documents\Anti-Malware
2014-01-22 05:52 - 2014-01-22 05:59 - 238426496 _____ (Emsisoft GmbH                                               ) C:\Users\Computer\Downloads\EmsisoftAntiMalwareSetup.exe
2014-01-20 08:46 - 2014-01-20 08:46 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 08:31 - 2014-01-20 08:31 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-20 08:31 - 2014-01-20 08:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2014-01-20 08:27 - 2014-01-20 08:27 - 13079688 _____ (Microsoft Corporation) C:\Users\Computer\Downloads\Silverlight_x64.exe
2014-01-17 18:19 - 2014-01-17 18:19 - 00000871 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-17 18:17 - 2014-01-17 18:18 - 23884615 _____ C:\Users\Computer\Downloads\vlc-2.1.2-win64.exe
2014-01-15 10:01 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 10:01 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 10:01 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 10:01 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 10:01 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 10:01 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 10:01 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 10:01 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 10:01 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-12 10:57 - 2014-01-12 10:57 - 00618920 _____ C:\Users\Computer\Desktop\Urlaub.jpeg
2014-01-08 22:52 - 2014-01-10 12:25 - 00000000 ____D C:\Users\Computer\Desktop\tha
2014-01-07 05:16 - 2014-01-07 05:16 - 00014842 _____ C:\Users\Computer\Desktop\einkauf.odt
2013-12-30 03:27 - 2013-12-30 03:27 - 00001309 _____ C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaminfeuer Comprehensive Edition Free.LNK
2013-12-30 03:27 - 2013-12-30 03:27 - 00000000 ____D C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start
2013-12-30 03:27 - 2013-12-30 03:27 - 00000000 ____D C:\Program Files (x86)\Kaminfeuer Comprehensive Edition Free
2013-12-30 03:27 - 2013-10-12 17:35 - 14257664 _____ (Jochen Moschko) C:\Windows\Kaminfeuer Comprehensive Edition Free.scr
2013-12-30 03:27 - 2013-10-12 17:35 - 01355776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVBVM50.dll
2013-12-30 03:27 - 2013-10-12 17:35 - 00193296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCI32.OCX
2013-12-30 03:27 - 2013-10-12 17:35 - 00099866 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB5DE.dll
2013-12-30 03:27 - 2013-10-12 17:35 - 00072704 _____ (Microsoft Corporation) C:\Windows\ST5UNST.EXE
2013-12-30 03:27 - 2013-10-12 17:35 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCIDE.dll
2013-12-30 03:27 - 2013-10-12 17:35 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB5StKit.dll
2013-12-30 03:27 - 2013-10-12 17:35 - 00000414 _____ C:\Windows\Kaminfeuer Comprehensive Edition Free.scr.manifest

==================== One Month Modified Files and Folders =======

2014-01-23 11:06 - 2014-01-23 11:06 - 00020359 _____ C:\Users\Computer\Downloads\FRST.txt
2014-01-23 11:04 - 2013-07-19 23:15 - 00000000 ____D C:\Users\Computer\Desktop\Neuer Ordner
2014-01-23 11:04 - 2009-07-14 18:58 - 00696832 _____ C:\Windows\system32\perfh007.dat
2014-01-23 11:04 - 2009-07-14 18:58 - 00148128 _____ C:\Windows\system32\perfc007.dat
2014-01-23 11:04 - 2009-07-14 06:13 - 01613340 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-23 11:03 - 2009-07-14 05:45 - 00015024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-23 11:03 - 2009-07-14 05:45 - 00015024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-23 10:58 - 2014-01-23 10:57 - 02077184 _____ (Farbar) C:\Users\Computer\Downloads\FRST64.exe
2014-01-23 10:57 - 2014-01-22 06:09 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2014-01-23 10:56 - 2014-01-23 10:56 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2014-01-23 10:56 - 2014-01-23 10:56 - 00000056 _____ C:\Windows\setupact.log
2014-01-23 10:56 - 2014-01-23 10:56 - 00000000 _____ C:\Windows\setuperr.log
2014-01-23 10:56 - 2013-03-22 17:51 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys
2014-01-23 10:56 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-23 10:55 - 2014-01-23 10:55 - 00000334 _____ C:\Windows\PFRO.log
2014-01-23 10:55 - 2013-09-02 14:49 - 01650915 _____ C:\Windows\WindowsUpdate.log
2014-01-23 10:50 - 2013-03-22 21:04 - 00000000 ____D C:\Users\Computer\AppData\Roaming\Skype
2014-01-23 10:44 - 2013-03-22 21:00 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-23 10:34 - 2013-03-22 21:38 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-23 10:28 - 2014-01-23 10:28 - 00000000 ____D C:\FRST
2014-01-23 07:45 - 2013-08-26 13:15 - 00000000 ____D C:\Program Files (x86)\RelevantKnowledge
2014-01-23 07:27 - 2013-06-07 23:06 - 00002024 ____H C:\Users\Computer\Documents\Default.rdp
2014-01-23 00:41 - 2013-08-10 09:59 - 00000024 _____ C:\Users\Computer\Desktop\umbro.txt
2014-01-22 08:27 - 2013-03-22 21:12 - 00000000 ____D C:\Users\Computer\AppData\Roaming\TS3Client
2014-01-22 07:33 - 2013-04-26 18:20 - 00001417 _____ C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-22 06:09 - 2014-01-22 06:09 - 00001091 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2014-01-22 06:09 - 2014-01-22 06:09 - 00000000 ____D C:\Users\Computer\Documents\Anti-Malware
2014-01-22 05:59 - 2014-01-22 05:52 - 238426496 _____ (Emsisoft GmbH                                               ) C:\Users\Computer\Downloads\EmsisoftAntiMalwareSetup.exe
2014-01-20 08:46 - 2014-01-20 08:46 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 08:46 - 2013-11-03 18:07 - 00000000 ____D C:\ProgramData\Oracle
2014-01-20 08:46 - 2013-06-30 14:39 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-20 08:31 - 2014-01-20 08:31 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-20 08:31 - 2014-01-20 08:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2014-01-20 08:27 - 2014-01-20 08:27 - 13079688 _____ (Microsoft Corporation) C:\Users\Computer\Downloads\Silverlight_x64.exe
2014-01-20 04:41 - 2013-03-31 14:30 - 00000000 ____D C:\Users\Computer\AppData\Local\CrashDumps
2014-01-17 18:19 - 2014-01-17 18:19 - 00000871 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-17 18:19 - 2013-11-22 01:06 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-17 18:18 - 2014-01-17 18:17 - 23884615 _____ C:\Users\Computer\Downloads\vlc-2.1.2-win64.exe
2014-01-16 04:58 - 2009-07-14 05:45 - 00413688 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-12 10:57 - 2014-01-12 10:57 - 00618920 _____ C:\Users\Computer\Desktop\urlaub.jpeg
2014-01-10 12:42 - 2013-06-08 11:22 - 00000000 ____D C:\Users\Computer\Desktop\fotos
2014-01-10 12:25 - 2014-01-08 22:52 - 00000000 ____D C:\Users\Computer\Desktop\tha
2014-01-07 05:16 - 2014-01-07 05:16 - 00014842 _____ C:\Users\Computer\Desktop\einkauf.odt
2014-01-05 22:29 - 2013-12-22 18:06 - 00000000 ____D C:\Users\Computer\AppData\Local\Battle.net
2013-12-30 03:27 - 2013-12-30 03:27 - 00001309 _____ C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaminfeuer Comprehensive Edition Free.LNK
2013-12-30 03:27 - 2013-12-30 03:27 - 00000000 ____D C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start
2013-12-30 03:27 - 2013-12-30 03:27 - 00000000 ____D C:\Program Files (x86)\Kaminfeuer Comprehensive Edition Free

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.840.dll


Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\avgnt.exe
C:\Users\Computer\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 16:01

==================== End Of Log ============================