Hallo,

bisher habe ich jeden kleineren Befall mit den üblichen Programmen beseitigen können, aber seit Wochen kämpfe ich mit dem folgenden Problem: jeder neue Tab führt zu AVG isearch. Ich habe bereits verschiedene Programme durchlaufen lassen, aber ich kann keinen anderen Default einstellen.

Gibt es eine einfache und verständliche Lösung?

Cheers,

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 28 days old and could be outdated)
Ran by LEW (administrator) on LEW-PC on 10-04-2014 18:09:20
Running from C:\Users\LEW\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\360rps.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\deepscan\QHActiveDefense.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(Digital Dynamic) C:\Program Files (x86)\Digital Dynamic\Advanced Backup Manager\backupsvc5.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Sleep Memory Optimizer\FFSService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
() C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Atheros) C:\Program Files (x86)\Acer\WDAgent\Ath_WlanAgent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseMemoryOptimzer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
() C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe
(NTeWORKS) C:\Program Files (x86)\PicPick\picpick.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe
(CyberGhost S.R.L.) C:\Program Files\CyberGhost 5\CyberGhost.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\360sd.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\360rp.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\IO Door Notification\IODoorNotification.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\safemon\360tray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Tracker Software Products (Canada) Ltd.) C:\Program Files\Tracker Software\PDF Viewer\PDFXCview.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12480616 2012-04-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-03-09] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1022592 2012-05-07] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-05-07] (Atheros Commnucations)
HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [Secure Applicayion] - C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe [259688 2012-04-19] ()
HKLM\...\Run: [360sd] - C:\PROGRAM FILES\360\360 INTERNET SECURITY\360sdrun.exe [273848 2014-01-09] (Qihu 360 Software Co., Ltd.)
HKLM-x32\...\Run: [IO Door Notification] - C:\Program Files (x86)\Acer\IO Door Notification\IODoorNotification.exe [2097256 2012-04-12] (Acer Incorporated)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1108048 2012-04-25] (Dritek System Inc.)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-26] (Intel Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1989920 2013-08-26] (Wondershare)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [224128 2014-03-04] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [360sd] - C:\PROGRAM FILES\360\360 INTERNET SECURITY\360sdrun.exe [273848 2014-01-09] (Qihu 360 Software Co., Ltd.)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [PicPick Start] - C:\Program Files (x86)\PicPick\picpick.exe [13258584 2013-08-27] (NTeWORKS)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [RfxSrvTray] - C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [CyberGhost] - C:\Program Files\CyberGhost 5\CyberGhost.EXE [358000 2014-01-16] (CyberGhost S.R.L.)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.search.us.com/v/2/?guid={F01D9469-883B-4FC5-9FCF-D6AC59B56AA5}&serpv=5
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {52378E0A-DEBA-4DE0-A72F-E142EF911C22} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10557
SearchScopes: HKCU - {7B3E4106-1EB8-4CA1-8785-A5805FA1C386} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
SearchScopes: HKCU - {7FDEF150-6606-4036-8C13-C28F9A8D94AF} URL = hxxp://search.us.com/serp?guid={F01D9469-883B-4FC5-9FCF-D6AC59B56AA5}&action=default_search&serpv=5&k={searchTerms}
SearchScopes: HKCU - {CC25033C-016D-4F4A-94C4-B99090416F66} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552&CUI=UN19131846763221425&UM=1
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589
FF NewTab: :: SUMMUM*BONUM - Customer, Care, Consulting
FF Homepage: :: SUMMUM*BONUM - Customer, Care, Consulting
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.0.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.0.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-30]
FF Extension: Integrated Google Calendar - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\intgcal@egarracingteam.com.ar.xpi [2014-03-30]
FF Extension: S3.Download Statusbar - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\s3download@statusbar.xpi [2014-03-30]
FF Extension: Adblock Plus - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-30]
FF Extension: Tab Mix Plus - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-04-06]
FF Extension: DownThemAll! - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-03-30]
FF Extension: Hotspot Shield Extension - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2014-03-25]

==================== Services (Whitelisted) =================

R2 360rp; C:\PROGRAM FILES\360\360 INTERNET SECURITY\360rps.exe [295608 2014-01-09] (Qihu 360 Software Co., Ltd.)
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [29912 2013-08-23] (AOMEI Tech Co., Ltd.)
R2 backupsvc5; C:\Program Files (x86)\Digital Dynamic\Advanced Backup Manager\backupsvc5.exe [1439232 2013-10-18] (Digital Dynamic)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64112 2014-01-16] (CyberGhost S.R.L)
R2 FFSOpzSvc; C:\Program Files\Sleep Memory Optimizer\FFSService.exe [141192 2011-09-17] (Acer Incorporated)
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [192856 2012-02-24] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151744 2014-02-02] (IObit)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
S3 scan; C:\Program Files\360\360 Internet Security\scan.dll [423144 2011-09-06] (S.C. BitDefender S.R.L)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S3 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 USecuAppSvc; C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe [235624 2012-04-19] ()
S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2014-01-21] (WiseCleaner.com)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Acer\WDAgent\Ath_WlanAgent.exe [77824 2012-05-03] (Atheros)
R2 ZhuDongFangYu; C:\PROGRAM FILES\360\360 INTERNET SECURITY\deepscan\QHActiveDefense.exe [228800 2013-12-24] (Qihu 360 Software Co., Ltd.)

==================== Drivers (Whitelisted) ====================

R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [97480 2013-11-27] (Qihu 360 Software Co., Ltd.)
R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [67272 2013-03-28] (Qihu 360 Software Co., Ltd.)
R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [305856 2013-11-29] (Qihu 360 Software Co., Ltd.)
R1 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [41152 2013-12-09] (Qihu 360 Software Co., Ltd.)
R1 360fsflt; C:\Windows\System32\DRIVERS\360FsFlt.sys [286912 2013-12-24] (Qihu 360 Software Co., Ltd.)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [30648 2013-05-07] ()
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [151480 2013-05-07] ()
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [17848 2013-02-06] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-03-03] (AVG Technologies)
R1 BAPIDRV; C:\Windows\System32\Drivers\BAPIDRV64.SYS [179904 2013-12-10] (Qihu 360 Software Co., Ltd.)
R3 irstrtdv; C:\Windows\System32\DRIVERS\irstrtdv.sys [26504 2012-02-22] (Intel Corporation)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-03-30] (Malwarebytes Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
S3 SPCP825K; C:\Windows\System32\DRIVERS\SPCP825K.sys [42056 2010-07-19] (SUNPLUS TECHNOLOGY Co., LTD.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-08-13] (Anchorfree Inc.)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
R2 VirtualImDisk; C:\Windows\System32\DRIVERS\virtualimdisk.sys [39464 2013-09-29] (Olof Lagerkvist)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-10 18:09 - 2014-04-10 18:09 - 00023001 _____ () C:\Users\LEW\Downloads\FRST.txt
2014-04-10 18:08 - 2014-04-10 18:09 - 00000000 ____D () C:\FRST
2014-04-10 18:08 - 2014-04-10 18:08 - 02157056 _____ (Farbar) C:\Users\LEW\Downloads\FRST64.exe
2014-04-10 16:43 - 2014-04-10 16:43 - 00000000 ___RD () C:\Users\LEW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-04-09 22:40 - 2014-04-10 16:42 - 00007330 _____ () C:\Windows\PFRO.log
2014-04-09 22:40 - 2014-04-10 16:42 - 00000280 _____ () C:\Windows\setupact.log
2014-04-09 22:40 - 2014-04-09 22:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-09 10:24 - 2014-04-09 10:26 - 00094720 ___SH () C:\Users\LEW\Desktop\Thumbs.db
2014-04-09 10:13 - 2014-04-09 10:23 - 00000000 ____D () C:\Program Files (x86)\PlotSoft
2014-04-09 10:12 - 2014-04-09 10:12 - 10746848 _____ (PlotSoft LLC) C:\Users\LEW\Downloads\PDFill_11.exe
2014-04-09 10:05 - 2014-04-09 10:05 - 06146560 _____ () C:\Users\LEW\Downloads\FreewarePDFUnlocker.msi
2014-04-09 09:47 - 2014-04-09 09:47 - 00000040 _____ () C:\Windows\winDecrypt.INI
2014-04-09 09:45 - 2014-04-09 09:45 - 00386904 _____ (Softonic ) C:\Users\LEW\Downloads\SoftonicDownloader_for_pdf-password-remover.exe
2014-04-09 08:18 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 08:18 - 2014-03-31 03:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 08:18 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-09 08:18 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 08:18 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 08:18 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 08:18 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 08:18 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 08:18 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 08:18 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 08:18 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 08:18 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 08:18 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 08:18 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 08:18 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 08:18 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-08 22:29 - 2014-04-08 22:29 - 16587248 _____ (Tracker Software Products Ltd ) C:\Users\LEW\Downloads\PDFX142Vwer.exe
2014-04-08 22:19 - 2014-04-08 22:19 - 00000000 ____D () C:\Users\LEW\AppData\Local\Adobe
2014-04-06 22:14 - 2014-04-10 16:46 - 01481097 _____ () C:\Windows\WindowsUpdate.log
2014-04-06 22:13 - 2014-04-06 22:13 - 00115352 _____ () C:\Users\LEW\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-06 21:52 - 2014-04-06 21:52 - 08508640 _____ (WiseCleaner.com ) C:\Users\LEW\Downloads\WiseCare365.exe
2014-04-06 21:29 - 2014-04-06 21:30 - 00391097 _____ () C:\Users\LEW\Downloads\avgremover.log
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple Computer
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple
2014-04-02 15:56 - 2014-04-02 15:56 - 00000000 ____D () C:\Users\LEW\AppData\Local\Skype
2014-03-30 09:41 - 2014-03-30 09:41 - 00026744 _____ () C:\Users\LEW\Downloads\bitshare.com.html
2014-03-30 08:14 - 2014-04-01 13:58 - 00000000 ____D () C:\Users\LEW\AppData\Local\CrashDumps
2014-03-30 08:03 - 2014-03-30 08:08 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-29 13:58 - 2014-03-30 08:03 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-29 13:58 - 2014-03-30 07:58 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-29 13:58 - 2014-03-29 13:58 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-03-29 13:58 - 2014-03-05 10:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-29 13:58 - 2014-03-05 10:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Wondershare
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Luke_Payne
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Lexware
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\BMExplorer
2014-03-28 12:49 - 2014-03-28 12:51 - 00000000 ____D () C:\Users\LEW\AppData\Local\CyberGhost
2014-03-28 12:48 - 2014-03-28 12:48 - 00000000 ____D () C:\Users\LEW\AppData\Local\Macromedia
2014-03-28 12:43 - 2014-03-28 12:48 - 00000000 ____D () C:\Program Files\TAP-Windows
2014-03-28 12:42 - 2014-03-28 12:51 - 00000000 ____D () C:\Program Files\CyberGhost 5
2014-03-27 14:34 - 2014-03-27 14:35 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-03-27 14:26 - 2014-03-27 14:26 - 00000000 ____D () C:\ProgramData\YTD Video Downloader
2014-03-25 09:37 - 2014-03-29 14:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-23 13:03 - 2014-03-23 13:03 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\LavasoftStatistics
2014-03-23 11:58 - 2014-03-25 14:20 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\PeaZip
2014-03-23 11:57 - 2014-03-23 11:57 - 00000000 ____D () C:\Program Files\PeaZip
2014-03-22 23:54 - 2014-03-23 16:57 - 00000000 ____D () C:\Users\LEW\Desktop\Zip-Folder
2014-03-21 23:52 - 2014-04-10 17:04 - 00005054 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for LEW-PC-LEW LEW-PC
2014-03-21 17:12 - 2014-03-29 14:13 - 00000000 ____D () C:\AdwCleaner
2014-03-21 16:59 - 2014-03-21 16:59 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-03-21 16:39 - 2014-03-23 12:53 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-19 10:47 - 2014-03-21 22:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-15 22:12 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-15 22:12 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-15 22:12 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-15 22:12 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-15 22:12 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-15 22:12 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-15 22:12 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-15 22:12 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-15 22:12 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-15 22:12 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-15 22:12 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-15 22:12 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-15 22:12 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-15 22:12 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-15 22:12 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-15 22:12 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-15 22:12 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-15 22:12 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-15 22:12 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-15 22:12 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-15 22:12 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-15 22:12 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-15 22:12 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-15 22:12 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-15 22:12 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-15 22:12 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-15 22:12 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-15 22:12 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-15 22:12 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-15 22:12 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-15 22:12 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-15 22:12 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-15 22:12 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-15 22:12 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-15 22:12 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-15 22:12 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-15 22:12 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-15 22:12 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-15 22:12 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-15 22:12 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-15 22:11 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-15 22:11 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-15 22:11 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-15 22:11 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

==================== One Month Modified Files and Folders =======

2014-04-10 18:09 - 2014-04-10 18:09 - 00023001 _____ () C:\Users\LEW\Downloads\FRST.txt
2014-04-10 18:09 - 2014-04-10 18:08 - 00000000 ____D () C:\FRST
2014-04-10 18:08 - 2014-04-10 18:08 - 02157056 _____ (Farbar) C:\Users\LEW\Downloads\FRST64.exe
2014-04-10 17:04 - 2014-03-21 23:52 - 00005054 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for LEW-PC-LEW LEW-PC
2014-04-10 16:50 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-10 16:50 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-10 16:49 - 2012-06-17 00:08 - 04159654 _____ () C:\Windows\system32\perfh007.dat
2014-04-10 16:49 - 2012-06-17 00:08 - 01256658 _____ () C:\Windows\system32\perfc007.dat
2014-04-10 16:49 - 2009-07-14 07:13 - 00006248 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-10 16:46 - 2014-04-06 22:14 - 01481097 _____ () C:\Windows\WindowsUpdate.log
2014-04-10 16:43 - 2014-04-10 16:43 - 00000000 ___RD () C:\Users\LEW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-04-10 16:43 - 2013-10-27 02:14 - 00000438 _____ () C:\Windows\Tasks\Wise Memory Optimizer Task.job
2014-04-10 16:43 - 2013-09-09 00:53 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\Wise Care 365
2014-04-10 16:43 - 2009-07-14 01:57 - 34808320 _____ (Microsoft Corporation) C:\Windows\system32\imageres.dll
2014-04-10 16:42 - 2014-04-09 22:40 - 00007330 _____ () C:\Windows\PFRO.log
2014-04-10 16:42 - 2014-04-09 22:40 - 00000280 _____ () C:\Windows\setupact.log
2014-04-10 16:42 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-10 00:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-09 22:42 - 2014-02-02 23:01 - 00000000 ____D () C:\ProgramData\ProductData
2014-04-09 22:40 - 2014-04-09 22:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-09 19:49 - 2013-09-05 21:47 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-09 13:44 - 2013-09-11 23:47 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\vlc
2014-04-09 10:26 - 2014-04-09 10:24 - 00094720 ___SH () C:\Users\LEW\Desktop\Thumbs.db
2014-04-09 10:23 - 2014-04-09 10:13 - 00000000 ____D () C:\Program Files (x86)\PlotSoft
2014-04-09 10:20 - 2013-08-30 22:43 - 00000000 ___RD () C:\Users\LEW\Desktop\Programme
2014-04-09 10:12 - 2014-04-09 10:12 - 10746848 _____ (PlotSoft LLC) C:\Users\LEW\Downloads\PDFill_11.exe
2014-04-09 10:05 - 2014-04-09 10:05 - 06146560 _____ () C:\Users\LEW\Downloads\FreewarePDFUnlocker.msi
2014-04-09 09:47 - 2014-04-09 09:47 - 00000040 _____ () C:\Windows\winDecrypt.INI
2014-04-09 09:46 - 2013-08-24 00:47 - 00000000 ____D () C:\Users\LEW\AppData\Local\VirtualStore
2014-04-09 09:45 - 2014-04-09 09:45 - 00386904 _____ (Softonic ) C:\Users\LEW\Downloads\SoftonicDownloader_for_pdf-password-remover.exe
2014-04-08 22:29 - 2014-04-08 22:29 - 16587248 _____ (Tracker Software Products Ltd ) C:\Users\LEW\Downloads\PDFX142Vwer.exe
2014-04-08 22:19 - 2014-04-08 22:19 - 00000000 ____D () C:\Users\LEW\AppData\Local\Adobe
2014-04-07 00:02 - 2013-09-09 00:53 - 00000398 _____ () C:\Windows\Tasks\Wise Turbo Checker.job
2014-04-06 22:13 - 2014-04-06 22:13 - 00115352 _____ () C:\Users\LEW\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-06 22:11 - 2014-02-26 00:41 - 00000000 ____D () C:\Users\LEW\Desktop\MündlichePrüfung
2014-04-06 21:55 - 2013-09-13 12:42 - 00000000 ___RD () C:\Users\LEW\Desktop\Movies-neu
2014-04-06 21:52 - 2014-04-06 21:52 - 08508640 _____ (WiseCleaner.com ) C:\Users\LEW\Downloads\WiseCare365.exe
2014-04-06 21:30 - 2014-04-06 21:29 - 00391097 _____ () C:\Users\LEW\Downloads\avgremover.log
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple Computer
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple
2014-04-03 15:58 - 2013-09-11 22:32 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\Skype
2014-04-02 15:56 - 2014-04-02 15:56 - 00000000 ____D () C:\Users\LEW\AppData\Local\Skype
2014-04-02 15:56 - 2013-09-05 23:41 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-02 15:56 - 2012-05-11 02:46 - 00000000 ____D () C:\ProgramData\Skype
2014-04-01 13:58 - 2014-03-30 08:14 - 00000000 ____D () C:\Users\LEW\AppData\Local\CrashDumps
2014-03-31 03:16 - 2014-04-09 08:18 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-31 03:13 - 2014-04-09 08:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-31 02:13 - 2014-04-09 08:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-31 01:57 - 2014-04-09 08:18 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-30 09:41 - 2014-03-30 09:41 - 00026744 _____ () C:\Users\LEW\Downloads\bitshare.com.html
2014-03-30 09:40 - 2013-09-10 10:39 - 00000000 ____D () C:\Users\LEW\dwhelper
2014-03-30 08:08 - 2014-03-30 08:03 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-30 08:03 - 2014-03-29 13:58 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-30 07:58 - 2014-03-29 13:58 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-29 14:48 - 2014-03-25 09:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 14:13 - 2014-03-21 17:12 - 00000000 ____D () C:\AdwCleaner
2014-03-29 14:04 - 2013-09-18 22:50 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\DVDVideoSoft
2014-03-29 14:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-03-29 13:58 - 2014-03-29 13:58 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-03-29 13:58 - 2014-02-24 09:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Wondershare
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Luke_Payne
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Lexware
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\BMExplorer
2014-03-28 16:06 - 2013-08-30 22:26 - 00000000 ____D () C:\Users\LEW\AppData\Local\Mozilla
2014-03-28 12:51 - 2014-03-28 12:49 - 00000000 ____D () C:\Users\LEW\AppData\Local\CyberGhost
2014-03-28 12:51 - 2014-03-28 12:42 - 00000000 ____D () C:\Program Files\CyberGhost 5
2014-03-28 12:48 - 2014-03-28 12:48 - 00000000 ____D () C:\Users\LEW\AppData\Local\Macromedia
2014-03-28 12:48 - 2014-03-28 12:43 - 00000000 ____D () C:\Program Files\TAP-Windows
2014-03-28 12:48 - 2013-10-02 00:20 - 00000000 ____D () C:\Users\LEW\AppData\Local\Windows Live
2014-03-28 12:48 - 2013-08-30 22:42 - 00000000 ____D () C:\Users\LEW\AppData\Local\Thunderbird
2014-03-27 14:35 - 2014-03-27 14:34 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-03-27 14:26 - 2014-03-27 14:26 - 00000000 ____D () C:\ProgramData\YTD Video Downloader
2014-03-26 10:35 - 2013-08-30 22:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-25 14:20 - 2014-03-23 11:58 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\PeaZip
2014-03-23 16:57 - 2014-03-22 23:54 - 00000000 ____D () C:\Users\LEW\Desktop\Zip-Folder
2014-03-23 15:03 - 2013-10-19 14:59 - 00001024 ____H () C:\SYSTAG.BIN
2014-03-23 13:03 - 2014-03-23 13:03 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\LavasoftStatistics
2014-03-23 12:53 - 2014-03-21 16:39 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-23 12:53 - 2013-09-09 01:17 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-23 11:57 - 2014-03-23 11:57 - 00000000 ____D () C:\Program Files\PeaZip
2014-03-23 09:32 - 2013-11-26 09:23 - 00312728 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-23 09:32 - 2013-11-26 09:23 - 00191384 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-23 09:32 - 2013-11-26 09:23 - 00190872 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-23 09:32 - 2013-11-26 09:23 - 00111000 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-23 09:32 - 2013-11-26 09:23 - 00000000 ____D () C:\Program Files\Java
2014-03-22 18:06 - 2013-09-22 12:14 - 00000000 ___RD () C:\Users\LEW\Desktop\Schreiben
2014-03-21 22:06 - 2014-03-19 10:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-21 22:06 - 2013-09-13 07:35 - 00000000 ___RD () C:\Users\LEW\Desktop\Sonstiges
2014-03-21 16:59 - 2014-03-21 16:59 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-03-21 09:34 - 2013-10-19 14:59 - 00000000 ____D () C:\Program Files (x86)\AOMEI Backupper
2014-03-19 00:53 - 2013-09-10 07:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-19 00:52 - 2013-09-10 07:29 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-17 01:30 - 2013-08-24 00:51 - 00000000 ____D () C:\Users\LEW\Documents\Bluetooth Folder
2014-03-16 12:53 - 2013-09-05 22:11 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-16 12:53 - 2013-09-05 22:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-16 12:53 - 2009-07-14 06:45 - 00451912 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-16 01:21 - 2009-07-14 04:34 - 00000510 _____ () C:\Windows\win.ini

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-09 11:37

==================== End Of Log ============================
         

--- --- ---

--- --- ---
FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by LEW at 2014-04-10 18:09:39
Running from C:\Users\LEW\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: 360 Internet Security 2013 (Enabled - Up to date) {2B66EE1E-E5C8-C2F7-648F-4E55AC68D37D}
AS: 360 Internet Security 2013 (Enabled - Up to date) {90070FFA-C3F2-CD79-5E3F-7527D7EF99C0}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

 clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden
 clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden
360 Internet Security (HKLM-x32\...\360 Internet Security) (Version: 4.9.0.4900 - Qihu 360 Software Co., Ltd.)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.2823.00 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.5.2823.00 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3508 - Acer Incorporated)
Acer Instant Update Service (HKLM\...\{682EC6E8-A300-45FD-8F09-0F3A6EA334D6}) (Version: 1.00.3004 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated)
Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Acer Theft Shield (HKLM\...\{8ADB0CD2-4E5A-452F-BB3B-3A2984CAC749}) (Version: 1.00.3004 - Acer Incorporated)
Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3501 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.6.0.19120 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX 64-bit (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.2.202.228 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.8 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)
Advanced Backup Manager 3.42.13282.354 (HKLM\...\Advanced Backup Manager) (Version: 3.42.13282.354 - Digital Dynamic)
AOMEI Backupper (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536C09D}_is1) (Version:  - AOMEI Technology Co., Ltd.)
Apple Application Support (HKLM-x32\...\{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}) (Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}) (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio 2014 v.12.0.5 (HKLM-x32\...\{91B33C97-280F-B76D-E27B-E712D7041B76}_is1) (Version: 12.0.5 - Ashampoo GmbH & Co. KG)
Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.130 - Atheros)
Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 4.2.0.0 - Auslogics Labs Pty Ltd)
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)
CrystalDiskInfo 5.6.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 5.6.2 - Crystal Dew World)
CyberGhost 5 (HKLM\...\CyberGhost VPN 5_is1) (Version:  - CyberGhost S.R.L.)
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.)
CyberLink MediaEspresso (x32 Version: 6.5.1720_38230 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{F68634D8-574F-42B2-B6D0-9B447EA9581E}) (Version:  - Microsoft)
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
Electric Sheep 2.7b34 (HKLM-x32\...\Electric Sheep) (Version: 2.7b34 - Electricsheep)
ETDWare PS/2-X64 10.6.12.4_WHQL (HKLM\...\Elantech) (Version: 10.6.12.4 - ELAN Microelectronic Corp.)
Fotogaléria (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotogalleri (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotogalleriet (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.0.6.722 - Foxit Corporation)
Free YouTube Download version 3.2.31.325 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.31.325 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Galeria de Fotografias (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galeria de Fotos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galeria fotogràfica (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galerie foto (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galerija fotografija (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Books Downloader version 2.3 (HKLM-x32\...\{216729B6-014A-F413-814F-F17F74FBA113}_is1) (Version: 2.3 - GBOOKSDOWNLOADER.COM)
GPS Master 2.0.12 (HKLM-x32\...\GPS Master_is1) (Version: 1.0 - GPS Master)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.4.1441 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) Rapid Start Technology (HKLM-x32\...\3D073343-CEEB-4ce7-85AC-A69A7631B5D6) (Version: 1.0.0.1022 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.225 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
IO Door Notification (HKLM-x32\...\{97D0CDEC-2D3F-4358-9D5E-20A224DE1A5B}) (Version: 1.00.3003 - Acer Incorporated)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.1.7.2405 - IObit)
iTunes (HKLM\...\{0D924CB2-2EA4-4044-BAF7-770202D6BD0D}) (Version: 11.1.4.62 - Apple Inc.)
Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle)
Java 8 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418000FF}) (Version: 8.0.0 - Oracle Corporation)
Java Auto Updater (x32 Version: 2.8.00.132 - Oracle, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.16 - Acer Inc.)
Lexware buchhalter 2013 (HKLM-x32\...\{15B568E4-F37D-4559-85A5-66CB4C4C31CB}) (Version: 18.50.00.0330 - Haufe-Lexware GmbH Co.KG)
Lexware Elster (HKLM-x32\...\{9758F2B1-F918-4FC6-97F8-640C10B65E8F}) (Version: 13.10.00.0021 - Haufe-Lexware GmbH & Co.KG)
Lexware Info Service (HKLM-x32\...\{8AE7E507-BC49-4DF0-A236-26878691AB53}) (Version: 2.90.00.0009 - Haufe-Lexware GmbH & Co.KG)
Logon Screen Rotator version 4.4 (HKLM-x32\...\{EF7A37B0-B866-441A-958F-4DDAEE995877}_is1) (Version: 4.4 - Luke Payne Software)
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office 2010 Primary Interop Assemblies (HKLM-x32\...\{90140000-1146-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1150 - Microsoft Corporation)
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
MPC-HC 1.7.1 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.1.0 - MPC-HC Team)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.214.2 - Tracker Software Products Ltd)
PeaZip 5.2.2 (WIN64) (HKLM\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version:  - Giorgio Tani)
Personal Backup 5.5 (HKLM\...\Personal Backup 5_is1) (Version: 5.3 - J. Rathlev)
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
PicPick (HKLM-x32\...\PicPick) (Version: 3.2.7 - NTeWORKS)
Poczta usługi Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.07 - Qualcomm Atheros)
Raccolta foto (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Radio.fx (HKLM-x32\...\Tobit Radio.fx Server) (Version:  - Tobit.Software)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6617 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.28104 - Realtek Semiconductor Corp.)
RENESIS® Player Browser Plugins (HKLM-x32\...\{62B7C52C-CAB6-48B1-8245-52356C141C92}) (Version: 1.1.1 - examotion® GmbH)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version:  - Silicon Laboratories)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Sleep Memory Optimizer (HKLM-x32\...\{34BE2594-1D20-4A2E-97A0-B9E2837520AE}) (Version: 1.00.3004 - Acer Incorporated)
Smart Timer (HKLM-x32\...\{89DB52FC-EA72-468F-A0C7-150AF8B7AB74}) (Version: 1.00.3004 - Acer Incorporated)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.1.21 - Safer-Networking Ltd.)
StreamTransport version: 1.1.0.2 (HKLM-x32\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version:  - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition (HKLM\...\{90150000-0015-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{47F15B72-AB15-4B81-BDB8-28B204596EB7}) (Version:  - Microsoft)
Update for Microsoft Access 2013 (KB2827233) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{614E655F-A0ED-435A-8E0C-A81EE4BA7BC7}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{A2275591-C3AA-4A6C-A696-F958B6C65B3E}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{A2275591-C3AA-4A6C-A696-F958B6C65B3E}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{A2275591-C3AA-4A6C-A696-F958B6C65B3E}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{A2275591-C3AA-4A6C-A696-F958B6C65B3E}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{A2275591-C3AA-4A6C-A696-F958B6C65B3E}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2013 (KB2837648) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{5E759A69-FA72-4B3C-BE2F-D1194764D31E}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{237834D6-FA98-44E1-8739-ABD56DDADC59}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2863908) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{259F7CA1-7A87-4E60-85A9-0A55E60FF254}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2863908) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{8D84B988-2A7A-4DB6-A7A5-08DA7B3DE9EE}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2863908) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{259F7CA1-7A87-4E60-85A9-0A55E60FF254}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{43EB1F58-DAA0-4F61-A4EE-C5651F85A047}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{43EB1F58-DAA0-4F61-A4EE-C5651F85A047}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{76CACE05-7A19-4EAC-87D7-5BFF63AF7CDF}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{79469196-F138-4CF0-8681-F1889D53B56B}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{76CACE05-7A19-4EAC-87D7-5BFF63AF7CDF}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{FEFF9FF6-FF61-455E-A8CC-3A1311A657AD}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{3FF4EA9F-3505-4726-A974-6593A968FFCC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{9406D70B-2D9C-4613-A75A-F35B66BA8AFA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{CA390537-AA88-450F-A240-5FB4648A124A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C8D57F4A-0824-4043-89E7-3C6280B67A47}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{AC4470FB-8011-4F16-B5D4-E0A34DE10C87}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{526C9E5A-A734-4DC0-B829-ED1CDE793C6B}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D8B3D175-48B8-413F-8484-4D81E744B51C}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{30C13416-B124-46AB-9E44-96CEFFA893F9}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C809B1D6-BD31-4496-BCFE-4567E0854F5F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{1A789784-5825-4B26-BB57-71FF7D3484CB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{856D47BC-036C-4692-8702-D6CCA8F428D0}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{4FD8F672-3206-469C-B9F0-D6E72F7ACAB2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{CA0554C4-62FE-4F66-BC87-1EE1EAC675EF}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{CA0554C4-62FE-4F66-BC87-1EE1EAC675EF}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{F33ABF6A-3007-47E8-8E38-506A18E54641}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817636) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{D97AACA3-9AEA-43FF-8CBA-93BED0443FC2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817636) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D97AACA3-9AEA-43FF-8CBA-93BED0443FC2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817636) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D97AACA3-9AEA-43FF-8CBA-93BED0443FC2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826004) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{B38036CB-BAF6-41D4-8810-FD016453ABB9}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{2A286156-257B-4528-9DB5-B4D4D53211BC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 64-Bit Edition (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{B5E3E636-7913-4775-BC9B-E4B56F4ED73B}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{92833C80-DC88-4A22-8630-407F810EF57B}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUSR_{602346D6-8E2F-4B0E-820A-CD62AC5B0DC9}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 64-Bit Edition (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}_Office15.PROPLUSR_{869B93B9-E75A-44DE-8AC5-A030A7A21FDD}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{F2187E8D-C68A-4655-8551-1932878A5581}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{9353CD85-4B19-45C4-8DBA-1391926351F6}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{9353CD85-4B19-45C4-8DBA-1391926351F6}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{50F6EF67-B93C-4B7A-A2EB-E179E3436C69}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 64-Bit Edition (HKLM\...\{90150000-0090-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{50F6EF67-B93C-4B7A-A2EB-E179E3436C69}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{50F6EF67-B93C-4B7A-A2EB-E179E3436C69}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863825) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{327EABFD-EDD3-44E7-AB47-7592DF33B719}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863844) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{50F31E04-D56A-4159-BF36-CF3CE27DB30C}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863860) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{6D170CB5-8D22-4D1B-A811-B899FE588946}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863860) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{6D170CB5-8D22-4D1B-A811-B899FE588946}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2863864) 64-Bit Edition (HKLM\...\{90150000-00BA-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{AFB7E303-C8CA-4A08-AD3F-44A562B3C809}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2863864) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{AFB7E303-C8CA-4A08-AD3F-44A562B3C809}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2863864) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{AFB7E303-C8CA-4A08-AD3F-44A562B3C809}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2863864) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{AFB7E303-C8CA-4A08-AD3F-44A562B3C809}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2817628) 64-Bit Edition (HKLM\...\{90150000-00A1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{9367C385-2EF9-4BE3-8351-7D2AB0798A57}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2817628) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{9367C385-2EF9-4BE3-8351-7D2AB0798A57}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2817628) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{9367C385-2EF9-4BE3-8351-7D2AB0798A57}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2863911) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{DAEE93F9-D258-45E4-AFD3-12AC5ED04693}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2863911) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{DF3798F3-F45C-44DA-83B7-229A9EBC9654}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2837627) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{FE06DACB-AE2C-4DB7-B95D-97A320E59F45}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2837627) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{FE06DACB-AE2C-4DB7-B95D-97A320E59F45}) (Version:  - Microsoft)
Update for Microsoft Project 2013 (KB2727085) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BBD4F4CE-65D4-4CEB-AE19-E5296A57AA6C}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2837635) 64-Bit Edition (HKLM\...\{90150000-0019-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{E9172003-60C1-447B-9569-7AA9FADE26B0}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2837635) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{2837C624-A972-43CF-BCE5-0AE2EFED72E3}) (Version:  - Microsoft)
Update for Microsoft Visio 2013 (KB2817306) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{F16E7B82-23FE-4054-AB73-EAE53965251C}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2863909) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{F9FAC8C0-20D9-4DC7-9A56-13B02BD4B724}) (Version:  - Microsoft)
Valokuvavalikoima (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3508.0205 - společnost Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - společnost Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Liven peruspaketti (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Sunplus (SPCP825K) Ports  (07/01/2010 1.0.9.0) (HKLM\...\20986CDBFBCA238AA12329A115B1CC9D88E9C06C) (Version: 07/01/2010 1.0.9.0 - Sunplus)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
Wise Care 365 2.96 (HKLM-x32\...\Wise Care 365_is1) (Version: 2.96 - WiseCleaner.com, Inc.)
Wise Care 365 version 2.92 (HKLM-x32\...\{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1) (Version: 2.92 - WiseCleaner.com, Inc.)
XMedia Recode Version 3.1.7.8 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.7.8 - XMedia Recode)
Συλλογή φωτογραφιών (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 16.4.3508.0205 - Корпорация Майкрософт) Hidden
Фотоальбом (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Фотогалерия (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Фотографии (общедоступная версия) (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
גלריית התמונות (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
معرض الصور (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
影像中心 (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

09-04-2014 17:47:04 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {032246D6-58B0-4651-8A34-2F65D6DF9956} - System32\Tasks\LogonScreenRotator => C:\Program Files (x86)\Logon Screen Rotator\Logon Screen Rotator.exe [2013-02-22] (Luke Payne)
Task: {2E4C817D-BE79-4DF7-B5B4-FEC235F8EF57} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2011-05-20] (CyberLink)
Task: {30F6CE27-8979-48B1-B87E-DC5FE39B0350} - System32\Tasks\Microsoft Office 15 Sync Maintenance for LEW-PC-LEW LEW-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2013-09-10] (Microsoft Corporation)
Task: {323D96C0-0253-4F65-A878-FCB141DD50A1} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {33295738-937D-4F14-AFAC-643A20EF7632} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {36654A83-E314-40F6-BEFC-2DA1D7163ED1} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe
Task: {55B83B58-9D3F-40D3-BA13-4BE3B2EA5F67} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {5AE6A84D-BB74-4DF4-BF13-043C59F874F4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {99376950-F4F6-4D68-9417-4A62DD96A374} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-02-02] (IObit)
Task: {A0E6623C-A20E-4F64-BAAA-B06908F7739B} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {B2C7A06E-7FDA-4363-89EF-B717795A3464} - System32\Tasks\Wise Memory Optimizer Task => C:\Program Files (x86)\Wise\Wise Care 365\WiseMemoryOptimzer.exe [2014-01-21] (WiseCleaner.com)
Task: {B84C6BE1-5B9D-4DD3-A7B8-304560A38BA7} - System32\Tasks\Smart Timer Task Scheduler => Smart_Timer.exe
Task: {C0555CD4-4BF0-43DF-8ED3-BBC07B1349DF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {D9571DF5-FC03-4CFF-9FFA-6B2CEFDCFB35} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2014-01-21] (WiseCleaner.COM)
Task: {D9C26FB9-C80A-4593-A9C1-3A9128B090B3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: C:\Windows\Tasks\Wise Memory Optimizer Task.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseMemoryOptimzer.exe
Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe

==================== Loaded Modules (whitelisted) =============

2013-09-10 08:53 - 2013-06-03 13:06 - 03999512 _____ () C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
2012-04-19 20:31 - 2012-04-19 20:31 - 00235624 _____ () C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe
2012-04-19 20:31 - 2012-04-19 20:31 - 00114280 _____ () C:\Program Files\Acer\Acer Theft Shield\SysCtrl.dll
2012-04-19 20:31 - 2012-04-19 20:31 - 00197736 _____ () C:\Program Files\Acer\Acer Theft Shield\LogMgr2.dll
2012-04-19 20:31 - 2012-04-19 20:31 - 00141416 _____ () C:\Program Files\Acer\Acer Theft Shield\WHNCtrl.dll
2012-05-11 03:31 - 2012-03-27 02:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-04-19 20:31 - 2012-04-19 20:31 - 00259688 _____ () C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe
2012-04-19 20:31 - 2012-04-19 20:31 - 00213608 _____ () C:\Program Files\Acer\Acer Theft Shield\CommPtl.dll
2014-03-28 12:42 - 2014-01-06 13:14 - 00032768 _____ () C:\Program Files\CyberGhost 5\de\CyberGhost.resources.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00196312 _____ () C:\Program Files (x86)\AOMEI Backupper\UiLogic.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00220888 _____ () C:\Program Files (x86)\AOMEI Backupper\diskmgr.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00171736 _____ () C:\Program Files (x86)\AOMEI Backupper\Comn.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00077528 _____ () C:\Program Files (x86)\AOMEI Backupper\Ldm.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00061144 _____ () C:\Program Files (x86)\AOMEI Backupper\Device.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00257752 _____ () C:\Program Files (x86)\AOMEI Backupper\BrFat.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00368344 _____ () C:\Program Files (x86)\AOMEI Backupper\BrNtfs.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00057048 _____ () C:\Program Files (x86)\AOMEI Backupper\FuncLogic.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00167640 _____ () C:\Program Files (x86)\AOMEI Backupper\Clone.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00245464 _____ () C:\Program Files (x86)\AOMEI Backupper\ImgFile.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00028376 _____ () C:\Program Files (x86)\AOMEI Backupper\Encrypt.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00073432 _____ () C:\Program Files (x86)\AOMEI Backupper\Compress.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00093912 _____ () C:\Program Files (x86)\AOMEI Backupper\BrVol.dll
2013-10-19 14:59 - 2013-08-23 20:15 - 00043736 _____ () C:\Program Files (x86)\AOMEI Backupper\Backup.dll
2013-09-09 22:23 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-09-09 22:23 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-09-09 22:23 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-09-09 22:23 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-09-09 22:23 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2013-09-10 08:53 - 2013-06-03 13:06 - 09907712 _____ () C:\Program Files (x86)\Tobit Radio.fx\Client\TOBITCLT.dll
2014-01-25 22:23 - 2013-07-24 10:24 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2014-02-13 09:27 - 2014-02-13 09:27 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\00a0b4a9df6e4abf30ae2af3624a77ce\IsdiInterop.ni.dll
2012-05-11 02:41 - 2012-02-02 01:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-06-16 14:21 - 2012-03-07 00:27 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-03-25 09:37 - 2014-03-25 09:37 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-03-19 10:47 - 2014-03-19 10:48 - 03018864 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-03-19 10:47 - 2014-03-19 10:48 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-03-19 10:47 - 2014-03-19 10:48 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Radio.fx.LNK => C:\Windows\pss\Radio.fx.LNK.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Dolby Home Theater v4 => "C:\Dolby PCEE4\pcee4.exe" -autostart
MSCONFIG\startupreg: ETDCtrl => %ProgramFiles%\Elantech\ETDCtrl.exe
MSCONFIG\startupreg: Lync => "C:\Program Files\Microsoft Office\Office15\lync.exe" /fromrunkey
MSCONFIG\startupreg: rfxsrvtray => "C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/10/2014 06:05:19 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 90080108

Error: (04/10/2014 05:53:33 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (04/10/2014 04:49:07 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (04/10/2014 04:49:07 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (04/10/2014 04:49:07 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (04/10/2014 04:43:02 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/10/2014 01:12:31 PM) (Source: Radio.fx) (User: )
Description: Failed to open session

Error: (04/10/2014 00:55:32 PM) (Source: Radio.fx) (User: )
Description: Failed to open session

Error: (04/10/2014 08:10:23 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (04/10/2014 08:10:23 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.


System errors:
=============
Error: (04/10/2014 04:44:04 PM) (Source: Service Control Manager) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/10/2014 04:43:02 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom
UimBus
Uim_IM
Uim_VIM

Error: (04/10/2014 08:06:07 AM) (Source: Service Control Manager) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/10/2014 08:04:19 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom
UimBus
Uim_IM
Uim_VIM

Error: (04/09/2014 10:42:59 PM) (Source: Service Control Manager) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/09/2014 10:41:34 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom
UimBus
Uim_IM
Uim_VIM

Error: (04/09/2014 10:41:06 PM) (Source: Microsoft-Windows-Directory-Services-SAM) (User: NT-AUTORITÄT)
Description: Das SAM-Modul konnte den TCP/IP- bzw. SPX/IPX-Listening-Thread nicht starten.

Error: (04/09/2014 10:40:59 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom
UimBus
Uim_IM
Uim_VIM

Error: (04/09/2014 05:26:12 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (04/09/2014 01:33:25 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.


Microsoft Office Sessions:
=========================
Error: (04/10/2014 06:05:19 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 90080108

Error: (04/10/2014 05:53:33 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (04/10/2014 04:49:07 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (04/10/2014 04:49:07 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (04/10/2014 04:49:07 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (04/10/2014 04:43:02 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/10/2014 01:12:31 PM) (Source: Radio.fx)(User: )
Description: Failed to open session

Error: (04/10/2014 00:55:32 PM) (Source: Radio.fx)(User: )
Description: Failed to open session

Error: (04/10/2014 08:10:23 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (04/10/2014 08:10:23 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000


==================== Memory info =========================== 

Percentage of memory in use: 52%
Total physical RAM: 3934.31 MB
Available physical RAM: 1859.1 MB
Total Pagefile: 7866.8 MB
Available Pagefile: 5021.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: (LEW-Ultrabook) (Fixed) (Total:214.38 GB) (Free:2.66 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238 GB) (Disk ID: 27516E40)
Partition 1: (Not Active) - (Size=8 GB) - (Type=84)
Partition 2: (Not Active) - (Size=16 GB) - (Type=27)
Partition 3: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=214 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

--- --- ---


Sorry - vergessen: Vielen Dank!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Guten Morgen,
seit gestern hat mein Rechner den Internet-Zugang dicht gemacht und ich komme nur noch von einem 2. Rechner ins Netz.
Hat das mit FRST zu tun?

ich korrigiere: ich komme ins Netz, kann auch Mails empfangen und versenden, aber weder Firefox noch IE bauen eine Seite auf.

Guten Morgen,

jetzt bin ich wieder online - warum auch immer.

Daher kann ich jetzt doch alles posten, was bei der Lösungsfindung hilft.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by LEW at 2014-04-12 11:30:27 Run:1
Running from C:\Users\LEW\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

*****************

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\IsMyWinLockerReboot => Value deleted successfully.
HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\IsMyWinLockerReboot => Value deleted successfully.
HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\IsMyWinLockerReboot => Value deleted successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.


The system needed a reboot.

==== End of Fixlog ====

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 12.04.2014
Suchlauf-Zeit: 10:54:13
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.04.12.02
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: LEW

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 266035
Verstrichene Zeit: 5 Min, 3 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 1
PUP.Optional.Softonic.A, HKU\S-1-5-21-2101371963-2024594486-32136929-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, In Quarantäne, [58a8768aee1218e89366e282aa58bc44],

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)AdwCleaner Logfile:

# AdwCleaner v3.023 - Bericht erstellt am 12/04/2014 um 11:05:53
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : LEW - LEW-PC
# Gestartet von : C:\Users\LEW\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\f8b34e3b5e6e337aa6491ee3f713f8f5\adwcleaner3023.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\LEW\AppData\Local\Temp\OCS

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\prefs.js ]


*************************

AdwCleaner[R0].txt - [11676 octets] - [21/03/2014 17:13:09]
AdwCleaner[R1].txt - [949 octets] - [21/03/2014 21:52:41]
AdwCleaner[R2].txt - [1132 octets] - [23/03/2014 12:50:36]
AdwCleaner[R3].txt - [1410 octets] - [29/03/2014 14:12:55]
AdwCleaner[R4].txt - [1622 octets] - [12/04/2014 11:04:46]
AdwCleaner[S0].txt - [10690 octets] - [21/03/2014 17:14:07]
AdwCleaner[S1].txt - [1009 octets] - [21/03/2014 21:53:52]
AdwCleaner[S2].txt - [1196 octets] - [23/03/2014 12:53:09]
AdwCleaner[S3].txt - [1473 octets] - [29/03/2014 14:13:47]
AdwCleaner[S4].txt - [1448 octets] - [12/04/2014 11:05:53]

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1508 octets] ##########
         

--- --- ---


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by LEW on 12.04.2014 at 11:11:24,53
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-2101371963-2024594486-32136929-1000\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\AboutURLs\\Tabs
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\adawarebp
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7FDEF150-6606-4036-8C13-C28F9A8D94AF}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CC25033C-016D-4F4A-94C4-B99090416F66}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 30 days old and could be outdated)
Ran by LEW (administrator) on LEW-PC on 12-04-2014 11:54:02
Running from C:\Users\LEW\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\360rps.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\deepscan\QHActiveDefense.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(Digital Dynamic) C:\Program Files (x86)\Digital Dynamic\Advanced Backup Manager\backupsvc5.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Sleep Memory Optimizer\FFSService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
() C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Atheros) C:\Program Files (x86)\Acer\WDAgent\Ath_WlanAgent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseMemoryOptimzer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
() C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(NTeWORKS) C:\Program Files (x86)\PicPick\picpick.exe
(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe
(CyberGhost S.R.L.) C:\Program Files\CyberGhost 5\CyberGhost.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\360sd.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\360rp.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\safemon\360tray.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\IO Door Notification\IODoorNotification.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-client.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12480616 2012-04-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-03-09] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1022592 2012-05-07] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-05-07] (Atheros Commnucations)
HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [Secure Applicayion] - C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe [259688 2012-04-19] ()
HKLM\...\Run: [360sd] - C:\PROGRAM FILES\360\360 INTERNET SECURITY\360sdrun.exe [273848 2014-01-09] (Qihu 360 Software Co., Ltd.)
HKLM-x32\...\Run: [IO Door Notification] - C:\Program Files (x86)\Acer\IO Door Notification\IODoorNotification.exe [2097256 2012-04-12] (Acer Incorporated)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1108048 2012-04-25] (Dritek System Inc.)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-26] (Intel Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1989920 2013-08-26] (Wondershare)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [224128 2014-03-04] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [360sd] - C:\PROGRAM FILES\360\360 INTERNET SECURITY\360sdrun.exe [273848 2014-01-09] (Qihu 360 Software Co., Ltd.)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [PicPick Start] - C:\Program Files (x86)\PicPick\picpick.exe [13258584 2013-08-27] (NTeWORKS)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [RfxSrvTray] - C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [CyberGhost] - C:\Program Files\CyberGhost 5\CyberGhost.EXE [358000 2014-01-16] (CyberGhost S.R.L.)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {52378E0A-DEBA-4DE0-A72F-E142EF911C22} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10557
SearchScopes: HKCU - {7B3E4106-1EB8-4CA1-8785-A5805FA1C386} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589
FF NewTab: www.su-bo.de
FF Homepage: www.su-bo.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.0.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.0.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-30]
FF Extension: Integrated Google Calendar - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\intgcal@egarracingteam.com.ar.xpi [2014-03-30]
FF Extension: S3.Download Statusbar - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\s3download@statusbar.xpi [2014-03-30]
FF Extension: Adblock Plus - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-30]
FF Extension: Tab Mix Plus - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-04-06]
FF Extension: DownThemAll! - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-03-30]
FF Extension: Hotspot Shield Extension - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2014-03-25]

==================== Services (Whitelisted) =================

R2 360rp; C:\PROGRAM FILES\360\360 INTERNET SECURITY\360rps.exe [295608 2014-01-09] (Qihu 360 Software Co., Ltd.)
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [29912 2013-08-23] (AOMEI Tech Co., Ltd.)
R2 backupsvc5; C:\Program Files (x86)\Digital Dynamic\Advanced Backup Manager\backupsvc5.exe [1439232 2013-10-18] (Digital Dynamic)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64112 2014-01-16] (CyberGhost S.R.L)
R2 FFSOpzSvc; C:\Program Files\Sleep Memory Optimizer\FFSService.exe [141192 2011-09-17] (Acer Incorporated)
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [192856 2012-02-24] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151744 2014-02-02] (IObit)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
S3 scan; C:\Program Files\360\360 Internet Security\scan.dll [423144 2011-09-06] (S.C. BitDefender S.R.L)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S3 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 USecuAppSvc; C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe [235624 2012-04-19] ()
S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2014-01-21] (WiseCleaner.com)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Acer\WDAgent\Ath_WlanAgent.exe [77824 2012-05-03] (Atheros)
R2 ZhuDongFangYu; C:\PROGRAM FILES\360\360 INTERNET SECURITY\deepscan\QHActiveDefense.exe [228800 2013-12-24] (Qihu 360 Software Co., Ltd.)

==================== Drivers (Whitelisted) ====================

R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [97480 2013-11-27] (Qihu 360 Software Co., Ltd.)
R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [67272 2013-03-28] (Qihu 360 Software Co., Ltd.)
R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [305856 2013-11-29] (Qihu 360 Software Co., Ltd.)
R1 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [41152 2013-12-09] (Qihu 360 Software Co., Ltd.)
R1 360fsflt; C:\Windows\System32\DRIVERS\360FsFlt.sys [286912 2013-12-24] (Qihu 360 Software Co., Ltd.)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [30648 2013-05-07] ()
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [151480 2013-05-07] ()
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [17848 2013-02-06] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-03-03] (AVG Technologies)
R1 BAPIDRV; C:\Windows\System32\Drivers\BAPIDRV64.SYS [179904 2013-12-10] (Qihu 360 Software Co., Ltd.)
R3 irstrtdv; C:\Windows\System32\DRIVERS\irstrtdv.sys [26504 2012-02-22] (Intel Corporation)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [88280 2014-04-03] (Malwarebytes Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [119512 2014-04-12] (Malwarebytes Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
S3 SPCP825K; C:\Windows\System32\DRIVERS\SPCP825K.sys [42056 2010-07-19] (SUNPLUS TECHNOLOGY Co., LTD.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-08-13] (Anchorfree Inc.)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
R2 VirtualImDisk; C:\Windows\System32\DRIVERS\virtualimdisk.sys [39464 2013-09-29] (Olof Lagerkvist)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-12 11:31 - 2014-04-12 11:31 - 00000000 ___RD () C:\Users\LEW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-04-12 11:26 - 2014-04-12 11:26 - 00047918 _____ () C:\Users\LEW\Desktop\FRST2.txt
2014-04-12 11:25 - 2014-04-12 11:25 - 00002291 _____ () C:\Users\LEW\Desktop\JRT2.txt
2014-04-12 11:24 - 2014-04-12 11:24 - 00002291 _____ () C:\Users\LEW\Desktop\JRT.txt
2014-04-12 11:11 - 2014-04-12 11:11 - 00000000 ____D () C:\Windows\ERUNT
2014-04-12 11:10 - 2014-04-12 11:10 - 01016261 _____ (Thisisu) C:\Users\LEW\Downloads\JRT.exe
2014-04-12 11:09 - 2014-04-12 11:09 - 00001588 _____ () C:\Users\LEW\Desktop\AdwCleaner[S4].txt
2014-04-12 11:02 - 2014-04-12 11:03 - 00613200 _____ (Chip Digital GmbH) C:\Users\LEW\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-04-12 11:00 - 2014-04-12 11:00 - 01426178 _____ () C:\Users\LEW\Downloads\adwcleaner.exe
2014-04-12 11:00 - 2014-04-12 11:00 - 00001322 _____ () C:\Users\LEW\Desktop\mbam.txt
2014-04-12 10:47 - 2014-04-12 10:47 - 00001075 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-11 20:10 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-11 20:10 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-11 20:10 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-11 20:10 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-11 20:10 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-11 20:10 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-11 20:10 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-11 20:10 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-11 20:10 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-11 20:10 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-11 20:10 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-11 20:10 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-11 20:10 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-11 20:10 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-11 20:10 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-11 20:10 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-11 20:10 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-11 20:10 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-11 20:10 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-11 20:10 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-11 20:10 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-11 20:10 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-11 20:10 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-11 20:10 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-11 20:10 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-11 20:10 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-11 20:10 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-11 20:10 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-11 20:10 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-11 20:10 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-11 20:10 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-11 20:10 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-11 20:10 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-11 20:10 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-11 20:10 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-11 20:10 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-11 20:10 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-11 20:10 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-11 20:10 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-11 20:10 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-11 20:10 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-11 20:10 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-11 20:10 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-11 20:10 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-11 20:10 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-11 20:10 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-11 20:10 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-11 20:10 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-10 18:09 - 2014-04-12 11:54 - 00022446 _____ () C:\Users\LEW\Downloads\FRST.txt
2014-04-10 18:09 - 2014-04-10 18:10 - 00052306 _____ () C:\Users\LEW\Downloads\Addition.txt
2014-04-10 18:08 - 2014-04-12 11:54 - 00000000 ____D () C:\FRST
2014-04-10 18:08 - 2014-04-10 18:08 - 02157056 _____ (Farbar) C:\Users\LEW\Downloads\FRST64.exe
2014-04-09 22:40 - 2014-04-12 11:31 - 00027712 _____ () C:\Windows\PFRO.log
2014-04-09 22:40 - 2014-04-12 11:31 - 00000784 _____ () C:\Windows\setupact.log
2014-04-09 22:40 - 2014-04-09 22:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-09 10:24 - 2014-04-09 10:26 - 00094720 ___SH () C:\Users\LEW\Desktop\Thumbs.db
2014-04-09 10:13 - 2014-04-09 10:23 - 00000000 ____D () C:\Program Files (x86)\PlotSoft
2014-04-09 10:12 - 2014-04-09 10:12 - 10746848 _____ (PlotSoft LLC) C:\Users\LEW\Downloads\PDFill_11.exe
2014-04-09 10:05 - 2014-04-09 10:05 - 06146560 _____ () C:\Users\LEW\Downloads\FreewarePDFUnlocker.msi
2014-04-09 09:47 - 2014-04-09 09:47 - 00000040 _____ () C:\Windows\winDecrypt.INI
2014-04-09 08:18 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 08:18 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 08:18 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 08:18 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 08:18 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 08:18 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 08:18 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 08:18 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 08:18 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 08:18 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 08:18 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 08:18 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 08:18 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-08 22:29 - 2014-04-08 22:29 - 16587248 _____ (Tracker Software Products Ltd ) C:\Users\LEW\Downloads\PDFX142Vwer.exe
2014-04-08 22:19 - 2014-04-08 22:19 - 00000000 ____D () C:\Users\LEW\AppData\Local\Adobe
2014-04-06 22:14 - 2014-04-12 11:30 - 01948811 _____ () C:\Windows\WindowsUpdate.log
2014-04-06 22:13 - 2014-04-06 22:13 - 00115352 _____ () C:\Users\LEW\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-06 21:52 - 2014-04-06 21:52 - 08508640 _____ (WiseCleaner.com ) C:\Users\LEW\Downloads\WiseCare365.exe
2014-04-06 21:29 - 2014-04-06 21:30 - 00391097 _____ () C:\Users\LEW\Downloads\avgremover.log
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple Computer
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple
2014-04-02 15:56 - 2014-04-02 15:56 - 00000000 ____D () C:\Users\LEW\AppData\Local\Skype
2014-03-30 09:41 - 2014-03-30 09:41 - 00026744 _____ () C:\Users\LEW\Downloads\bitshare.com.html
2014-03-30 08:14 - 2014-04-01 13:58 - 00000000 ____D () C:\Users\LEW\AppData\Local\CrashDumps
2014-03-30 08:03 - 2014-03-30 08:08 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-29 13:58 - 2014-04-12 10:48 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-29 13:58 - 2014-04-12 10:47 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-03-29 13:58 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-29 13:58 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-29 13:58 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Wondershare
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Luke_Payne
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Lexware
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\BMExplorer
2014-03-28 12:49 - 2014-03-28 12:51 - 00000000 ____D () C:\Users\LEW\AppData\Local\CyberGhost
2014-03-28 12:48 - 2014-03-28 12:48 - 00000000 ____D () C:\Users\LEW\AppData\Local\Macromedia
2014-03-28 12:43 - 2014-03-28 12:48 - 00000000 ____D () C:\Program Files\TAP-Windows
2014-03-28 12:42 - 2014-03-28 12:51 - 00000000 ____D () C:\Program Files\CyberGhost 5
2014-03-27 14:34 - 2014-03-27 14:35 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-03-25 09:37 - 2014-03-29 14:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-23 13:03 - 2014-03-23 13:03 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\LavasoftStatistics
2014-03-23 11:58 - 2014-03-25 14:20 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\PeaZip
2014-03-23 11:57 - 2014-03-23 11:57 - 00000000 ____D () C:\Program Files\PeaZip
2014-03-22 23:54 - 2014-03-23 16:57 - 00000000 ____D () C:\Users\LEW\Desktop\Zip-Folder
2014-03-21 23:52 - 2014-04-12 11:42 - 00005056 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for LEW-PC-LEW LEW-PC
2014-03-21 17:12 - 2014-04-12 11:06 - 00000000 ____D () C:\AdwCleaner
2014-03-21 16:59 - 2014-03-21 16:59 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-03-21 16:39 - 2014-03-23 12:53 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-19 10:47 - 2014-03-21 22:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-15 22:12 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-15 22:12 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-15 22:12 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-15 22:12 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-15 22:11 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-15 22:11 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-15 22:11 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-15 22:11 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

==================== One Month Modified Files and Folders =======

2014-04-12 11:54 - 2014-04-10 18:09 - 00022446 _____ () C:\Users\LEW\Downloads\FRST.txt
2014-04-12 11:54 - 2014-04-10 18:08 - 00000000 ____D () C:\FRST
2014-04-12 11:42 - 2014-03-21 23:52 - 00005056 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for LEW-PC-LEW LEW-PC
2014-04-12 11:38 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-12 11:38 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-12 11:37 - 2012-06-17 00:08 - 04307574 _____ () C:\Windows\system32\perfh007.dat
2014-04-12 11:37 - 2012-06-17 00:08 - 01304018 _____ () C:\Windows\system32\perfc007.dat
2014-04-12 11:37 - 2009-07-14 07:13 - 00006248 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-12 11:34 - 2014-04-06 22:14 - 01948811 _____ () C:\Windows\WindowsUpdate.log
2014-04-12 11:31 - 2014-04-12 11:31 - 00000000 ___RD () C:\Users\LEW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-04-12 11:31 - 2014-04-09 22:40 - 00027712 _____ () C:\Windows\PFRO.log
2014-04-12 11:31 - 2014-04-09 22:40 - 00000784 _____ () C:\Windows\setupact.log
2014-04-12 11:31 - 2014-02-23 21:52 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-04-12 11:31 - 2013-10-27 02:14 - 00000438 _____ () C:\Windows\Tasks\Wise Memory Optimizer Task.job
2014-04-12 11:31 - 2013-09-09 00:53 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\Wise Care 365
2014-04-12 11:31 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-12 11:31 - 2009-07-14 01:57 - 27784704 _____ (Microsoft Corporation) C:\Windows\system32\imageres.dll
2014-04-12 11:30 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-04-12 11:26 - 2014-04-12 11:26 - 00047918 _____ () C:\Users\LEW\Desktop\FRST2.txt
2014-04-12 11:25 - 2014-04-12 11:25 - 00002291 _____ () C:\Users\LEW\Desktop\JRT2.txt
2014-04-12 11:24 - 2014-04-12 11:24 - 00002291 _____ () C:\Users\LEW\Desktop\JRT.txt
2014-04-12 11:11 - 2014-04-12 11:11 - 00000000 ____D () C:\Windows\ERUNT
2014-04-12 11:10 - 2014-04-12 11:10 - 01016261 _____ (Thisisu) C:\Users\LEW\Downloads\JRT.exe
2014-04-12 11:09 - 2014-04-12 11:09 - 00001588 _____ () C:\Users\LEW\Desktop\AdwCleaner[S4].txt
2014-04-12 11:06 - 2014-03-21 17:12 - 00000000 ____D () C:\AdwCleaner
2014-04-12 11:03 - 2014-04-12 11:02 - 00613200 _____ (Chip Digital GmbH) C:\Users\LEW\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-04-12 11:01 - 2013-08-30 22:43 - 00000000 ___RD () C:\Users\LEW\Desktop\Programme
2014-04-12 11:00 - 2014-04-12 11:00 - 01426178 _____ () C:\Users\LEW\Downloads\adwcleaner.exe
2014-04-12 11:00 - 2014-04-12 11:00 - 00001322 _____ () C:\Users\LEW\Desktop\mbam.txt
2014-04-12 10:48 - 2014-03-29 13:58 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-12 10:47 - 2014-04-12 10:47 - 00001075 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-12 10:47 - 2014-03-29 13:58 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-12 10:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-11 19:31 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-04-11 18:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-11 14:13 - 2013-09-13 21:30 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\picpick
2014-04-11 14:13 - 2013-08-24 00:46 - 00000000 ____D () C:\Users\LEW
2014-04-11 14:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-11 14:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-04-11 07:55 - 2013-09-10 07:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-11 07:53 - 2013-09-10 07:29 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-10 18:10 - 2014-04-10 18:09 - 00052306 _____ () C:\Users\LEW\Downloads\Addition.txt
2014-04-10 18:08 - 2014-04-10 18:08 - 02157056 _____ (Farbar) C:\Users\LEW\Downloads\FRST64.exe
2014-04-09 22:42 - 2014-02-02 23:01 - 00000000 ____D () C:\ProgramData\ProductData
2014-04-09 22:40 - 2014-04-09 22:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-09 19:49 - 2013-09-05 21:47 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-09 13:44 - 2013-09-11 23:47 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\vlc
2014-04-09 10:26 - 2014-04-09 10:24 - 00094720 ___SH () C:\Users\LEW\Desktop\Thumbs.db
2014-04-09 10:23 - 2014-04-09 10:13 - 00000000 ____D () C:\Program Files (x86)\PlotSoft
2014-04-09 10:12 - 2014-04-09 10:12 - 10746848 _____ (PlotSoft LLC) C:\Users\LEW\Downloads\PDFill_11.exe
2014-04-09 10:05 - 2014-04-09 10:05 - 06146560 _____ () C:\Users\LEW\Downloads\FreewarePDFUnlocker.msi
2014-04-09 09:47 - 2014-04-09 09:47 - 00000040 _____ () C:\Windows\winDecrypt.INI
2014-04-09 09:46 - 2013-08-24 00:47 - 00000000 ____D () C:\Users\LEW\AppData\Local\VirtualStore
2014-04-08 22:29 - 2014-04-08 22:29 - 16587248 _____ (Tracker Software Products Ltd ) C:\Users\LEW\Downloads\PDFX142Vwer.exe
2014-04-08 22:19 - 2014-04-08 22:19 - 00000000 ____D () C:\Users\LEW\AppData\Local\Adobe
2014-04-07 00:02 - 2013-09-09 00:53 - 00000398 _____ () C:\Windows\Tasks\Wise Turbo Checker.job
2014-04-06 22:13 - 2014-04-06 22:13 - 00115352 _____ () C:\Users\LEW\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-06 22:11 - 2014-02-26 00:41 - 00000000 ____D () C:\Users\LEW\Desktop\MündlichePrüfung
2014-04-06 21:55 - 2013-09-13 12:42 - 00000000 ___RD () C:\Users\LEW\Desktop\Movies-neu
2014-04-06 21:52 - 2014-04-06 21:52 - 08508640 _____ (WiseCleaner.com ) C:\Users\LEW\Downloads\WiseCare365.exe
2014-04-06 21:30 - 2014-04-06 21:29 - 00391097 _____ () C:\Users\LEW\Downloads\avgremover.log
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple Computer
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple
2014-04-03 15:58 - 2013-09-11 22:32 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\Skype
2014-04-03 09:51 - 2014-03-29 13:58 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-03-29 13:58 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-03-29 13:58 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-02 15:56 - 2014-04-02 15:56 - 00000000 ____D () C:\Users\LEW\AppData\Local\Skype
2014-04-02 15:56 - 2013-09-05 23:41 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-02 15:56 - 2012-05-11 02:46 - 00000000 ____D () C:\ProgramData\Skype
2014-04-01 13:58 - 2014-03-30 08:14 - 00000000 ____D () C:\Users\LEW\AppData\Local\CrashDumps
2014-03-30 09:41 - 2014-03-30 09:41 - 00026744 _____ () C:\Users\LEW\Downloads\bitshare.com.html
2014-03-30 09:40 - 2013-09-10 10:39 - 00000000 ____D () C:\Users\LEW\dwhelper
2014-03-30 08:08 - 2014-03-30 08:03 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-29 14:48 - 2014-03-25 09:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 14:04 - 2013-09-18 22:50 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\DVDVideoSoft
2014-03-29 14:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-03-29 13:58 - 2014-02-24 09:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Wondershare
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Luke_Payne
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Lexware
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\BMExplorer
2014-03-28 16:06 - 2013-08-30 22:26 - 00000000 ____D () C:\Users\LEW\AppData\Local\Mozilla
2014-03-28 12:51 - 2014-03-28 12:49 - 00000000 ____D () C:\Users\LEW\AppData\Local\CyberGhost
2014-03-28 12:51 - 2014-03-28 12:42 - 00000000 ____D () C:\Program Files\CyberGhost 5
2014-03-28 12:48 - 2014-03-28 12:48 - 00000000 ____D () C:\Users\LEW\AppData\Local\Macromedia
2014-03-28 12:48 - 2014-03-28 12:43 - 00000000 ____D () C:\Program Files\TAP-Windows
2014-03-28 12:48 - 2013-10-02 00:20 - 00000000 ____D () C:\Users\LEW\AppData\Local\Windows Live
2014-03-28 12:48 - 2013-08-30 22:42 - 00000000 ____D () C:\Users\LEW\AppData\Local\Thunderbird
2014-03-27 14:35 - 2014-03-27 14:34 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-03-26 10:35 - 2013-08-30 22:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-25 14:20 - 2014-03-23 11:58 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\PeaZip
2014-03-23 16:57 - 2014-03-22 23:54 - 00000000 ____D () C:\Users\LEW\Desktop\Zip-Folder
2014-03-23 15:03 - 2013-10-19 14:59 - 00001024 ____H () C:\SYSTAG.BIN
2014-03-23 13:03 - 2014-03-23 13:03 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\LavasoftStatistics
2014-03-23 12:53 - 2014-03-21 16:39 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-23 12:53 - 2013-09-09 01:17 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-23 11:57 - 2014-03-23 11:57 - 00000000 ____D () C:\Program Files\PeaZip
2014-03-23 09:32 - 2013-11-26 09:23 - 00312728 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-23 09:32 - 2013-11-26 09:23 - 00191384 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-23 09:32 - 2013-11-26 09:23 - 00190872 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-23 09:32 - 2013-11-26 09:23 - 00111000 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-23 09:32 - 2013-11-26 09:23 - 00000000 ____D () C:\Program Files\Java
2014-03-22 18:06 - 2013-09-22 12:14 - 00000000 ___RD () C:\Users\LEW\Desktop\Schreiben
2014-03-21 22:06 - 2014-03-19 10:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-21 22:06 - 2013-09-13 07:35 - 00000000 ___RD () C:\Users\LEW\Desktop\Sonstiges
2014-03-21 16:59 - 2014-03-21 16:59 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-03-21 09:34 - 2013-10-19 14:59 - 00000000 ____D () C:\Program Files (x86)\AOMEI Backupper
2014-03-17 01:30 - 2013-08-24 00:51 - 00000000 ____D () C:\Users\LEW\Documents\Bluetooth Folder
2014-03-16 12:53 - 2013-09-05 22:11 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-16 12:53 - 2013-09-05 22:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-16 12:53 - 2009-07-14 06:45 - 00451912 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-16 01:21 - 2009-07-14 04:34 - 00000510 _____ () C:\Windows\win.ini

Some content of TEMP:
====================
C:\Users\LEW\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-09 11:37

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Auch weiterhin: vielen Dank für die Unterstützung!

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Hallo Schrauber,

sorry, dass ich die aktuellen Daten erst jetzt einstelle, aber ich bin beruflich in einer anderen Zeitzone unterwegs...

Und - ja, Problem ist leider weiterhin vorhanden.

Cheers,
aaarrrggghhh!



ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=61d5bf2a1650364ab87c24e6b7234af9
# engine=17871
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-14 09:23:18
# local_time=2014-04-14 11:23:18 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 161864 149097248 0 0
# scanned=160589
# found=0
# cleaned=0
# scan_time=3151
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=61d5bf2a1650364ab87c24e6b7234af9
# engine=17940
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-18 12:13:32
# local_time=2014-04-18 02:13:32 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 17780 149453062 0 0
# scanned=159099
# found=0
# cleaned=0
# scan_time=3000


Results of screen317's Security Check version 0.99.81
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
360 Internet Security 2013
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Spybot - Search & Destroy
Java 7 Update 45
Java version out of Date!
Adobe Flash Player 12.0.0.43
Adobe Reader 10.1.8 Adobe Reader out of Date!
Mozilla Firefox (28.0)
Mozilla Thunderbird (24.4.0)
````````Process Check: objlist.exe by Laurent````````
Spybot Teatimer.exe is disabled!
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-04-2014 01
Ran by LEW (administrator) on LEW-PC on 18-04-2014 14:17:54
Running from C:\Users\LEW\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\360rps.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\deepscan\QHActiveDefense.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper Standard Edition 2.0\ABService.exe
(Digital Dynamic) C:\Program Files (x86)\Digital Dynamic\Advanced Backup Manager\backupsvc5.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Sleep Memory Optimizer\FFSService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
() C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(COMPANYVERS_NAME) C:\Program Files (x86)\RadioRage_4j\bar\1.bin\4jbarsvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
() C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Atheros) C:\Program Files (x86)\Acer\WDAgent\Ath_WlanAgent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseMemoryOptimzer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
() C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe
( ) C:\Program Files (x86)\RadioRage_4j\bar\1.bin\AppIntegrator64.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\360sd.exe
(NTeWORKS) C:\Program Files (x86)\PicPick\picpick.exe
(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\360rp.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Qihu 360 Software Co., Ltd.) C:\PROGRAM FILES\360\360 INTERNET SECURITY\safemon\360tray.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\IO Door Notification\IODoorNotification.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Acer Incoporated) C:\Program Files (x86)\Acer\Acer VCM\Vc.exe
(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-client.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\hsscp.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\GPS Master 2.0.12\GPS Master.exe
(Microsoft Corporation) C:\Windows\system32\prevhost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12480616 2012-04-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-03-09] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1022592 2012-05-07] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-05-07] (Atheros Commnucations)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [Secure Applicayion] => C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe [259688 2012-04-19] ()
HKLM\...\Run: [360sd] => C:\PROGRAM FILES\360\360 INTERNET SECURITY\360sdrun.exe [273848 2014-01-09] (Qihu 360 Software Co., Ltd.)
HKLM\...\Run: [RadioRage Home Page Guard 64 bit] => C:\Program Files (x86)\RadioRage_4j\bar\1.bin\AppIntegrator64.exe [485960 2014-04-17] ( )
HKLM-x32\...\Run: [IO Door Notification] => C:\Program Files (x86)\Acer\IO Door Notification\IODoorNotification.exe [2097256 2012-04-12] (Acer Incorporated)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1108048 2012-04-25] (Dritek System Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-26] (Intel Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1989920 2013-08-26] (Wondershare)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [224128 2014-03-04] (Oracle Corporation)
HKLM-x32\...\Run: [RadioRage EPM Support] => C:\Program Files (x86)\RadioRage_4j\bar\1.bin\4jmedint.exe [12872 2014-04-17] (Mindspark Interactive Network, Inc.)
HKLM-x32\...\Run: [RadioRage Search Scope Monitor] => C:\Program Files (x86)\RadioRage_4j\bar\1.bin\4jSrchMn.exe [55368 2014-04-17] (Mindspark)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [360sd] => C:\PROGRAM FILES\360\360 INTERNET SECURITY\360sdrun.exe [273848 2014-01-09] (Qihu 360 Software Co., Ltd.)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [PicPick Start] => C:\Program Files (x86)\PicPick\picpick.exe [13258584 2013-08-27] (NTeWORKS)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Run: [RfxSrvTray] => C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKU\S-1-5-21-2101371963-2024594486-32136929-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {52378E0A-DEBA-4DE0-A72F-E142EF911C22} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10557
SearchScopes: HKCU - {7B3E4106-1EB8-4CA1-8785-A5805FA1C386} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589
FF NewTab: :: SUMMUM*BONUM - Customer, Care, Consulting
FF Homepage: :: SUMMUM*BONUM - Customer, Care, Consulting
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1)%20%7B%20return%20'PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.0.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.0.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @RadioRage_4j.com/Plugin - C:\Program Files (x86)\RadioRage_4j\bar\1.bin\NP4jStub.dll (Mindspark)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: RadioRage - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\4jffxtbr@RadioRage_4j.com [2014-04-17]
FF Extension: DownloadHelper - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-30]
FF Extension: Integrated Google Calendar - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\intgcal@egarracingteam.com.ar.xpi [2014-03-30]
FF Extension: ProxMate - Proxy on steroids! - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2014-04-17]
FF Extension: S3.Download Statusbar - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\s3download@statusbar.xpi [2014-03-30]
FF Extension: Adblock Plus - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-30]
FF Extension: Tab Mix Plus - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-04-06]
FF Extension: DownThemAll! - C:\Users\LEW\AppData\Roaming\Mozilla\Firefox\Profiles\gk8hkiv7.default-1396162375589\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-03-30]
FF Extension: Hotspot Shield Extension - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2014-03-25]

==================== Services (Whitelisted) =================

R2 360rp; C:\PROGRAM FILES\360\360 INTERNET SECURITY\360rps.exe [295608 2014-01-09] (Qihu 360 Software Co., Ltd.)
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper Standard Edition 2.0\ABService.exe [29912 2014-04-08] (AOMEI Tech Co., Ltd.)
R2 backupsvc5; C:\Program Files (x86)\Digital Dynamic\Advanced Backup Manager\backupsvc5.exe [1439232 2013-10-18] (Digital Dynamic)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-04-14] (CyberGhost S.R.L)
R2 FFSOpzSvc; C:\Program Files\Sleep Memory Optimizer\FFSService.exe [141192 2011-09-17] (Acer Incorporated)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [944424 2014-01-15] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [78512 2014-01-15] ()
R2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [555304 2014-01-15] ()
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [192856 2012-02-24] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151744 2014-02-02] (IObit)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 RadioRage_4jService; C:\Program Files (x86)\RadioRage_4j\bar\1.bin\4jbarsvc.exe [88648 2014-04-17] (COMPANYVERS_NAME)
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
S3 scan; C:\Program Files\360\360 Internet Security\scan.dll [423144 2011-09-06] (S.C. BitDefender S.R.L)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S3 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 USecuAppSvc; C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe [235624 2012-04-19] ()
S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2014-01-21] (WiseCleaner.com)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Acer\WDAgent\Ath_WlanAgent.exe [77824 2012-05-03] (Atheros)
R2 ZhuDongFangYu; C:\PROGRAM FILES\360\360 INTERNET SECURITY\deepscan\QHActiveDefense.exe [228800 2013-12-24] (Qihu 360 Software Co., Ltd.)

==================== Drivers (Whitelisted) ====================

S3 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [97480 2013-11-27] (Qihu 360 Software Co., Ltd.)
R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [67272 2013-03-28] (Qihu 360 Software Co., Ltd.)
R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [305856 2013-11-29] (Qihu 360 Software Co., Ltd.)
R1 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [41152 2013-12-09] (Qihu 360 Software Co., Ltd.)
R1 360fsflt; C:\Windows\System32\DRIVERS\360FsFlt.sys [286912 2013-12-24] (Qihu 360 Software Co., Ltd.)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [30648 2013-05-07] ()
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [151480 2013-05-07] ()
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [17848 2013-02-06] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-03-03] (AVG Technologies)
R1 BAPIDRV; C:\Windows\System32\Drivers\BAPIDRV64.SYS [179904 2013-12-10] (Qihu 360 Software Co., Ltd.)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44744 2014-01-15] (AnchorFree Inc.)
R3 irstrtdv; C:\Windows\System32\DRIVERS\irstrtdv.sys [26504 2012-02-22] (Intel Corporation)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [88280 2014-04-03] (Malwarebytes Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [119512 2014-04-12] (Malwarebytes Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
R3 SPCP825K; C:\Windows\System32\DRIVERS\SPCP825K.sys [42056 2010-07-19] (SUNPLUS TECHNOLOGY Co., LTD.)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-01-15] (Anchorfree Inc.)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
R2 VirtualImDisk; C:\Windows\System32\DRIVERS\virtualimdisk.sys [39464 2013-09-29] (Olof Lagerkvist)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-18 13:20 - 2014-04-18 13:20 - 02347384 _____ (ESET) C:\Users\LEW\Desktop\esetsmartinstaller_enu(1).exe
2014-04-18 13:14 - 2014-04-18 13:14 - 00055379 _____ () C:\Users\LEW\Desktop\FRST4.txt
2014-04-18 13:07 - 2014-04-18 13:07 - 00000000 ____D () C:\Users\LEW\Downloads\FRST-OlderVersion
2014-04-18 11:49 - 2014-04-18 11:49 - 00000000 ___RD () C:\Users\LEW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-04-17 18:22 - 2014-04-17 18:22 - 22027092 _____ () C:\Users\LEW\Desktop\19538340_sd_013.mp4
2014-04-17 14:47 - 2014-04-18 13:51 - 00258671 _____ () C:\Windows\WindowsUpdate.log
2014-04-17 14:45 - 2014-04-18 11:49 - 00011698 _____ () C:\Windows\PFRO.log
2014-04-17 14:45 - 2014-04-18 11:49 - 00000224 _____ () C:\Windows\setupact.log
2014-04-17 14:45 - 2014-04-17 18:22 - 00020480 ___SH () C:\Users\LEW\Desktop\Thumbs.db
2014-04-17 14:45 - 2014-04-17 14:45 - 00115352 _____ () C:\Users\LEW\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-17 14:45 - 2014-04-17 14:45 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-17 14:35 - 2014-04-17 14:35 - 00000000 ____D () C:\Windows\SysWOW64\Hotspot Shield
2014-04-17 14:29 - 2014-04-17 14:29 - 00000000 ____D () C:\ProgramData\Hotspot Shield
2014-04-17 14:28 - 2014-04-17 14:29 - 00000000 ____D () C:\Program Files (x86)\Hotspot Shield
2014-04-17 14:28 - 2014-04-17 14:28 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\Hotspot Shield
2014-04-17 14:28 - 2014-04-17 14:28 - 00000000 ____D () C:\Program Files (x86)\RadioRage_4j
2014-04-17 14:28 - 2014-01-15 00:47 - 00044744 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys
2014-04-17 14:19 - 2014-04-17 14:19 - 00359040 _____ () C:\Users\LEW\Desktop\proxmate_unblock_the_internet-2.3.3-fx.xpi.zip
2014-04-17 14:04 - 2014-04-17 14:04 - 00359040 _____ () C:\Users\LEW\Downloads\proxmate_unblock_the_internet-2.3.3-fx.xpi.zip
2014-04-14 11:29 - 2014-04-14 11:29 - 00000970 _____ () C:\Users\LEW\Desktop\securitycheck-ergebnis.txt
2014-04-14 11:25 - 2014-04-14 11:26 - 00987448 _____ () C:\Users\LEW\Desktop\SecurityCheck.exe
2014-04-14 09:44 - 2014-04-14 09:44 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-04-14 09:33 - 2014-04-14 09:37 - 02347384 _____ (ESET) C:\Users\LEW\Desktop\esetsmartinstaller_enu.exe
2014-04-12 23:43 - 2014-04-12 23:43 - 00000000 ____D () C:\Users\LEW\Documents\Ashampoo Burning Studio 2014
2014-04-12 23:32 - 2014-04-12 23:43 - 865771520 _____ () C:\Users\LEW\Desktop\SW_DVD5_Office_Professional_Plus_2013_64Bit_German_MLF_X18-55305.ISO
2014-04-12 12:10 - 2014-04-12 12:13 - 00000082 _____ () C:\Windows\SysWOW64\winsevr.dat
2014-04-12 12:09 - 2014-04-12 12:13 - 00000000 ____D () C:\Program Files (x86)\AOMEI Backupper Standard Edition 2.0
2014-04-12 11:54 - 2014-04-12 11:54 - 00048141 _____ () C:\Users\LEW\Desktop\FRST3.txt
2014-04-12 11:26 - 2014-04-12 11:26 - 00047918 _____ () C:\Users\LEW\Desktop\FRST2.txt
2014-04-12 11:25 - 2014-04-12 11:25 - 00002291 _____ () C:\Users\LEW\Desktop\JRT2.txt
2014-04-12 11:24 - 2014-04-12 11:24 - 00002291 _____ () C:\Users\LEW\Desktop\JRT.txt
2014-04-12 11:11 - 2014-04-12 11:11 - 00000000 ____D () C:\Windows\ERUNT
2014-04-12 11:10 - 2014-04-12 11:10 - 01016261 _____ (Thisisu) C:\Users\LEW\Downloads\JRT.exe
2014-04-12 11:09 - 2014-04-12 11:09 - 00001588 _____ () C:\Users\LEW\Desktop\AdwCleaner[S4].txt
2014-04-12 11:02 - 2014-04-12 11:03 - 00613200 _____ (Chip Digital GmbH) C:\Users\LEW\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-04-12 11:00 - 2014-04-12 11:00 - 01426178 _____ () C:\Users\LEW\Downloads\adwcleaner.exe
2014-04-12 11:00 - 2014-04-12 11:00 - 00001322 _____ () C:\Users\LEW\Desktop\mbam.txt
2014-04-11 20:10 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-11 20:10 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-11 20:10 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-11 20:10 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-11 20:10 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-11 20:10 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-11 20:10 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-11 20:10 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-11 20:10 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-11 20:10 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-11 20:10 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-11 20:10 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-11 20:10 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-11 20:10 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-11 20:10 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-11 20:10 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-11 20:10 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-11 20:10 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-11 20:10 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-11 20:10 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-11 20:10 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-11 20:10 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-11 20:10 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-11 20:10 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-11 20:10 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-11 20:10 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-11 20:10 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-11 20:10 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-11 20:10 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-11 20:10 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-11 20:10 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-11 20:10 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-11 20:10 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-11 20:10 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-11 20:10 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-11 20:10 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-11 20:10 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-11 20:10 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-11 20:10 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-11 20:10 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-11 20:10 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-11 20:10 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-11 20:10 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-11 20:10 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-11 20:10 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-11 20:10 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-11 20:10 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-11 20:10 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-10 18:09 - 2014-04-18 14:17 - 00027078 _____ () C:\Users\LEW\Downloads\FRST.txt
2014-04-10 18:09 - 2014-04-10 18:10 - 00052306 _____ () C:\Users\LEW\Downloads\Addition.txt
2014-04-10 18:08 - 2014-04-18 14:17 - 00000000 ____D () C:\FRST
2014-04-10 18:08 - 2014-04-18 13:07 - 02158592 _____ (Farbar) C:\Users\LEW\Downloads\FRST64.exe
2014-04-09 10:13 - 2014-04-09 10:23 - 00000000 ____D () C:\Program Files (x86)\PlotSoft
2014-04-09 10:12 - 2014-04-09 10:12 - 10746848 _____ (PlotSoft LLC) C:\Users\LEW\Downloads\PDFill_11.exe
2014-04-09 10:05 - 2014-04-09 10:05 - 06146560 _____ () C:\Users\LEW\Downloads\FreewarePDFUnlocker.msi
2014-04-09 09:47 - 2014-04-09 09:47 - 00000040 _____ () C:\Windows\winDecrypt.INI
2014-04-09 08:18 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 08:18 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 08:18 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 08:18 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 08:18 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 08:18 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 08:18 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 08:18 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 08:18 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 08:18 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 08:18 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 08:18 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 08:18 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 08:18 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-08 22:29 - 2014-04-08 22:29 - 16587248 _____ (Tracker Software Products Ltd ) C:\Users\LEW\Downloads\PDFX142Vwer.exe
2014-04-08 22:19 - 2014-04-08 22:19 - 00000000 ____D () C:\Users\LEW\AppData\Local\Adobe
2014-04-06 21:52 - 2014-04-06 21:52 - 08508640 _____ (WiseCleaner.com ) C:\Users\LEW\Downloads\WiseCare365.exe
2014-04-06 21:29 - 2014-04-06 21:30 - 00391097 _____ () C:\Users\LEW\Downloads\avgremover.log
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple Computer
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple
2014-04-02 15:56 - 2014-04-02 15:56 - 00000000 ____D () C:\Users\LEW\AppData\Local\Skype
2014-03-30 09:41 - 2014-03-30 09:41 - 00026744 _____ () C:\Users\LEW\Downloads\bitshare.com.html
2014-03-30 08:14 - 2014-04-15 14:52 - 00000000 ____D () C:\Users\LEW\AppData\Local\CrashDumps
2014-03-30 08:03 - 2014-03-30 08:08 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-29 13:58 - 2014-04-12 10:48 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-29 13:58 - 2014-04-12 10:47 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-03-29 13:58 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-29 13:58 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-29 13:58 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Wondershare
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Luke_Payne
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Lexware
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\BMExplorer
2014-03-28 12:49 - 2014-04-17 14:24 - 00000000 ____D () C:\Users\LEW\AppData\Local\CyberGhost
2014-03-28 12:48 - 2014-03-28 12:48 - 00000000 ____D () C:\Users\LEW\AppData\Local\Macromedia
2014-03-28 12:43 - 2014-03-28 12:48 - 00000000 ____D () C:\Program Files\TAP-Windows
2014-03-28 12:42 - 2014-04-17 13:55 - 00000000 ____D () C:\Program Files\CyberGhost 5
2014-03-27 14:34 - 2014-03-27 14:35 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-03-25 09:37 - 2014-03-29 14:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-23 13:03 - 2014-03-23 13:03 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\LavasoftStatistics
2014-03-23 11:58 - 2014-03-25 14:20 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\PeaZip
2014-03-23 11:57 - 2014-03-23 11:57 - 00000000 ____D () C:\Program Files\PeaZip
2014-03-22 23:54 - 2014-03-23 16:57 - 00000000 ____D () C:\Users\LEW\Desktop\Zip-Folder
2014-03-21 23:52 - 2014-04-18 08:45 - 00005054 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for LEW-PC-LEW LEW-PC
2014-03-21 17:12 - 2014-04-12 11:06 - 00000000 ____D () C:\AdwCleaner
2014-03-21 16:59 - 2014-03-21 16:59 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-03-21 16:39 - 2014-03-23 12:53 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-19 10:47 - 2014-03-21 22:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

==================== One Month Modified Files and Folders =======

2014-04-18 14:17 - 2014-04-10 18:09 - 00027078 _____ () C:\Users\LEW\Downloads\FRST.txt
2014-04-18 14:17 - 2014-04-10 18:08 - 00000000 ____D () C:\FRST
2014-04-18 14:15 - 2013-09-11 22:32 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\Skype
2014-04-18 13:51 - 2014-04-17 14:47 - 00258671 _____ () C:\Windows\WindowsUpdate.log
2014-04-18 13:26 - 2012-06-17 00:08 - 04721750 _____ () C:\Windows\system32\perfh007.dat
2014-04-18 13:26 - 2012-06-17 00:08 - 01436626 _____ () C:\Windows\system32\perfc007.dat
2014-04-18 13:26 - 2009-07-14 07:13 - 00006248 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-18 13:20 - 2014-04-18 13:20 - 02347384 _____ (ESET) C:\Users\LEW\Desktop\esetsmartinstaller_enu(1).exe
2014-04-18 13:14 - 2014-04-18 13:14 - 00055379 _____ () C:\Users\LEW\Desktop\FRST4.txt
2014-04-18 13:07 - 2014-04-18 13:07 - 00000000 ____D () C:\Users\LEW\Downloads\FRST-OlderVersion
2014-04-18 13:07 - 2014-04-10 18:08 - 02158592 _____ (Farbar) C:\Users\LEW\Downloads\FRST64.exe
2014-04-18 11:56 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-18 11:56 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-18 11:49 - 2014-04-18 11:49 - 00000000 ___RD () C:\Users\LEW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-04-18 11:49 - 2014-04-17 14:45 - 00011698 _____ () C:\Windows\PFRO.log
2014-04-18 11:49 - 2014-04-17 14:45 - 00000224 _____ () C:\Windows\setupact.log
2014-04-18 11:49 - 2013-10-27 02:14 - 00000438 _____ () C:\Windows\Tasks\Wise Memory Optimizer Task.job
2014-04-18 11:49 - 2013-09-09 00:53 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\Wise Care 365
2014-04-18 11:49 - 2013-08-30 22:43 - 00000000 ___RD () C:\Users\LEW\Desktop\Programme
2014-04-18 11:49 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-18 11:49 - 2009-07-14 01:57 - 34892288 _____ (Microsoft Corporation) C:\Windows\system32\imageres.dll
2014-04-18 08:45 - 2014-03-21 23:52 - 00005054 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for LEW-PC-LEW LEW-PC
2014-04-17 18:27 - 2013-09-11 23:47 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\vlc
2014-04-17 18:22 - 2014-04-17 18:22 - 22027092 _____ () C:\Users\LEW\Desktop\19538340_sd_013.mp4
2014-04-17 18:22 - 2014-04-17 14:45 - 00020480 ___SH () C:\Users\LEW\Desktop\Thumbs.db
2014-04-17 14:45 - 2014-04-17 14:45 - 00115352 _____ () C:\Users\LEW\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-17 14:45 - 2014-04-17 14:45 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-17 14:45 - 2014-02-26 00:41 - 00000000 ____D () C:\Users\LEW\Desktop\MündlichePrüfung
2014-04-17 14:41 - 2013-09-13 12:42 - 00000000 ___RD () C:\Users\LEW\Desktop\Movies-neu
2014-04-17 14:35 - 2014-04-17 14:35 - 00000000 ____D () C:\Windows\SysWOW64\Hotspot Shield
2014-04-17 14:29 - 2014-04-17 14:29 - 00000000 ____D () C:\ProgramData\Hotspot Shield
2014-04-17 14:29 - 2014-04-17 14:28 - 00000000 ____D () C:\Program Files (x86)\Hotspot Shield
2014-04-17 14:28 - 2014-04-17 14:28 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\Hotspot Shield
2014-04-17 14:28 - 2014-04-17 14:28 - 00000000 ____D () C:\Program Files (x86)\RadioRage_4j
2014-04-17 14:24 - 2014-03-28 12:49 - 00000000 ____D () C:\Users\LEW\AppData\Local\CyberGhost
2014-04-17 14:19 - 2014-04-17 14:19 - 00359040 _____ () C:\Users\LEW\Desktop\proxmate_unblock_the_internet-2.3.3-fx.xpi.zip
2014-04-17 14:04 - 2014-04-17 14:04 - 00359040 _____ () C:\Users\LEW\Downloads\proxmate_unblock_the_internet-2.3.3-fx.xpi.zip
2014-04-17 13:55 - 2014-03-28 12:42 - 00000000 ____D () C:\Program Files\CyberGhost 5
2014-04-17 13:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-17 13:38 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-17 13:00 - 2014-02-02 23:01 - 00000000 ____D () C:\ProgramData\ProductData
2014-04-15 14:52 - 2014-03-30 08:14 - 00000000 ____D () C:\Users\LEW\AppData\Local\CrashDumps
2014-04-15 14:00 - 2013-08-24 00:51 - 00000000 ____D () C:\Users\LEW\Documents\Bluetooth Folder
2014-04-14 11:29 - 2014-04-14 11:29 - 00000970 _____ () C:\Users\LEW\Desktop\securitycheck-ergebnis.txt
2014-04-14 11:26 - 2014-04-14 11:25 - 00987448 _____ () C:\Users\LEW\Desktop\SecurityCheck.exe
2014-04-14 09:44 - 2014-04-14 09:44 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-04-14 09:37 - 2014-04-14 09:33 - 02347384 _____ (ESET) C:\Users\LEW\Desktop\esetsmartinstaller_enu.exe
2014-04-13 17:04 - 2013-09-22 12:14 - 00000000 ___RD () C:\Users\LEW\Desktop\Schreiben
2014-04-12 23:43 - 2014-04-12 23:43 - 00000000 ____D () C:\Users\LEW\Documents\Ashampoo Burning Studio 2014
2014-04-12 23:43 - 2014-04-12 23:32 - 865771520 _____ () C:\Users\LEW\Desktop\SW_DVD5_Office_Professional_Plus_2013_64Bit_German_MLF_X18-55305.ISO
2014-04-12 14:25 - 2013-09-05 21:47 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-12 14:11 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-12 12:13 - 2014-04-12 12:10 - 00000082 _____ () C:\Windows\SysWOW64\winsevr.dat
2014-04-12 12:13 - 2014-04-12 12:09 - 00000000 ____D () C:\Program Files (x86)\AOMEI Backupper Standard Edition 2.0
2014-04-12 12:13 - 2013-10-19 14:59 - 00001024 ____H () C:\SYSTAG.BIN
2014-04-12 12:13 - 2013-10-19 14:59 - 00000000 ____D () C:\ProgramData\AomeiBR
2014-04-12 11:54 - 2014-04-12 11:54 - 00048141 _____ () C:\Users\LEW\Desktop\FRST3.txt
2014-04-12 11:31 - 2014-02-23 21:52 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-04-12 11:30 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-04-12 11:26 - 2014-04-12 11:26 - 00047918 _____ () C:\Users\LEW\Desktop\FRST2.txt
2014-04-12 11:25 - 2014-04-12 11:25 - 00002291 _____ () C:\Users\LEW\Desktop\JRT2.txt
2014-04-12 11:24 - 2014-04-12 11:24 - 00002291 _____ () C:\Users\LEW\Desktop\JRT.txt
2014-04-12 11:11 - 2014-04-12 11:11 - 00000000 ____D () C:\Windows\ERUNT
2014-04-12 11:10 - 2014-04-12 11:10 - 01016261 _____ (Thisisu) C:\Users\LEW\Downloads\JRT.exe
2014-04-12 11:09 - 2014-04-12 11:09 - 00001588 _____ () C:\Users\LEW\Desktop\AdwCleaner[S4].txt
2014-04-12 11:06 - 2014-03-21 17:12 - 00000000 ____D () C:\AdwCleaner
2014-04-12 11:03 - 2014-04-12 11:02 - 00613200 _____ (Chip Digital GmbH) C:\Users\LEW\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-04-12 11:00 - 2014-04-12 11:00 - 01426178 _____ () C:\Users\LEW\Downloads\adwcleaner.exe
2014-04-12 11:00 - 2014-04-12 11:00 - 00001322 _____ () C:\Users\LEW\Desktop\mbam.txt
2014-04-12 10:48 - 2014-03-29 13:58 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-12 10:47 - 2014-03-29 13:58 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-12 10:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-11 19:31 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-04-11 14:13 - 2013-09-13 21:30 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\picpick
2014-04-11 14:13 - 2013-08-24 00:46 - 00000000 ____D () C:\Users\LEW
2014-04-11 14:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-04-11 07:55 - 2013-09-10 07:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-11 07:53 - 2013-09-10 07:29 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-10 18:10 - 2014-04-10 18:09 - 00052306 _____ () C:\Users\LEW\Downloads\Addition.txt
2014-04-09 10:23 - 2014-04-09 10:13 - 00000000 ____D () C:\Program Files (x86)\PlotSoft
2014-04-09 10:12 - 2014-04-09 10:12 - 10746848 _____ (PlotSoft LLC) C:\Users\LEW\Downloads\PDFill_11.exe
2014-04-09 10:05 - 2014-04-09 10:05 - 06146560 _____ () C:\Users\LEW\Downloads\FreewarePDFUnlocker.msi
2014-04-09 09:47 - 2014-04-09 09:47 - 00000040 _____ () C:\Windows\winDecrypt.INI
2014-04-09 09:46 - 2013-08-24 00:47 - 00000000 ____D () C:\Users\LEW\AppData\Local\VirtualStore
2014-04-08 22:29 - 2014-04-08 22:29 - 16587248 _____ (Tracker Software Products Ltd ) C:\Users\LEW\Downloads\PDFX142Vwer.exe
2014-04-08 22:19 - 2014-04-08 22:19 - 00000000 ____D () C:\Users\LEW\AppData\Local\Adobe
2014-04-07 00:02 - 2013-09-09 00:53 - 00000398 _____ () C:\Windows\Tasks\Wise Turbo Checker.job
2014-04-06 21:52 - 2014-04-06 21:52 - 08508640 _____ (WiseCleaner.com ) C:\Users\LEW\Downloads\WiseCare365.exe
2014-04-06 21:30 - 2014-04-06 21:29 - 00391097 _____ () C:\Users\LEW\Downloads\avgremover.log
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple Computer
2014-04-05 18:53 - 2014-04-05 18:53 - 00000000 ____D () C:\Users\LEW\AppData\Local\Apple
2014-04-03 09:51 - 2014-03-29 13:58 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-03-29 13:58 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-03-29 13:58 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-02 15:56 - 2014-04-02 15:56 - 00000000 ____D () C:\Users\LEW\AppData\Local\Skype
2014-04-02 15:56 - 2013-09-05 23:41 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-02 15:56 - 2012-05-11 02:46 - 00000000 ____D () C:\ProgramData\Skype
2014-03-31 09:35 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-03-30 09:41 - 2014-03-30 09:41 - 00026744 _____ () C:\Users\LEW\Downloads\bitshare.com.html
2014-03-30 09:40 - 2013-09-10 10:39 - 00000000 ____D () C:\Users\LEW\dwhelper
2014-03-30 08:08 - 2014-03-30 08:03 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-29 14:48 - 2014-03-25 09:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 14:04 - 2013-09-18 22:50 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\DVDVideoSoft
2014-03-29 14:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-03-29 13:58 - 2014-02-24 09:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Wondershare
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Luke_Payne
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\Lexware
2014-03-29 00:05 - 2014-03-29 00:05 - 00000000 ____D () C:\Users\LEW\AppData\Local\BMExplorer
2014-03-28 16:06 - 2013-08-30 22:26 - 00000000 ____D () C:\Users\LEW\AppData\Local\Mozilla
2014-03-28 12:48 - 2014-03-28 12:48 - 00000000 ____D () C:\Users\LEW\AppData\Local\Macromedia
2014-03-28 12:48 - 2014-03-28 12:43 - 00000000 ____D () C:\Program Files\TAP-Windows
2014-03-28 12:48 - 2013-10-02 00:20 - 00000000 ____D () C:\Users\LEW\AppData\Local\Windows Live
2014-03-28 12:48 - 2013-08-30 22:42 - 00000000 ____D () C:\Users\LEW\AppData\Local\Thunderbird
2014-03-27 14:35 - 2014-03-27 14:34 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-03-26 10:35 - 2013-08-30 22:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-25 14:20 - 2014-03-23 11:58 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\PeaZip
2014-03-23 16:57 - 2014-03-22 23:54 - 00000000 ____D () C:\Users\LEW\Desktop\Zip-Folder
2014-03-23 13:03 - 2014-03-23 13:03 - 00000000 ____D () C:\Users\LEW\AppData\Roaming\LavasoftStatistics
2014-03-23 12:53 - 2014-03-21 16:39 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-23 12:53 - 2013-09-09 01:17 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-23 11:57 - 2014-03-23 11:57 - 00000000 ____D () C:\Program Files\PeaZip
2014-03-23 09:32 - 2013-11-26 09:23 - 00312728 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-23 09:32 - 2013-11-26 09:23 - 00191384 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-23 09:32 - 2013-11-26 09:23 - 00190872 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-23 09:32 - 2013-11-26 09:23 - 00111000 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-23 09:32 - 2013-11-26 09:23 - 00000000 ____D () C:\Program Files\Java
2014-03-21 22:06 - 2014-03-19 10:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-21 22:06 - 2013-09-13 07:35 - 00000000 ___RD () C:\Users\LEW\Desktop\Sonstiges
2014-03-21 16:59 - 2014-03-21 16:59 - 00000000 ____D () C:\ProgramData\Lavasoft

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-09 11:37

==================== End Of Log ============================
         

--- --- ---

in welchem Browser?

Firefox 28.0

Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen

was passiert mit den Bookmarks und den Add-ons? Kann ich die separat speichern und anschließend in die frische Firefox-Version einspielen?

Bookmarks exportieren, Addons nicht, einfach neu installieren.

Das war´s. Plattmachen ist manchmal die einzige Lösung.

Vielen Dank, Schrauber, für die Hilfe und das Nichtaufgeben.

Cheers,
Aaarrrggghhh (<-- jetzt ja eigentlich nicht mehr )

Plattmachen? Du solltest du FF neu installieren.

Hab ich doch. FF plattmachen, nicht den Rechner.