Möglicher Trojaner -Öffnen von Mozilla FireFox immer wieder "http://istart.webssearches.com"

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-04-2014 01
Ran by Matze (administrator) on MATZE-PC on 16-04-2014 18:26:08
Running from C:\Users\Matze\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Gigabyte Technology CO.) C:\Program Files\GIGABYTE\SMART6\Recovery\RPMDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\AlarmClock.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Nullsoft) C:\Program Files (x86)\Winamp\winamp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\system32\wbem\WMIADAP.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11772520 2011-01-04] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641664 2012-04-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [10752 2012-02-20] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKLM\...\RunOnce: [RPMKickstart] - C:\Program Files\GIGABYTE\SMART6\Recovery\RPMKickstart.exe [2552320 2010-08-23] (Gigabyte Technology CO., LTD.)
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => "C:\PROGRA~2\SupTab\SEARCH~1.DLL" File Not Found
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x90E94FC03449CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
SearchScopes: HKCU - {21982A7D-A059-423e-B6B5-E8F501756894} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}
SearchScopes: HKCU - {3BEA6B08-FAFC-457e-9EFB-DC942B1884CC} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: GBHO.BHO - {45d30484-7ded-43d9-957a-d2fd1f046511} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} -  No File
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Smart Recovery 2 - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Matze\AppData\Roaming\Mozilla\Firefox\Profiles\7bwcp5u1.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.klamm.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.0.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: @videolan.org/vlc,version=0.9.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Matze\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Oracle Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: TVU Web Player - C:\Users\Matze\AppData\Roaming\Mozilla\Firefox\Profiles\7bwcp5u1.default\Extensions\firefox@tvunetworks.com [2011-11-06]
FF Extension: ColorfulTabs - C:\Users\Matze\AppData\Roaming\Mozilla\Firefox\Profiles\7bwcp5u1.default\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-03-21]
FF Extension: FoxyTunes - C:\Users\Matze\AppData\Roaming\Mozilla\Firefox\Profiles\7bwcp5u1.default\Extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374} [2012-03-23]
FF Extension: WOT - C:\Users\Matze\AppData\Roaming\Mozilla\Firefox\Profiles\7bwcp5u1.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-28]
FF Extension: Unfriend Finder - C:\Users\Matze\AppData\Roaming\Mozilla\Firefox\Profiles\7bwcp5u1.default\Extensions\firefox@unfriendfinder.com.xpi [2013-02-03]
FF Extension: FoxyTunes Skin - OnyxOrbs - C:\Users\Matze\AppData\Roaming\Mozilla\Firefox\Profiles\7bwcp5u1.default\Extensions\{469CEB59-8266-438b-91D9-82F56D595E15}.xpi [2011-10-08]
FF Extension: Adblock Plus - C:\Users\Matze\AppData\Roaming\Mozilla\Firefox\Profiles\7bwcp5u1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-03]
FF Extension: Download Statusbar - C:\Users\Matze\AppData\Roaming\Mozilla\Firefox\Profiles\7bwcp5u1.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2011-09-03]
FF Extension: Greasemonkey - C:\Users\Matze\AppData\Roaming\Mozilla\Firefox\Profiles\7bwcp5u1.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2012-08-25]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-03-30]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-12-16]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-12-16]

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2011-08-12] (SUPERAntiSpyware.com)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363584 2014-03-03] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748608 2014-03-03] (Microsoft Corporation)
S3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [577582 2010-08-25] (ZF Electronics GmbH)
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3516408 2013-07-05] (devolo AG)
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [114688 2009-10-13] (Gigabyte Technology CO., LTD.)

==================== Drivers (Whitelisted) ====================

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [111552 2008-04-11] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [111552 2008-04-11] (SlySoft, Inc.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [270912 2011-09-03] (DT Soft Ltd)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R3 ElbyCDFL; C:\Windows\SysWOW64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2011-07-28] ()
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-15] (Malwarebytes Corporation)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2013-07-05] (CACE Technologies)
S3 PCAMp50a64; C:\Windows\System32\Drivers\PCAMp50a64.sys [43328 2006-11-28] (Printing Communications Assoc., Inc. (PCAUSA))
S3 PCASp50a64; C:\Windows\System32\Drivers\PCASp50a64.sys [41280 2006-11-28] (Printing Communications Assoc., Inc. (PCAUSA))
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2011-12-24] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 WPN111; system32\DRIVERS\WPN111vx.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-16 18:26 - 2014-04-16 18:27 - 00019182 _____ () C:\Users\Matze\Desktop\FRST.txt
2014-04-16 18:26 - 2014-04-16 18:26 - 00000000 ____D () C:\FRST
2014-04-16 18:24 - 2014-04-16 18:25 - 02158080 _____ (Farbar) C:\Users\Matze\Desktop\FRST64.exe
2014-04-15 20:36 - 2014-04-15 20:36 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-04-15 20:24 - 2014-04-15 20:24 - 02347384 _____ (ESET) C:\Users\Matze\Desktop\esetsmartinstaller_enu.exe
2014-04-15 20:01 - 2014-04-15 22:45 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-15 20:00 - 2014-04-15 20:00 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Matze\Desktop\mbam-setup-2.0.1.1004.exe
2014-04-15 19:55 - 2014-04-15 19:57 - 00001839 _____ () C:\Users\Matze\Desktop\JRT.txt
2014-04-15 19:50 - 2014-04-15 19:50 - 01016261 _____ (Thisisu) C:\Users\Matze\Desktop\JRT.exe
2014-04-15 19:50 - 2014-04-15 19:50 - 00000000 ____D () C:\Windows\ERUNT
2014-04-15 19:47 - 2014-04-15 19:47 - 00022034 _____ () C:\Users\Matze\Desktop\AdwCleaner[S0].txt
2014-04-15 19:43 - 2014-04-15 19:45 - 00000000 ____D () C:\AdwCleaner
2014-04-15 19:40 - 2014-04-15 19:40 - 01426178 _____ () C:\Users\Matze\Desktop\adwcleaner.exe
2014-04-15 19:31 - 2014-04-15 19:31 - 00001260 _____ () C:\Users\Matze\Desktop\Revo Uninstaller.lnk
2014-04-15 19:31 - 2014-04-15 19:31 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-04-15 19:28 - 2012-11-16 19:17 - 01034216 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2014-04-15 19:28 - 2012-11-16 19:17 - 00916456 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2014-04-14 22:34 - 2014-04-14 23:01 - 00000444 __RSH () C:\ProgramData\ntuser.pol
2014-04-14 22:34 - 2014-04-14 22:34 - 00000000 ____D () C:\Program Files (x86)\HQ-V-Pro-1.9
2014-04-09 21:55 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 21:55 - 2014-03-31 03:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 21:55 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-09 21:55 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-09 21:54 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 21:54 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 21:54 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 21:54 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 21:54 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 21:54 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 21:54 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 21:54 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 21:54 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 21:54 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 21:54 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 21:54 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 21:54 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 21:54 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 21:54 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 21:54 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 21:54 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-03 19:29 - 2014-04-03 20:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-30 02:28 - 2014-03-30 02:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-30 01:21 - 2014-03-30 01:22 - 16379249 _____ () C:\Users\Matze\Desktop\den haag.zip
2014-03-24 12:15 - 2014-03-24 12:15 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_bcmwlhigh664_01009.Wdf
2014-03-18 19:02 - 2014-03-18 19:02 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-18 19:02 - 2014-03-18 19:02 - 00000000 ____D () C:\Users\Matze\AppData\Local\Skype

==================== One Month Modified Files and Folders =======

2014-04-16 18:27 - 2014-04-16 18:26 - 00019182 _____ () C:\Users\Matze\Desktop\FRST.txt
2014-04-16 18:26 - 2014-04-16 18:26 - 00000000 ____D () C:\FRST
2014-04-16 18:26 - 2014-03-05 21:05 - 00000000 ____D () C:\Users\Matze\AppData\Local\Battle.net
2014-04-16 18:26 - 2011-04-12 09:43 - 07542564 _____ () C:\Windows\system32\perfh007.dat
2014-04-16 18:26 - 2011-04-12 09:43 - 02276640 _____ () C:\Windows\system32\perfc007.dat
2014-04-16 18:26 - 2009-07-14 07:13 - 00006444 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-16 18:25 - 2014-04-16 18:24 - 02158080 _____ (Farbar) C:\Users\Matze\Desktop\FRST64.exe
2014-04-16 18:24 - 2011-07-06 19:30 - 02064877 _____ () C:\Windows\WindowsUpdate.log
2014-04-16 18:20 - 2013-07-12 19:10 - 00044095 _____ () C:\Windows\setupact.log
2014-04-16 18:20 - 2012-02-21 11:00 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-16 18:20 - 2011-09-04 21:17 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-04-16 18:20 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-15 23:33 - 2012-08-19 19:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-15 23:01 - 2012-02-21 11:00 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-15 22:52 - 2009-07-14 06:45 - 00020128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-15 22:52 - 2009-07-14 06:45 - 00020128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-15 22:45 - 2014-04-15 20:01 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-15 20:36 - 2014-04-15 20:36 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-04-15 20:25 - 2014-03-03 15:50 - 00148632 _____ () C:\Windows\PFRO.log
2014-04-15 20:24 - 2014-04-15 20:24 - 02347384 _____ (ESET) C:\Users\Matze\Desktop\esetsmartinstaller_enu.exe
2014-04-15 20:00 - 2014-04-15 20:00 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Matze\Desktop\mbam-setup-2.0.1.1004.exe
2014-04-15 20:00 - 2011-09-06 18:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-15 19:57 - 2014-04-15 19:55 - 00001839 _____ () C:\Users\Matze\Desktop\JRT.txt
2014-04-15 19:50 - 2014-04-15 19:50 - 01016261 _____ (Thisisu) C:\Users\Matze\Desktop\JRT.exe
2014-04-15 19:50 - 2014-04-15 19:50 - 00000000 ____D () C:\Windows\ERUNT
2014-04-15 19:47 - 2014-04-15 19:47 - 00022034 _____ () C:\Users\Matze\Desktop\AdwCleaner[S0].txt
2014-04-15 19:45 - 2014-04-15 19:43 - 00000000 ____D () C:\AdwCleaner
2014-04-15 19:45 - 2011-07-23 15:18 - 00001045 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-15 19:40 - 2014-04-15 19:40 - 01426178 _____ () C:\Users\Matze\Desktop\adwcleaner.exe
2014-04-15 19:31 - 2014-04-15 19:31 - 00001260 _____ () C:\Users\Matze\Desktop\Revo Uninstaller.lnk
2014-04-15 19:31 - 2014-04-15 19:31 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-04-14 23:01 - 2014-04-14 22:34 - 00000444 __RSH () C:\ProgramData\ntuser.pol
2014-04-14 22:59 - 2012-11-16 19:17 - 00111000 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-04-14 22:59 - 2011-09-08 22:32 - 00312728 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-04-14 22:59 - 2011-09-08 22:32 - 00191384 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-04-14 22:59 - 2011-09-08 22:32 - 00190872 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-04-14 22:59 - 2011-09-04 15:26 - 00000000 ____D () C:\Program Files\Java
2014-04-14 22:34 - 2014-04-14 22:34 - 00000000 ____D () C:\Program Files (x86)\HQ-V-Pro-1.9
2014-04-14 22:34 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-04-14 22:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-04-14 22:14 - 2012-05-15 21:32 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\TS3Client
2014-04-14 21:40 - 2011-09-04 22:45 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-04-14 20:44 - 2011-12-23 18:38 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Skype
2014-04-13 15:49 - 2011-11-25 09:58 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-04-10 22:55 - 2014-03-05 21:05 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-04-10 13:37 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-09 23:53 - 2013-08-16 22:18 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 23:53 - 2009-07-14 04:34 - 00000534 _____ () C:\Windows\win.ini
2014-04-09 23:52 - 2011-07-28 15:59 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-03 23:00 - 2012-04-28 22:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-03 20:22 - 2014-04-03 19:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-31 18:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-31 03:16 - 2014-04-09 21:55 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-31 03:13 - 2014-04-09 21:55 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-31 02:13 - 2014-04-09 21:55 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-31 01:57 - 2014-04-09 21:55 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-30 02:28 - 2014-03-30 02:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-30 01:22 - 2014-03-30 01:21 - 16379249 _____ () C:\Users\Matze\Desktop\den haag.zip
2014-03-25 23:56 - 2012-02-21 11:00 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-25 23:56 - 2012-02-21 11:00 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-24 12:15 - 2014-03-24 12:15 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_bcmwlhigh664_01009.Wdf
2014-03-24 12:14 - 2011-07-23 14:31 - 00000000 ____D () C:\ProgramData\InstallShield
2014-03-24 12:12 - 2011-07-23 14:24 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-18 19:02 - 2014-03-18 19:02 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-18 19:02 - 2014-03-18 19:02 - 00000000 ____D () C:\Users\Matze\AppData\Local\Skype
2014-03-18 19:02 - 2011-12-23 18:38 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-18 19:02 - 2011-12-23 18:38 - 00000000 ____D () C:\ProgramData\Skype

Some content of TEMP:
====================
C:\Users\Matze\AppData\Local\Temp\avgnt.exe
C:\Users\Matze\AppData\Local\Temp\BackupSetup.exe
C:\Users\Matze\AppData\Local\Temp\Quarantine.exe
C:\Users\Matze\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Matze\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-10 13:28

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-04-2014 01
Ran by Matze at 2014-04-16 18:27:19
Running from C:\Users\Matze\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
AMD Accelerated Video Transcoding (Version: 2.00.0002 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.923.1 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{E4490157-303F-F06F-FB6E-D2053A43A182}) (Version: 8.0.873.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.70405.2224 - Advanced Micro Devices, Inc.) Hidden
Apple Mobile Device Support (HKLM\...\{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}) (Version: 7.1.0.32 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
ccc-utility64 (Version: 2012.0405.2205.37728 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.02 - Piriform)
Dropbox (HKCU\...\Dropbox) (Version: 1.2.52 - Dropbox, Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
iTunes (HKLM\...\{0D924CB2-2EA4-4044-BAF7-770202D6BD0D}) (Version: 11.1.4.62 - Apple Inc.)
Java 8 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418000FF}) (Version: 8.0.0 - Oracle Corporation)
Java(TM) 6 Update 27 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416027FF}) (Version: 6.0.270 - Oracle)
Kies Air Discovery Service (HKCU\...\Kies Air Discovery Service) (Version:  - Samsung)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.9.0 - SAMSUNG Electronics Co., Ltd.)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.0.1118 - SUPERAntiSpyware.com)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 4.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)

==================== Restore Points  =========================

13-04-2014 21:06:47 Windows-Sicherung
14-04-2014 20:34:39 Uniblue SpeedUpMyPC installation
14-04-2014 20:59:06 Installed Java 8 (64-bit)
15-04-2014 16:23:35 Windows Update
15-04-2014 17:27:33 Removed Java 7 Update 9 (64-bit)

==================== Hosts content: ==========================

2009-07-14 04:34 - 2011-10-03 15:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {411D60E9-9764-4B22-9416-9F7826D13760} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {436CF0B5-6EA7-4A2E-9415-8E21BA9DF357} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5BF65CE5-4180-46E6-A6FE-0F09E1683B08} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-21] (Google Inc.)
Task: {6904341A-883D-481F-A316-8A1A2C73D924} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-21] (Google Inc.)
Task: {92CFBB64-5108-4688-8A02-39BEAC7D5C37} - \Scheduled Update for Ask Toolbar ATTENTION ====> No Task File
Task: {B7756B4B-DA31-42F4-83BF-9098DC39678E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {E717B3B2-58C9-4EEB-B4E1-A4F8CCAFF1D3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-09-03 18:51 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2012-04-05 22:00 - 2012-04-05 22:00 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-04-14 13:09 - 2013-04-14 13:05 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2009-07-01 18:21 - 2009-07-01 18:21 - 00046592 _____ () C:\Program Files (x86)\Winamp\zlib.dll
2014-04-16 18:21 - 2014-04-16 18:21 - 00069120 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\burnlib.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00013824 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\dsp_sps.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00009728 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\enc_aacplus.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004096 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\enc_flac.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004096 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\enc_flake.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00005120 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\enc_lame.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004096 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\enc_vorbis.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004096 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\enc_wav.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00006144 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\enc_wma.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00007168 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\gen_crasher.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00022528 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\gen_ff.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00011264 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\gen_hotkeys.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00010752 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\gen_jumpex.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00021504 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\gen_ml.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00008192 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\gen_tray.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00014336 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_cdda.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00006144 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_dshow.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00005632 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_flac.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00003584 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_flv.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00003584 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_linein.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00019968 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_midi.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00017920 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_mod.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00022528 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_mp3.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004608 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_mp4.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00011264 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_nsv.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00003584 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_swf.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00011264 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_vorbis.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00005632 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_wav.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004096 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_wave.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00015360 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_wm.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004608 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\in_wv.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00006656 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_autotag.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00005120 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_bookmarks.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00046080 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_disc.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00007680 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_history.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004608 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_impex.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00052736 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_local.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004096 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_nowplaying.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00012288 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_online.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004096 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_orb.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00012800 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_playlists.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00007680 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_plg.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00039936 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_pmp.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00006144 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_rg.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00007680 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_transcode.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00013824 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\ml_wire.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00006144 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\out_disk.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00016384 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\out_ds.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00007680 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\out_wave.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00002560 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\playlist.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004608 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\pmp_activesync.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00006144 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\pmp_ipod.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00003584 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\pmp_njb.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00004096 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\pmp_p4s.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00010240 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\pmp_usb.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00006144 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\tagz.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00088576 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\vis_avs.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00155136 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\vis_milk2.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00007680 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\vis_nsfs.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00151040 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\winamp.lng
2014-04-16 18:21 - 2014-04-16 18:21 - 00003584 _____ () C:\Users\Matze\AppData\Local\Temp\WLZC60C.tmp\winampa.lng
2009-07-01 18:27 - 2009-07-01 18:27 - 00018432 _____ () C:\Program Files (x86)\Winamp\System\auth.w5s
2009-07-01 18:25 - 2009-07-01 18:25 - 00007168 _____ () C:\Program Files (x86)\Winamp\System\bmp.w5s
2009-07-01 18:24 - 2009-07-01 18:24 - 00024576 _____ () C:\Program Files (x86)\Winamp\System\dlmgr.w5s
2009-07-01 18:27 - 2009-07-01 18:27 - 00011264 _____ () C:\Program Files (x86)\Winamp\System\filereader.w5s
2009-07-01 18:25 - 2009-07-01 18:25 - 00015872 _____ () C:\Program Files (x86)\Winamp\System\gif.w5s
2009-07-01 18:24 - 2009-07-01 18:24 - 00013824 _____ () C:\Program Files (x86)\Winamp\System\gracenote.w5s
2009-07-01 18:32 - 2009-07-01 18:32 - 00616960 _____ () C:\Program Files (x86)\Winamp\System\jnetlib.w5s
2009-07-01 18:26 - 2009-07-01 18:26 - 00104448 _____ () C:\Program Files (x86)\Winamp\System\jpeg.w5s
2009-07-01 18:27 - 2009-07-01 18:27 - 00075776 _____ () C:\Program Files (x86)\Winamp\System\playlist.w5s
2009-07-01 18:29 - 2009-07-01 18:29 - 00078336 _____ () C:\Program Files (x86)\Winamp\System\png.w5s
2009-07-01 18:23 - 2009-07-01 18:23 - 00009728 _____ () C:\Program Files (x86)\Winamp\System\primo.w5s
2009-07-01 18:31 - 2009-07-01 18:31 - 00018944 _____ () C:\Program Files (x86)\Winamp\System\tagz.w5s
2009-07-01 18:25 - 2009-07-01 18:25 - 00026624 _____ () C:\Program Files (x86)\Winamp\System\timer.w5s
2009-07-01 18:29 - 2009-07-01 18:29 - 00087552 _____ () C:\Program Files (x86)\Winamp\System\xml.w5s
2009-07-01 18:34 - 2009-07-01 18:34 - 00107520 _____ () C:\Program Files (x86)\Winamp\Plugins\in_cdda.dll
2009-07-01 18:32 - 2009-07-01 18:32 - 00071680 _____ () C:\Program Files (x86)\Winamp\Plugins\in_dshow.dll
2009-07-01 18:25 - 2009-07-01 18:25 - 00038400 _____ () C:\Program Files (x86)\Winamp\Plugins\in_flac.dll
2009-07-01 18:24 - 2009-07-01 18:24 - 00034816 _____ () C:\Program Files (x86)\Winamp\Plugins\in_flv.dll
2009-07-01 18:34 - 2009-07-01 18:34 - 00006656 _____ () C:\Program Files (x86)\Winamp\Plugins\in_linein.dll
2009-07-01 18:34 - 2009-07-01 18:34 - 00098304 _____ () C:\Program Files (x86)\Winamp\Plugins\in_midi.dll
2009-07-01 18:34 - 2009-07-01 18:34 - 00160768 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mod.dll
2009-07-01 18:33 - 2009-07-01 18:33 - 00267776 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mp3.dll
2009-07-01 18:33 - 2009-07-01 18:33 - 00038400 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mp4.dll
2009-07-01 18:33 - 2009-07-01 18:33 - 00069120 _____ () C:\Program Files (x86)\Winamp\Plugins\in_nsv.dll
2009-07-01 18:23 - 2009-07-01 18:23 - 00036864 _____ () C:\Program Files (x86)\Winamp\Plugins\in_swf.dll
2009-07-01 18:33 - 2009-07-01 18:33 - 00231424 _____ () C:\Program Files (x86)\Winamp\Plugins\in_vorbis.dll
2009-07-01 18:31 - 2009-07-01 18:31 - 00014848 _____ () C:\Program Files (x86)\Winamp\Plugins\in_wave.dll
2009-07-01 18:20 - 2009-07-01 18:20 - 00238080 _____ () C:\Program Files (x86)\Winamp\libsndfile.dll
2009-07-01 18:32 - 2009-07-01 18:32 - 00297472 _____ () C:\Program Files (x86)\Winamp\Plugins\in_wm.dll
2009-07-01 18:31 - 2009-07-01 18:31 - 00019456 _____ () C:\Program Files (x86)\Winamp\Plugins\out_disk.dll
2009-07-01 18:32 - 2009-07-01 18:32 - 00047104 _____ () C:\Program Files (x86)\Winamp\Plugins\out_ds.dll
2009-07-01 18:32 - 2009-07-01 18:32 - 00018432 _____ () C:\Program Files (x86)\Winamp\Plugins\out_wave.dll
2009-07-01 18:23 - 2009-07-01 18:23 - 00869376 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_dropbox.dll
2009-07-01 18:36 - 2009-07-01 18:36 - 01506304 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_ff.dll
2009-07-01 18:21 - 2009-07-01 18:21 - 00064000 _____ () C:\Program Files (x86)\Winamp\tataki.dll
2009-07-01 18:31 - 2009-07-01 18:31 - 00330752 _____ () C:\Program Files (x86)\Winamp\Plugins\freeform\wacs\freetype\freetype.wac
2009-07-01 18:35 - 2009-07-01 18:35 - 00025600 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_hotkeys.dll
2009-04-28 22:20 - 2009-04-28 22:20 - 00210432 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_jumpex.dll
2009-07-01 18:35 - 2009-07-01 18:35 - 00294912 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_ml.dll
2009-07-01 18:28 - 2009-07-01 18:28 - 00275968 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_local.dll
2009-07-01 18:20 - 2009-07-01 18:20 - 00087040 _____ () C:\Program Files (x86)\Winamp\nde.dll
2009-07-01 18:28 - 2009-07-01 18:28 - 00076288 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_playlists.dll
2009-07-01 18:30 - 2009-07-01 18:30 - 00256000 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_online.dll
2009-07-01 18:29 - 2009-07-01 18:29 - 00194048 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_disc.dll
2009-07-01 18:31 - 2009-07-01 18:31 - 00201728 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_pmp.dll
2009-07-01 18:30 - 2009-07-01 18:30 - 00104960 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_ipod.dll
2009-07-01 18:30 - 2009-07-01 18:30 - 00017920 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_njb.dll
2009-07-01 18:30 - 2009-07-01 18:30 - 00114176 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_p4s.dll
2009-07-01 18:26 - 2009-07-01 18:26 - 00042496 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_usb.dll
2009-07-01 18:29 - 2009-07-01 18:29 - 00020480 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_bookmarks.dll
2009-07-01 18:29 - 2009-07-01 18:29 - 00042496 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_history.dll
2009-07-01 18:24 - 2009-07-01 18:24 - 00026624 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_autotag.dll
2009-07-01 18:26 - 2009-07-01 18:26 - 00045568 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_impex.dll
2009-07-01 18:24 - 2009-07-01 18:24 - 00057856 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_plg.dll
2009-07-01 18:26 - 2009-07-01 18:26 - 00024064 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_rg.dll
2009-07-01 18:26 - 2009-07-01 18:26 - 00028160 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_transcode.dll
2009-07-01 18:27 - 2009-07-01 18:27 - 00045568 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_orgler.dll
2009-07-01 18:34 - 2009-07-01 18:34 - 00025088 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_tray.dll
2009-07-01 18:32 - 2009-07-01 18:32 - 00365056 _____ () C:\Program Files (x86)\Winamp\System\aacPlusDecoder.w5s
2011-07-23 14:26 - 2010-11-05 23:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-04-10 22:52 - 2014-04-10 22:52 - 26118656 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4403\libcef.dll
2014-04-10 22:52 - 2014-04-10 22:52 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4403\libglesv2.dll
2014-04-10 22:52 - 2014-04-10 22:52 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4403\libegl.dll
2014-03-30 02:28 - 2014-03-30 02:28 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-03-12 18:33 - 2014-03-12 18:33 - 16276872 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Windows:A6852B6DABE53B50

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK-Konfigurationstool.lnk => C:\Windows\pss\TP-LINK-Konfigurationstool.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WISO Mein Steuer-Sparbuch heute.lnk => C:\Windows\pss\WISO Mein Steuer-Sparbuch heute.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Matze^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: AnyDVD => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe
MSCONFIG\startupreg: ApnUpdater => "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Browser Infrastructure Helper => C:\Users\Matze\AppData\Local\Smartbar\Application\Smartbar.exe startup
MSCONFIG\startupreg: CherryKeyMan => "C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe"
MSCONFIG\startupreg: CloneCDTray => "C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe" /s
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: facemoods => "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe" /md I
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: KiesHelper => C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
MSCONFIG\startupreg: KiesPDLR => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: MobileDocuments => C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
MSCONFIG\startupreg: STCAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SUPERAntiSpyware => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
MSCONFIG\startupreg: Sweetpacks Communicator => C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
MSCONFIG\startupreg: WD Drive Unlocker => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
MSCONFIG\startupreg: WD Quick View => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
MSCONFIG\startupreg: WinampAgent => "C:\Program Files (x86)\Winamp\winampa.exe"
MSCONFIG\startupreg: ZyngaGamesAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/16/2014 06:26:18 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (04/16/2014 06:26:18 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (04/16/2014 06:26:18 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (04/16/2014 06:21:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/15/2014 10:50:24 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (04/15/2014 10:50:24 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (04/15/2014 10:50:24 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (04/15/2014 10:45:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/15/2014 10:11:38 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1342435

Error: (04/15/2014 10:11:38 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1342435


System errors:
=============
Error: (04/15/2014 10:44:12 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎15.‎04.‎2014 um 22:42:11 unerwartet heruntergefahren.

Error: (04/15/2014 08:25:12 PM) (Source: DCOM) (User: )
Description: {06622D85-6856-4460-8DE1-A81921B41C4B}


Microsoft Office Sessions:
=========================
Error: (04/16/2014 06:26:18 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (04/16/2014 06:26:18 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (04/16/2014 06:26:18 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (04/16/2014 06:21:55 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/15/2014 10:50:24 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (04/15/2014 10:50:24 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (04/15/2014 10:50:24 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (04/15/2014 10:45:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/15/2014 10:11:38 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1342435

Error: (04/15/2014 10:11:38 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1342435


CodeIntegrity Errors:
===================================
  Date: 2011-10-03 15:20:46.379
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-10-03 15:20:46.363
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-09-06 18:01:36.834
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Matze\AppData\Local\Temp\mbr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-09-06 18:01:36.828
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Matze\AppData\Local\Temp\mbr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 35%
Total physical RAM: 8175.23 MB
Available physical RAM: 5284.99 MB
Total Pagefile: 16348.65 MB
Available Pagefile: 13058.9 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.56 GB) (Free:28.81 GB) NTFS
Drive d: (Daten) (Fixed) (Total:415.04 GB) (Free:204.26 GB) NTFS
Drive e: (Sonstige) (Fixed) (Total:418.82 GB) (Free:81.14 GB) NTFS
Drive g: (Filme) (Fixed) (Total:127 GB) (Free:101.95 GB) NTFS
Drive h: (Daten) (Fixed) (Total:127 GB) (Free:1.36 GB) NTFS
Drive i: (Serien) (Fixed) (Total:44.08 GB) (Free:24.94 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E8C4B23B)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 298 GB) (Disk ID: 89E189E1)
Partition 1: (Active) - (Size=127 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=171 GB) - (Type=OF Extended)

==================== End Of Log ============================