Malware Problem: Es öffnen sich haufenweise neue Seiten

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014
Ran by andreas (administrator) on ANDREAS-PC on 10-02-2014 19:41:49
Running from C:\Users\andreas\Desktop
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
(Just Develop It) C:\Program Files (x86)\MyPC Backup\BackupStack.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Secure Backup) C:\Program Files (x86)\Malwarebytes Secure Backup\SUpdateNotifier.exe
() C:\Program Files (x86)\Re-markit\Re-markit_wd.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NTI, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
() C:\Program Files (x86)\Re-markit\Re-markit153.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Malwarebytes Secure Backup) C:\Program Files (x86)\Malwarebytes Secure Backup\SMessaging.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
() C:\Users\andreas\Desktop\Defogger.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10081312 2010-02-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [877600 2010-02-22] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324608 2010-02-05] (Alcor Micro Corp.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2107176 2010-03-11] (Synaptics Incorporated)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2010-06-15] (Acer Incorporated)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-06-28] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-06-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [124136 2010-06-25] (CyberLink Corp.)
HKLM-x32\...\Run: [DivX Download Manager] - "C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe" start
HKLM-x32\...\Run: [AVG_TRAY] - C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2598520 2012-11-19] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SOSUAUI] - C:\Program Files (x86)\Malwarebytes Secure Backup\sosuploadagent.exe [53144 2013-04-01] (Malwarebytes Secure Backup)
HKLM-x32\...\Run: [SMessaging] - C:\Program Files (x86)\Malwarebytes Secure Backup\SMessaging.exe [63896 2013-04-01] (Malwarebytes Secure Backup)
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll",DllRegisterServer [X]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll",DllRegisterServer [X]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll",DllRegisterServer [X]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll",DllRegisterServer [X]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll",DllRegisterServer [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3868249926-3952307075-1611577641-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19603048 2013-06-03] (Skype Technologies S.A.)
Startup: C:\Users\andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lollipop.lnk
ShortcutTarget: lollipop.lnk -> C:\Users\andreas\AppData\Local\Lollipop\Lollipop.exe (No File)
Startup: C:\Users\andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1391960360&from=tugs&uid=HitachiXHTS545050B9A300_101013PBN40417F7430EX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1391960360&from=tugs&uid=HitachiXHTS545050B9A300_101013PBN40417F7430EX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1391960360&from=tugs&uid=HitachiXHTS545050B9A300_101013PBN40417F7430EX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1391960360&from=tugs&uid=HitachiXHTS545050B9A300_101013PBN40417F7430EX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1391960360&from=tugs&uid=HitachiXHTS545050B9A300_101013PBN40417F7430EX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1391960360&from=tugs&uid=HitachiXHTS545050B9A300_101013PBN40417F7430EX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1391960360&from=tugs&uid=HitachiXHTS545050B9A300_101013PBN40417F7430EX&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Feven 2.2 - {11111111-1111-1111-1111-110411901112} - C:\Program Files (x86)\Feven 2.2\Feven 2.2-bho64.dll No File
BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 80.69.100.110 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default
FF user.js: detected! => C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default\user.js
FF DefaultSearchEngine: awesomehp
FF SelectedSearchEngine: awesomehp
FF Homepage: hxxp://www.awesomehp.com/?type=hp&ts=1391960360&from=tugs&uid=HitachiXHTS545050B9A300_101013PBN40417F7430EX
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default\searchplugins\11-suche.xml
FF SearchPlugin: C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Feven 2.2 - C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default\Extensions\15d84a30-fc9d-4fca-80a7-e5797da621a2@b2cb2d04-e262-4863-aee7-9d0e4333b550.com [2014-02-09]
FF Extension: Extension_Protected - C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack.xpi [2014-02-09]
FF Extension: Lightning Speed Dial - C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default\Extensions\lightningnewtab@gmail.com.xpi [2014-02-09]
FF Extension: GMX MailCheck - C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default\Extensions\toolbar@gmx.net.xpi [2013-10-31]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ax5mxak2.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-12-11]
FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG2012\Firefox4\
FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\Firefox4\ []
FF HKLM-x32\...\Firefox\Extensions: [{F53C93F1-07D5-430c-86D4-C9531B27DFAF}] - C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack\
FF Extension: AVG Do Not Track - C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack\ []
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

==================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [5175856 2013-10-16] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-02-06] (Just Develop It)
R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [822304 2010-06-15] (Acer Incorporated)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.)
R2 NTISchedulerSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640 2010-04-17] (NTI, Inc.)
R2 Re-markit; C:\Program Files (x86)\Re-markit\Re-markit153.exe [180736 2014-02-09] ()
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 vToolbarUpdater14.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe [968880 2013-02-19] ()

==================== Drivers (Whitelisted) ====================

R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [127328 2012-12-10] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [307040 2012-11-08] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384800 2013-04-11] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [39768 2013-02-19] (AVG Technologies)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-10 19:41 - 2014-02-10 19:42 - 00020154 _____ () C:\Users\andreas\Desktop\FRST.txt
2014-02-10 19:41 - 2014-02-10 19:41 - 02150400 _____ (Farbar) C:\Users\andreas\Desktop\FRST64.exe
2014-02-10 19:41 - 2014-02-10 19:41 - 00000000 ____D () C:\FRST
2014-02-10 19:39 - 2014-02-10 19:39 - 00000476 _____ () C:\Users\andreas\Desktop\defogger_disable.log
2014-02-10 19:39 - 2014-02-10 19:39 - 00000000 _____ () C:\Users\andreas\defogger_reenable
2014-02-10 19:38 - 2014-02-10 19:38 - 00050477 _____ () C:\Users\andreas\Desktop\Defogger.exe
2014-02-09 17:32 - 2014-02-09 17:32 - 00000000 ____D () C:\Users\andreas\AppData\Roaming\vlc
2014-02-09 17:31 - 2014-02-09 17:31 - 00000875 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-09 17:30 - 2014-02-09 17:30 - 25035644 _____ () C:\Users\andreas\Desktop\vlc-2.1.3-win64.exe
2014-02-09 17:30 - 2014-02-09 17:30 - 00000000 ____D () C:\Program Files\VideoLAN
2014-02-09 17:02 - 2014-02-09 17:02 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-09 17:02 - 2014-02-09 17:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-09 17:02 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-09 17:01 - 2014-02-09 17:01 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\andreas\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-09 16:56 - 2014-02-10 18:43 - 00000490 _____ () C:\Windows\Tasks\Online Backup Update Notifier.job
2014-02-09 16:56 - 2014-02-09 16:56 - 00026900 _____ () C:\Users\andreas\AppData\Local\dt.dat
2014-02-09 16:56 - 2014-02-09 16:56 - 00003358 _____ () C:\Windows\System32\Tasks\Online Backup Update Notifier
2014-02-09 16:55 - 2014-02-09 16:55 - 00002009 _____ () C:\Users\Public\Desktop\Malwarebytes Secure Backup.lnk
2014-02-09 16:55 - 2014-02-09 16:55 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Secure Backup
2014-02-09 16:54 - 2014-02-09 16:54 - 14713592 _____ (Malwarebytes Corporation ) C:\Users\andreas\Desktop\mbsb-setup-1.0.0.0010.exe
2014-02-09 16:50 - 2014-02-09 16:50 - 00001053 _____ () C:\Users\andreas\Desktop\Continue VuuPC Installation.lnk
2014-02-09 16:40 - 2014-02-09 16:40 - 00001977 _____ () C:\Users\andreas\Desktop\Sync Folder.lnk
2014-02-09 16:39 - 2014-02-10 18:43 - 00000374 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-02-09 16:39 - 2014-02-09 17:23 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-02-09 16:39 - 2014-02-09 17:22 - 00000000 ____D () C:\ProgramData\WPM
2014-02-09 16:39 - 2014-02-09 17:19 - 00001942 _____ () C:\Users\andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2014-02-09 16:39 - 2014-02-09 16:39 - 00002966 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-02-09 16:39 - 2014-02-09 16:39 - 00001095 _____ () C:\Users\andreas\Desktop\MyPC Backup.lnk
2014-02-09 16:39 - 2014-02-09 16:39 - 00000000 ____D () C:\Users\andreas\Documents\Optimizer Pro
2014-02-09 16:39 - 2014-02-09 16:39 - 00000000 ____D () C:\Users\andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-02-09 16:39 - 2014-02-09 16:39 - 00000000 ____D () C:\Program Files (x86)\Re-markit
2014-02-09 16:38 - 2014-02-09 16:38 - 00000000 ____D () C:\Users\andreas\AppData\Local\SearchProtect
2014-02-09 16:38 - 2014-02-09 16:38 - 00000000 _____ () C:\END
2014-02-02 19:12 - 2014-02-09 16:39 - 00001371 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

==================== One Month Modified Files and Folders =======

2014-02-10 19:42 - 2014-02-10 19:41 - 00020154 _____ () C:\Users\andreas\Desktop\FRST.txt
2014-02-10 19:41 - 2014-02-10 19:41 - 02150400 _____ (Farbar) C:\Users\andreas\Desktop\FRST64.exe
2014-02-10 19:41 - 2014-02-10 19:41 - 00000000 ____D () C:\FRST
2014-02-10 19:39 - 2014-02-10 19:39 - 00000476 _____ () C:\Users\andreas\Desktop\defogger_disable.log
2014-02-10 19:39 - 2014-02-10 19:39 - 00000000 _____ () C:\Users\andreas\defogger_reenable
2014-02-10 19:39 - 2011-01-03 03:23 - 00000000 ____D () C:\Users\andreas
2014-02-10 19:38 - 2014-02-10 19:38 - 00050477 _____ () C:\Users\andreas\Desktop\Defogger.exe
2014-02-10 19:33 - 2012-07-05 02:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-10 18:50 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-10 18:50 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-10 18:49 - 2010-11-05 15:30 - 02067592 _____ () C:\Windows\WindowsUpdate.log
2014-02-10 18:47 - 2012-06-22 23:13 - 00000000 ____D () C:\Windows\system32\Drivers\AVG
2014-02-10 18:43 - 2014-02-09 16:56 - 00000490 _____ () C:\Windows\Tasks\Online Backup Update Notifier.job
2014-02-10 18:43 - 2014-02-09 16:39 - 00000374 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-02-10 18:43 - 2010-11-05 15:26 - 00035834 _____ () C:\Windows\PFRO.log
2014-02-10 18:43 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-10 18:43 - 2009-07-14 05:51 - 00111361 _____ () C:\Windows\setupact.log
2014-02-09 17:32 - 2014-02-09 17:32 - 00000000 ____D () C:\Users\andreas\AppData\Roaming\vlc
2014-02-09 17:31 - 2014-02-09 17:31 - 00000875 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-09 17:30 - 2014-02-09 17:30 - 25035644 _____ () C:\Users\andreas\Desktop\vlc-2.1.3-win64.exe
2014-02-09 17:30 - 2014-02-09 17:30 - 00000000 ____D () C:\Program Files\VideoLAN
2014-02-09 17:23 - 2014-02-09 16:39 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-02-09 17:22 - 2014-02-09 16:39 - 00000000 ____D () C:\ProgramData\WPM
2014-02-09 17:19 - 2014-02-09 16:39 - 00001942 _____ () C:\Users\andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2014-02-09 17:02 - 2014-02-09 17:02 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-09 17:02 - 2014-02-09 17:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-09 17:01 - 2014-02-09 17:01 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\andreas\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-09 16:56 - 2014-02-09 16:56 - 00026900 _____ () C:\Users\andreas\AppData\Local\dt.dat
2014-02-09 16:56 - 2014-02-09 16:56 - 00003358 _____ () C:\Windows\System32\Tasks\Online Backup Update Notifier
2014-02-09 16:55 - 2014-02-09 16:55 - 00002009 _____ () C:\Users\Public\Desktop\Malwarebytes Secure Backup.lnk
2014-02-09 16:55 - 2014-02-09 16:55 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Secure Backup
2014-02-09 16:55 - 2013-03-09 14:05 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-09 16:54 - 2014-02-09 16:54 - 14713592 _____ (Malwarebytes Corporation ) C:\Users\andreas\Desktop\mbsb-setup-1.0.0.0010.exe
2014-02-09 16:54 - 2010-09-08 08:39 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-02-09 16:50 - 2014-02-09 16:50 - 00001053 _____ () C:\Users\andreas\Desktop\Continue VuuPC Installation.lnk
2014-02-09 16:48 - 2013-02-17 20:28 - 01589182 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-09 16:48 - 2010-11-06 00:21 - 00696370 _____ () C:\Windows\system32\perfh007.dat
2014-02-09 16:48 - 2010-11-06 00:21 - 00147634 _____ () C:\Windows\system32\perfc007.dat
2014-02-09 16:48 - 2009-07-14 06:13 - 01589182 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-09 16:40 - 2014-02-09 16:40 - 00001977 _____ () C:\Users\andreas\Desktop\Sync Folder.lnk
2014-02-09 16:39 - 2014-02-09 16:39 - 00002966 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-02-09 16:39 - 2014-02-09 16:39 - 00001095 _____ () C:\Users\andreas\Desktop\MyPC Backup.lnk
2014-02-09 16:39 - 2014-02-09 16:39 - 00000000 ____D () C:\Users\andreas\Documents\Optimizer Pro
2014-02-09 16:39 - 2014-02-09 16:39 - 00000000 ____D () C:\Users\andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-02-09 16:39 - 2014-02-09 16:39 - 00000000 ____D () C:\Program Files (x86)\Re-markit
2014-02-09 16:39 - 2014-02-02 19:12 - 00001371 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-09 16:39 - 2013-01-13 18:41 - 00001354 _____ () C:\Users\andreas\Desktop\Mozilla Firefox.lnk
2014-02-09 16:39 - 2011-01-03 03:24 - 00001663 _____ () C:\Users\andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-09 16:39 - 2011-01-03 03:24 - 00001641 _____ () C:\Users\andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-02-09 16:39 - 2011-01-03 03:24 - 00000000 ___RD () C:\Users\andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-09 16:38 - 2014-02-09 16:38 - 00000000 ____D () C:\Users\andreas\AppData\Local\SearchProtect
2014-02-09 16:38 - 2014-02-09 16:38 - 00000000 _____ () C:\END
2014-02-09 16:35 - 2013-02-06 21:18 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-09 16:35 - 2012-11-08 21:27 - 00000000 ____D () C:\Users\andreas\AppData\Roaming\Skype
2014-02-09 16:35 - 2012-11-08 21:26 - 00000000 ____D () C:\ProgramData\Skype
2014-02-07 22:33 - 2012-07-05 02:44 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-07 22:33 - 2012-07-05 02:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-07 22:33 - 2012-07-05 02:44 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-02 20:11 - 2012-07-22 19:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-02 19:12 - 2013-12-11 21:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-02 19:12 - 2011-01-16 00:24 - 00000000 ____D () C:\Users\andreas\Desktop\OpenOffice.org 3.2 (de) Installation Files
2014-02-02 19:11 - 2011-10-30 03:46 - 00000000 ____D () C:\Users\andreas\AppData\Local\Adobe
2014-01-19 19:33 - 2013-10-27 19:33 - 00000000 ____D () C:\Users\andreas\Desktop\Unsere
2014-01-17 22:27 - 2013-06-08 23:08 - 00000000 ____D () C:\Users\andreas\Desktop\Leon
2014-01-15 20:16 - 2013-08-13 21:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 20:14 - 2011-02-04 22:51 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\andreas\AppData\Local\Temp\BackupSetup.exe
C:\Users\andreas\AppData\Local\Temp\SkypeSetup.exe
C:\Users\andreas\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-01 14:26

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-02-2014
Ran by andreas at 2014-02-10 19:42:37
Running from C:\Users\andreas\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG Anti-Virus Free Edition 2012 (Enabled - Up to date) {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
AS: AVG Anti-Virus Free Edition 2012 (Enabled - Up to date) {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Acer Arcade Deluxe (x32 Version: 4.0.8012 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 4.0.8012 - CyberLink Corp.) Hidden
Acer Arcade Movie (x32 Version: 9.0.6625 - CyberLink Corp.) Hidden
Acer Backup Manager (x32 Version: 2.0.0.68 - NewTech Infosystems)
Acer Crystal Eye webcam (x32 Version: 1.0.4.3 - Liteon)
Acer eRecovery Management (x32 Version: 4.05.3013 - Acer Incorporated)
Acer GameZone Console (x32 Version: 6.1.0.9 - Oberon Media, Inc.)
Acer PowerSmart Manager (x32 Version: 5.01.3003 - Acer Incorporated)
Acer Registration (x32 Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (x32 Version: 1.1.0804.2010 - Acer Incorporated)
Acer Updater (x32 Version: 1.02.3001 - Acer Incorporated)
Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Airport Mania First Flight (x32 Version:  - Oberon Media)
Alcor Micro USB Card Reader (x32 Version: 1.3.17.05006 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.3.17.05006 - Alcor Micro Corp.) Hidden
Amazonia (x32 Version:  - Oberon Media)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.33 - Atheros Communications Inc.)
ATI Catalyst Install Manager (Version: 3.0.765.0 - ATI Technologies, Inc.)
AVG 2012 (Version: 12.0.3697 - AVG Technologies) Hidden
AVG 2012 (Version: 12.1.2247 - AVG Technologies) Hidden
AVG 2012 (Version: 2012.1.2247 - AVG Technologies)
Backup Manager Basic (x32 Version: 2.0.0.68 - NewTech Infosystems) Hidden
Cake Mania (x32 Version:  - Oberon Media)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2010.0605.2309.39762 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0605.2309.39762 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2010.0605.2309.39762 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2010.0605.2309.39762 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0605.2309.39762 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0605.2309.39762 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0605.2309.39762 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help English (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help French (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help German (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0605.2308.39762 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0605.2309.39762 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.0605.2309.39762 - ATI) Hidden
Dream Day First Home (x32 Version:  - Oberon Media)
eBay Worldwide (x32 Version: 2.1.0901 - OEM)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Farm Frenzy 2 (x32 Version:  - Oberon Media)
Free Audio CD Burner version 1.4.7 (x32 Version:  - DVDVideoSoft Limited.)
Free YouTube to MP3 Converter version 3.9.32 (x32 Version:  - DVDVideoSoft Limited.)
Galapago (x32 Version:  - Oberon Media)
Heroes of Hellas (x32 Version:  - Oberon Media)
Identity Card (x32 Version: 1.00.3003 - Acer Incorporated)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.01.01.1007 - Intel Corporation)
IrfanView (remove only) (x32 Version: 4.28 - Irfan Skiljan)
Java 7 Update 17 (x32 Version: 7.0.170 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Launch Manager (x32 Version: 4.0.14 - Acer Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Malwarebytes Secure Backup (x32 Version: 5.6.0.3556 - Malwarebytes Corporation)
MediaShow Espresso (x32 Version: 5.5.1403_23691 - CyberLink Corp.) Hidden
Merriam Websters Spell Jam (x32 Version:  - Oberon Media)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MyPC Backup  (Version:  - JDi Backup Ltd) <==== ATTENTION
MyWinLocker (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden
MyWinLocker Suite (x32 Version: 3.1.212.0 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden
NTI Backup Now 5 (x32 Version: 5.1.2.630 - NewTech Infosystems)
NTI Backup Now Standard (x32 Version: 5.1.2.630 - NewTech Infosystems) Hidden
NTI Media Maker 8 (x32 Version: 8.0.12.6636 - NewTech Infosystems)
NTI Media Maker 8 (x32 Version: 8.0.12.6636 - NewTech Infosystems) Hidden
OpenOffice.org 3.2 (x32 Version: 3.2.9502 - OpenOffice.org)
PhotoScape (x32 Version:  - )
Poker Pop (x32 Version:  - Oberon Media)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6050 - Realtek Semiconductor Corp.)
Re-markit (x32 Version:  - Re-markit Software) <==== ATTENTION
Shredder (Version: 2.0.8.3 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.3 - Egis Technology Inc.) Hidden
Skype™ 6.5 (x32 Version: 6.5.158 - Skype Technologies S.A.)
Spin & Win (x32 Version:  - Oberon Media)
Synaptics Pointing Device Driver (Version: 15.0.12.0 - Synaptics Incorporated)
Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.6 - Intel)
VideoLAN Movie Creator (x32 Version:  - )
Visual Studio 2008 x64 Redistributables (x32 Version: 10.0.0.2 - AVG Technologies)
VLC media player 2.1.3 (Version: 2.1.3 - VideoLAN)
Welcome Center (x32 Version: 1.02.3004 - Acer Incorporated)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029 - Microsoft Corporation)

==================== Restore Points  =========================

23-11-2013 20:49:42 Geplanter Prüfpunkt
04-12-2013 18:21:34 Geplanter Prüfpunkt
15-12-2013 00:23:37 Windows Update
29-12-2013 22:45:06 Windows Update
15-01-2014 11:50:08 Geplanter Prüfpunkt
15-01-2014 19:14:02 Windows Update
09-02-2014 15:55:04 Installed Malwarebytes Secure Backup

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-03-10 09:40 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {12982114-BA5D-4C9C-A39C-5D4774EF471C} - System32\Tasks\Online Backup Update Notifier => C:\Program Files (x86)\Malwarebytes Secure Backup\SUpdateNotifier.exe [2013-04-01] (Malwarebytes Secure Backup)
Task: {4F6A42ED-C055-41F4-9388-86CFF25E1D0E} - System32\Tasks\Re-markit_wd => C:\Program Files (x86)\Re-markit\Re-markit_wd.exe [2014-02-09] () <==== ATTENTION
Task: {64DAD8D4-CB0C-4568-8BA3-6B1BB53408FE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-07] (Adobe Systems Incorporated)
Task: {746DB20C-D913-48A6-8702-83175D41DFF5} - System32\Tasks\{B70F8A3B-12EB-4744-AB94-6B9F1D29E8BF} => Firefox.exe hxxp://ui.skype.com/ui/0/4.1.0.179.367/de/privacy?source=lightinstaller
Task: {7E5B5C3E-5796-4710-B9B2-28F2C126763E} - System32\Tasks\{10559C77-211D-4760-9E7C-708D2DF8E5F9} => Firefox.exe hxxp://ui.skype.com/ui/0/4.1.0.179.367/de/abandoninstall?source=lightinstaller&amp;page=tsProblems&amp;LastError=404&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;notincluded
Task: {8B88AD30-43C1-41E3-A18A-9D8E6A78BCF9} - System32\Tasks\{796ABE40-9F65-4D2C-B0E6-7027761F3DCA} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=4.1.0.179.367&amp;LastError=404
Task: {9EA8019A-5798-4EB4-9F50-E6E1AB0B22B9} - System32\Tasks\{A7DB6BFE-9182-49DD-B2E1-C22A89C1D841} => Firefox.exe hxxp://ui.skype.com/ui/0/4.1.0.179.367/de/abandoninstall?source=lightinstaller&amp;page=tsMain&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;notincluded
Task: {BA1392CE-3B55-426C-8334-3E76BA0C36FB} - System32\Tasks\{BE5438BF-7CB8-484F-819F-D1B63ED6795D} => Firefox.exe hxxp://ui.skype.com/ui/0/4.1.0.179.367/de/abandoninstall?source=lightinstaller&amp;page=tsProblems&amp;LastError=404&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;notincluded
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Online Backup Update Notifier.job => C:\Program Files (x86)\Malwarebytes Secure Backup\SUpdateNotifier.exe
Task: C:\Windows\Tasks\Re-markit_wd.job => C:\Program Files (x86)\Re-markit\Re-markit_wd.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-02-09 16:39 - 2014-02-09 16:39 - 00093184 _____ () C:\Program Files (x86)\Re-markit\Re-markit_wd.exe
2014-02-06 16:19 - 2014-02-06 16:19 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll
2014-02-06 16:13 - 2014-02-06 16:13 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2010-03-26 10:41 - 2010-03-26 10:41 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-11-05 15:29 - 2010-11-05 15:29 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-02-10 19:38 - 2014-02-10 19:38 - 00050477 _____ () C:\Users\andreas\Desktop\Defogger.exe
2010-06-28 23:20 - 2010-06-28 23:20 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-06-28 23:12 - 2010-06-28 23:12 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2014-02-09 16:39 - 2014-02-09 16:39 - 00180736 _____ () C:\Program Files (x86)\Re-markit\Re-markit153.exe
2010-11-05 15:55 - 2010-02-03 09:37 - 00244904 ____N () C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
2013-02-19 14:04 - 2013-02-19 14:04 - 00968880 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
2010-09-08 09:17 - 2009-05-20 07:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll
2013-12-11 21:06 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-02-07 22:33 - 2014-02-07 22:33 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:0B9176C0
AlternateDataStreams: C:\ProgramData\Temp:1A60DE96
AlternateDataStreams: C:\ProgramData\Temp:798A3728
AlternateDataStreams: C:\ProgramData\Temp:CDFF58FE
AlternateDataStreams: C:\ProgramData\Temp:E36F5B57

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/09/2014 04:55:52 PM) (Source: Application Hang) (User: )
Description: Programm Skype.exe, Version 6.5.0.158 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1254

Startzeit: 01cf25ac84d530a9

Endzeit: 7

Anwendungspfad: C:\Program Files (x86)\Skype\Phone\Skype.exe

Berichts-ID:

Error: (02/08/2014 00:17:08 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/08/2014 00:16:20 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (02/07/2014 10:23:51 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 26.0.0.5087, Zeitstempel: 0x52a0d273
Name des fehlerhaften Moduls: xul.dll, Version: 26.0.0.5087, Zeitstempel: 0x52a0d20a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0014e1a8
ID des fehlerhaften Prozesses: 0x1244
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (02/02/2014 08:12:55 PM) (Source: SkypeUpdate) (User: )
Description: File C:\Windows\TEMP\SKYD222.tmp has invalid signature.

Error: (02/02/2014 03:17:41 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/02/2014 03:16:56 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (02/02/2014 02:46:12 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 26.0.0.5087, Zeitstempel: 0x52a0d273
Name des fehlerhaften Moduls: xul.dll, Version: 26.0.0.5087, Zeitstempel: 0x52a0d20a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0014e1a8
ID des fehlerhaften Prozesses: 0x11e0
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (02/01/2014 02:27:15 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (01/24/2014 08:42:45 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 26.0.0.5087, Zeitstempel: 0x52a0d273
Name des fehlerhaften Moduls: xul.dll, Version: 26.0.0.5087, Zeitstempel: 0x52a0d20a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0014e1a8
ID des fehlerhaften Prozesses: 0xbc8
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3


System errors:
=============
Error: (02/02/2014 07:38:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UPnP-Gerätehost" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (02/02/2014 07:38:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "upnphost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/02/2014 07:38:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UPnP-Gerätehost" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (02/02/2014 07:38:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "upnphost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1352

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/02/2014 07:38:37 PM) (Source: DCOM) (User: )
Description: 1069upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}

Error: (01/20/2014 09:16:14 PM) (Source: Server) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{DB56F62E-3192-4ECD-AC2E-F5F0972A6BF0} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (01/02/2014 09:19:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Updater Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/02/2014 09:19:31 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Updater Service erreicht.

Error: (12/29/2013 08:47:38 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Updater Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/29/2013 08:47:38 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Updater Service erreicht.


Microsoft Office Sessions:
=========================
Error: (02/09/2014 04:55:52 PM) (Source: Application Hang)(User: )
Description: Skype.exe6.5.0.158125401cf25ac84d530a97C:\Program Files (x86)\Skype\Phone\Skype.exe

Error: (02/08/2014 00:17:08 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (02/08/2014 00:16:20 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (02/07/2014 10:23:51 PM) (Source: Application Error)(User: )
Description: firefox.exe26.0.0.508752a0d273xul.dll26.0.0.508752a0d20ac00000050014e1a8124401cf243c0444e5d5C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll236d03cb-903e-11e3-af2b-60eb6987802b

Error: (02/02/2014 08:12:55 PM) (Source: SkypeUpdate)(User: )
Description: C:\Windows\TEMP\SKYD222.tmp

Error: (02/02/2014 03:17:41 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (02/02/2014 03:16:56 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (02/02/2014 02:46:12 PM) (Source: Application Error)(User: )
Description: firefox.exe26.0.0.508752a0d273xul.dll26.0.0.508752a0d20ac00000050014e1a811e001cf201b1d921f09C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll605f03ad-8c10-11e3-a7fd-60eb6987802b

Error: (02/01/2014 02:27:15 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (01/24/2014 08:42:45 PM) (Source: Application Error)(User: )
Description: firefox.exe26.0.0.508752a0d273xul.dll26.0.0.508752a0d20ac00000050014e1a8bc801cf1939fd475a63C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dllb20443cf-852f-11e3-ac4f-60eb6987802b


CodeIntegrity Errors:
===================================
  Date: 2014-02-02 19:14:21.576
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-27 13:32:32.014
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-27 13:31:39.271
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 14:15:33.682
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-04-02 17:10:17.006
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-27 15:43:33.780
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-10 09:40:13.377
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-10 09:40:13.330
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-05 13:45:18.515
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-05 13:43:28.937
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 51%
Total physical RAM: 3764.48 MB
Available physical RAM: 1838.45 MB
Total Pagefile: 7527.11 MB
Available Pagefile: 5030.84 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:451.66 GB) (Free:348.04 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 2CA7E678)
Partition 1: (Not Active) - (Size=14 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=452 GB) - (Type=07 NTFS)

==================== End Of Log ============================