Win7: Mailware durch falsche Java-update-Seite

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:01 on 01/04/2014 (XX)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by XX (administrator) on XX-PC on 01-04-2014 17:07:15
Running from C:\Users\XX\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
() C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
() C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7477016 2013-04-25] (Logitech Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Registry Helper] - "C:\Program Files (x86)\Registry Helper\RegistryHelper.Exe" /boot
HKU\S-1-5-21-2505307290-3621749502-2385606408-1000\...\MountPoints2: {1957cccb-5bc7-11e2-98eb-902b34a84c0a} - H:\setup.exe
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\Program Files (x86)\SupTab\SearchProtect64.dll [96768 2014-03-05] (Skytech Co., Ltd.)
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => C:\Program Files (x86)\SupTab\SearchProtect32.dll [85504 2014-03-05] (Skytech Co., Ltd.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=74e80237-7212-4d39-a19a-1ebbecf777aa&searchtype=ds&q={searchTerms}&installDate=31/07/2013
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=74e80237-7212-4d39-a19a-1ebbecf777aa&searchtype=ds&q={searchTerms}&installDate=31/07/2013
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
SearchScopes: HKCU - {4425E034-C5A6-4D1F-8E59-8A2D938EDD44} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=a6ad770f000000000000902b34a84c0a&r=114
BHO: HQVid8.1 - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQVid8.1\HQVid8.1-bho64.dll (High-QualityV9)
BHO: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll (Freeven)
BHO-x32: HQVid8.1 - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQVid8.1\HQVid8.1-bho.dll (High-QualityV9)
BHO-x32: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho.dll (Freeven)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default
FF user.js: detected! => C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\user.js
FF NewTab: hxxp://istart.webssearches.com/newtab/?type=nt&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445
FF DefaultSearchEngine: webssearches
FF SelectedSearchEngine: webssearches
FF Homepage: hxxp://istart.webssearches.com/?type=hp&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\searchplugins\Ask.xml
FF SearchPlugin: C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: MediaPlayerplus - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\Extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com [2014-03-31]
FF Extension: HQVid8.1 - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-03-31]
FF Extension: Quick Start - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\Extensions\quick_start@gmail.com [2014-03-31]
FF Extension: Garmin Communicator - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-22]
FF Extension: YouTube to MP3 - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\Extensions\info@sharkcube.com.xpi [2013-05-07]
FF Extension: YouTube mp3 - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\Extensions\info@youtube-mp3.org.xpi [2013-05-07]
FF Extension: Movie2kDownloader - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\Extensions\movie2kdownloader@movie2kdownloader.com.xpi [2012-12-13]
FF Extension: YouTube to MP3 - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\Extensions\youtube2mp3@mondayx.de.xpi [2013-05-07]
FF Extension: Adblock Plus - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-01-03]
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\extensions\quick_start@gmail.com
FF Extension: Quick Start - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\p47sfus0.default\extensions\quick_start@gmail.com [2014-03-31]
FF HKCU\...\Firefox\Extensions: [{33f5b679-9ac2-48bb-b984-58d560ee519e}] - C:\Program Files (x86)\Re-markit Corp\158.xpi
FF Extension: Re-markit - C:\Program Files (x86)\Re-markit Corp\158.xpi [2014-03-31]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://istart.webssearches.com/?type=sc&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR DefaultSearchKeyword: webssearches
CHR DefaultSearchProvider: webssearches
CHR DefaultSearchURL: hxxp://istart.webssearches.com/web/?type=ds&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445&q={searchTerms}
CHR DefaultNewTabURL: 
CHR Extension: (Google Docs) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-28]
CHR Extension: (Google Drive) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-28]
CHR Extension: (YouTube) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-28]
CHR Extension: (Google Cast) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-03-26]
CHR Extension: (Google-Suche) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-28]
CHR Extension: (Re-markit) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcpfhaghaadpjpgocojgnlhjcieeooel [2014-03-31]
CHR Extension: (HQ-Video-Pro-1.9) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm [2014-03-31]
CHR Extension: (AdBlock) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-28]
CHR Extension: (WEB.DE MailCheck) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-01-30]
CHR Extension: (MediaPlayerplus) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\majjphhgppkndjjkmhhnbgafooenebhd [2014-03-31]
CHR Extension: (Google Wallet) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-28]
CHR Extension: (Quick Start) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-03-31]
CHR Extension: (Google Mail) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-28]
CHR HKLM-x32\...\Chrome\Extension: [blaofbhgbmeikidhlkmjhbkbfohpgekf] - C:\Program Files (x86)\Movie2KDownloader.com\Movie2KDownloader10.crx [2014-01-28]
CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\XX\AppData\Local\Wajam\Chrome\wajam.crx [2012-10-05]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-03-31]
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://istart.webssearches.com/?type=sc&ts=1396302866&from=tugs&uid=SAMSUNGXSP2004C_S07JJ10Y900445
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-03-08] ()
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [515584 2014-03-17] (Cherished Technololgy LIMITED)
R2 Re-markit; C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe [142848 2014-03-31] ()
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [496640 2014-03-31] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-01-11] (DT Soft Ltd)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66800 2013-01-17] (Logitech Inc.)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-01 17:07 - 2014-04-01 17:08 - 00020151 _____ () C:\Users\XX\Desktop\FRST.txt
2014-04-01 17:06 - 2014-04-01 17:07 - 00000000 ____D () C:\FRST
2014-04-01 17:05 - 2014-04-01 17:05 - 00380416 _____ () C:\Users\XX\Desktop\Gmer-19357.exe
2014-04-01 17:04 - 2014-04-01 17:04 - 02157056 _____ (Farbar) C:\Users\XX\Desktop\FRST64.exe
2014-04-01 17:01 - 2014-04-01 17:01 - 00000466 _____ () C:\Users\XX\Downloads\defogger_disable.log
2014-04-01 17:01 - 2014-04-01 17:01 - 00000000 _____ () C:\Users\XX\defogger_reenable
2014-04-01 16:59 - 2014-04-01 16:59 - 00050477 _____ () C:\Users\XX\Downloads\Defogger.exe
2014-04-01 16:44 - 2014-04-01 16:44 - 00000000 ___RD () C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-01 00:05 - 2014-04-01 16:38 - 00001079 _____ () C:\Users\XX\Desktop\Continue VuuPC Installation.lnk
2014-04-01 00:00 - 2014-04-01 00:00 - 00000000 ____D () C:\Users\XX\AppData\Local\Tuguu_SL
2014-03-31 23:59 - 2014-04-01 16:59 - 00000272 _____ () C:\Windows\Tasks\SpeedUpMyPC Maintenance.job
2014-03-31 23:59 - 2014-04-01 16:41 - 00000266 _____ () C:\Windows\Tasks\SpeedUpMyPC Startup.job
2014-03-31 23:59 - 2014-04-01 16:36 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP3.job
2014-03-31 23:59 - 2014-04-01 16:36 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2014-03-31 23:59 - 2014-04-01 00:19 - 00000380 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2014-03-31 23:59 - 2014-03-31 23:59 - 00003198 _____ () C:\Windows\System32\Tasks\SpeedUpMyPC Maintenance
2014-03-31 23:59 - 2014-03-31 23:59 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
2014-03-31 23:59 - 2014-03-31 23:59 - 00002822 _____ () C:\Windows\System32\Tasks\APSnotifierPP3
2014-03-31 23:59 - 2014-03-31 23:59 - 00002822 _____ () C:\Windows\System32\Tasks\APSnotifierPP2
2014-03-31 23:59 - 2014-03-31 23:59 - 00002486 _____ () C:\Windows\System32\Tasks\SpeedUpMyPC Startup
2014-03-31 23:59 - 2014-03-31 23:59 - 00001220 _____ () C:\Users\Public\Desktop\SpeedUpMyPC.lnk
2014-03-31 23:59 - 2014-03-31 23:59 - 00000314 _____ () C:\Users\XX\AppData\Roaming\aps.uninstall.scan.results
2014-03-31 23:59 - 2014-03-31 23:59 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Uniblue
2014-03-31 23:59 - 2014-03-31 23:59 - 00000000 ____D () C:\Program Files (x86)\Uniblue
2014-03-31 23:57 - 2014-04-01 16:36 - 00001522 _____ () C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-5.job
2014-03-31 23:57 - 2014-04-01 16:36 - 00001454 _____ () C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-1.job
2014-03-31 23:57 - 2014-04-01 16:36 - 00001430 _____ () C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-2.job
2014-03-31 23:57 - 2014-03-31 23:57 - 00004552 _____ () C:\Windows\System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-5
2014-03-31 23:57 - 2014-03-31 23:57 - 00004484 _____ () C:\Windows\System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-1
2014-03-31 23:57 - 2014-03-31 23:57 - 00004460 _____ () C:\Windows\System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-2
2014-03-31 23:56 - 2014-04-01 16:36 - 00003120 _____ () C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-3.job
2014-03-31 23:56 - 2014-04-01 16:36 - 00002198 _____ () C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-4.job
2014-03-31 23:56 - 2014-03-31 23:57 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-03-31 23:56 - 2014-03-31 23:56 - 00006150 _____ () C:\Windows\System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-3
2014-03-31 23:56 - 2014-03-31 23:56 - 00005228 _____ () C:\Windows\System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-4
2014-03-31 23:56 - 2014-03-31 23:56 - 00000000 ____D () C:\Users\XX\AppData\Roaming\SupTab
2014-03-31 23:56 - 2014-03-31 23:56 - 00000000 ____D () C:\ProgramData\WPM
2014-03-31 23:56 - 2014-03-31 23:56 - 00000000 ____D () C:\ProgramData\IePluginService
2014-03-31 23:56 - 2014-03-31 23:56 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-03-31 23:55 - 2014-04-01 16:36 - 00002356 _____ () C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4.job
2014-03-31 23:55 - 2014-04-01 16:36 - 00001438 _____ () C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5.job
2014-03-31 23:55 - 2014-04-01 16:36 - 00001356 _____ () C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-1.job
2014-03-31 23:55 - 2014-04-01 16:36 - 00001346 _____ () C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2.job
2014-03-31 23:55 - 2014-03-31 23:55 - 01172776 _____ (AnyProtect.com) C:\Users\XX\AppData\Local\nsb776A.tmp
2014-03-31 23:55 - 2014-03-31 23:55 - 00005386 _____ () C:\Windows\System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4
2014-03-31 23:55 - 2014-03-31 23:55 - 00004468 _____ () C:\Windows\System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5
2014-03-31 23:55 - 2014-03-31 23:55 - 00004386 _____ () C:\Windows\System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-1
2014-03-31 23:55 - 2014-03-31 23:55 - 00004376 _____ () C:\Windows\System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2
2014-03-31 23:54 - 2014-04-01 16:36 - 00002762 _____ () C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3.job
2014-03-31 23:54 - 2014-03-31 23:55 - 00000000 ____D () C:\Program Files (x86)\HQVid8.1
2014-03-31 23:54 - 2014-03-31 23:54 - 00005792 _____ () C:\Windows\System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3
2014-03-31 23:53 - 2014-04-01 16:39 - 00000386 _____ () C:\Windows\Tasks\Re-markit Update.job
2014-03-31 23:53 - 2014-04-01 16:36 - 00000384 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-03-31 23:53 - 2014-03-31 23:53 - 00003028 _____ () C:\Windows\System32\Tasks\Re-markit Update
2014-03-31 23:53 - 2014-03-31 23:53 - 00002966 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-03-31 23:53 - 2014-03-31 23:53 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-31 23:53 - 2014-03-31 23:53 - 00000000 ____D () C:\Users\XX\AppData\Local\SearchProtect
2014-03-31 23:53 - 2014-03-31 23:53 - 00000000 ____D () C:\Program Files (x86)\Re-markit Corp
2014-03-31 23:51 - 2014-03-31 23:51 - 00400928 _____ () C:\Users\XX\Downloads\Player.exe
2014-03-31 21:43 - 2014-03-31 21:55 - 00000000 ____D () C:\Users\XX\Desktop\teamspeak3-server_win64
2014-03-31 21:42 - 2014-03-31 21:42 - 00001374 _____ () C:\Users\XX\Desktop\Die Installation von TeamSpeak Server (64 Bit) fortsetzen.lnk
2014-03-30 18:36 - 2014-03-30 18:36 - 00000000 ____D () C:\Users\XX\AppData\Local\FreeOCR
2014-03-30 18:32 - 2014-03-30 18:50 - 00000000 ____D () C:\FreeOCR
2014-03-30 18:32 - 2014-03-30 18:32 - 00000000 ____D () C:\ProgramData\Registry Helper
2014-03-30 18:32 - 2007-03-10 09:11 - 02680320 _____ (HiComponents) C:\Windows\SysWOW64\ImageEnXLibrary.ocx
2014-03-30 18:31 - 2014-04-01 17:01 - 00000276 _____ () C:\Windows\Tasks\FF Watcher {E1EDC092-4024-4F14-B62E-651678AAC76A}.job
2014-03-30 18:31 - 2014-03-30 18:31 - 00003244 _____ () C:\Windows\System32\Tasks\FF Watcher {E1EDC092-4024-4F14-B62E-651678AAC76A}
2014-03-30 18:28 - 2014-03-30 18:28 - 00414625 _____ ( ) C:\Users\XX\Downloads\freeocr422.exe
2014-03-16 21:41 - 2014-03-31 21:43 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-03-16 21:41 - 2014-03-16 21:41 - 05007895 _____ () C:\Users\XX\Downloads\teamspeak3-server_win64-3.0.10.zip
2014-03-16 21:40 - 2014-03-16 21:40 - 00710848 _____ ( ) C:\Users\XX\Downloads\COMPUTER_BILD-Download-Manager_fuer_teamspeak3-server_win64-3.0.10.exe
2014-03-16 21:38 - 2014-03-31 23:25 - 00000000 ____D () C:\Users\XX\AppData\Roaming\TS3Client
2014-03-16 21:38 - 2014-03-30 18:25 - 00001044 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-03-16 21:35 - 2014-03-16 21:37 - 29498592 _____ (TeamSpeak Systems GmbH) C:\Users\XX\Downloads\TeamSpeak3-Client-win64-3.0.14.exe
2014-03-15 19:08 - 2014-03-15 19:10 - 27601296 _____ (TeamSpeak Systems GmbH) C:\Users\XX\Downloads\TeamSpeak3-Client-win32-3.0.14.exe
2014-03-14 17:55 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-14 17:55 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-14 17:55 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-14 17:55 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-14 17:55 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-14 17:55 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-14 17:55 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-14 17:55 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-14 17:55 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-14 17:55 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-14 17:55 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-14 17:55 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-14 17:55 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-14 17:55 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-14 17:55 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-14 17:55 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-14 17:55 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-14 17:55 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-14 17:55 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-14 17:55 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-14 17:55 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-14 17:55 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-14 17:55 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-14 17:55 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-14 17:55 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-14 17:55 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-14 17:55 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-14 17:55 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-14 17:55 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-14 17:55 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-14 17:55 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-14 17:55 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-14 17:55 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-14 17:55 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-14 17:55 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-14 17:55 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-14 17:55 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-14 17:55 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-14 17:55 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-14 17:55 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-14 17:55 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-14 17:55 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-14 17:55 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-14 17:55 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-14 17:55 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-14 17:55 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-14 17:52 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-14 17:52 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-08 17:04 - 2014-03-31 18:14 - 00000000 ____D () C:\Users\XX\AppData\Local\DayZ
2014-03-08 17:04 - 2014-03-08 17:46 - 00000000 ____D () C:\Users\XX\Documents\DayZ
2014-03-08 17:03 - 2014-03-08 17:04 - 00017399 _____ () C:\Windows\DirectX.log
2014-03-07 19:14 - 2014-03-07 19:14 - 00000222 _____ () C:\Users\XX\Desktop\DayZ.url

==================== One Month Modified Files and Folders =======

2014-04-01 17:08 - 2014-04-01 17:07 - 00020151 _____ () C:\Users\XX\Desktop\FRST.txt
2014-04-01 17:07 - 2014-04-01 17:06 - 00000000 ____D () C:\FRST
2014-04-01 17:05 - 2014-04-01 17:05 - 00380416 _____ () C:\Users\XX\Desktop\Gmer-19357.exe
2014-04-01 17:04 - 2014-04-01 17:04 - 02157056 _____ (Farbar) C:\Users\XX\Desktop\FRST64.exe
2014-04-01 17:01 - 2014-04-01 17:01 - 00000466 _____ () C:\Users\XX\Downloads\defogger_disable.log
2014-04-01 17:01 - 2014-04-01 17:01 - 00000000 _____ () C:\Users\XX\defogger_reenable
2014-04-01 17:01 - 2014-03-30 18:31 - 00000276 _____ () C:\Windows\Tasks\FF Watcher {E1EDC092-4024-4F14-B62E-651678AAC76A}.job
2014-04-01 17:01 - 2013-01-03 15:21 - 00000000 ____D () C:\Users\XX
2014-04-01 16:59 - 2014-04-01 16:59 - 00050477 _____ () C:\Users\XX\Downloads\Defogger.exe
2014-04-01 16:59 - 2014-03-31 23:59 - 00000272 _____ () C:\Windows\Tasks\SpeedUpMyPC Maintenance.job
2014-04-01 16:44 - 2014-04-01 16:44 - 00000000 ___RD () C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-01 16:42 - 2009-07-14 19:58 - 00699432 _____ () C:\Windows\system32\perfh007.dat
2014-04-01 16:42 - 2009-07-14 19:58 - 00149572 _____ () C:\Windows\system32\perfc007.dat
2014-04-01 16:42 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-01 16:42 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-01 16:42 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-01 16:41 - 2014-03-31 23:59 - 00000266 _____ () C:\Windows\Tasks\SpeedUpMyPC Startup.job
2014-04-01 16:41 - 2013-05-12 00:58 - 01163254 _____ () C:\Windows\WindowsUpdate.log
2014-04-01 16:39 - 2014-03-31 23:53 - 00000386 _____ () C:\Windows\Tasks\Re-markit Update.job
2014-04-01 16:38 - 2014-04-01 00:05 - 00001079 _____ () C:\Users\XX\Desktop\Continue VuuPC Installation.lnk
2014-04-01 16:38 - 2013-01-04 12:13 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-01 16:37 - 2013-04-21 15:28 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-01 16:36 - 2014-03-31 23:59 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP3.job
2014-04-01 16:36 - 2014-03-31 23:59 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2014-04-01 16:36 - 2014-03-31 23:57 - 00001522 _____ () C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-5.job
2014-04-01 16:36 - 2014-03-31 23:57 - 00001454 _____ () C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-1.job
2014-04-01 16:36 - 2014-03-31 23:57 - 00001430 _____ () C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-2.job
2014-04-01 16:36 - 2014-03-31 23:56 - 00003120 _____ () C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-3.job
2014-04-01 16:36 - 2014-03-31 23:56 - 00002198 _____ () C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-4.job
2014-04-01 16:36 - 2014-03-31 23:55 - 00002356 _____ () C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4.job
2014-04-01 16:36 - 2014-03-31 23:55 - 00001438 _____ () C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5.job
2014-04-01 16:36 - 2014-03-31 23:55 - 00001356 _____ () C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-1.job
2014-04-01 16:36 - 2014-03-31 23:55 - 00001346 _____ () C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2.job
2014-04-01 16:36 - 2014-03-31 23:54 - 00002762 _____ () C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3.job
2014-04-01 16:36 - 2014-03-31 23:53 - 00000384 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-04-01 16:36 - 2014-01-29 00:20 - 00116030 _____ () C:\Windows\PFRO.log
2014-04-01 16:36 - 2014-01-26 22:56 - 00010155 _____ () C:\Windows\setupact.log
2014-04-01 16:36 - 2013-01-03 16:35 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-01 16:36 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-01 00:19 - 2014-03-31 23:59 - 00000380 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2014-04-01 00:16 - 2013-04-21 15:28 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-01 00:00 - 2014-04-01 00:00 - 00000000 ____D () C:\Users\XX\AppData\Local\Tuguu_SL
2014-03-31 23:59 - 2014-03-31 23:59 - 00003198 _____ () C:\Windows\System32\Tasks\SpeedUpMyPC Maintenance
2014-03-31 23:59 - 2014-03-31 23:59 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
2014-03-31 23:59 - 2014-03-31 23:59 - 00002822 _____ () C:\Windows\System32\Tasks\APSnotifierPP3
2014-03-31 23:59 - 2014-03-31 23:59 - 00002822 _____ () C:\Windows\System32\Tasks\APSnotifierPP2
2014-03-31 23:59 - 2014-03-31 23:59 - 00002486 _____ () C:\Windows\System32\Tasks\SpeedUpMyPC Startup
2014-03-31 23:59 - 2014-03-31 23:59 - 00001220 _____ () C:\Users\Public\Desktop\SpeedUpMyPC.lnk
2014-03-31 23:59 - 2014-03-31 23:59 - 00000314 _____ () C:\Users\XX\AppData\Roaming\aps.uninstall.scan.results
2014-03-31 23:59 - 2014-03-31 23:59 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Uniblue
2014-03-31 23:59 - 2014-03-31 23:59 - 00000000 ____D () C:\Program Files (x86)\Uniblue
2014-03-31 23:57 - 2014-03-31 23:57 - 00004552 _____ () C:\Windows\System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-5
2014-03-31 23:57 - 2014-03-31 23:57 - 00004484 _____ () C:\Windows\System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-1
2014-03-31 23:57 - 2014-03-31 23:57 - 00004460 _____ () C:\Windows\System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-2
2014-03-31 23:57 - 2014-03-31 23:56 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-03-31 23:56 - 2014-03-31 23:56 - 00006150 _____ () C:\Windows\System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-3
2014-03-31 23:56 - 2014-03-31 23:56 - 00005228 _____ () C:\Windows\System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-4
2014-03-31 23:56 - 2014-03-31 23:56 - 00000000 ____D () C:\Users\XX\AppData\Roaming\SupTab
2014-03-31 23:56 - 2014-03-31 23:56 - 00000000 ____D () C:\ProgramData\WPM
2014-03-31 23:56 - 2014-03-31 23:56 - 00000000 ____D () C:\ProgramData\IePluginService
2014-03-31 23:56 - 2014-03-31 23:56 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-03-31 23:56 - 2013-01-25 13:09 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-31 23:55 - 2014-03-31 23:55 - 01172776 _____ (AnyProtect.com) C:\Users\XX\AppData\Local\nsb776A.tmp
2014-03-31 23:55 - 2014-03-31 23:55 - 00005386 _____ () C:\Windows\System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4
2014-03-31 23:55 - 2014-03-31 23:55 - 00004468 _____ () C:\Windows\System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5
2014-03-31 23:55 - 2014-03-31 23:55 - 00004386 _____ () C:\Windows\System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-1
2014-03-31 23:55 - 2014-03-31 23:55 - 00004376 _____ () C:\Windows\System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2
2014-03-31 23:55 - 2014-03-31 23:54 - 00000000 ____D () C:\Program Files (x86)\HQVid8.1
2014-03-31 23:54 - 2014-03-31 23:54 - 00005792 _____ () C:\Windows\System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3
2014-03-31 23:54 - 2014-01-28 18:08 - 00002424 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-31 23:53 - 2014-03-31 23:53 - 00003028 _____ () C:\Windows\System32\Tasks\Re-markit Update
2014-03-31 23:53 - 2014-03-31 23:53 - 00002966 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-03-31 23:53 - 2014-03-31 23:53 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-31 23:53 - 2014-03-31 23:53 - 00000000 ____D () C:\Users\XX\AppData\Local\SearchProtect
2014-03-31 23:53 - 2014-03-31 23:53 - 00000000 ____D () C:\Program Files (x86)\Re-markit Corp
2014-03-31 23:53 - 2013-08-28 22:06 - 00000000 _____ () C:\END
2014-03-31 23:53 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-31 23:53 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-31 23:51 - 2014-03-31 23:51 - 00400928 _____ () C:\Users\XX\Downloads\Player.exe
2014-03-31 23:25 - 2014-03-16 21:38 - 00000000 ____D () C:\Users\XX\AppData\Roaming\TS3Client
2014-03-31 21:55 - 2014-03-31 21:43 - 00000000 ____D () C:\Users\XX\Desktop\teamspeak3-server_win64
2014-03-31 21:43 - 2014-03-16 21:41 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-03-31 21:42 - 2014-03-31 21:42 - 00001374 _____ () C:\Users\XX\Desktop\Die Installation von TeamSpeak Server (64 Bit) fortsetzen.lnk
2014-03-31 18:14 - 2014-03-08 17:04 - 00000000 ____D () C:\Users\XX\AppData\Local\DayZ
2014-03-30 18:50 - 2014-03-30 18:32 - 00000000 ____D () C:\FreeOCR
2014-03-30 18:36 - 2014-03-30 18:36 - 00000000 ____D () C:\Users\XX\AppData\Local\FreeOCR
2014-03-30 18:32 - 2014-03-30 18:32 - 00000000 ____D () C:\ProgramData\Registry Helper
2014-03-30 18:31 - 2014-03-30 18:31 - 00003244 _____ () C:\Windows\System32\Tasks\FF Watcher {E1EDC092-4024-4F14-B62E-651678AAC76A}
2014-03-30 18:28 - 2014-03-30 18:28 - 00414625 _____ ( ) C:\Users\XX\Downloads\freeocr422.exe
2014-03-30 18:25 - 2014-03-16 21:38 - 00001044 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-03-30 14:11 - 2013-04-21 15:28 - 00004098 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-30 14:11 - 2013-04-21 15:28 - 00003846 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-29 02:00 - 2013-01-19 17:41 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Skype
2014-03-18 23:38 - 2013-07-12 13:24 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-18 23:37 - 2010-02-10 00:33 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-16 21:41 - 2014-03-16 21:41 - 05007895 _____ () C:\Users\XX\Downloads\teamspeak3-server_win64-3.0.10.zip
2014-03-16 21:40 - 2014-03-16 21:40 - 00710848 _____ ( ) C:\Users\XX\Downloads\COMPUTER_BILD-Download-Manager_fuer_teamspeak3-server_win64-3.0.10.exe
2014-03-16 21:38 - 2013-01-03 17:30 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-03-16 21:37 - 2014-03-16 21:35 - 29498592 _____ (TeamSpeak Systems GmbH) C:\Users\XX\Downloads\TeamSpeak3-Client-win64-3.0.14.exe
2014-03-15 19:10 - 2014-03-15 19:08 - 27601296 _____ (TeamSpeak Systems GmbH) C:\Users\XX\Downloads\TeamSpeak3-Client-win32-3.0.14.exe
2014-03-15 08:06 - 2009-07-14 06:45 - 00312912 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-11 23:38 - 2013-01-04 12:13 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-11 23:38 - 2013-01-04 12:13 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-11 23:38 - 2013-01-04 12:13 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-08 17:46 - 2014-03-08 17:04 - 00000000 ____D () C:\Users\XX\Documents\DayZ
2014-03-08 17:04 - 2014-03-08 17:03 - 00017399 _____ () C:\Windows\DirectX.log
2014-03-07 19:14 - 2014-03-07 19:14 - 00000222 _____ () C:\Users\XX\Desktop\DayZ.url
2014-03-02 14:45 - 2013-01-22 13:07 - 00000000 ____D () C:\Markus

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.1672.dll


Some content of TEMP:
====================
C:\Users\XX\AppData\Local\Temp\avgnt.exe
C:\Users\XX\AppData\Local\Temp\BackupSetup.exe
C:\Users\XX\AppData\Local\Temp\ICReinstall_COMPUTER_BILD-Download-Manager_fuer_teamspeak3-server_win64-3.0.10.exe
C:\Users\XX\AppData\Local\Temp\nsyCF0.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-30 01:51

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by XX at 2014-04-01 17:08:28
Running from C:\Users\XX\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

applicationupdater (HKCU\...\SOE-C:/Users/XX/AppData/Local/Sony Online Entertainment/ApplicationUpdater) (Version:  - Sony Online Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
gamelauncher-ps2-psg (HKCU\...\SOE-C:/Spiele/Installed Games/PlanetSide 2 PSG) (Version:  - Sony Online Entertainment)
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Logitech Gaming Software 8.46 (HKLM\...\Logitech Gaming Software) (Version: 8.46.27 - Logitech Inc.)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Corporation (Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft LifeCam (HKLM\...\{5CE7E3F5-9803-4F32-AA89-2D8848A80109}) (Version: 3.60.253.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
NVIDIA 3D Vision Controller-Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 314.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.115.743 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Systemsteuerung 314.22 (Version: 314.22 - NVIDIA Corporation) Hidden
NVIDIA Update 1.12.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.12.12 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.12.12 - NVIDIA Corporation) Hidden
PlanetSide 2 (HKCU\...\soe-PlanetSide 2 PSG) (Version: 1.0.3.183 - Sony Online Entertainment)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
VisualBee for Microsoft PowerPoint (HKCU\...\VisualBee for Microsoft PowerPoint) (Version: V3.9 - VisualBee.com)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Restore Points  =========================

26-03-2014 16:40:48 Geplanter Prüfpunkt
31-03-2014 21:54:44 Uniblue SpeedUpMyPC installation

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {043C49B3-49C0-4C46-B741-22889C954FE9} - System32\Tasks\Re-markit_wd => C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe [2014-03-31] () <==== ATTENTION
Task: {115BEA52-E34F-4DF7-8358-2E4116A2A9B6} - System32\Tasks\SpeedUpMyPC Startup => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2014-03-24] (Uniblue Systems Limited)
Task: {1A86F0D9-2FF6-446E-9D36-61D029539588} - System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-5 => C:\Program Files (x86)\MediaPlayerplus\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-5.exe [2014-03-31] (Freeven)
Task: {3215B076-F8E9-4A9F-AD39-F52255FBE912} - System32\Tasks\Re-markit Update => C:\Program Files (x86)\Re-markit Corp\ReMar.exe [2014-03-31] () <==== ATTENTION
Task: {4215BCE2-AE35-4F4B-98FD-23755A937773} - System32\Tasks\{F5851E32-6928-4D3A-B944-B2F0C249977E} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.107/de/go/help.faq.installer?LastError=1603
Task: {4C4FEA0C-3933-4B83-809B-9F303E8AF38B} - System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4 => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4.exe [2014-03-31] (High-QualityV9)
Task: {539C701C-F20D-443B-85DC-A75F79F5734B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-21] (Google Inc.)
Task: {6331D747-ED2F-44B4-BF32-4D3EA02084F8} - System32\Tasks\FF Watcher {E1EDC092-4024-4F14-B62E-651678AAC76A} => C:\Program Files\V-bates\PrefHelper.exe
Task: {6A8852FD-97F5-49FA-A974-DF675679ADF8} - System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3 => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3.exe [2014-03-31] (High-QualityV9)
Task: {75BDC5BB-053A-44CE-AA08-9E98359782C9} - System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2 => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2.exe [2014-03-31] (High-QualityV9)
Task: {7A7C9AA5-9E5A-4644-BEFE-09E1C3DF7238} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {7DF8964F-3AA4-446E-9D9E-53C4ECD58595} - System32\Tasks\{40E5E3AE-E8B0-4855-A9DE-D66C8956FFCB} => Firefox.exe hxxp://ui.skype.com/ui/0/6.6.0.106/de/go/help.faq.installer?LastError=1603
Task: {9C8C467A-2C06-4E20-BF6A-11274079389E} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {A407C551-32D2-4F39-84DB-96FB0AE49A6C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-21] (Google Inc.)
Task: {AAAF4FAA-9EE7-49B4-AEC2-369C31631A08} - System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-4 => C:\Program Files (x86)\MediaPlayerplus\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-4.exe [2014-03-31] (Freeven)
Task: {B159E1F0-4DE4-442D-9E32-BFA2CFF47429} - System32\Tasks\{3AAF1E07-4327-40EB-9302-04DE4A710F78} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.107/de/go/help.faq.installer?LastError=1603
Task: {B4878D76-2C7A-441B-9442-8CCD992F9314} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: {BB135410-E681-495A-AD8D-844401CE2264} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {BD816825-5F0F-438D-BBEF-96E54C4CA27B} - System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-1 => C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-codedownloader.exe [2014-03-31] (Freeven)
Task: {C0F23B12-4672-4E1D-A16B-EB66EA345C55} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2013-08-29] ()
Task: {C74064B6-D611-407A-86B8-2BFA088A0A68} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {CFFA50AB-38EC-4FEF-BDCB-1D5FB542C1F2} - System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-3 => C:\Program Files (x86)\MediaPlayerplus\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-3.exe [2014-03-31] (Freeven)
Task: {D1B50808-650F-4FCC-B4DA-87FAA4BC19A5} - System32\Tasks\SpeedUpMyPC Maintenance => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2014-03-24] (Uniblue Systems Limited)
Task: {D6B9708A-EA11-459A-B360-304A04CB1292} - System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5 => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5.exe [2014-03-31] (High-QualityV9)
Task: {F0A4CC9F-0694-4A65-AA09-BD0FD1796B62} - System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-1 => C:\Program Files (x86)\HQVid8.1\HQVid8.1-codedownloader.exe [2014-03-31] (High-QualityV9)
Task: {F354EA9B-FB5B-45E5-B681-E223EAD8951E} - System32\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-2 => C:\Program Files (x86)\MediaPlayerplus\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-2.exe [2014-03-31] (Freeven)
Task: C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-1.job => C:\Program Files (x86)\HQVid8.1\HQVid8.1-codedownloader.exe
Task: C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2.job => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2.exe
Task: C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3.job => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3.exe
Task: C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4.job => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4.exe
Task: C:\Windows\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5.job => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-1.job => C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-codedownloader.exe
Task: C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-2.job => C:\Program Files (x86)\MediaPlayerplus\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-2.exe
Task: C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-3.job => C:\Program Files (x86)\MediaPlayerplus\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-3.exe
Task: C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-4.job => C:\Program Files (x86)\MediaPlayerplus\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-4.exe
Task: C:\Windows\Tasks\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-5.job => C:\Program Files (x86)\MediaPlayerplus\f3f0858e-82fc-41a9-afa1-4fa3e3eb766f-5.exe
Task: C:\Windows\Tasks\FF Watcher {E1EDC092-4024-4F14-B62E-651678AAC76A}.job => C:\Program Files\V-bates\PrefHelper.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Re-markit Update.job => C:\Program Files (x86)\Re-markit Corp\ReMar.exe <==== ATTENTION
Task: C:\Windows\Tasks\Re-markit_wd.job => C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe <==== ATTENTION
Task: C:\Windows\Tasks\SpeedUpMyPC Maintenance.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe
Task: C:\Windows\Tasks\SpeedUpMyPC Startup.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe

==================== Loaded Modules (whitelisted) =============

2013-01-03 16:35 - 2013-03-15 06:16 - 00086304 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-03-31 23:53 - 2014-03-31 23:53 - 00077312 _____ () C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe
2014-03-31 23:53 - 2014-03-31 23:53 - 00142848 _____ () C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe
2013-01-03 16:12 - 2012-09-19 19:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-03-31 23:53 - 2014-03-31 23:53 - 00133120 _____ () C:\Program Files (x86)\Re-markit Corp\Re-markit158.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Launch LCore => C:\Program Files\Logitech Gaming Software\LCore.exe /minimized
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent

==================== Faulty Device Manager Devices =============

Name: Prolific USB-to-Serial Comm Port (COM4)
Description: Prolific USB-to-Serial Comm Port
Class Guid: {4d36e978-e325-11ce-bfc1-08002be10318}
Manufacturer: Prolific
Service: Ser2pl
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/31/2014 09:42:10 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (03/30/2014 06:32:17 PM) (Source: Registry Helper Service) (User: )
Description: Error: Service started

Error: (03/16/2014 09:26:04 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (03/08/2014 04:49:48 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: update.exe_TeamSpeak 3 Client Updater, Version: 1.0.0.0, Zeitstempel: 0x5225aa6e
Name des fehlerhaften Moduls: QtCore4.dll, Version: 4.8.3.0, Zeitstempel: 0x50a20ceb
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002acac
ID des fehlerhaften Prozesses: 0xee8
Startzeit der fehlerhaften Anwendung: 0xupdate.exe_TeamSpeak 3 Client Updater0
Pfad der fehlerhaften Anwendung: update.exe_TeamSpeak 3 Client Updater1
Pfad des fehlerhaften Moduls: update.exe_TeamSpeak 3 Client Updater2
Berichtskennung: update.exe_TeamSpeak 3 Client Updater3

Error: (01/23/2014 07:26:11 PM) (Source: Application Hang) (User: )
Description: Programm soffice.bin, Version 3.4.9593.500 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: bc0

Startzeit: 01cf18583ddb3783

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

Berichts-ID:

Error: (12/17/2013 10:46:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 25.0.1.5064, Zeitstempel: 0x5282f204
Name des fehlerhaften Moduls: xul.dll, Version: 25.0.1.5064, Zeitstempel: 0x5282f10e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00118f87
ID des fehlerhaften Prozesses: 0x938
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (12/14/2013 10:02:10 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 25.0.1.5064, Zeitstempel: 0x5282f204
Name des fehlerhaften Moduls: xul.dll, Version: 25.0.1.5064, Zeitstempel: 0x5282f10e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00118f87
ID des fehlerhaften Prozesses: 0xad0
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (11/26/2013 06:25:24 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TNClaunch.exe, Version: 1.3.0.0, Zeitstempel: 0x4986e784
Name des fehlerhaften Moduls: TNClaunch.exe, Version: 1.3.0.0, Zeitstempel: 0x4986e784
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00010941
ID des fehlerhaften Prozesses: 0x130c
Startzeit der fehlerhaften Anwendung: 0xTNClaunch.exe0
Pfad der fehlerhaften Anwendung: TNClaunch.exe1
Pfad des fehlerhaften Moduls: TNClaunch.exe2
Berichtskennung: TNClaunch.exe3

Error: (11/26/2013 06:24:02 PM) (Source: Application Hang) (User: )
Description: Programm winmgr.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: c14

Startzeit: 01ceeac298b2a3a5

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\TNC640\340594\SYS\win32\bin\winmgr.exe

Berichts-ID:

Error: (11/22/2013 08:22:22 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avnotify.exe, Version: 13.6.20.2100, Zeitstempel: 0x51e6b921
Name des fehlerhaften Moduls: avnotify.exe, Version: 13.6.20.2100, Zeitstempel: 0x51e6b921
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001487
ID des fehlerhaften Prozesses: 0x77c
Startzeit der fehlerhaften Anwendung: 0xavnotify.exe0
Pfad der fehlerhaften Anwendung: avnotify.exe1
Pfad des fehlerhaften Moduls: avnotify.exe2
Berichtskennung: avnotify.exe3


System errors:
=============
Error: (04/01/2014 04:39:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (04/01/2014 04:39:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (04/01/2014 04:37:36 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (04/01/2014 04:37:36 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (03/31/2014 05:49:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (03/31/2014 05:49:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (03/30/2014 10:52:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (03/30/2014 10:52:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (03/30/2014 05:48:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (03/30/2014 05:48:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================
Error: (03/31/2014 09:42:10 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\XX\Downloads\computerbild_downloader_fuer_winrar.exe

Error: (03/30/2014 06:32:17 PM) (Source: Registry Helper Service)(User: )
Description: Service started

Error: (03/16/2014 09:26:04 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\XX\Downloads\computerbild_downloader_fuer_winrar.exe

Error: (03/08/2014 04:49:48 PM) (Source: Application Error)(User: )
Description: update.exe_TeamSpeak 3 Client Updater1.0.0.05225aa6eQtCore4.dll4.8.3.050a20cebc0000005000000000002acacee801cf3add6d8780ecC:\Programme\TeamSpeak 3 Client\update.exeC:\Programme\TeamSpeak 3 Client\QtCore4.dlle529df14-a6d0-11e3-be60-902b34a84c0a

Error: (01/23/2014 07:26:11 PM) (Source: Application Hang)(User: )
Description: soffice.bin3.4.9593.500bc001cf18583ddb37830C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

Error: (12/17/2013 10:46:41 PM) (Source: Application Error)(User: )
Description: firefox.exe25.0.1.50645282f204xul.dll25.0.1.50645282f10ec000000500118f8793801cefb690181721bC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll547a3ccd-675c-11e3-8bca-902b34a84c0a

Error: (12/14/2013 10:02:10 PM) (Source: Application Error)(User: )
Description: firefox.exe25.0.1.50645282f204xul.dll25.0.1.50645282f10ec000000500118f87ad001cef906141861d4C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll9d991208-64fa-11e3-8703-902b34a84c0a

Error: (11/26/2013 06:25:24 PM) (Source: Application Error)(User: )
Description: TNClaunch.exe1.3.0.04986e784TNClaunch.exe1.3.0.04986e784c000000500010941130c01ceeac40f55c9fdC:\Program Files (x86)\TNC640\340594\SYS\BATCH\TNClaunch.exeC:\Program Files (x86)\TNC640\340594\SYS\BATCH\TNClaunch.exe5975a769-56b7-11e3-8e79-902b34a84c0a

Error: (11/26/2013 06:24:02 PM) (Source: Application Hang)(User: )
Description: winmgr.exe1.0.0.1c1401ceeac298b2a3a516C:\Program Files (x86)\TNC640\340594\SYS\win32\bin\winmgr.exe

Error: (11/22/2013 08:22:22 PM) (Source: Application Error)(User: )
Description: avnotify.exe13.6.20.210051e6b921avnotify.exe13.6.20.210051e6b921c00000050000148777c01cee7afbf3c30f7C:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exeC:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exe073adbcb-53a3-11e3-9030-902b34a84c0a


==================== Memory info =========================== 

Percentage of memory in use: 18%
Total physical RAM: 8173.43 MB
Available physical RAM: 6622.69 MB
Total Pagefile: 16345.04 MB
Available Pagefile: 14729.12 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:186.21 GB) (Free:45.51 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 186 GB) (Disk ID: 25D125D0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=186 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-01 17:23:55
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_SP2004C rev.VM100-33 186,31GB
Running: Gmer-19357.exe; Driver: C:\Users\XX\AppData\Local\Temp\pxldipoc.sys


---- User code sections - GMER 2.1 ----

.text    C:\ProgramData\IePluginService\PluginService.exe[1492] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                         00000000754b1465 2 bytes [4B, 75]
.text    C:\ProgramData\IePluginService\PluginService.exe[1492] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                        00000000754b14bb 2 bytes [4B, 75]
.text    ...                                                                                                                                                                                                    * 2
.text    C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe[3016] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                   00000000754b1465 2 bytes [4B, 75]
.text    C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe[3016] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                  00000000754b14bb 2 bytes [4B, 75]
.text    ...                                                                                                                                                                                                    * 2
---- Processes - GMER 2.1 ----

Process  C:\ProgramData\IePluginService\PluginService.exe (*** suspicious ***) @ C:\ProgramData\IePluginService\PluginService.exe [1492] (IePlugin Service/Cherished Technololgy LIMITED)(2014-03-31 21:56:45)  0000000000c20000
Process  C:\ProgramData\WPM\wprotectmanager.exe (*** suspicious ***) @ C:\ProgramData\WPM\wprotectmanager.exe [1652] (WPM Service/Cherished Technololgy LIMITED)(2                                              0000000000820000

---- EOF - GMER 2.1 ----