Windows 7 - Hohe CPU-Auslastung

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014 01
Ran by Schenni (administrator) on MONSTA on 14-05-2014 14:14:53
Running from C:\Users\Schenni\Desktop
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(SANDBOXIE L.T.D) C:\Program Files\Sandboxie\SbieSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(CrossLoop) C:\Users\Schenni\AppData\Local\CrossLoop\CrossLoopService.exe
(ESET) C:\Program Files (x86)\System\ESET NOD32 Antivirus\x86\ekrn.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
() C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\REALTEK\RtkDashClientInstaller\RtkDashClient.exe
(ESET) C:\Program Files (x86)\System\ESET NOD32 Antivirus\egui.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(GP Software) C:\Program Files (x86)\System\Directory Opus\dopusrt.exe
(SANDBOXIE L.T.D) C:\Program Files\Sandboxie\SbieCtrl.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
(Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dropbox, Inc.) C:\Users\Schenni\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\HSSCP.exe
(GP Software) C:\Program Files (x86)\System\Directory Opus\dopus.exe
(Mozilla Corporation) C:\Program Files (x86)\Kommunikation\Mozilla Firefox\firefox.exe
(Valve Corporation) D:\Games\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() D:\Games\Steam\SteamApps\common\basement\The Basement Collection.exe
(Valve Corporation) D:\Games\Steam\GameOverlayUI.exe
(Arrowhead Game Studios AB) D:\Games\Steam\SteamApps\common\Magicka\Magicka.exe
(Mozilla Corporation) C:\Program Files (x86)\Kommunikation\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Mozilla Corporation) C:\Program Files (x86)\Kommunikation\Mozilla Firefox\plugin-container.exe
(Google) C:\Users\Schenni\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
(Valve Corporation) D:\Games\Steam\GameOverlayUI.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] => C:\Program Files (x86)\System\ESET NOD32 Antivirus\egui.exe [2918656 2011-01-12] (ESET)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [Cm108Sound] => C:\Windows\Syswow64\cm108.dll [8757248 2013-01-16] (C-Media Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files\Winamp\winampa.exe [74752 2011-07-11] (Nullsoft, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-12] (Geek Software GmbH)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1774639611-2742179398-1186998182-1000\...\Run: [Directory Opus Desktop Dblclk] => C:\Program Files (x86)\System\Directory Opus\dopusrt.exe [347104 2011-07-08] (GP Software)
HKU\S-1-5-21-1774639611-2742179398-1186998182-1000\...\Run: [Google Update] => C:\Users\Schenni\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-11-13] (Google Inc.)
HKU\S-1-5-21-1774639611-2742179398-1186998182-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [652048 2011-11-23] (SANDBOXIE L.T.D)
HKU\S-1-5-21-1774639611-2742179398-1186998182-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-1774639611-2742179398-1186998182-1000\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1710664 2011-04-19] (Elgato Systems)
HKU\S-1-5-21-1774639611-2742179398-1186998182-1000\...\MountPoints2: {abf30971-4c0a-11e3-9ac8-5404a6a46c06} - J:\setup.exe
Startup: C:\Users\Schenni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Schenni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Schenni\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Schenni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

ProxyServer: http=127.0.0.1:8555;https=127.0.0.1:8555
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3FA5DEF08DDECC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={78FF53EB-68D8-4F6F-95D4-E901DE743F35}&mid=ee307c2a80df47d0b4651983daccd809-0a38809510f496311343869f2d3627a876bc4bee&lang=de&ds=gm011&pr=sa&d=2012-04-25 12:53:22&v=11.0.0.9&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={78FF53EB-68D8-4F6F-95D4-E901DE743F35}&mid=ee307c2a80df47d0b4651983daccd809-0a38809510f496311343869f2d3627a876bc4bee&lang=de&ds=gm011&pr=sa&d=2012-04-25 12:53:22&v=11.0.0.9&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {c99fdc39-a1ae-4b24-8d71-e5274f8d7c54} URL = hxxp://search.hotspotshield.com/g/results.php?c=s&q={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO: No Name - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} -  No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: Directory Opus Shell Execute Hook - {3CF9ECE0-1A9F-11D2-8C73-00C06C2005DE} - C:\Program Files (x86)\System\Directory Opus\dopuslib.dll [1354216 2011-07-08] (GP Software)
ShellExecuteHooks-x32: Directory Opus Shell Execute Hook - {EE761688-C137-4b04-8FAB-3C9CDF0886F0} - C:\Program Files (x86)\System\Directory Opus\dopuslib32.dll [357312 2011-07-08] (GP Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Schenni\AppData\Roaming\Mozilla\Firefox\Profiles\1f52wdlu.default
FF DefaultSearchEngine: YouTube-Videosuche
FF SelectedSearchEngine: YouTube-Videosuche
FF Homepage: https://startpage.com/
FF Keyword.URL: hxxp://isearch.avg.com/search?cid=%7B7fec2013-f670-4755-9977-6fbf3d0f19e3%7D&mid=ee307c2a80df47d0b4651983daccd809-0a38809510f496311343869f2d3627a876bc4bee&ds=gm011&v=11.0.0.9&lang=de&pr=sa&d=2012-04-25%2012%3A53%3A22&sap=ku&q=
FF NetworkProxy: "http", "127.0.0.1"
FF NetworkProxy: "http_port", 8555
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=1.1.11 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Schenni\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Schenni\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Schenni\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Schenni\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Schenni\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\Schenni\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Schenni\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\Schenni\AppData\Roaming\Mozilla\Firefox\Profiles\1f52wdlu.default\searchplugins\startpage-ssl.xml
FF SearchPlugin: C:\Users\Schenni\AppData\Roaming\Mozilla\Firefox\Profiles\1f52wdlu.default\searchplugins\youtube-videosuche.xml
FF Extension: Garmin Communicator - C:\Users\Schenni\AppData\Roaming\Mozilla\Firefox\Profiles\1f52wdlu.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-23]
FF Extension: Free YouTube Download (Free Studio) Menu - C:\Users\Schenni\AppData\Roaming\Mozilla\Firefox\Profiles\1f52wdlu.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2014-04-09]
FF Extension: FloatNotes - C:\Users\Schenni\AppData\Roaming\Mozilla\Firefox\Profiles\1f52wdlu.default\Extensions\floatnotes@felix-kling.de.xpi [2013-04-26]
FF Extension: Tab Group Switcher - C:\Users\Schenni\AppData\Roaming\Mozilla\Firefox\Profiles\1f52wdlu.default\Extensions\tabgroupswitcher@addonlab.com.xpi [2013-04-26]
FF Extension: Adblock Plus - C:\Users\Schenni\AppData\Roaming\Mozilla\Firefox\Profiles\1f52wdlu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-01]
FF Extension: Tab Mix Plus - C:\Users\Schenni\AppData\Roaming\Mozilla\Firefox\Profiles\1f52wdlu.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2011-07-26]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files (x86)\System\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files (x86)\System\ESET NOD32 Antivirus\Mozilla Thunderbird [2011-07-26]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Kommunikation\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR Extension: (Google Wallet) - C:\Users\Schenni\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-17]

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-08] (Adobe Systems)
R2 CrossLoopService; C:\Users\Schenni\AppData\Local\CrossLoop\CrossLoopService.exe [569072 2012-01-06] (CrossLoop)
S3 EhttpSrv; C:\Program Files (x86)\System\ESET NOD32 Antivirus\EHttpSrv.exe [42360 2011-01-12] (ESET)
R2 ekrn; C:\Program Files (x86)\System\ESET NOD32 Antivirus\x86\ekrn.exe [810144 2011-01-12] (ESET)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [1013032 2014-05-09] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [78512 2014-05-07] ()
R2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [559912 2014-05-09] ()
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [94992 2011-11-23] (SANDBOXIE L.T.D)
S3 tvnserver; C:\Users\Schenni\AppData\Local\CrossLoop\tvnserver.exe [814080 2010-07-21] (GlavSoft LLC.)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-07-26] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-22] (Disc Soft Ltd)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [170640 2010-12-21] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [141264 2010-12-21] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [125296 2010-12-21] (ESET)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] ()
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14216 2011-07-29] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] ()
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [8456 2011-07-29] ()
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44744 2014-05-07] (AnchorFree Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-07-26] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [158336 2011-11-23] (SANDBOXIE L.T.D)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-03-19] (Anchorfree Inc.)
S3 TBPanel; No ImagePath
R3 ALSysIO; \??\C:\Users\Schenni\AppData\Local\Temp\ALSysIO64.sys [X]
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S3 RTL85n64; system32\DRIVERS\RTL85n64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-14 14:14 - 2014-05-14 14:15 - 00019180 _____ () C:\Users\Schenni\Desktop\FRST.txt
2014-05-14 14:14 - 2014-05-14 14:14 - 00000000 ____D () C:\FRST
2014-05-14 12:07 - 2014-05-14 12:07 - 00012920 _____ () C:\Users\Schenni\.recently-used.xbel
2014-05-14 11:28 - 2014-05-14 11:28 - 02066944 _____ (Farbar) C:\Users\Schenni\Desktop\FRST64.exe
2014-05-14 11:00 - 2014-05-14 11:13 - 00000224 _____ () C:\Windows\setupact.log
2014-05-14 11:00 - 2014-05-14 11:00 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-14 10:15 - 2014-05-14 10:15 - 00016820 _____ () C:\Windows\system32\cc_20140514_101522.reg
2014-05-14 10:15 - 2014-05-14 10:15 - 00000288 _____ () C:\Windows\system32\cc_20140514_101537.reg
2014-05-14 10:14 - 2014-05-14 10:14 - 00459140 _____ () C:\Windows\system32\cc_20140514_101452.reg
2014-05-14 08:33 - 2014-05-14 08:33 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-14 08:33 - 2014-05-14 08:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-14 08:33 - 2014-05-14 08:33 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-14 08:33 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-14 08:33 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-14 08:33 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-14 01:53 - 2014-05-14 10:25 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0
2014-05-13 23:32 - 2014-05-13 23:32 - 00000032 _____ () C:\Users\Schenni\Desktop\kav_rescue_10.md5.txt
2014-05-13 23:28 - 2014-05-14 08:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-13 23:28 - 2014-05-13 23:35 - 400381952 _____ () C:\Users\Schenni\Desktop\kav_rescue_10.iso
2014-05-13 21:36 - 2014-05-07 04:56 - 00044744 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys
2014-05-13 20:01 - 2014-05-13 20:01 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\DropboxMaster
2014-05-13 17:15 - 2014-05-14 10:20 - 00001141 _____ () C:\Users\Schenni\Desktop\CoreTemp.ini
2014-05-13 17:15 - 2014-05-13 17:15 - 00000011 _____ () C:\Users\Schenni\Desktop\Plugins.ini
2014-05-07 17:11 - 2014-05-07 17:11 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-07 11:16 - 2014-05-07 11:16 - 00000000 ____D () C:\Users\Hutze Butze\AppData\Local\Google
2014-05-07 11:07 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-07 11:07 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-03 03:01 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-03 03:01 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-03 03:01 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-03 03:01 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-30 00:20 - 2014-04-30 09:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-28 14:36 - 2014-04-28 14:37 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-24 08:56 - 2014-04-24 08:56 - 00000000 __SHD () C:\Users\Schenni\AppData\Local\EmieUserList
2014-04-24 08:56 - 2014-04-24 08:56 - 00000000 __SHD () C:\Users\Schenni\AppData\Local\EmieSiteList
2014-04-21 13:31 - 2014-04-21 13:31 - 00028139 _____ () C:\Users\Schenni\Desktop\Musik zum Streicheln.odt
2014-04-18 03:01 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-18 03:01 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-18 03:01 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-18 03:01 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-18 03:01 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-18 03:01 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-18 03:01 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-18 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-18 03:01 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-18 03:01 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-18 03:01 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-18 03:01 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-18 03:01 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-18 03:01 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-18 03:01 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-18 03:01 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-18 03:01 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-18 03:01 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-18 03:01 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-18 03:01 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-18 03:01 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-18 03:01 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-18 03:01 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-18 03:01 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-18 03:01 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-18 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-18 03:01 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-18 03:01 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-18 03:01 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-18 03:01 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-18 03:01 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-18 03:01 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-18 03:01 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-18 03:01 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-18 03:01 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-18 03:01 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-18 03:01 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-18 03:01 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-18 03:01 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-18 03:01 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-18 03:01 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-18 03:01 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-18 03:01 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-18 03:01 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-16 23:58 - 2014-04-16 23:58 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\Sega
2014-04-15 03:09 - 2014-04-15 03:09 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\STVR

==================== One Month Modified Files and Folders =======

2014-05-14 14:15 - 2014-05-14 14:14 - 00019180 _____ () C:\Users\Schenni\Desktop\FRST.txt
2014-05-14 14:14 - 2014-05-14 14:14 - 00000000 ____D () C:\FRST
2014-05-14 13:55 - 2013-03-29 19:43 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-14 13:55 - 2011-11-13 02:49 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1774639611-2742179398-1186998182-1000UA.job
2014-05-14 12:07 - 2014-05-14 12:07 - 00012920 _____ () C:\Users\Schenni\.recently-used.xbel
2014-05-14 12:07 - 2011-12-01 21:54 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\gtk-2.0
2014-05-14 12:07 - 2011-12-01 21:43 - 00000000 ____D () C:\Users\Schenni\.gimp-2.6
2014-05-14 12:07 - 2011-07-26 10:48 - 00000000 ____D () C:\Users\Schenni
2014-05-14 11:55 - 2013-03-29 19:43 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-14 11:28 - 2014-05-14 11:28 - 02066944 _____ (Farbar) C:\Users\Schenni\Desktop\FRST64.exe
2014-05-14 11:13 - 2014-05-14 11:00 - 00000224 _____ () C:\Windows\setupact.log
2014-05-14 11:00 - 2014-05-14 11:00 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-14 10:25 - 2014-05-14 01:53 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0
2014-05-14 10:20 - 2014-05-13 17:15 - 00001141 _____ () C:\Users\Schenni\Desktop\CoreTemp.ini
2014-05-14 10:16 - 2011-10-18 12:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player
2014-05-14 10:16 - 2011-10-18 12:08 - 00000000 ____D () C:\Program Files (x86)\GRETECH
2014-05-14 10:15 - 2014-05-14 10:15 - 00016820 _____ () C:\Windows\system32\cc_20140514_101522.reg
2014-05-14 10:15 - 2014-05-14 10:15 - 00000288 _____ () C:\Windows\system32\cc_20140514_101537.reg
2014-05-14 10:14 - 2014-05-14 10:14 - 00459140 _____ () C:\Windows\system32\cc_20140514_101452.reg
2014-05-14 10:14 - 2012-02-04 18:24 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\Winamp
2014-05-14 08:57 - 2012-01-29 16:03 - 00001846 _____ () C:\Windows\Sandboxie.ini
2014-05-14 08:37 - 2009-07-14 06:45 - 00021472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-14 08:37 - 2009-07-14 06:45 - 00021472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-14 08:34 - 2014-05-13 23:28 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 08:33 - 2014-05-14 08:33 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-14 08:33 - 2014-05-14 08:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-14 08:33 - 2014-05-14 08:33 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-14 08:31 - 2012-10-25 23:20 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\Dropbox
2014-05-14 08:31 - 2011-07-26 10:42 - 01250819 ____N () C:\Windows\WindowsUpdate.log
2014-05-14 08:26 - 2013-09-21 20:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-14 08:26 - 2012-01-14 15:54 - 00000308 _____ () C:\Windows\Tasks\RtlDashSrvStart.job
2014-05-14 08:26 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-13 23:35 - 2014-05-13 23:28 - 400381952 _____ () C:\Users\Schenni\Desktop\kav_rescue_10.iso
2014-05-13 23:32 - 2014-05-13 23:32 - 00000032 _____ () C:\Users\Schenni\Desktop\kav_rescue_10.md5.txt
2014-05-13 23:32 - 2011-09-01 23:15 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\Skype
2014-05-13 23:28 - 2012-01-29 15:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-13 23:02 - 2011-11-13 02:49 - 00001076 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1774639611-2742179398-1186998182-1000Core.job
2014-05-13 21:35 - 2013-08-03 12:37 - 00001055 _____ () C:\Users\Public\Desktop\Hotspot Shield.lnk
2014-05-13 21:35 - 2012-02-03 18:58 - 00000000 ____D () C:\Program Files (x86)\Hotspot Shield
2014-05-13 20:01 - 2014-05-13 20:01 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\DropboxMaster
2014-05-13 20:01 - 2013-08-25 11:11 - 00001029 _____ () C:\Users\Schenni\Desktop\Dropbox.lnk
2014-05-13 20:01 - 2012-10-25 23:20 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-13 20:01 - 2011-07-26 10:48 - 00000000 ___RD () C:\Users\Schenni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-13 20:00 - 2011-11-21 14:20 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-13 17:15 - 2014-05-13 17:15 - 00000011 _____ () C:\Users\Schenni\Desktop\Plugins.ini
2014-05-13 17:04 - 2012-04-28 18:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-13 12:31 - 2012-05-18 12:15 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-05-12 00:19 - 2012-07-23 19:13 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\TS3Client
2014-05-10 22:50 - 2011-11-13 02:49 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1774639611-2742179398-1186998182-1000UA
2014-05-10 22:50 - 2011-11-13 02:49 - 00003706 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1774639611-2742179398-1186998182-1000Core
2014-05-10 21:53 - 2011-07-26 13:49 - 00000000 ____D () C:\Program Files (x86)\Kommunikation
2014-05-07 17:11 - 2014-05-07 17:11 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-07 11:50 - 2013-03-29 19:43 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-07 11:50 - 2013-03-29 19:43 - 00003856 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-07 11:16 - 2014-05-07 11:16 - 00000000 ____D () C:\Users\Hutze Butze\AppData\Local\Google
2014-05-07 04:56 - 2014-05-13 21:36 - 00044744 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys
2014-05-03 09:51 - 2012-04-12 09:26 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-03 09:51 - 2012-03-26 12:38 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-30 21:17 - 2011-07-26 13:49 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\Mozilla
2014-04-30 09:06 - 2014-04-30 00:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-29 16:01 - 2014-05-03 03:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-03 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-03 03:01 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-03 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-28 14:37 - 2014-04-28 14:36 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-27 14:40 - 2013-09-21 20:39 - 00000000 ____D () C:\Users\UpdatusUser.Monsta.000
2014-04-26 11:19 - 2014-02-17 22:46 - 00002182 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-25 10:18 - 2011-04-12 09:43 - 00699432 _____ () C:\Windows\system32\perfh007.dat
2014-04-25 10:18 - 2011-04-12 09:43 - 00149572 _____ () C:\Windows\system32\perfc007.dat
2014-04-25 10:18 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-24 08:56 - 2014-04-24 08:56 - 00000000 __SHD () C:\Users\Schenni\AppData\Local\EmieUserList
2014-04-24 08:56 - 2014-04-24 08:56 - 00000000 __SHD () C:\Users\Schenni\AppData\Local\EmieSiteList
2014-04-21 13:31 - 2014-04-21 13:31 - 00028139 _____ () C:\Users\Schenni\Desktop\Musik zum Streicheln.odt
2014-04-18 03:57 - 2013-11-13 11:14 - 00000000 ____D () C:\Windows\rescache
2014-04-18 03:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-16 23:58 - 2014-04-16 23:58 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\Sega
2014-04-16 20:42 - 2011-11-21 14:21 - 00000000 ____D () C:\Users\Schenni\AppData\Local\Adobe
2014-04-15 03:09 - 2014-04-15 03:09 - 00000000 ____D () C:\Users\Schenni\AppData\Roaming\STVR
2014-04-14 04:24 - 2014-05-07 11:07 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-05-07 11:07 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Files to move or delete:
====================
C:\ProgramData\sdpsenv.dat


Some content of TEMP:
====================
C:\Users\Schenni\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpthawng.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2011-07-27 20:06] - [2011-02-26 08:14] - 2871808 ____A (Microsoft Corporation) 3B69712041F3D63605529BD66DC00C48

C:\Windows\SysWOW64\explorer.exe
[2011-07-27 20:06] - [2011-02-26 07:19] - 2616320 ____A (Microsoft Corporation) 0FB9C74046656D1579A64660AD67B746

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-09 21:32

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2014 01
Ran by Schenni at 2014-05-14 14:15:47
Running from C:\Users\Schenni\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: ESET NOD32 Antivirus 4.2 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET NOD32 Antivirus 4.2 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

50 FREE MP3s +1 Free Audiobook! (HKLM-x32\...\eMusic Promotion) (Version: 1.0.0.1 - eMusic.com Inc)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.9.0.1210 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.9.0.1210 - Adobe Systems Incorporated) Hidden
Adobe Bridge 1.0 (x32 Version: 1.0.1.1 - Adobe Systems) Hidden
Adobe Common File Installer (x32 Version: 1.00.002 - Adobe System Incorporated) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.3.183.11 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Help Center 2.0 (x32 Version: 2.0.0 - Adobe Systems) Hidden
Adobe Premiere Pro 2.0 (HKLM-x32\...\Adobe Premiere Pro 2.0) (Version: 2.000.000 - Adobe Systems, Inc.)
Adobe Premiere Pro 2.0 (x32 Version: 2.000.000 - Adobe Systems, Inc.) Hidden
Adobe Reader X (10.1.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Stock Photos 1.0 (x32 Version: 1.0.2 - Adobe Systems) Hidden
Age of Empires Online (HKLM-x32\...\GFWL_{4D530FA3-9B89-4186-98B7-F51000008100}) (Version: 1.0.0000.129 - Microsoft Studios)
Age of Empires Online (x32 Version: 1.0.0000.129 - Microsoft Studios) Hidden
ANNO 1404 (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 1.03.0000 - Ubisoft)
Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden
Any Video Converter 5 5.0.2 (HKLM-x32\...\Any Video Converter 5_is1) (Version:  - Any-Video-Converter.com)
Apple Application Support (HKLM-x32\...\{A83279FD-CA4B-4206-9535-90974DE76654}) (Version: 2.1.5 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
audiosamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
avstreamsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
avstreamtools_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
avstreamtools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
avstreamtools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Bastion (HKLM-x32\...\Steam App 107100) (Version:  - Supergiant Games)
Beatbuddy: Tale of the Guardians (HKLM-x32\...\Steam App 231040) (Version:  - Threaks)
biometricsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
biometrictools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
biometrictools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version:  - Irrational Games)
bluetoothsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
bluetoothtools_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
bluetoothtools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
bluetoothtools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
BrettspielWelt (HKLM-x32\...\BrettspielWelt) (Version: 1.0 - BrettspielWelt GmbH)
BrettspielWelt (HKLM-x32\...\BSW) (Version:  - )
buildsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
buildtools_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
buildtools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
buildtools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
bussamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
cancelsample (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.2.3442 - CDBurnerXP)
CDDRV_Installer (Version: 4.60 - Logitech) Hidden
CDex - Open Source Digital Audio CD Extractor (HKLM-x32\...\CDex) (Version: 1.70.4.2009 - Georgy Berdyshev)
chkinftool_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Cinergy Hybrid T USB XS, Cinergy A USB XS V4.06.1115.0 (HKLM-x32\...\Cinergy Hybrid T USB XS, Cinergy A USB XS) (Version: 4.06.1115.0 - )
CrossLoop 2.82 (HKLM-x32\...\CrossLoop_is1) (Version: 2.82 - CrossLoop, Inc.)
Crysis 2 Maximum Edition (HKLM-x32\...\Steam App 108800) (Version:  - Crytek Studios)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
debugfiles_win7 (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
dfx_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
dfx_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
dfx_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Die Gilde Gold Update v. 2.06  (HKLM-x32\...\Die Gilde Gold Update v. 2.06 ) (Version:  - )
Die Gilde Gold-Edition (HKLM-x32\...\Die Gilde Gold-Edition) (Version: 2.06 - JoWooD Productions Software AG)
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.42.130 - Electronic Arts)
displaysamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
DoomRL version 0.9.9.7 (HKLM-x32\...\{E78C63C9-9849-45FA-8315-2AE38A293E2E}_is1) (Version: 0.9.9.7 - ChaosForge)
Dropbox (HKCU\...\Dropbox) (Version: 2.6.33 - Dropbox, Inc.)
drvtools_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
drvtools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
drvtools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
DSF-KitSetup (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
dsfsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
EASEUS Partition Master 9.1.0 Home Edition (HKLM-x32\...\EASEUS Partition Master Home Edition_is1) (Version:  - EASEUS)
EasyBoost (HKLM-x32\...\InstallShield_{41910260-4532-4734-8181-3E8AFDBB05D7}) (Version: 1.0.7.1 - GIGABYTE)
EasyBoost (x32 Version: 1.0.7.1 - GIGABYTE) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.2.20140326 - Landesfinanzdirektion Thüringen)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET NOD32 Antivirus (HKLM\...\{D2DDF40C-552E-4C3D-AE5D-873044B53F7B}) (Version: 4.2.71.2 - ESET, spol. s r.o.)
eventsample (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
evntdrvsample (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Express Burn (HKLM-x32\...\ExpressBurn) (Version: 4.68 - NCH Software)
Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Family Farm (HKCU\...\Family Farm) (Version: 1.0 - Hammerware, s.r.o.)
fireflysample (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free YouTube to MP3 Converter version 3.12.12.827 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.12.827 - DVDVideoSoft Ltd.)
FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version:  - Subset Games)
GeForce Experience NvStream Client Components (Version: 0.1.87 - NVIDIA Corporation) Hidden
generalsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
generaltools_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
generaltools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
generaltools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
GIGABYTE VGA @BIOS (HKLM-x32\...\{AA12545D-5EB8-4078-AFD9-8E8DC0AE3A76}) (Version: 1.1 - GIGABYTE)
GIMP 2.6.8 (HKLM\...\WinGimp-2.0_is1) (Version:  - )
Goalscape (HKLM-x32\...\com.goalscape.app.GoalscapeDesktop.7AC31F0C6B613204057EF6C630FDA9AC3AF1DB7F.1) (Version: 2.7.2 - Goalscape Software GmbH)
Goalscape (x32 Version: 2.7.2 - Goalscape Software GmbH) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM-x32\...\{8E29C1CE-346A-3F59-AE22-8C5B7F230498}) (Version: 5.3.1.18536 - Google)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
GPSoftware Directory Opus (HKLM-x32\...\{5D4F167D-CCC8-413E-A6EE-F2FABBBBF50D}) (Version: 10.0.1.2 - GPSoftware)
Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto: Episodes from Liberty City (HKLM-x32\...\Steam App 12220) (Version:  - Rockstar North / Toronto)
Hammerwatch (HKLM-x32\...\Steam App 239070) (Version:  - )
headers (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
hid_inputsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
hidsampleinput (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
hidsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Hotspot Shield 3.40 (HKLM-x32\...\HotspotShield) (Version: 3.40 - AnchorFree)
ifssamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
imagingtools_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
imagingtools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
imagingtools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.6.0 - LIGHTNING UK!)
infsample_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
infsample_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
infsample_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
installhelp (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
ioctlsample (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
irsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022F0}) (Version: 6.0.220 - Oracle)
Java(TM) 6 Update 29 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216026FF}) (Version: 6.0.290 - Oracle)
KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden
L.A. Noire (HKLM-x32\...\Steam App 110800) (Version:  - Team Bondi)
LIMBO (HKCU\...\Limbo) (Version:  - )
Logitech SetPoint 6.32 (HKLM\...\sp6) (Version: 6.32.20 - Logitech)
Lone Survivor: The Director's Cut (HKLM-x32\...\Steam App 209830) (Version:  - Jasper Byrne)
Magicka (HKLM-x32\...\Steam App 42910) (Version:  - Arrowhead Game Studios)
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Document Explorer 2008 (HKLM-x32\...\Microsoft Document Explorer 2008) (Version:  - Microsoft Corporation)
Microsoft Document Explorer 2008 (x32 Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Windows Driver Kit 7.1.0.7600 (HKLM-x32\...\KitSetup Registration {B4285279-1846-49B4-B8FD-B9EAF0FF17DA}:{68656B6B-555E-5459-5E5D-6363635E5F61}) (Version: 7.1.0.7600 - Microsoft Corporation)
Microsoft Windows Driver Kit Documentation 7600.091201 (HKLM-x32\...\{7DD52F48-C19E-4FD8-8B25-429F96321003}) (Version: 6.0.7600.0 - Microsoft)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Miranda Fusion 3.2.6.0 (HKLM-x32\...\MirandaFusion) (Version: 3.2.6.0 - Miranda Fusion Team)
modemtools (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
MovieSaver 3.0 (HKLM-x32\...\{F30787F6-EA4F-4BC8-0001-398BDCC33E1E}) (Version: 3.0.11.0615 - Engelmann Media GmbH)
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mumble 1.2.4 (HKLM-x32\...\{AF348C2E-7596-481B-92E0-B211836AB949}) (Version: 1.2.4 - Thorvald Natvig)
networklibraries_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
networklibraries_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
networklibraries_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
networksamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.44.13 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 314.22 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.6.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.6.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.902 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1422 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 314.22 (Version: 314.22 - NVIDIA Corporation) Hidden
NVIDIA Update 8.3.14 (Version: 8.3.14 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 8.3.14 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.5 - NVIDIA Corporation)
oacr_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
offreg_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
offreg_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
offreg_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Opera 12.16 (HKLM-x32\...\Opera 12.16.1860) (Version: 12.16.1860 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.3.6.4643 - Electronic Arts, Inc.)
pcidrvsample (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
PDF24 Creator 6.2.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.3 - Frank Heindörfer, Philip Chinery)
pdfsam (HKLM-x32\...\pdfsam) (Version: 2.2.0 - )
pfd_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
pfd_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
pfd_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Pflanzen gegen Zombies (HKLM-x32\...\Pflanzen gegen Zombies) (Version:  - PopCap Games)
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
pnpportssample (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
pnptools_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
pnptools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
pnptools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
portiosample (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
powermanagement_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
powermanagement_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
powermanagement_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
printsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
printtools_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
printtools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
printtools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Prism Video File Converter (HKLM-x32\...\Prism) (Version: 2.01 - NCH Software)
Puzzle Agent (HKLM-x32\...\Steam App 31270) (Version:  - Telltale Games)
QuickTime (HKLM-x32\...\{7BE15435-2D3E-4B58-867F-9C75BED0208C}) (Version: 7.71.80.42 - Apple Inc.)
readme (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.46.610.2011 - Realtek)
Risk of Rain (HKLM-x32\...\Steam App 248820) (Version:  - )
RollerCoaster Tycoon 2 (HKLM-x32\...\{72DF62BD-FF36-424E-AA5F-D89BAFF2C249}) (Version:  - )
RtkDashClientInstaller (HKLM-x32\...\{91EA9C6F-1666-4426-9C80-85019A7A0D62}) (Version: 1.0.9 - Realtek)
Saal Design Software (HKLM-x32\...\SaalDesignSoftware) (Version: 3.2.27 - SSW Software GmbH)
Saal Design Software (x32 Version: 3.2.27 - SSW Software GmbH) Hidden
Sam & Max 301: The Penal Zone (HKLM-x32\...\Steam App 31220) (Version:  - Telltale Games)
Sandboxie 3.62 (64-bit) (HKLM\...\Sandboxie) (Version: 3.62 - SANDBOXIE L.T.D)
sdv (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Secure Download Manager (HKLM-x32\...\{C58626D6-7EBD-460D-8B6C-75B3C3464879}) (Version: 3.1.60 - Kivuto Solutions Inc.)
sensorsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
setupsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
setuptools_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
setuptools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
setuptools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
SHIELD Streaming (Version: 1.05.28 - NVIDIA Corporation) Hidden
sideshowsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
smartcardsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Snapshot (HKLM-x32\...\Steam App 204220) (Version:  - Retro Affect)
Starbound (HKLM-x32\...\Steam App 211820) (Version:  - )
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
StarCraft II Beta (HKLM-x32\...\StarCraft II Beta) (Version: 2.0.0.23925 - Blizzard Entertainment)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
storagesamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
streammediasamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
swtuner (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.22.0 - )
The Basement Collection (HKLM-x32\...\Steam App 214790) (Version:  - Edmund McMillen, Tyler Glaiel)
The Elder Scrolls V Skyrim - High Resolution Texture Pack (HKLM-x32\...\The Elder Scrolls V Skyrim - High Resolution Texture Pack_is1) (Version:  - )
The Settlers 7 - Paths to a Kingdom (HKLM-x32\...\{63860309-DA8A-4BAE-9EAE-CE1D6D79340C}) (Version: 1.12.1396 - Ubisoft)
The Typing of The Dead: Overkill (HKLM-x32\...\Steam App 246580) (Version:  - Modern Dream)
toastermetadatapackagesample (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
toastersample (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
TOG_BuildV0_63h (HKLM\...\UDK-d007d1c3-ebb8-4dc5-865c-3bf7daf0f0b9) (Version:  - Epic Games, Inc.)
toolindex (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
tracingtool_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
tracingtool_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
tracingtool_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
umdfsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Unreal Development Kit: 2012-07 (HKLM\...\UDK-fca4b2db-58c6-4422-9eeb-4aba8b1f56fc) (Version:  - Epic Games, Inc.)
USB PnP Sound Device (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006300}) (Version:   -  )
usbsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.14 - NCH Software)
vistalibs_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
vistalibs_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
vistalibs_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)
Vtune 7.21 (HKLM-x32\...\MySSID_is1) (Version:  - )
Wallace & Gromit Ep 1: Fright of the Bumblebees (HKLM-x32\...\Steam App 31100) (Version:  - Telltale Games)
wcoinstallers (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wdftools_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wdftools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wdftools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.621  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
WinRAR 4.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
wmisamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wnetlibs_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wnetlibs_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wnetlibs_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wpdsamples (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wpdtools_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wpdtools_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wpdtools_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wsdtool_ia64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wsdtool_x64fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wsdtool_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
wxplibs_x86fre (x32 Version: 1.1.6001.0 - Microsoft Corporation) Hidden
XSplit (HKLM-x32\...\{D68006E1-F774-4504-9ECF-03B67793C475}) (Version: 1.1.1210.3101 - SplitMediaLabs)
Yahoo! Detect (HKLM-x32\...\YTdetect) (Version:  - )

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {252EA8AC-3DDB-4C23-BCCE-D113705626F0} - System32\Tasks\{756A9D73-20C0-498F-B83B-80B114955DE3} => Firefox.exe hxxp://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsProgressBar
Task: {359651CE-E653-484C-9974-09032EB96CE0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-29] (Google Inc.)
Task: {614D6979-B25F-4F40-A275-AF69F0131F19} - System32\Tasks\{3F1AA6DB-FC97-4F75-9E52-94CFBD143524} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.114/de/abandoninstall?source=lightinstaller&page=tsProgressBar
Task: {71B4F5A9-4C30-455D-9F96-A64CDF89AD6A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1774639611-2742179398-1186998182-1000UA => C:\Users\Schenni\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-13] (Google Inc.)
Task: {7314C982-CBEB-4407-BC89-762C2DA6756C} - System32\Tasks\HotSwap! Applet => C:\Users\Schenni\Desktop\HotSwap!.EXE
Task: {7D0E3F3C-7486-4AF4-9E7B-2D86EE167B18} - System32\Tasks\Core Temp Autostart Schenni => C:\Users\Schenni\AppData\Local\Temp\Rar$EX60.904\Core Temp.exe <==== ATTENTION
Task: {9FF7CC2C-5D58-4141-AF8F-71D23F0F4103} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {A11B60CA-C9F8-4729-B24B-DF94DB8EF63A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-29] (Google Inc.)
Task: {ADCEC000-1160-482C-A572-8B0FF98292CC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {AF322B11-EFB8-4BC3-8A63-F60449222809} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1774639611-2742179398-1186998182-1000Core => C:\Users\Schenni\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-13] (Google Inc.)
Task: {BBE2F6FB-9CF2-4D70-B9F3-144197D0E29A} - System32\Tasks\RunAsStdUser Task => C:\Program Files (x86)\System\Directory Opus\dopus.exe [2011-07-08] (GP Software) <==== ATTENTION
Task: {E312D6A5-70ED-42C8-935D-CEEEA7946902} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {FB7026D7-B6CA-498A-9521-0BDA4841C60F} - System32\Tasks\{55D67FDB-0ECC-4CC5-B48E-24664644AA7D} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-02-10] (Skype Technologies S.A.)
Task: {FE621B1A-B73F-4B6B-85EF-53C3E700E04D} - System32\Tasks\RtlDashSrvStart => C:\Program Files (x86)\Realtek\RtkDashClientInstaller\RtkDashClient.exe [2011-09-22] (Realtek Semiconductor Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1774639611-2742179398-1186998182-1000Core.job => C:\Users\Schenni\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1774639611-2742179398-1186998182-1000UA.job => C:\Users\Schenni\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RtlDashSrvStart.job => C:\Program Files (x86)\Realtek\RtkDashClientInstaller\RtkDashClient.exe

==================== Loaded Modules (whitelisted) =============

2013-09-24 16:17 - 2013-03-15 06:16 - 00086304 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-10-21 14:02 - 2005-03-12 01:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2014-05-09 20:23 - 2014-05-09 20:23 - 00559912 _____ () C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
2011-07-26 11:37 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files (x86)\System\WinRAR\rarext.dll
2011-10-07 11:39 - 2011-10-07 11:39 - 01304856 _____ () C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll
2014-05-13 12:43 - 2014-05-13 12:43 - 00142336 _____ () D:\Games\Steam\steamapps\common\basement\The Basement Collection.exe
2014-05-09 20:21 - 2014-05-09 20:21 - 00965416 _____ () C:\Program Files (x86)\Hotspot Shield\bin\af_proxy.dll
2014-05-09 20:28 - 2014-05-09 20:28 - 00229672 _____ () C:\Program Files (x86)\Hotspot Shield\bin\cmwhydraplugin.dll
2014-05-09 20:22 - 2014-05-09 20:22 - 00517928 _____ () C:\Program Files (x86)\Hotspot Shield\bin\HssRep.dll
2014-05-06 19:26 - 2014-05-06 19:26 - 00280143 _____ () C:\Program Files (x86)\Hotspot Shield\bin\libidn-11.dll
2009-03-27 22:02 - 2009-03-27 22:02 - 01554920 _____ () C:\Program Files (x86)\Hotspot Shield\bin\libeay32.dll
2009-03-27 22:02 - 2009-03-27 22:02 - 00332254 _____ () C:\Program Files (x86)\Hotspot Shield\bin\libssl32.dll
2014-05-14 08:28 - 2014-05-14 08:28 - 00041984 _____ () c:\users\schenni\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpthawng.dll
2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Schenni\AppData\Roaming\Dropbox\bin\libcef.dll
2011-01-17 17:19 - 2011-11-15 02:54 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2014-05-10 18:36 - 2014-05-10 18:36 - 03839088 _____ () C:\Program Files (x86)\Kommunikation\Mozilla Firefox\mozjs.dll
2014-01-26 18:50 - 2014-04-22 00:55 - 00340480 _____ () D:\Games\Steam\libavresample-1.dll
2014-04-24 13:25 - 2014-04-22 00:55 - 00471552 _____ () D:\Games\Steam\libavutil-53.dll
2013-07-01 08:20 - 2014-04-01 00:09 - 00754688 _____ () D:\Games\Steam\SDL2.dll
2011-07-28 00:07 - 2014-04-24 00:01 - 01092288 _____ () D:\Games\Steam\bin\chromehtml.DLL
2011-07-28 00:07 - 2014-03-03 21:15 - 20626624 _____ () D:\Games\Steam\bin\libcef.dll
2012-05-18 23:07 - 2013-06-15 01:49 - 01100800 _____ () D:\Games\Steam\bin\avcodec-53.dll
2012-05-18 23:07 - 2013-06-15 01:49 - 00124416 _____ () D:\Games\Steam\bin\avutil-51.dll
2012-05-18 23:07 - 2013-06-15 01:49 - 00192000 _____ () D:\Games\Steam\bin\avformat-53.dll
2014-05-13 12:38 - 2014-05-13 12:38 - 00013312 _____ () D:\Games\Steam\steamapps\common\basement\META-INF\AIR\extensions\com.amanitadesign.steam.FRESteamWorks\META-INF\ANE\Windows-x86\FRESteamWorks.dll
2011-07-28 00:07 - 2014-04-24 00:01 - 00336064 _____ () D:\Games\Steam\steam.dll
2014-01-01 22:29 - 2014-01-01 22:29 - 00343040 _____ () D:\Games\Steam\steamapps\common\Magicka\SteamWrapper.dll
2009-05-28 01:22 - 2009-05-28 01:22 - 02258776 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\XNA\Framework\v3.1\XnaNative.dll
2014-01-01 22:29 - 2014-01-01 22:29 - 00115200 _____ () D:\Games\Steam\steamapps\common\Magicka\XNAnimation.dll
2014-01-01 22:29 - 2014-01-01 22:29 - 00173568 _____ () D:\Games\Steam\steamapps\common\Magicka\JigLibX.dll
2014-01-01 22:29 - 2014-01-01 22:29 - 00049664 _____ () D:\Games\Steam\steamapps\common\Magicka\XInputHelper.dll
2014-05-03 09:51 - 2014-05-03 09:51 - 16351920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\sdpsenv.dat:naughtypirates

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EADM => "D:\Games\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: Remote Control Editor => "C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

==================== Faulty Device Manager Devices =============

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Atheros AR5007G Wireless Network Adapter
Description: Atheros AR5007G Wireless Network Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Atheros Communications Inc.
Service: athr
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/14/2014 10:43:02 AM) (Source: Application Hang) (User: ) (EventID: 1002)
Description: Programm firefox.exe, Version 29.0.1.5239 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 15f8

Startzeit: 01cf6f4cdb6e4b7d

Endzeit: 108

Anwendungspfad: C:\Program Files (x86)\Kommunikation\Mozilla Firefox\firefox.exe

Berichts-ID: bb4ea8c6-db43-11e3-bead-5404a6a46c06

Error: (05/14/2014 08:28:30 AM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2014 07:58:22 PM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2014 05:06:30 PM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2014 08:21:03 AM) (Source: Customer Experience Improvement Program) (User: ) (EventID: 1008)
Description: 80004005

Error: (05/12/2014 07:39:30 PM) (Source: Application Hang) (User: ) (EventID: 1002)
Description: Programm Steam.exe, Version 2.19.72.18 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1688

Startzeit: 01cf6e08a3496b71

Endzeit: 8

Anwendungspfad: D:\Games\Steam\Steam.exe

Berichts-ID: 59d25aaf-d9fc-11e3-97a0-5404a6a46c06

Error: (05/12/2014 11:10:03 AM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Fehler beim Generieren des Aktivierungskontextes für "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/12/2014 11:09:44 AM) (Source: SideBySide) (User: ) (EventID: 75)
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (05/12/2014 10:46:54 AM) (Source: Customer Experience Improvement Program) (User: ) (EventID: 1008)
Description: 80004005

Error: (05/11/2014 03:37:26 PM) (Source: Customer Experience Improvement Program) (User: ) (EventID: 1008)
Description: 80004005


System errors:
=============
Error: (05/14/2014 08:30:46 AM) (Source: Service Control Manager) (User: ) (EventID: 7009)
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (05/14/2014 08:30:16 AM) (Source: Service Control Manager) (User: ) (EventID: 7009)
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (05/13/2014 05:10:07 PM) (Source: Service Control Manager) (User: ) (EventID: 7009)
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (05/13/2014 00:10:05 PM) (Source: volsnap) (User: ) (EventID: 36)
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (05/12/2014 06:16:18 PM) (Source: volsnap) (User: ) (EventID: 36)
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (05/11/2014 04:11:11 PM) (Source: volsnap) (User: ) (EventID: 36)
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (05/10/2014 08:21:16 PM) (Source: volsnap) (User: ) (EventID: 36)
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (05/10/2014 05:23:44 PM) (Source: volsnap) (User: ) (EventID: 36)
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (05/07/2014 02:53:17 PM) (Source: volsnap) (User: ) (EventID: 36)
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (05/07/2014 00:43:15 PM) (Source: volsnap) (User: ) (EventID: 36)
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.


Microsoft Office Sessions:
=========================
Error: (05/14/2014 10:43:02 AM) (Source: Application Hang) (User: ) (EventID: 1002)
Description: firefox.exe29.0.1.523915f801cf6f4cdb6e4b7d108C:\Program Files (x86)\Kommunikation\Mozilla Firefox\firefox.exebb4ea8c6-db43-11e3-bead-5404a6a46c06

Error: (05/14/2014 08:28:30 AM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2014 07:58:22 PM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2014 05:06:30 PM) (Source: WinMgmt) (User: ) (EventID: 10)
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2014 08:21:03 AM) (Source: Customer Experience Improvement Program) (User: ) (EventID: 1008)
Description: 80004005

Error: (05/12/2014 07:39:30 PM) (Source: Application Hang) (User: ) (EventID: 1002)
Description: Steam.exe2.19.72.18168801cf6e08a3496b718D:\Games\Steam\Steam.exe59d25aaf-d9fc-11e3-97a0-5404a6a46c06

Error: (05/12/2014 11:10:03 AM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"C:\Program Files (x86)\XSplit\XSplitBroadcasterSrc.exe

Error: (05/12/2014 11:09:44 AM) (Source: SideBySide) (User: ) (EventID: 75)
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (05/12/2014 10:46:54 AM) (Source: Customer Experience Improvement Program) (User: ) (EventID: 1008)
Description: 80004005

Error: (05/11/2014 03:37:26 PM) (Source: Customer Experience Improvement Program) (User: ) (EventID: 1008)
Description: 80004005


==================== Memory info =========================== 

Percentage of memory in use: 78%
Total physical RAM: 4077.25 MB
Available physical RAM: 881 MB
Total Pagefile: 8152.68 MB
Available Pagefile: 3086.75 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (WINDOWS) (Fixed) (Total:49.51 GB) (Free:2.47 GB) NTFS
Drive d: (DATEN) (Fixed) (Total:1326.93 GB) (Free:669.24 GB) NTFS
Drive e: (KRD10) (CDROM) (Total:0.37 GB) (Free:0 GB) CDFS
Drive f: () (Removable) (Total:3.68 GB) (Free:3.57 GB) FAT32
Drive j: (GSP1RMCNPRFRER_DE_DVD) (CDROM) (Total:2.06 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 1397 GB) (Disk ID: 3BD6BA4C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=50 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=-774240253952) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=20 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================