Windows7: PUPOptional.OpenCandy in C:\Users\*****\AppData\Roaming\OpenCandy

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04
Ran by Stanley Herold at 2014-02-04 07:05:52
Running from C:\Users\******\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Acrobat.com (x32 Version: 1.1.377 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 1.0.4990 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.0.8.4990 - Adobe Systems Inc.) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
AMD Catalyst Control Center (x32 Version: 2013.0604.1838.31590 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2013.0604.1838.31590 - Ihr Firmenname) Hidden
ASRock App Charger v1.0.5 (Version:  - ASRock Inc.)
ASRock eXtreme Tuner v0.1.298 (x32 Version:  - )
ASRock InstantBoot v1.29 (x32 Version:  - )
ASRock XFast RAM v2.0.24 (Version:  - ASRock Inc.)
ASUS GPU Tweak (x32 Version: 2.4.5.2 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.4.5.2 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (x32 Version: 1.0.025 - ASUSTek Computer Inc.)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Batman: Arkham Asylum Game of the Year Edition (x32 Version: 1.0.0.0 - Square Enix Limited)
Battle.net (x32 Version:  - Blizzard Entertainment)
BitRaider Web Client (x32 Version: 1.1.9.9 - BitRaider, LLC)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0604.1838.31590 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0604.1838.31590 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Profiles Desktop (x32 Version: 2013.0604.1838.31590 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0604.1837.31590 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0604.1838.31590 - Advanced Micro Devices, Inc.) Hidden
Command & Conquer 3 (x32 Version: 1.00.0000 - Ihr Firmenname)
Command & Conquer™ 3: Kanes Rache (x32 Version: 1.00.0000 - Ihr Firmenname)
Drakensang Online (x32 Version:  - )
Dual-Core Optimizer (x32 Version: 1.1.4.0169 - AMD)
ESET Online Scanner v3 (x32 Version:  - )
Etron USB3.0 Host Controller (x32 Version: 0.115 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.115 - Etron Technology) Hidden
Free YouTube to MP3 Converter version 3.12.17.1125 (x32 Version: 3.12.17.1125 - DVDVideoSoft Ltd.)
GPUTweakStreaming (x32 Version: 1.0.3.3 - ASUS)
GPUTweakStreaming (x32 Version: 1.0.3.3 - ASUS) Hidden
Hearthstone (x32 Version:  - Blizzard Entertainment)
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE (x32 Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (x32 Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0 - Microsoft)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
NVIDIA PhysX (x32 Version: 9.09.0814 - NVIDIA Corporation)
Path of Exile (x32 Version:  - Grinding Gear Games)
PDF-Viewer (Version: 2.5.214.0 - Tracker Software Products Ltd)
Poker 770 (HKCU Version:  - )
PokerStars.eu (x32 Version:  - PokerStars.eu)
Razer DeathAdder(TM) Mouse (x32 Version: 3.05 - Razer Inc.)
Realtek Ethernet Controller Driver (x32 Version: 7.44.421.2011 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6482 - Realtek Semiconductor Corp.)
Star Wars The Old Republic (x32 Version: 7.0.0.25 - Bioware/EA)
Star Wars: The Old Republic (x32 Version: 1.00 - Electronic Arts, Inc.)
Steam (x32 Version:  - Valve Corporation)
THX TruStudio (x32 Version: 1.00.01 - Creative Technology Limited)
Tropico 3 1.00 (x32 Version: 1.00 - Kalypso Media)
VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 5.00 (64-Bit) (Version: 5.00.0 - win.rar GmbH)

==================== Restore Points  =========================

10-01-2014 22:56:16 Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
13-01-2014 11:13:47 Installiert Batman: Arkham Asylum Game of the Year Edition
13-01-2014 11:25:09 DirectX wurde installiert
13-01-2014 11:25:43 Installed NVIDIA PhysX
13-01-2014 11:26:33 DirectX wurde installiert
13-01-2014 11:31:39 DirectX wurde installiert
13-01-2014 11:45:34 Installed Windows Live ID Sign-in Assistant
13-01-2014 11:46:27 Installed Microsoft Games for Windows - LIVE Redistributable
13-01-2014 18:33:01 Windows Update
14-01-2014 10:19:48 Installed CIB pdf brewer.
14-01-2014 11:34:08 Removed CIB pdf brewer.
15-01-2014 19:06:42 Windows Update
22-01-2014 20:09:30 Geplanter Prüfpunkt
30-01-2014 16:58:15 Geplanter Prüfpunkt
03-02-2014 00:47:06 Microsoft Office Word Viewer 2003 wird installiert
04-02-2014 02:00:11 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {8C34358F-BED2-4604-B984-D0665BDCD196} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-17] (Adobe Systems Incorporated)
Task: {94EB7E52-1AAA-4C12-A86B-DCB81657BE74} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-11-27 20:11 - 2011-05-19 09:58 - 00246784 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2013-06-04 18:40 - 2013-06-04 18:40 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2013-06-05 15:51 - 2013-06-05 15:51 - 00430080 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingNet4.dll
2013-06-05 15:51 - 2013-06-05 15:51 - 00032768 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResourcesNet4.dll
2013-11-27 20:11 - 2011-05-04 16:32 - 00094208 ____N () C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\de-DE\THXAudNB.resources.dll
2013-08-26 20:37 - 2013-08-26 20:37 - 00258048 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Vender.dll
2013-08-26 20:36 - 2013-08-26 20:36 - 00049152 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Exeio.dll
2013-12-03 12:57 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-01-17 16:51 - 2014-01-17 16:51 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/04/2014 05:21:37 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/04/2014 03:06:38 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/04/2014 03:06:29 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/04/2014 03:03:43 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/03/2014 09:13:16 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/02/2014 11:08:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/02/2014 00:51:20 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/01/2014 09:16:25 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (02/01/2014 08:12:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/31/2014 10:07:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (02/04/2014 03:03:01 AM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{80BF9CEF-F3AF-48FB-8669-62A0BF3BB80D}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (02/04/2014 03:01:20 AM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (02/02/2014 11:06:52 PM) (Source: Microsoft-Windows-Application-Experience) (User: NT-AUTORITÄT)
Description: Der Dienst "Programmkompatibilitäts-Assistent" konnte Phase 2 nicht initialisieren.

Error: (01/17/2014 04:47:29 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{80BF9CEF-F3AF-48FB-8669-62A0BF3BB80D}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (01/17/2014 04:45:48 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎17.‎01.‎2014 um 16:44:19 unerwartet heruntergefahren.

Error: (01/14/2014 00:36:25 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR6 gefunden.

Error: (01/14/2014 11:24:48 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR5 gefunden.

Error: (01/14/2014 11:02:02 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR4 gefunden.

Error: (01/13/2014 11:35:44 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.

Error: (01/13/2014 00:59:52 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================
Error: (02/04/2014 05:21:37 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/04/2014 03:06:38 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Stanley Herold\Downloads\esetsmartinstaller_enu.exe

Error: (02/04/2014 03:06:29 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\*****\Downloads\esetsmartinstaller_enu.exe

Error: (02/04/2014 03:03:43 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/03/2014 09:13:16 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/02/2014 11:08:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/02/2014 00:51:20 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/01/2014 09:16:25 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (02/01/2014 08:12:24 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/31/2014 10:07:43 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 27%
Total physical RAM: 8148.71 MB
Available physical RAM: 5900.05 MB
Total Pagefile: 16295.61 MB
Available Pagefile: 13958.02 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:69.62 GB) NTFS
Drive d: (Work) (Fixed) (Total:931.51 GB) (Free:875.41 GB) NTFS
Drive e: (BATMANGOTY) (CDROM) (Total:7.91 GB) (Free:0 GB) UDF
Drive g: (Baekkah #1) (Fixed) (Total:298.09 GB) (Free:48.41 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: CDAF42E5)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: 8F7CD361)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 298 GB) (Disk ID: 774AAB21)
Partition 1: (Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by **** (administrator) on **** on 04-02-2014 07:05:34
Running from C:\Users\Stanley Herold\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\SysWOW64\ASGT.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe
() C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
() C:\Program Files (x86)\Razer\DeathAdder\razertra.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Razer Inc.) C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe
() C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\THXCfg64.dll [26624 2011-05-13] (Creative Technology Ltd.)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [THX TruStudio NB Settings] - C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe [909824 2011-05-19] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [676608 2013-06-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [DeathAdder] - C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe [248832 2012-01-14] ()
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKU\S-1-5-21-4096123502-145796519-1416384122-1000\...\Run: [ASRockXTU] - [x]
HKU\S-1-5-21-4096123502-145796519-1416384122-1000\...\Run: [zASRockInstantBoot] - [x]
HKU\S-1-5-21-4096123502-145796519-1416384122-1000\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-06-04] (AMD)
HKU\S-1-5-21-4096123502-145796519-1416384122-1000\...\MountPoints2: {68de9062-5705-11e3-88be-806e6f6e6963} - E:\ASRSetup.exe
HKU\S-1-5-21-4096123502-145796519-1416384122-1000\...\MountPoints2: {72f529a6-5795-11e3-b1e6-806e6f6e6963} - E:\autorun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\gr56dzfj.default
FF Homepage: hxxp://anonymouse.org/anonwww_de.html
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\gr56dzfj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-25]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-06-04] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] ()
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2013-12-05] (BitRaider, LLC)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [34640 2012-08-09] (ASRock Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-18] (Avira Operations GmbH & Co. KG)
R3 DAdderFltr; C:\Windows\System32\drivers\dadder.sys [12032 2010-04-19] (Razer (Asia-Pacific) Pte Ltd)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [x]
S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-04 07:05 - 2014-02-04 07:05 - 00010185 _____ () C:\Users\*****\Downloads\FRST.txt
2014-02-04 07:05 - 2014-02-04 07:05 - 00000000 ____D () C:\FRST
2014-02-04 07:04 - 2014-02-04 07:05 - 02080256 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe
2014-02-04 06:48 - 2014-02-04 06:48 - 00614784 _____ (Chip Digital GmbH) C:\Users\*****\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-02-04 03:06 - 2014-02-04 03:06 - 02347384 _____ (ESET) C:\Users\*****\Downloads\esetsmartinstaller_enu.exe
2014-02-04 03:06 - 2014-02-04 03:06 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-04 02:55 - 2014-02-04 02:55 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-04 02:55 - 2014-02-04 02:55 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Malwarebytes
2014-02-04 02:55 - 2014-02-04 02:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-04 02:55 - 2014-02-04 02:55 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-04 02:55 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-04 02:53 - 2014-02-04 02:53 - 00614784 _____ (Chip Digital GmbH) C:\Users\*****\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-02-03 01:47 - 2014-02-03 01:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-02-03 01:46 - 2014-02-03 01:46 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-02-03 01:45 - 2014-02-03 01:45 - 00614784 _____ (Chip Digital GmbH) C:\Users\Stanley Herold\Downloads\Word Viewer - CHIP-Downloader.exe
2014-01-30 17:26 - 2014-01-30 17:26 - 00001968 _____ () C:\Users\*****\Desktop\Drakensang Online.lnk
2014-01-30 17:26 - 2014-01-30 17:26 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2014-01-20 15:54 - 2014-01-20 15:55 - 00000000 ____D () C:\Users\*****\BILDER
2014-01-18 08:05 - 2014-01-18 08:05 - 00000000 ____D () C:\Users\*****\AppData\Local\Blizzard
2014-01-18 07:33 - 2014-01-18 07:33 - 00000752 _____ () C:\Users\Public\Desktop\Hearthstone.lnk
2014-01-18 07:31 - 2014-02-04 00:38 - 00000000 ____D () C:\Users\*****\AppData\Local\Battle.net
2014-01-18 07:31 - 2014-01-18 07:32 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Battle.net
2014-01-18 07:31 - 2014-01-18 07:31 - 00001146 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-01-18 07:31 - 2014-01-18 07:31 - 00000000 ____D () C:\Users\*****\AppData\Local\Blizzard Entertainment
2014-01-18 07:31 - 2014-01-18 07:31 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-01-18 07:31 - 2014-01-18 07:31 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-01-18 07:29 - 2014-01-18 07:29 - 00000000 ____D () C:\ProgramData\Battle.net
2014-01-18 07:28 - 2014-01-18 07:28 - 05971128 _____ (Blizzard Entertainment) C:\Users\*****\Downloads\Hearthstone-Beta-Setup-deDE.exe
2014-01-17 16:51 - 2014-02-04 06:32 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-17 16:51 - 2014-01-17 16:51 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-15 15:47 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 15:47 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 15:47 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 15:47 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 15:47 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 15:47 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 15:47 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 15:47 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 15:47 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 15:43 - 2013-07-02 16:29 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2014-01-14 12:34 - 2014-01-14 12:34 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-01-14 11:17 - 2014-01-14 11:17 - 25506456 _____ (CIB software GmbH ) C:\Users\*****\Downloads\cibpdfbrewer-x64.exe
2014-01-14 11:02 - 2014-01-14 11:02 - 00000355 _____ () C:\Users\Stanley Herold\Documents\Computer - Verknüpfung.lnk
2014-01-13 12:33 - 2014-01-13 12:33 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2014-01-13 12:31 - 2014-01-13 12:32 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories
2014-01-13 12:29 - 2014-01-13 12:29 - 00000000 ____D () C:\Users\***\Documents\Square Enix
2014-01-13 12:26 - 2014-01-13 12:26 - 00000000 ____D () C:\Windows\SysWOW64\xlive
2014-01-13 12:26 - 2014-01-13 12:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-13 12:25 - 2014-01-13 12:25 - 00000000 ____D () C:\Windows\SysWOW64\AGEIA
2014-01-13 12:25 - 2014-01-13 12:25 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-13 12:24 - 2014-01-14 11:18 - 00000000 ____D () C:\Users\*\AppData\Local\Downloaded Installations
2014-01-13 12:24 - 2014-01-13 12:24 - 00000000 ____D () C:\Program Files (x86)\AMD
2014-01-13 11:55 - 2014-01-13 12:01 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU
2014-01-13 11:55 - 2014-01-13 11:55 - 00000000 ____D () C:\ProgramData\AVS4YOU
2014-01-13 11:55 - 2010-05-11 14:17 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2014-01-13 11:55 - 2010-05-11 14:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2014-01-13 11:38 - 2014-01-13 11:38 - 00000000 ____D () C:\Program Files\Tracker Software
2014-01-13 11:37 - 2014-01-13 11:38 - 16537480 _____ (Tracker Software Products Ltd ) C:\Users\*\Downloads\PDF214XVwer.exe
2014-01-11 02:00 - 2014-01-14 12:36 - 00000000 ____D () C:\Users\Stan\Bewerbungen
2014-01-10 23:56 - 2014-01-11 00:01 - 00000000 ____D () C:\Users\Stan\AppData\Roaming\AbiSuite
2014-01-10 23:56 - 2014-01-11 00:01 - 00000000 ____D () C:\Program Files (x86)\AbiWord

==================== One Month Modified Files and Folders =======

2014-02-04 07:05 - 2014-02-04 07:05 - 00010185 _____ () C:\Users\Stan\Downloads\FRST.txt
2014-02-04 07:05 - 2014-02-04 07:05 - 00000000 ____D () C:\FRST
2014-02-04 07:05 - 2014-02-04 07:04 - 02080256 _____ (Farbar) C:\Users\S\Downloads\FRST64.exe
2014-02-04 06:48 - 2014-02-04 06:48 - 00614784 _____ (Chip Digital GmbH) C:\Users\Stan\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-02-04 06:32 - 2014-01-17 16:51 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-04 05:27 - 2009-07-14 05:45 - 00025840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-04 05:27 - 2009-07-14 05:45 - 00025840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-04 05:23 - 2013-11-27 19:48 - 01226681 _____ () C:\Windows\WindowsUpdate.log
2014-02-04 05:23 - 2013-11-27 11:42 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-02-04 05:23 - 2013-11-27 11:42 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-02-04 05:23 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-04 05:19 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-04 05:19 - 2009-07-14 05:51 - 00035921 _____ () C:\Windows\setupact.log
2014-02-04 03:06 - 2014-02-04 03:06 - 02347384 _____ (ESET) C:\Users\Stan\Downloads\esetsmartinstaller_enu.exe
2014-02-04 03:06 - 2014-02-04 03:06 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-04 03:01 - 2010-11-21 04:47 - 00335602 _____ () C:\Windows\PFRO.log
2014-02-04 02:55 - 2014-02-04 02:55 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-04 02:55 - 2014-02-04 02:55 - 00000000 ____D () C:\Users\Stan\AppData\Roaming\Malwarebytes
2014-02-04 02:55 - 2014-02-04 02:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-04 02:55 - 2014-02-04 02:55 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-04 02:53 - 2014-02-04 02:53 - 00614784 _____ (Chip Digital GmbH) C:\Users\Stan\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-02-04 00:38 - 2014-01-18 07:31 - 00000000 ____D () C:\Users\Sta\AppData\Local\Battle.net
2014-02-03 01:47 - 2014-02-03 01:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-02-03 01:46 - 2014-02-03 01:46 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-02-03 01:45 - 2014-02-03 01:45 - 00614784 _____ (Chip Digital GmbH) C:\Users\Stan\Downloads\Word Viewer - CHIP-Downloader.exe
2014-02-03 00:12 - 2013-12-03 14:26 - 00000000 ____D () C:\Users\Stan\AppData\Roaming\vlc
2014-01-30 21:11 - 2013-12-03 13:20 - 00000000 ____D () C:\Users\Stan\AppData\Local\PokerStars.EU
2014-01-30 17:26 - 2014-01-30 17:26 - 00001968 _____ () C:\Users\Stan\Desktop\Drakensang Online.lnk
2014-01-30 17:26 - 2014-01-30 17:26 - 00000000 ____D () C:\Users\Stan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2014-01-30 17:26 - 2013-12-05 17:31 - 00000000 ____D () C:\Program Files (x86)\Drakensang Online
2014-01-20 15:55 - 2014-01-20 15:54 - 00000000 ____D () C:\Users\Stan\BILDER
2014-01-20 15:54 - 2013-11-27 19:48 - 00000000 ____D () C:\Users\Stanl
2014-01-18 08:05 - 2014-01-18 08:05 - 00000000 ____D () C:\Users\Stand\AppData\Local\Blizzard
2014-01-18 07:33 - 2014-01-18 07:33 - 00000752 _____ () C:\Users\Public\Desktop\Hearthstone.lnk
2014-01-18 07:32 - 2014-01-18 07:31 - 00000000 ____D () C:\Users\Stand\AppData\Roaming\Battle.net
2014-01-18 07:31 - 2014-01-18 07:31 - 00001146 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-01-18 07:31 - 2014-01-18 07:31 - 00000000 ____D () C:\Users\Stanld\AppData\Local\Blizzard Entertainment
2014-01-18 07:31 - 2014-01-18 07:31 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-01-18 07:31 - 2014-01-18 07:31 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-01-18 07:29 - 2014-01-18 07:29 - 00000000 ____D () C:\ProgramData\Battle.net
2014-01-18 07:28 - 2014-01-18 07:28 - 05971128 _____ (Blizzard Entertainment) C:\Users\Stan\Downloads\Hearthstone-Beta-Setup-deDE.exe
2014-01-17 16:51 - 2014-01-17 16:51 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-17 16:51 - 2013-12-14 20:42 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-17 16:51 - 2013-12-14 20:42 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-17 16:50 - 2013-11-27 20:10 - 00000000 ____D () C:\Users\Stanl\AppData\Local\Adobe
2014-01-16 05:11 - 2009-07-14 05:45 - 00276528 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 20:07 - 2013-11-27 20:55 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 20:06 - 2013-11-27 20:55 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 12:36 - 2014-01-11 02:00 - 00000000 ____D () C:\Users\Stad\Bewerbungen
2014-01-14 12:34 - 2014-01-14 12:34 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-01-14 11:18 - 2014-01-13 12:24 - 00000000 ____D () C:\Users\Stad\AppData\Local\Downloaded Installations
2014-01-14 11:17 - 2014-01-14 11:17 - 25506456 _____ (CIB software GmbH ) C:\Users\Stad\Downloads\cibpdfbrewer-x64.exe
2014-01-14 11:02 - 2014-01-14 11:02 - 00000355 _____ () C:\Users\Stand\Documents\Computer - Verknüpfung.lnk
2014-01-13 12:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-01-13 12:33 - 2014-01-13 12:33 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2014-01-13 12:32 - 2014-01-13 12:31 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories
2014-01-13 12:31 - 2013-12-03 16:26 - 00223842 _____ () C:\Windows\DirectX.log
2014-01-13 12:29 - 2014-01-13 12:29 - 00000000 ____D () C:\Users\Std\Documents\Square Enix
2014-01-13 12:26 - 2014-01-13 12:26 - 00000000 ____D () C:\Windows\SysWOW64\xlive
2014-01-13 12:26 - 2014-01-13 12:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-13 12:25 - 2014-01-13 12:25 - 00000000 ____D () C:\Windows\SysWOW64\AGEIA
2014-01-13 12:25 - 2014-01-13 12:25 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-13 12:24 - 2014-01-13 12:24 - 00000000 ____D () C:\Program Files (x86)\AMD
2014-01-13 12:13 - 2013-11-27 20:00 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-13 12:01 - 2014-01-13 11:55 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU
2014-01-13 11:55 - 2014-01-13 11:55 - 00000000 ____D () C:\ProgramData\AVS4YOU
2014-01-13 11:45 - 2013-12-03 14:21 - 00000000 ____D () C:\Users\Stand\Programme
2014-01-13 11:38 - 2014-01-13 11:38 - 00000000 ____D () C:\Program Files\Tracker Software
2014-01-13 11:38 - 2014-01-13 11:37 - 16537480 _____ (Tracker Software Products Ltd ) C:\Users\Stanley Herold\Downloads\PDF214XVwer.exe
2014-01-13 11:38 - 2013-12-03 12:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-13 11:36 - 2010-11-21 08:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-01-11 00:01 - 2014-01-10 23:56 - 00000000 ____D () C:\Users\Stand\AppData\Roaming\AbiSuite
2014-01-11 00:01 - 2014-01-10 23:56 - 00000000 ____D () C:\Program Files (x86)\AbiWord

Some content of TEMP:
====================
C:\Users\Stld\AppData\Local\Temp\avgnt.exe
C:\Users\Steld\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\Stad\AppData\Local\Temp\fp_pl_pfs_installer-2.exe
C:\Users\Stald\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Stald\AppData\Local\Temp\vlc-2.1.2-win64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-30 17:51

==================== End Of Log ============================