Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
YouTouAAdBllOckerr 1.1 entfernen

YouTouAAdBllOckerr 1.1 entfernen


Plagegeister aller Art und deren Bekämpfung: YouTouAAdBllOckerr 1.1 entfernen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 03.02.2014, 14:05   #1
miroleon
 
YouTouAAdBllOckerr 1.1 entfernen - Standard

YouTouAAdBllOckerr 1.1 entfernen


Moin an alle,
Ich habe seit einigen Tagen eine ungewollte Erwiterung in meinen Browsern. Sie nennt sich selbst "YouTouAAdBllOckerr 1.1". In Firefox bekomme ich sie auch gelöscht. Sie kommt zwar bei jedem Neustart wieder, aber man könnte sie jedes mal aufs neue Löschen. In Google Chrome hingegen bekommt man die Erweiterung gar nicht erst wieder raus, denn an der Erweiterung ist die Meldung "Durch Unternehmensrichtlinie installiert", was dazu fürht, dass ich sie nicht entfernen kann.
Ich habe einen ähnlichen Fall hier schon einmal gesehen, aber da ging es so tief (zumindest aus meinem Einblick) in die Materie, dass ich nicht einfach das selbe machen wollte auf Basis irgendwelche Scans auf einem anderen Computer.
Ich hoffe mir kann geholfen werden.

Mit den freundlichsten Grüßen Miro

Alt 03.02.2014, 14:08   #2
Aneri
/// Malwareteam
 
YouTouAAdBllOckerr 1.1 entfernen - Standard

YouTouAAdBllOckerr 1.1 entfernen




Eine Bereinigung ist mitunter mit viel Arbeit für Dich verbunden.
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
  • Nur Scanns durchführen zu denen Du von einem Helfer aufgefordert wirst.
  • Bitte kein Crossposting ( posten in mehreren Foren).
  • Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
  • Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
  • Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf. Erschwert mir nämlich das auswerten.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der Schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

Vista und Win7 User
Alle Tools mit Rechtsklick "als Administrator ausführen" starten.

Schritt 1

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 03.02.2014, 14:18   #3
miroleon
 
YouTouAAdBllOckerr 1.1 entfernen - Standard

YouTouAAdBllOckerr 1.1 entfernen


FRST.txt

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by Miro (administrator) on MIRO-PC on 03-02-2014 14:12:22
Running from C:\Users\Miro\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google Inc.) C:\Users\Miro\AppData\Local\Google\Update\GoogleUpdate.exe
() C:\Users\Miro\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Spotify Ltd) C:\Users\Miro\AppData\Roaming\Spotify\spotify.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Spotify Ltd) C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Program Files (x86)\puush\puush.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
() C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Adobe Systems, Incorporated) C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\swriter.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Corporation) C:\Windows\regedit.exe
(Resplendence Software Projects) C:\Program Files\Registrar Registry Manager\rr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google) C:\Users\Miro\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-10-17] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PowerDVD13Agent] - "C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe"
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813200 2014-01-23] (LogMeIn Inc.)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [AdobeBridge] - [x]
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [Google Update] - C:\Users\Miro\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-28] (Google Inc.)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Miro\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-09-14] (AMD)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [BitTorrent] - C:\Users\Miro\AppData\Roaming\BitTorrent\BitTorrent.exe [895328 2013-11-23] (BitTorrent Inc.)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [Spotify] - C:\Users\Miro\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-15] (Spotify Ltd)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [Spotify Web Helper] - C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-15] (Spotify Ltd)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [puush] - C:\Program Files (x86)\puush\puush.exe [567880 2014-01-18] ()
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\MountPoints2: {12f7b64d-7b5b-11e2-8cdb-8c89a583ea0f} - G:\iStudio.exe
AppInit_DLLs: C:\PROGRA~3\WinSpeed\WINSPE~1.DLL => C:\ProgramData\WinSpeed\WinSpeed_x64.dll [4518912 2013-12-27] ()
AppInit_DLLs-x32: c:\progra~3\winspeed\winspeed.dll => C:\ProgramData\WinSpeed\WinSpeed.dll [4463616 2013-12-27] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&q={searchTerms}&installDate=30/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=hp&installDate=30/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC8D69FBEB21CCD01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&q={searchTerms}&installDate=30/10/2013
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&q={searchTerms}&installDate=30/10/2013
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&q={searchTerms}&installDate=30/10/2013
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&q={searchTerms}&installDate=30/10/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&q={searchTerms}&installDate=30/10/2013
BHO: CoauapEEXetEnsion - {47B2B9BB-4216-E299-B56C-E25844B7BDC7} - C:\ProgramData\CoauapEEXetEnsion\sECwMriev8.x64.dll ()
Handler: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\MP3 Skype Recorder\Skype4COM.dll (Skype Technologies)
Handler-x32: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\Windows\SysWow64\Msdxm6.ocx (Microsoft Corporation)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter-x32: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter-x32: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter-x32: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Miro\AppData\Roaming\Mozilla\Firefox\Profiles\2b5n2hs9.default
FF NewTab: about:blank
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF Homepage: hxxp://www.youtube.com/
FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&installDate=30/10/2013&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0-pre1-20130701-0403 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.118.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.132.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @onlive.com/OnLiveGameClientDetector,version=1.0.0 - C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll No File
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Miro\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Miro\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Miro\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Miro\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Miro\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Miro\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Miro\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Miro\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\Miro\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\Miro\AppData\Roaming\Mozilla\Firefox\Profiles\2b5n2hs9.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Miro\AppData\Roaming\Mozilla\Firefox\Profiles\2b5n2hs9.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-22]
FF Extension: Elite Proxy Switcher - C:\Users\Miro\AppData\Roaming\Mozilla\Firefox\Profiles\2b5n2hs9.default\Extensions\eliteproxyswitcher@my-proxy.com.xpi [2014-01-18]
FF Extension: Adblock Plus - C:\Users\Miro\AppData\Roaming\Mozilla\Firefox\Profiles\2b5n2hs9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-03]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-02]
CHR Extension: (Google Drive) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-02]
CHR Extension: (YouTube) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-02]
CHR Extension: (YouTouAAdBllOckerr) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\chaaadnjlkobilfiginoelodbincamkg [2014-02-02]
CHR Extension: (Google-Suche) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-02]
CHR Extension: (Google Wallet) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-02]
CHR Extension: (Google Mail) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-02]
CHR Extension: (50CoUpponns) - C:\ProgramData\fpkbdnldjnjaakafccpnpkbgomjhcmel [2013-12-31]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Miro\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-01-04]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-01-04]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-07] (Adobe Systems)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-05-13] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-05-13] (BlueStack Systems, Inc.)
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [240112 2010-11-23] (CyberLink)
R2 f1f78e38; C:\ProgramData\WinSpeed\WinSpeedSvc.dll [181584 2013-12-27] ()
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-12-13] (LogMeIn, Inc.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-04] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-07-02] ()
S2 ADExchange; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [x]
S3 WinHttpAutoProxySvc; winhttp.dll [x]

==================== Drivers (Whitelisted) ====================

S1 archlp; C:\Windows\SysWow64\Drivers\archlp.sys [10624 2008-01-25] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-05-13] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-12-05] (DT Soft Ltd)
R3 ElgatoGC658Y; C:\Windows\System32\Drivers\ElgatoGC658.sys [50288 2012-11-12] (UB658)
S3 hcwhdpvr; C:\Windows\System32\DRIVERS\hcwhdpvr.sys [189952 2010-06-23] (Hauppauge, Inc.)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
S3 MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10x64.sys [60288 2010-09-15] (Generic USB smartcard reader)
R3 TSVAD_PCM; C:\Windows\System32\drivers\tsvadpcm.sys [33552 2012-08-22] (Windows (R) Win 7 DDK provider)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [x]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [x]
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-03 14:12 - 2014-02-03 14:13 - 00024835 _____ () C:\Users\Miro\Desktop\FRST.txt
2014-02-03 14:12 - 2014-02-03 14:12 - 00000000 ____D () C:\FRST
2014-02-03 13:53 - 2014-02-03 14:12 - 00000000 ____D () C:\Users\Miro\Desktop\Gegen Viren Gedöns
2014-02-03 13:53 - 2014-02-03 13:53 - 02080256 _____ (Farbar) C:\Users\Miro\Desktop\FRST64.exe
2014-02-03 13:36 - 2014-02-03 13:36 - 00000000 ____D () C:\Program Files\Registrar Registry Manager
2014-02-03 13:34 - 2014-02-03 13:35 - 04968008 _____ (Resplendence Software Projects Sp. ) C:\Users\Miro\Downloads\RegistrarHomeV7.exe
2014-02-03 13:19 - 2014-02-03 13:19 - 00000000 _____ () C:\Users\Miro\RegDelNull
2014-02-03 13:15 - 2014-02-03 13:15 - 00000000 ____D () C:\Users\Miro\Downloads\RegHide
2014-02-03 13:15 - 2014-02-03 13:15 - 00000000 ____D () C:\Users\Miro\Downloads\Regdelnull
2014-02-03 13:13 - 2014-02-03 13:13 - 00044335 _____ () C:\Users\Miro\Downloads\Regdelnull.zip
2014-02-03 13:13 - 2014-02-03 13:13 - 00038945 _____ () C:\Users\Miro\Downloads\RegHide.zip
2014-02-03 12:55 - 2014-02-03 13:03 - 538241486 _____ () C:\Users\Miro\Downloads\Pompeii_2D_Online_Trailer_4_12_2013_HD1080p.mov
2014-02-02 14:44 - 2014-02-02 14:44 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-31 19:53 - 2014-01-31 19:53 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-01-31 19:48 - 2014-02-02 11:09 - 00000112 _____ () C:\Windows\setupact.log
2014-01-31 19:48 - 2014-01-31 19:48 - 00001562 _____ () C:\Windows\PFRO.log
2014-01-31 19:48 - 2014-01-31 19:48 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-31 19:09 - 2014-01-31 19:09 - 00028333 _____ () C:\Users\Miro\Documents\47 Ronin Kritik Review.odt
2014-01-31 19:09 - 2014-01-31 19:09 - 00025747 _____ () C:\Users\Miro\Documents\Geschichten.odt
2014-01-31 18:17 - 2014-01-31 18:17 - 00000000 ____D () C:\Program Files (x86)\YouTouAAdBllOckerr
2014-01-31 18:13 - 2014-01-31 18:13 - 00000000 ____D () C:\Users\Miro\AppData\Local\Packages
2014-01-31 18:12 - 2014-01-31 19:48 - 00000000 ____D () C:\ProgramData\YouTouAAdBllOckerr
2014-01-31 18:12 - 2014-01-31 18:12 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 18:12 - 2014-01-31 18:12 - 00000000 ____D () C:\ProgramData\chaaadnjlkobilfiginoelodbincamkg
2014-01-26 16:47 - 2014-01-26 16:47 - 00001110 _____ () C:\Users\Public\Desktop\Debut Video Capture Software.lnk
2014-01-26 16:47 - 2014-01-26 16:47 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\NCH Software
2014-01-26 16:46 - 2014-01-26 16:46 - 01540672 _____ (NCH Software) C:\Users\Miro\Downloads\debutpsetup_1.82.exe
2014-01-24 18:54 - 2014-01-24 19:01 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\Miro\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-24 18:52 - 2014-01-24 18:53 - 58575631 _____ () C:\Users\Miro\Desktop\Bushido feat. Kollegah & Farid Bang - Gangsta Rap Kings_youtube_original.mp4
2014-01-19 16:59 - 2014-01-19 17:00 - 01483776 _____ () C:\Users\Miro\Documents\Porsche SoWi.ppt
2014-01-19 16:58 - 2014-01-19 16:58 - 01516544 _____ () C:\Users\Miro\Documents\porsche 2.ppt
2014-01-19 16:55 - 2014-01-19 17:01 - 163606685 _____ () C:\Users\Miro\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-19 16:50 - 2014-01-19 16:50 - 01418745 _____ () C:\Users\Miro\Documents\porsche.pptx
2014-01-19 10:45 - 2014-01-13 18:51 - 00016111 _____ () C:\Users\Miro\Documents\untitled_2_1.odt
2014-01-18 22:01 - 2014-01-18 22:02 - 00000000 ____D () C:\Program Files (x86)\puush
2014-01-18 22:01 - 2014-01-18 22:01 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\puush
2014-01-18 22:00 - 2014-01-18 22:00 - 01085440 _____ () C:\Users\Miro\Downloads\puush.msi
2014-01-18 20:38 - 2014-01-18 20:38 - 00000000 ____D () C:\Program Files\CPUID
2014-01-18 20:37 - 2014-01-18 20:37 - 01466296 _____ ( ) C:\Users\Miro\Downloads\cpu-z_1.68-setup-en.exe
2014-01-18 14:49 - 2014-01-18 14:50 - 00279844 _____ () C:\Users\Miro\Downloads\dcse8.zip
2014-01-18 14:48 - 2014-01-18 14:57 - 18089328 _____ () C:\Users\Miro\Downloads\TI-Connect-4.0.0.218.exe
2014-01-18 11:18 - 2014-01-18 11:39 - 214644127 _____ () C:\Users\Miro\Downloads\Psaiko.Dino-3CD-DE-2014-VOiCE.rar
2014-01-15 14:18 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 14:18 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 14:18 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-10 22:58 - 2014-01-10 22:58 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\SpotifyController
2014-01-10 22:53 - 2014-01-10 22:57 - 08205497 _____ ( ) C:\Users\Miro\Downloads\setupSpotifyController.exe
2014-01-07 13:58 - 2014-01-07 13:58 - 00009757 _____ () C:\Users\Miro\Documents\2014.odt
2014-01-07 13:53 - 2014-01-07 14:03 - 00000000 ____D () C:\Users\Miro\AppData\Local\DayZ
2014-01-07 13:53 - 2014-01-07 13:53 - 00000000 ____D () C:\Users\Miro\Documents\DayZ
2014-01-06 15:17 - 2014-02-03 14:12 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Spotify
2014-01-06 15:17 - 2014-01-28 20:58 - 00000000 ____D () C:\Users\Miro\AppData\Local\Spotify
2014-01-06 15:17 - 2014-01-06 15:17 - 00001799 _____ () C:\Users\Miro\Desktop\Spotify.lnk
2014-01-06 15:17 - 2014-01-06 15:17 - 00001785 _____ () C:\Users\Miro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-01-06 15:16 - 2014-01-06 15:16 - 00127080 _____ (Spotify Ltd) C:\Users\Miro\Downloads\SpotifySetup.exe

==================== One Month Modified Files and Folders =======

2014-02-03 14:13 - 2014-02-03 14:12 - 00024835 _____ () C:\Users\Miro\Desktop\FRST.txt
2014-02-03 14:12 - 2014-02-03 14:12 - 00000000 ____D () C:\FRST
2014-02-03 14:12 - 2014-02-03 13:53 - 00000000 ____D () C:\Users\Miro\Desktop\Gegen Viren Gedöns
2014-02-03 14:12 - 2014-01-06 15:17 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Spotify
2014-02-03 14:11 - 2012-03-21 18:29 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Skype
2014-02-03 13:53 - 2014-02-03 13:53 - 02080256 _____ (Farbar) C:\Users\Miro\Desktop\FRST64.exe
2014-02-03 13:36 - 2014-02-03 13:36 - 00000000 ____D () C:\Program Files\Registrar Registry Manager
2014-02-03 13:35 - 2014-02-03 13:34 - 04968008 _____ (Resplendence Software Projects Sp. ) C:\Users\Miro\Downloads\RegistrarHomeV7.exe
2014-02-03 13:19 - 2014-02-03 13:19 - 00000000 _____ () C:\Users\Miro\RegDelNull
2014-02-03 13:19 - 2012-03-02 13:32 - 00000000 ____D () C:\Users\Miro
2014-02-03 13:15 - 2014-02-03 13:15 - 00000000 ____D () C:\Users\Miro\Downloads\RegHide
2014-02-03 13:15 - 2014-02-03 13:15 - 00000000 ____D () C:\Users\Miro\Downloads\Regdelnull
2014-02-03 13:13 - 2014-02-03 13:13 - 00044335 _____ () C:\Users\Miro\Downloads\Regdelnull.zip
2014-02-03 13:13 - 2014-02-03 13:13 - 00038945 _____ () C:\Users\Miro\Downloads\RegHide.zip
2014-02-03 13:03 - 2014-02-03 12:55 - 538241486 _____ () C:\Users\Miro\Downloads\Pompeii_2D_Online_Trailer_4_12_2013_HD1080p.mov
2014-02-03 12:53 - 2012-03-02 13:32 - 01373007 _____ () C:\Windows\WindowsUpdate.log
2014-02-02 20:13 - 2012-05-29 20:14 - 00000000 ____D () C:\Users\Miro\AppData\Local\LooksBuilder
2014-02-02 16:58 - 2012-03-07 20:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-02 16:29 - 2012-05-02 15:01 - 00000000 ____D () C:\Users\Miro\AppData\Local\PMB Files
2014-02-02 16:29 - 2012-05-02 15:01 - 00000000 ____D () C:\ProgramData\PMB Files
2014-02-02 14:44 - 2014-02-02 14:44 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-02 14:44 - 2013-07-28 19:53 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-02 14:44 - 2012-04-06 18:52 - 00000000 ____D () C:\Users\Miro\AppData\Local\Google
2014-02-02 14:43 - 2012-11-06 22:15 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Opera
2014-02-02 14:43 - 2012-11-06 22:15 - 00000000 ____D () C:\Users\Miro\AppData\Local\Opera
2014-02-02 14:43 - 2012-11-06 22:14 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-02 14:38 - 2013-02-27 19:33 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-02-02 14:37 - 2012-11-26 18:31 - 00000000 ____D () C:\Program Files (x86)\Free FLV Converter
2014-02-02 14:37 - 2012-03-20 20:50 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2014-02-02 14:37 - 2012-03-20 20:49 - 00000000 ____D () C:\Program Files (x86)\Image-Line
2014-02-02 11:19 - 2013-07-19 17:15 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\BitTorrent
2014-02-02 11:19 - 2009-07-14 05:45 - 00022528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-02 11:19 - 2009-07-14 05:45 - 00022528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-02 11:18 - 2013-06-09 19:24 - 00000000 ____D () C:\Users\Miro\AppData\Local\LogMeIn Hamachi
2014-02-02 11:16 - 2011-04-12 08:43 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2014-02-02 11:16 - 2011-04-12 08:43 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2014-02-02 11:16 - 2009-07-14 06:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-02 11:12 - 2012-03-09 17:24 - 00000000 ____D () C:\Users\Miro\AppData\Local\Adobe
2014-02-02 11:11 - 2013-07-28 19:55 - 00000000 ___RD () C:\Users\Miro\Google Drive
2014-02-02 11:09 - 2014-01-31 19:48 - 00000112 _____ () C:\Windows\setupact.log
2014-02-01 20:13 - 2013-09-04 19:15 - 00000000 ____D () C:\Users\Miro\AppData\Local\Game Dev Tycoon - Steam
2014-01-31 20:34 - 2013-08-23 17:01 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\.minecraft
2014-01-31 19:53 - 2014-01-31 19:53 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-01-31 19:48 - 2014-01-31 19:48 - 00001562 _____ () C:\Windows\PFRO.log
2014-01-31 19:48 - 2014-01-31 19:48 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-31 19:48 - 2014-01-31 18:12 - 00000000 ____D () C:\ProgramData\YouTouAAdBllOckerr
2014-01-31 19:24 - 2012-12-27 21:07 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Winamp
2014-01-31 19:24 - 2012-03-17 22:04 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\DAEMON Tools Lite
2014-01-31 19:23 - 2013-04-15 19:12 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\CoreFTP
2014-01-31 19:23 - 2012-12-12 14:38 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\FileZilla
2014-01-31 19:23 - 2012-05-07 20:16 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\inkscape
2014-01-31 19:23 - 2012-04-04 17:57 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Azureus
2014-01-31 19:23 - 2012-03-18 13:46 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Sony
2014-01-31 19:21 - 2012-03-04 14:44 - 00000000 ____D () C:\Windows\Minidump
2014-01-31 19:21 - 2012-03-02 13:25 - 00000000 ____D () C:\Windows\Panther
2014-01-31 19:10 - 2012-03-09 17:01 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Audacity
2014-01-31 19:09 - 2014-01-31 19:09 - 00028333 _____ () C:\Users\Miro\Documents\47 Ronin Kritik Review.odt
2014-01-31 19:09 - 2014-01-31 19:09 - 00025747 _____ () C:\Users\Miro\Documents\Geschichten.odt
2014-01-31 19:04 - 2012-09-08 10:14 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Orbit
2014-01-31 18:17 - 2014-01-31 18:17 - 00000000 ____D () C:\Program Files (x86)\YouTouAAdBllOckerr
2014-01-31 18:17 - 2013-10-30 18:05 - 00000000 ____D () C:\ProgramData\2aa28aaacae0f0d4
2014-01-31 18:13 - 2014-01-31 18:13 - 00000000 ____D () C:\Users\Miro\AppData\Local\Packages
2014-01-31 18:12 - 2014-01-31 18:12 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 18:12 - 2014-01-31 18:12 - 00000000 ____D () C:\ProgramData\chaaadnjlkobilfiginoelodbincamkg
2014-01-31 18:12 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-01-31 18:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-01-28 20:58 - 2014-01-06 15:17 - 00000000 ____D () C:\Users\Miro\AppData\Local\Spotify
2014-01-27 18:14 - 2013-05-16 14:28 - 00000000 ____D () C:\Users\Miro\Desktop\EselEntertainment
2014-01-26 16:47 - 2014-01-26 16:47 - 00001110 _____ () C:\Users\Public\Desktop\Debut Video Capture Software.lnk
2014-01-26 16:47 - 2014-01-26 16:47 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\NCH Software
2014-01-26 16:47 - 2013-04-04 16:04 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2014-01-26 16:46 - 2014-01-26 16:46 - 01540672 _____ (NCH Software) C:\Users\Miro\Downloads\debutpsetup_1.82.exe
2014-01-26 16:42 - 2013-02-27 19:29 - 00000000 ____D () C:\Users\Miro\Documents\Youcam
2014-01-24 19:03 - 2013-04-23 17:54 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-01-24 19:02 - 2012-03-05 15:27 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\DVDVideoSoft
2014-01-24 19:01 - 2014-01-24 18:54 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\Miro\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-24 18:53 - 2014-01-24 18:52 - 58575631 _____ () C:\Users\Miro\Desktop\Bushido feat. Kollegah & Farid Bang - Gangsta Rap Kings_youtube_original.mp4
2014-01-24 17:31 - 2012-06-30 16:13 - 00000000 ____D () C:\Users\Miro\Desktop\Games
2014-01-24 17:30 - 2012-06-30 16:17 - 00000000 ____D () C:\Users\Miro\Desktop\Programme
2014-01-24 17:30 - 2012-04-21 12:54 - 00000000 ____D () C:\Users\Miro\Documents\Adobe
2014-01-22 18:08 - 2012-03-05 18:18 - 00000000 ____D () C:\Users\Miro\dwhelper
2014-01-22 18:07 - 2012-03-14 12:46 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-01-19 17:04 - 2012-03-02 13:32 - 00000000 ___RD () C:\Users\Miro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-19 17:01 - 2014-01-19 16:55 - 163606685 _____ () C:\Users\Miro\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-19 17:00 - 2014-01-19 16:59 - 01483776 _____ () C:\Users\Miro\Documents\Porsche SoWi.ppt
2014-01-19 16:58 - 2014-01-19 16:58 - 01516544 _____ () C:\Users\Miro\Documents\porsche 2.ppt
2014-01-19 16:50 - 2014-01-19 16:50 - 01418745 _____ () C:\Users\Miro\Documents\porsche.pptx
2014-01-19 10:46 - 2013-11-09 15:03 - 00000000 ____D () C:\Users\Miro\AppData\Local\Overwolf
2014-01-18 22:02 - 2014-01-18 22:01 - 00000000 ____D () C:\Program Files (x86)\puush
2014-01-18 22:01 - 2014-01-18 22:01 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\puush
2014-01-18 22:00 - 2014-01-18 22:00 - 01085440 _____ () C:\Users\Miro\Downloads\puush.msi
2014-01-18 20:38 - 2014-01-18 20:38 - 00000000 ____D () C:\Program Files\CPUID
2014-01-18 20:37 - 2014-01-18 20:37 - 01466296 _____ ( ) C:\Users\Miro\Downloads\cpu-z_1.68-setup-en.exe
2014-01-18 14:57 - 2014-01-18 14:48 - 18089328 _____ () C:\Users\Miro\Downloads\TI-Connect-4.0.0.218.exe
2014-01-18 14:50 - 2014-01-18 14:49 - 00279844 _____ () C:\Users\Miro\Downloads\dcse8.zip
2014-01-18 11:39 - 2014-01-18 11:18 - 214644127 _____ () C:\Users\Miro\Downloads\Psaiko.Dino-3CD-DE-2014-VOiCE.rar
2014-01-16 16:25 - 2012-04-08 16:28 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-16 16:25 - 2012-04-08 16:27 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-16 16:25 - 2012-03-04 17:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-16 03:26 - 2013-12-31 12:03 - 00000000 ____D () C:\ProgramData\50CoUpponns
2014-01-16 03:26 - 2012-07-17 20:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-16 03:26 - 2009-07-14 05:45 - 05029056 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-16 03:07 - 2013-08-04 23:44 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 03:02 - 2012-03-03 08:23 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-13 18:51 - 2014-01-19 10:45 - 00016111 _____ () C:\Users\Miro\Documents\untitled_2_1.odt
2014-01-10 22:58 - 2014-01-10 22:58 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\SpotifyController
2014-01-10 22:57 - 2014-01-10 22:53 - 08205497 _____ ( ) C:\Users\Miro\Downloads\setupSpotifyController.exe
2014-01-07 14:03 - 2014-01-07 13:53 - 00000000 ____D () C:\Users\Miro\AppData\Local\DayZ
2014-01-07 13:58 - 2014-01-07 13:58 - 00009757 _____ () C:\Users\Miro\Documents\2014.odt
2014-01-07 13:53 - 2014-01-07 13:53 - 00000000 ____D () C:\Users\Miro\Documents\DayZ
2014-01-06 15:17 - 2014-01-06 15:17 - 00001799 _____ () C:\Users\Miro\Desktop\Spotify.lnk
2014-01-06 15:17 - 2014-01-06 15:17 - 00001785 _____ () C:\Users\Miro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-01-06 15:16 - 2014-01-06 15:16 - 00127080 _____ (Spotify Ltd) C:\Users\Miro\Downloads\SpotifySetup.exe
2014-01-05 18:04 - 2013-02-11 17:34 - 00000000 ____D () C:\Users\Miro\AppData\Local\FlickrNet
2014-01-05 15:22 - 2013-09-07 22:24 - 00000132 _____ () C:\Users\Miro\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen

Some content of TEMP:
====================
C:\Users\Miro\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 22:46

==================== End Of Log ============================
--- --- ---


Addition
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04
Ran by Miro at 2014-02-03 14:13:26
Running from C:\Users\Miro\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Ableton Live 9 Suite (Version: 9.0.0.0 - Ableton)
Ace of Spades (x32 Version: 0.75.014 - Ben Aksoy)
Acronis*True*Image*Home 2011 (x32 Version: 14.0.6696 - Acronis)
Adobe After Effects CS6 (x32 Version: 11 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.9.0.1030 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.9.0.1030 - Adobe Systems Incorporated) Hidden
Adobe Bridge 1.0 (x32 Version: 1.0.1.1 - Adobe Systems) Hidden
Adobe Color Video Profiles AE CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Common File Installer (x32 Version: 1.00.002 - Adobe System Incorporated) Hidden
Adobe Creative Cloud (x32 Version: 2.2.0.248 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated) Hidden
Adobe Flash Media Live Encoder 3.2 (x32 Version: 3.2.0 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Help Center 2.0 (x32 Version: 2.0.0 - Adobe Systems) Hidden
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden
Adobe Illustrator CS6 (x32 Version: 16.0 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe Media Player (x32 Version: 1.1 - Adobe Systems Incorporated)
Adobe MotionPicture Color Files CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CC (x32 Version: 14.0 - Adobe Systems Incorporated)
Adobe Premiere Pro 2.0 (x32 Version: 2.000.000 - Adobe Systems, Inc.)
Adobe Premiere Pro 2.0 (x32 Version: 2.000.000 - Adobe Systems, Inc.) Hidden
Adobe Premiere Pro CS6 (x32 Version: 6.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (x32 Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122 - Adobe Systems, Inc.)
Adobe Stock Photos 1.0 (x32 Version: 1.0.2 - Adobe Systems) Hidden
AdobeColorCommonSetRGB (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adventure Game Studio 3.2.1 (x32 Version: 3.2.1 - Chris Jones)
Alan Wake (x32 Version:  - Remedy Entertainment)
Alan Wake's American Nightmare (x32 Version:  - Remedy Entertainment)
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18 - Amazon Services LLC)
AMD Accelerated Video Transcoding (Version: 13.15.100.30830 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD AVIVO64 Codecs (Version: 11.6.0.10914 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.0830.1944.33589 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.80830.1925 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ArcSoft ShowBiz (x32 Version:  - ArcSoft)
ArcSoft TotalMedia Extreme (x32 Version:  - ArcSoft)
ARMA 2 (x32 Version:  - Bohemia Interactive)
Arma 2: DayZ Mod (x32 Version:  - )
ARMA 2: Operation Arrowhead (x32 Version:  - Bohemia Interactive)
ASIO4ALL (x32 Version: 2.10 - Michael Tippach)
Audacity 2.0 (x32 Version:  - Audacity Team)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
AviSynth 2.5 (x32 Version:  - )
Battlefield 1942™ (x32 Version: 1.6.20.0 - Electronic Arts)
Battlefield 3™ (x32 Version: 1.4.0.0 - Electronic Arts)
Battlelog Web Plugins (x32 Version: 2.3.0 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (x32 Version:  - )
BattlEye Uninstall (x32 Version:  - )
BitTorrent (HKCU Version: 7.8.2.30332 - BitTorrent Inc.)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Blender (Version: 2.63-release - Blender Foundation)
BlueJ (x32 Version: 3.1.0 - BlueJ Team)
BlueStacks App Player (x32 Version: 0.7.12.896 - BlueStack Systems, Inc.)
BlueStacks Notification Center (x32 Version: 0.7.12.896 - BlueStack Systems, Inc.)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Brick-Force  (x32 Version:  - Infernum Productions AG)
BrickForce 1.9.87 (x32 Version: 1.9.87 - Infernum Productions AG)
Camtasia Studio 7 (x32 Version: 7.0.1 - TechSmith Corporation)
Canon MOV Decoder (x32 Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (x32 Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 3.7.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (x32 Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Sample Music (x32 Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (x32 Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (x32 Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (x32 Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (x32 Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (x32 Version: 1.9.0.0 - Canon Inc.)
Canon Utilities ZoomBrowser EX (x32 Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (x32 Version: 1.5.0.9 - Canon Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1213.19931 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
CCFinder (x32 Version: 2014 - Abelssoft)
CCleaner (Version: 4.05 - Piriform)
Cinema 4D version R12 (x32 Version: R12 - Salat Production)
CoauapEEXetEnsion (x32 Version:  - CoiupEXtension)
Color Suite v11.0.1 (x32 Version: 11.0.1 - Red Giant, LLC)
Core FTP LE (x32 Version:  - )
CPUID CPU-Z 1.68 (Version:  - )
CyberLink BD & 3D Advisor 2.0 (x32 Version:  - )
CyberLink Blu-ray Disc Suite (x32 Version: 6.0.4703 - CyberLink Corp.)
CyberLink Blu-ray Disc Suite (x32 Version: 6.0.4703 - CyberLink Corp.) Hidden
CyberLink LabelPrint (x32 Version: 2.5.1916 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.1916 - CyberLink Corp.) Hidden
CyberLink LG Burning Tool (x32 Version: 6.2.4619 - CyberLink Corp.)
CyberLink LG Burning Tool (x32 Version: 6.2.4619 - CyberLink Corp.) Hidden
CyberLink MediaShow (x32 Version: 4.1.3402 - CyberLink Corp.)
CyberLink MediaShow (x32 Version: 4.1.3402 - CyberLink Corp.) Hidden
CyberLink PowerDVD 9 (x32 Version: 9.0.4105.01 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.4105.01 - CyberLink Corp.) Hidden
CyberLink PowerProducer (x32 Version: 5.0.2.2512 - CyberLink Corp.)
CyberLink PowerProducer (x32 Version: 5.0.2.2512 - CyberLink Corp.) Hidden
CyberLink YouCam (x32 Version: 2.0.3718 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 2.0.3718 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (x32 Version: 4.46.1.0327 - DT Soft Ltd)
Damage version 2.5 (x32 Version: 2.5 - Digieffects)
Dan the Spaceman (Version:  - Epic Games, Inc.)
DayZ (x32 Version:  - Bohemia Interactive)
Deadlight (x32 Version:  - Tequila Works, S.L.)
Dear Esther (x32 Version:  - )
Debut Video Capture Software (x32 Version: 1.82 - NCH Software)
Dexpot (HKCU Version: 1.6.5 - Dexpot GbR)
Diablo III (x32 Version: 1.0.3.10485 - Blizzard Entertainment)
Die Sims™ 3 (x32 Version: 1.36.45 - Electronic Arts)
Die Sims™ 3 Erstelle ein Muster-Tool (x32 Version: 1.0.0 - Electronic Arts)
Dropbox (HKCU Version: 2.0.22 - Dropbox, Inc.)
Dxtory version 2.0.122 (x32 Version: 2.0.122 - Dxtory Software)
Edna Bricht Aus (x32 Version: 1.0 - Daedalic Entertainment)
Elgato Game Capture HD (x32 Version: 1.42.9.524 - Elgato Systems GmbH)
ESN Sonar (x32 Version: 0.70.4 - ESN Social Software AB)
Far Cry 3 (x32 Version: 1.03 - Ubisoft)
ffdshow v1.2.4475 [2012-07-12] (x32 Version: 1.2.4475.0 - )
ffdshow x64 v1.2.4475 [2012-07-12] (Version: 1.2.4475.0 - )
FFsplit version Alpha (x32 Version: Alpha - Taqveer Doha)
FileZilla Client 3.7.0.1 (HKCU Version: 3.7.0.1 - FileZilla Project)
FL Studio 10 (x32 Version:  - Image-Line)
Flixster (x32 Version: 0.1.22 - Warner Bros. Entertainment Inc.)
Flixster (x32 Version: 0.1.22 - Warner Bros. Entertainment Inc.) Hidden
Fraps (remove only) (x32 Version:  - )
Free YouTube to MP3 Converter version 3.12.20.1230 (x32 Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Game Booster 3 (x32 Version: 3.5 - IObit)
Game Capture HD v2.3.3.38 (x32 Version: 2.3.3.38 - Elgato Systems)
Game Dev Tycoon (x32 Version:  - Greenheart Games)
GameMaker: Studio (x32 Version:  - )
GIMP 2.6.8 (Version:  - )
GIMP 2.8.2 (Version: 2.8.2 - The GIMP Team)
Google Chrome (x32 Version: 32.0.1700.102 - Google Inc.)
Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.)
Google Talk Plugin (x32 Version: 4.9.1.16010 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Grand Theft Auto IV (x32 Version:  - Rockstar)
Haali Media Splitter (x32 Version:  - )
Haunted Memories (x32 Version:  - MadMan Theory Games)
HydraVision (x32 Version: 4.2.212.0 - Advanced Micro Devices, Inc.) Hidden
iFree Skype Recorder 4.0.9 (x32 Version: 4.0.9 - iFree Skype Recorder)
Inkscape 0.48.3.1 (x32 Version: 0.48.3.1 - )
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
iTunes (Version: 11.1.2.32 - Apple Inc.)
Java 7 Update 40 (x32 Version: 7.0.400 - Oracle)
Java 7 Update 9 (64-bit) (Version: 7.0.90 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 26 (x32 Version: 6.0.260 - Oracle)
JDownloader 0.9 (x32 Version: 0.9 - AppWork GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kill Fun Yeah version 0.28 (x32 Version: 0.28 - )
KRISTAL Audio Engine (x32 Version:  - )
Lagarith Lossless Codec (1.3.27) (x32 Version:  - )
LAME v3.99.3 (for Windows) (x32 Version:  - )
League of Legends (x32 Version: 1.3 - Riot Games)
LightScribe System Software (x32 Version: 1.18.18.1 - LightScribe)
LogMeIn Hamachi (x32 Version: 2.2.0.114 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.114 - LogMeIn, Inc.) Hidden
LoopWorx Dance 1.0 (x32 Version: 1.0 - Acon Digital Media)
LoopWorx Hip Hop 1.0 (x32 Version: 1.0 - Acon Digital Media)
LoopWorx Rock 1.0 (x32 Version: 1.0 - Acon Digital Media)
LPK25 Editor (x32 Version:  - )
Magic Bullet Looks Vegas (x32 Version:  - )
Magic Bullet PhotoLooks (x32 Version:  - )
Magic Bullet Suite 64-bit (Version: 11.1.0 - Red Giant Software) Hidden
Magic Bullet Suite 64-bit (x32 Version: 11.1.0 - Red Giant Software)
Magic ISO Maker v5.5 (build 0281) (x32 Version:  - )
MagicDisc 2.7.106 (x32 Version:  - )
ManiaPlanet (x32 Version:  - Nadeo)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Metro 2033 (x32 Version:  - THQ)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE (x32 Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.1.99.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (x32 Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MP3 Skype Recorder (x32 Version: 3.1.3 - Alexander Nikiforov)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
NetSpeedMonitor 2.5.4.0 x64 (Version: 2.5.4.0 - Florian Gilles)
Neverwinter (x32 Version:  - Cryptic Studios)
Nitronic Rush (2012-12-21) version 20121221.0 (x32 Version: 20121221.0 - DigiPen)
No23 Recorder (x32 Version: 2.1.0.3 - No23)
NVIDIA PhysX (x32 Version: 9.12.0213 - NVIDIA Corporation)
Open Broadcaster Software (x32 Version:  - )
OpenOffice.org 3.3 (x32 Version: 3.3.9567 - OpenOffice.org)
Origin (x32 Version: 8.5.0.4554 - Electronic Arts, Inc.)
PaintTool SAI Ver.1 (x32 Version:  - )
Pando Media Booster (x32 Version: 2.6.0.7 - Pando Networks Inc.)
PC Connectivity Solution (x32 Version: 11.5.29.0 - Nokia)
PCSX2 - Playstation 2 Emulator (x32 Version:  - )
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
Play withSIX (x32 Version: 1.30.0464 - SIX Networks)
Portal 2 (x32 Version:  - Valve)
Portal 2 Authoring Tools - Beta (x32 Version:  - Valve)
Portal 2 Publishing Tool (x32 Version:  - )
PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)
puush (x32 Version: 1.0.0.0 - Dean Herbert)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Realtek Ethernet Controller Driver (x32 Version: 7.46.610.2011 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6458 - Realtek Semiconductor Corp.)
Red Giant Link (x32 Version: 1.7.19.0 - Red Giant, LLC)
Registrar Registry Manager 7.60 (Version:  - Resplendence Software Projects Sp.)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
RocketDock 1.3.5 (x32 Version:  - Punk Software)
Safari (x32 Version: 5.34.57.2 - Apple Inc.)
Sid Meier's Civilization V (x32 Version:  - 2K Games, Inc.)
SimCity™ (x32 Version: 1.0.0.0 - Electronic Arts)
Six Updater (x32 Version: 2.09.7038 - Six Projects)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Sony Ericsson Update Engine (x32 Version: 2.13.4.20 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.155 (x32 Version: 2.10.155 - Sony)
SopCast 3.5.0 (x32 Version: 3.5.0 - www.sopcast.com)
Spotify (HKCU Version: 0.9.7.16.g4b197456 - Spotify AB)
SpotifyController version 2.0 (x32 Version: 2.0 - )
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
Superbrothers: Sword & Sworcery EP (x32 Version:  - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synthesia (remove only) (x32 Version:  - )
System Requirements Lab CYRI (x32 Version: 4.5.1.0 - Husdawg, LLC)
Tactical Intervention (x32 Version:  - FIX Korea)
Team Fortress 2 (x32 Version:  - Valve)
TeamSpeak 3 Client (HKCU Version: 3.0.13.1 - TeamSpeak Systems GmbH)
Terraria (x32 Version:  - )
TweetDeck (x32 Version: 3.0.2 - Twitter, Inc.)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1 - Microsoft Corporation)
Uplay (x32 Version: 2.0 - Ubisoft)
Vegas Pro 11.0 (64-bit) (Version: 11.0.683 - Sony)
Vegas Pro 12.0 (64-bit) (Version: 12.0.563 - Sony)
VLC media player 2.1.0 (x32 Version: 2.1.0 - VideoLAN)
Vuze (x32 Version: 4.7 - Vuze Inc.)
War Thunder Launcher 1.0.1.269 (x32 Version:  - 2013 Gaijin Entertainment Corporation)
Winamp (x32 Version: 5.63  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0 - Nokia)
Winki (x32 Version: 3.2.115 - MSI)
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
WinSpeed (x32 Version:  - GreatSoft)
Wirecast (x32 Version: 4.3.0 - Telestream, Inc.)
Wondershare PDF Converter (Build 3.1.0) (x32 Version: 3.1.0 - Wondershare Software)
World of Warplanes (x32 Version:  - Wargaming.net)
Youtube Downloader HD v. 2.9.6 (x32 Version:  - YoutubeDownloaderHD.com)
YTD Video Downloader 3.9.3 (x32 Version:  - GreenTree Applications SRL)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 03:34 - 2012-04-21 12:53 - 00000854 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com

==================== Scheduled Tasks (whitelisted) =============

Task: {192259DB-BFA0-4D12-9859-CC0BEEE40712} - System32\Tasks\{57972132-B895-43B4-BA7D-7C7B9EF9DC7A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.115/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1603
Task: {1FED82DE-250A-4E46-A468-F9BCDCBBF0B3} - System32\Tasks\{551EC6DA-E421-456F-B8F7-D7DADAB47D74} => Chrome.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {2386091F-A18B-48BE-9A1B-D67F4FCF85BD} - System32\Tasks\{CD4D85E7-5080-473A-8292-70CF2D0EB974} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2F1C8226-1BAA-4389-9158-E82D52558F01} - System32\Tasks\{49C4DDC8-F953-4649-B6E7-84D01D577EC5} => Chrome.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {467F9ECD-6C04-4542-AF57-EB82C2305BB7} - System32\Tasks\{21AFB962-72DD-4126-8406-5B33D8DF6143} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4844E492-15AC-4267-8093-F736BD545E73} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe [2013-06-08] ()
Task: {73D7E531-252D-4EA1-A0B8-BDA928DB57BD} - System32\Tasks\{EA94B3D5-6391-41EC-9B3D-92B052CAEC05} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.114/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1603
Task: {838B0402-F13C-4C65-BACF-CDB3436CF575} - System32\Tasks\{2658BB8B-B347-4D1E-B1E7-A6A4EAB8CF7B} => Chrome.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {8671D0AB-421C-4510-8E98-0D8564DA4B68} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-28] (Google Inc.)
Task: {8F0C9595-2E2D-4BBF-8125-1E096A97394D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-343759969-598425436-1155951709-1000Core => C:\Users\Miro\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-28] (Google Inc.)
Task: {93AEDB23-8482-4987-8F37-7D7533716255} - System32\Tasks\{0E439791-8452-40C5-AEF4-996713C3621E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9447FD40-4A54-4836-B6FD-E001B6480F3E} - System32\Tasks\{2B847B5F-C738-4204-8D53-9301D205A608} => Chrome.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {998F677E-A374-4E82-9C4A-D0D64796E764} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-16] (Adobe Systems Incorporated)
Task: {9C45BC6A-0676-4F30-9C0E-A5620A4F8D9C} - System32\Tasks\Norton Security Scan for Miro => C:\PROGRA~2\NORTON~2\Engine\372~1.5\Nss.exe
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => aitagent.exe
Task: {C12FA253-C391-473D-8391-B2FDD5A4EC08} - System32\Tasks\{E9773166-1629-45FA-AA90-E0C8AE511D9C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {C42362A5-58DA-4620-87AD-ABC0A63CE1ED} - System32\Tasks\{4CD42F09-3528-4231-84F8-679459F98B51} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C482EB78-1A53-436F-86B7-84E6471B7E6C} - System32\Tasks\{A8336691-28D2-4168-BF11-8E4BFC6AD4CF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CB7D53A4-757A-4244-A1DF-689BA322A2A4} - System32\Tasks\{3FD02E0A-9211-4EE9-9517-433153641B66} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CC47A1CB-E8C2-498B-AB73-D22E68919B3C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-343759969-598425436-1155951709-1000UA => C:\Users\Miro\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-28] (Google Inc.)
Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => BthUdTask.exe
Task: {E7E61C29-3889-4ECB-92D4-4D5D84D76CA1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-28] (Google Inc.)
Task: {F48802D5-B14C-447C-B439-1788896A040D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AdobeAAMUpdater-1.0-Miro-PC-Miro.job => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cef45b1d4d76f1.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-343759969-598425436-1155951709-1000Core1cef658cafbaac5.job => C:\Users\Miro\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-343759969-598425436-1155951709-1000UA.job => C:\Users\Miro\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Norton Security Scan for Miro.job => C:\PROGRA~2\NORTON~2\Engine\372~1.5\Nss.exe
Task: C:\Windows\Tasks\PDVD9Serv.EXE_20131113_174424_0738.job => C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
Task: C:\Windows\Tasks\PDVD9Serv.EXE_20131113_174804_0039.job => C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
Task: C:\Windows\Tasks\RunOW.job => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe

==================== Loaded Modules (whitelisted) =============

2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2010-03-16 12:35 - 2010-03-17 14:02 - 04745728 _____ () C:\Windows\PhotoLooksRenderer_x64.dll
2013-08-22 19:47 - 2013-08-21 15:11 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-02-20 20:29 - 2012-02-20 20:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 20:28 - 2012-02-20 20:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-12-27 18:59 - 2013-12-27 18:59 - 04463616 _____ () C:\ProgramData\WinSpeed\WinSpeed.dll
2013-12-27 18:59 - 2013-12-27 18:59 - 00181584 _____ () C:\ProgramData\WinSpeed\WinSpeedSvc.dll
2013-05-10 19:56 - 2013-05-10 19:56 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-01-06 15:17 - 2014-01-15 20:51 - 36967424 _____ () C:\Users\Miro\AppData\Roaming\Spotify\Data\libcef.dll
2014-02-02 11:10 - 2014-02-02 11:10 - 00098816 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32api.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00110080 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\pywintypes27.dll
2014-02-02 11:10 - 2014-02-02 11:10 - 00364544 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\pythoncom27.dll
2014-02-02 11:10 - 2014-02-02 11:10 - 00044032 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\_socket.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 01153024 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\_ssl.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00320512 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32com.shell.shell.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00711680 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\_hashlib.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 01175040 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\wx._core_.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00805888 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\wx._gdi_.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00811008 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\wx._windows_.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 01062400 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\wx._controls_.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00735232 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\wx._misc_.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00128512 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\_elementtree.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00127488 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\pyexpat.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00557056 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\pysqlite2._sqlite.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00087040 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\_ctypes.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00119808 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32file.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00108544 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32security.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00018432 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32event.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00038912 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32inet.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00122368 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\wx._wizard.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00026624 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\_multiprocessing.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00070656 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\wx._html2.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00010240 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\select.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00686080 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\unicodedata.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00025600 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32pdh.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00521680 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\windows._lib_cacheinvalidation.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00011264 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32crypt.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00024064 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32pipe.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00035840 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32process.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00017408 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32profile.pyd
2014-02-02 11:10 - 2014-02-02 11:10 - 00022528 _____ () C:\Users\Miro\AppData\Local\Temp\_MEI34562\win32ts.pyd
2013-10-17 16:45 - 2013-10-17 16:45 - 32726528 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libcef.dll
2013-03-13 12:42 - 2013-06-05 13:21 - 00071560 _____ () C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\zlib1.dll
2014-01-06 15:17 - 2014-01-15 20:51 - 00887808 _____ () C:\Users\Miro\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-01-06 15:17 - 2014-01-15 20:51 - 00109568 _____ () C:\Users\Miro\AppData\Roaming\Spotify\Data\libegl.dll
2014-01-03 20:45 - 2014-01-03 20:45 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-01-16 16:25 - 2014-01-16 16:25 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll
2014-01-08 16:53 - 2013-12-12 23:19 - 00142848 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-01-08 16:53 - 2013-11-05 02:12 - 00890592 _____ () C:\Program Files (x86)\Steam\libavutil-52.dll
2013-03-12 17:10 - 2014-01-11 00:33 - 00717312 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2012-03-07 20:22 - 2014-01-27 20:02 - 01138088 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2012-03-07 20:22 - 2014-01-11 00:33 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2012-03-18 18:17 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-03-18 18:17 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-03-18 18:17 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2011-01-17 16:19 - 2012-03-05 15:29 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2010-11-19 18:45 - 2012-03-05 15:29 - 00170496 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll
2014-02-03 13:36 - 2013-10-25 17:11 - 00233376 _____ () C:\Program Files\Registrar Registry Manager\rspSymSrv32.dll
2014-02-02 14:44 - 2014-01-23 06:56 - 00715544 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libglesv2.dll
2014-02-02 14:44 - 2014-01-23 06:56 - 00100120 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libegl.dll
2014-02-02 14:44 - 2014-01-23 06:56 - 04055320 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll
2014-02-02 14:44 - 2014-01-23 06:57 - 00399640 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll
2014-02-02 14:44 - 2014-01-23 06:55 - 01634584 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Miro\AppData\Local\EFe6E1Tr4G:yw65lROSePVLmckeb8dyVfI
AlternateDataStreams: C:\Users\Miro\AppData\Local\Temp:g6FdCXhofg90SUjcNwlCFRC973

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/02/2014 09:01:34 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8018

Error: (02/02/2014 09:01:34 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8018

Error: (02/02/2014 09:01:34 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/02/2014 09:01:33 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7020

Error: (02/02/2014 09:01:33 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7020

Error: (02/02/2014 09:01:33 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/02/2014 09:01:32 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6021

Error: (02/02/2014 09:01:32 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6021

Error: (02/02/2014 09:01:32 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/02/2014 09:01:31 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5023


System errors:
=============
Error: (02/03/2014 01:33:05 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (02/02/2014 11:13:14 AM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80070420

Error: (02/02/2014 11:12:58 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (02/02/2014 11:11:01 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/02/2014 11:10:58 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst IPsec-Richtlinien-Agent erreicht.

Error: (02/02/2014 11:10:28 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
archlp

Error: (02/02/2014 11:10:14 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (02/02/2014 11:09:39 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\archlp.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (02/02/2014 00:39:51 AM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (02/01/2014 00:00:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (02/02/2014 09:01:34 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8018

Error: (02/02/2014 09:01:34 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8018

Error: (02/02/2014 09:01:34 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/02/2014 09:01:33 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7020

Error: (02/02/2014 09:01:33 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7020

Error: (02/02/2014 09:01:33 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/02/2014 09:01:32 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6021

Error: (02/02/2014 09:01:32 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6021

Error: (02/02/2014 09:01:32 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/02/2014 09:01:31 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5023


==================== Memory info =========================== 

Percentage of memory in use: 40%
Total physical RAM: 8172.85 MB
Available physical RAM: 4829.46 MB
Total Pagefile: 16343.88 MB
Available Pagefile: 8677.54 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:901.01 GB) (Free:245.1 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 6D37B255)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=901 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=30 GB) - (Type=05)

==================== End Of Log ============================
__________________
Alt 03.02.2014, 14:23   #4
Aneri
/// Malwareteam
 
YouTouAAdBllOckerr 1.1 entfernen - Standard

YouTouAAdBllOckerr 1.1 entfernen


Hallo

so dann fangen wir einmal an.

Ich werde erstmal die lästigen Adwareeinträge entfernen. Dazu nutzen wir zwei Tools.
Sollte dein Antivirenprogramm bei einem der Tools anschlagen handelt es sich um einen falschen Alarm.

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Tool 2:

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.



Schritt 2:

Mit diesem Tool scannen wir das System nach Dateien die Malware enthalten. Ich habe ja bisher nur zugriff auf die im Logfile gezeigten Problemstellen.
Malwarebytes Anti Malware scanned das System nach Malware und löscht diese.

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.



Schritt 3:

erstelle ein neues FRST Logfile uns poste es hier.
__________________
Gruß Aneri
Mitglied von UNITE

Lob oder Kritik? hier wirst du es los

Alt 03.02.2014, 15:33   #5
miroleon
 
YouTouAAdBllOckerr 1.1 entfernen - Standard

YouTouAAdBllOckerr 1.1 entfernen


Code:
ATTFilter
# AdwCleaner v3.018 - Bericht erstellt am 03/02/2014 um 14:41:47
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Miro - MIRO-PC
# Gestartet von : C:\Users\Miro\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft-skinedit_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft-skinedit_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\PIP
Schlüssel Gelöscht : HKCU\Software\smartbar
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\SProtector
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Search Settings
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\PIP
Schlüssel Gelöscht : HKLM\Software\SP Global
Schlüssel Gelöscht : HKLM\Software\SProtector

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Miro\AppData\Roaming\Mozilla\Firefox\Profiles\2b5n2hs9.default\prefs.js ]

Zeile gelöscht : user_pref("aol_toolbar.default.homepage.check", false);
Zeile gelöscht : user_pref("aol_toolbar.default.search.check", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Zeile gelöscht : user_pref("extensions.bvfI2427.scode", "(function(){if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};var _wlst={lsKey:\"ssjsmn2ja8ddw2a\",get:function(b,a){if(3<b)return a(!1);var [...]
Zeile gelöscht : user_pref("extensions.emj78OzvFSzK.scode", "(function(){if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};var _wlst={lsKey:\"ssjsmn2ja8ddw2a\",get:function(b,a){if(3<b)return a(!1);[...]
Zeile gelöscht : user_pref("extensions.pcYN1djnDE6.scode", "(function(){if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};if(window.self==window.top){var script=document.createElement('script');scri[...]
Zeile gelöscht : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Zeile gelöscht : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Zeile gelöscht : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Zeile gelöscht : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Zeile gelöscht : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Zeile gelöscht : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Zeile gelöscht : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Zeile gelöscht : user_pref("sweetim.toolbar.searchguard.enable", "");

-\\ Google Chrome v32.0.1700.102

[ Datei : C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [13225 octets] - [03/02/2014 14:38:41]
AdwCleaner[R1].txt - [5948 octets] - [03/02/2014 14:40:08]
AdwCleaner[S0].txt - [1068 octets] - [03/02/2014 14:39:34]
AdwCleaner[S1].txt - [5439 octets] - [03/02/2014 14:41:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [5499 octets] ##########
Aus irgendeinem Grund funktioniert das "Junkware Removal Tool" bei mir nicht. Habe Avira augeschaltet und trotzdem öffnet sich nur ganz kurz etwas und danach schließt es sich sofort wieder.

Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.03.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Miro :: MIRO-PC [Administrator]

03.02.2014 14:52:55
mbam-log-2014-02-03 (14-52-55).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 216948
Laufzeit: 7 Minute(n), 23 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 3
HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252} (PUP.Optional.GreatSaver.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1D2ABF6A-2B19-3E94-0991-5B5BDB7134DA} (PUP.Optional.ShoppingChip) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6933C2BA-C67D-42C7-8C77-1FF4B364AF54} (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 6
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (Trojan.SProtector) -> Bösartig: (c:\progra~3\winspeed\winspeed.dll) Gut: () -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&q={searchTerms}&installDate=30/10/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=hp&installDate=30/10/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Bar (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&q={searchTerms}&installDate=30/10/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&q={searchTerms}&installDate=30/10/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&q={searchTerms}&installDate=30/10/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 1
C:\ProgramData\ShoppingChip (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 9
C:\ProgramData\WinSpeed\WinSpeed.dll (Trojan.SProtector) -> Löschen bei Neustart.
C:\ProgramData\WinSpeed\WinSpeedSvc.dll (Trojan.SProtector) -> Löschen bei Neustart.
C:\ProgramData\CoauapEEXetEnsion\sECwMriev8.exe (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\CoauapEEXetEnsion\sECwMriev8.x64.dll (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\YouTube Downloader\ytd_installer.exe (PUP.Optional.Spigot.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\YTD YouTube Downloader & Converter\ytd_installer.exe (PUP.Optional.Spigot.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Miro\Downloads\Adobe Premiere Pro CS6 64bit Crack.rar (PUP.RiskwareTool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Miro\Downloads\Photoshop CS6 Crack - by xGermanTutorial.rar (PUP.RiskwareTool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Miro\Videos\CS6-AMTLIB-64-bit.rar (PUP.RiskwareTool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by Miro (administrator) on MIRO-PC on 03-02-2014 15:27:26
Running from C:\Users\Miro\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google Inc.) C:\Users\Miro\AppData\Local\Google\Update\GoogleUpdate.exe
() C:\Users\Miro\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Spotify Ltd) C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Program Files (x86)\puush\puush.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-10-17] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PowerDVD13Agent] - "C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe"
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813200 2014-01-23] (LogMeIn Inc.)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [AdobeBridge] - [x]
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [Google Update] - C:\Users\Miro\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-28] (Google Inc.)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Miro\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-09-14] (AMD)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [BitTorrent] - C:\Users\Miro\AppData\Roaming\BitTorrent\BitTorrent.exe [895328 2013-11-23] (BitTorrent Inc.)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [Spotify] - C:\Users\Miro\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-15] (Spotify Ltd)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [Spotify Web Helper] - C:\Users\Miro\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-15] (Spotify Ltd)
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\Run: [puush] - C:\Program Files (x86)\puush\puush.exe [567880 2014-01-18] ()
HKU\S-1-5-21-343759969-598425436-1155951709-1000\...\MountPoints2: {12f7b64d-7b5b-11e2-8cdb-8c89a583ea0f} - G:\iStudio.exe
AppInit_DLLs: C:\PROGRA~3\WinSpeed\WINSPE~1.DLL => C:\ProgramData\WinSpeed\WinSpeed_x64.dll [4518912 2013-12-27] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC8D69FBEB21CCD01
BHO: CoauapEEXetEnsion - {47B2B9BB-4216-E299-B56C-E25844B7BDC7} - C:\ProgramData\CoauapEEXetEnsion\sECwMriev8.x64.dll No File
Handler: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\MP3 Skype Recorder\Skype4COM.dll (Skype Technologies)
Handler-x32: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\Windows\SysWow64\Msdxm6.ocx (Microsoft Corporation)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter-x32: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter-x32: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter-x32: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Miro\AppData\Roaming\Mozilla\Firefox\Profiles\2b5n2hs9.default
FF NewTab: about:blank
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF Homepage: hxxp://www.youtube.com/
FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=a1e7e841-6d15-631f-1dac-679d0b6b74cf&searchtype=ds&installDate=30/10/2013&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0-pre1-20130701-0403 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.118.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.132.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @onlive.com/OnLiveGameClientDetector,version=1.0.0 - C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll No File
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Miro\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Miro\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Miro\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Miro\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Miro\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Miro\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Miro\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Miro\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\Miro\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Miro\AppData\Roaming\Mozilla\Firefox\Profiles\2b5n2hs9.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-22]
FF Extension: Elite Proxy Switcher - C:\Users\Miro\AppData\Roaming\Mozilla\Firefox\Profiles\2b5n2hs9.default\Extensions\eliteproxyswitcher@my-proxy.com.xpi [2014-01-18]
FF Extension: Adblock Plus - C:\Users\Miro\AppData\Roaming\Mozilla\Firefox\Profiles\2b5n2hs9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-03]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-02]
CHR Extension: (Google Drive) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-02]
CHR Extension: (YouTube) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-02]
CHR Extension: (YouTouAAdBllOckerr) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\chaaadnjlkobilfiginoelodbincamkg [2014-02-02]
CHR Extension: (Google-Suche) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-02]
CHR Extension: (Google Wallet) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-02]
CHR Extension: (Google Mail) - C:\Users\Miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-02]
CHR Extension: (50CoUpponns) - C:\ProgramData\fpkbdnldjnjaakafccpnpkbgomjhcmel [2013-12-31]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Miro\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-01-04]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-01-04]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-07] (Adobe Systems)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-05-13] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-05-13] (BlueStack Systems, Inc.)
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [240112 2010-11-23] (CyberLink)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-12-13] (LogMeIn, Inc.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-04] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-07-02] ()
S2 ADExchange; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [x]
S2 f1f78e38; "C:\Windows\system32\rundll32.exe" "c:\progra~3\winspeed\WinSpeedSvc.dll",service
S3 WinHttpAutoProxySvc; winhttp.dll [x]

==================== Drivers (Whitelisted) ====================

S1 archlp; C:\Windows\SysWow64\Drivers\archlp.sys [10624 2008-01-25] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-05-13] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-12-05] (DT Soft Ltd)
R3 ElgatoGC658Y; C:\Windows\System32\Drivers\ElgatoGC658.sys [50288 2012-11-12] (UB658)
S3 hcwhdpvr; C:\Windows\System32\DRIVERS\hcwhdpvr.sys [189952 2010-06-23] (Hauppauge, Inc.)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
S3 MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10x64.sys [60288 2010-09-15] (Generic USB smartcard reader)
R3 TSVAD_PCM; C:\Windows\System32\drivers\tsvadpcm.sys [33552 2012-08-22] (Windows (R) Win 7 DDK provider)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [x]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [x]
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-03 14:50 - 2014-02-03 14:50 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Malwarebytes
2014-02-03 14:49 - 2014-02-03 14:49 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-03 14:49 - 2014-02-03 14:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-03 14:49 - 2014-02-03 14:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-03 14:49 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-03 14:38 - 2014-02-03 14:41 - 00000000 ____D () C:\AdwCleaner
2014-02-03 14:37 - 2014-02-03 14:37 - 00027810 _____ () C:\Users\Miro\Documents\Constantin Film Presse.odt
2014-02-03 14:37 - 2014-02-03 14:37 - 00023264 _____ () C:\Users\Miro\Desktop\Bewerbungvorlage.odt
2014-02-03 14:35 - 2014-02-03 14:35 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Miro\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-03 14:34 - 2014-02-03 14:34 - 01166132 _____ () C:\Users\Miro\Desktop\adwcleaner.exe
2014-02-03 14:34 - 2014-02-03 14:34 - 01037068 _____ (Thisisu) C:\Users\Miro\Desktop\JRT.exe
2014-02-03 14:13 - 2014-02-03 14:13 - 00045182 _____ () C:\Users\Miro\Desktop\Addition.txt
2014-02-03 14:12 - 2014-02-03 15:27 - 00020585 _____ () C:\Users\Miro\Desktop\FRST.txt
2014-02-03 14:12 - 2014-02-03 15:27 - 00000000 ____D () C:\FRST
2014-02-03 13:53 - 2014-02-03 15:22 - 00000000 ____D () C:\Users\Miro\Desktop\Gegen Viren Gedöns
2014-02-03 13:53 - 2014-02-03 13:53 - 02080256 _____ (Farbar) C:\Users\Miro\Desktop\FRST64.exe
2014-02-03 13:36 - 2014-02-03 13:36 - 00000000 ____D () C:\Program Files\Registrar Registry Manager
2014-02-03 13:34 - 2014-02-03 13:35 - 04968008 _____ (Resplendence Software Projects Sp. ) C:\Users\Miro\Downloads\RegistrarHomeV7.exe
2014-02-03 13:19 - 2014-02-03 13:19 - 00000000 _____ () C:\Users\Miro\RegDelNull
2014-02-03 13:15 - 2014-02-03 13:15 - 00000000 ____D () C:\Users\Miro\Downloads\RegHide
2014-02-03 13:15 - 2014-02-03 13:15 - 00000000 ____D () C:\Users\Miro\Downloads\Regdelnull
2014-02-03 13:13 - 2014-02-03 13:13 - 00044335 _____ () C:\Users\Miro\Downloads\Regdelnull.zip
2014-02-03 13:13 - 2014-02-03 13:13 - 00038945 _____ () C:\Users\Miro\Downloads\RegHide.zip
2014-02-03 12:55 - 2014-02-03 13:03 - 538241486 _____ () C:\Users\Miro\Downloads\Pompeii_2D_Online_Trailer_4_12_2013_HD1080p.mov
2014-02-02 14:44 - 2014-02-02 14:44 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-31 19:53 - 2014-01-31 19:53 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-01-31 19:48 - 2014-02-03 15:02 - 00004356 _____ () C:\Windows\PFRO.log
2014-01-31 19:48 - 2014-02-03 15:02 - 00000224 _____ () C:\Windows\setupact.log
2014-01-31 19:48 - 2014-01-31 19:48 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-31 19:09 - 2014-01-31 19:09 - 00028333 _____ () C:\Users\Miro\Documents\47 Ronin Kritik Review.odt
2014-01-31 19:09 - 2014-01-31 19:09 - 00025747 _____ () C:\Users\Miro\Documents\Geschichten.odt
2014-01-31 18:17 - 2014-01-31 18:17 - 00000000 ____D () C:\Program Files (x86)\YouTouAAdBllOckerr
2014-01-31 18:13 - 2014-01-31 18:13 - 00000000 ____D () C:\Users\Miro\AppData\Local\Packages
2014-01-31 18:12 - 2014-01-31 19:48 - 00000000 ____D () C:\ProgramData\YouTouAAdBllOckerr
2014-01-31 18:12 - 2014-01-31 18:12 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 18:12 - 2014-01-31 18:12 - 00000000 ____D () C:\ProgramData\chaaadnjlkobilfiginoelodbincamkg
2014-01-26 16:47 - 2014-01-26 16:47 - 00001110 _____ () C:\Users\Public\Desktop\Debut Video Capture Software.lnk
2014-01-26 16:47 - 2014-01-26 16:47 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\NCH Software
2014-01-26 16:46 - 2014-01-26 16:46 - 01540672 _____ (NCH Software) C:\Users\Miro\Downloads\debutpsetup_1.82.exe
2014-01-24 18:54 - 2014-01-24 19:01 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\Miro\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-24 18:52 - 2014-01-24 18:53 - 58575631 _____ () C:\Users\Miro\Desktop\Bushido feat. Kollegah & Farid Bang - Gangsta Rap Kings_youtube_original.mp4
2014-01-19 16:59 - 2014-01-19 17:00 - 01483776 _____ () C:\Users\Miro\Documents\Porsche SoWi.ppt
2014-01-19 16:58 - 2014-01-19 16:58 - 01516544 _____ () C:\Users\Miro\Documents\porsche 2.ppt
2014-01-19 16:55 - 2014-01-19 17:01 - 163606685 _____ () C:\Users\Miro\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-19 16:50 - 2014-01-19 16:50 - 01418745 _____ () C:\Users\Miro\Documents\porsche.pptx
2014-01-19 10:45 - 2014-01-13 18:51 - 00016111 _____ () C:\Users\Miro\Documents\untitled_2_1.odt
2014-01-18 22:01 - 2014-01-18 22:02 - 00000000 ____D () C:\Program Files (x86)\puush
2014-01-18 22:01 - 2014-01-18 22:01 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\puush
2014-01-18 22:00 - 2014-01-18 22:00 - 01085440 _____ () C:\Users\Miro\Downloads\puush.msi
2014-01-18 20:38 - 2014-01-18 20:38 - 00000000 ____D () C:\Program Files\CPUID
2014-01-18 20:37 - 2014-01-18 20:37 - 01466296 _____ ( ) C:\Users\Miro\Downloads\cpu-z_1.68-setup-en.exe
2014-01-18 14:49 - 2014-01-18 14:50 - 00279844 _____ () C:\Users\Miro\Downloads\dcse8.zip
2014-01-18 14:48 - 2014-01-18 14:57 - 18089328 _____ () C:\Users\Miro\Downloads\TI-Connect-4.0.0.218.exe
2014-01-18 11:18 - 2014-01-18 11:39 - 214644127 _____ () C:\Users\Miro\Downloads\Psaiko.Dino-3CD-DE-2014-VOiCE.rar
2014-01-15 14:18 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 14:18 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 14:18 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 14:18 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-10 22:58 - 2014-01-10 22:58 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\SpotifyController
2014-01-10 22:53 - 2014-01-10 22:57 - 08205497 _____ ( ) C:\Users\Miro\Downloads\setupSpotifyController.exe
2014-01-07 13:58 - 2014-01-07 13:58 - 00009757 _____ () C:\Users\Miro\Documents\2014.odt
2014-01-07 13:53 - 2014-01-07 14:03 - 00000000 ____D () C:\Users\Miro\AppData\Local\DayZ
2014-01-07 13:53 - 2014-01-07 13:53 - 00000000 ____D () C:\Users\Miro\Documents\DayZ
2014-01-06 15:17 - 2014-02-03 15:04 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Spotify
2014-01-06 15:17 - 2014-01-28 20:58 - 00000000 ____D () C:\Users\Miro\AppData\Local\Spotify
2014-01-06 15:17 - 2014-01-06 15:17 - 00001799 _____ () C:\Users\Miro\Desktop\Spotify.lnk
2014-01-06 15:17 - 2014-01-06 15:17 - 00001785 _____ () C:\Users\Miro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-01-06 15:16 - 2014-01-06 15:16 - 00127080 _____ (Spotify Ltd) C:\Users\Miro\Downloads\SpotifySetup.exe

==================== One Month Modified Files and Folders =======

2014-02-03 15:27 - 2014-02-03 14:12 - 00020585 _____ () C:\Users\Miro\Desktop\FRST.txt
2014-02-03 15:27 - 2014-02-03 14:12 - 00000000 ____D () C:\FRST
2014-02-03 15:22 - 2014-02-03 13:53 - 00000000 ____D () C:\Users\Miro\Desktop\Gegen Viren Gedöns
2014-02-03 15:10 - 2009-07-14 05:45 - 00022528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-03 15:10 - 2009-07-14 05:45 - 00022528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-03 15:07 - 2011-04-12 08:43 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2014-02-03 15:07 - 2011-04-12 08:43 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2014-02-03 15:07 - 2009-07-14 06:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-03 15:05 - 2012-03-21 18:29 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Skype
2014-02-03 15:04 - 2014-01-06 15:17 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Spotify
2014-02-03 15:04 - 2013-07-19 17:15 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\BitTorrent
2014-02-03 15:04 - 2013-06-09 19:24 - 00000000 ____D () C:\Users\Miro\AppData\Local\LogMeIn Hamachi
2014-02-03 15:03 - 2013-07-28 19:55 - 00000000 ___RD () C:\Users\Miro\Google Drive
2014-02-03 15:02 - 2014-01-31 19:48 - 00004356 _____ () C:\Windows\PFRO.log
2014-02-03 15:02 - 2014-01-31 19:48 - 00000224 _____ () C:\Windows\setupact.log
2014-02-03 15:02 - 2013-12-27 18:59 - 00000000 ____D () C:\ProgramData\WinSpeed
2014-02-03 15:01 - 2012-03-02 13:32 - 01395666 _____ () C:\Windows\WindowsUpdate.log
2014-02-03 15:00 - 2013-12-31 12:02 - 00000000 ____D () C:\ProgramData\CoauapEEXetEnsion
2014-02-03 15:00 - 2012-05-02 18:42 - 00000000 ____D () C:\ProgramData\YTD YouTube Downloader & Converter
2014-02-03 15:00 - 2012-03-05 18:32 - 00000000 ____D () C:\ProgramData\YouTube Downloader
2014-02-03 14:50 - 2014-02-03 14:50 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Malwarebytes
2014-02-03 14:49 - 2014-02-03 14:49 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-03 14:49 - 2014-02-03 14:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-03 14:49 - 2014-02-03 14:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-03 14:45 - 2012-03-09 17:24 - 00000000 ____D () C:\Users\Miro\AppData\Local\Adobe
2014-02-03 14:41 - 2014-02-03 14:38 - 00000000 ____D () C:\AdwCleaner
2014-02-03 14:37 - 2014-02-03 14:37 - 00027810 _____ () C:\Users\Miro\Documents\Constantin Film Presse.odt
2014-02-03 14:37 - 2014-02-03 14:37 - 00023264 _____ () C:\Users\Miro\Desktop\Bewerbungvorlage.odt
2014-02-03 14:36 - 2012-03-07 20:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-03 14:35 - 2014-02-03 14:35 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Miro\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-03 14:34 - 2014-02-03 14:34 - 01166132 _____ () C:\Users\Miro\Desktop\adwcleaner.exe
2014-02-03 14:34 - 2014-02-03 14:34 - 01037068 _____ (Thisisu) C:\Users\Miro\Desktop\JRT.exe
2014-02-03 14:13 - 2014-02-03 14:13 - 00045182 _____ () C:\Users\Miro\Desktop\Addition.txt
2014-02-03 13:53 - 2014-02-03 13:53 - 02080256 _____ (Farbar) C:\Users\Miro\Desktop\FRST64.exe
2014-02-03 13:36 - 2014-02-03 13:36 - 00000000 ____D () C:\Program Files\Registrar Registry Manager
2014-02-03 13:35 - 2014-02-03 13:34 - 04968008 _____ (Resplendence Software Projects Sp. ) C:\Users\Miro\Downloads\RegistrarHomeV7.exe
2014-02-03 13:19 - 2014-02-03 13:19 - 00000000 _____ () C:\Users\Miro\RegDelNull
2014-02-03 13:19 - 2012-03-02 13:32 - 00000000 ____D () C:\Users\Miro
2014-02-03 13:15 - 2014-02-03 13:15 - 00000000 ____D () C:\Users\Miro\Downloads\RegHide
2014-02-03 13:15 - 2014-02-03 13:15 - 00000000 ____D () C:\Users\Miro\Downloads\Regdelnull
2014-02-03 13:13 - 2014-02-03 13:13 - 00044335 _____ () C:\Users\Miro\Downloads\Regdelnull.zip
2014-02-03 13:13 - 2014-02-03 13:13 - 00038945 _____ () C:\Users\Miro\Downloads\RegHide.zip
2014-02-03 13:03 - 2014-02-03 12:55 - 538241486 _____ () C:\Users\Miro\Downloads\Pompeii_2D_Online_Trailer_4_12_2013_HD1080p.mov
2014-02-02 20:13 - 2012-05-29 20:14 - 00000000 ____D () C:\Users\Miro\AppData\Local\LooksBuilder
2014-02-02 16:29 - 2012-05-02 15:01 - 00000000 ____D () C:\Users\Miro\AppData\Local\PMB Files
2014-02-02 16:29 - 2012-05-02 15:01 - 00000000 ____D () C:\ProgramData\PMB Files
2014-02-02 14:44 - 2014-02-02 14:44 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-02 14:44 - 2013-07-28 19:53 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-02 14:44 - 2012-04-06 18:52 - 00000000 ____D () C:\Users\Miro\AppData\Local\Google
2014-02-02 14:43 - 2012-11-06 22:15 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Opera
2014-02-02 14:43 - 2012-11-06 22:15 - 00000000 ____D () C:\Users\Miro\AppData\Local\Opera
2014-02-02 14:43 - 2012-11-06 22:14 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-02 14:38 - 2013-02-27 19:33 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-02-02 14:37 - 2012-11-26 18:31 - 00000000 ____D () C:\Program Files (x86)\Free FLV Converter
2014-02-02 14:37 - 2012-03-20 20:50 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2014-02-02 14:37 - 2012-03-20 20:49 - 00000000 ____D () C:\Program Files (x86)\Image-Line
2014-02-01 20:13 - 2013-09-04 19:15 - 00000000 ____D () C:\Users\Miro\AppData\Local\Game Dev Tycoon - Steam
2014-01-31 20:34 - 2013-08-23 17:01 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\.minecraft
2014-01-31 19:53 - 2014-01-31 19:53 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-01-31 19:48 - 2014-01-31 19:48 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-31 19:48 - 2014-01-31 18:12 - 00000000 ____D () C:\ProgramData\YouTouAAdBllOckerr
2014-01-31 19:24 - 2012-12-27 21:07 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Winamp
2014-01-31 19:24 - 2012-03-17 22:04 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\DAEMON Tools Lite
2014-01-31 19:23 - 2013-04-15 19:12 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\CoreFTP
2014-01-31 19:23 - 2012-12-12 14:38 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\FileZilla
2014-01-31 19:23 - 2012-05-07 20:16 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\inkscape
2014-01-31 19:23 - 2012-04-04 17:57 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Azureus
2014-01-31 19:23 - 2012-03-18 13:46 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Sony
2014-01-31 19:21 - 2012-03-04 14:44 - 00000000 ____D () C:\Windows\Minidump
2014-01-31 19:21 - 2012-03-02 13:25 - 00000000 ____D () C:\Windows\Panther
2014-01-31 19:10 - 2012-03-09 17:01 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Audacity
2014-01-31 19:09 - 2014-01-31 19:09 - 00028333 _____ () C:\Users\Miro\Documents\47 Ronin Kritik Review.odt
2014-01-31 19:09 - 2014-01-31 19:09 - 00025747 _____ () C:\Users\Miro\Documents\Geschichten.odt
2014-01-31 19:04 - 2012-09-08 10:14 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\Orbit
2014-01-31 18:17 - 2014-01-31 18:17 - 00000000 ____D () C:\Program Files (x86)\YouTouAAdBllOckerr
2014-01-31 18:17 - 2013-10-30 18:05 - 00000000 ____D () C:\ProgramData\2aa28aaacae0f0d4
2014-01-31 18:13 - 2014-01-31 18:13 - 00000000 ____D () C:\Users\Miro\AppData\Local\Packages
2014-01-31 18:12 - 2014-01-31 18:12 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 18:12 - 2014-01-31 18:12 - 00000000 ____D () C:\ProgramData\chaaadnjlkobilfiginoelodbincamkg
2014-01-31 18:12 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-01-31 18:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-01-28 20:58 - 2014-01-06 15:17 - 00000000 ____D () C:\Users\Miro\AppData\Local\Spotify
2014-01-27 18:14 - 2013-05-16 14:28 - 00000000 ____D () C:\Users\Miro\Desktop\EselEntertainment
2014-01-26 16:47 - 2014-01-26 16:47 - 00001110 _____ () C:\Users\Public\Desktop\Debut Video Capture Software.lnk
2014-01-26 16:47 - 2014-01-26 16:47 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\NCH Software
2014-01-26 16:47 - 2013-04-04 16:04 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2014-01-26 16:46 - 2014-01-26 16:46 - 01540672 _____ (NCH Software) C:\Users\Miro\Downloads\debutpsetup_1.82.exe
2014-01-26 16:42 - 2013-02-27 19:29 - 00000000 ____D () C:\Users\Miro\Documents\Youcam
2014-01-24 19:03 - 2013-04-23 17:54 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-01-24 19:02 - 2012-03-05 15:27 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\DVDVideoSoft
2014-01-24 19:01 - 2014-01-24 18:54 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\Miro\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-24 18:53 - 2014-01-24 18:52 - 58575631 _____ () C:\Users\Miro\Desktop\Bushido feat. Kollegah & Farid Bang - Gangsta Rap Kings_youtube_original.mp4
2014-01-24 17:31 - 2012-06-30 16:13 - 00000000 ____D () C:\Users\Miro\Desktop\Games
2014-01-24 17:30 - 2012-06-30 16:17 - 00000000 ____D () C:\Users\Miro\Desktop\Programme
2014-01-24 17:30 - 2012-04-21 12:54 - 00000000 ____D () C:\Users\Miro\Documents\Adobe
2014-01-22 18:08 - 2012-03-05 18:18 - 00000000 ____D () C:\Users\Miro\dwhelper
2014-01-22 18:07 - 2012-03-14 12:46 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-01-19 17:04 - 2012-03-02 13:32 - 00000000 ___RD () C:\Users\Miro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-19 17:01 - 2014-01-19 16:55 - 163606685 _____ () C:\Users\Miro\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-19 17:00 - 2014-01-19 16:59 - 01483776 _____ () C:\Users\Miro\Documents\Porsche SoWi.ppt
2014-01-19 16:58 - 2014-01-19 16:58 - 01516544 _____ () C:\Users\Miro\Documents\porsche 2.ppt
2014-01-19 16:50 - 2014-01-19 16:50 - 01418745 _____ () C:\Users\Miro\Documents\porsche.pptx
2014-01-19 10:46 - 2013-11-09 15:03 - 00000000 ____D () C:\Users\Miro\AppData\Local\Overwolf
2014-01-18 22:02 - 2014-01-18 22:01 - 00000000 ____D () C:\Program Files (x86)\puush
2014-01-18 22:01 - 2014-01-18 22:01 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\puush
2014-01-18 22:00 - 2014-01-18 22:00 - 01085440 _____ () C:\Users\Miro\Downloads\puush.msi
2014-01-18 20:38 - 2014-01-18 20:38 - 00000000 ____D () C:\Program Files\CPUID
2014-01-18 20:37 - 2014-01-18 20:37 - 01466296 _____ ( ) C:\Users\Miro\Downloads\cpu-z_1.68-setup-en.exe
2014-01-18 14:57 - 2014-01-18 14:48 - 18089328 _____ () C:\Users\Miro\Downloads\TI-Connect-4.0.0.218.exe
2014-01-18 14:50 - 2014-01-18 14:49 - 00279844 _____ () C:\Users\Miro\Downloads\dcse8.zip
2014-01-18 11:39 - 2014-01-18 11:18 - 214644127 _____ () C:\Users\Miro\Downloads\Psaiko.Dino-3CD-DE-2014-VOiCE.rar
2014-01-16 16:25 - 2012-04-08 16:28 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-16 16:25 - 2012-04-08 16:27 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-16 16:25 - 2012-03-04 17:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-16 03:26 - 2012-07-17 20:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-16 03:26 - 2009-07-14 05:45 - 05029056 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-16 03:07 - 2013-08-04 23:44 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 03:02 - 2012-03-03 08:23 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-13 18:51 - 2014-01-19 10:45 - 00016111 _____ () C:\Users\Miro\Documents\untitled_2_1.odt
2014-01-10 22:58 - 2014-01-10 22:58 - 00000000 ____D () C:\Users\Miro\AppData\Roaming\SpotifyController
2014-01-10 22:57 - 2014-01-10 22:53 - 08205497 _____ ( ) C:\Users\Miro\Downloads\setupSpotifyController.exe
2014-01-07 14:03 - 2014-01-07 13:53 - 00000000 ____D () C:\Users\Miro\AppData\Local\DayZ
2014-01-07 13:58 - 2014-01-07 13:58 - 00009757 _____ () C:\Users\Miro\Documents\2014.odt
2014-01-07 13:53 - 2014-01-07 13:53 - 00000000 ____D () C:\Users\Miro\Documents\DayZ
2014-01-06 15:17 - 2014-01-06 15:17 - 00001799 _____ () C:\Users\Miro\Desktop\Spotify.lnk
2014-01-06 15:17 - 2014-01-06 15:17 - 00001785 _____ () C:\Users\Miro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-01-06 15:16 - 2014-01-06 15:16 - 00127080 _____ (Spotify Ltd) C:\Users\Miro\Downloads\SpotifySetup.exe
2014-01-05 18:04 - 2013-02-11 17:34 - 00000000 ____D () C:\Users\Miro\AppData\Local\FlickrNet
2014-01-05 15:22 - 2013-09-07 22:24 - 00000132 _____ () C:\Users\Miro\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen

Some content of TEMP:
====================
C:\Users\Miro\AppData\Local\Temp\avgnt.exe
C:\Users\Miro\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 22:46

==================== End Of Log ============================
--- --- ---
Alt 03.02.2014, 16:42   #6
Aneri
/// Malwareteam
 
YouTouAAdBllOckerr 1.1 entfernen - Standard

YouTouAAdBllOckerr 1.1 entfernen


Zitat:
C:\Users\Miro\Downloads\Photoshop CS6 Crack - by xGermanTutorial.rar (PUP.RiskwareTool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
Die von mir gelisteten Einträge deuten stark darauf hin, dass auf diesem Rechner Software benutzt wird, die nicht legal erworben wurde.

Supportunterbrechung

Lesestoff:
Cracks und Keygens
Den Kopierschutz von Software zu umgehen ist nach geltendem Recht illegal. Die Logfiles deuten stark darauf hin, dass du nicht legal erworbene Software einsetzt. Zudem sind Cracks und Patches aus dubioser Quelle sehr oft mit Schädlingen versehen, womit man sich also fast vorsätzlich infiziert.


Entferne alle illegale Software von deinen System. Sollte ich bei der BEreinigung nochmals Illegale Software finden erfolgt Kommentarlos der Supportstop.
__________________
--> YouTouAAdBllOckerr 1.1 entfernen

Antwort

Themen zu YouTouAAdBllOckerr 1.1 entfernen
andere, basis, chrome, compu, durch unternehmensrichtlinie installiert, einfach, entferne, entfernen, erweiterung, firefox, google, installiert, löschen, neue, pup.optional.greatsaver.a, pup.optional.multiplug.a, pup.optional.shoppingchip, pup.optional.snapdo, pup.optional.spigot.a, pup.riskwaretool.ck, scans, tagen, trojan.sprotector, ungewollte, unternehmensrichtlinie


« Infektionen bei malware protector | Antivir hat einen beblockten Zugriffsversuch mit "APPL/FirInstaller.B (Cloud)" gemeldet. »


Ähnliche Themen: YouTouAAdBllOckerr 1.1 entfernen


  1. Babylon toolbar entfernen, BrowserCompanion entfernen, DealPly entfernen, GinyasBrowserCompanions entfernen
    Log-Analyse und Auswertung - 17.12.2014 (9)
  2. WhiteSmoke.com entfernen entfernen
    Anleitungen, FAQs & Links - 07.10.2013 (2)
  3. Trojaner TR/crypt.xpack.gen u. win32.dnschanger entfernen entfernen
    Plagegeister aller Art und deren Bekämpfung - 03.02.2009 (14)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema YouTouAAdBllOckerr 1.1 entfernen - Moin an alle, Ich habe seit einigen Tagen eine ungewollte Erwiterung in meinen Browsern. Sie nennt sich selbst "YouTouAAdBllOckerr 1.1". In Firefox bekomme ich sie auch gelöscht. Sie kommt zwar - YouTouAAdBllOckerr 1.1 entfernen...
Archiv
Du betrachtest: YouTouAAdBllOckerr 1.1 entfernen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55