Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
TR/Crypt.XPACK.Gen' [trojan]

TR/Crypt.XPACK.Gen' [trojan]


Plagegeister aller Art und deren Bekämpfung: TR/Crypt.XPACK.Gen' [trojan]

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 27.03.2014, 22:39   #1
90stefan
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


Vor ein paar Tagen war ich im Internet unterwegs und wollte mir ein Programm downloaden, dessen Namen ich bereits vergessen habe. Nach dem Download hatte Avira mir mehrfachst hintereinander TR/Crypt.XPACK.Gen' [trojan] angezeigt.
Als ich auf die Beschreibung ging gab es 3 Einträge: 1 Zugriff verweigert; 2 Zugriff erlaubt; 3 Zugriff erlaubt. Seit dem habe ich ein wenig recherchiert und herausgefunden, dass der Trojaner nicht so ohne weiteres zu entfernen ist. Ich habe seither lediglich nen Virusscan im Abgesicherten Modus gemacht, jedoch ohne Resultate.

Seit jenem Tag ist mein Computer extrem langsam beim Starten und auch die Internetgeschwindigkeit ist arg reduziert. Außerdem haben sich in meinem Browser, Chrome, zwei Add-ons installiert die auch den Browser nen bisschen verändert haben (Webbar!, Sense).

Der Ort in dem TR/Crypt.XPACK.Gen [trojan] ohne meine Erlaubnis Zugang erlangt hat heißt gemäß Avira: C:\Users\Stefan\AppData\Local\Temp\nsk7389.tmp\jsdrv.exe

Nun weiß ich nicht, ob der Trojaner noch da ist oder nicht. Bitte HELFT!

Soll ich nochmal einen kompletten Systemscan machen? Die vorherigen Logfiles existieren nämlich nicht mehr. Habe nämlich advanced system care 7 und der räumt meinen Computer gelegentlich automatisch auf.

Alt 27.03.2014, 23:03   #2
Bootsektor
Ruhe in Frieden
† 2019
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


Hallo 90stefan und

Mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem
  • Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
  • Bitte kein Crossposting ( posten in mehreren Foren).
  • Installiere oder deinstalliere während der Bereinigung keine Software, ausser Du wurdest dazu aufgefordert.
  • Speichere alle unsere Tools auf dem Desktop ab.
  • Poste die Logfiles direkt in deinen Thread in Code-Tags.
  • Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Posten in Code Tags
Bitte füge die Logs immer in Code-Tags ein. Wenn Du das nicht machst, erschwert es mir sehr das Auswerten. Danke.
Dazu:
  • Klicke über dem Antwortfenster auf die Raute #, dann steht dort in eckigen Klammern [code][/code]
  • Zwischen den beiden code-Bausteinen fügst Du dann deine Logfiles ein. Also [CODE] Logfile [/CODE]
  • Wenn die Logs zu lang sein sollten, dann teile sie bitte auf und poste sie dann hier in Deinem Thread, notfalls in mehreren Antworten.

Lass uns doch mal schauen
Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 27.03.2014, 23:15   #3
90stefan
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]



FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Stefan (administrator) on STEFAN-PC on 27-03-2014 18:12:44
Running from C:\Users\Stefan\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Spigot, Inc.) C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared Files\brs.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Spigot, Inc.) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
(Spigot Inc) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\WINDOWS\SYSTEM32\HKCMD.EXE
(Intel Corporation) C:\WINDOWS\SYSTEM32\IGFXTRAY.EXE
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-28] (Adobe Systems Incorporated)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2586504 2010-08-05] (ELAN Microelectronics Corp.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-03-20] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-02-05] (NVIDIA Corporation)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe [295744 2011-03-09] (NTI Corporation)
HKLM-x32\...\Run: [NUSB3MON] - c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-04-27] (cyberlink)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [107816 2011-10-27] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [485672 2011-10-31] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [SearchSettings] - C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [1393984 2014-03-17] (Spigot, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Run: [DriverMax_RESTART] - C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe [8221560 2014-02-07] (Innovative Solutions)
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Run: [Slick Savings] - C:\Users\Stefan\AppData\Roaming\Slick Savings\CouponsHelper.exe [832320 2014-02-13] (Spigot, Inc.)
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\MountPoints2: {72affeea-0a68-11e3-bb43-68a3c4ee6690} - E:\AutoRun.exe
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\MountPoints2: {72affefd-0a68-11e3-bb43-68a3c4ee6690} - E:\AutoRun.exe
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
AppInit_DLLs:  c:\windows\system32\nvinitx.dll => c:\windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
URLSearchHook: HKCU - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.9\iobitappsToolbarIE64.dll (Spigot, Inc.)
URLSearchHook: HKCU - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.9\iobitappsToolbarIE.dll (Spigot, Inc.)
SearchScopes: HKCU - DefaultScope {01C8C359-A645-4711-8373-F205005CFAE8} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
SearchScopes: HKCU - {01C8C359-A645-4711-8373-F205005CFAE8} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=76EC7AA3C4EE6690&affID=119293&tt=160913_m1&tsp=5012
SearchScopes: HKCU - {10703245-6980-4280-8F20-00F2F3CDCE2C} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
SearchScopes: HKCU - {B9D8192A-172E-42C8-A072-376166ABAD8A} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: iWebar - {11111111-1111-1111-1111-110311551110} - C:\Program Files (x86)\iWebar\iWebar-bho64.dll (iWebar)
BHO: Sense - {11111111-1111-1111-1111-110411821192} - C:\Program Files (x86)\Sense\Sense-bho64.dll (Object Browser)
BHO: Slick Savings - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - C:\Users\Stefan\AppData\Roaming\Slick Savings\Coupons64.dll (Spigot, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Shopper Pro - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro64.dll (Goobzo Ltd.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.9\iobitappsToolbarIE.dll (Spigot, Inc.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: iWebar - {11111111-1111-1111-1111-110311551110} - C:\Program Files (x86)\iWebar\iWebar-bho.dll (iWebar)
BHO-x32: Sense - {11111111-1111-1111-1111-110411821192} - C:\Program Files (x86)\Sense\Sense-bho.dll (Object Browser)
BHO-x32: Slick Savings - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - C:\Users\Stefan\AppData\Roaming\Slick Savings\Coupons.dll (Spigot, Inc.)
BHO-x32: AccelerateTab - {48A789BF-F6D6-4930-9C8B-77855A63EDE1} - C:\Program Files (x86)\Secure Speed Dial\IE\SpeedDial.dll (Secure Speed Dial)
BHO-x32: Groove GFS Browser Helper - {4DB74D06-491C-440D-305E-012400990F3E} - C:\Windows\SysWOW64\d3ddcsx_42.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Shopper Pro - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro.dll (Goobzo Ltd.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: No Name - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
BHO-x32: Adblock - {EF5F59BA-B2AB-48D8-9747-54DF806C73B8} - C:\Program Files (x86)\Secure Speed Dial\IE\ADBlock\IE\Adblock.dll (Adblock)
Toolbar: HKLM - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.9\iobitappsToolbarIE64.dll (Spigot, Inc.)
Toolbar: HKLM-x32 - No Name - {82E1477C-B154-48D3-9891-33D83C26BCD3} -  No File
Toolbar: HKLM-x32 - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.9\iobitappsToolbarIE.dll (Spigot, Inc.)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default
FF user.js: detected! => C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\user.js
FF SearchEngineOrder.1: Sichere Suche
FF Homepage: hxxp://www.google.de/
FF DefaultSearchEngine: Yahoo!
FF SelectedSearchEngine: Yahoo!
FF Keyword.URL: hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @mcafee.com/MVT - C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Stefan\AppData\Local\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Stefan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\searchplugins\chip-online-suche.xml
FF SearchPlugin: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\searchplugins\iminent.xml
FF SearchPlugin: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Sense - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com [2014-03-24]
FF Extension: iWebar - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com [2014-03-23]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\ascsurfingprotection@iobit.com [2014-03-25]
FF Extension: Personas Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\personas@christopher.beard [2013-10-25]
FF Extension: Slick Savings - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\savingsslider@mybrowserbar.com [2014-03-25]
FF Extension: AD Block - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\searchads@instair.net [2014-02-28]
FF Extension: AccelerateTab - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\speeddial@instair.net [2014-03-04]
FF Extension: No Name - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\staged [2013-10-25]
FF Extension: Garmin Communicator - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-19]
FF Extension: Start Page - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-03-25]
FF Extension: Shopper-Pro - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF} [2014-03-23]
FF Extension: Ecosia - The search engine that plants trees - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0} [2013-10-21]
FF Extension: Adblock Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2013-10-29]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\adblockpopups@jessehakanen.net.xpi [2011-11-24]
FF Extension: Personas Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\personas@christopher.beard.xpi [2013-10-25]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Ecosia - The search engine that plants trees - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2013-10-21]
FF Extension: Adblock Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-12-03]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-13]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-02-13]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-02-13]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR DefaultSearchKeyword: google.com.py
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Advanced SystemCare 7) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd\\1.0.0_0\Plugin/ASCPlugin_Protect.dll (IObit)
CHR Plugin: (NPIdentityGen Plugin) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgjafhkemfjfgdmjcmhofijphjmaanak\1.2.8_0\dll/NPIdentityGen.dll (Software)
CHR Plugin: (NPAdbExternal Plugin) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfgjbmhakaffflkjecineeaadpidgikb\1.0.0_0\dll/NPAdbExternal.dll (Software)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U51) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
CHR Plugin: (Unity Player) - C:\Users\Stefan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.94) - C:\Users\Stefan\AppData\Local\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd [2014-03-25]
CHR Extension: (McAfee Security Scan+) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh [2014-02-22]
CHR Extension: (Avira Browser Safety Beta) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-03-26]
CHR Extension: (AdBlock) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-30]
CHR Extension: (Domain Error Assistant) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj [2013-11-14]
CHR Extension: (AccelerateTab) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgjafhkemfjfgdmjcmhofijphjmaanak [2014-03-04]
CHR Extension: (AD Block) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfgjbmhakaffflkjecineeaadpidgikb [2014-02-28]
CHR Extension: (Google Wallet) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR Extension: (Amazon Shopping Assistant by Spigot) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp [2014-01-18]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-03-23]
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx [2013-10-14]
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx [2013-12-27]
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Users\Stefan\AppData\Local\Slick Savings\coupons.crx [2014-03-25]
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-22]

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243728 2012-08-27] (CyberLink)
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [872552 2011-05-10] (Acer Incorporated)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [255376 2012-04-05] (Acer Incorporated)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-15] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe [257344 2011-03-09] (NTI Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
S2 SecureUpdateSvc; C:\Program Files (x86)\Secure Speed Dial\IE\SecureUpdate.exe [2503504 2014-03-04] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
R3 azvusb; C:\Windows\System32\DRIVERS\azvusb.sys [54784 2009-08-24] (AzureWave Technologies, Inc.)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [90096 2011-09-08] (CyberLink)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2014-01-27] (Intel Corporation)
S3 MEMSWEEP2; C:\Windows\system32\2254.tmp [6144 2009-06-18] (Sophos Plc)
S3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [24200 2007-10-19] (DiBcom S.A.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2013-12-24] (IObit)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2014-02-24] (Synaptics Incorporated)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 mod7700; system32\DRIVERS\mod7700.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-27 18:12 - 2014-03-27 18:13 - 00035667 _____ () C:\Users\Stefan\Desktop\FRST.txt
2014-03-27 18:12 - 2014-03-27 18:12 - 00000000 ____D () C:\FRST
2014-03-27 18:11 - 2014-03-27 18:12 - 02157056 _____ (Farbar) C:\Users\Stefan\Desktop\FRST64.exe
2014-03-27 18:10 - 2014-03-27 18:10 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-27 18:10 - 2014-03-27 18:10 - 00000000 _____ () C:\Windows\setupact.log
2014-03-25 18:45 - 2014-03-25 18:45 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Slick Savings
2014-03-25 18:45 - 2014-03-25 18:45 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Slick Savings
2014-03-25 18:45 - 2014-03-25 18:45 - 00000000 ____D () C:\Program Files (x86)\IObit Apps Toolbar
2014-03-25 18:45 - 2014-03-25 18:45 - 00000000 ____D () C:\Program Files (x86)\Application Updater
2014-03-25 17:35 - 2013-11-05 06:02 - 00458960 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\k57nd60a.sys
2014-03-25 16:03 - 2014-03-25 16:04 - 00000000 ____D () C:\Users\Stefan\AppData\Local\{DF105FE9-62A0-41CD-A336-AC280425A155}
2014-03-24 10:17 - 2014-03-27 16:22 - 00003406 _____ () C:\Windows\Tasks\Sense-chromeinstaller.job
2014-03-24 10:17 - 2014-03-27 16:17 - 00002488 _____ () C:\Windows\Tasks\Sense-firefoxinstaller.job
2014-03-24 10:17 - 2014-03-27 16:17 - 00001776 _____ () C:\Windows\Tasks\Sense-updater.job
2014-03-24 10:17 - 2014-03-27 16:17 - 00001732 _____ () C:\Windows\Tasks\Sense-codedownloader.job
2014-03-24 10:17 - 2014-03-27 16:17 - 00001610 _____ () C:\Windows\Tasks\Sense-enabler.job
2014-03-24 10:17 - 2014-03-24 10:17 - 00004806 _____ () C:\Windows\System32\Tasks\Sense-updater
2014-03-24 10:17 - 2014-03-24 10:17 - 00004762 _____ () C:\Windows\System32\Tasks\Sense-codedownloader
2014-03-24 10:17 - 2014-03-24 10:17 - 00004640 _____ () C:\Windows\System32\Tasks\Sense-enabler
2014-03-24 10:17 - 2014-03-24 10:17 - 00000000 ____D () C:\Program Files (x86)\Sense
2014-03-23 21:39 - 2014-03-23 21:44 - 00000028 _____ () C:\Users\Stefan\Desktop\Neues Textdokument.txt
2014-03-23 21:22 - 2014-03-27 18:03 - 00685158 _____ () C:\Windows\WindowsUpdate.log
2014-03-23 21:17 - 2014-03-27 15:17 - 00002492 _____ () C:\Windows\Tasks\iWebar-firefoxinstaller.job
2014-03-23 21:17 - 2014-03-27 15:17 - 00001782 _____ () C:\Windows\Tasks\iWebar-updater.job
2014-03-23 21:17 - 2014-03-27 15:17 - 00001738 _____ () C:\Windows\Tasks\iWebar-codedownloader.job
2014-03-23 21:17 - 2014-03-27 15:17 - 00001616 _____ () C:\Windows\Tasks\iWebar-enabler.job
2014-03-23 21:17 - 2014-03-23 21:17 - 00004812 _____ () C:\Windows\System32\Tasks\iWebar-updater
2014-03-23 21:17 - 2014-03-23 21:17 - 00004768 _____ () C:\Windows\System32\Tasks\iWebar-codedownloader
2014-03-23 21:17 - 2014-03-23 21:17 - 00004646 _____ () C:\Windows\System32\Tasks\iWebar-enabler
2014-03-23 21:16 - 2014-03-27 15:21 - 00003410 _____ () C:\Windows\Tasks\iWebar-chromeinstaller.job
2014-03-23 21:16 - 2014-03-23 21:19 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-03-23 21:16 - 2014-03-23 21:17 - 00000000 ____D () C:\Program Files (x86)\iWebar
2014-03-23 21:14 - 2014-03-25 17:54 - 00000000 ____D () C:\ProgramData\ShopperPro
2014-03-23 21:14 - 2014-03-23 21:14 - 00004506 _____ () C:\Windows\System32\Tasks\ShopperPro
2014-03-23 21:14 - 2014-03-23 21:14 - 00003572 _____ () C:\Windows\System32\Tasks\ShopperProJSUpd
2014-03-23 21:14 - 2014-03-23 21:14 - 00000000 ____D () C:\Program Files (x86)\ShopperPro
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KeyFinder
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Program Files (x86)\KeyFinder
2014-03-23 14:39 - 2014-03-23 14:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-03-23 14:38 - 2014-03-23 14:38 - 00166616 _____ () C:\Users\Stefan\Downloads\ProductKeyFinder.exe
2014-03-23 08:51 - 2014-03-23 09:38 - 00000000 ____D () C:\Program Files (x86)\TweakNow PowerPack
2014-03-23 08:51 - 2014-03-23 08:51 - 00001058 _____ () C:\Users\Public\Desktop\TweakNow PowerPack.lnk
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack 2012
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack
2014-03-23 08:08 - 2014-01-08 20:13 - 04043776 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2014-03-23 08:04 - 2014-02-11 20:24 - 00450520 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\system32\NV
2014-03-21 19:22 - 2014-03-21 19:22 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-03-21 19:22 - 2014-03-21 19:22 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 54936576 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 03867224 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-21 19:21 - 2014-03-21 19:21 - 02787544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00945880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00916016 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00747989 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-21 19:20 - 2014-03-21 19:21 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-03-21 19:19 - 2014-03-21 19:20 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-21 19:17 - 2014-03-21 19:19 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____D () C:\Program Files\Synaptics
2014-03-21 14:56 - 2014-02-24 20:39 - 00031472 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2014-03-21 14:49 - 2014-03-21 14:49 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA Corporation
2014-03-21 14:49 - 2010-05-26 10:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-03-21 14:48 - 2014-03-21 14:50 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA
2014-03-21 14:48 - 2014-02-05 05:31 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-03-21 14:48 - 2014-02-05 05:30 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-03-21 14:47 - 2014-03-21 14:47 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-21 14:47 - 2014-03-04 09:06 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-03-21 14:47 - 2014-03-04 09:06 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin
2014-03-21 14:47 - 2014-03-04 09:05 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 01075032 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-03-21 14:47 - 2014-03-04 09:05 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-03-21 14:46 - 2014-03-21 14:50 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-03-21 14:46 - 2014-03-04 10:35 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-21 14:46 - 2014-03-04 10:35 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-21 14:39 - 2014-03-04 10:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00033736 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-03-21 14:39 - 2014-03-04 10:35 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-21 14:39 - 2013-12-27 14:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-03-21 14:39 - 2013-12-27 14:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-03-21 14:39 - 2013-12-27 14:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-03-21 14:35 - 2014-03-21 14:35 - 00001210 _____ () C:\Users\Stefan\Desktop\DriverMax.lnk
2014-03-21 14:35 - 2014-03-21 14:35 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Innovative Solutions
2014-03-21 14:34 - 2014-03-21 14:34 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-03-21 14:08 - 2014-03-21 14:08 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Deployment
2014-03-21 13:41 - 2014-03-21 13:41 - 00000000 ____D () C:\swsetup
2014-03-21 13:30 - 2014-03-21 13:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ICCWDT_01009.Wdf
2014-03-21 12:44 - 2014-03-21 14:57 - 00000000 ____D () C:\Program Files\Easeware
2014-03-21 12:44 - 2014-03-21 13:00 - 00000408 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-03-21 12:44 - 2014-03-21 12:45 - 01365248 _____ (Viber Media Inc) C:\Users\Stefan\Downloads\ViberSetup.exe
2014-03-21 12:44 - 2014-03-21 12:44 - 00003816 _____ () C:\Windows\System32\Tasks\DriverEasy Scheduled Scan
2014-03-21 12:44 - 2014-03-21 12:44 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Easeware
2014-03-21 12:43 - 2014-03-21 12:51 - 33189024 _____ (Nero AG) C:\Users\Stefan\Downloads\Nero_DiscSpeed.exe
2014-03-21 12:43 - 2014-03-21 12:47 - 33746304 _____ (eTeks ) C:\Users\Stefan\Downloads\SweetHome3D-4-2-windows-oc.exe
2014-03-21 12:43 - 2014-03-21 12:44 - 02987608 _____ (Easeware ) C:\Users\Stefan\Downloads\DriverEasy_Setup_4_6_4.exe
2014-03-21 12:36 - 2014-03-21 12:36 - 00000000 ____D () C:\Users\Stefan\AppData\Local\CrashRpt
2014-03-21 12:35 - 2014-03-21 12:36 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Softonic
2014-03-21 12:35 - 2014-03-21 12:35 - 00001072 _____ () C:\Users\Stefan\Desktop\Softonic.lnk
2014-03-21 12:35 - 2014-03-21 12:35 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Softonic
2014-03-21 12:03 - 2014-03-21 12:03 - 00003166 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2014-03-20 15:39 - 2014-03-20 15:39 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-20 15:39 - 2014-03-20 15:39 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01022680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00245496 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00059088 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bScsiMSa.sys
2014-03-20 15:31 - 2014-03-21 12:47 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\DriverTurbo
2014-03-20 15:30 - 2014-03-20 15:30 - 00231952 _____ () C:\Users\Stefan\Downloads\DriverTurboSetup.exe
2014-03-20 05:55 - 2014-03-20 05:55 - 00002858 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Stefan)
2014-03-20 05:50 - 2014-03-20 05:51 - 23669792 _____ (IObit ) C:\Users\Stefan\Downloads\driver_booster_setup.exe
2014-03-19 10:17 - 2014-03-19 10:17 - 00000000 ____D () C:\Users\Stefan\AppData\Local\{90DAA9A0-10C0-4110-A6C5-C7062E44AC12}
2014-03-13 07:14 - 2014-03-01 02:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 07:14 - 2014-03-01 01:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 07:14 - 2014-03-01 01:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 07:14 - 2014-03-01 00:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 07:14 - 2014-03-01 00:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 07:14 - 2014-03-01 00:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 07:14 - 2014-03-01 00:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 07:14 - 2014-03-01 00:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 07:14 - 2014-03-01 00:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 07:14 - 2014-03-01 00:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 07:14 - 2014-03-01 00:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 07:14 - 2014-03-01 00:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 07:14 - 2014-03-01 00:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 07:14 - 2014-03-01 00:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 07:14 - 2014-03-01 00:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 07:14 - 2014-03-01 00:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 07:14 - 2014-03-01 00:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 07:14 - 2014-02-28 23:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 07:14 - 2014-02-28 23:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 07:14 - 2014-02-28 23:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 07:14 - 2014-02-28 23:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 07:14 - 2014-02-28 23:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 07:14 - 2014-02-28 23:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 07:14 - 2014-02-28 23:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 07:14 - 2014-02-28 23:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 07:14 - 2014-02-28 23:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 07:14 - 2014-02-28 23:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 07:14 - 2014-02-28 23:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 07:14 - 2014-02-28 23:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 07:14 - 2014-02-28 23:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 07:14 - 2014-02-28 23:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 07:14 - 2014-02-28 23:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 07:14 - 2014-02-28 23:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 07:14 - 2014-02-28 23:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 07:14 - 2014-02-28 22:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 07:14 - 2014-02-28 22:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 07:14 - 2014-02-28 22:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 07:14 - 2014-02-28 22:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 07:14 - 2014-02-28 22:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 07:14 - 2014-02-28 22:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 07:14 - 2014-02-06 21:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 07:14 - 2014-01-28 22:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 07:14 - 2014-01-28 22:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 07:14 - 2014-01-27 22:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 07:10 - 2014-02-03 22:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 07:10 - 2014-02-03 22:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 07:08 - 2014-02-03 22:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 07:08 - 2014-02-03 22:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-11 18:07 - 2014-03-11 18:07 - 00001755 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-11 18:05 - 2014-03-11 18:07 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-11 18:05 - 2014-03-11 18:07 - 00000000 ____D () C:\Program Files\iTunes
2014-03-11 18:05 - 2014-03-11 18:07 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-11 18:05 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files\iPod
2014-03-11 17:55 - 2014-03-11 17:55 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-10 16:15 - 2014-03-10 16:15 - 00000000 ____D () C:\Users\Stefan\AppData\Local\{29706AB3-EE7D-4726-A811-BF1071B226C7}
2014-03-05 09:00 - 2014-03-05 09:01 - 00000000 ____D () C:\Users\Stefan\AppData\Local\{32878532-0746-453A-AAB9-21AC081D8203}
2014-02-27 08:43 - 2014-02-27 08:44 - 13443208 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x86.exe
2014-02-27 08:42 - 2014-02-27 08:43 - 13644792 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x64.exe
2014-02-26 05:33 - 2014-03-23 09:03 - 00011264 ___SH () C:\Users\Stefan\Thumbs.db
2014-02-25 17:51 - 2014-03-25 19:05 - 00002008 _____ () C:\Windows\epplauncher.mif
2014-02-25 17:51 - 2014-02-25 17:51 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-02-25 17:51 - 2014-02-25 17:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-02-25 16:56 - 2014-02-25 16:56 - 00002888 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-02-25 16:48 - 2014-01-08 22:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-25 16:48 - 2014-01-03 18:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-25 16:38 - 2014-02-25 16:44 - 41807400 _____ (IObit ) C:\Users\Stefan\Downloads\advanced-systemcare-setup.exe

==================== One Month Modified Files and Folders =======

2014-03-27 18:13 - 2014-03-27 18:12 - 00035667 _____ () C:\Users\Stefan\Desktop\FRST.txt
2014-03-27 18:12 - 2014-03-27 18:12 - 00000000 ____D () C:\FRST
2014-03-27 18:12 - 2014-03-27 18:11 - 02157056 _____ (Farbar) C:\Users\Stefan\Desktop\FRST64.exe
2014-03-27 18:10 - 2014-03-27 18:10 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-27 18:10 - 2014-03-27 18:10 - 00000000 _____ () C:\Windows\setupact.log
2014-03-27 18:03 - 2014-03-23 21:22 - 00685158 _____ () C:\Windows\WindowsUpdate.log
2014-03-27 18:02 - 2012-05-10 03:21 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-27 17:17 - 2013-10-09 12:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b.job
2014-03-27 16:22 - 2014-03-24 10:17 - 00003406 _____ () C:\Windows\Tasks\Sense-chromeinstaller.job
2014-03-27 16:17 - 2014-03-24 10:17 - 00002488 _____ () C:\Windows\Tasks\Sense-firefoxinstaller.job
2014-03-27 16:17 - 2014-03-24 10:17 - 00001776 _____ () C:\Windows\Tasks\Sense-updater.job
2014-03-27 16:17 - 2014-03-24 10:17 - 00001732 _____ () C:\Windows\Tasks\Sense-codedownloader.job
2014-03-27 16:17 - 2014-03-24 10:17 - 00001610 _____ () C:\Windows\Tasks\Sense-enabler.job
2014-03-27 15:21 - 2014-03-23 21:16 - 00003410 _____ () C:\Windows\Tasks\iWebar-chromeinstaller.job
2014-03-27 15:17 - 2014-03-23 21:17 - 00002492 _____ () C:\Windows\Tasks\iWebar-firefoxinstaller.job
2014-03-27 15:17 - 2014-03-23 21:17 - 00001782 _____ () C:\Windows\Tasks\iWebar-updater.job
2014-03-27 15:17 - 2014-03-23 21:17 - 00001738 _____ () C:\Windows\Tasks\iWebar-codedownloader.job
2014-03-27 15:17 - 2014-03-23 21:17 - 00001616 _____ () C:\Windows\Tasks\iWebar-enabler.job
2014-03-27 14:37 - 2009-07-14 00:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-27 14:37 - 2009-07-14 00:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-27 14:36 - 2011-07-22 03:26 - 00700134 _____ () C:\Windows\system32\perfh007.dat
2014-03-27 14:36 - 2011-07-22 03:26 - 00149984 _____ () C:\Windows\system32\perfc007.dat
2014-03-27 14:36 - 2009-07-14 01:13 - 01622236 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-27 14:29 - 2013-08-15 14:08 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-27 14:29 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-26 13:21 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-26 10:12 - 2013-10-09 12:14 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b
2014-03-26 10:12 - 2013-08-15 14:08 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-25 19:06 - 2011-12-17 10:56 - 00000000 ____D () C:\Users\Stefan\programme
2014-03-25 19:05 - 2014-02-25 17:51 - 00002008 _____ () C:\Windows\epplauncher.mif
2014-03-25 18:45 - 2014-03-25 18:45 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Slick Savings
2014-03-25 18:45 - 2014-03-25 18:45 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Slick Savings
2014-03-25 18:45 - 2014-03-25 18:45 - 00000000 ____D () C:\Program Files (x86)\IObit Apps Toolbar
2014-03-25 18:45 - 2014-03-25 18:45 - 00000000 ____D () C:\Program Files (x86)\Application Updater
2014-03-25 18:45 - 2013-11-05 18:52 - 00002852 _____ () C:\Windows\System32\Tasks\ASC7_SkipUac_Stefan
2014-03-25 18:45 - 2013-11-05 18:52 - 00002181 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-03-25 18:24 - 2011-11-17 20:33 - 00000000 ____D () C:\Users\Stefan\AppData\Local\CrashDumps
2014-03-25 17:55 - 2011-11-14 16:03 - 00000000 ____D () C:\Users\Stefan
2014-03-25 17:54 - 2014-03-23 21:14 - 00000000 ____D () C:\ProgramData\ShopperPro
2014-03-25 17:54 - 2014-01-25 13:14 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-25 17:54 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\registration
2014-03-25 17:40 - 2013-05-12 10:19 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\ViberPC
2014-03-25 17:08 - 2011-11-14 16:08 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Skype
2014-03-25 16:10 - 2012-07-18 05:08 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-25 16:04 - 2014-03-25 16:03 - 00000000 ____D () C:\Users\Stefan\AppData\Local\{DF105FE9-62A0-41CD-A336-AC280425A155}
2014-03-25 15:57 - 2013-11-05 18:52 - 00000000 ____D () C:\ProgramData\ProductData
2014-03-24 10:17 - 2014-03-24 10:17 - 00004806 _____ () C:\Windows\System32\Tasks\Sense-updater
2014-03-24 10:17 - 2014-03-24 10:17 - 00004762 _____ () C:\Windows\System32\Tasks\Sense-codedownloader
2014-03-24 10:17 - 2014-03-24 10:17 - 00004640 _____ () C:\Windows\System32\Tasks\Sense-enabler
2014-03-24 10:17 - 2014-03-24 10:17 - 00000000 ____D () C:\Program Files (x86)\Sense
2014-03-24 06:07 - 2013-09-20 22:26 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\BabSolution
2014-03-23 21:44 - 2014-03-23 21:39 - 00000028 _____ () C:\Users\Stefan\Desktop\Neues Textdokument.txt
2014-03-23 21:20 - 2009-07-14 00:45 - 00392144 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-23 21:19 - 2014-03-23 21:16 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-03-23 21:17 - 2014-03-23 21:17 - 00004812 _____ () C:\Windows\System32\Tasks\iWebar-updater
2014-03-23 21:17 - 2014-03-23 21:17 - 00004768 _____ () C:\Windows\System32\Tasks\iWebar-codedownloader
2014-03-23 21:17 - 2014-03-23 21:17 - 00004646 _____ () C:\Windows\System32\Tasks\iWebar-enabler
2014-03-23 21:17 - 2014-03-23 21:16 - 00000000 ____D () C:\Program Files (x86)\iWebar
2014-03-23 21:14 - 2014-03-23 21:14 - 00004506 _____ () C:\Windows\System32\Tasks\ShopperPro
2014-03-23 21:14 - 2014-03-23 21:14 - 00003572 _____ () C:\Windows\System32\Tasks\ShopperProJSUpd
2014-03-23 21:14 - 2014-03-23 21:14 - 00000000 ____D () C:\Program Files (x86)\ShopperPro
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-23 17:36 - 2012-12-24 20:49 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\vlc
2014-03-23 14:54 - 2012-05-12 09:11 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\SoftGrid Client
2014-03-23 14:52 - 2011-11-14 16:03 - 00096616 _____ () C:\Users\Stefan\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-23 14:48 - 2011-07-21 17:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KeyFinder
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Program Files (x86)\KeyFinder
2014-03-23 14:40 - 2009-07-13 23:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-23 14:39 - 2014-03-23 14:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-03-23 14:39 - 2010-11-21 03:16 - 00000000 ____D () C:\Windows\ShellNew
2014-03-23 14:38 - 2014-03-23 14:38 - 00166616 _____ () C:\Users\Stefan\Downloads\ProductKeyFinder.exe
2014-03-23 09:48 - 2013-10-17 19:36 - 00001042 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-03-23 09:38 - 2014-03-23 08:51 - 00000000 ____D () C:\Program Files (x86)\TweakNow PowerPack
2014-03-23 09:31 - 2011-11-14 16:07 - 00000000 ____D () C:\ProgramData\CyberLink
2014-03-23 09:06 - 2014-01-25 13:22 - 00000000 ____D () C:\Users\Stefan\TERESA
2014-03-23 09:06 - 2013-03-07 22:16 - 00000000 ____D () C:\Users\Stefan\Documents\English materials + CertTESOL
2014-03-23 09:03 - 2014-02-26 05:33 - 00011264 ___SH () C:\Users\Stefan\Thumbs.db
2014-03-23 09:00 - 2011-11-17 19:39 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\DVDVideoSoft
2014-03-23 09:00 - 2011-11-17 19:39 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-03-23 08:59 - 2013-11-14 19:32 - 00001215 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-03-23 08:54 - 2011-11-17 19:37 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack 2011
2014-03-23 08:51 - 2014-03-23 08:51 - 00001058 _____ () C:\Users\Public\Desktop\TweakNow PowerPack.lnk
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack 2012
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack
2014-03-23 08:44 - 2011-11-17 19:35 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-23 08:44 - 2011-11-17 19:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\system32\NV
2014-03-21 19:30 - 2011-07-21 17:39 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-21 19:25 - 2011-07-21 17:45 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-21 19:22 - 2014-03-21 19:22 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-03-21 19:22 - 2014-03-21 19:22 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 54936576 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 03867224 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-21 19:21 - 2014-03-21 19:21 - 02787544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00945880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00916016 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00747989 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-21 19:21 - 2014-03-21 19:20 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-03-21 19:20 - 2014-03-21 19:19 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-21 19:19 - 2014-03-21 19:17 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____D () C:\Program Files\Synaptics
2014-03-21 14:57 - 2014-03-21 12:44 - 00000000 ____D () C:\Program Files\Easeware
2014-03-21 14:50 - 2014-03-21 14:48 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA
2014-03-21 14:50 - 2014-03-21 14:46 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-03-21 14:49 - 2014-03-21 14:49 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA Corporation
2014-03-21 14:48 - 2011-07-21 17:38 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-03-21 14:48 - 2011-07-21 17:38 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-03-21 14:47 - 2014-03-21 14:47 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-21 14:35 - 2014-03-21 14:35 - 00001210 _____ () C:\Users\Stefan\Desktop\DriverMax.lnk
2014-03-21 14:35 - 2014-03-21 14:35 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Innovative Solutions
2014-03-21 14:34 - 2014-03-21 14:34 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-03-21 14:26 - 2012-10-05 04:52 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-03-21 14:26 - 2012-10-05 04:51 - 00000000 ____D () C:\Users\Stefan\SystemRequirementsLab
2014-03-21 14:08 - 2014-03-21 14:08 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Deployment
2014-03-21 14:08 - 2011-12-03 07:48 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Apps\2.0
2014-03-21 13:41 - 2014-03-21 13:41 - 00000000 ____D () C:\swsetup
2014-03-21 13:30 - 2014-03-21 13:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ICCWDT_01009.Wdf
2014-03-21 13:30 - 2011-05-31 05:33 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-21 13:04 - 2011-05-31 06:01 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-03-21 13:00 - 2014-03-21 12:44 - 00000408 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-03-21 12:55 - 2012-11-24 20:14 - 00001105 _____ () C:\Users\Stefan\Desktop\Sweet Home 3D.lnk
2014-03-21 12:55 - 2012-11-24 20:14 - 00000000 ____D () C:\Program Files (x86)\Sweet Home 3D
2014-03-21 12:53 - 2013-05-12 10:19 - 00001084 _____ () C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber.lnk
2014-03-21 12:53 - 2013-05-12 10:19 - 00001076 _____ () C:\Users\Stefan\Desktop\Viber.lnk
2014-03-21 12:53 - 2013-05-12 10:18 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Viber
2014-03-21 12:51 - 2014-03-21 12:43 - 33189024 _____ (Nero AG) C:\Users\Stefan\Downloads\Nero_DiscSpeed.exe
2014-03-21 12:47 - 2014-03-21 12:43 - 33746304 _____ (eTeks ) C:\Users\Stefan\Downloads\SweetHome3D-4-2-windows-oc.exe
2014-03-21 12:47 - 2014-03-20 15:31 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\DriverTurbo
2014-03-21 12:45 - 2014-03-21 12:44 - 01365248 _____ (Viber Media Inc) C:\Users\Stefan\Downloads\ViberSetup.exe
2014-03-21 12:44 - 2014-03-21 12:44 - 00003816 _____ () C:\Windows\System32\Tasks\DriverEasy Scheduled Scan
2014-03-21 12:44 - 2014-03-21 12:44 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Easeware
2014-03-21 12:44 - 2014-03-21 12:43 - 02987608 _____ (Easeware ) C:\Users\Stefan\Downloads\DriverEasy_Setup_4_6_4.exe
2014-03-21 12:36 - 2014-03-21 12:36 - 00000000 ____D () C:\Users\Stefan\AppData\Local\CrashRpt
2014-03-21 12:36 - 2014-03-21 12:35 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Softonic
2014-03-21 12:35 - 2014-03-21 12:35 - 00001072 _____ () C:\Users\Stefan\Desktop\Softonic.lnk
2014-03-21 12:35 - 2014-03-21 12:35 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Softonic
2014-03-21 12:22 - 2013-02-06 22:09 - 00000000 ____D () C:\ProgramData\IObit
2014-03-21 12:03 - 2014-03-21 12:03 - 00003166 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2014-03-20 15:39 - 2014-03-20 15:39 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-20 15:39 - 2014-03-20 15:39 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01022680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00245496 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00059088 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bScsiMSa.sys
2014-03-20 15:30 - 2014-03-20 15:30 - 00231952 _____ () C:\Users\Stefan\Downloads\DriverTurboSetup.exe
2014-03-20 05:55 - 2014-03-20 05:55 - 00002858 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Stefan)
2014-03-20 05:55 - 2014-01-27 20:53 - 00003216 _____ () C:\Windows\System32\Tasks\Driver Booster Scan
2014-03-20 05:55 - 2014-01-27 20:53 - 00003160 _____ () C:\Windows\System32\Tasks\Driver Booster Update
2014-03-20 05:51 - 2014-03-20 05:50 - 23669792 _____ (IObit ) C:\Users\Stefan\Downloads\driver_booster_setup.exe
2014-03-19 10:17 - 2014-03-19 10:17 - 00000000 ____D () C:\Users\Stefan\AppData\Local\{90DAA9A0-10C0-4110-A6C5-C7062E44AC12}
2014-03-19 08:52 - 2012-09-06 21:47 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\dvdcss
2014-03-15 14:34 - 2013-11-07 15:28 - 00002147 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-14 15:44 - 2013-10-18 11:17 - 00407040 ___SH () C:\Users\Stefan\Desktop\Thumbs.db
2014-03-14 07:54 - 2013-07-20 15:59 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-14 07:52 - 2011-11-19 17:19 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-14 07:30 - 2013-10-20 11:15 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 07:30 - 2013-10-20 11:15 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 09:02 - 2012-05-10 03:21 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 09:02 - 2012-05-10 03:21 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 09:02 - 2011-11-17 18:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-11 18:07 - 2014-03-11 18:07 - 00001755 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-11 18:07 - 2014-03-11 18:05 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-11 18:07 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files\iTunes
2014-03-11 18:07 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-11 18:05 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files\iPod
2014-03-11 17:55 - 2014-03-11 17:55 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-10 17:17 - 2014-01-27 10:53 - 00128288 _____ (IObit) C:\Windows\system32\IObitSmartDefragExtension.dll
2014-03-10 16:15 - 2014-03-10 16:15 - 00000000 ____D () C:\Users\Stefan\AppData\Local\{29706AB3-EE7D-4726-A811-BF1071B226C7}
2014-03-05 09:01 - 2014-03-05 09:00 - 00000000 ____D () C:\Users\Stefan\AppData\Local\{32878532-0746-453A-AAB9-21AC081D8203}
2014-03-04 10:35 - 2014-03-21 14:46 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-04 10:35 - 2014-03-21 14:46 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-04 10:35 - 2014-03-21 14:39 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00033736 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-03-04 10:35 - 2014-03-21 14:39 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-04 09:06 - 2014-03-21 14:47 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-03-04 09:06 - 2014-03-21 14:47 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin
2014-03-04 09:05 - 2014-03-21 14:47 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 01075032 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-03-04 09:05 - 2014-03-21 14:47 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-03-04 08:02 - 2013-08-29 19:58 - 00000000 ____D () C:\Program Files (x86)\Secure Speed Dial
2014-03-01 02:05 - 2014-03-13 07:14 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 01:17 - 2014-03-13 07:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 01:16 - 2014-03-13 07:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 00:58 - 2014-03-13 07:14 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 00:52 - 2014-03-13 07:14 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 00:51 - 2014-03-13 07:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 00:42 - 2014-03-13 07:14 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 00:40 - 2014-03-13 07:14 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 00:37 - 2014-03-13 07:14 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 00:33 - 2014-03-13 07:14 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 00:33 - 2014-03-13 07:14 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 00:32 - 2014-03-13 07:14 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 00:30 - 2014-03-13 07:14 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 00:23 - 2014-03-13 07:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 00:17 - 2014-03-13 07:14 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 00:11 - 2014-03-13 07:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 00:02 - 2014-03-13 07:14 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-28 23:54 - 2014-03-13 07:14 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-28 23:52 - 2014-03-13 07:14 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-28 23:51 - 2014-03-13 07:14 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-28 23:47 - 2014-03-13 07:14 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-28 23:43 - 2014-03-13 07:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-28 23:43 - 2014-03-13 07:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-28 23:42 - 2014-03-13 07:14 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-28 23:40 - 2014-03-13 07:14 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-28 23:38 - 2014-03-13 07:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-28 23:37 - 2014-03-13 07:14 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-28 23:35 - 2014-03-13 07:14 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-28 23:18 - 2014-03-13 07:14 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-28 23:16 - 2014-03-13 07:14 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-28 23:14 - 2014-03-13 07:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-28 23:10 - 2014-03-13 07:14 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-28 23:03 - 2014-03-13 07:14 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-28 23:00 - 2014-03-13 07:14 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-28 22:57 - 2014-03-13 07:14 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-28 22:38 - 2014-03-13 07:14 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-28 22:32 - 2014-03-13 07:14 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-28 22:27 - 2014-03-13 07:14 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-28 22:25 - 2014-03-13 07:14 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-28 22:25 - 2014-03-13 07:14 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 15:22 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
2014-02-27 08:44 - 2014-02-27 08:43 - 13443208 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x86.exe
2014-02-27 08:44 - 2013-06-14 14:48 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-02-27 08:44 - 2012-05-12 09:10 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-27 08:43 - 2014-02-27 08:42 - 13644792 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x64.exe
2014-02-25 17:51 - 2014-02-25 17:51 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-02-25 17:51 - 2014-02-25 17:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-02-25 16:56 - 2014-02-25 16:56 - 00002888 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-02-25 16:44 - 2014-02-25 16:38 - 41807400 _____ (IObit ) C:\Users\Stefan\Downloads\advanced-systemcare-setup.exe
2014-02-25 16:26 - 2012-05-12 09:10 - 01596516 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

Some content of TEMP:
====================
C:\Users\Stefan\AppData\Local\Temp\appshat_generic.exe
C:\Users\Stefan\AppData\Local\Temp\avgnt.exe
C:\Users\Stefan\AppData\Local\Temp\ProductKeyFinderSetup.exe
C:\Users\Stefan\AppData\Local\Temp\setup.exe
C:\Users\Stefan\AppData\Local\Temp\tu17p84.exe
C:\Users\Stefan\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Stefan\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\Stefan\AppData\Local\Temp\ytai_ytareg_setup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-21 20:34

==================== End Of Log ============================
--- --- ---
__________________
Alt 27.03.2014, 23:17   #4
90stefan
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Stefan at 2014-03-27 18:14:01
Running from C:\Users\Stefan\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

AccelerateTab (HKLM-x32\...\AccelerateTab_is1) (Version: 2.0 - AccelerateTab)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
ActiveX контрола на Windows Live Mesh за отдалечени връзки (HKLM-x32\...\{B3BA4D1C-23EF-4859-9C11-1B2CCB7FADBB}) (Version: 15.4.5722.2 - Microsoft Corporation)
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (HKLM-x32\...\{376D59B1-42D9-4FA2-B6CC-E346B6BE14F5}) (Version: 15.4.5722.2 - Microsoft Corporation)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.2090 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.7.0.2090 - Adobe Systems Incorporated) Hidden
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.2.1.650 - Adobe Systems Incorporated)
Adobe Community Help (x32 Version: 3.2.1 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Photoshop Elements 9 (HKLM-x32\...\Adobe Photoshop Elements 9) (Version: 9.0.3.0 - Adobe Systems Incorporated)
Adobe Photoshop Elements 9 (x32 Version: 9.0.3.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 9 (HKLM-x32\...\PremElem90) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 9 (x32 Version: 9.0.1 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)
Advanced SystemCare 7 (HKLM-x32\...\Advanced SystemCare 7_is1) (Version: 7.2.1 - IObit)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AutoUpdate (HKLM-x32\...\{18D10072035C4515918F7E37EAFAACFC}) (Version: 1.1 - )
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Backup Manager V3 (x32 Version: 3.0.0.90 - NTI Corporation) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 14.8.2.2 - Broadcom Corporation)
Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.2 - Broadcom Corporation)
Canon MP Navigator EX 1.0 (HKLM-x32\...\MP Navigator EX 1.0) (Version:  - )
Canon MP610 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP610_series) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation)
Control ActiveX del Windows Live Mesh per a connexions remotes (HKLM-x32\...\{76C064E2-BB99-4453-8FDA-42BC01AD0734}) (Version: 15.4.5722.2 - Microsoft Corporation)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (HKLM-x32\...\{260E3D78-94E6-47EC-8E29-46301572BB1E}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controle ActiveX do Windows Live Mesh para Conexões Remotas (HKLM-x32\...\{39B3184E-0BFB-40FA-ADDC-E7E2D535CDA9}) (Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1031 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1031 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4427.52 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.4427.52 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version:  - Microsoft)
Delta Chrome Toolbar (HKLM-x32\...\Delta Chrome Toolbar) (Version:  - Visual Tools) <==== ATTENTION
DivX Codec (HKLM-x32\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.6.1 - DivX, Inc.)
Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.3 - IObit)
DriverMax 7 (HKLM-x32\...\DMX5_is1) (Version: 7.28.0.206 - Innovative Solutions)
Elements 9 Organizer (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Elements STI Installer (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Elevated Installer (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
ETDWare PS/2-X64 8.0.7.0_WHQL (HKLM\...\Elantech) (Version: 8.0.7.0 - ELAN Microelectronic Corp.)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free Studio version 2014 (HKLM-x32\...\Free Studio_is1) (Version: 6.2.14.319 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Garmin Express (HKLM-x32\...\{e47a5c85-88a2-47d2-b380-fc2e763c2e6d}) (Version: 2.1.13 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
Garmin Update Service (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Drive (HKLM-x32\...\{E87022D3-C8C9-4C76-8E27-BC7F18F9B8FB}) (Version: 1.14.6059.644 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HDPlayer (HKLM-x32\...\1ClickDownload) (Version: 2.1 Build 26473 - HDPlayer)
HomeMedia (HKLM-x32\...\{AA4BF92B-2AAF-11DA-9D78-000129760D75}) (Version: 2.0.8520 - CyberLink Corporation)
HP Deskjet 1000 J110 series - Grundlegende Software für das Gerät (HKLM\...\{ECFFD23C-3111-4685-8118-E1F79644203F}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
HP Deskjet 1000 J110 series Hilfe (HKLM-x32\...\{DDDFCC77-7F9C-45E9-B38E-721BA599BA0C}) (Version: 140.0.65.65 - Hewlett Packard)
HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät (HKLM\...\{EF3293DE-FCAC-4742-91BF-AD0174143FC3}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3050 J610 series Hilfe (HKLM-x32\...\{F7632A9B-661E-4FD9-B1A4-3B86BC99847F}) (Version: 140.0.63.63 - Hewlett Packard)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
Hugin 2012.0.0 (HKLM-x32\...\Hugin) (Version: 2012.0.0 hg_a6e4184ad538 - The Hugin Development Team)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3006 - Packard Bell)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2372 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
Internet-TV für Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation)
IObit Apps Toolbar v8.9 (HKLM-x32\...\{EE68B04B-ABF4-4E83-87FF-42AF4C3F1D5B}) (Version: 8.9 - Spigot, Inc.) <==== ATTENTION
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.1.8.2434 - IObit)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
iWebar (HKLM-x32\...\iWebar) (Version: 1.34.2.13 - iWebar)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kontrola Windows Live Mesh ActiveX za daljinske veze (HKLM-x32\...\{19CBDE24-2761-49A5-816B-D2BA65D0CA8D}) (Version: 15.4.5722.2 - Microsoft Corporation)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (HKLM-x32\...\{CA227A9D-09BE-4BFB-9764-48FED2DA5454}) (Version: 15.4.5722.2 - Microsoft Corporation)
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.4 - Packard Bell)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Camera Codec Pack (HKLM\...\{3FF70821-58E6-44DA-B512-095F547F3F18}) (Version: 16.4.1734.1104 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Proofing Tools 2013 - Español (HKLM-x32\...\{90150000-001F-0C0A-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Nero 11 DiscSpeed (HKLM-x32\...\{B8B03F99-F600-4D96-ADBD-2F384240FB9C}) (Version: 11.0.00400 - Nero AG)
Nero Control Center 10 (x32 Version: 10.2.11100.1.1 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.18100.8.8 - Nero AG) Hidden
Nero Core Components 11 (x32 Version: 11.0.15401.1.15 - Nero AG) Hidden
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.2.10500.2.100 - Nero AG)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero DiscSpeed 11 (x32 Version: 7.0.10400.2.100 - Nero AG) Hidden
Nero DiscSpeed 11 Help (CHM) (x32 Version: 11.0.10000 - Nero AG) Hidden
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.12000.21.100 - Nero AG)
Nero Express 10 Help (CHM) (x32 Version: 10.5.10200 - Nero AG) Hidden
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.5.10300 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11600.14.100 - Nero AG)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
nero.prerequisites.msi (x32 Version: 11.0.20008 - Nero AG) Hidden
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
Office Password Recovery PRO v1.0 (remove only) (HKLM-x32\...\Password Solutions - Office Password Recovery PRO) (Version: 1.0 - Password Solutions)
OLYMPUS Master 2 (HKLM-x32\...\{0815D55A-5EFF-4E1B-8C04-7035E914D90D}) (Version: 1.0.10 - OLYMPUS IMAGING CORP.)
OLYMPUS muvee theaterPack (HKLM-x32\...\{EC047FA6-E83D-4326-9195-E7D306C5B9A2}) (Version: 1.0.7 - OLYMPUS IMAGING CORP.)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM-x32\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation)
Packard Bell MyBackup (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.90 - NTI Corporation)
Packard Bell Power Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3007 - Packard Bell)
Packard Bell Recovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3004 - Packard Bell)
Packard Bell Registration (HKLM-x32\...\Packard Bell Registration) (Version: 1.04.3501 - Packard Bell)
Packard Bell ScreenSaver (HKLM-x32\...\Packard Bell Screensaver) (Version: 1.1.0811.2010 - Packard Bell )
Packard Bell Social Networks (HKLM-x32\...\InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9}) (Version: 2.0.2913 - CyberLink Corp.)
Packard Bell Social Networks (x32 Version: 2.0.2913 - CyberLink Corp.) Hidden
Packard Bell Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3502 - Packard Bell)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7177 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.36.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.36.0 - Renesas Electronics Corporation) Hidden
ScummVM 1.5.0 (HKLM-x32\...\ScummVM_is1) (Version:  - The ScummVM Team)
Sense (HKLM-x32\...\Sense) (Version: 1.34.2.13 - Object Browser) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
Shopper-Pro (HKLM-x32\...\ShopperPro) (Version:  - )
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.13 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.13.104 - Skype Technologies S.A.)
Slick Savings (HKLM-x32\...\{3A787631-66A2-4634-B928-A37E73B58FB6}) (Version: 1.3 - Spigot, Inc.) <==== ATTENTION
Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.1 - IObit)
Softonic for Windows (HKCU\...\Softonic for Windows) (Version: 1.5.9 - Softonic International S.L.)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.0 - IObit)
Sweet Home 3D version 4.2 (HKLM-x32\...\Sweet Home 3D_is1) (Version:  - eTeks)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab for Intel (HKLM-x32\...\{1EBDF6D2-CEA0-484C-A23E-2DDAD7FD0DD0}) (Version: 4.5.22.0 - Husdawg, LLC)
The Game Of Life by Hasbro (HKLM-x32\...\The Game Of Life by Hasbro1.0) (Version: 1.0 - Adnan_Boy 2008)
TVCenter (HKLM\...\{E29B2B35-C365-4C9A-8C5C-224E3B9A9ED1}) (Version: 6.3.0.584 - PCTV Systems)
TweakNow PowerPack (HKLM-x32\...\TweakNow PowerPack_is1) (Version: 4.3.0 - TweakNow.com)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.0.82.0 - Intel)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Urruneko konexioetarako Windows Live Mesh ActiveX kontrola (HKLM-x32\...\{7BA6DF02-B094-45D7-A3C9-BE3684253922}) (Version: 15.4.5722.2 - Microsoft Corporation)
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (HKLM-x32\...\{241E7104-937A-4366-AD57-8FDDDB003939}) (Version: 15.4.5722.2 - Microsoft Corporation)
Viber (HKCU\...\Viber) (Version: 3.0.0.133634 - Viber Media Inc)
Video Web Camera (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.3501.00 - CyberLink Corp.)
Video Web Camera (x32 Version: 1.5.3501.00 - CyberLink Corp.) Hidden
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Welcome Center (HKLM-x32\...\Packard Bell Welcome Center) (Version: 1.02.3501 - Packard Bell)
Windows Live Argazki Galeria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (HKLM-x32\...\{09B7C7EB-3140-4B5E-842F-9C79A7137139}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (HKLM-x32\...\{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Product Key Finder Pro® 2.3 (HKLM-x32\...\Windows Product Key Finder Pro®_is1) (Version:  - )
WinRAR 4.11 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (HKLM-x32\...\{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}) (Version: 15.4.5722.2 - Microsoft Corporation)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (HKLM-x32\...\{9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}) (Version: 15.4.5722.2 - Microsoft Corporation)
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (HKLM-x32\...\{E18B30AA-6E2D-480C-B918-AF61009F4010}) (Version: 15.4.5722.2 - Microsoft Corporation)
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ตัวควบคุม ActiveX ใน Windows Live Mesh สำหรับการเชื่อมต่อระยะไกล (ไทย) (HKLM-x32\...\{A2EDAEEB-C981-46D5-8163-CF8F5F640EEE}) (Version: 15.4.5722.2 - Microsoft Corporation)
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (HKLM-x32\...\{622DE1BE-9EDE-49D3-B349-29D64760342A}) (Version: 15.4.5722.2 - Microsoft Corporation)

==================== Restore Points  =========================

23-03-2014 18:36:59 Installed Microsoft Office Home and Student 2010
23-03-2014 18:46:14 Configured Microsoft Office Home and Student 2010
23-03-2014 22:43:38 Windows Update
24-03-2014 00:32:06 Windows Update
24-03-2014 12:53:17 Windows Update
25-03-2014 19:59:41 Windows Update
25-03-2014 21:34:32 DMX_DriverMax Driver Installation
25-03-2014 21:36:12 DMX_DriverMax Driver Installation
25-03-2014 21:37:10 Gerätetreiber-Paketinstallation: Intel Corporation Grafikkarte
25-03-2014 21:51:19 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2009-07-13 22:34 - 2009-06-10 17:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {07A746F4-A1CE-4955-A5AE-BF68875215D9} - System32\Tasks\Sense-firefoxinstaller => C:\Program Files (x86)\Sense\Sense-firefoxinstaller.exe [2014-03-24] (Object Browser) <==== ATTENTION
Task: {0B1958E9-C26C-4F31-B1B3-FC0CC7568085} - System32\Tasks\Sense-chromeinstaller => C:\Program Files (x86)\Sense\Sense-chromeinstaller.exe [2014-03-24] (Object Browser) <==== ATTENTION
Task: {0C650EB0-61F2-47E3-8B06-4F10B3F971FF} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2014-03-13] (IObit)
Task: {10CAB24F-1F26-407C-B94D-4A91A3F4D4D7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-15] (Google Inc.)
Task: {176B44EB-9069-4694-B652-DCA676444C61} - System32\Tasks\iWebar-firefoxinstaller => C:\Program Files (x86)\iWebar\iWebar-firefoxinstaller.exe [2014-03-23] (iWebar)
Task: {1901EDAD-1FBA-4338-9A40-ABE732A8F104} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1A8DB1B2-EE78-4984-A6D2-1FA225577093} - System32\Tasks\Driver Booster SkipUAC (Stefan) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-03-14] (IObit)
Task: {28E34266-838F-4F2A-8E4B-03B9256582DB} - System32\Tasks\Sense-codedownloader => C:\Program Files (x86)\Sense\Sense-codedownloader.exe [2014-03-24] (Object Browser) <==== ATTENTION
Task: {29B4937A-63D5-489A-85F3-A2C4CDC7CB90} - System32\Tasks\ASC7_SkipUac_Stefan => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2014-03-10] (IObit)
Task: {2E206D55-094E-4A7D-943C-5EA8C6A1A882} - System32\Tasks\Sense-enabler => C:\Program Files (x86)\Sense\Sense-enabler.exe [2014-03-24] (Object Browser) <==== ATTENTION
Task: {42091BFC-F807-4212-BE75-F2D4C312365F} - System32\Tasks\ShopperPro => C:\Program Files (x86)\ShopperPro\ShopperPro.exe [2014-03-17] (Goobzo LTD)
Task: {4C657877-0D70-44A6-ABF7-A93E5A0F854F} - System32\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-15] (Google Inc.)
Task: {6599CE05-5FF9-47C6-9990-BBC477F7039B} - System32\Tasks\SmartDefrag3_Update => C:\Program Files (x86)\IObit\Smart Defrag 3\AutoUpdate.exe [2014-03-10] (IObit)
Task: {6B81ABA8-283D-4263-BBCC-1857D493BE1F} - System32\Tasks\ShopperProJSUpd => C:\Program Files (x86)\ShopperPro\updater.exe [2014-03-17] (Goobzo)
Task: {73A3E841-0A6C-47F3-AA2F-4ACF11B10A12} - System32\Tasks\iWebar-codedownloader => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe [2014-03-23] (iWebar)
Task: {83156F4A-836D-4AC7-AC4F-AEE6D46FF543} - System32\Tasks\iWebar-enabler => C:\Program Files (x86)\iWebar\iWebar-enabler.exe [2014-03-23] (iWebar) <==== ATTENTION
Task: {96B1391C-2A1D-41DD-A7A3-4C6415BAE8C5} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9AD09D92-CB95-4588-89EA-AAF31D2614A0} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe <==== ATTENTION
Task: {A536100D-E6FD-482B-87E6-A0BBA3308ED3} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: {AC492AB5-7C00-4ADD-9211-AA859AC4DB4C} - System32\Tasks\Sense-updater => C:\Program Files (x86)\Sense\Sense-updater.exe [2014-03-24] (Object Browser) <==== ATTENTION
Task: {B74B392F-1749-465B-849A-E7EA8AA90C9D} - System32\Tasks\iWebar-chromeinstaller => C:\Program Files (x86)\iWebar\iWebar-chromeinstaller.exe [2014-03-23] (iWebar)
Task: {BD1A04DA-FE5F-4809-BC3F-44013F7B8863} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {CD173C1D-CAB4-4E99-8B4A-56ECAEAD7DC3} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-02-13] (IObit)
Task: {D6FB96A5-71F8-45B5-9A8A-71DE9C4366A3} - System32\Tasks\AdobeAAMUpdater-1.0-Stefan-PC-Stefan => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-28] (Adobe Systems Incorporated)
Task: {E81D996E-0585-4EA9-B966-3D79E4A523ED} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe
Task: {F20C9098-41B9-49EC-9793-B5C74B9DB364} - System32\Tasks\iWebar-updater => C:\Program Files (x86)\iWebar\iWebar-updater.exe [2014-03-23] (iWebar)
Task: {F3A65D36-D516-4F71-AC78-A79445286190} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2014-03-12] (IObit)
Task: {F8494C16-225C-4B09-BE92-EFD742052583} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\iWebar-chromeinstaller.job => C:\Program Files (x86)\iWebar\iWebar-chromeinstaller.exe
Task: C:\Windows\Tasks\iWebar-codedownloader.job => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe
Task: C:\Windows\Tasks\iWebar-enabler.job => C:\Program Files (x86)\iWebar\iWebar-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\iWebar-firefoxinstaller.job => C:\Program Files (x86)\iWebar\iWebar-firefoxinstaller.exe
Task: C:\Windows\Tasks\iWebar-updater.job => C:\Program Files (x86)\iWebar\iWebar-updater.exe
Task: C:\Windows\Tasks\Sense-chromeinstaller.job => C:\Program Files (x86)\Sense\Sense-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-codedownloader.job => C:\Program Files (x86)\Sense\Sense-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-enabler.job => C:\Program Files (x86)\Sense\Sense-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-firefoxinstaller.job => C:\Program Files (x86)\Sense\Sense-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-updater.job => C:\Program Files (x86)\Sense\Sense-updater.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-03-21 14:39 - 2014-03-04 10:35 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-11-05 18:51 - 2014-02-13 16:44 - 01214240 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe
2013-11-05 18:51 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll
2014-02-06 13:28 - 2013-12-09 10:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 12:17 - 2014-01-20 12:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 12:16 - 2014-01-20 12:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00014280 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2011-03-09 13:13 - 2011-03-09 13:13 - 00465640 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\sqlite3.dll
2011-03-09 13:12 - 2011-03-09 13:12 - 01081664 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\ACE.dll
2011-03-09 13:12 - 2011-03-09 13:12 - 00125760 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\MailConverter32.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2012-06-16 07:04 - 2011-10-27 21:27 - 00623912 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2011-10-28 03:27 - 2011-10-28 03:27 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll
2013-11-05 18:51 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madExcept_.bpl
2013-11-05 18:51 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madBasic_.bpl
2013-11-05 18:51 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madDisAsm_.bpl
2014-02-13 18:58 - 2014-02-13 18:58 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\aa739380ca2b2fc7366d464d2f2301ac\IsdiInterop.ni.dll
2011-05-31 05:33 - 2010-09-13 21:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-11-05 18:51 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll
2013-11-05 18:51 - 2013-12-02 19:06 - 01281312 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\Scan.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:56E2E879

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: Adobe ARM => c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe
MSCONFIG\startupreg: ApplePhotoStreams => c:\program files (x86)\common files\apple\internet services\applephotostreams.exe
MSCONFIG\startupreg: ETDCtrl => %programfiles%\elantech\etdctrl.exe
MSCONFIG\startupreg: GarminExpressTrayApp => c:\program files (x86)\garmin\express tray\expresstray.exe
MSCONFIG\startupreg: GoogleDriveSync => "c:\program files (x86)\google\drive\googledrivesync.exe" /autostart
MSCONFIG\startupreg: HotKeysCmds => c:\windows\system32\hkcmd.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: IAStorIcon => c:\program files (x86)\intel\intel(r) rapid storage technology\iastoricon.exe
MSCONFIG\startupreg: IgfxTray => c:\windows\system32\igfxtray.exe
MSCONFIG\startupreg: iTunesHelper => c:\program files (x86)\itunes\ituneshelper.exe
MSCONFIG\startupreg: LManager => c:\program files (x86)\launch manager\lmanager.exe
MSCONFIG\startupreg: OM2_Monitor => "c:\program files (x86)\olympus\olympus master 2\firststart.exe" /om
MSCONFIG\startupreg: Persistence => c:\windows\system32\igfxpers.exe
MSCONFIG\startupreg: Power Management => c:\program files\packard bell\packard bell power management\epowertray.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RemoTerm.exe => c:\program files (x86)\common files\pctv systems\remoterm\remoterm.exe
MSCONFIG\startupreg: RtHDVCpl => "c:\program files\realtek\audio\hda\ravcpl64.exe" -s
MSCONFIG\startupreg: SearchSettings => c:\program files (x86)\common files\spigot\search settings\searchsettings.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/27/2014 02:31:07 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/26/2014 02:43:07 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (03/26/2014 11:28:10 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (03/26/2014 09:00:36 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2014 07:53:02 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (03/25/2014 07:05:23 PM) (Source: Microsoft Security Client Setup) (User: Stefan-PC)
Description: HRESULT:0x8004FF05
Description:Can't complete the Setup Wizard. One or more command line arguments are invalid. Error code:0x8004FF05.

Error: (03/25/2014 06:24:21 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ChipUtil.exe, Version: 0.6.0.0, Zeitstempel: 0x4d4c5fa1
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000003
ID des fehlerhaften Prozesses: 0x1b54
Startzeit der fehlerhaften Anwendung: 0xChipUtil.exe0
Pfad der fehlerhaften Anwendung: ChipUtil.exe1
Pfad des fehlerhaften Moduls: ChipUtil.exe2
Berichtskennung: ChipUtil.exe3

Error: (03/25/2014 05:57:08 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2014 05:52:11 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (03/25/2014 05:44:54 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (03/27/2014 02:30:44 PM) (Source: Service Control Manager) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/26/2014 09:00:35 AM) (Source: Service Control Manager) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/25/2014 06:48:21 PM) (Source: Service Control Manager) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.

Error: (03/25/2014 06:44:10 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Advanced SystemCare Service 7" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/25/2014 06:23:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PCI Utility" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%577

Error: (03/25/2014 06:23:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PCI Utility" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/25/2014 06:23:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PCI Utility" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%577

Error: (03/25/2014 06:23:35 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PCI Utility" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%577

Error: (03/25/2014 05:56:53 PM) (Source: Service Control Manager) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/25/2014 05:44:59 PM) (Source: Service Control Manager) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (03/27/2014 02:31:07 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/26/2014 02:43:07 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (03/26/2014 11:28:10 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files (x86)\innovative solutions\drivermax\DPInst\ia64\dpinst.exe

Error: (03/26/2014 09:00:36 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2014 07:53:02 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (03/25/2014 07:05:23 PM) (Source: Microsoft Security Client Setup)(User: Stefan-PC)
Description: HRESULT:0x8004FF05
Description:Can't complete the Setup Wizard. One or more command line arguments are invalid. Error code:0x8004FF05.

Error: (03/25/2014 06:24:21 PM) (Source: Application Error)(User: )
Description: ChipUtil.exe0.6.0.04d4c5fa1unknown0.0.0.000000000c0000005000000031b5401cf4878e93e465bC:\Users\Stefan\Desktop\ChipUtil.exeunknown35a5d89c-b46c-11e3-bd12-b870f4aef64e

Error: (03/25/2014 05:57:08 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2014 05:52:11 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (03/25/2014 05:44:54 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2014-03-25 18:23:56.873
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\Desktop\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:56.793
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\Desktop\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:56.643
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:56.556
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:35.376
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:35.253
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:43:36.386
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:43:36.199
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:38:49.656
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:38:49.563
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 35%
Total physical RAM: 5995.86 MB
Available physical RAM: 3876.75 MB
Total Pagefile: 11989.9 MB
Available Pagefile: 9168.23 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:911.41 GB) (Free:534.69 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E4C2EB8E)

Partition: GPT Partition Type.

==================== End Of Log ============================

Alt 27.03.2014, 23:51   #5
Bootsektor
Ruhe in Frieden
† 2019
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


Hallo 90stefan,

von der Verwendung von Programmen von IOBit möchte ich dir persönlich abraten, meist taugen diese nicht viel und installieren, so wie auch bei dir, noch weitere fragwürdige Programme, bzw. Toolbars mit.

Schritt 1
Ich sehe in deinem Log, dass du zwei Antivirenscanner auf deinem Rechner betreibst. Das ist ein Risiko. Diese können sich gegenseitig in ihrer Arbeit behindern. Bitte deinstalliere einen von beiden.

Wie läuft der Rechner nach folgenden Schritten?
Schritt 2
Bitte deinstalliere folgende Programme (falls vorhanden) :

Delta Chrome Toolbar
IObit Apps Toolbar v8.9
iWebar
McAfee Security Scan Plus
Sense
Shopper-Pro
Slick Savings
Softonic for Windows
Surfing Protection

Dazu gehe auf:
den Windowsbutton in der Taskleiste --> Systemsteuerung --> Programme (Unterpunkt Programme deinstallieren) --> Programm auswählen --> entfernen

Schritt 3
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Schritt 4
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop.
  • Starte das Tool mit Doppelklick. Vista und 7 Nutzer bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Das Tool wird sich öffnen und mit dem Scan beginnen.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 5
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad.
    Windows Vista und höher: mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Sollte die Benutzeroberfläche noch in Englisch sein, klicke auf Settings und wähle bei Language German aus.
  • Klicke auf Armaturenbrett und auf Jetzt aktualisieren, um die Datenbank zu updaten.
  • Klicke im Anschluss auf Suchlauf, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf jetzt starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Aktionen anwenden.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Suchlauf-Protokoll aus und klicke auf Ansicht. Wähle Exportieren auf Textdatei (.txt) und speichere die Datei als mbam.txt auf dem Desktop ab.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Schritt 6
Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Schritt 7
Starte noch einmal FRST.
  • Setze den Haken bei addition.txt und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
  • Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.
Alt 28.03.2014, 08:25   #6
90stefan
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


nummer 1:
Code:
ATTFilter
# AdwCleaner v3.022 - Bericht erstellt am 27/03/2014 um 19:07:28
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Stefan - STEFAN-PC
# Gestartet von : C:\Users\Stefan\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\DSearchLink
Ordner Gelöscht : C:\ProgramData\ShopperPro
Ordner Gelöscht : C:\Program Files (x86)\diamondata
Ordner Gelöscht : C:\Program Files (x86)\IminentToolbar
Ordner Gelöscht : C:\Program Files (x86)\Mobogenie
Ordner Gelöscht : C:\Program Files (x86)\Secure Speed Dial
Ordner Gelöscht : C:\Program Files (x86)\SimilarSites
Ordner Gelöscht : C:\Program Files (x86)\Common Files\Spigot
Ordner Gelöscht : C:\Users\Stefan\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Stefan\AppData\Local\Slick Savings
Ordner Gelöscht : C:\Users\Stefan\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Stefan\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\Stefan\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Stefan\AppData\Roaming\goforfiles
Ordner Gelöscht : C:\Users\Stefan\AppData\Roaming\SimilarSites
Ordner Gelöscht : C:\Users\Stefan\Documents\Mobogenie
Ordner Gelöscht : C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}
Ordner Gelöscht : C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\speeddial@instair.net
Ordner Gelöscht : C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Ordner Gelöscht : C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
Datei Gelöscht : C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\searchplugins\iminent.xml
Datei Gelöscht : C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\user.js
Datei Gelöscht : C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Datei Gelöscht : C:\Windows\System32\Tasks\Driver Booster Update
Datei Gelöscht : C:\Windows\System32\Tasks\GoforFilesUpdate

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0035510.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0035510.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0048292.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0048292.Sandbox
Schlüssel Gelöscht : HKCU\Software\5c08b8ab034b817
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{48A789BF-F6D6-4930-9C8B-77855A63EDE1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{48A789BF-F6D6-4930-9C8B-77855A63EDE1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{48A789BF-F6D6-4930-9C8B-77855A63EDE1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{48A789BF-F6D6-4930-9C8B-77855A63EDE1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\GoforFiles
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Search Settings
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\GoforFiles
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.id", "76ec48df0000000000007aa3c4ee6690");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15969");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.622:27:01");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119293&tt=160913_m1&tsp=5012");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
Zeile gelöscht : user_pref("extensions.iminent.admin", false);
Zeile gelöscht : user_pref("extensions.iminent.aflt", "orgnl");
Zeile gelöscht : user_pref("extensions.iminent.appId", "{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}");
Zeile gelöscht : user_pref("extensions.iminent.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.iminent.dfltLng", "");
Zeile gelöscht : user_pref("extensions.iminent.excTlbr", false);
Zeile gelöscht : user_pref("extensions.iminent.ffxUnstlRst", false);
Zeile gelöscht : user_pref("extensions.iminent.id", "76ec48df0000000000007aa3c4ee6690");
Zeile gelöscht : user_pref("extensions.iminent.instlDay", "16037");
Zeile gelöscht : user_pref("extensions.iminent.instlRef", "");
Zeile gelöscht : user_pref("extensions.iminent.newTab", false);
Zeile gelöscht : user_pref("extensions.iminent.prdct", "iminent");
Zeile gelöscht : user_pref("extensions.iminent.prtnrId", "iminent");
Zeile gelöscht : user_pref("extensions.iminent.rvrt", "false");
Zeile gelöscht : user_pref("extensions.iminent.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.iminent.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.iminent.tlbrSrchUrl", "hxxp://search.iminent.com/?ref=toolbarm#q=");
Zeile gelöscht : user_pref("extensions.iminent.vrsn", "1.8.26.8");
Zeile gelöscht : user_pref("extensions.iminent.vrsnTs", "1.8.26.822:12:00");
Zeile gelöscht : user_pref("extensions.iminent.vrsni", "1.8.26.8");
Zeile gelöscht : user_pref("extensions.mywebsearch.prevDefaultEngine", "Yahoo");
Zeile gelöscht : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Zeile gelöscht : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://de.search.yahoo.com/search?fr=mcafee&p=");
Zeile gelöscht : user_pref("extensions.mywebsearch.prevSelectedEngine", "Google");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=307146B5-6CD6-42B5-9ED4-D71084A8E21A&n=77fc6c61&p2=^AF4^xdm006^YY^py&si=CKKS3eWCgLYCFQ7znAod[...]
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.hp.enabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.hp.user.defined", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.initialized", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.installation.contextKey", "");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.installation.installDate", "2013031521");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.installation.partnerId", "^AF4^xdm006^YY^py");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.installation.partnerSubId", "CKKS3eWCgLYCFQ7znAodgRYA5w");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.installation.success", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.installation.toolbarId", "307146B5-6CD6-42B5-9ED4-D71084A8E21A");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.lastActivePing", "1363998102095");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.options.defaultSearch", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.options.homePageEnabled", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.options.keywordEnabled", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.options.tabEnabled", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._63Members_.weather.location", "10001");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark.lastInstalled", "aplusgamer@mindspark.com");
Zeile gelöscht : user_pref("iminent.LayoutId", "1");
Zeile gelöscht : user_pref("iminent.adapters", "{\"iminent\":{\"CountryCode\":\"PY\",\"NoAds\":false,\"Status\":1,\"expireTime\":\"1385601314792259200\"}}");
Zeile gelöscht : user_pref("iminent.enabledAds", "false");
Zeile gelöscht : user_pref("iminent.version", "7.48.1.1");
Zeile gelöscht : user_pref("iminent.versioning", "{\"CurrentVersion\":\"7.48.1.1\",\"InstallEventCTime\":1385601143882,\"InstallEvent\":\"True\"}");

-\\ Google Chrome v33.0.1750.154

[ Datei : C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [15075 octets] - [27/03/2014 19:06:40]
AdwCleaner[S0].txt - [14653 octets] - [27/03/2014 19:07:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14714 octets] ##########
schritt 2
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Home Premium x64
Ran by Stefan on 27.03.2014 at 19:14:58,30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2714067933-2837961611-1328175291-1001\Software\sweetim



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\Program Files (x86)\secretsauce"
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{0081C0BD-7A1C-43E0-89B0-9397373A019D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{01AECDB4-5D15-4D4B-A908-38A6702C1DB8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{020808B7-0CC6-4052-982A-1093B5BCABC5}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{02084CE6-A285-4898-B551-3ACA0E632351}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{0214BE5C-4B90-4955-AACE-ACBF4F17B064}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{04EAE3B8-7A09-4A90-84E8-84314E87AD67}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{05931855-CDB9-4714-978C-22E2B0F99349}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{066C0F6B-8482-4CB4-BD1E-81050B62D209}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{08E42C21-4A83-40E4-BA77-FE25320D2918}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{094F6CE9-4B79-4C23-9313-BD343C857703}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{095AA06A-C29C-4B61-94E8-FFF170F2839B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{09AF7EE5-6A4B-4F3A-9D83-9D7D80B1B49E}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{09D147C3-E8E8-48B6-9FA4-7AA939DE9284}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{0A422F6D-17B1-4F1E-B61B-E01E99C40398}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{0A6456A8-6EE8-4463-B059-2C32CD67881C}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{0AA9DCFC-A8C7-4CAC-B772-AFE535A41372}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{0B56EDEA-71F4-4BA9-B11F-6F6E63BE35E7}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{0BFF9482-5CAF-4FFD-87AF-E08B466868F3}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{0CBF5630-2D0E-4AC4-AD3C-95B100905A84}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{0D147B15-581A-45C9-AF08-BD807D147E9F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{0EF9DAF2-99D0-4551-BEC6-FA79A0992362}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{0F02183D-08D2-409B-A3AD-DC61C8B2FF92}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{1023C0A3-A5C6-4C18-A7FB-2DBF10AC71D4}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{10934EAA-573A-4035-AFB5-64280ED74B50}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{10B45CBA-3DAA-428D-B55F-037625B7E67B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{11EFE4C3-3F3F-4667-955F-4194F36BE1AB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{126D0F06-194D-4843-B98B-77C990DAEB26}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{137FD54A-F35B-46BB-9F71-93B963A117EE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{154BDD77-C8A7-442E-AEEB-2F01E4E13ABB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{15B8E0C5-5C4D-4375-A5E9-B3E39325AB92}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{15C9BCC1-CD2D-4768-871F-B43F53EB3A26}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{163C558D-E2D3-4A41-B877-B1DB46247374}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{1745BECB-3B58-4A67-B31F-FDE5895FA596}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{175E1BB1-ADC5-4BA5-82A8-5C09103D3832}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{18CF0AA5-0B1C-4FA4-B471-4B05E56BF94C}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{19565D75-DFE6-4DF3-8D97-BD0515841138}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{195ABA52-1428-48EA-BF25-85B7AF7199EE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{19AF7F38-75EC-40E7-90F9-D338CD68C3AD}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{1A59EB43-4F27-43FC-81EC-7C7DAA1CA836}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{1C21ECC8-8036-4112-9E09-B904BE9ACA41}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{1F5BD497-7AD4-4A66-98C2-6E18D9CD91BE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{20179F5C-0F98-47AE-88F5-A848E20B032E}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{20F798BF-E1B2-4DDD-ACBC-E6EB9E62F55D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{217EB038-4D10-4351-81DB-6CF6945A01A5}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{21D94933-7B40-4DD8-A765-288EF831B111}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2222ECA5-DF78-4263-8DC3-79B94AAFE99B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{23BB26F3-A54F-4840-88A1-96902AD0D99A}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2552F057-736A-4D12-ADAF-46A1570FEE2D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2586544C-568E-4F3A-A808-E787E2F05F14}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{25DF44F3-969E-4B2A-A0E7-EFD05C0E80C6}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{269D8A82-A4C5-4FD5-A22A-0BE05C7C87A8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2782B355-11AF-4510-A383-59AF2DA22E2D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{27D3E8EB-0F3C-453A-A2B3-4F95E1E7B366}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{289B7A48-38C7-4E4D-A331-E44945DCBF84}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2937DAF7-6035-4880-83D2-33458824BB6B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{29706AB3-EE7D-4726-A811-BF1071B226C7}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2A5434C7-E7F2-4750-BBA3-F9632FEEF1A8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2BE00919-7F9B-42A4-8BD5-9BC084AAAF33}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2C3FE3F8-E03B-4524-8759-FDFA918C1AAA}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2D28DBD7-BF0C-439F-AEE2-44D9EAC94AE8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2DC0FFBF-B5A9-4520-9F9A-7C3974E37782}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2DE1B556-3A10-41F5-93B1-4F1B44361FC8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2F1E1909-249C-4F05-945A-04D8378C3635}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2F280E79-8B1A-46F1-8EC0-5E652D7CF481}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2FB1B836-EC8C-4F02-9522-D51280F8031D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{2FF1DA8C-8356-4D7C-BE00-0AFF1D705F97}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{32339567-1BA8-41EC-BCB1-E43602513F17}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{3242E1BC-668B-4048-AEF5-718D8799B936}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{32701FF3-577D-4C8B-811D-C1292D4E3BFB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{32878532-0746-453A-AAB9-21AC081D8203}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{3309B248-74D7-40A9-A1B0-B83AE5F60D0B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{34572EFC-8137-4B7B-92E8-D30C0471EDA4}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{34E34E6B-615B-468D-BA2E-CE48790C175F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{35214179-6AEA-4AE3-BC08-B595F9A7FB90}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{36BCC138-4D2E-4951-A2DE-247274DC22FC}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{3791DCA0-493D-43CC-BCD8-4B3052C3485C}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{391DE173-D55B-4E9C-838B-1390AE2812DD}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{39241854-55E3-4466-AD06-CDFC92A52472}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{3B14F8C3-B11F-40FF-A616-6EEE50C9CC17}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{3CC6E3A5-9589-4D76-98C9-9DAFD37FDC0D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{3DD631D9-2D8E-4058-B5FB-D5D16681A483}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{3E603611-4B15-404A-B9CD-3A00B3A0CBAF}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{3FD37B02-274C-4F21-A6B5-D8A216433098}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{40AFB905-CB64-4B2F-92B7-8D016E43040F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{414AA9A9-159D-4D3A-9064-A0631D60C50B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{41A547CA-F93F-4FAA-B932-37E49CFD8E92}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{41BD8518-D10E-4EB2-976B-284B736EA68C}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{43916553-C08A-48FE-8994-7C32788604B4}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{43ABDF72-45C2-4C49-B570-A4ED9265A40F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{43E91046-D485-4714-953C-3785BAADC99D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{44A147F9-8D73-4828-97BC-3C46CCEE4156}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{44FCFA59-B900-45A5-A3BD-B1B4DB2891C8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{46BB07F0-2003-4011-921F-24CC6240F232}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{48C979A8-00A0-4DE6-9F50-42B268DEBFEF}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{493BF959-A9A9-41DE-9B3A-AA6CBC62A7B5}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{4A83EDB9-801D-4262-A74F-E0A4E4C750C0}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{4AACFB5E-299D-4E58-B4DA-F17F1255E713}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{4B4388D3-1ABF-4629-9FDC-1486E94E19B1}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{4C9403BC-CDB6-42B3-9DA1-C064128FFA7F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{4DC9BC7F-3269-435E-8DC4-DFBCE1583B8C}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{4DDA3F4B-7E5E-4557-A7C0-50A1A3954DF2}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{4E8BDF94-0F7D-494F-B5D1-6AA4AABA1C14}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{50A45337-9911-426B-B364-AB5729DE8571}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{50EE5263-4919-428B-9E52-0ED675E25432}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{52EDB481-2221-4B29-9645-E95549D2464E}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{531ED93B-8D44-4DD0-AE99-625A68916DF1}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{537AD9A3-361B-4340-BB66-0F745AA6672D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{551A3CBC-FBB6-4A28-8058-A28621861602}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{55C55E4C-3DAA-4990-BB84-C990B207C732}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{576459B3-D239-4771-873B-5DC1E5E6CF29}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{598948EF-2217-4E2A-9B00-19AC089B18A3}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5A0C3670-6A75-437B-96BA-7DA80D1BD610}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5A74889B-7D7D-468F-A54E-4CD2B729156A}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5B9B36AF-2DE2-4504-9139-05CEB4EFC541}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5BAA7297-A24E-4D33-ABCC-548B9E283E96}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5C175A25-3FDB-4C63-914B-7FEF24257666}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5D887FB2-7DAD-41A3-8F2C-D5FC7508F264}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5DCA753B-8DC1-41F9-828E-69310F383AFF}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5DCECD05-A04C-4E14-8E8F-92F932775D04}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5E53CF23-3B7A-4A48-B259-EDF36451C801}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5F34E739-DA61-4629-9A26-569A2020FB66}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5FECE8CC-53A9-4B16-B45D-3FC793D6D903}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{5FFA29C0-4405-4ADF-AF50-265481B9E587}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{61749A64-386E-4E3F-A40D-1927D1BC8ED0}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{61D3146F-9C84-4CF4-97AE-300149C59AE9}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{620EEE8E-6F73-476C-8641-736A1C63E64B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{62928608-8498-4CCE-A10A-C88C5FAF475A}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{62A91903-9AA3-41AC-AC58-D754F36337EB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{64023F07-B149-4E52-8AD6-6C06FF46F9F8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{643F12BA-C9EB-4DE6-A7D5-D2591CFED3D5}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{656CF18A-4C09-4BB2-9002-9BDD982A5ED3}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6630880D-3F03-42D8-90C9-8716D57DBC5C}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{668C7790-D198-4B32-9FCB-C1413A3000B8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{67691F1C-9D89-4985-9CB3-ABC306D2176B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{67BB3B18-260F-44F9-AF69-8DBCB00CD34A}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{67F2CC29-2D35-448F-87CB-51CA2EA80A00}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{685BF15D-8FE5-49A9-AFDD-66C9CB3DB8BE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{695C5BAE-9F3E-4335-8055-DDB64C366D6E}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6A02D235-F01F-415D-A513-5EBFF217E0E1}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6A4086FA-B13B-4F9D-B2CE-BA84F93EABAD}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6A8DE110-1D8C-4D9D-A5A8-0AEB028AB418}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6ACCA183-27A5-4E01-A175-93994F0C1E92}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6AE5448D-CF88-4A90-B44C-99728AB5159B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6AE994C1-2686-4DA6-99AC-E293920AAD18}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6C30EF36-B39F-4BEB-9F90-17CEC78864F9}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6D42F806-0FF7-4F20-8BF6-84336D99C01D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6D4B7057-251F-48D5-B3AE-38502CB21598}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6E1B56F6-9544-4280-A13F-A11B02839822}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6E4AFAE3-224E-49E8-BF58-CA02E616431E}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{6F94D2B5-78C8-4A0D-B059-C3FBA3157B13}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{70418AA5-D74B-4E33-B8B2-2963FD07C8C3}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{72119EF6-98F7-42BA-92D6-4A95D1354EF3}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{72460896-608F-41C1-B26C-5A5542035CB0}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{7253F046-3DC1-4FEE-9851-8F816B022228}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{72BE4667-F5B1-47A2-A50C-79B16AA63F2B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{73D1751D-CFD0-427C-8F99-AC55B664B26F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{74336255-7245-4E42-B035-CE64DEC9821E}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{74E55D0A-EFD5-4BFF-B8DF-96436F620E1F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{7593CDEC-D866-4A86-88F3-D03B0ED3C729}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{75A88DF4-BA40-4286-A62A-8A798559712D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{7630E53B-6F96-4231-B91B-47DDB116B733}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{763DA04B-7E0F-4AA0-8361-51E2FC4E117D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{77777413-6844-4CB4-B522-5EA18CD74899}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{77AD7681-5544-4A89-8E12-DA23917ABE69}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{781AB8B5-FEF4-4122-9478-5746B3A7D213}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{793B71E1-8586-4A11-B8CA-CD93E81921A3}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{7B49C11C-B454-402E-AB01-4B45276050FE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{7B75EBA2-A472-4579-A39F-8957B80B24BD}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{7C44D115-79E6-4E2F-92EF-438D98B6AC09}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{7C72163C-6874-4E75-B593-8E11DAD00A6E}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{7D05C218-3927-4F13-A4D4-ADFE5691E10D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{7F395D4A-4D74-444C-8C6C-F806C7565EC9}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{810221E7-09FC-480E-8968-540407764966}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{81495923-54D9-4B5B-AFAD-34FFBDABE49C}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{81A4CECD-75A5-4322-9E01-4F7FCF3C22B1}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{81B319C0-F343-4431-8F54-0FBD406A7A95}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{8313591A-E5A9-4C55-8767-44F430025625}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{847B6A16-34F9-4EBC-8BCB-4D9A40063BF1}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{866BE84B-6CB7-4933-9B24-507E743B7F98}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{86878027-5083-491A-83DE-3101F923B148}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{868BB0A5-797C-4A85-AD7B-A6AFA8F5CD0F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{86C1F343-2F6A-4BB0-9806-2C7B2B00708E}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{86D6C670-98DF-4EE3-A23D-FD59E5E4F847}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{88057C6B-A404-4C45-BA41-F52CBE0E2EC5}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{88E1E224-9E9A-439B-9281-22314805C449}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{891B3EE3-B766-481B-8014-0291A2276B92}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{89298AA3-F52B-4379-A585-F78B4E0DF6CF}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{8A0F42F9-B5F4-4080-8F9D-BC40A8DD4D06}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{8A1AD92F-9B81-4C37-B810-AC5A3DF5E6D4}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{8A5A078E-ECA7-439E-B07B-8B9045EF75AC}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{8B7534DC-3904-4411-B1F0-947728AA31A0}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{8BA6CFD6-2F80-46AE-81C5-0309D6D79ED0}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{8BF75836-E331-44BA-BF0B-0C38FB5FD69E}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{8CB3AE41-7984-461F-8979-FC3E5F4DB610}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{8D43FC44-782E-4526-82B6-A86A5BF8E4D6}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{8F0EA751-0B17-44A9-AAB1-9ED65E3AADFC}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{90D53A62-14D0-4BB6-98C2-32EBF10298AB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{90DAA9A0-10C0-4110-A6C5-C7062E44AC12}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{91D21A0C-2D20-40C1-92CD-C64769AB4885}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{92951E0E-3293-4BE2-8ECA-B8E199C58105}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{92D13DF3-7AC5-4CEC-BC32-91B4A1A0C600}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{92DBCD07-DE38-4819-9B68-5D4C9C1D4484}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{92E54FC2-6BAE-48D3-9F5C-025D19420875}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{92EDC475-3667-41EB-A154-F39C3B5F9537}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{964356AE-580C-4236-B693-7D16EB38B9B4}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{96FD5DC7-1160-44A3-A2F6-E13C86CF9BD3}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{973C46C3-E7CA-43B7-B65A-D94FD382193E}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9780281F-9E76-4884-8DA6-1A6695FA0B98}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{98B0A6EC-D4DE-4592-AFD6-986EBDE56723}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9A97CB21-3949-4B33-B0C9-350E333550A6}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9B2A26A3-AD8B-42D6-98B9-0BFDFABF6158}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9B39511E-C52E-4393-9951-37E753AF37CE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9B54A929-7902-4AF8-938B-25E0A5F456FB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9BE463E6-DC2C-4F1B-8A28-852DE3205F9F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9BF7297F-AA0B-4F12-AC40-69483B6D9F78}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9C3660AC-8202-434D-A067-5E26952E6DDD}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9D0E6640-7199-401C-BB05-64DA69BFA0EA}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9F1ECDCB-911B-435B-953C-D1112643E030}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9F99E1F8-C81C-4B9B-9E07-E0AB91CEE0C8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{9FCF20C6-89F6-49CA-9C87-49F16E95B07D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{A3E11FBD-C16B-4EE7-880D-3D880B3571B9}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{A4577269-FEF3-47F7-8D97-B6B67A962E28}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{A4A7D8FB-B22C-4991-9178-B609A267816F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{A546C79E-6310-4E94-AC57-44B0255492DF}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{A5F99F73-19B8-413A-B1D0-1912D73D9D37}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{A6A7428B-63F1-4195-AB7C-8787CA0B4031}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{A76578E3-E953-42A2-833E-19F9F6B59039}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{A7E63222-7E4B-4C41-86E9-21C9D677043F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{A82DDCE8-AA6D-42CB-8B78-62D019B70D01}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{A8CA62CA-B054-48C7-842F-49B65C8A8EDB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{A95A33BB-526A-4FD5-AC23-F8B50FBFD246}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{AAFD201C-D814-41D3-ADDE-5781E951B0E5}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{AD10E9DC-9F18-4A4F-9030-818C7F940B8F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{AD389E92-BC6E-4747-8835-B85F894D87E7}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{AE6944B6-EEE9-4D89-AFB1-5FCACC16B429}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{AF19D59D-103A-4136-A59B-38C30E0AE51D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{AF620759-0DA0-4DF0-9E27-144E97D57095}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B04008EC-7AD4-448B-9293-93F33806ACAE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B0962B8D-AD75-419F-A28F-8B72104F8D94}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B1A8C71E-FF76-4B97-ADD2-915B1CC42A13}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B1DFD8F4-9E99-4D18-A420-1B43E990BF56}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B1EC7377-ED00-4450-B452-5AB366E7EE40}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B2A2F9CF-E753-44C0-A380-1A7E31B168C6}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B5437CBA-A53D-4930-AEE9-88E42976571A}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B7515C75-78B8-46D7-BEE5-9067D3B5ADF3}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B7C48E28-555F-4467-A664-6C9C471DF6DF}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B8296BE2-C51A-4AED-AD51-3F30FBDEAFBB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B844AB89-20B6-425F-A676-1C37951C9311}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{B872E046-8678-40E5-8F8A-7A37210D9CFA}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{BA3CA8F7-F9CC-4070-A58F-03516DC346C8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{BB442C38-3514-443A-8C7A-491F6590BD08}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{BBC7A8BA-4B2A-48DA-BEC0-739E8CD9A33B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{BCC49535-140B-4F2E-B90F-BD81A4E26A46}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{BD84ADD7-B06C-4F70-AA0A-5BCFD20ED6B5}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{BDC4DDBE-F80D-496E-B98B-A96699FAC5F7}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{BFE51734-266F-43F0-9355-FEADB77FD664}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C128C0C9-481F-48CE-9712-888E92C872B0}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C3872D24-0CD3-4F76-8B0B-7BAA6D3C113D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C38C88BC-DB8E-4DB5-A414-AF6B35C5AA03}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C5A53B07-0E4C-4878-A6B2-620BCC60FEC8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C5B011B2-F619-4FF2-AC18-BB76B8106342}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C6A3177A-0F86-4C96-B75A-F9F19AFAB651}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C6A79831-D089-4617-A157-BF5DD23F7320}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C6D38087-8CBF-48DF-8CE0-921F48E528FB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C6D86CC1-AEED-4677-9F54-51837E1532CE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C6F452CC-BD5A-4D39-8458-0215B5CD9C73}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C7BC9A19-CEF7-41C9-AD88-5B5FF545ACB8}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C81FC102-D9F3-40DB-B31D-789E6CAC95FB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C82B65E3-B450-4D76-8D86-13912E117487}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C98AD915-A617-4890-970C-14F0B8A6532C}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C9EF62B3-D01B-46F4-9737-633E2BAF739B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{C9FFE416-F9BF-4984-9EB2-41396FCCF303}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{CA023B26-08D1-4889-A792-FE8CF2B877F6}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{CA7B73C7-EFC4-447D-8225-CDF1F600BD34}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{CAF6E6F4-5A9E-4C6B-AD1E-253A0EF26E50}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{CB3F1F43-54FD-4EFE-A2B8-386F398AAEA0}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{CB821079-89EE-428B-8A79-DF9526F9E1DE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{CCC1EDE1-8DC0-4B9E-83CA-4BDF1FE9318A}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{CCF33B51-1893-4E02-A033-0D7C7C00AE90}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{CD1A16E0-F32F-49B0-84B0-72A084929486}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{CDF9B6A8-B7EC-4DE2-9557-AC5B0BDD92C5}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{CE15F760-3728-4F7E-9613-6CAE0B38CCCA}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{CED82DEC-2FAA-4427-9BAC-8E5143940BBD}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{D01E3136-BF8E-4FE8-8884-B4A429799CB2}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{D4721699-94E3-4954-9AB8-414CFF4DC9A7}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{D4875478-40E5-494F-8A6C-6E87A8CBF98C}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{D48FD391-781F-4FCB-BD0F-3574804D4D68}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{D4A986DF-58B9-413F-A3D9-68E3AE74CF63}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{D76B9B8F-9AD8-40B3-B7E9-3CD17DA6B1A5}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{D84D107C-CFBF-49AA-AEBF-401B9C9B03D3}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{D866BFF3-DBD8-45BC-B366-CF7A9CAC6BDB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{D8BBE20C-1DF9-4973-BA03-A985A4451841}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{D8DA7549-1B6B-4B94-B557-5398BBDD96BF}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{DA415228-D018-47C9-9B7D-911C1EB280D1}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{DA4960B8-9814-494F-BF05-8BD739084F28}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{DB9EACE0-4172-4B74-9AB0-B23DCB14E438}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{DDEBF40C-0C8E-45FB-A532-5EE7331FD805}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{DDEC3629-ED10-4B2C-B992-32D521B24E61}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{DE72AAE4-10E5-4055-AD18-C314F0F74E91}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{DEC52FBA-422B-400E-A0BD-F276DA4AE2C6}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{DF105FE9-62A0-41CD-A336-AC280425A155}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{DF1D0D06-63E3-4FDB-9FC4-9BD16EA66ABE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E0283BFF-7228-4529-8633-27EBE1ACE133}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E25C935D-A9A1-4B2F-A1C4-47EDEED27E72}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E2B3F1F3-61C5-4357-85A9-3F8A52FF1BC9}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E2BF4623-7861-4556-B8BF-A76DD705E076}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E31F0963-E3EE-4BCA-8D65-93B4E75AF612}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E321320B-8B64-4773-9C52-A42FD061D855}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E357C7A3-FEF3-4F6E-99D7-182788D710E3}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E422C673-4D2A-42AC-8CF6-9F81CDAAA25A}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E429BF90-A29F-4AB9-9721-F74BC7476727}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E4FB1670-A0EC-47A3-8A86-867584779A1A}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E5A213A5-50EA-49EB-8194-C31C8CF70BBB}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E5C6C3C5-2D1C-4D29-9B94-CE5A1EA7FF4D}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E600C740-22D4-404F-A374-06B1A589D7A3}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E6FDA9AC-F12C-444A-8326-0438E761DB9B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E815B30C-A48C-49BC-ADCA-BF1EDCE15F3F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E90A44B1-5671-4ED3-A458-4FBF6976FBE4}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E9583F7B-3818-4736-8438-D392BA9A94F1}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{E9797BCE-64D1-40F0-9457-670C2FB1C200}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{EAD9D69B-EFEC-48CA-A16E-E674E84D99D1}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{EB6B56F5-3115-42AC-861B-70C6F30B0039}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{EBAAFF43-7265-440E-BC75-1430E10502FC}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{EBBB7A6F-9322-4164-B789-0DE77B4BE86B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{EE955837-EDEF-4861-9C7A-4B4FDB98B751}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{EFB15188-8E7B-4DF0-A0B7-AA6EB56D21EE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F0A218D6-8AAE-4C22-A66E-9E68D51628E4}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F26F298B-6948-441B-B766-F191E056DF09}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F34271BE-C69B-4143-8002-9EC7DB39B44A}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F35E6C22-E53E-4F56-BE96-0E72BAED78F0}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F41A4AF3-6B49-4064-B11C-3FECC93742DE}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F4FED7F5-7E9F-4ADA-B3B1-A81026AA154B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F5223BFF-BF2F-4DBB-AEAC-7AF4BEDCF83A}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F5F2B67B-CA09-446C-B5EE-28233B13C76B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F6793AF4-8B04-4D43-8CC0-947322A9CF86}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F6965042-1680-430D-9CFF-7E1296541D7B}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F71C5658-698E-4480-AD7D-31EB2DF568EA}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F7740E42-4868-4876-9FA7-5758BE1E95AF}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F7ADE9FD-26EF-4B40-808A-9EBF43D22715}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F8F4A7FD-E94E-4505-83DB-81750B0BF003}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{F9543EF5-0335-458D-A12D-B65F6332FBEA}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{FAAD1A5C-4E62-41A3-A45E-9035AED4DE71}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{FAE4842C-99F8-4536-8D65-F4CA50E7241F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{FCDA59D7-9883-404D-82E8-55B5F06F9E9F}
Successfully deleted: [Empty Folder] C:\Users\Stefan\appdata\local\{FE880966-8FB5-470D-9D99-1935D75FBD53}



~~~ FireFox

Successfully deleted: [Folder] C:\Users\Stefan\AppData\Roaming\mozilla\firefox\profiles\u70xkv2t.default\extensions\savingsslider@mybrowserbar.com
Successfully deleted: [Folder] C:\Users\Stefan\AppData\Roaming\mozilla\firefox\profiles\u70xkv2t.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com
Successfully deleted: [Folder] C:\Users\Stefan\AppData\Roaming\mozilla\firefox\profiles\u70xkv2t.default\extensions\staged
Emptied folder: C:\Users\Stefan\AppData\Roaming\mozilla\firefox\profiles\u70xkv2t.default\minidumps [107 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.03.2014 at 19:21:05,87
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
mbam

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org


Update, 27.03.2014 19:25:58, SYSTEM, STEFAN-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.3.27.1, 
Update, 27.03.2014 19:28:27, SYSTEM, STEFAN-PC, Manual, Malware Database, 2014.3.4.9, 2014.3.27.7, 

(end)
eset:
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f146511ef54f6b4e8f1d95277a4dc20c
# engine=17654
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-28 04:53:40
# local_time=2014-03-28 12:53:40 (-0400, Paraguay Normalzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 0 8460982 0 0
# compatibility_mode=5893 16776574 100 94 2449274 147525870 0 0
# scanned=281857
# found=4
# cleaned=0
# scan_time=17490
sh=959F4F07B2539C45CF0C221D427D5B78AEDEEF9C ft=1 fh=5e69ae992ca322cf vn="Win32/AdWare.1ClickDownload.AR application" ac=I fn="C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000000"
sh=6535EF1963B5B6CEE0990224524F94C314EA960A ft=1 fh=c71c00117cfe6f75 vn="Win32/BHO.OEY trojan" ac=I fn="C:\Windows\System32\d3ddcsx_42.dll"
sh=6535EF1963B5B6CEE0990224524F94C314EA960A ft=1 fh=c71c00117cfe6f75 vn="Win32/BHO.OEY trojan" ac=I fn="C:\Windows\SysWOW64\d3ddcsx_42.dll"
sh=FAC8A15BB2A02AF2D8C35BAA97F6DD171A68846F ft=0 fh=0000000000000000 vn="a variant of Generik.JKSAJZX trojan" ac=I fn="F:\Zeug\Eigene Musik\Musik\musikmix\mukke von manne\das haus am see peter fox onion.wma"

Alt 28.03.2014, 08:31   #7
90stefan
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


frst:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Stefan (administrator) on STEFAN-PC on 28-03-2014 03:28:59
Running from C:\Users\Stefan\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared Files\brs.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\WINDOWS\SYSTEM32\HKCMD.EXE
(Intel Corporation) C:\WINDOWS\SYSTEM32\IGFXTRAY.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-28] (Adobe Systems Incorporated)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2586504 2010-08-05] (ELAN Microelectronics Corp.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-03-20] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-02-05] (NVIDIA Corporation)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe [295744 2011-03-09] (NTI Corporation)
HKLM-x32\...\Run: [NUSB3MON] - c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-04-27] (cyberlink)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [107816 2011-10-27] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [485672 2011-10-31] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Run: [DriverMax_RESTART] - C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe [8221560 2014-02-07] (Innovative Solutions)
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\MountPoints2: {72affeea-0a68-11e3-bb43-68a3c4ee6690} - E:\AutoRun.exe
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\MountPoints2: {72affefd-0a68-11e3-bb43-68a3c4ee6690} - E:\AutoRun.exe
AppInit_DLLs: c:\windows\system32\nvinitx.dll => c:\windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
SearchScopes: HKCU - {01C8C359-A645-4711-8373-F205005CFAE8} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
SearchScopes: HKCU - {10703245-6980-4280-8F20-00F2F3CDCE2C} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
SearchScopes: HKCU - {B9D8192A-172E-42C8-A072-376166ABAD8A} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: iWebar - {11111111-1111-1111-1111-110311551110} - C:\Program Files (x86)\iWebar\iWebar-bho64.dll No File
BHO: Sense - {11111111-1111-1111-1111-110411821192} - C:\Program Files (x86)\Sense\Sense-bho64.dll No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {4DB74D06-491C-440D-305E-012400990F3E} - C:\Windows\SysWOW64\d3ddcsx_42.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adblock - {EF5F59BA-B2AB-48D8-9747-54DF806C73B8} -  No File
DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default
FF SearchEngineOrder.1: Sichere Suche
FF Homepage: hxxp://www.google.de/
FF DefaultSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MVT - C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Stefan\AppData\Local\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Stefan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\searchplugins\chip-online-suche.xml
FF SearchPlugin: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: iWebar - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com [2014-03-23]
FF Extension: Personas Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\personas@christopher.beard [2013-10-25]
FF Extension: AD Block - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\searchads@instair.net [2014-02-28]
FF Extension: Garmin Communicator - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-19]
FF Extension: Start Page - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-03-25]
FF Extension: Ecosia - The search engine that plants trees - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0} [2013-10-21]
FF Extension: Adblock Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2013-10-29]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\adblockpopups@jessehakanen.net.xpi [2011-11-24]
FF Extension: Personas Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\personas@christopher.beard.xpi [2013-10-25]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Ecosia - The search engine that plants trees - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2013-10-21]
FF Extension: Adblock Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-12-03]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-13]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-02-13]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-02-13]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR DefaultSearchKeyword: google.com.py
CHR DefaultNewTabURL: 
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Advanced SystemCare 7) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd\\1.0.0_0\Plugin/ASCPlugin_Protect.dll (IObit)
CHR Plugin: (NPIdentityGen Plugin) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgjafhkemfjfgdmjcmhofijphjmaanak\1.2.8_0\dll/NPIdentityGen.dll (Software)
CHR Plugin: (NPAdbExternal Plugin) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfgjbmhakaffflkjecineeaadpidgikb\1.0.0_0\dll/NPAdbExternal.dll (Software)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U51) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll No File
CHR Plugin: (Unity Player) - C:\Users\Stefan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.94) - C:\Users\Stefan\AppData\Local\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd [2014-03-25]
CHR Extension: (Avira Browser Safety Beta) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-03-26]
CHR Extension: (AdBlock) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-30]
CHR Extension: (AccelerateTab) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgjafhkemfjfgdmjcmhofijphjmaanak [2014-03-04]
CHR Extension: (AD Block) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfgjbmhakaffflkjecineeaadpidgikb [2014-02-28]
CHR Extension: (Google Wallet) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-03-23]

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243728 2012-08-27] (CyberLink)
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [872552 2011-05-10] (Acer Incorporated)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [255376 2012-04-05] (Acer Incorporated)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe [257344 2011-03-09] (NTI Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
S2 SecureUpdateSvc; C:\Program Files (x86)\Secure Speed Dial\IE\SecureUpdate.exe [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
R3 azvusb; C:\Windows\System32\DRIVERS\azvusb.sys [54784 2009-08-24] (AzureWave Technologies, Inc.)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [90096 2011-09-08] (CyberLink)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2014-01-27] (Intel Corporation)
S3 MEMSWEEP2; C:\Windows\system32\2254.tmp [6144 2009-06-18] (Sophos Plc)
S3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [24200 2007-10-19] (DiBcom S.A.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2013-12-24] (IObit)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2014-02-24] (Synaptics Incorporated)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 mod7700; system32\DRIVERS\mod7700.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-27 19:57 - 2014-03-27 19:57 - 02347384 _____ (ESET) C:\Users\Stefan\Desktop\esetsmartinstaller_enu.exe
2014-03-27 19:47 - 2014-03-27 19:47 - 00000263 _____ () C:\Users\Stefan\Desktop\mbam.txt
2014-03-27 19:24 - 2014-03-27 19:45 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-27 19:24 - 2014-03-27 19:24 - 00001078 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-27 19:24 - 2014-03-27 19:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-27 19:24 - 2014-03-27 19:24 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-03-27 19:24 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-27 19:24 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-27 19:24 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-27 19:23 - 2014-03-27 19:24 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Stefan\Desktop\mbam-setup-2.0.0.1000.exe
2014-03-27 19:21 - 2014-03-27 19:21 - 00038456 _____ () C:\Users\Stefan\Desktop\JRT.txt
2014-03-27 19:14 - 2014-03-27 19:14 - 00000000 ____D () C:\Windows\ERUNT
2014-03-27 19:13 - 2014-03-27 19:13 - 01038974 _____ (Thisisu) C:\Users\Stefan\Desktop\JRT.exe
2014-03-27 19:06 - 2014-03-27 19:08 - 00000000 ____D () C:\AdwCleaner
2014-03-27 19:02 - 2014-03-27 19:02 - 01950720 _____ () C:\Users\Stefan\Desktop\adwcleaner.exe
2014-03-27 18:55 - 2014-02-19 14:02 - 00000426 _____ () C:\AVScanner.ini
2014-03-27 18:14 - 2014-03-27 18:14 - 00063511 _____ () C:\Users\Stefan\Desktop\Addition.txt
2014-03-27 18:12 - 2014-03-28 03:29 - 00028680 _____ () C:\Users\Stefan\Desktop\FRST.txt
2014-03-27 18:12 - 2014-03-28 03:28 - 00000000 ____D () C:\FRST
2014-03-27 18:11 - 2014-03-27 18:12 - 02157056 _____ (Farbar) C:\Users\Stefan\Desktop\FRST64.exe
2014-03-25 17:35 - 2013-11-05 06:02 - 00458960 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\k57nd60a.sys
2014-03-24 10:17 - 2014-03-27 22:17 - 00003406 _____ () C:\Windows\Tasks\Sense-chromeinstaller.job
2014-03-24 10:17 - 2014-03-27 22:17 - 00002488 _____ () C:\Windows\Tasks\Sense-firefoxinstaller.job
2014-03-24 10:17 - 2014-03-27 22:17 - 00001776 _____ () C:\Windows\Tasks\Sense-updater.job
2014-03-24 10:17 - 2014-03-27 22:17 - 00001732 _____ () C:\Windows\Tasks\Sense-codedownloader.job
2014-03-24 10:17 - 2014-03-27 22:17 - 00001610 _____ () C:\Windows\Tasks\Sense-enabler.job
2014-03-24 10:17 - 2014-03-24 10:17 - 00004806 _____ () C:\Windows\System32\Tasks\Sense-updater
2014-03-24 10:17 - 2014-03-24 10:17 - 00004762 _____ () C:\Windows\System32\Tasks\Sense-codedownloader
2014-03-24 10:17 - 2014-03-24 10:17 - 00004640 _____ () C:\Windows\System32\Tasks\Sense-enabler
2014-03-23 21:39 - 2014-03-23 21:44 - 00000028 _____ () C:\Users\Stefan\Desktop\Neues Textdokument.txt
2014-03-23 21:22 - 2014-03-28 03:20 - 00712484 _____ () C:\Windows\WindowsUpdate.log
2014-03-23 21:17 - 2014-03-28 03:17 - 00002492 _____ () C:\Windows\Tasks\iWebar-firefoxinstaller.job
2014-03-23 21:17 - 2014-03-28 03:17 - 00001782 _____ () C:\Windows\Tasks\iWebar-updater.job
2014-03-23 21:17 - 2014-03-28 03:17 - 00001738 _____ () C:\Windows\Tasks\iWebar-codedownloader.job
2014-03-23 21:17 - 2014-03-28 03:17 - 00001616 _____ () C:\Windows\Tasks\iWebar-enabler.job
2014-03-23 21:17 - 2014-03-23 21:17 - 00004812 _____ () C:\Windows\System32\Tasks\iWebar-updater
2014-03-23 21:17 - 2014-03-23 21:17 - 00004768 _____ () C:\Windows\System32\Tasks\iWebar-codedownloader
2014-03-23 21:17 - 2014-03-23 21:17 - 00004646 _____ () C:\Windows\System32\Tasks\iWebar-enabler
2014-03-23 21:16 - 2014-03-28 03:16 - 00003410 _____ () C:\Windows\Tasks\iWebar-chromeinstaller.job
2014-03-23 21:16 - 2014-03-23 21:19 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-03-23 21:14 - 2014-03-23 21:14 - 00004506 _____ () C:\Windows\System32\Tasks\ShopperPro
2014-03-23 21:14 - 2014-03-23 21:14 - 00003572 _____ () C:\Windows\System32\Tasks\ShopperProJSUpd
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KeyFinder
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Program Files (x86)\KeyFinder
2014-03-23 14:39 - 2014-03-23 14:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-03-23 14:38 - 2014-03-23 14:38 - 00166616 _____ () C:\Users\Stefan\Downloads\ProductKeyFinder.exe
2014-03-23 08:51 - 2014-03-23 09:38 - 00000000 ____D () C:\Program Files (x86)\TweakNow PowerPack
2014-03-23 08:51 - 2014-03-23 08:51 - 00001058 _____ () C:\Users\Public\Desktop\TweakNow PowerPack.lnk
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack 2012
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack
2014-03-23 08:08 - 2014-01-08 20:13 - 04043776 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2014-03-23 08:04 - 2014-02-11 20:24 - 00450520 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\system32\NV
2014-03-21 19:22 - 2014-03-21 19:22 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-03-21 19:22 - 2014-03-21 19:22 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 54936576 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 03867224 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-21 19:21 - 2014-03-21 19:21 - 02787544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00945880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00916016 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00747989 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-21 19:20 - 2014-03-21 19:21 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-03-21 19:19 - 2014-03-21 19:20 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-21 19:17 - 2014-03-21 19:19 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____D () C:\Program Files\Synaptics
2014-03-21 14:56 - 2014-02-24 20:39 - 00031472 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2014-03-21 14:49 - 2014-03-21 14:49 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA Corporation
2014-03-21 14:49 - 2010-05-26 10:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-03-21 14:48 - 2014-03-21 14:50 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA
2014-03-21 14:48 - 2014-02-05 05:31 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-03-21 14:48 - 2014-02-05 05:30 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-03-21 14:47 - 2014-03-21 14:47 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-21 14:47 - 2014-03-04 09:06 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-03-21 14:47 - 2014-03-04 09:06 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin
2014-03-21 14:47 - 2014-03-04 09:05 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 01075032 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-03-21 14:47 - 2014-03-04 09:05 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-03-21 14:46 - 2014-03-21 14:50 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-03-21 14:46 - 2014-03-04 10:35 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-21 14:46 - 2014-03-04 10:35 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-21 14:39 - 2014-03-04 10:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00033736 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-03-21 14:39 - 2014-03-04 10:35 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-21 14:39 - 2013-12-27 14:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-03-21 14:39 - 2013-12-27 14:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-03-21 14:39 - 2013-12-27 14:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-03-21 14:35 - 2014-03-21 14:35 - 00001210 _____ () C:\Users\Stefan\Desktop\DriverMax.lnk
2014-03-21 14:35 - 2014-03-21 14:35 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Innovative Solutions
2014-03-21 14:34 - 2014-03-21 14:34 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-03-21 14:08 - 2014-03-21 14:08 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Deployment
2014-03-21 13:41 - 2014-03-21 13:41 - 00000000 ____D () C:\swsetup
2014-03-21 13:30 - 2014-03-21 13:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ICCWDT_01009.Wdf
2014-03-21 12:44 - 2014-03-21 14:57 - 00000000 ____D () C:\Program Files\Easeware
2014-03-21 12:44 - 2014-03-21 13:00 - 00000408 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-03-21 12:44 - 2014-03-21 12:45 - 01365248 _____ (Viber Media Inc) C:\Users\Stefan\Downloads\ViberSetup.exe
2014-03-21 12:44 - 2014-03-21 12:44 - 00003816 _____ () C:\Windows\System32\Tasks\DriverEasy Scheduled Scan
2014-03-21 12:44 - 2014-03-21 12:44 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Easeware
2014-03-21 12:43 - 2014-03-21 12:51 - 33189024 _____ (Nero AG) C:\Users\Stefan\Downloads\Nero_DiscSpeed.exe
2014-03-21 12:43 - 2014-03-21 12:47 - 33746304 _____ (eTeks ) C:\Users\Stefan\Downloads\SweetHome3D-4-2-windows-oc.exe
2014-03-21 12:43 - 2014-03-21 12:44 - 02987608 _____ (Easeware ) C:\Users\Stefan\Downloads\DriverEasy_Setup_4_6_4.exe
2014-03-21 12:36 - 2014-03-21 12:36 - 00000000 ____D () C:\Users\Stefan\AppData\Local\CrashRpt
2014-03-21 12:03 - 2014-03-21 12:03 - 00003166 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2014-03-20 15:39 - 2014-03-20 15:39 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-20 15:39 - 2014-03-20 15:39 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01022680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00245496 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00059088 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bScsiMSa.sys
2014-03-20 15:31 - 2014-03-21 12:47 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\DriverTurbo
2014-03-20 15:30 - 2014-03-20 15:30 - 00231952 _____ () C:\Users\Stefan\Downloads\DriverTurboSetup.exe
2014-03-20 05:55 - 2014-03-20 05:55 - 00002858 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Stefan)
2014-03-20 05:50 - 2014-03-20 05:51 - 23669792 _____ (IObit ) C:\Users\Stefan\Downloads\driver_booster_setup.exe
2014-03-13 07:14 - 2014-03-01 02:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 07:14 - 2014-03-01 01:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 07:14 - 2014-03-01 01:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 07:14 - 2014-03-01 00:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 07:14 - 2014-03-01 00:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 07:14 - 2014-03-01 00:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 07:14 - 2014-03-01 00:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 07:14 - 2014-03-01 00:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 07:14 - 2014-03-01 00:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 07:14 - 2014-03-01 00:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 07:14 - 2014-03-01 00:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 07:14 - 2014-03-01 00:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 07:14 - 2014-03-01 00:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 07:14 - 2014-03-01 00:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 07:14 - 2014-03-01 00:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 07:14 - 2014-03-01 00:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 07:14 - 2014-03-01 00:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 07:14 - 2014-02-28 23:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 07:14 - 2014-02-28 23:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 07:14 - 2014-02-28 23:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 07:14 - 2014-02-28 23:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 07:14 - 2014-02-28 23:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 07:14 - 2014-02-28 23:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 07:14 - 2014-02-28 23:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 07:14 - 2014-02-28 23:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 07:14 - 2014-02-28 23:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 07:14 - 2014-02-28 23:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 07:14 - 2014-02-28 23:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 07:14 - 2014-02-28 23:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 07:14 - 2014-02-28 23:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 07:14 - 2014-02-28 23:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 07:14 - 2014-02-28 23:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 07:14 - 2014-02-28 23:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 07:14 - 2014-02-28 23:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 07:14 - 2014-02-28 22:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 07:14 - 2014-02-28 22:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 07:14 - 2014-02-28 22:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 07:14 - 2014-02-28 22:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 07:14 - 2014-02-28 22:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 07:14 - 2014-02-28 22:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 07:14 - 2014-02-06 21:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 07:14 - 2014-01-28 22:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 07:14 - 2014-01-28 22:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 07:14 - 2014-01-27 22:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 07:10 - 2014-02-03 22:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 07:10 - 2014-02-03 22:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 07:08 - 2014-02-03 22:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 07:08 - 2014-02-03 22:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-11 18:07 - 2014-03-11 18:07 - 00001755 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-11 18:05 - 2014-03-11 18:07 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-11 18:05 - 2014-03-11 18:07 - 00000000 ____D () C:\Program Files\iTunes
2014-03-11 18:05 - 2014-03-11 18:07 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-11 18:05 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files\iPod
2014-03-11 17:55 - 2014-03-11 17:55 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-02-27 08:43 - 2014-02-27 08:44 - 13443208 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x86.exe
2014-02-27 08:42 - 2014-02-27 08:43 - 13644792 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x64.exe
2014-02-26 05:33 - 2014-03-23 09:03 - 00011264 ___SH () C:\Users\Stefan\Thumbs.db

==================== One Month Modified Files and Folders =======

2014-03-28 03:29 - 2014-03-27 18:12 - 00028680 _____ () C:\Users\Stefan\Desktop\FRST.txt
2014-03-28 03:28 - 2014-03-27 18:12 - 00000000 ____D () C:\FRST
2014-03-28 03:20 - 2014-03-23 21:22 - 00712484 _____ () C:\Windows\WindowsUpdate.log
2014-03-28 03:17 - 2014-03-23 21:17 - 00002492 _____ () C:\Windows\Tasks\iWebar-firefoxinstaller.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001782 _____ () C:\Windows\Tasks\iWebar-updater.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001738 _____ () C:\Windows\Tasks\iWebar-codedownloader.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001616 _____ () C:\Windows\Tasks\iWebar-enabler.job
2014-03-28 03:17 - 2013-10-09 12:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b.job
2014-03-28 03:16 - 2014-03-23 21:16 - 00003410 _____ () C:\Windows\Tasks\iWebar-chromeinstaller.job
2014-03-28 03:02 - 2012-05-10 03:21 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00003406 _____ () C:\Windows\Tasks\Sense-chromeinstaller.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00002488 _____ () C:\Windows\Tasks\Sense-firefoxinstaller.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001776 _____ () C:\Windows\Tasks\Sense-updater.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001732 _____ () C:\Windows\Tasks\Sense-codedownloader.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001610 _____ () C:\Windows\Tasks\Sense-enabler.job
2014-03-27 19:57 - 2014-03-27 19:57 - 02347384 _____ (ESET) C:\Users\Stefan\Desktop\esetsmartinstaller_enu.exe
2014-03-27 19:55 - 2011-07-22 03:26 - 00700134 _____ () C:\Windows\system32\perfh007.dat
2014-03-27 19:55 - 2011-07-22 03:26 - 00149984 _____ () C:\Windows\system32\perfc007.dat
2014-03-27 19:55 - 2009-07-14 01:13 - 01622236 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-27 19:52 - 2009-07-14 00:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-27 19:52 - 2009-07-14 00:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-27 19:47 - 2014-03-27 19:47 - 00000263 _____ () C:\Users\Stefan\Desktop\mbam.txt
2014-03-27 19:45 - 2014-03-27 19:24 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-27 19:44 - 2013-08-15 14:08 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-27 19:43 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-27 19:24 - 2014-03-27 19:24 - 00001078 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-27 19:24 - 2014-03-27 19:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-27 19:24 - 2014-03-27 19:24 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-03-27 19:24 - 2014-03-27 19:23 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Stefan\Desktop\mbam-setup-2.0.0.1000.exe
2014-03-27 19:21 - 2014-03-27 19:21 - 00038456 _____ () C:\Users\Stefan\Desktop\JRT.txt
2014-03-27 19:14 - 2014-03-27 19:14 - 00000000 ____D () C:\Windows\ERUNT
2014-03-27 19:13 - 2014-03-27 19:13 - 01038974 _____ (Thisisu) C:\Users\Stefan\Desktop\JRT.exe
2014-03-27 19:08 - 2014-03-27 19:06 - 00000000 ____D () C:\AdwCleaner
2014-03-27 19:02 - 2014-03-27 19:02 - 01950720 _____ () C:\Users\Stefan\Desktop\adwcleaner.exe
2014-03-27 18:14 - 2014-03-27 18:14 - 00063511 _____ () C:\Users\Stefan\Desktop\Addition.txt
2014-03-27 18:12 - 2014-03-27 18:11 - 02157056 _____ (Farbar) C:\Users\Stefan\Desktop\FRST64.exe
2014-03-26 13:21 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-26 10:12 - 2013-10-09 12:14 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b
2014-03-26 10:12 - 2013-08-15 14:08 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-25 19:06 - 2011-12-17 10:56 - 00000000 ____D () C:\Users\Stefan\programme
2014-03-25 19:05 - 2014-02-25 17:51 - 00002008 _____ () C:\Windows\epplauncher.mif
2014-03-25 18:45 - 2013-11-05 18:52 - 00002852 _____ () C:\Windows\System32\Tasks\ASC7_SkipUac_Stefan
2014-03-25 18:45 - 2013-11-05 18:52 - 00002181 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-03-25 18:24 - 2011-11-17 20:33 - 00000000 ____D () C:\Users\Stefan\AppData\Local\CrashDumps
2014-03-25 17:55 - 2011-11-14 16:03 - 00000000 ____D () C:\Users\Stefan
2014-03-25 17:54 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\registration
2014-03-25 17:40 - 2013-05-12 10:19 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\ViberPC
2014-03-25 17:08 - 2011-11-14 16:08 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Skype
2014-03-25 16:10 - 2012-07-18 05:08 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-25 15:57 - 2013-11-05 18:52 - 00000000 ____D () C:\ProgramData\ProductData
2014-03-24 10:17 - 2014-03-24 10:17 - 00004806 _____ () C:\Windows\System32\Tasks\Sense-updater
2014-03-24 10:17 - 2014-03-24 10:17 - 00004762 _____ () C:\Windows\System32\Tasks\Sense-codedownloader
2014-03-24 10:17 - 2014-03-24 10:17 - 00004640 _____ () C:\Windows\System32\Tasks\Sense-enabler
2014-03-23 21:44 - 2014-03-23 21:39 - 00000028 _____ () C:\Users\Stefan\Desktop\Neues Textdokument.txt
2014-03-23 21:20 - 2009-07-14 00:45 - 00392144 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-23 21:19 - 2014-03-23 21:16 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-03-23 21:17 - 2014-03-23 21:17 - 00004812 _____ () C:\Windows\System32\Tasks\iWebar-updater
2014-03-23 21:17 - 2014-03-23 21:17 - 00004768 _____ () C:\Windows\System32\Tasks\iWebar-codedownloader
2014-03-23 21:17 - 2014-03-23 21:17 - 00004646 _____ () C:\Windows\System32\Tasks\iWebar-enabler
2014-03-23 21:14 - 2014-03-23 21:14 - 00004506 _____ () C:\Windows\System32\Tasks\ShopperPro
2014-03-23 21:14 - 2014-03-23 21:14 - 00003572 _____ () C:\Windows\System32\Tasks\ShopperProJSUpd
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-23 17:36 - 2012-12-24 20:49 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\vlc
2014-03-23 14:54 - 2012-05-12 09:11 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\SoftGrid Client
2014-03-23 14:52 - 2011-11-14 16:03 - 00096616 _____ () C:\Users\Stefan\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-23 14:48 - 2011-07-21 17:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KeyFinder
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Program Files (x86)\KeyFinder
2014-03-23 14:40 - 2009-07-13 23:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-23 14:39 - 2014-03-23 14:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-03-23 14:39 - 2010-11-21 03:16 - 00000000 ____D () C:\Windows\ShellNew
2014-03-23 14:38 - 2014-03-23 14:38 - 00166616 _____ () C:\Users\Stefan\Downloads\ProductKeyFinder.exe
2014-03-23 09:48 - 2013-10-17 19:36 - 00001042 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-03-23 09:38 - 2014-03-23 08:51 - 00000000 ____D () C:\Program Files (x86)\TweakNow PowerPack
2014-03-23 09:31 - 2011-11-14 16:07 - 00000000 ____D () C:\ProgramData\CyberLink
2014-03-23 09:06 - 2014-01-25 13:22 - 00000000 ____D () C:\Users\Stefan\TERESA
2014-03-23 09:06 - 2013-03-07 22:16 - 00000000 ____D () C:\Users\Stefan\Documents\English materials + CertTESOL
2014-03-23 09:03 - 2014-02-26 05:33 - 00011264 ___SH () C:\Users\Stefan\Thumbs.db
2014-03-23 09:00 - 2011-11-17 19:39 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\DVDVideoSoft
2014-03-23 09:00 - 2011-11-17 19:39 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-03-23 08:59 - 2013-11-14 19:32 - 00001215 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-03-23 08:54 - 2011-11-17 19:37 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack 2011
2014-03-23 08:51 - 2014-03-23 08:51 - 00001058 _____ () C:\Users\Public\Desktop\TweakNow PowerPack.lnk
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack 2012
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack
2014-03-23 08:44 - 2011-11-17 19:35 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-23 08:44 - 2011-11-17 19:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\system32\NV
2014-03-21 19:30 - 2011-07-21 17:39 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-21 19:25 - 2011-07-21 17:45 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-21 19:22 - 2014-03-21 19:22 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-03-21 19:22 - 2014-03-21 19:22 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 54936576 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 03867224 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-21 19:21 - 2014-03-21 19:21 - 02787544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00945880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00916016 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00747989 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-21 19:21 - 2014-03-21 19:20 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-03-21 19:20 - 2014-03-21 19:19 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-21 19:19 - 2014-03-21 19:17 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____D () C:\Program Files\Synaptics
2014-03-21 14:57 - 2014-03-21 12:44 - 00000000 ____D () C:\Program Files\Easeware
2014-03-21 14:50 - 2014-03-21 14:48 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA
2014-03-21 14:50 - 2014-03-21 14:46 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-03-21 14:49 - 2014-03-21 14:49 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA Corporation
2014-03-21 14:48 - 2011-07-21 17:38 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-03-21 14:48 - 2011-07-21 17:38 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-03-21 14:47 - 2014-03-21 14:47 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-21 14:35 - 2014-03-21 14:35 - 00001210 _____ () C:\Users\Stefan\Desktop\DriverMax.lnk
2014-03-21 14:35 - 2014-03-21 14:35 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Innovative Solutions
2014-03-21 14:34 - 2014-03-21 14:34 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-03-21 14:26 - 2012-10-05 04:52 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-03-21 14:26 - 2012-10-05 04:51 - 00000000 ____D () C:\Users\Stefan\SystemRequirementsLab
2014-03-21 14:08 - 2014-03-21 14:08 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Deployment
2014-03-21 14:08 - 2011-12-03 07:48 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Apps\2.0
2014-03-21 13:41 - 2014-03-21 13:41 - 00000000 ____D () C:\swsetup
2014-03-21 13:30 - 2014-03-21 13:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ICCWDT_01009.Wdf
2014-03-21 13:30 - 2011-05-31 05:33 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-21 13:04 - 2011-05-31 06:01 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-03-21 13:00 - 2014-03-21 12:44 - 00000408 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-03-21 12:55 - 2012-11-24 20:14 - 00001105 _____ () C:\Users\Stefan\Desktop\Sweet Home 3D.lnk
2014-03-21 12:55 - 2012-11-24 20:14 - 00000000 ____D () C:\Program Files (x86)\Sweet Home 3D
2014-03-21 12:53 - 2013-05-12 10:19 - 00001084 _____ () C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber.lnk
2014-03-21 12:53 - 2013-05-12 10:19 - 00001076 _____ () C:\Users\Stefan\Desktop\Viber.lnk
2014-03-21 12:53 - 2013-05-12 10:18 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Viber
2014-03-21 12:51 - 2014-03-21 12:43 - 33189024 _____ (Nero AG) C:\Users\Stefan\Downloads\Nero_DiscSpeed.exe
2014-03-21 12:47 - 2014-03-21 12:43 - 33746304 _____ (eTeks ) C:\Users\Stefan\Downloads\SweetHome3D-4-2-windows-oc.exe
2014-03-21 12:47 - 2014-03-20 15:31 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\DriverTurbo
2014-03-21 12:45 - 2014-03-21 12:44 - 01365248 _____ (Viber Media Inc) C:\Users\Stefan\Downloads\ViberSetup.exe
2014-03-21 12:44 - 2014-03-21 12:44 - 00003816 _____ () C:\Windows\System32\Tasks\DriverEasy Scheduled Scan
2014-03-21 12:44 - 2014-03-21 12:44 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Easeware
2014-03-21 12:44 - 2014-03-21 12:43 - 02987608 _____ (Easeware ) C:\Users\Stefan\Downloads\DriverEasy_Setup_4_6_4.exe
2014-03-21 12:36 - 2014-03-21 12:36 - 00000000 ____D () C:\Users\Stefan\AppData\Local\CrashRpt
2014-03-21 12:22 - 2013-02-06 22:09 - 00000000 ____D () C:\ProgramData\IObit
2014-03-21 12:03 - 2014-03-21 12:03 - 00003166 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2014-03-20 15:39 - 2014-03-20 15:39 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-20 15:39 - 2014-03-20 15:39 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01022680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00245496 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00059088 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bScsiMSa.sys
2014-03-20 15:30 - 2014-03-20 15:30 - 00231952 _____ () C:\Users\Stefan\Downloads\DriverTurboSetup.exe
2014-03-20 05:55 - 2014-03-20 05:55 - 00002858 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Stefan)
2014-03-20 05:55 - 2014-01-27 20:53 - 00003216 _____ () C:\Windows\System32\Tasks\Driver Booster Scan
2014-03-20 05:51 - 2014-03-20 05:50 - 23669792 _____ (IObit ) C:\Users\Stefan\Downloads\driver_booster_setup.exe
2014-03-19 08:52 - 2012-09-06 21:47 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\dvdcss
2014-03-15 14:34 - 2013-11-07 15:28 - 00002147 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-14 15:44 - 2013-10-18 11:17 - 00407040 ___SH () C:\Users\Stefan\Desktop\Thumbs.db
2014-03-14 07:54 - 2013-07-20 15:59 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-14 07:52 - 2011-11-19 17:19 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-14 07:30 - 2013-10-20 11:15 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 07:30 - 2013-10-20 11:15 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 09:02 - 2012-05-10 03:21 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 09:02 - 2012-05-10 03:21 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 09:02 - 2011-11-17 18:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-11 18:07 - 2014-03-11 18:07 - 00001755 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-11 18:07 - 2014-03-11 18:05 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-11 18:07 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files\iTunes
2014-03-11 18:07 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-11 18:05 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files\iPod
2014-03-11 17:55 - 2014-03-11 17:55 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-10 17:17 - 2014-01-27 10:53 - 00128288 _____ (IObit) C:\Windows\system32\IObitSmartDefragExtension.dll
2014-03-05 09:26 - 2014-03-27 19:24 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-05 09:26 - 2014-03-27 19:24 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-05 09:26 - 2014-03-27 19:24 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-04 10:35 - 2014-03-21 14:46 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-04 10:35 - 2014-03-21 14:46 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-04 10:35 - 2014-03-21 14:39 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00033736 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-03-04 10:35 - 2014-03-21 14:39 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-04 09:06 - 2014-03-21 14:47 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-03-04 09:06 - 2014-03-21 14:47 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin
2014-03-04 09:05 - 2014-03-21 14:47 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 01075032 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-03-04 09:05 - 2014-03-21 14:47 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-03-01 02:05 - 2014-03-13 07:14 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 01:17 - 2014-03-13 07:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 01:16 - 2014-03-13 07:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 00:58 - 2014-03-13 07:14 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 00:52 - 2014-03-13 07:14 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 00:51 - 2014-03-13 07:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 00:42 - 2014-03-13 07:14 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 00:40 - 2014-03-13 07:14 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 00:37 - 2014-03-13 07:14 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 00:33 - 2014-03-13 07:14 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 00:33 - 2014-03-13 07:14 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 00:32 - 2014-03-13 07:14 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 00:30 - 2014-03-13 07:14 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 00:23 - 2014-03-13 07:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 00:17 - 2014-03-13 07:14 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 00:11 - 2014-03-13 07:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 00:02 - 2014-03-13 07:14 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-28 23:54 - 2014-03-13 07:14 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-28 23:52 - 2014-03-13 07:14 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-28 23:51 - 2014-03-13 07:14 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-28 23:47 - 2014-03-13 07:14 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-28 23:43 - 2014-03-13 07:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-28 23:43 - 2014-03-13 07:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-28 23:42 - 2014-03-13 07:14 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-28 23:40 - 2014-03-13 07:14 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-28 23:38 - 2014-03-13 07:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-28 23:37 - 2014-03-13 07:14 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-28 23:35 - 2014-03-13 07:14 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-28 23:18 - 2014-03-13 07:14 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-28 23:16 - 2014-03-13 07:14 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-28 23:14 - 2014-03-13 07:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-28 23:10 - 2014-03-13 07:14 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-28 23:03 - 2014-03-13 07:14 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-28 23:00 - 2014-03-13 07:14 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-28 22:57 - 2014-03-13 07:14 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-28 22:38 - 2014-03-13 07:14 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-28 22:32 - 2014-03-13 07:14 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-28 22:27 - 2014-03-13 07:14 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-28 22:25 - 2014-03-13 07:14 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-28 22:25 - 2014-03-13 07:14 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 15:22 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
2014-02-27 08:44 - 2014-02-27 08:43 - 13443208 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x86.exe
2014-02-27 08:44 - 2013-06-14 14:48 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-02-27 08:44 - 2012-05-12 09:10 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-27 08:43 - 2014-02-27 08:42 - 13644792 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x64.exe

Some content of TEMP:
====================
C:\Users\Stefan\AppData\Local\Temp\appshat_generic.exe
C:\Users\Stefan\AppData\Local\Temp\avgnt.exe
C:\Users\Stefan\AppData\Local\Temp\ProductKeyFinderSetup.exe
C:\Users\Stefan\AppData\Local\Temp\setup.exe
C:\Users\Stefan\AppData\Local\Temp\tu17p84.exe
C:\Users\Stefan\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Stefan\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\Stefan\AppData\Local\Temp\ytai_ytareg_setup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-21 20:34

==================== End Of Log ============================
--- --- ---
Alt 28.03.2014, 08:41   #8
90stefan
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Stefan at 2014-03-28 03:29:42
Running from C:\Users\Stefan\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

AccelerateTab (HKLM-x32\...\AccelerateTab_is1) (Version: 2.0 - AccelerateTab)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
ActiveX контрола на Windows Live Mesh за отдалечени връзки (HKLM-x32\...\{B3BA4D1C-23EF-4859-9C11-1B2CCB7FADBB}) (Version: 15.4.5722.2 - Microsoft Corporation)
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (HKLM-x32\...\{376D59B1-42D9-4FA2-B6CC-E346B6BE14F5}) (Version: 15.4.5722.2 - Microsoft Corporation)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.2090 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.7.0.2090 - Adobe Systems Incorporated) Hidden
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.2.1.650 - Adobe Systems Incorporated)
Adobe Community Help (x32 Version: 3.2.1 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Photoshop Elements 9 (HKLM-x32\...\Adobe Photoshop Elements 9) (Version: 9.0.3.0 - Adobe Systems Incorporated)
Adobe Photoshop Elements 9 (x32 Version: 9.0.3.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 9 (HKLM-x32\...\PremElem90) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 9 (x32 Version: 9.0.1 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)
Advanced SystemCare 7 (HKLM-x32\...\Advanced SystemCare 7_is1) (Version: 7.2.1 - IObit)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AutoUpdate (HKLM-x32\...\{18D10072035C4515918F7E37EAFAACFC}) (Version: 1.1 - )
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Backup Manager V3 (x32 Version: 3.0.0.90 - NTI Corporation) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 14.8.2.2 - Broadcom Corporation)
Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.2 - Broadcom Corporation)
Canon MP Navigator EX 1.0 (HKLM-x32\...\MP Navigator EX 1.0) (Version:  - )
Canon MP610 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP610_series) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation)
Control ActiveX del Windows Live Mesh per a connexions remotes (HKLM-x32\...\{76C064E2-BB99-4453-8FDA-42BC01AD0734}) (Version: 15.4.5722.2 - Microsoft Corporation)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (HKLM-x32\...\{260E3D78-94E6-47EC-8E29-46301572BB1E}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controle ActiveX do Windows Live Mesh para Conexões Remotas (HKLM-x32\...\{39B3184E-0BFB-40FA-ADDC-E7E2D535CDA9}) (Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1031 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1031 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4427.52 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.4427.52 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version:  - Microsoft)
DivX Codec (HKLM-x32\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.6.1 - DivX, Inc.)
Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.3 - IObit)
DriverMax 7 (HKLM-x32\...\DMX5_is1) (Version: 7.28.0.206 - Innovative Solutions)
Elements 9 Organizer (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Elements STI Installer (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Elevated Installer (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
ETDWare PS/2-X64 8.0.7.0_WHQL (HKLM\...\Elantech) (Version: 8.0.7.0 - ELAN Microelectronic Corp.)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free Studio version 2014 (HKLM-x32\...\Free Studio_is1) (Version: 6.2.14.319 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Garmin Express (HKLM-x32\...\{e47a5c85-88a2-47d2-b380-fc2e763c2e6d}) (Version: 2.1.13 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
Garmin Update Service (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Drive (HKLM-x32\...\{E87022D3-C8C9-4C76-8E27-BC7F18F9B8FB}) (Version: 1.14.6059.644 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HomeMedia (HKLM-x32\...\{AA4BF92B-2AAF-11DA-9D78-000129760D75}) (Version: 2.0.8520 - CyberLink Corporation)
HP Deskjet 1000 J110 series - Grundlegende Software für das Gerät (HKLM\...\{ECFFD23C-3111-4685-8118-E1F79644203F}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
HP Deskjet 1000 J110 series Hilfe (HKLM-x32\...\{DDDFCC77-7F9C-45E9-B38E-721BA599BA0C}) (Version: 140.0.65.65 - Hewlett Packard)
HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät (HKLM\...\{EF3293DE-FCAC-4742-91BF-AD0174143FC3}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3050 J610 series Hilfe (HKLM-x32\...\{F7632A9B-661E-4FD9-B1A4-3B86BC99847F}) (Version: 140.0.63.63 - Hewlett Packard)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
Hugin 2012.0.0 (HKLM-x32\...\Hugin) (Version: 2012.0.0 hg_a6e4184ad538 - The Hugin Development Team)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3006 - Packard Bell)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2372 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
Internet-TV für Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.1.8.2434 - IObit)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kontrola Windows Live Mesh ActiveX za daljinske veze (HKLM-x32\...\{19CBDE24-2761-49A5-816B-D2BA65D0CA8D}) (Version: 15.4.5722.2 - Microsoft Corporation)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (HKLM-x32\...\{CA227A9D-09BE-4BFB-9764-48FED2DA5454}) (Version: 15.4.5722.2 - Microsoft Corporation)
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.4 - Packard Bell)
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Camera Codec Pack (HKLM\...\{3FF70821-58E6-44DA-B512-095F547F3F18}) (Version: 16.4.1734.1104 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Proofing Tools 2013 - Español (HKLM-x32\...\{90150000-001F-0C0A-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Nero 11 DiscSpeed (HKLM-x32\...\{B8B03F99-F600-4D96-ADBD-2F384240FB9C}) (Version: 11.0.00400 - Nero AG)
Nero Control Center 10 (x32 Version: 10.2.11100.1.1 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.18100.8.8 - Nero AG) Hidden
Nero Core Components 11 (x32 Version: 11.0.15401.1.15 - Nero AG) Hidden
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.2.10500.2.100 - Nero AG)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero DiscSpeed 11 (x32 Version: 7.0.10400.2.100 - Nero AG) Hidden
Nero DiscSpeed 11 Help (CHM) (x32 Version: 11.0.10000 - Nero AG) Hidden
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.12000.21.100 - Nero AG)
Nero Express 10 Help (CHM) (x32 Version: 10.5.10200 - Nero AG) Hidden
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.5.10300 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11600.14.100 - Nero AG)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
nero.prerequisites.msi (x32 Version: 11.0.20008 - Nero AG) Hidden
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
Office Password Recovery PRO v1.0 (remove only) (HKLM-x32\...\Password Solutions - Office Password Recovery PRO) (Version: 1.0 - Password Solutions)
OLYMPUS Master 2 (HKLM-x32\...\{0815D55A-5EFF-4E1B-8C04-7035E914D90D}) (Version: 1.0.10 - OLYMPUS IMAGING CORP.)
OLYMPUS muvee theaterPack (HKLM-x32\...\{EC047FA6-E83D-4326-9195-E7D306C5B9A2}) (Version: 1.0.7 - OLYMPUS IMAGING CORP.)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM-x32\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation)
Packard Bell MyBackup (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.90 - NTI Corporation)
Packard Bell Power Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3007 - Packard Bell)
Packard Bell Recovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3004 - Packard Bell)
Packard Bell Registration (HKLM-x32\...\Packard Bell Registration) (Version: 1.04.3501 - Packard Bell)
Packard Bell ScreenSaver (HKLM-x32\...\Packard Bell Screensaver) (Version: 1.1.0811.2010 - Packard Bell )
Packard Bell Social Networks (HKLM-x32\...\InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9}) (Version: 2.0.2913 - CyberLink Corp.)
Packard Bell Social Networks (x32 Version: 2.0.2913 - CyberLink Corp.) Hidden
Packard Bell Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3502 - Packard Bell)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7177 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.36.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.36.0 - Renesas Electronics Corporation) Hidden
ScummVM 1.5.0 (HKLM-x32\...\ScummVM_is1) (Version:  - The ScummVM Team)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.13 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.13.104 - Skype Technologies S.A.)
Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.1 - IObit)
Sweet Home 3D version 4.2 (HKLM-x32\...\Sweet Home 3D_is1) (Version:  - eTeks)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab for Intel (HKLM-x32\...\{1EBDF6D2-CEA0-484C-A23E-2DDAD7FD0DD0}) (Version: 4.5.22.0 - Husdawg, LLC)
The Game Of Life by Hasbro (HKLM-x32\...\The Game Of Life by Hasbro1.0) (Version: 1.0 - Adnan_Boy 2008)
TVCenter (HKLM\...\{E29B2B35-C365-4C9A-8C5C-224E3B9A9ED1}) (Version: 6.3.0.584 - PCTV Systems)
TweakNow PowerPack (HKLM-x32\...\TweakNow PowerPack_is1) (Version: 4.3.0 - TweakNow.com)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.0.82.0 - Intel)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Urruneko konexioetarako Windows Live Mesh ActiveX kontrola (HKLM-x32\...\{7BA6DF02-B094-45D7-A3C9-BE3684253922}) (Version: 15.4.5722.2 - Microsoft Corporation)
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (HKLM-x32\...\{241E7104-937A-4366-AD57-8FDDDB003939}) (Version: 15.4.5722.2 - Microsoft Corporation)
Viber (HKCU\...\Viber) (Version: 3.0.0.133634 - Viber Media Inc)
Video Web Camera (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.3501.00 - CyberLink Corp.)
Video Web Camera (x32 Version: 1.5.3501.00 - CyberLink Corp.) Hidden
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Welcome Center (HKLM-x32\...\Packard Bell Welcome Center) (Version: 1.02.3501 - Packard Bell)
Windows Live Argazki Galeria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (HKLM-x32\...\{09B7C7EB-3140-4B5E-842F-9C79A7137139}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (HKLM-x32\...\{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Product Key Finder Pro® 2.3 (HKLM-x32\...\Windows Product Key Finder Pro®_is1) (Version:  - )
WinRAR 4.11 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (HKLM-x32\...\{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}) (Version: 15.4.5722.2 - Microsoft Corporation)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (HKLM-x32\...\{9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}) (Version: 15.4.5722.2 - Microsoft Corporation)
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (HKLM-x32\...\{E18B30AA-6E2D-480C-B918-AF61009F4010}) (Version: 15.4.5722.2 - Microsoft Corporation)
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ตัวควบคุม ActiveX ใน Windows Live Mesh สำหรับการเชื่อมต่อระยะไกล (ไทย) (HKLM-x32\...\{A2EDAEEB-C981-46D5-8163-CF8F5F640EEE}) (Version: 15.4.5722.2 - Microsoft Corporation)
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (HKLM-x32\...\{622DE1BE-9EDE-49D3-B349-29D64760342A}) (Version: 15.4.5722.2 - Microsoft Corporation)

==================== Restore Points  =========================

24-03-2014 00:32:06 Windows Update
24-03-2014 12:53:17 Windows Update
25-03-2014 19:59:41 Windows Update
25-03-2014 21:34:32 DMX_DriverMax Driver Installation
25-03-2014 21:36:12 DMX_DriverMax Driver Installation
25-03-2014 21:37:10 Gerätetreiber-Paketinstallation: Intel Corporation Grafikkarte
25-03-2014 21:51:19 Wiederherstellungsvorgang
27-03-2014 22:53:20 Removed IObit Apps Toolbar v8.9.

==================== Hosts content: ==========================

2009-07-13 22:34 - 2009-06-10 17:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {07A746F4-A1CE-4955-A5AE-BF68875215D9} - System32\Tasks\Sense-firefoxinstaller => C:\Program Files (x86)\Sense\Sense-firefoxinstaller.exe <==== ATTENTION
Task: {0B1958E9-C26C-4F31-B1B3-FC0CC7568085} - System32\Tasks\Sense-chromeinstaller => C:\Program Files (x86)\Sense\Sense-chromeinstaller.exe <==== ATTENTION
Task: {0C650EB0-61F2-47E3-8B06-4F10B3F971FF} - \Driver Booster Update No Task File
Task: {10CAB24F-1F26-407C-B94D-4A91A3F4D4D7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-15] (Google Inc.)
Task: {176B44EB-9069-4694-B652-DCA676444C61} - System32\Tasks\iWebar-firefoxinstaller => C:\Program Files (x86)\iWebar\iWebar-firefoxinstaller.exe
Task: {1901EDAD-1FBA-4338-9A40-ABE732A8F104} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1A8DB1B2-EE78-4984-A6D2-1FA225577093} - System32\Tasks\Driver Booster SkipUAC (Stefan) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-03-14] (IObit)
Task: {28E34266-838F-4F2A-8E4B-03B9256582DB} - System32\Tasks\Sense-codedownloader => C:\Program Files (x86)\Sense\Sense-codedownloader.exe <==== ATTENTION
Task: {29B4937A-63D5-489A-85F3-A2C4CDC7CB90} - System32\Tasks\ASC7_SkipUac_Stefan => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2014-03-10] (IObit)
Task: {2E206D55-094E-4A7D-943C-5EA8C6A1A882} - System32\Tasks\Sense-enabler => C:\Program Files (x86)\Sense\Sense-enabler.exe <==== ATTENTION
Task: {42091BFC-F807-4212-BE75-F2D4C312365F} - System32\Tasks\ShopperPro => C:\Program Files (x86)\ShopperPro\ShopperPro.exe
Task: {4C657877-0D70-44A6-ABF7-A93E5A0F854F} - System32\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-15] (Google Inc.)
Task: {6599CE05-5FF9-47C6-9990-BBC477F7039B} - System32\Tasks\SmartDefrag3_Update => C:\Program Files (x86)\IObit\Smart Defrag 3\AutoUpdate.exe [2014-03-10] (IObit)
Task: {6B81ABA8-283D-4263-BBCC-1857D493BE1F} - System32\Tasks\ShopperProJSUpd => C:\Program Files (x86)\ShopperPro\updater.exe
Task: {73A3E841-0A6C-47F3-AA2F-4ACF11B10A12} - System32\Tasks\iWebar-codedownloader => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe
Task: {83156F4A-836D-4AC7-AC4F-AEE6D46FF543} - System32\Tasks\iWebar-enabler => C:\Program Files (x86)\iWebar\iWebar-enabler.exe <==== ATTENTION
Task: {96B1391C-2A1D-41DD-A7A3-4C6415BAE8C5} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9AD09D92-CB95-4588-89EA-AAF31D2614A0} - \GoforFilesUpdate No Task File
Task: {A536100D-E6FD-482B-87E6-A0BBA3308ED3} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: {AC492AB5-7C00-4ADD-9211-AA859AC4DB4C} - System32\Tasks\Sense-updater => C:\Program Files (x86)\Sense\Sense-updater.exe <==== ATTENTION
Task: {B74B392F-1749-465B-849A-E7EA8AA90C9D} - System32\Tasks\iWebar-chromeinstaller => C:\Program Files (x86)\iWebar\iWebar-chromeinstaller.exe
Task: {BD1A04DA-FE5F-4809-BC3F-44013F7B8863} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {CD173C1D-CAB4-4E99-8B4A-56ECAEAD7DC3} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-02-13] (IObit)
Task: {D6FB96A5-71F8-45B5-9A8A-71DE9C4366A3} - System32\Tasks\AdobeAAMUpdater-1.0-Stefan-PC-Stefan => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-28] (Adobe Systems Incorporated)
Task: {E81D996E-0585-4EA9-B966-3D79E4A523ED} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe
Task: {F20C9098-41B9-49EC-9793-B5C74B9DB364} - System32\Tasks\iWebar-updater => C:\Program Files (x86)\iWebar\iWebar-updater.exe
Task: {F3A65D36-D516-4F71-AC78-A79445286190} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2014-03-12] (IObit)
Task: {F8494C16-225C-4B09-BE92-EFD742052583} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\iWebar-chromeinstaller.job => C:\Program Files (x86)\iWebar\iWebar-chromeinstaller.exe
Task: C:\Windows\Tasks\iWebar-codedownloader.job => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe
Task: C:\Windows\Tasks\iWebar-enabler.job => C:\Program Files (x86)\iWebar\iWebar-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\iWebar-firefoxinstaller.job => C:\Program Files (x86)\iWebar\iWebar-firefoxinstaller.exe
Task: C:\Windows\Tasks\iWebar-updater.job => C:\Program Files (x86)\iWebar\iWebar-updater.exe
Task: C:\Windows\Tasks\Sense-chromeinstaller.job => C:\Program Files (x86)\Sense\Sense-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-codedownloader.job => C:\Program Files (x86)\Sense\Sense-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-enabler.job => C:\Program Files (x86)\Sense\Sense-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-firefoxinstaller.job => C:\Program Files (x86)\Sense\Sense-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-updater.job => C:\Program Files (x86)\Sense\Sense-updater.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-03-21 14:39 - 2014-03-04 10:35 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-11-05 18:51 - 2014-02-13 16:44 - 01214240 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe
2013-11-05 18:51 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll
2014-02-06 13:28 - 2013-12-09 10:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 12:17 - 2014-01-20 12:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 12:16 - 2014-01-20 12:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00014280 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2011-03-09 13:13 - 2011-03-09 13:13 - 00465640 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\sqlite3.dll
2012-06-16 07:04 - 2011-10-27 21:27 - 00623912 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2011-10-28 03:27 - 2011-10-28 03:27 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2011-03-09 13:12 - 2011-03-09 13:12 - 01081664 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\ACE.dll
2011-03-09 13:12 - 2011-03-09 13:12 - 00125760 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\MailConverter32.dll
2013-11-05 18:51 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madExcept_.bpl
2013-11-05 18:51 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madBasic_.bpl
2013-11-05 18:51 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madDisAsm_.bpl
2014-02-13 18:58 - 2014-02-13 18:58 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\aa739380ca2b2fc7366d464d2f2301ac\IsdiInterop.ni.dll
2011-05-31 05:33 - 2010-09-13 21:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-11-05 18:51 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:56E2E879

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: Adobe ARM => c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe
MSCONFIG\startupreg: ApplePhotoStreams => c:\program files (x86)\common files\apple\internet services\applephotostreams.exe
MSCONFIG\startupreg: ETDCtrl => %programfiles%\elantech\etdctrl.exe
MSCONFIG\startupreg: GarminExpressTrayApp => c:\program files (x86)\garmin\express tray\expresstray.exe
MSCONFIG\startupreg: GoogleDriveSync => "c:\program files (x86)\google\drive\googledrivesync.exe" /autostart
MSCONFIG\startupreg: HotKeysCmds => c:\windows\system32\hkcmd.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: IAStorIcon => c:\program files (x86)\intel\intel(r) rapid storage technology\iastoricon.exe
MSCONFIG\startupreg: IgfxTray => c:\windows\system32\igfxtray.exe
MSCONFIG\startupreg: iTunesHelper => c:\program files (x86)\itunes\ituneshelper.exe
MSCONFIG\startupreg: LManager => c:\program files (x86)\launch manager\lmanager.exe
MSCONFIG\startupreg: OM2_Monitor => "c:\program files (x86)\olympus\olympus master 2\firststart.exe" /om
MSCONFIG\startupreg: Persistence => c:\windows\system32\igfxpers.exe
MSCONFIG\startupreg: Power Management => c:\program files\packard bell\packard bell power management\epowertray.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RemoTerm.exe => c:\program files (x86)\common files\pctv systems\remoterm\remoterm.exe
MSCONFIG\startupreg: RtHDVCpl => "c:\program files\realtek\audio\hda\ravcpl64.exe" -s
MSCONFIG\startupreg: SearchSettings => c:\program files (x86)\common files\spigot\search settings\searchsettings.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/28/2014 03:24:05 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/28/2014 01:25:23 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/28/2014 01:25:22 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (03/27/2014 07:58:02 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/27/2014 07:57:58 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/27/2014 07:57:30 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/27/2014 07:44:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (03/27/2014 07:45:29 PM) (Source: Service Control Manager) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/27/2014 07:44:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SecureUpdate" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (03/28/2014 03:24:05 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (03/28/2014 01:25:23 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (03/28/2014 01:25:22 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files (x86)\innovative solutions\drivermax\DPInst\ia64\dpinst.exe

Error: (03/27/2014 07:58:02 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Stefan\Desktop\esetsmartinstaller_enu.exe

Error: (03/27/2014 07:57:58 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Stefan\Desktop\esetsmartinstaller_enu.exe

Error: (03/27/2014 07:57:30 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Stefan\Desktop\esetsmartinstaller_enu.exe

Error: (03/27/2014 07:44:55 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2014-03-25 18:23:56.873
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\Desktop\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:56.793
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\Desktop\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:56.643
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:56.556
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:35.376
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:35.253
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:43:36.386
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:43:36.199
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:38:49.656
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:38:49.563
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 39%
Total physical RAM: 5995.86 MB
Available physical RAM: 3642.55 MB
Total Pagefile: 11989.9 MB
Available Pagefile: 9167.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:911.41 GB) (Free:534.16 GB) NTFS
Drive e: (STEFAN USB) (Removable) (Total:29.8 GB) (Free:29.12 GB) FAT32
Drive f: (Elements) (Fixed) (Total:596.02 GB) (Free:367.3 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E4C2EB8E)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 30 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

========================================================
Disk: 2 (Size: 596 GB) (Disk ID: ACDD9B22)

Partition: GPT Partition Type.

==================== End Of Log ============================
Als ich nach dem scan mit ESET meinen antivirus wieder einschaltet hat es folgende Datei entfernt und in die Quarantäne gepackt:
Code:
ATTFilter
Typ:	Datei
Quelle:	C:\Users\Stefan\Downloads\ProductKeyFinder.exe
Status:	Infiziert
Quarantäne-Objekt:	55c7b131.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.03.16.18
Virendefinitionsdatei:	7.11.139.166
Gefunden:	TR/Trash.Gen
Datum/Uhrzeit:	28.03.2014, 03:30
Für den Scan mit ESET hatte ich außerdem alle meine externen Datenträger (externe Festplatte, USB-Stick und Handy) angeschlossen. Das Programm hatte gesagt man solle dies machen. Ich weiß nicht, ob das jetzt irgendetwas an deiner Diagnose ändert...

Alle erwähnten Geräte waren auch für den letzten von dir angeordneten Scan mit Frst angeschlossen und werden es auch für den Rest deiner Diagnose bleiben.

Ansonsten bin ich mit den Schritten 1-7 Fertig. Hoffe du kannst mir helfen...

Alt 28.03.2014, 23:41   #9
Bootsektor
Ruhe in Frieden
† 2019
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


Hallo 90stefan,

Meine Hinweise bezüglich der Antivirenprogramme und des Advanced System Cares hattest du gelesen?

Schritt 1
Poste mir bitte noch das Log von Malwarebytes.

Schritt 2
Lösche bitte den Fund auf F:\Zeug\Eigene Musik\Musik\musikmix\mukke von manne\das haus am see peter fox onion.wma


Schritt 3

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
BHO: iWebar - {11111111-1111-1111-1111-110311551110} - C:\Program Files (x86)\iWebar\iWebar-bho64.dll No File
BHO: Sense - {11111111-1111-1111-1111-110411821192} - C:\Program Files (x86)\Sense\Sense-bho64.dll No File
BHO-x32: Groove GFS Browser Helper - {4DB74D06-491C-440D-305E-012400990F3E} - C:\Windows\SysWOW64\d3ddcsx_42.dll ()
BHO-x32: Adblock - {EF5F59BA-B2AB-48D8-9747-54DF806C73B8} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
FF Extension: iWebar - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com [2014-03-23]
FF Extension: Start Page - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-03-25]
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll No File
S2 SecureUpdateSvc; C:\Program Files (x86)\Secure Speed Dial\IE\SecureUpdate.exe [X]
Task: {07A746F4-A1CE-4955-A5AE-BF68875215D9} - System32\Tasks\Sense-firefoxinstaller => C:\Program Files (x86)\Sense\Sense-firefoxinstaller.exe <==== ATTENTION
Task: {0B1958E9-C26C-4F31-B1B3-FC0CC7568085} - System32\Tasks\Sense-chromeinstaller => C:\Program Files (x86)\Sense\Sense-chromeinstaller.exe <==== ATTENTION
Task: {0C650EB0-61F2-47E3-8B06-4F10B3F971FF} - \Driver Booster Update No Task File
Task: {176B44EB-9069-4694-B652-DCA676444C61} - System32\Tasks\iWebar-firefoxinstaller => C:\Program Files (x86)\iWebar\iWebar-firefoxinstaller.exe
Task: {28E34266-838F-4F2A-8E4B-03B9256582DB} - System32\Tasks\Sense-codedownloader => C:\Program Files (x86)\Sense\Sense-codedownloader.exe <==== ATTENTION
Task: {2E206D55-094E-4A7D-943C-5EA8C6A1A882} - System32\Tasks\Sense-enabler => C:\Program Files (x86)\Sense\Sense-enabler.exe <==== ATTENTION
Task: {42091BFC-F807-4212-BE75-F2D4C312365F} - System32\Tasks\ShopperPro => C:\Program Files (x86)\ShopperPro\ShopperPro.exe
Task: {73A3E841-0A6C-47F3-AA2F-4ACF11B10A12} - System32\Tasks\iWebar-codedownloader => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe
Task: {83156F4A-836D-4AC7-AC4F-AEE6D46FF543} - System32\Tasks\iWebar-enabler => C:\Program Files (x86)\iWebar\iWebar-enabler.exe <==== ATTENTION
Task: {9AD09D92-CB95-4588-89EA-AAF31D2614A0} - \GoforFilesUpdate No Task File
Task: {AC492AB5-7C00-4ADD-9211-AA859AC4DB4C} - System32\Tasks\Sense-updater => C:\Program Files (x86)\Sense\Sense-updater.exe <==== ATTENTION
Task: {B74B392F-1749-465B-849A-E7EA8AA90C9D} - System32\Tasks\iWebar-chromeinstaller => C:\Program Files (x86)\iWebar\iWebar-chromeinstaller.exe
Task: {F20C9098-41B9-49EC-9793-B5C74B9DB364} - System32\Tasks\iWebar-updater => C:\Program Files (x86)\iWebar\iWebar-updater.exe
Task: C:\Windows\Tasks\iWebar-chromeinstaller.job => C:\Program Files (x86)\iWebar\iWebar-chromeinstaller.exe
Task: C:\Windows\Tasks\iWebar-codedownloader.job => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe
Task: C:\Windows\Tasks\iWebar-enabler.job => C:\Program Files (x86)\iWebar\iWebar-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\iWebar-firefoxinstaller.job => C:\Program Files (x86)\iWebar\iWebar-firefoxinstaller.exe
Task: C:\Windows\Tasks\iWebar-updater.job => C:\Program Files (x86)\iWebar\iWebar-updater.exe
Task: C:\Windows\Tasks\Sense-chromeinstaller.job => C:\Program Files (x86)\Sense\Sense-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-codedownloader.job => C:\Program Files (x86)\Sense\Sense-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-enabler.job => C:\Program Files (x86)\Sense\Sense-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-firefoxinstaller.job => C:\Program Files (x86)\Sense\Sense-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-updater.job => C:\Program Files (x86)\Sense\Sense-updater.exe <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:56E2E879
C:\Program Files (x86)\ShopperPro
C:\Program Files (x86)\Sense
C:\Program Files (x86)\iWebar
C:\Windows\SysWOW64\d3ddcsx_42.dll
C:\Windows\System32\d3ddcsx_42.dll
2014-03-28 03:17 - 2014-03-23 21:17 - 00002492 _____ () C:\Windows\Tasks\iWebar-firefoxinstaller.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001782 _____ () C:\Windows\Tasks\iWebar-updater.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001738 _____ () C:\Windows\Tasks\iWebar-codedownloader.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001616 _____ () C:\Windows\Tasks\iWebar-enabler.job
2014-03-28 03:16 - 2014-03-23 21:16 - 00003410 _____ () C:\Windows\Tasks\iWebar-chromeinstaller.job
2014-03-28 03:02 - 2012-05-10 03:21 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00003406 _____ () C:\Windows\Tasks\Sense-chromeinstaller.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00002488 _____ () C:\Windows\Tasks\Sense-firefoxinstaller.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001776 _____ () C:\Windows\Tasks\Sense-updater.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001732 _____ () C:\Windows\Tasks\Sense-codedownloader.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001610 _____ () C:\Windows\Tasks\Sense-enabler.job
2014-03-24 10:17 - 2014-03-24 10:17 - 00004806 _____ () C:\Windows\System32\Tasks\Sense-updater
2014-03-24 10:17 - 2014-03-24 10:17 - 00004762 _____ () C:\Windows\System32\Tasks\Sense-codedownloader
2014-03-24 10:17 - 2014-03-24 10:17 - 00004640 _____ () C:\Windows\System32\Tasks\Sense-enabler
2014-03-23 21:17 - 2014-03-23 21:17 - 00004812 _____ () C:\Windows\System32\Tasks\iWebar-updater
2014-03-23 21:17 - 2014-03-23 21:17 - 00004768 _____ () C:\Windows\System32\Tasks\iWebar-codedownloader
2014-03-23 21:17 - 2014-03-23 21:17 - 00004646 _____ () C:\Windows\System32\Tasks\iWebar-enabler
2014-03-23 21:14 - 2014-03-23 21:14 - 00004506 _____ () C:\Windows\System32\Tasks\ShopperPro
2014-03-23 21:14 - 2014-03-23 21:14 - 00003572 _____ () C:\Windows\System32\Tasks\ShopperProJSUpd

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Schritt 4
Starte noch einmal FRST.
  • Setze den Haken bei addition.txt und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
  • Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.
Alt 29.03.2014, 01:46   #10
90stefan
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


hallo, ja hatte ich gelesen und alles brav ausgeschaltet. mache gerade den mbam scan

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 28.03.2014
Suchlauf-Zeit: 20:39:39
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.0.1000
Malware Datenbank: v2014.03.28.09
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Stefan

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 267083
Verstrichene Zeit: 20 Min, 24 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 28
PUP.Optional.Diamonddata, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{055AF109-DE93-4160-BCFC-7DA70ECAA020}, , [7f2a44c405763006e6b29e6be71b3ac6], 
PUP.Optional.Diamonddata, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{055AF109-DE93-4160-BCFC-7DA70ECAA020}, , [7f2a44c405763006e6b29e6be71b3ac6], 
PUP.Optional.Delta.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [a80129df5b209d99115750ebf40e56aa], 
PUP.Optional.Delta.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [a80129df5b209d99115750ebf40e56aa], 
PUP.Optional.Delta.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [991046c2b1cacd690a5d88b3b34fc739], 
PUP.Optional.Delta.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [991046c2b1cacd690a5d88b3b34fc739], 
PUP.Optional.DVDVideoSoft.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}, , [eebba5635c1f78be59b558ae0af834cc], 
PUP.Optional.DVDVideoSoft.A, HKLM\SOFTWARE\CLASSES\DVDVideoSoft.WebPageAdjuster.1, , [eebba5635c1f78be59b558ae0af834cc], 
PUP.Optional.DVDVideoSoft.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\DVDVideoSoft.WebPageAdjuster.1, , [eebba5635c1f78be59b558ae0af834cc], 
PUP.Optional.DVDVideoSoft.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}, , [eebba5635c1f78be59b558ae0af834cc], 
PUP.Optional.DVDVideoSoft.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXTENSIONS\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}, , [eebba5635c1f78be59b558ae0af834cc], 
PUP.Optional.ShopperPro.A, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO, , [73360602fd7ee94d29ebaf904cb603fd], 
PUP.Optional.ShopperPro.A, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO.1, , [1a8f31d762192d09d242fa4507fb6e92], 
PUP.Optional.ShopperPro.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ShopperPro.ShopperProBHO, , [1a8f31d762192d09d242fa4507fb6e92], 
PUP.Optional.ShopperPro.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ShopperPro.ShopperProBHO.1, , [1a8f31d762192d09d242fa4507fb6e92], 
PUP.Optional.Diamondata.A, HKLM\SOFTWARE\WOW6432NODE\diamondata, , [6c3da7613c3f65d162c84a3bd42ffb05], 
PUP.Optional.diamondata.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\diamondata, , [e7c27494fe7d340288dc5a2431d202fe], 
PUP.Optional.iWebar.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\iWebar, , [fcad1bed3b40e056d7700b564ab8847c], 
PUP.Optional.Delta.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA, , [3d6c0008ec8f6fc799a7592aad56e11f], 
PUP.Optional.Delta.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA\IESTRG, , [c6e355b35a212016c17ec5be649f04fc], 
PUP.Optional.YouTubeAccelerator.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOBZO\YouTube Accelerator, , [5a4f36d2aad12a0c7f4e5c356c97e51b], 
PUP.Optional.BProtector.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\BPROTECTSETTINGS, , [3e6bde2a9be0aa8c730d2956986bc53b], 
PUP.Topckit, HKU\S-1-5-21-2714067933-2837961611-1328175291-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Topckit, , [edbcd92f6516c076893dac3343bf23dd], 
PUP.Optional.iWebar.A, HKU\S-1-5-21-2714067933-2837961611-1328175291-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\iWebar, , [59506b9d007bfb3b2324f46d679b7090], 
PUP.Optional.CrossRider.M, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110311551110}, , [2b7e66a247340a2c9b2c5cb1cc3812ee], 
PUP.Optional.CrossRider.M, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311551110}, , [2b7e66a247340a2c9b2c5cb1cc3812ee], 
PUP.Optional.CrossRider.M, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110411821192}, , [4c5dfa0efb80979ff0d79c7128dc59a7], 
PUP.Optional.CrossRider.M, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411821192}, , [4c5dfa0efb80979ff0d79c7128dc59a7], 

Registrierungswerte: 3
PUP.Optional.Delta.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA|lastB, , [3d6c0008ec8f6fc799a7592aad56e11f], 
PUP.Optional.Delta.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA\IESTRG|tlbrsrchurl, , [c6e355b35a212016c17ec5be649f04fc], 
PUP.Optional.DVDVideoSoft.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\COMMON FILES\DVDVIDEOSOFT\PLUGINS\DVDVIDEOSOFTBROWSEREXTENSION.CRX, 1, , [6346b25644377bbb927082d582804db3]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 65
PUP.Optional.Topckit, C:\Program Files (x86)\Topckit, , [8f1a40c897e41c1a488972d3ac56b848], 
PUP.Optional.Diamondata.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb, , [eabfbd4b2754b086398e3b1717eb619f], 
PUP.Optional.Diamondata.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb\1.0.0_0, , [eabfbd4b2754b086398e3b1717eb619f], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\css, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\Img, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\plugins, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0\icons, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0\scripts, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp, , [1a8fc840c5b66bcb1ae4be95b34fe21e], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0, , [1a8fc840c5b66bcb1ae4be95b34fe21e], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\defaults, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\defaults\preferences, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\userCode, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\locale, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\locale\en-US, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\el-GR, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\da-DK, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\de-DE, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\es-ES, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fi-FI, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fr-FR, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\hu-HU, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\it-IT, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ja-JP, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\nl-NL, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pl-PL, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-BR, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-PT, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ru-RU, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sk-SK, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sl-SI, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sv-SE, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\tr-TR, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\vi-VN, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-CN, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-TW, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\content, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\de-DE, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\en, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\en-US, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\es-ES, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\fr-FR, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\it-IT, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\jp-JP, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\ru-RU, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Users\Stefan\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter, , [367329dfaccfe74f11f2d48336cc946c], 
PUP.Optional.DVDVideoSoft.A, C:\Users\Stefan\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\Themes, , [367329dfaccfe74f11f2d48336cc946c], 

Dateien: 315
PUP.Optional.ShopperPro.A, C:\Users\Stefan\AppData\Local\Temp\Install_18621\shopperpro.exe, , [c0e9b850007b10262ced80c247ba7789], 
PUP.Optional.Goobzo.A, C:\Users\Stefan\AppData\Local\Temp\Install_18621\yta.exe, , [fbaeb157bdbeb97dab17bd7e8b75926e], 
PUP.Optional.Sense.A, C:\Windows\Tasks\Sense-chromeinstaller.job, , [cedb8f7995e641f51bee2e37b44edc24], 
PUP.Optional.Sense.A, C:\Windows\Tasks\Sense-codedownloader.job, , [1f8a838598e35fd7dd2c2342c63c5ca4], 
PUP.Optional.Sense.A, C:\Windows\Tasks\Sense-enabler.job, , [4663818790eb290d3ccdb8ad3fc33fc1], 
PUP.Optional.Sense.A, C:\Windows\Tasks\Sense-firefoxinstaller.job, , [268380881566b28452b78ed7e31fb848], 
PUP.Optional.Sense.A, C:\Windows\Tasks\Sense-updater.job, , [3079e127631846f05dacd39222e0ad53], 
PUP.Optional.iWebar.A, C:\Windows\Tasks\iWebar-chromeinstaller.job, , [dacf1eea0f6ce45267c9dfa543c007f9], 
PUP.Optional.iWebar.A, C:\Windows\Tasks\iWebar-codedownloader.job, , [456444c4d3a8fa3c9799b9cbfb084ab6], 
PUP.Optional.iWebar.A, C:\Windows\Tasks\iWebar-enabler.job, , [aefb98705823c3736dc3daaac1423bc5], 
PUP.Optional.iWebar.A, C:\Windows\Tasks\iWebar-firefoxinstaller.job, , [9f0af612b3c86fc7042ce4a0ea19916f], 
PUP.Optional.iWebar.A, C:\Windows\Tasks\iWebar-updater.job, , [05a4d335afcc1a1c67c9b4d0cf3410f0], 
PUP.Optional.Topckit, C:\Program Files (x86)\Topckit\Topckit_2012.exe, , [8f1a40c897e41c1a488972d3ac56b848], 
PUP.Optional.Diamondata.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb\1.0.0_0\background.js, , [eabfbd4b2754b086398e3b1717eb619f], 
PUP.Optional.Diamondata.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb\1.0.0_0\content.js, , [eabfbd4b2754b086398e3b1717eb619f], 
PUP.Optional.Diamondata.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb\1.0.0_0\icon.png, , [eabfbd4b2754b086398e3b1717eb619f], 
PUP.Optional.Diamondata.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb\1.0.0_0\manifest.json, , [eabfbd4b2754b086398e3b1717eb619f], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\background.html, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\background.js, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\config.json, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\dea-128.png, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\dea-48.png, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\empty-favicon.ico, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\jquery.js, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\manifest.json, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\newtab.html, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\newtab.js, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\redirect.html, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\redirect.js, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\css\newtab.css, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\Img\no_thumb.png, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\Img\search-icon.png, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\plugins\npThumbExtractor.dll, , [37724fb986f5de583cc097bc81818b75], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0\background.html, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0\config.json, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0\manifest.json, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0\icons\ss-128.png, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0\icons\ss-48.png, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0\scripts\background.js, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0\scripts\loader_1036.js, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0\scripts\utils.js, , [8e1b55b32259fd39b24b64ef847eaa56], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0\amazon-128.png, , [1a8fc840c5b66bcb1ae4be95b34fe21e], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0\amazon-19.png, , [1a8fc840c5b66bcb1ae4be95b34fe21e], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0\amazon-48.png, , [1a8fc840c5b66bcb1ae4be95b34fe21e], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0\background.js, , [1a8fc840c5b66bcb1ae4be95b34fe21e], 
PUP.Optional.SlickSavings.A, C:\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0\manifest.json, , [1a8fc840c5b66bcb1ae4be95b34fe21e], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome.manifest, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\install.rdf, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\background.html, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\baseObject.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\browser.xul, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\dialog.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\ffCoreFilesIndex.txt, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\main.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\options.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\options.xul, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\platformVersion.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\search_dialog.xul, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\asyncDB.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\background.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\browserAction.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\contextMenu.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\dbManager.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\dom_bg.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\fileManager.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\firefox.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\firefoxNotifications.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\firefoxOmnibox.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\message.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\pageAction.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\request.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\tabs.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\webRequest.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\windowsMessagingHandler.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\addressBarChangeObserver.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\console.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\consts.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\delegate.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\extensionDataStore.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\folderIOWrapper.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\httpObserver.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\IDBWrapper.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\installer.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\logFile.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\prefs.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\progressListenerObserver.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\registry.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\reloadObserver.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\reports.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\requestObject.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\searchSettings.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\uninstallObserver.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\updateManager.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\utils.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\xhr.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\defaults\preferences\prefs.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\manifest.xml, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins.json, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\207_dbWrapper.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\102_dealply_m.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\104_jollywallet_m.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\13_CrossriderAppUtils.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\14_CrossriderUtils.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\16_FFAppAPIWrapper.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\177_crossriderDashboard.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\17_jQuery.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\182_openUrl.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\183_tabsWrapper.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\184_noproblemppc_m.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\1_base.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\21_debug.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\223_imonomy_m.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\226_set_campaign_id_m.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\22_resources.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\28_initializer.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\47_resources_background.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\4_jquery_1_7_1.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\64_appApiMessage.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\72_appApiValidation.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\78_CrossriderInfo.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\91_monetizationLoader.js.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\93_superfish_no_coupons_m.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\98_omniCommands.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\userCode\background.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\userCode\extension.js, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\locale\en-US\translations.dtd, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\button1.png, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\button2.png, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\button3.png, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\button4.png, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\button5.png, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\crossrider_statusbar.png, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\icon128.png, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\icon16.png, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\icon24.png, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\icon48.png, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\panelarrow-up.png, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\popup.html, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\skin.css, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.CrossRider.A, C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\update.css, , [6a3f40c83c3f5ed8c7273e16cc36da26], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\DVDVideoSoft.DVSiTunes.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\DVDVideoSoft.DVSVideoDownloader.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\DVDVideoSoft.MediaTagsEditor.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\DVDVideoSoft.Presets.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\DVDVideoSoft.Resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\DVDVideoSoft.TaskbarManager.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\DVDVideoSoft.TroubleShooter.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\DVDVideoSoft.VideoFileToIPOD.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\DVDVideoSoft.YouTubeResources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\DVDVideoSoft.YTConverterAppExt.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\FreeYouTubeToMP3Converter.exe, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\FreeYouTubeToMP3Converter.xml, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\FreeYouTubeToMP3ConverterProfile.xml, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\FreeYouTubeToMP3ConverterProfileD.xml, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\Newtonsoft.Json.Net20.Merged.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\taglib-sharp.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ytgroovlc.exe, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\el-GR\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\el-GR\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\el-GR\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\el-GR\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\el-GR\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\da-DK\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\da-DK\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\da-DK\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\da-DK\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\da-DK\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\de-DE\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\de-DE\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\de-DE\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\de-DE\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\de-DE\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\es-ES\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\es-ES\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\es-ES\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\es-ES\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\es-ES\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fi-FI\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fi-FI\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fi-FI\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fi-FI\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fi-FI\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fr-FR\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fr-FR\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fr-FR\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fr-FR\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\fr-FR\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\hu-HU\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\hu-HU\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\hu-HU\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\hu-HU\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\hu-HU\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\it-IT\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\it-IT\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\it-IT\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\it-IT\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\it-IT\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ja-JP\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ja-JP\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ja-JP\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ja-JP\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ja-JP\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\nl-NL\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\nl-NL\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\nl-NL\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\nl-NL\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\nl-NL\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pl-PL\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pl-PL\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pl-PL\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pl-PL\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pl-PL\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-BR\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-BR\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-BR\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-BR\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-BR\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-PT\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-PT\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-PT\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-PT\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\pt-PT\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ru-RU\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ru-RU\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ru-RU\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ru-RU\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\ru-RU\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sk-SK\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sk-SK\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sk-SK\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sk-SK\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sk-SK\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sl-SI\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sl-SI\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sl-SI\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sl-SI\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sl-SI\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sv-SE\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sv-SE\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sv-SE\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sv-SE\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\sv-SE\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\tr-TR\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\tr-TR\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\tr-TR\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\tr-TR\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\tr-TR\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\vi-VN\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\vi-VN\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\vi-VN\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\vi-VN\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\vi-VN\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-CN\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-CN\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-CN\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-CN\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-CN\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-TW\DVDVideoSoft.AppFx.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-TW\DVDVideoSoft.DialogForms.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-TW\DVDVideoSoft.Resources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-TW\DVDVideoSoft.YouTubeResources.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\DVDVideoSoft\Free YouTube to Mp3 Converter\zh-TW\FreeYouTubeToMP3Converter.resources.dll, , [01a8e91f8deee6506b9672e5db27ce32], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\btn_list_center.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\btn_list_left.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\btn_list_right.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\btn_mp3_list_left.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\download.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\dvdvideosoft.ico, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\dvs_ie_plugin.js, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\headphone.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\youtube_mp3_downloader_32_32.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\youtube_video_downloader_32_32.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome.manifest, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\install.rdf, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\license.txt, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\content\dvsyoutubedownloader.js, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\content\dvsyoutubedownloader.xul, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\de-DE\dvsmenuextoverlay.dtd, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\de-DE\main.properties, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\en\dvsmenuextoverlay.dtd, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\en\main.properties, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\en-US\dvsmenuextoverlay.dtd, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\en-US\main.properties, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\es-ES\dvsmenuextoverlay.dtd, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\es-ES\main.properties, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\fr-FR\dvsmenuextoverlay.dtd, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\fr-FR\main.properties, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\it-IT\dvsmenuextoverlay.dtd, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\it-IT\main.properties, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\jp-JP\dvsmenuextoverlay.dtd, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\jp-JP\main.properties, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\ru-RU\dvsmenuextoverlay.dtd, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\chrome\locale\ru-RU\main.properties, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\backbar.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\download.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\download_mp3_btn.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\download_video_btn.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\dvdvideosoft_16_16.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\dvdvideosoft_32_32.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\dvsmenuext-icon.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\dvsmenuext-youtubetodvd.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\dvsmenuext-youtubetoiphone.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\dvsmenuext-youtubetoipod.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\dvsmenuext-youtubetomp3.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\dvsmenuext-ytvdownloader.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\dvsmenuextoverlay.css, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\dvsyoutubedownloader.css, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\headphone.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\skin\small.png, , [6346b25644377bbb927082d582804db3], 
PUP.Optional.DVDVideoSoft.A, C:\Users\Stefan\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\FreeYouTubeToMP3ConverterProfile.xml, , [367329dfaccfe74f11f2d48336cc946c], 

Physische Sektoren: 0
(No malicious items detected)


(end)
Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Stefan at 2014-03-28 20:44:58 Run:1
Running from C:\Users\Stefan\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
BHO: iWebar - {11111111-1111-1111-1111-110311551110} - C:\Program Files (x86)\iWebar\iWebar-bho64.dll No File
BHO: Sense - {11111111-1111-1111-1111-110411821192} - C:\Program Files (x86)\Sense\Sense-bho64.dll No File
BHO-x32: Groove GFS Browser Helper - {4DB74D06-491C-440D-305E-012400990F3E} - C:\Windows\SysWOW64\d3ddcsx_42.dll ()
BHO-x32: Adblock - {EF5F59BA-B2AB-48D8-9747-54DF806C73B8} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
FF Extension: iWebar - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com [2014-03-23]
FF Extension: Start Page - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-03-25]
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll No File
S2 SecureUpdateSvc; C:\Program Files (x86)\Secure Speed Dial\IE\SecureUpdate.exe [X]
Task: {07A746F4-A1CE-4955-A5AE-BF68875215D9} - System32\Tasks\Sense-firefoxinstaller => C:\Program Files (x86)\Sense\Sense-firefoxinstaller.exe <==== ATTENTION
Task: {0B1958E9-C26C-4F31-B1B3-FC0CC7568085} - System32\Tasks\Sense-chromeinstaller => C:\Program Files (x86)\Sense\Sense-chromeinstaller.exe <==== ATTENTION
Task: {0C650EB0-61F2-47E3-8B06-4F10B3F971FF} - \Driver Booster Update No Task File
Task: {176B44EB-9069-4694-B652-DCA676444C61} - System32\Tasks\iWebar-firefoxinstaller => C:\Program Files (x86)\iWebar\iWebar-firefoxinstaller.exe
Task: {28E34266-838F-4F2A-8E4B-03B9256582DB} - System32\Tasks\Sense-codedownloader => C:\Program Files (x86)\Sense\Sense-codedownloader.exe <==== ATTENTION
Task: {2E206D55-094E-4A7D-943C-5EA8C6A1A882} - System32\Tasks\Sense-enabler => C:\Program Files (x86)\Sense\Sense-enabler.exe <==== ATTENTION
Task: {42091BFC-F807-4212-BE75-F2D4C312365F} - System32\Tasks\ShopperPro => C:\Program Files (x86)\ShopperPro\ShopperPro.exe
Task: {73A3E841-0A6C-47F3-AA2F-4ACF11B10A12} - System32\Tasks\iWebar-codedownloader => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe
Task: {83156F4A-836D-4AC7-AC4F-AEE6D46FF543} - System32\Tasks\iWebar-enabler => C:\Program Files (x86)\iWebar\iWebar-enabler.exe <==== ATTENTION
Task: {9AD09D92-CB95-4588-89EA-AAF31D2614A0} - \GoforFilesUpdate No Task File
Task: {AC492AB5-7C00-4ADD-9211-AA859AC4DB4C} - System32\Tasks\Sense-updater => C:\Program Files (x86)\Sense\Sense-updater.exe <==== ATTENTION
Task: {B74B392F-1749-465B-849A-E7EA8AA90C9D} - System32\Tasks\iWebar-chromeinstaller => C:\Program Files (x86)\iWebar\iWebar-chromeinstaller.exe
Task: {F20C9098-41B9-49EC-9793-B5C74B9DB364} - System32\Tasks\iWebar-updater => C:\Program Files (x86)\iWebar\iWebar-updater.exe
Task: C:\Windows\Tasks\iWebar-chromeinstaller.job => C:\Program Files (x86)\iWebar\iWebar-chromeinstaller.exe
Task: C:\Windows\Tasks\iWebar-codedownloader.job => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe
Task: C:\Windows\Tasks\iWebar-enabler.job => C:\Program Files (x86)\iWebar\iWebar-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\iWebar-firefoxinstaller.job => C:\Program Files (x86)\iWebar\iWebar-firefoxinstaller.exe
Task: C:\Windows\Tasks\iWebar-updater.job => C:\Program Files (x86)\iWebar\iWebar-updater.exe
Task: C:\Windows\Tasks\Sense-chromeinstaller.job => C:\Program Files (x86)\Sense\Sense-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-codedownloader.job => C:\Program Files (x86)\Sense\Sense-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-enabler.job => C:\Program Files (x86)\Sense\Sense-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-firefoxinstaller.job => C:\Program Files (x86)\Sense\Sense-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-updater.job => C:\Program Files (x86)\Sense\Sense-updater.exe <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:56E2E879
C:\Program Files (x86)\ShopperPro
C:\Program Files (x86)\Sense
C:\Program Files (x86)\iWebar
C:\Windows\SysWOW64\d3ddcsx_42.dll
C:\Windows\System32\d3ddcsx_42.dll
2014-03-28 03:17 - 2014-03-23 21:17 - 00002492 _____ () C:\Windows\Tasks\iWebar-firefoxinstaller.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001782 _____ () C:\Windows\Tasks\iWebar-updater.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001738 _____ () C:\Windows\Tasks\iWebar-codedownloader.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001616 _____ () C:\Windows\Tasks\iWebar-enabler.job
2014-03-28 03:16 - 2014-03-23 21:16 - 00003410 _____ () C:\Windows\Tasks\iWebar-chromeinstaller.job
2014-03-28 03:02 - 2012-05-10 03:21 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00003406 _____ () C:\Windows\Tasks\Sense-chromeinstaller.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00002488 _____ () C:\Windows\Tasks\Sense-firefoxinstaller.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001776 _____ () C:\Windows\Tasks\Sense-updater.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001732 _____ () C:\Windows\Tasks\Sense-codedownloader.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001610 _____ () C:\Windows\Tasks\Sense-enabler.job
2014-03-24 10:17 - 2014-03-24 10:17 - 00004806 _____ () C:\Windows\System32\Tasks\Sense-updater
2014-03-24 10:17 - 2014-03-24 10:17 - 00004762 _____ () C:\Windows\System32\Tasks\Sense-codedownloader
2014-03-24 10:17 - 2014-03-24 10:17 - 00004640 _____ () C:\Windows\System32\Tasks\Sense-enabler
2014-03-23 21:17 - 2014-03-23 21:17 - 00004812 _____ () C:\Windows\System32\Tasks\iWebar-updater
2014-03-23 21:17 - 2014-03-23 21:17 - 00004768 _____ () C:\Windows\System32\Tasks\iWebar-codedownloader
2014-03-23 21:17 - 2014-03-23 21:17 - 00004646 _____ () C:\Windows\System32\Tasks\iWebar-enabler
2014-03-23 21:14 - 2014-03-23 21:14 - 00004506 _____ () C:\Windows\System32\Tasks\ShopperPro
2014-03-23 21:14 - 2014-03-23 21:14 - 00003572 _____ () C:\Windows\System32\Tasks\ShopperProJSUpd
*****************

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551110} => Key not found.
HKCR\CLSID\{11111111-1111-1111-1111-110311551110} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411821192} => Key not found.
HKCR\CLSID\{11111111-1111-1111-1111-110411821192} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4DB74D06-491C-440D-305E-012400990F3E} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{4DB74D06-491C-440D-305E-012400990F3E} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5F59BA-B2AB-48D8-9747-54DF806C73B8} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{EF5F59BA-B2AB-48D8-9747-54DF806C73B8} => Key deleted successfully.
HKCR\PROTOCOLS\Handler\skype-ie-addon-data => Key deleted successfully.
HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8} => Key not found.
C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com not found.
C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} => Moved successfully.
C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll not found.
SecureUpdateSvc => Service deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{07A746F4-A1CE-4955-A5AE-BF68875215D9} => Key not found.
C:\Windows\System32\Tasks\Sense-firefoxinstaller not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sense-firefoxinstaller => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B1958E9-C26C-4F31-B1B3-FC0CC7568085} => Key not found.
C:\Windows\System32\Tasks\Sense-chromeinstaller not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sense-chromeinstaller => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0C650EB0-61F2-47E3-8B06-4F10B3F971FF} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C650EB0-61F2-47E3-8B06-4F10B3F971FF} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Update => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{176B44EB-9069-4694-B652-DCA676444C61} => Key not found.
C:\Windows\System32\Tasks\iWebar-firefoxinstaller not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-firefoxinstaller => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{28E34266-838F-4F2A-8E4B-03B9256582DB} => Key not found.
C:\Windows\System32\Tasks\Sense-codedownloader not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sense-codedownloader => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E206D55-094E-4A7D-943C-5EA8C6A1A882} => Key not found.
C:\Windows\System32\Tasks\Sense-enabler not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sense-enabler => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{42091BFC-F807-4212-BE75-F2D4C312365F} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42091BFC-F807-4212-BE75-F2D4C312365F} => Key deleted successfully.
C:\Windows\System32\Tasks\ShopperPro => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ShopperPro => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73A3E841-0A6C-47F3-AA2F-4ACF11B10A12} => Key not found.
C:\Windows\System32\Tasks\iWebar-codedownloader not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-codedownloader => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{83156F4A-836D-4AC7-AC4F-AEE6D46FF543} => Key not found.
C:\Windows\System32\Tasks\iWebar-enabler not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-enabler => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9AD09D92-CB95-4588-89EA-AAF31D2614A0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9AD09D92-CB95-4588-89EA-AAF31D2614A0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoforFilesUpdate => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC492AB5-7C00-4ADD-9211-AA859AC4DB4C} => Key not found.
C:\Windows\System32\Tasks\Sense-updater not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sense-updater => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B74B392F-1749-465B-849A-E7EA8AA90C9D} => Key not found.
C:\Windows\System32\Tasks\iWebar-chromeinstaller not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-chromeinstaller => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F20C9098-41B9-49EC-9793-B5C74B9DB364} => Key not found.
C:\Windows\System32\Tasks\iWebar-updater not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-updater => Key not found.
C:\Windows\Tasks\iWebar-chromeinstaller.job not found.
C:\Windows\Tasks\iWebar-codedownloader.job not found.
C:\Windows\Tasks\iWebar-enabler.job not found.
C:\Windows\Tasks\iWebar-firefoxinstaller.job not found.
C:\Windows\Tasks\iWebar-updater.job not found.
C:\Windows\Tasks\Sense-chromeinstaller.job not found.
C:\Windows\Tasks\Sense-codedownloader.job not found.
C:\Windows\Tasks\Sense-enabler.job not found.
C:\Windows\Tasks\Sense-firefoxinstaller.job not found.
C:\Windows\Tasks\Sense-updater.job not found.
C:\ProgramData\Temp => ":56E2E879" ADS removed successfully.
"C:\Program Files (x86)\ShopperPro" => File/Directory not found.
"C:\Program Files (x86)\Sense" => File/Directory not found.
"C:\Program Files (x86)\iWebar" => File/Directory not found.
C:\Windows\SysWOW64\d3ddcsx_42.dll => Moved successfully.
"C:\Windows\System32\d3ddcsx_42.dll" => File/Directory not found.
"C:\Windows\Tasks\iWebar-firefoxinstaller.job" => File/Directory not found.
"C:\Windows\Tasks\iWebar-updater.job" => File/Directory not found.
"C:\Windows\Tasks\iWebar-codedownloader.job" => File/Directory not found.
"C:\Windows\Tasks\iWebar-enabler.job" => File/Directory not found.
"C:\Windows\Tasks\iWebar-chromeinstaller.job" => File/Directory not found.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
"C:\Windows\Tasks\Sense-chromeinstaller.job" => File/Directory not found.
"C:\Windows\Tasks\Sense-firefoxinstaller.job" => File/Directory not found.
"C:\Windows\Tasks\Sense-updater.job" => File/Directory not found.
"C:\Windows\Tasks\Sense-codedownloader.job" => File/Directory not found.
"C:\Windows\Tasks\Sense-enabler.job" => File/Directory not found.
"C:\Windows\System32\Tasks\Sense-updater" => File/Directory not found.
"C:\Windows\System32\Tasks\Sense-codedownloader" => File/Directory not found.
"C:\Windows\System32\Tasks\Sense-enabler" => File/Directory not found.
"C:\Windows\System32\Tasks\iWebar-updater" => File/Directory not found.
"C:\Windows\System32\Tasks\iWebar-codedownloader" => File/Directory not found.
"C:\Windows\System32\Tasks\iWebar-enabler" => File/Directory not found.
"C:\Windows\System32\Tasks\ShopperPro" => File/Directory not found.
C:\Windows\System32\Tasks\ShopperProJSUpd => Moved successfully.

==== End of Fixlog ====
Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Stefan at 2014-03-28 20:44:58 Run:1
Running from C:\Users\Stefan\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
BHO: iWebar - {11111111-1111-1111-1111-110311551110} - C:\Program Files (x86)\iWebar\iWebar-bho64.dll No File
BHO: Sense - {11111111-1111-1111-1111-110411821192} - C:\Program Files (x86)\Sense\Sense-bho64.dll No File
BHO-x32: Groove GFS Browser Helper - {4DB74D06-491C-440D-305E-012400990F3E} - C:\Windows\SysWOW64\d3ddcsx_42.dll ()
BHO-x32: Adblock - {EF5F59BA-B2AB-48D8-9747-54DF806C73B8} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
FF Extension: iWebar - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com [2014-03-23]
FF Extension: Start Page - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-03-25]
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll No File
S2 SecureUpdateSvc; C:\Program Files (x86)\Secure Speed Dial\IE\SecureUpdate.exe [X]
Task: {07A746F4-A1CE-4955-A5AE-BF68875215D9} - System32\Tasks\Sense-firefoxinstaller => C:\Program Files (x86)\Sense\Sense-firefoxinstaller.exe <==== ATTENTION
Task: {0B1958E9-C26C-4F31-B1B3-FC0CC7568085} - System32\Tasks\Sense-chromeinstaller => C:\Program Files (x86)\Sense\Sense-chromeinstaller.exe <==== ATTENTION
Task: {0C650EB0-61F2-47E3-8B06-4F10B3F971FF} - \Driver Booster Update No Task File
Task: {176B44EB-9069-4694-B652-DCA676444C61} - System32\Tasks\iWebar-firefoxinstaller => C:\Program Files (x86)\iWebar\iWebar-firefoxinstaller.exe
Task: {28E34266-838F-4F2A-8E4B-03B9256582DB} - System32\Tasks\Sense-codedownloader => C:\Program Files (x86)\Sense\Sense-codedownloader.exe <==== ATTENTION
Task: {2E206D55-094E-4A7D-943C-5EA8C6A1A882} - System32\Tasks\Sense-enabler => C:\Program Files (x86)\Sense\Sense-enabler.exe <==== ATTENTION
Task: {42091BFC-F807-4212-BE75-F2D4C312365F} - System32\Tasks\ShopperPro => C:\Program Files (x86)\ShopperPro\ShopperPro.exe
Task: {73A3E841-0A6C-47F3-AA2F-4ACF11B10A12} - System32\Tasks\iWebar-codedownloader => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe
Task: {83156F4A-836D-4AC7-AC4F-AEE6D46FF543} - System32\Tasks\iWebar-enabler => C:\Program Files (x86)\iWebar\iWebar-enabler.exe <==== ATTENTION
Task: {9AD09D92-CB95-4588-89EA-AAF31D2614A0} - \GoforFilesUpdate No Task File
Task: {AC492AB5-7C00-4ADD-9211-AA859AC4DB4C} - System32\Tasks\Sense-updater => C:\Program Files (x86)\Sense\Sense-updater.exe <==== ATTENTION
Task: {B74B392F-1749-465B-849A-E7EA8AA90C9D} - System32\Tasks\iWebar-chromeinstaller => C:\Program Files (x86)\iWebar\iWebar-chromeinstaller.exe
Task: {F20C9098-41B9-49EC-9793-B5C74B9DB364} - System32\Tasks\iWebar-updater => C:\Program Files (x86)\iWebar\iWebar-updater.exe
Task: C:\Windows\Tasks\iWebar-chromeinstaller.job => C:\Program Files (x86)\iWebar\iWebar-chromeinstaller.exe
Task: C:\Windows\Tasks\iWebar-codedownloader.job => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe
Task: C:\Windows\Tasks\iWebar-enabler.job => C:\Program Files (x86)\iWebar\iWebar-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\iWebar-firefoxinstaller.job => C:\Program Files (x86)\iWebar\iWebar-firefoxinstaller.exe
Task: C:\Windows\Tasks\iWebar-updater.job => C:\Program Files (x86)\iWebar\iWebar-updater.exe
Task: C:\Windows\Tasks\Sense-chromeinstaller.job => C:\Program Files (x86)\Sense\Sense-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-codedownloader.job => C:\Program Files (x86)\Sense\Sense-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-enabler.job => C:\Program Files (x86)\Sense\Sense-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-firefoxinstaller.job => C:\Program Files (x86)\Sense\Sense-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Sense-updater.job => C:\Program Files (x86)\Sense\Sense-updater.exe <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:56E2E879
C:\Program Files (x86)\ShopperPro
C:\Program Files (x86)\Sense
C:\Program Files (x86)\iWebar
C:\Windows\SysWOW64\d3ddcsx_42.dll
C:\Windows\System32\d3ddcsx_42.dll
2014-03-28 03:17 - 2014-03-23 21:17 - 00002492 _____ () C:\Windows\Tasks\iWebar-firefoxinstaller.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001782 _____ () C:\Windows\Tasks\iWebar-updater.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001738 _____ () C:\Windows\Tasks\iWebar-codedownloader.job
2014-03-28 03:17 - 2014-03-23 21:17 - 00001616 _____ () C:\Windows\Tasks\iWebar-enabler.job
2014-03-28 03:16 - 2014-03-23 21:16 - 00003410 _____ () C:\Windows\Tasks\iWebar-chromeinstaller.job
2014-03-28 03:02 - 2012-05-10 03:21 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00003406 _____ () C:\Windows\Tasks\Sense-chromeinstaller.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00002488 _____ () C:\Windows\Tasks\Sense-firefoxinstaller.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001776 _____ () C:\Windows\Tasks\Sense-updater.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001732 _____ () C:\Windows\Tasks\Sense-codedownloader.job
2014-03-27 22:17 - 2014-03-24 10:17 - 00001610 _____ () C:\Windows\Tasks\Sense-enabler.job
2014-03-24 10:17 - 2014-03-24 10:17 - 00004806 _____ () C:\Windows\System32\Tasks\Sense-updater
2014-03-24 10:17 - 2014-03-24 10:17 - 00004762 _____ () C:\Windows\System32\Tasks\Sense-codedownloader
2014-03-24 10:17 - 2014-03-24 10:17 - 00004640 _____ () C:\Windows\System32\Tasks\Sense-enabler
2014-03-23 21:17 - 2014-03-23 21:17 - 00004812 _____ () C:\Windows\System32\Tasks\iWebar-updater
2014-03-23 21:17 - 2014-03-23 21:17 - 00004768 _____ () C:\Windows\System32\Tasks\iWebar-codedownloader
2014-03-23 21:17 - 2014-03-23 21:17 - 00004646 _____ () C:\Windows\System32\Tasks\iWebar-enabler
2014-03-23 21:14 - 2014-03-23 21:14 - 00004506 _____ () C:\Windows\System32\Tasks\ShopperPro
2014-03-23 21:14 - 2014-03-23 21:14 - 00003572 _____ () C:\Windows\System32\Tasks\ShopperProJSUpd
*****************

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551110} => Key not found.
HKCR\CLSID\{11111111-1111-1111-1111-110311551110} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411821192} => Key not found.
HKCR\CLSID\{11111111-1111-1111-1111-110411821192} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4DB74D06-491C-440D-305E-012400990F3E} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{4DB74D06-491C-440D-305E-012400990F3E} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5F59BA-B2AB-48D8-9747-54DF806C73B8} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{EF5F59BA-B2AB-48D8-9747-54DF806C73B8} => Key deleted successfully.
HKCR\PROTOCOLS\Handler\skype-ie-addon-data => Key deleted successfully.
HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8} => Key not found.
C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com not found.
C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} => Moved successfully.
C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll not found.
SecureUpdateSvc => Service deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{07A746F4-A1CE-4955-A5AE-BF68875215D9} => Key not found.
C:\Windows\System32\Tasks\Sense-firefoxinstaller not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sense-firefoxinstaller => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B1958E9-C26C-4F31-B1B3-FC0CC7568085} => Key not found.
C:\Windows\System32\Tasks\Sense-chromeinstaller not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sense-chromeinstaller => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0C650EB0-61F2-47E3-8B06-4F10B3F971FF} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C650EB0-61F2-47E3-8B06-4F10B3F971FF} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Update => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{176B44EB-9069-4694-B652-DCA676444C61} => Key not found.
C:\Windows\System32\Tasks\iWebar-firefoxinstaller not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-firefoxinstaller => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{28E34266-838F-4F2A-8E4B-03B9256582DB} => Key not found.
C:\Windows\System32\Tasks\Sense-codedownloader not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sense-codedownloader => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E206D55-094E-4A7D-943C-5EA8C6A1A882} => Key not found.
C:\Windows\System32\Tasks\Sense-enabler not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sense-enabler => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{42091BFC-F807-4212-BE75-F2D4C312365F} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42091BFC-F807-4212-BE75-F2D4C312365F} => Key deleted successfully.
C:\Windows\System32\Tasks\ShopperPro => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ShopperPro => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73A3E841-0A6C-47F3-AA2F-4ACF11B10A12} => Key not found.
C:\Windows\System32\Tasks\iWebar-codedownloader not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-codedownloader => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{83156F4A-836D-4AC7-AC4F-AEE6D46FF543} => Key not found.
C:\Windows\System32\Tasks\iWebar-enabler not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-enabler => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9AD09D92-CB95-4588-89EA-AAF31D2614A0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9AD09D92-CB95-4588-89EA-AAF31D2614A0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoforFilesUpdate => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC492AB5-7C00-4ADD-9211-AA859AC4DB4C} => Key not found.
C:\Windows\System32\Tasks\Sense-updater not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sense-updater => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B74B392F-1749-465B-849A-E7EA8AA90C9D} => Key not found.
C:\Windows\System32\Tasks\iWebar-chromeinstaller not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-chromeinstaller => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F20C9098-41B9-49EC-9793-B5C74B9DB364} => Key not found.
C:\Windows\System32\Tasks\iWebar-updater not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-updater => Key not found.
C:\Windows\Tasks\iWebar-chromeinstaller.job not found.
C:\Windows\Tasks\iWebar-codedownloader.job not found.
C:\Windows\Tasks\iWebar-enabler.job not found.
C:\Windows\Tasks\iWebar-firefoxinstaller.job not found.
C:\Windows\Tasks\iWebar-updater.job not found.
C:\Windows\Tasks\Sense-chromeinstaller.job not found.
C:\Windows\Tasks\Sense-codedownloader.job not found.
C:\Windows\Tasks\Sense-enabler.job not found.
C:\Windows\Tasks\Sense-firefoxinstaller.job not found.
C:\Windows\Tasks\Sense-updater.job not found.
C:\ProgramData\Temp => ":56E2E879" ADS removed successfully.
"C:\Program Files (x86)\ShopperPro" => File/Directory not found.
"C:\Program Files (x86)\Sense" => File/Directory not found.
"C:\Program Files (x86)\iWebar" => File/Directory not found.
C:\Windows\SysWOW64\d3ddcsx_42.dll => Moved successfully.
"C:\Windows\System32\d3ddcsx_42.dll" => File/Directory not found.
"C:\Windows\Tasks\iWebar-firefoxinstaller.job" => File/Directory not found.
"C:\Windows\Tasks\iWebar-updater.job" => File/Directory not found.
"C:\Windows\Tasks\iWebar-codedownloader.job" => File/Directory not found.
"C:\Windows\Tasks\iWebar-enabler.job" => File/Directory not found.
"C:\Windows\Tasks\iWebar-chromeinstaller.job" => File/Directory not found.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
"C:\Windows\Tasks\Sense-chromeinstaller.job" => File/Directory not found.
"C:\Windows\Tasks\Sense-firefoxinstaller.job" => File/Directory not found.
"C:\Windows\Tasks\Sense-updater.job" => File/Directory not found.
"C:\Windows\Tasks\Sense-codedownloader.job" => File/Directory not found.
"C:\Windows\Tasks\Sense-enabler.job" => File/Directory not found.
"C:\Windows\System32\Tasks\Sense-updater" => File/Directory not found.
"C:\Windows\System32\Tasks\Sense-codedownloader" => File/Directory not found.
"C:\Windows\System32\Tasks\Sense-enabler" => File/Directory not found.
"C:\Windows\System32\Tasks\iWebar-updater" => File/Directory not found.
"C:\Windows\System32\Tasks\iWebar-codedownloader" => File/Directory not found.
"C:\Windows\System32\Tasks\iWebar-enabler" => File/Directory not found.
"C:\Windows\System32\Tasks\ShopperPro" => File/Directory not found.
C:\Windows\System32\Tasks\ShopperProJSUpd => Moved successfully.

==== End of Fixlog ====

Alt 29.03.2014, 01:50   #11
90stefan
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


Sorry war nen bisschen ungeduldig, deshalb der 3fache upload des fixlog ...



FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Stefan (administrator) on STEFAN-PC on 28-03-2014 20:48:13
Running from C:\Users\Stefan\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared Files\brs.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\WINDOWS\SYSTEM32\HKCMD.EXE
(Intel Corporation) C:\WINDOWS\SYSTEM32\IGFXTRAY.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avrestart.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-28] (Adobe Systems Incorporated)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2586504 2010-08-05] (ELAN Microelectronics Corp.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-03-20] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-02-05] (NVIDIA Corporation)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe [295744 2011-03-09] (NTI Corporation)
HKLM-x32\...\Run: [NUSB3MON] - c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-04-27] (cyberlink)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [107816 2011-10-27] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [485672 2011-10-31] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] - "C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe" "C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware " [54072 2014-03-05] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Run: [DriverMax_RESTART] - C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe [8221560 2014-02-07] (Innovative Solutions)
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\MountPoints2: {72affeea-0a68-11e3-bb43-68a3c4ee6690} - E:\AutoRun.exe
HKU\S-1-5-21-2714067933-2837961611-1328175291-1001\...\MountPoints2: {72affefd-0a68-11e3-bb43-68a3c4ee6690} - E:\AutoRun.exe
AppInit_DLLs: c:\windows\system32\nvinitx.dll => c:\windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs: , C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
SearchScopes: HKCU - {01C8C359-A645-4711-8373-F205005CFAE8} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
SearchScopes: HKCU - {10703245-6980-4280-8F20-00F2F3CDCE2C} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
SearchScopes: HKCU - {B9D8192A-172E-42C8-A072-376166ABAD8A} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default
FF SearchEngineOrder.1: Sichere Suche
FF Homepage: hxxp://www.google.de/
FF DefaultSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MVT - C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Stefan\AppData\Local\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Stefan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\searchplugins\chip-online-suche.xml
FF SearchPlugin: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Personas Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\personas@christopher.beard [2013-10-25]
FF Extension: AD Block - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\searchads@instair.net [2014-02-28]
FF Extension: Garmin Communicator - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-19]
FF Extension: Ecosia - The search engine that plants trees - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0} [2013-10-21]
FF Extension: Adblock Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2013-10-29]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\adblockpopups@jessehakanen.net.xpi [2011-11-24]
FF Extension: Personas Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\personas@christopher.beard.xpi [2013-10-25]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Ecosia - The search engine that plants trees - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2013-10-21]
FF Extension: Adblock Plus - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\u70xkv2t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-12-03]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-13]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-02-13]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-02-13]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\

Chrome: 
=======
CHR DefaultSearchKeyword: google.com.py
CHR DefaultNewTabURL: 
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Advanced SystemCare 7) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd\\1.0.0_0\Plugin/ASCPlugin_Protect.dll (IObit)
CHR Plugin: (NPIdentityGen Plugin) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgjafhkemfjfgdmjcmhofijphjmaanak\1.2.8_0\dll/NPIdentityGen.dll (Software)
CHR Plugin: (NPAdbExternal Plugin) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfgjbmhakaffflkjecineeaadpidgikb\1.0.0_0\dll/NPAdbExternal.dll (Software)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.5) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd [2014-03-25]
CHR Extension: (Avira Browser Safety Beta) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-03-26]
CHR Extension: (AdBlock) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-30]
CHR Extension: (AccelerateTab) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgjafhkemfjfgdmjcmhofijphjmaanak [2014-03-04]
CHR Extension: (AD Block) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfgjbmhakaffflkjecineeaadpidgikb [2014-02-28]
CHR Extension: (Google Wallet) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-11-14]

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243728 2012-08-27] (CyberLink)
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [872552 2011-05-10] (Acer Incorporated)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [255376 2012-04-05] (Acer Incorporated)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe [257344 2011-03-09] (NTI Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
R3 azvusb; C:\Windows\System32\DRIVERS\azvusb.sys [54784 2009-08-24] (AzureWave Technologies, Inc.)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [90096 2011-09-08] (CyberLink)
U0 mcdwbssd; C:\Windows\System32\drivers\pmyyxc.sys [79064 2014-03-28] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2014-01-27] (Intel Corporation)
S3 MEMSWEEP2; C:\Windows\system32\2254.tmp [6144 2009-06-18] (Sophos Plc)
S3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [24200 2007-10-19] (DiBcom S.A.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2013-12-24] (IObit)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2014-02-24] (Synaptics Incorporated)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 mod7700; system32\DRIVERS\mod7700.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-28 20:48 - 2014-03-28 20:48 - 00026019 _____ () C:\Users\Stefan\Desktop\FRST.txt
2014-03-28 20:41 - 2014-03-28 20:41 - 00079064 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\pmyyxc.sys
2014-03-28 20:39 - 2014-03-28 20:39 - 00080322 _____ () C:\Users\Stefan\Desktop\mbam.txt
2014-03-28 20:09 - 2014-03-28 20:10 - 00000168 _____ () C:\Windows\setupact.log
2014-03-28 20:09 - 2014-03-28 20:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-28 20:08 - 2014-03-28 20:08 - 00001086 _____ () C:\Windows\PFRO.log
2014-03-27 19:24 - 2014-03-28 20:18 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-27 19:24 - 2014-03-27 19:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-27 19:24 - 2014-03-27 19:24 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-03-27 19:24 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-27 19:24 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-27 19:24 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-27 19:14 - 2014-03-27 19:14 - 00000000 ____D () C:\Windows\ERUNT
2014-03-27 19:06 - 2014-03-27 19:08 - 00000000 ____D () C:\AdwCleaner
2014-03-27 18:55 - 2014-02-19 14:02 - 00000426 _____ () C:\AVScanner.ini
2014-03-27 18:12 - 2014-03-28 20:48 - 00000000 ____D () C:\FRST
2014-03-27 18:11 - 2014-03-27 18:12 - 02157056 _____ (Farbar) C:\Users\Stefan\Desktop\FRST64.exe
2014-03-25 17:35 - 2013-11-05 06:02 - 00458960 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\k57nd60a.sys
2014-03-23 21:39 - 2014-03-23 21:44 - 00000028 _____ () C:\Users\Stefan\Desktop\Neues Textdokument.txt
2014-03-23 21:22 - 2014-03-28 20:31 - 00752948 _____ () C:\Windows\WindowsUpdate.log
2014-03-23 21:16 - 2014-03-23 21:19 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KeyFinder
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Program Files (x86)\KeyFinder
2014-03-23 14:39 - 2014-03-23 14:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-03-23 08:51 - 2014-03-23 09:38 - 00000000 ____D () C:\Program Files (x86)\TweakNow PowerPack
2014-03-23 08:51 - 2014-03-23 08:51 - 00001058 _____ () C:\Users\Public\Desktop\TweakNow PowerPack.lnk
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack 2012
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack
2014-03-23 08:08 - 2014-01-08 20:13 - 04043776 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2014-03-23 08:04 - 2014-02-11 20:24 - 00450520 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\system32\NV
2014-03-21 19:22 - 2014-03-21 19:22 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-03-21 19:22 - 2014-03-21 19:22 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 54936576 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 03867224 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-21 19:21 - 2014-03-21 19:21 - 02787544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00945880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00916016 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00747989 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-21 19:20 - 2014-03-21 19:21 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-03-21 19:19 - 2014-03-21 19:20 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-21 19:17 - 2014-03-21 19:19 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____D () C:\Program Files\Synaptics
2014-03-21 14:56 - 2014-02-24 20:39 - 00031472 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2014-03-21 14:49 - 2014-03-21 14:49 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA Corporation
2014-03-21 14:49 - 2010-05-26 10:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-03-21 14:49 - 2010-05-26 10:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-03-21 14:48 - 2014-03-21 14:50 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA
2014-03-21 14:48 - 2014-02-05 05:31 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-03-21 14:48 - 2014-02-05 05:30 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-03-21 14:47 - 2014-03-21 14:47 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-21 14:47 - 2014-03-04 09:06 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-03-21 14:47 - 2014-03-04 09:06 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin
2014-03-21 14:47 - 2014-03-04 09:05 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 01075032 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-03-21 14:47 - 2014-03-04 09:05 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-03-21 14:46 - 2014-03-21 14:50 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-03-21 14:46 - 2014-03-04 10:35 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-21 14:46 - 2014-03-04 10:35 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-21 14:39 - 2014-03-04 10:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00033736 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-03-21 14:39 - 2014-03-04 10:35 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-21 14:39 - 2013-12-27 14:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-03-21 14:39 - 2013-12-27 14:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-03-21 14:39 - 2013-12-27 14:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-03-21 14:35 - 2014-03-21 14:35 - 00001210 _____ () C:\Users\Stefan\Desktop\DriverMax.lnk
2014-03-21 14:35 - 2014-03-21 14:35 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Innovative Solutions
2014-03-21 14:34 - 2014-03-21 14:34 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-03-21 14:08 - 2014-03-21 14:08 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Deployment
2014-03-21 13:41 - 2014-03-21 13:41 - 00000000 ____D () C:\swsetup
2014-03-21 13:30 - 2014-03-21 13:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ICCWDT_01009.Wdf
2014-03-21 12:44 - 2014-03-21 14:57 - 00000000 ____D () C:\Program Files\Easeware
2014-03-21 12:44 - 2014-03-21 13:00 - 00000408 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-03-21 12:44 - 2014-03-21 12:45 - 01365248 _____ (Viber Media Inc) C:\Users\Stefan\Downloads\ViberSetup.exe
2014-03-21 12:44 - 2014-03-21 12:44 - 00003816 _____ () C:\Windows\System32\Tasks\DriverEasy Scheduled Scan
2014-03-21 12:44 - 2014-03-21 12:44 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Easeware
2014-03-21 12:43 - 2014-03-21 12:51 - 33189024 _____ (Nero AG) C:\Users\Stefan\Downloads\Nero_DiscSpeed.exe
2014-03-21 12:43 - 2014-03-21 12:47 - 33746304 _____ (eTeks ) C:\Users\Stefan\Downloads\SweetHome3D-4-2-windows-oc.exe
2014-03-21 12:43 - 2014-03-21 12:44 - 02987608 _____ (Easeware ) C:\Users\Stefan\Downloads\DriverEasy_Setup_4_6_4.exe
2014-03-21 12:36 - 2014-03-21 12:36 - 00000000 ____D () C:\Users\Stefan\AppData\Local\CrashRpt
2014-03-21 12:03 - 2014-03-21 12:03 - 00003166 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2014-03-20 15:39 - 2014-03-20 15:39 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-20 15:39 - 2014-03-20 15:39 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01022680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00245496 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00059088 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bScsiMSa.sys
2014-03-20 15:31 - 2014-03-21 12:47 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\DriverTurbo
2014-03-20 15:30 - 2014-03-20 15:30 - 00231952 _____ () C:\Users\Stefan\Downloads\DriverTurboSetup.exe
2014-03-20 05:55 - 2014-03-20 05:55 - 00002858 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Stefan)
2014-03-20 05:50 - 2014-03-20 05:51 - 23669792 _____ (IObit ) C:\Users\Stefan\Downloads\driver_booster_setup.exe
2014-03-13 07:14 - 2014-03-01 02:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 07:14 - 2014-03-01 01:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 07:14 - 2014-03-01 01:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 07:14 - 2014-03-01 00:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 07:14 - 2014-03-01 00:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 07:14 - 2014-03-01 00:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 07:14 - 2014-03-01 00:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 07:14 - 2014-03-01 00:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 07:14 - 2014-03-01 00:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 07:14 - 2014-03-01 00:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 07:14 - 2014-03-01 00:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 07:14 - 2014-03-01 00:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 07:14 - 2014-03-01 00:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 07:14 - 2014-03-01 00:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 07:14 - 2014-03-01 00:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 07:14 - 2014-03-01 00:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 07:14 - 2014-03-01 00:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 07:14 - 2014-02-28 23:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 07:14 - 2014-02-28 23:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 07:14 - 2014-02-28 23:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 07:14 - 2014-02-28 23:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 07:14 - 2014-02-28 23:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 07:14 - 2014-02-28 23:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 07:14 - 2014-02-28 23:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 07:14 - 2014-02-28 23:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 07:14 - 2014-02-28 23:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 07:14 - 2014-02-28 23:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 07:14 - 2014-02-28 23:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 07:14 - 2014-02-28 23:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 07:14 - 2014-02-28 23:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 07:14 - 2014-02-28 23:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 07:14 - 2014-02-28 23:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 07:14 - 2014-02-28 23:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 07:14 - 2014-02-28 23:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 07:14 - 2014-02-28 22:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 07:14 - 2014-02-28 22:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 07:14 - 2014-02-28 22:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 07:14 - 2014-02-28 22:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 07:14 - 2014-02-28 22:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 07:14 - 2014-02-28 22:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 07:14 - 2014-02-06 21:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 07:14 - 2014-01-28 22:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 07:14 - 2014-01-28 22:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 07:14 - 2014-01-27 22:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 07:10 - 2014-02-03 22:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 07:10 - 2014-02-03 22:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 07:08 - 2014-02-03 22:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 07:08 - 2014-02-03 22:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-11 18:07 - 2014-03-11 18:07 - 00001755 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-11 18:05 - 2014-03-11 18:07 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-11 18:05 - 2014-03-11 18:07 - 00000000 ____D () C:\Program Files\iTunes
2014-03-11 18:05 - 2014-03-11 18:07 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-11 18:05 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files\iPod
2014-03-11 17:55 - 2014-03-11 17:55 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-02-27 08:43 - 2014-02-27 08:44 - 13443208 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x86.exe
2014-02-27 08:42 - 2014-02-27 08:43 - 13644792 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x64.exe
2014-02-26 05:33 - 2014-03-23 09:03 - 00011264 ___SH () C:\Users\Stefan\Thumbs.db

==================== One Month Modified Files and Folders =======

2014-03-28 20:48 - 2014-03-28 20:48 - 00026019 _____ () C:\Users\Stefan\Desktop\FRST.txt
2014-03-28 20:48 - 2014-03-27 18:12 - 00000000 ____D () C:\FRST
2014-03-28 20:41 - 2014-03-28 20:41 - 00079064 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\pmyyxc.sys
2014-03-28 20:41 - 2011-11-17 19:39 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\DVDVideoSoft
2014-03-28 20:41 - 2011-11-17 19:39 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-03-28 20:39 - 2014-03-28 20:39 - 00080322 _____ () C:\Users\Stefan\Desktop\mbam.txt
2014-03-28 20:31 - 2014-03-23 21:22 - 00752948 _____ () C:\Windows\WindowsUpdate.log
2014-03-28 20:18 - 2014-03-27 19:24 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-28 20:18 - 2009-07-14 00:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-28 20:18 - 2009-07-14 00:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-28 20:17 - 2013-10-09 12:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b.job
2014-03-28 20:10 - 2014-03-28 20:09 - 00000168 _____ () C:\Windows\setupact.log
2014-03-28 20:10 - 2013-08-15 14:08 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-28 20:09 - 2014-03-28 20:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-28 20:09 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-28 20:08 - 2014-03-28 20:08 - 00001086 _____ () C:\Windows\PFRO.log
2014-03-27 19:55 - 2011-07-22 03:26 - 00700134 _____ () C:\Windows\system32\perfh007.dat
2014-03-27 19:55 - 2011-07-22 03:26 - 00149984 _____ () C:\Windows\system32\perfc007.dat
2014-03-27 19:55 - 2009-07-14 01:13 - 01622236 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-27 19:24 - 2014-03-27 19:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-27 19:24 - 2014-03-27 19:24 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-03-27 19:14 - 2014-03-27 19:14 - 00000000 ____D () C:\Windows\ERUNT
2014-03-27 19:08 - 2014-03-27 19:06 - 00000000 ____D () C:\AdwCleaner
2014-03-27 18:12 - 2014-03-27 18:11 - 02157056 _____ (Farbar) C:\Users\Stefan\Desktop\FRST64.exe
2014-03-26 13:21 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-26 10:12 - 2013-10-09 12:14 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b
2014-03-26 10:12 - 2013-08-15 14:08 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-25 19:06 - 2011-12-17 10:56 - 00000000 ____D () C:\Users\Stefan\programme
2014-03-25 19:05 - 2014-02-25 17:51 - 00002008 _____ () C:\Windows\epplauncher.mif
2014-03-25 18:45 - 2013-11-05 18:52 - 00002852 _____ () C:\Windows\System32\Tasks\ASC7_SkipUac_Stefan
2014-03-25 18:45 - 2013-11-05 18:52 - 00002181 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-03-25 18:24 - 2011-11-17 20:33 - 00000000 ____D () C:\Users\Stefan\AppData\Local\CrashDumps
2014-03-25 17:55 - 2011-11-14 16:03 - 00000000 ____D () C:\Users\Stefan
2014-03-25 17:54 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\registration
2014-03-25 17:40 - 2013-05-12 10:19 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\ViberPC
2014-03-25 17:08 - 2011-11-14 16:08 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Skype
2014-03-25 16:10 - 2012-07-18 05:08 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-25 15:57 - 2013-11-05 18:52 - 00000000 ____D () C:\ProgramData\ProductData
2014-03-23 21:44 - 2014-03-23 21:39 - 00000028 _____ () C:\Users\Stefan\Desktop\Neues Textdokument.txt
2014-03-23 21:20 - 2009-07-14 00:45 - 00392144 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-23 21:19 - 2014-03-23 21:16 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-23 18:46 - 2014-03-23 18:46 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-23 17:36 - 2012-12-24 20:49 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\vlc
2014-03-23 14:54 - 2012-05-12 09:11 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\SoftGrid Client
2014-03-23 14:52 - 2011-11-14 16:03 - 00096616 _____ () C:\Users\Stefan\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-23 14:48 - 2011-07-21 17:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KeyFinder
2014-03-23 14:40 - 2014-03-23 14:40 - 00000000 ____D () C:\Program Files (x86)\KeyFinder
2014-03-23 14:40 - 2009-07-13 23:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-23 14:39 - 2014-03-23 14:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-03-23 14:39 - 2010-11-21 03:16 - 00000000 ____D () C:\Windows\ShellNew
2014-03-23 09:48 - 2013-10-17 19:36 - 00001042 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-03-23 09:38 - 2014-03-23 08:51 - 00000000 ____D () C:\Program Files (x86)\TweakNow PowerPack
2014-03-23 09:31 - 2011-11-14 16:07 - 00000000 ____D () C:\ProgramData\CyberLink
2014-03-23 09:06 - 2014-01-25 13:22 - 00000000 ____D () C:\Users\Stefan\TERESA
2014-03-23 09:06 - 2013-03-07 22:16 - 00000000 ____D () C:\Users\Stefan\Documents\English materials + CertTESOL
2014-03-23 09:03 - 2014-02-26 05:33 - 00011264 ___SH () C:\Users\Stefan\Thumbs.db
2014-03-23 08:59 - 2013-11-14 19:32 - 00001215 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-03-23 08:54 - 2011-11-17 19:37 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack 2011
2014-03-23 08:51 - 2014-03-23 08:51 - 00001058 _____ () C:\Users\Public\Desktop\TweakNow PowerPack.lnk
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack 2012
2014-03-23 08:51 - 2014-03-23 08:51 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\TweakNow PowerPack
2014-03-23 08:44 - 2011-11-17 19:35 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-23 08:44 - 2011-11-17 19:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-03-21 19:30 - 2014-03-21 19:30 - 00000000 ____D () C:\Windows\system32\NV
2014-03-21 19:30 - 2011-07-21 17:39 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-21 19:25 - 2011-07-21 17:45 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-21 19:22 - 2014-03-21 19:22 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-03-21 19:22 - 2014-03-21 19:22 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 54936576 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-21 19:21 - 2014-03-21 19:21 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 03867224 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-21 19:21 - 2014-03-21 19:21 - 02787544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00945880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00916016 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-03-21 19:21 - 2014-03-21 19:21 - 00747989 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-21 19:21 - 2014-03-21 19:20 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-03-21 19:20 - 2014-03-21 19:19 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-03-21 19:19 - 2014-03-21 19:19 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-21 19:19 - 2014-03-21 19:17 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-03-21 19:17 - 2014-03-21 19:17 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-03-21 14:57 - 2014-03-21 14:57 - 00000000 ____D () C:\Program Files\Synaptics
2014-03-21 14:57 - 2014-03-21 12:44 - 00000000 ____D () C:\Program Files\Easeware
2014-03-21 14:50 - 2014-03-21 14:48 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA
2014-03-21 14:50 - 2014-03-21 14:46 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-03-21 14:49 - 2014-03-21 14:49 - 00000000 ____D () C:\Users\Stefan\AppData\Local\NVIDIA Corporation
2014-03-21 14:48 - 2011-07-21 17:38 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-03-21 14:48 - 2011-07-21 17:38 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-03-21 14:47 - 2014-03-21 14:47 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-21 14:35 - 2014-03-21 14:35 - 00001210 _____ () C:\Users\Stefan\Desktop\DriverMax.lnk
2014-03-21 14:35 - 2014-03-21 14:35 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Innovative Solutions
2014-03-21 14:34 - 2014-03-21 14:34 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-03-21 14:26 - 2012-10-05 04:52 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-03-21 14:26 - 2012-10-05 04:51 - 00000000 ____D () C:\Users\Stefan\SystemRequirementsLab
2014-03-21 14:08 - 2014-03-21 14:08 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Deployment
2014-03-21 14:08 - 2011-12-03 07:48 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Apps\2.0
2014-03-21 13:41 - 2014-03-21 13:41 - 00000000 ____D () C:\swsetup
2014-03-21 13:30 - 2014-03-21 13:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ICCWDT_01009.Wdf
2014-03-21 13:30 - 2011-05-31 05:33 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-21 13:04 - 2011-05-31 06:01 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-03-21 13:00 - 2014-03-21 12:44 - 00000408 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-03-21 12:55 - 2012-11-24 20:14 - 00001105 _____ () C:\Users\Stefan\Desktop\Sweet Home 3D.lnk
2014-03-21 12:55 - 2012-11-24 20:14 - 00000000 ____D () C:\Program Files (x86)\Sweet Home 3D
2014-03-21 12:53 - 2013-05-12 10:19 - 00001084 _____ () C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber.lnk
2014-03-21 12:53 - 2013-05-12 10:19 - 00001076 _____ () C:\Users\Stefan\Desktop\Viber.lnk
2014-03-21 12:53 - 2013-05-12 10:18 - 00000000 ____D () C:\Users\Stefan\AppData\Local\Viber
2014-03-21 12:51 - 2014-03-21 12:43 - 33189024 _____ (Nero AG) C:\Users\Stefan\Downloads\Nero_DiscSpeed.exe
2014-03-21 12:47 - 2014-03-21 12:43 - 33746304 _____ (eTeks ) C:\Users\Stefan\Downloads\SweetHome3D-4-2-windows-oc.exe
2014-03-21 12:47 - 2014-03-20 15:31 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\DriverTurbo
2014-03-21 12:45 - 2014-03-21 12:44 - 01365248 _____ (Viber Media Inc) C:\Users\Stefan\Downloads\ViberSetup.exe
2014-03-21 12:44 - 2014-03-21 12:44 - 00003816 _____ () C:\Windows\System32\Tasks\DriverEasy Scheduled Scan
2014-03-21 12:44 - 2014-03-21 12:44 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\Easeware
2014-03-21 12:44 - 2014-03-21 12:43 - 02987608 _____ (Easeware ) C:\Users\Stefan\Downloads\DriverEasy_Setup_4_6_4.exe
2014-03-21 12:36 - 2014-03-21 12:36 - 00000000 ____D () C:\Users\Stefan\AppData\Local\CrashRpt
2014-03-21 12:22 - 2013-02-06 22:09 - 00000000 ____D () C:\ProgramData\IObit
2014-03-21 12:03 - 2014-03-21 12:03 - 00003166 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2014-03-20 15:39 - 2014-03-20 15:39 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-20 15:39 - 2014-03-20 15:39 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 01022680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00245496 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-03-20 15:39 - 2014-03-20 15:39 - 00059088 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bScsiMSa.sys
2014-03-20 15:30 - 2014-03-20 15:30 - 00231952 _____ () C:\Users\Stefan\Downloads\DriverTurboSetup.exe
2014-03-20 05:55 - 2014-03-20 05:55 - 00002858 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Stefan)
2014-03-20 05:55 - 2014-01-27 20:53 - 00003216 _____ () C:\Windows\System32\Tasks\Driver Booster Scan
2014-03-20 05:51 - 2014-03-20 05:50 - 23669792 _____ (IObit ) C:\Users\Stefan\Downloads\driver_booster_setup.exe
2014-03-19 08:52 - 2012-09-06 21:47 - 00000000 ____D () C:\Users\Stefan\AppData\Roaming\dvdcss
2014-03-15 14:34 - 2013-11-07 15:28 - 00002147 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-14 15:44 - 2013-10-18 11:17 - 00407040 ___SH () C:\Users\Stefan\Desktop\Thumbs.db
2014-03-14 07:54 - 2013-07-20 15:59 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-14 07:52 - 2011-11-19 17:19 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-14 07:30 - 2013-10-20 11:15 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 07:30 - 2013-10-20 11:15 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 09:02 - 2012-05-10 03:21 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 09:02 - 2012-05-10 03:21 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 09:02 - 2011-11-17 18:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-11 18:07 - 2014-03-11 18:07 - 00001755 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-11 18:07 - 2014-03-11 18:05 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-11 18:07 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files\iTunes
2014-03-11 18:07 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-11 18:05 - 2014-03-11 18:05 - 00000000 ____D () C:\Program Files\iPod
2014-03-11 17:55 - 2014-03-11 17:55 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-10 17:17 - 2014-01-27 10:53 - 00128288 _____ (IObit) C:\Windows\system32\IObitSmartDefragExtension.dll
2014-03-05 09:26 - 2014-03-27 19:24 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-05 09:26 - 2014-03-27 19:24 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-05 09:26 - 2014-03-27 19:24 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-04 10:35 - 2014-03-21 14:46 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-04 10:35 - 2014-03-21 14:46 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-04 10:35 - 2014-03-21 14:39 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-04 10:35 - 2014-03-21 14:39 - 00033736 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-03-04 10:35 - 2014-03-21 14:39 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-04 09:06 - 2014-03-21 14:47 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-03-04 09:06 - 2014-03-21 14:47 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin
2014-03-04 09:05 - 2014-03-21 14:47 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 01075032 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-03-04 09:05 - 2014-03-21 14:47 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-03-04 09:05 - 2014-03-21 14:47 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-03-01 02:05 - 2014-03-13 07:14 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 01:17 - 2014-03-13 07:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 01:16 - 2014-03-13 07:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 00:58 - 2014-03-13 07:14 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 00:52 - 2014-03-13 07:14 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 00:51 - 2014-03-13 07:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 00:42 - 2014-03-13 07:14 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 00:40 - 2014-03-13 07:14 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 00:37 - 2014-03-13 07:14 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 00:33 - 2014-03-13 07:14 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 00:33 - 2014-03-13 07:14 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 00:32 - 2014-03-13 07:14 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 00:30 - 2014-03-13 07:14 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 00:23 - 2014-03-13 07:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 00:17 - 2014-03-13 07:14 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 00:11 - 2014-03-13 07:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 00:02 - 2014-03-13 07:14 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-28 23:54 - 2014-03-13 07:14 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-28 23:52 - 2014-03-13 07:14 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-28 23:51 - 2014-03-13 07:14 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-28 23:47 - 2014-03-13 07:14 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-28 23:43 - 2014-03-13 07:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-28 23:43 - 2014-03-13 07:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-28 23:42 - 2014-03-13 07:14 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-28 23:40 - 2014-03-13 07:14 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-28 23:38 - 2014-03-13 07:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-28 23:37 - 2014-03-13 07:14 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-28 23:35 - 2014-03-13 07:14 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-28 23:18 - 2014-03-13 07:14 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-28 23:16 - 2014-03-13 07:14 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-28 23:14 - 2014-03-13 07:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-28 23:10 - 2014-03-13 07:14 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-28 23:03 - 2014-03-13 07:14 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-28 23:00 - 2014-03-13 07:14 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-28 22:57 - 2014-03-13 07:14 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-28 22:38 - 2014-03-13 07:14 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-28 22:32 - 2014-03-13 07:14 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-28 22:27 - 2014-03-13 07:14 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-28 22:25 - 2014-03-13 07:14 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-28 22:25 - 2014-03-13 07:14 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 15:22 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
2014-02-27 08:44 - 2014-02-27 08:43 - 13443208 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x86.exe
2014-02-27 08:44 - 2013-06-14 14:48 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-02-27 08:44 - 2012-05-12 09:10 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-27 08:43 - 2014-02-27 08:42 - 13644792 _____ (Microsoft Corporation) C:\Users\Stefan\Downloads\proofingtools_es-es-x64.exe

Some content of TEMP:
====================
C:\Users\Stefan\AppData\Local\Temp\avgnt.exe
C:\Users\Stefan\AppData\Local\Temp\ProductKeyFinderSetup.exe
C:\Users\Stefan\AppData\Local\Temp\tu17p84.exe
C:\Users\Stefan\AppData\Local\Temp\vlc-2.1.3-win32.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-21 20:34

==================== End Of Log ============================
--- --- ---
Alt 29.03.2014, 02:18   #12
90stefan
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Stefan at 2014-03-28 20:48:46
Running from C:\Users\Stefan\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

AccelerateTab (HKLM-x32\...\AccelerateTab_is1) (Version: 2.0 - AccelerateTab)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
ActiveX контрола на Windows Live Mesh за отдалечени връзки (HKLM-x32\...\{B3BA4D1C-23EF-4859-9C11-1B2CCB7FADBB}) (Version: 15.4.5722.2 - Microsoft Corporation)
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (HKLM-x32\...\{376D59B1-42D9-4FA2-B6CC-E346B6BE14F5}) (Version: 15.4.5722.2 - Microsoft Corporation)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.2090 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.7.0.2090 - Adobe Systems Incorporated) Hidden
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.2.1.650 - Adobe Systems Incorporated)
Adobe Community Help (x32 Version: 3.2.1 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Photoshop Elements 9 (HKLM-x32\...\Adobe Photoshop Elements 9) (Version: 9.0.3.0 - Adobe Systems Incorporated)
Adobe Photoshop Elements 9 (x32 Version: 9.0.3.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 9 (HKLM-x32\...\PremElem90) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 9 (x32 Version: 9.0.1 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)
Advanced SystemCare 7 (HKLM-x32\...\Advanced SystemCare 7_is1) (Version: 7.2.1 - IObit)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AutoUpdate (HKLM-x32\...\{18D10072035C4515918F7E37EAFAACFC}) (Version: 1.1 - )
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Backup Manager V3 (x32 Version: 3.0.0.90 - NTI Corporation) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 14.8.2.2 - Broadcom Corporation)
Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.2 - Broadcom Corporation)
Canon MP Navigator EX 1.0 (HKLM-x32\...\MP Navigator EX 1.0) (Version:  - )
Canon MP610 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP610_series) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation)
Control ActiveX del Windows Live Mesh per a connexions remotes (HKLM-x32\...\{76C064E2-BB99-4453-8FDA-42BC01AD0734}) (Version: 15.4.5722.2 - Microsoft Corporation)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (HKLM-x32\...\{260E3D78-94E6-47EC-8E29-46301572BB1E}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controle ActiveX do Windows Live Mesh para Conexões Remotas (HKLM-x32\...\{39B3184E-0BFB-40FA-ADDC-E7E2D535CDA9}) (Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1031 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1031 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4427.52 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.4427.52 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version:  - Microsoft)
DivX Codec (HKLM-x32\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.6.1 - DivX, Inc.)
Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.3 - IObit)
DriverMax 7 (HKLM-x32\...\DMX5_is1) (Version: 7.28.0.206 - Innovative Solutions)
Elements 9 Organizer (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Elements STI Installer (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Elevated Installer (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
ETDWare PS/2-X64 8.0.7.0_WHQL (HKLM\...\Elantech) (Version: 8.0.7.0 - ELAN Microelectronic Corp.)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free Studio version 2014 (HKLM-x32\...\Free Studio_is1) (Version: 6.2.14.319 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Garmin Express (HKLM-x32\...\{e47a5c85-88a2-47d2-b380-fc2e763c2e6d}) (Version: 2.1.13 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
Garmin Update Service (x32 Version: 2.1.13 - Garmin Ltd or its subsidiaries) Hidden
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Drive (HKLM-x32\...\{E87022D3-C8C9-4C76-8E27-BC7F18F9B8FB}) (Version: 1.14.6059.644 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HomeMedia (HKLM-x32\...\{AA4BF92B-2AAF-11DA-9D78-000129760D75}) (Version: 2.0.8520 - CyberLink Corporation)
HP Deskjet 1000 J110 series - Grundlegende Software für das Gerät (HKLM\...\{ECFFD23C-3111-4685-8118-E1F79644203F}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
HP Deskjet 1000 J110 series Hilfe (HKLM-x32\...\{DDDFCC77-7F9C-45E9-B38E-721BA599BA0C}) (Version: 140.0.65.65 - Hewlett Packard)
HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät (HKLM\...\{EF3293DE-FCAC-4742-91BF-AD0174143FC3}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3050 J610 series Hilfe (HKLM-x32\...\{F7632A9B-661E-4FD9-B1A4-3B86BC99847F}) (Version: 140.0.63.63 - Hewlett Packard)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
Hugin 2012.0.0 (HKLM-x32\...\Hugin) (Version: 2012.0.0 hg_a6e4184ad538 - The Hugin Development Team)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3006 - Packard Bell)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2372 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
Internet-TV für Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.1.8.2434 - IObit)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kontrola Windows Live Mesh ActiveX za daljinske veze (HKLM-x32\...\{19CBDE24-2761-49A5-816B-D2BA65D0CA8D}) (Version: 15.4.5722.2 - Microsoft Corporation)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (HKLM-x32\...\{CA227A9D-09BE-4BFB-9764-48FED2DA5454}) (Version: 15.4.5722.2 - Microsoft Corporation)
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.4 - Packard Bell)
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Camera Codec Pack (HKLM\...\{3FF70821-58E6-44DA-B512-095F547F3F18}) (Version: 16.4.1734.1104 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Proofing Tools 2013 - Español (HKLM-x32\...\{90150000-001F-0C0A-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Nero 11 DiscSpeed (HKLM-x32\...\{B8B03F99-F600-4D96-ADBD-2F384240FB9C}) (Version: 11.0.00400 - Nero AG)
Nero Control Center 10 (x32 Version: 10.2.11100.1.1 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.18100.8.8 - Nero AG) Hidden
Nero Core Components 11 (x32 Version: 11.0.15401.1.15 - Nero AG) Hidden
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.2.10500.2.100 - Nero AG)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero DiscSpeed 11 (x32 Version: 7.0.10400.2.100 - Nero AG) Hidden
Nero DiscSpeed 11 Help (CHM) (x32 Version: 11.0.10000 - Nero AG) Hidden
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.12000.21.100 - Nero AG)
Nero Express 10 Help (CHM) (x32 Version: 10.5.10200 - Nero AG) Hidden
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.5.10300 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11600.14.100 - Nero AG)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
nero.prerequisites.msi (x32 Version: 11.0.20008 - Nero AG) Hidden
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
Office Password Recovery PRO v1.0 (remove only) (HKLM-x32\...\Password Solutions - Office Password Recovery PRO) (Version: 1.0 - Password Solutions)
OLYMPUS Master 2 (HKLM-x32\...\{0815D55A-5EFF-4E1B-8C04-7035E914D90D}) (Version: 1.0.10 - OLYMPUS IMAGING CORP.)
OLYMPUS muvee theaterPack (HKLM-x32\...\{EC047FA6-E83D-4326-9195-E7D306C5B9A2}) (Version: 1.0.7 - OLYMPUS IMAGING CORP.)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM-x32\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation)
Packard Bell MyBackup (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.90 - NTI Corporation)
Packard Bell Power Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3007 - Packard Bell)
Packard Bell Recovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3004 - Packard Bell)
Packard Bell Registration (HKLM-x32\...\Packard Bell Registration) (Version: 1.04.3501 - Packard Bell)
Packard Bell ScreenSaver (HKLM-x32\...\Packard Bell Screensaver) (Version: 1.1.0811.2010 - Packard Bell )
Packard Bell Social Networks (HKLM-x32\...\InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9}) (Version: 2.0.2913 - CyberLink Corp.)
Packard Bell Social Networks (x32 Version: 2.0.2913 - CyberLink Corp.) Hidden
Packard Bell Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3502 - Packard Bell)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7177 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.36.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.36.0 - Renesas Electronics Corporation) Hidden
ScummVM 1.5.0 (HKLM-x32\...\ScummVM_is1) (Version:  - The ScummVM Team)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.13 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.13.104 - Skype Technologies S.A.)
Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.1 - IObit)
Sweet Home 3D version 4.2 (HKLM-x32\...\Sweet Home 3D_is1) (Version:  - eTeks)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab for Intel (HKLM-x32\...\{1EBDF6D2-CEA0-484C-A23E-2DDAD7FD0DD0}) (Version: 4.5.22.0 - Husdawg, LLC)
The Game Of Life by Hasbro (HKLM-x32\...\The Game Of Life by Hasbro1.0) (Version: 1.0 - Adnan_Boy 2008)
TVCenter (HKLM\...\{E29B2B35-C365-4C9A-8C5C-224E3B9A9ED1}) (Version: 6.3.0.584 - PCTV Systems)
TweakNow PowerPack (HKLM-x32\...\TweakNow PowerPack_is1) (Version: 4.3.0 - TweakNow.com)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.0.82.0 - Intel)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Urruneko konexioetarako Windows Live Mesh ActiveX kontrola (HKLM-x32\...\{7BA6DF02-B094-45D7-A3C9-BE3684253922}) (Version: 15.4.5722.2 - Microsoft Corporation)
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (HKLM-x32\...\{241E7104-937A-4366-AD57-8FDDDB003939}) (Version: 15.4.5722.2 - Microsoft Corporation)
Viber (HKCU\...\Viber) (Version: 3.0.0.133634 - Viber Media Inc)
Video Web Camera (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.3501.00 - CyberLink Corp.)
Video Web Camera (x32 Version: 1.5.3501.00 - CyberLink Corp.) Hidden
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Welcome Center (HKLM-x32\...\Packard Bell Welcome Center) (Version: 1.02.3501 - Packard Bell)
Windows Live Argazki Galeria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (HKLM-x32\...\{09B7C7EB-3140-4B5E-842F-9C79A7137139}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (HKLM-x32\...\{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Product Key Finder Pro® 2.3 (HKLM-x32\...\Windows Product Key Finder Pro®_is1) (Version:  - )
WinRAR 4.11 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (HKLM-x32\...\{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}) (Version: 15.4.5722.2 - Microsoft Corporation)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (HKLM-x32\...\{9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}) (Version: 15.4.5722.2 - Microsoft Corporation)
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (HKLM-x32\...\{E18B30AA-6E2D-480C-B918-AF61009F4010}) (Version: 15.4.5722.2 - Microsoft Corporation)
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ตัวควบคุม ActiveX ใน Windows Live Mesh สำหรับการเชื่อมต่อระยะไกล (ไทย) (HKLM-x32\...\{A2EDAEEB-C981-46D5-8163-CF8F5F640EEE}) (Version: 15.4.5722.2 - Microsoft Corporation)
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (HKLM-x32\...\{622DE1BE-9EDE-49D3-B349-29D64760342A}) (Version: 15.4.5722.2 - Microsoft Corporation)

==================== Restore Points  =========================

24-03-2014 00:32:06 Windows Update
24-03-2014 12:53:17 Windows Update
25-03-2014 19:59:41 Windows Update
25-03-2014 21:34:32 DMX_DriverMax Driver Installation
25-03-2014 21:36:12 DMX_DriverMax Driver Installation
25-03-2014 21:37:10 Gerätetreiber-Paketinstallation: Intel Corporation Grafikkarte
25-03-2014 21:51:19 Wiederherstellungsvorgang
27-03-2014 22:53:20 Removed IObit Apps Toolbar v8.9.
29-03-2014 00:20:53 Windows Update

==================== Hosts content: ==========================

2009-07-13 22:34 - 2009-06-10 17:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {10CAB24F-1F26-407C-B94D-4A91A3F4D4D7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-15] (Google Inc.)
Task: {1901EDAD-1FBA-4338-9A40-ABE732A8F104} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1A8DB1B2-EE78-4984-A6D2-1FA225577093} - System32\Tasks\Driver Booster SkipUAC (Stefan) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-03-14] (IObit)
Task: {29B4937A-63D5-489A-85F3-A2C4CDC7CB90} - System32\Tasks\ASC7_SkipUac_Stefan => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2014-03-10] (IObit)
Task: {4C657877-0D70-44A6-ABF7-A93E5A0F854F} - System32\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-15] (Google Inc.)
Task: {6599CE05-5FF9-47C6-9990-BBC477F7039B} - System32\Tasks\SmartDefrag3_Update => C:\Program Files (x86)\IObit\Smart Defrag 3\AutoUpdate.exe [2014-03-10] (IObit)
Task: {6B81ABA8-283D-4263-BBCC-1857D493BE1F} - \ShopperProJSUpd No Task File
Task: {96B1391C-2A1D-41DD-A7A3-4C6415BAE8C5} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {A536100D-E6FD-482B-87E6-A0BBA3308ED3} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: {BD1A04DA-FE5F-4809-BC3F-44013F7B8863} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {CD173C1D-CAB4-4E99-8B4A-56ECAEAD7DC3} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-02-13] (IObit)
Task: {D6FB96A5-71F8-45B5-9A8A-71DE9C4366A3} - System32\Tasks\AdobeAAMUpdater-1.0-Stefan-PC-Stefan => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-28] (Adobe Systems Incorporated)
Task: {E81D996E-0585-4EA9-B966-3D79E4A523ED} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe
Task: {F3A65D36-D516-4F71-AC78-A79445286190} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2014-03-12] (IObit)
Task: {F8494C16-225C-4B09-BE92-EFD742052583} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cec50a9045c59b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-03-21 14:39 - 2014-03-04 10:35 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-03-21 14:47 - 2014-03-04 09:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-11-05 18:51 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll
2014-02-06 13:28 - 2013-12-09 10:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 12:17 - 2014-01-20 12:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 12:16 - 2014-01-20 12:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-21 14:39 - 2014-03-04 10:35 - 00014280 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2011-03-09 13:13 - 2011-03-09 13:13 - 00465640 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\sqlite3.dll
2011-03-09 13:12 - 2011-03-09 13:12 - 01081664 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\ACE.dll
2011-03-09 13:12 - 2011-03-09 13:12 - 00125760 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\MailConverter32.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2012-06-16 07:04 - 2011-10-27 21:27 - 00623912 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2011-10-28 03:27 - 2011-10-28 03:27 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
2014-03-15 14:34 - 2014-03-14 20:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll
2014-02-13 18:58 - 2014-02-13 18:58 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\aa739380ca2b2fc7366d464d2f2301ac\IsdiInterop.ni.dll
2011-05-31 05:33 - 2010-09-13 21:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: Adobe ARM => c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe
MSCONFIG\startupreg: ApplePhotoStreams => c:\program files (x86)\common files\apple\internet services\applephotostreams.exe
MSCONFIG\startupreg: ETDCtrl => %programfiles%\elantech\etdctrl.exe
MSCONFIG\startupreg: GarminExpressTrayApp => c:\program files (x86)\garmin\express tray\expresstray.exe
MSCONFIG\startupreg: GoogleDriveSync => "c:\program files (x86)\google\drive\googledrivesync.exe" /autostart
MSCONFIG\startupreg: HotKeysCmds => c:\windows\system32\hkcmd.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: IAStorIcon => c:\program files (x86)\intel\intel(r) rapid storage technology\iastoricon.exe
MSCONFIG\startupreg: IgfxTray => c:\windows\system32\igfxtray.exe
MSCONFIG\startupreg: iTunesHelper => c:\program files (x86)\itunes\ituneshelper.exe
MSCONFIG\startupreg: LManager => c:\program files (x86)\launch manager\lmanager.exe
MSCONFIG\startupreg: OM2_Monitor => "c:\program files (x86)\olympus\olympus master 2\firststart.exe" /om
MSCONFIG\startupreg: Persistence => c:\windows\system32\igfxpers.exe
MSCONFIG\startupreg: Power Management => c:\program files\packard bell\packard bell power management\epowertray.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RemoTerm.exe => c:\program files (x86)\common files\pctv systems\remoterm\remoterm.exe
MSCONFIG\startupreg: RtHDVCpl => "c:\program files\realtek\audio\hda\ravcpl64.exe" -s
MSCONFIG\startupreg: SearchSettings => c:\program files (x86)\common files\spigot\search settings\searchsettings.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/28/2014 08:16:40 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avwebg7.exe, Version: 14.0.3.336, Zeitstempel: 0x52fcd7f8
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xb0c
Startzeit der fehlerhaften Anwendung: 0xavwebg7.exe0
Pfad der fehlerhaften Anwendung: avwebg7.exe1
Pfad des fehlerhaften Moduls: avwebg7.exe2
Berichtskennung: avwebg7.exe3

Error: (03/28/2014 08:10:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2014 03:44:50 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (03/28/2014 03:43:29 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/28/2014 03:24:05 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/28/2014 01:25:23 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/28/2014 01:25:22 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (03/27/2014 07:58:02 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/27/2014 07:57:58 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/27/2014 07:57:30 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (03/28/2014 08:26:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.

Error: (03/28/2014 08:26:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/28/2014 08:19:03 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (03/28/2014 08:19:03 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (03/28/2014 08:19:02 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AntiVirWebService erreicht.

Error: (03/28/2014 08:18:31 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AntiVirWebService erreicht.

Error: (03/28/2014 08:18:00 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AntiVirWebService erreicht.

Error: (03/28/2014 08:11:05 PM) (Source: Service Control Manager) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/28/2014 08:10:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SecureUpdate" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/27/2014 07:45:29 PM) (Source: Service Control Manager) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (03/28/2014 08:16:40 PM) (Source: Application Error)(User: )
Description: avwebg7.exe14.0.3.33652fcd7f8MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdb0c01cf4ae35fe8ac8cC:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exeC:\Windows\system32\MSVCR100.dll66229008-b6d7-11e3-8132-b870f4aef64e

Error: (03/28/2014 08:10:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2014 03:44:50 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (03/28/2014 03:43:29 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Stefan\Desktop\Logfiles\esetsmartinstaller_enu.exe

Error: (03/28/2014 03:24:05 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (03/28/2014 01:25:23 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (03/28/2014 01:25:22 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files (x86)\innovative solutions\drivermax\DPInst\ia64\dpinst.exe

Error: (03/27/2014 07:58:02 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Stefan\Desktop\esetsmartinstaller_enu.exe

Error: (03/27/2014 07:57:58 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Stefan\Desktop\esetsmartinstaller_enu.exe

Error: (03/27/2014 07:57:30 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Stefan\Desktop\esetsmartinstaller_enu.exe


CodeIntegrity Errors:
===================================
  Date: 2014-03-25 18:23:56.873
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\Desktop\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:56.793
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\Desktop\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:56.643
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:56.556
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:35.376
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 18:23:35.253
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Stefan\AppData\Local\Temp\PCIUtil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:43:36.386
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:43:36.199
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:38:49.656
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-25 17:38:49.563
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\igdkmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 39%
Total physical RAM: 5995.86 MB
Available physical RAM: 3605.43 MB
Total Pagefile: 11989.9 MB
Available Pagefile: 9282.76 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:911.41 GB) (Free:533.62 GB) NTFS
Drive e: (STEFAN USB) (Removable) (Total:29.8 GB) (Free:29.12 GB) FAT32
Drive f: (Elements) (Fixed) (Total:596.02 GB) (Free:367.3 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E4C2EB8E)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 596 GB) (Disk ID: ACDD9B22)

Partition: GPT Partition Type.

========================================================
Disk: 2 (Size: 30 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================
Gleich nach dem ich mbam gestartet hatte hat avira folgende in die Quarantäne verschoben:

Code:
ATTFilter

Typ:	Datei
Quelle:	C:\Users\Stefan\AppData\Local\Temp\SAINST\updater.exe
Status:	Infiziert
Quarantäne-Objekt:	553b81ce.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.03.16.26
Virendefinitionsdatei:	7.11.140.10
Gefunden:	TR/Drop.Softomat.AN
Datum/Uhrzeit:	28.03.2014, 20:30


Typ:	Datei
Quelle:	C:\Users\Stefan\AppData\Local\Temp\ytai_ytareg_setup.exe
Status:	Infiziert
Quarantäne-Objekt:	79c9bb47.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.03.16.26
Virendefinitionsdatei:	7.11.140.10
Gefunden:	TR/Trash.Gen
Datum/Uhrzeit:	28.03.2014, 20:30


Typ:	Datei
Quelle:	C:\Users\Stefan\AppData\Local\Temp\appshat_generic.exe
Status:	Infiziert
Quarantäne-Objekt:	1fcff481.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.03.16.26
Virendefinitionsdatei:	7.11.140.10
Gefunden:	TR/Trash.Gen
Datum/Uhrzeit:	28.03.2014, 20:30


Typ:	Datei
Quelle:	C:\Users\Stefan\AppData\Local\Temp\UpdateCheckerSetup.exe
Status:	Infiziert
Quarantäne-Objekt:	4dacae69.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.03.16.26
Virendefinitionsdatei:	7.11.140.10
Gefunden:	TR/Trash.Gen
Datum/Uhrzeit:	28.03.2014, 20:30


Typ:	Datei
Quelle:	C:\Users\Stefan\AppData\Local\Temp\setup.exe
Status:	Infiziert
Quarantäne-Objekt:	556485fe.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.03.16.26
Virendefinitionsdatei:	7.11.140.10
Gefunden:	TR/Trash.Gen
Datum/Uhrzeit:	28.03.2014, 20:29
Außerdem hatte es mir dieses gemeldet:

Code:
ATTFilter
28.03.2014 20:41 [Echtzeit-Scanner] Registry blockiert
      Der Administrator hat per Sicherheitsrichtlinie den Zugriff auf die Registry 
      blockiert.
Warum wird mein Rechner auf einmal so viel mit Viren angegriffen?

Alt 29.03.2014, 10:47   #13
Bootsektor
Ruhe in Frieden
† 2019
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


Hallo 90stefan,

Zitat:
Warum wird mein Rechner auf einmal so viel mit Viren angegriffen?
Das sind keine Viren, das ist ein Haufen adware und unerwünschte Programme, die befinden sich auf deinem Rechner. Sehr lästig, aber nicht so bedrohlich.
Wir löschen gleich noch mal die temporären Ordner.

Schritt 1
Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
  • Öffne die TFC.exe.
    Vista und Win 7 User mit Rechtsklick "als Administrator starten".
  • Schließe alle anderen Programme.
  • Drücke auf den Button Start.
  • Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.


>OK<

So wie ich es sehe, haben wir damit alles Schadhafte entfernt. Deine Logs sind sauber.
Abschließend räumen wir noch etwas auf, führen Updates durch und dann bekommst du noch etwas Lesestoff von mir.

Schritt 1
Falls Du Malwarebytes-Antimalware und den ESET-Onlinescan nicht mehr benötigst, kannst Du beide Programme einfach über die Programmdeinstallation deinstallieren.
Ich empfehle Dir aber zumindest Malwarebytes zu behalten, und damit einmal die Woche einen Kontrollscan zu machen.

Schritt 2
Downloade dir bitte delfix auf deinen Desktop.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.
  • DelFix entfernt u. a. alle verwendeten Programme und löscht sich abschließend selbst.

Updates / Programme aktualisieren
Hier nochmals mein Rat: entferne bitte entweder MSE oder Avira von deinem Rechner und überlege dir die Weiternutzung von Advanced SystemCare
  • Adobe Reader
Deinstalliere Deinen Reader und lade Dir die neueste Version von hier herunter. Entferne den Haken bei McAfee Security Plus
  • Mozilla Firefox
    Lade dir bitte von hier den aktuellen Firefox herunter.


Nun zum Schluss noch ein paar Tipps zur Absicherung deines Systems.

Aktualität des Systems
Es ist extrem wichtig, dass sowohl dein System als auch die darauf installierte sicherheitsrelevante Software (Flash Player, PDF-Reader und besonders Java, sofern vorhanden) aktuell sind.
  • Bitte überprüfe, ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Java
Java ist eine große Sicherheitslücke auf deinem System, es werden immer wieder neue Schwachstellen entdeckt, die ausgenutzt werden um Rechner zu infizieren.
Sofern du Java nicht zwingend benötigst, solltest du es komplett deinstallieren.

Windows XP
Gehe auf:
Start --> Systemsteuerung --> Software --> Javaversionen auswählen --> entfernen
Windows Vista
Gehe auf:
Start --> Systemsteuerung -- > Programme --> Programme deinstallieren --> Javaversionen suchen --> entfernen
Windows 7
Dazu gehe auf:
den Windowsbutton in der Taskleiste --> Systemsteuerung --> Programme (Unterpunkt Programme deinstallieren) --> Programm auswählen --> entfernen
Windows 8
Dazu drücke auf:
Windowstaste und X
dann:
Programme und Funktionen -->Javaversionen auswählen --> entfernen

Falls du Java doch unbedingt benötigst, dann sorge dafür, dass Java automatisch updated.
Dazu:
  • öffne Java
  • klicke auf den Reiter Update
  • klicke auf: Benachrichtung ausgeben: Vor dem Download setze den Haken bei Automatisch nach Updates suchen
  • klicke auf Erweitert
  • ändere das Intervall mindestens auf wöchentlich
und schalte das Browser-Plugin aus.
Hier findest du eine Anleitung dazu.

Antivirensoftware
  • Gehe sicher immer eine Antiviren Software installiert zu haben und halte diese unbedingt aktuell.

Zusätzlicher Schutz
  • MalwareBytes Anti-Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On-Demand Scantool welches viele aktuelle Malware erkennt und auch entfernt.
    Aktualisiere das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der Internet Explorer, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf einen Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Systemleistung
Lösche regelmäßig deine temporären Dateien. Ich empfehle hierzu TFC
Halte dich fern von jeglichen Registry Cleanern.
Diese schaden deinem System mehr als dass sie es schneller machen.

Verhaltensregeln zum sichereren Surfen
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
  • Achte besonders bei der Installation von Programmen darauf, ob sich weitere Software mitinstallieren möchte, wähle wo immer es geht die benutzerdefinierte Installation und wähle alles ab, was nichts mit dem Programm zu tun hat, welches du dir installieren möchtest.

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Falls Du Lob oder Kritik abgeben möchtest, kannst Du das sehr gerne hier tun.

Wenn Du etwas für das Forum und unsere Arbeit spenden möchtest, so kannst Du das hier tun.

Alt 29.03.2014, 19:13   #14
90stefan
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


alles erledigt und es scheint alles gut zu funktionieren. VIELEN DANK!!!

Alt 29.03.2014, 23:23   #15
Bootsektor
Ruhe in Frieden
† 2019
 
TR/Crypt.XPACK.Gen' [trojan] - Standard

TR/Crypt.XPACK.Gen' [trojan]


Gern geschehen

Dieses Thema scheint somit erledigt zu sein. Solltest Du noch Fragen oder Probleme haben, so schicke mir bitte eine PM

Antwort

Themen zu TR/Crypt.XPACK.Gen' [trojan]
mobogenie, mobogenie entfernen, pup.optional.bprotector.a, pup.optional.crossrider.a, pup.optional.crossrider.m, pup.optional.delta.a, pup.optional.diamondata.a, pup.optional.diamonddata, pup.optional.dvdvideosoft.a, pup.optional.goobzo.a, pup.optional.iwebar.a, pup.optional.sense.a, pup.optional.shopperpro.a, pup.optional.slicksavings.a, pup.optional.topckit, pup.topckit, tr/crypt.xpack.ge, tr/crypt.xpack.gen, tr/crypt.xpack.gen', tr/trash.gen, win32/adware.1clickdownload.ar, win32/bho.oey, windows 7, zugriff verweigert


« C:/ProgramData/BitGuard/2.7.1832.68.../loader.dll | WinXP: Saving Bulls mit CCleaner löschen geht nicht - es erscheint Error2: Das System kann die Datei nicht finden »


Ähnliche Themen: TR/Crypt.XPACK.Gen' [trojan]


  1. Win 7 64BIT TR/Crypt.XPACK.Gen2' [trojan]
    Log-Analyse und Auswertung - 22.01.2014 (7)
  2. 'TR/Crypt.XPACK.Gen' [trojan]
    Log-Analyse und Auswertung - 23.01.2013 (2)
  3. AntiVir hat folgede Viren gefunden: TR/Crypt.ZPACK.Gen2' & 'TR/Crypt.XPACK.Gen5' [trojan
    Plagegeister aller Art und deren Bekämpfung - 26.09.2012 (33)
  4. Trojan.0Access / Trojan.Sirefef / TR/Crypt.XPACK.Gen
    Log-Analyse und Auswertung - 19.09.2012 (9)
  5. TR/Crypt.XPACK.Gen' [trojan]
    Plagegeister aller Art und deren Bekämpfung - 02.04.2012 (18)
  6. Virus - 'TR/Crypt.XPACK.Gen' [trojan]
    Plagegeister aller Art und deren Bekämpfung - 27.05.2011 (7)
  7. 'TR/Crypt.XPACK.Gen' [trojan] gefunden
    Plagegeister aller Art und deren Bekämpfung - 04.05.2011 (1)
  8. Entfernung von 'TR/Crypt.XPACK.Gen' [trojan]
    Plagegeister aller Art und deren Bekämpfung - 10.10.2010 (11)
  9. TR/Crypt.XPACK.Gen3 backdoor/trojan
    Log-Analyse und Auswertung - 29.09.2010 (35)
  10. TR/Crypt.XPACK.Gen2' [trojan].
    Plagegeister aller Art und deren Bekämpfung - 18.05.2010 (16)
  11. was muss ich nun tun 'TR/Crypt.XPACK.Gen' [trojan]
    Log-Analyse und Auswertung - 22.04.2010 (3)
  12. TR/Crypt.XPACK.Gen, Trojan.BHO.Gen und mehr
    Plagegeister aller Art und deren Bekämpfung - 21.01.2010 (14)
  13. 'TR/Crypt.XPACK.Gen' [trojan] gefunden...
    Log-Analyse und Auswertung - 22.11.2009 (4)
  14. TR/Crypt.XPACK.Gen - Trojan 4 mal auf dem pc gefunden
    Plagegeister aller Art und deren Bekämpfung - 05.10.2009 (2)
  15. trojaner: 'TR/Crypt.XPACK.Gen' [trojan]
    Mülltonne - 10.12.2008 (2)
  16. TR/Crypt.XPACK.Gen - Trojan
    Mülltonne - 26.10.2008 (0)
  17. 'TR/Crypt.XPACK.Gen [trojan]'
    Mülltonne - 11.07.2008 (0)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema TR/Crypt.XPACK.Gen' [trojan] - Vor ein paar Tagen war ich im Internet unterwegs und wollte mir ein Programm downloaden, dessen Namen ich bereits vergessen habe. Nach dem Download hatte Avira mir mehrfachst hintereinander TR/Crypt.XPACK.Gen' - TR/Crypt.XPACK.Gen' [trojan]...
Archiv
Du betrachtest: TR/Crypt.XPACK.Gen' [trojan] auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131