malwarebytes startet nicht mehr und andere komischen Probleme

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Administrator (administrator) on KILLERBOYPC on 17-05-2014 15:28:50
Running from C:\Users\Administrator\Desktop
Platform: Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(MalwareBytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\mbam-chameleon.pif
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(MalwareBytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\rundll32.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188552 2013-05-28] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3053808 2013-04-24] (Synaptics Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1179576 2014-02-05] (NVIDIA Corporation)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-05-22] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-21] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-07-24] (Hewlett-Packard Company)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [TelevisionFanatic EPM Support] => "C:\PROGRA~2\TELEVI~1\bar\1.bin\64medint.exe" T8EPMSUP.DLL,S
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Runonce: [C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\lmmfp] - cmd /C rd "C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\lmmfp" /s/q [X]
HKLM-x32\...\Runonce: [C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\equage] - cmd /C rd "C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\equage" /s/q [X]
HKLM-x32\...\Runonce: [C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\afklfty] - cmd /C rd "C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\afklfty" /s/q [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs: , C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation)
Startup: C:\Users\Toool66\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpywareBlaster.lnk
ShortcutTarget: SpywareBlaster.lnk -> C:\Program Files (x86)\SpywareBlaster\spywareblaster.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT13/4
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT13/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT13/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT13/4
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {995F4BA9-CC4A-41A0-B361-FA996141DF9F} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwugvkecS8vMTddoFZ1JOSS-uAGUfY-qCWBcsCA2IlsBaak5pAHw7hPcIlhbvkZDLeOdnUCLoumjpKkr4AGfdEV-1IbrUMQJpg8DeZht3IKhRzlMy6Npv4uqs2aGxXdq1COfKlmrFL3qj6ifKJc95-9DQdk,&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwugvkecS8vMTddoFZ1JOSS-uAGUfY-qCWBcsCA2IlsBaak5pAHw7hPcIlhbvkZDLeOdnUCLoumjpKkr4AGfdEV-1IbrUMQJpg8DeZht3IKhRzlMy6Npv4uqs2aGxXdq1COfKlmrFL3qj6ifKJc95-9DQdk,&q={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwugvkecS8vMTddoFZ1JOSS-uAGUfY-qCWBcsCA2IlsBaak5pAHw7hPcIlhbvkZDLeOdnUCLoumjpKkr4AGfdEV-1IbrUMQJpg8DeZht3IKhRzlMy6Npv4uqs2aGxXdq1COfKlmrFL3qj6ifKJc95-9DQdk,&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwugvkecS8vMTddoFZ1JOSS-uAGUfY-qCWBcsCA2IlsBaak5pAHw7hPcIlhbvkZDLeOdnUCLoumjpKkr4AGfdEV-1IbrUMQJpg8DeZht3IKhRzlMy6Npv4uqs2aGxXdq1COfKlmrFL3qj6ifKJc95-9DQdk,&q={searchTerms}
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-11-12]

Chrome: 
=======
CHR StartupUrls: "hxxp://www.google.de/"
CHR DefaultSearchKeyword: search.snapdo.com
CHR DefaultSearchProvider: Web
CHR DefaultSearchURL: hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwugvkecS8vMTddoFZ1JOSS-uAGUfY-qCWBcsCA2IlsBaak5pAHw7hPcIlhbvkZDLeOdnUCLoumjpKkr4AGfdEV-1IbrUMQJpg8DeZht3IKhRzlMy6Npv4uqs2aGxXdq1COfKlmrFL3qj6ifKJc95-9DQdk,&q={searchTerms}
CHR DefaultNewTabURL: 
CHR Extension: (Google Drive) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-07]
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-07]
CHR Extension: (Google-Suche) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-07]
CHR Extension: (Google Wallet) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-07]
CHR Extension: (Google Mail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-07]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-21] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-21] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-21] (Avira Operations GmbH & Co. KG)
R2 HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [1039160 2013-10-08] (Hewlett-Packard Development Company, L.P.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-08] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-08] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [245832 2013-05-17] (Realtek Semiconductor)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [994360 2011-10-14] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [399416 2011-10-14] (Secunia)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-10-25] (Microsoft Corporation)
S2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [X]

==================== Drivers (Whitelisted) ====================

R3 Apowersoft_AudioDevice; C:\Windows\system32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2013-07-22] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-18] (Avira Operations GmbH & Co. KG)
S3 HtcVCom32; C:\Windows\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
R3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [88280 2014-05-17] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99800 2013-05-08] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [408136 2013-05-09] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2715208 2013-05-28] (Realtek Semiconductor Corporation                           )
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29424 2013-04-24] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-04-24] (Synaptics Incorporated)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-17 15:27 - 2014-05-17 15:28 - 00019473 _____ () C:\Users\Administrator\Desktop\FRST.txt
2014-05-17 15:26 - 2014-05-17 15:27 - 02067456 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64 (1).exe
2014-05-17 15:25 - 2014-05-17 15:25 - 02067456 _____ (Farbar) C:\Users\Administrator\Desktop\FRST64.exe
2014-05-17 15:23 - 2014-05-17 15:23 - 00000488 _____ () C:\Users\Administrator\Desktop\defogger_disable.log
2014-05-17 15:22 - 2014-05-17 15:22 - 00050477 _____ () C:\Users\Administrator\Desktop\Defogger.exe
2014-05-17 12:01 - 2014-05-17 15:28 - 00000000 ____D () C:\FRST
2014-05-17 11:55 - 2014-05-17 11:55 - 00000000 _____ () C:\Users\Administrator\defogger_reenable
2014-05-17 11:27 - 2014-05-17 11:27 - 00000000 ____D () C:\Program Files (x86)\12345TMP
2014-05-12 23:52 - 2014-05-13 00:08 - 00000000 ____D () C:\Users\Administrator\Desktop\Deep House
2014-05-12 01:49 - 2014-05-12 01:49 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Diagram Designer
2014-05-12 01:49 - 2014-05-12 01:49 - 00000000 ____D () C:\Program Files (x86)\MeeSoft
2014-05-12 01:45 - 2014-05-12 01:45 - 00007859 _____ () C:\Users\Administrator\AppData\Local\recently-used.xbel
2014-05-10 20:22 - 2014-05-17 12:40 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Wide_Angle_Software
2014-05-10 20:22 - 2014-05-10 20:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Wide Angle Software
2014-05-03 23:18 - 2014-05-03 23:19 - 00000000 ____D () C:\Users\Administrator\Desktop\Halbschale
2014-05-03 22:26 - 2014-05-03 22:26 - 00000000 ____D () C:\Windows\system32\%LOCALAPPDATA%
2014-05-01 15:02 - 2014-05-01 15:03 - 00263884 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-05-01 14:37 - 2014-05-01 14:37 - 00000000 ____D () C:\Users\Administrator\Desktop\Dresden
2014-04-28 23:14 - 2014-04-28 23:14 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-04-27 13:45 - 2014-04-27 13:45 - 00000000 ____D () C:\Users\Administrator\Documents\Syncios
2014-04-25 18:09 - 2014-05-17 12:46 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-04-25 15:32 - 2014-05-17 11:21 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Samsung
2014-04-25 15:32 - 2014-05-17 11:21 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Samsung
2014-04-25 15:32 - 2014-04-25 15:32 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2014-04-25 15:32 - 2014-04-25 15:32 - 00000000 ____D () C:\Users\Administrator\Documents\samsung
2014-04-24 11:40 - 2014-04-24 11:47 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\HTC
2014-04-24 11:37 - 2014-04-24 11:40 - 00000000 ____D () C:\Users\Administrator\Documents\HTC
2014-04-24 11:35 - 2014-04-24 11:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Downloaded Installations
2014-04-23 17:35 - 2014-04-23 17:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys
2014-04-22 17:40 - 2014-04-22 17:47 - 00000000 ____D () C:\Users\Administrator\Documents\Apowersoft Free Screen Recorder
2014-04-22 17:39 - 2014-04-22 17:39 - 00001435 _____ () C:\Users\Public\Desktop\Apowersoft.lnk
2014-04-22 17:39 - 2014-04-22 17:39 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Apowersoft
2014-04-22 17:39 - 2014-04-22 17:39 - 00000000 ____D () C:\Program Files (x86)\Apowersoft
2014-04-22 17:39 - 2013-06-02 04:56 - 00031920 _____ (Wondershare) C:\Windows\system32\Drivers\Apowersoft_AudioDevice.sys
2014-04-22 17:39 - 2013-06-01 20:07 - 00443568 ____H (Bytescout) C:\Windows\SysWOW64\ApowersoftScreenCapturing.dll
2014-04-22 17:39 - 2013-06-01 20:07 - 00271536 ____H (Bytescout) C:\Windows\SysWOW64\ApowersoftScreenCapturingFilter.dll
2014-04-22 17:39 - 2013-06-01 20:07 - 00181424 ____H (Bytescout) C:\Windows\SysWOW64\ApowersoftVideoMixerFilter.dll
2014-04-22 16:25 - 2014-04-22 16:25 - 00003584 _____ () C:\Users\Administrator\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-04-20 14:20 - 2014-04-20 14:20 - 00004096 ____H () C:\Users\Administrator\AppData\Local\keyfile3.drm
2014-04-18 20:29 - 2014-04-22 16:27 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\vlc
2014-04-18 12:36 - 2014-04-18 12:36 - 00000889 _____ () C:\Users\Public\Desktop\GIMP 2.lnk

==================== One Month Modified Files and Folders =======

2014-05-17 15:28 - 2014-05-17 15:27 - 00019473 _____ () C:\Users\Administrator\Desktop\FRST.txt
2014-05-17 15:28 - 2014-05-17 12:01 - 00000000 ____D () C:\FRST
2014-05-17 15:27 - 2014-05-17 15:26 - 02067456 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64 (1).exe
2014-05-17 15:25 - 2014-05-17 15:25 - 02067456 _____ (Farbar) C:\Users\Administrator\Desktop\FRST64.exe
2014-05-17 15:23 - 2014-05-17 15:23 - 00000488 _____ () C:\Users\Administrator\Desktop\defogger_disable.log
2014-05-17 15:22 - 2014-05-17 15:22 - 00050477 _____ () C:\Users\Administrator\Desktop\Defogger.exe
2014-05-17 15:21 - 2013-11-19 02:58 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-17 15:17 - 2013-09-27 19:10 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1966542787-1984559558-3704198819-500
2014-05-17 15:15 - 2014-03-30 18:27 - 00000000 ____D () C:\Users\Administrator\AppData\Local\CrashDumps
2014-05-17 15:11 - 2013-11-09 15:04 - 01817123 _____ () C:\Windows\WindowsUpdate.log
2014-05-17 15:02 - 2013-11-09 20:18 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-17 15:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru
2014-05-17 14:48 - 2013-12-07 12:14 - 00000000 ____D () C:\Users\Administrator
2014-05-17 14:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-05-17 14:05 - 2013-11-19 02:58 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-17 14:02 - 2013-11-09 20:18 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-17 13:57 - 2013-11-09 20:18 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-17 13:57 - 2013-11-09 20:18 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-17 13:38 - 2014-04-15 20:28 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-17 13:03 - 2013-12-07 12:17 - 00000000 ____D () C:\Users\Administrator\Documents\Youcam
2014-05-17 13:03 - 2013-07-22 19:32 - 00815890 _____ () C:\Windows\system32\perfh007.dat
2014-05-17 13:03 - 2013-07-22 19:32 - 00184324 _____ () C:\Windows\system32\perfc007.dat
2014-05-17 13:03 - 2012-07-26 09:28 - 01952854 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-17 12:55 - 2014-03-16 19:19 - 00312864 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-17 12:55 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-17 12:53 - 2013-11-09 15:05 - 00000000 ____D () C:\Users\Toool66
2014-05-17 12:53 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ToastData
2014-05-17 12:53 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-17 12:53 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\WinStore
2014-05-17 12:53 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\SecureBootUpdates
2014-05-17 12:53 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-17 12:50 - 2014-03-31 22:15 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\streamripper
2014-05-17 12:50 - 2014-03-21 23:34 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mp3tag
2014-05-17 12:50 - 2014-03-19 23:59 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Winamp
2014-05-17 12:50 - 2013-12-07 12:15 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-17 12:50 - 2013-12-07 12:15 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-17 12:49 - 2014-04-06 13:42 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\BOM
2014-05-17 12:49 - 2014-04-05 21:38 - 00000000 ____D () C:\Users\Administrator\AppData\Local\gtk-2.0
2014-05-17 12:47 - 2014-03-21 23:33 - 00000000 ____D () C:\Program Files (x86)\Mp3tag
2014-05-17 12:47 - 2013-11-22 21:20 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-17 12:47 - 2013-11-22 21:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-17 12:47 - 2013-11-10 16:21 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-05-17 12:47 - 2013-11-09 22:56 - 00000000 ____D () C:\Program Files (x86)\PKR
2014-05-17 12:47 - 2013-07-22 11:10 - 00000000 ____D () C:\Program Files (x86)\Microsoft SkyDrive
2014-05-17 12:46 - 2014-04-25 18:09 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-05-17 12:46 - 2014-04-15 20:28 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-17 12:40 - 2014-05-10 20:22 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Wide_Angle_Software
2014-05-17 12:37 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\registration
2014-05-17 12:35 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-05-17 11:55 - 2014-05-17 11:55 - 00000000 _____ () C:\Users\Administrator\defogger_reenable
2014-05-17 11:27 - 2014-05-17 11:27 - 00000000 ____D () C:\Program Files (x86)\12345TMP
2014-05-17 11:21 - 2014-04-25 15:32 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Samsung
2014-05-17 11:21 - 2014-04-25 15:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Samsung
2014-05-16 22:44 - 2012-08-04 00:23 - 01137558 _____ () C:\Windows\PFRO.log
2014-05-13 00:08 - 2014-05-12 23:52 - 00000000 ____D () C:\Users\Administrator\Desktop\Deep House
2014-05-12 01:49 - 2014-05-12 01:49 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Diagram Designer
2014-05-12 01:49 - 2014-05-12 01:49 - 00000000 ____D () C:\Program Files (x86)\MeeSoft
2014-05-12 01:46 - 2014-04-05 21:36 - 00000000 ____D () C:\Users\Administrator\.gimp-2.8
2014-05-12 01:45 - 2014-05-12 01:45 - 00007859 _____ () C:\Users\Administrator\AppData\Local\recently-used.xbel
2014-05-10 20:35 - 2014-05-10 20:22 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Wide Angle Software
2014-05-05 18:55 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-04 12:06 - 2012-07-26 09:21 - 00074025 _____ () C:\Windows\setupact.log
2014-05-03 23:19 - 2014-05-03 23:18 - 00000000 ____D () C:\Users\Administrator\Desktop\Halbschale
2014-05-03 22:26 - 2014-05-03 22:26 - 00000000 ____D () C:\Windows\system32\%LOCALAPPDATA%
2014-05-02 10:51 - 2013-11-09 23:08 - 00000000 ____D () C:\Users\Toool66\Desktop\Sound div
2014-05-01 15:03 - 2014-05-01 15:02 - 00263884 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-05-01 14:37 - 2014-05-01 14:37 - 00000000 ____D () C:\Users\Administrator\Desktop\Dresden
2014-04-29 18:27 - 2014-03-17 23:21 - 00073112 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-28 23:14 - 2014-04-28 23:14 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-04-27 13:45 - 2014-04-27 13:45 - 00000000 ____D () C:\Users\Administrator\Documents\Syncios
2014-04-25 15:32 - 2014-04-25 15:32 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2014-04-25 15:32 - 2014-04-25 15:32 - 00000000 ____D () C:\Users\Administrator\Documents\samsung
2014-04-24 19:04 - 2014-04-15 20:43 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-24 11:47 - 2014-04-24 11:40 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\HTC
2014-04-24 11:40 - 2014-04-24 11:37 - 00000000 ____D () C:\Users\Administrator\Documents\HTC
2014-04-24 11:37 - 2014-03-21 23:11 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Apple Computer
2014-04-24 11:37 - 2013-12-07 12:16 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Apple Computer
2014-04-24 11:36 - 2013-09-27 17:19 - 00031028 _____ () C:\Windows\DPINST.LOG
2014-04-24 11:35 - 2014-04-24 11:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Downloaded Installations
2014-04-23 17:35 - 2014-04-23 17:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys
2014-04-22 17:47 - 2014-04-22 17:40 - 00000000 ____D () C:\Users\Administrator\Documents\Apowersoft Free Screen Recorder
2014-04-22 17:39 - 2014-04-22 17:39 - 00001435 _____ () C:\Users\Public\Desktop\Apowersoft.lnk
2014-04-22 17:39 - 2014-04-22 17:39 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Apowersoft
2014-04-22 17:39 - 2014-04-22 17:39 - 00000000 ____D () C:\Program Files (x86)\Apowersoft
2014-04-22 16:27 - 2014-04-18 20:29 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\vlc
2014-04-22 16:25 - 2014-04-22 16:25 - 00003584 _____ () C:\Users\Administrator\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-04-20 14:20 - 2014-04-20 14:20 - 00004096 ____H () C:\Users\Administrator\AppData\Local\keyfile3.drm
2014-04-18 13:16 - 2013-11-09 23:11 - 00000000 ____D () C:\Toool66
2014-04-18 12:36 - 2014-04-18 12:36 - 00000889 _____ () C:\Users\Public\Desktop\GIMP 2.lnk

Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-09 22:40

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by Administrator at 2014-05-17 15:29:13
Running from C:\Users\Administrator\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================


==================== Installed Programs ======================

Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
Apowersoft kostenloser Bildschirmrekorder V1.3.2 (HKLM-x32\...\{4EFA42DB-E4EC-4537-9DF3-5158D08A9785}_is1) (Version: 1.3.2 - Apowersoft)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4291 - CDBurnerXP)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.1.2922 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 5.0.1.2922 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free YouTube Download Manager (HKLM-x32\...\{48fb0fd3-d029-4533-a87e-8021976f2b42}) (Version: 1.0.0 - Freetec)
Free YouTube Download Manager (x32 Version: 1.0.0 - Freetec) Hidden
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM-x32\...\{07F6DC37-0857-4B68-A675-4E35989E85E3}) (Version: 6.0.15.1 - Hewlett-Packard Company)
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKCU\...\HPConnectedMusic) (Version: 1.1 (build 106) hp - Meridian Audio Ltd)
HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Deskjet 2540 series Basic Device Software (HKLM\...\{BD1EFE20-246B-451F-B900-F1214324DF5F}) (Version: 30.0.1093.41190 - Hewlett-Packard Co.)
HP Documentation (HKLM-x32\...\{61245005-66F1-4001-AEE8-2E2D36F65C28}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Postscript Converter (Version: 4.0.4100 - Hewlett-Packard) Hidden
HP Quick Start (HKLM-x32\...\{BB27C290-AB30-4D9E-A5D1-88745AAE42E9}) (Version: 1.0.4660.30220 - Hewlett-Packard)
HP Recovery Manager (x32 Version: 11.00 - Hewlett-Packard) Hidden
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.6838.4521 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{C88F84E5-AE23-44BD-922C-2ABEACACAF7A}) (Version: 7.2.23.56 - Hewlett-Packard Company)
HP System Event Utility (HKLM-x32\...\{C78E8F51-3EAD-4F0C-83F0-EF371075E0B4}) (Version: 1.0.10 - Hewlett-Packard Company)
HP Utility Center (HKLM\...\{A48BD764-CFDF-40A5-A07A-710908044F5D}) (Version: 2.2.2 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{941DE69D-6CEE-4171-8F1F-3D7E352AA498}) (Version: 1.0.6.1 - Hewlett-Packard Company)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.3.1520 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3224 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.6.0.1033 - Intel Corporation) Hidden
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mp3tag v2.58 (HKLM-x32\...\Mp3tag) (Version: v2.58 - Florian Heidenreich)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
No23 Recorder (HKLM-x32\...\{22B0E143-2B0B-435B-9F56-136A3D16065F}) (Version: 2.1.0.3 - No23)
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
PKR (HKLM-x32\...\PKR) (Version:  - PKR Ltd)
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 1.1.9200.15 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.15.410.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6923 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.00.12.0906 - REALTEK Semiconductor Corp.)
Secunia PSI (2.0.0.4003) (HKLM-x32\...\Secunia PSI) (Version: 2.0.0.4003 - Secunia)
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
Shopping Helper Smartbar (HKLM-x32\...\{7DD65DA0-AD4F-4974-AAC6-5834DD7F6841}) (Version: 11.43.63.16271 - ReSoft Ltd.) <==== ATTENTION
Shopping Helper Smartbar Engine (HKCU\...\{8d3ae6d7-fb6c-49c2-b28b-b69f15da3ab5}) (Version: 11.43.63.16271 - ReSoft Ltd.) <==== ATTENTION
SpywareBlaster 5.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
Streamripper (Remove only) (HKLM-x32\...\Streamripper) (Version:  - )
Switch Sound File Converter (HKLM-x32\...\Switch) (Version: 4.60 - NCH Software)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.5.3.3 - Synaptics Incorporated)
Syncios Version 3.0.1 (HKLM-x32\...\{068A5D84-8419-4BDE-9689-FE65F412EFBB}_is1) (Version: 3.0.1 - Anvsoft, Inc.)
VirtualDJ Home FREE (HKLM-x32\...\{A6AC699F-8315-40CA-8F70-E917494978AB}) (Version: 7.4 - Atomix Productions)
VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 5.01 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Restore Points  =========================

25-04-2014 08:42:27 Windows Update
28-04-2014 21:02:02 Windows Update
01-05-2014 14:57:47 Removed Microsoft Silverlight
10-05-2014 18:20:53 Tune Sweeper wird installiert
16-05-2014 20:49:29 Tune Sweeper wird entfernt
17-05-2014 10:27:47 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2012-07-26 07:26 - 2014-03-02 12:35 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {37189418-64E2-45E7-A8E8-3B40A769493F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-06-07] (Hewlett-Packard Company)
Task: {3BD43A05-13F1-46CE-8B57-8C271F7D2E9E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-10-15] (Hewlett-Packard)
Task: {42677D5E-46B9-4F04-8DE3-5C9584689B79} - System32\Tasks\Microsoft\Windows\Setup\Windows Upgrade Notification Task => C:\Windows\system32\NotificationUI.exe [2014-01-31] (Microsoft Corporation)
Task: {8C9BF7B3-C406-495B-8845-A7519BC5E859} - \Software Updater Ui No Task File <==== ATTENTION
Task: {94EC293F-62BE-4AAB-BC92-95BD13574519} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-17] (Adobe Systems Incorporated)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {B99678B9-9A75-4DE5-95F0-CF6B31EA3B94} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-11-29] (Hewlett-Packard Company)
Task: {C606D238-6D5E-484C-8871-21CD71851958} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-06-07] (Hewlett-Packard Development Company, L.P.)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {CA646F2F-80CF-4E15-BFA6-5C8878122724} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-09] (Google Inc.)
Task: {D355AFDB-B0D8-4659-9E20-C34FAD71A66B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-09] (Google Inc.)
Task: {E13B8762-ABA1-4F8B-B6D7-4979F79E5442} - \Software Updater No Task File <==== ATTENTION
Task: {E66DF2B5-469D-4E8F-A1B2-5776AD438030} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {EA9BF889-EAB3-49CF-BD1A-3167D5B09B0D} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2014-01-31] (Microsoft Corporation)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-03-12 01:05 - 2014-03-04 16:35 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-09-27 17:29 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-11-09 20:10 - 2013-10-10 20:14 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-27 17:20 - 2013-05-08 23:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-03-12 01:05 - 2014-03-04 16:35 - 00014280 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/17/2014 03:15:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.116, Zeitstempel: 0x533b63bd
Name des fehlerhaften Moduls: chrome.dll, Version: 34.0.1847.116, Zeitstempel: 0x533b5e41
Ausnahmecode: 0x80000003
Fehleroffset: 0x0042860b
ID des fehlerhaften Prozesses: 0x17e4
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Vollständiger Name des fehlerhaften Pakets: chrome.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: chrome.exe5

Error: (05/17/2014 03:12:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.116, Zeitstempel: 0x533b63bd
Name des fehlerhaften Moduls: chrome.dll, Version: 34.0.1847.116, Zeitstempel: 0x533b5e41
Ausnahmecode: 0x80000003
Fehleroffset: 0x0042860b
ID des fehlerhaften Prozesses: 0x17dc
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Vollständiger Name des fehlerhaften Pakets: chrome.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: chrome.exe5

Error: (05/17/2014 03:12:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.500, Zeitstempel: 0x533d8de2
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xb58
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Vollständiger Name des fehlerhaften Pakets: mbam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5

Error: (05/17/2014 03:06:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.500, Zeitstempel: 0x533d8de2
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xb88
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Vollständiger Name des fehlerhaften Pakets: mbam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5

Error: (05/17/2014 02:58:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.116, Zeitstempel: 0x533b63bd
Name des fehlerhaften Moduls: chrome.dll, Version: 34.0.1847.116, Zeitstempel: 0x533b5e41
Ausnahmecode: 0x80000003
Fehleroffset: 0x0042860b
ID des fehlerhaften Prozesses: 0x158c
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Vollständiger Name des fehlerhaften Pakets: chrome.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: chrome.exe5

Error: (05/17/2014 02:54:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.500, Zeitstempel: 0x533d8de2
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1214
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Vollständiger Name des fehlerhaften Pakets: mbam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5

Error: (05/17/2014 02:44:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.500, Zeitstempel: 0x533d8de2
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xd24
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Vollständiger Name des fehlerhaften Pakets: mbam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5

Error: (05/17/2014 02:42:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.116, Zeitstempel: 0x533b63bd
Name des fehlerhaften Moduls: chrome.dll, Version: 34.0.1847.116, Zeitstempel: 0x533b5e41
Ausnahmecode: 0x80000003
Fehleroffset: 0x0042860b
ID des fehlerhaften Prozesses: 0x140c
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Vollständiger Name des fehlerhaften Pakets: chrome.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: chrome.exe5

Error: (05/17/2014 02:34:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.500, Zeitstempel: 0x533d8de2
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x4d4
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Vollständiger Name des fehlerhaften Pakets: mbam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5

Error: (05/17/2014 02:22:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.500, Zeitstempel: 0x533d8de2
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1500
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Vollständiger Name des fehlerhaften Pakets: mbam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5


System errors:
=============
Error: (05/17/2014 01:34:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Andrea RT Filters Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/17/2014 01:08:15 PM) (Source: DCOM) (EventID: 10005) (User: KillerboyPC)
Description: 1053hpqwmiexNicht verfügbar{F5539356-2F02-40D4-999E-FA61F45FE12E}

Error: (05/17/2014 01:08:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "HP Software Framework Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/17/2014 01:08:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst HP Software Framework Service erreicht.

Error: (05/17/2014 01:07:02 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}

Error: (05/17/2014 01:06:07 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "HP Support Assistant Service" wurde nicht richtig gestartet.

Error: (05/17/2014 00:59:45 PM) (Source: DCOM) (EventID: 10005) (User: KillerboyPC)
Description: 1053hpqwmiexNicht verfügbar{F5539356-2F02-40D4-999E-FA61F45FE12E}

Error: (05/17/2014 00:59:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "HP Software Framework Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/17/2014 00:59:44 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst HP Software Framework Service erreicht.

Error: (05/17/2014 00:58:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (05/17/2014 03:15:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe34.0.1847.116533b63bdchrome.dll34.0.1847.116533b5e41800000030042860b17e401cf71d206b76efcC:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\chrome.dll449d60b1-ddc5-11e3-be98-a0481c20c9db

Error: (05/17/2014 03:12:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe34.0.1847.116533b63bdchrome.dll34.0.1847.116533b5e41800000030042860b17dc01cf71d1aeddff4fC:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\chrome.dllecfa9ab4-ddc4-11e3-be98-a0481c20c9db

Error: (05/17/2014 03:12:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.500533d8de2MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdb5801cf71d19d5f2acbC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dlldb475179-ddc4-11e3-be98-a0481c20c9db

Error: (05/17/2014 03:06:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.500533d8de2MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdb8801cf71d0d4e5e7acC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll12ed0db6-ddc4-11e3-be98-a0481c20c9db

Error: (05/17/2014 02:58:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe34.0.1847.116533b63bdchrome.dll34.0.1847.116533b5e41800000030042860b158c01cf71cfadd23b3eC:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\chrome.dllec2a719c-ddc2-11e3-be98-a0481c20c9db

Error: (05/17/2014 02:54:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.500533d8de2MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd121401cf71cf2c07e6b2C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll6c35f50a-ddc2-11e3-be98-a0481c20c9db

Error: (05/17/2014 02:44:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.500533d8de2MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdd2401cf71cdbf52a0c9C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dllfd22f01c-ddc0-11e3-be98-a0481c20c9db

Error: (05/17/2014 02:42:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe34.0.1847.116533b63bdchrome.dll34.0.1847.116533b5e41800000030042860b140c01cf71cd795fbbeaC:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\chrome.dllb86ae99a-ddc0-11e3-be98-a0481c20c9db

Error: (05/17/2014 02:34:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.500533d8de2MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd4d401cf71cc583c66beC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll96222b37-ddbf-11e3-be98-a0481c20c9db

Error: (05/17/2014 02:22:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.500533d8de2MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd150001cf71caabbe6d1fC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dllea465312-ddbd-11e3-be98-a0481c20c9db


CodeIntegrity Errors:
===================================
  Date: 2014-03-02 11:35:04.189
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Percentage of memory in use: 27%
Total physical RAM: 7962.14 MB
Available physical RAM: 5761.11 MB
Total Pagefile: 9178.14 MB
Available Pagefile: 6809.15 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:910.13 GB) (Free:715.28 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:20.61 GB) (Free:2.08 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 298DD091)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-05-17 15:41:53
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000038 TOSHIBA_MQ01ABD100 rev.AX001C 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\ADMINI~1\AppData\Local\Temp\uxdyykod.sys


---- Kernel code sections - GMER 2.1 ----

.text   C:\Windows\System32\win32k.sys!W32pServiceTable                                                                      fffff960001ede00 7 bytes [00, 77, 82, 01, 00, 57, F2]
.text   C:\Windows\System32\win32k.sys!W32pServiceTable + 8                                                                  fffff960001ede08 7 bytes [01, 42, C0, FF, 00, 17, DB]

---- User code sections - GMER 2.1 ----

.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNEL32.DLL!RegSetValueExW                                     000007fc16ed25a0 8 bytes JMP 000007fd16630340
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNEL32.DLL!RegQueryValueExW                                   000007fc16ed6b20 9 bytes JMP 000007fd16630298
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNEL32.DLL!K32GetModuleInformation                            000007fc16f557b0 7 bytes JMP 000007fd16630260
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNEL32.DLL!RegDeleteValueW                                    000007fc16f71514 7 bytes JMP 000007fd166302d0
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNEL32.DLL!K32GetMappedFileNameW                              000007fc16f84824 1 byte JMP 000007fd16630228
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNEL32.DLL!K32GetMappedFileNameW + 2                          000007fc16f84826 5 bytes {JMP 0xffffffffff6aba04}
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNEL32.DLL!K32EnumProcessModulesEx                            000007fc16f848b8 8 bytes JMP 000007fd166301f0
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNEL32.DLL!RegSetValueExA                                     000007fc16f84edc 8 bytes JMP 000007fd16630308
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNELBASE.dll!GetModuleHandleW                                 000007fc16641f60 7 bytes JMP 000007fd166300d8
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNELBASE.dll!FreeLibrary                                      000007fc16641fe0 5 bytes JMP 000007fd16630180
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNELBASE.dll!GetModuleHandleExW                               000007fc16644a20 5 bytes JMP 000007fd16630110
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNELBASE.dll!LoadLibraryExW                                   000007fc166483b0 6 bytes JMP 000007fd16630148
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\KERNELBASE.dll!GetModuleFileNameExW                             000007fc16653bd8 5 bytes JMP 000007fd166301b8
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\USER32.dll!CreateWindowExW                                      000007fc1744c5b0 7 bytes JMP 000007fd16630420
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\USER32.dll!DisplayConfigGetDeviceInfo                           000007fc174531f0 1 byte JMP 000007fd16630378
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\USER32.dll!DisplayConfigGetDeviceInfo + 2                       000007fc174531f2 7 bytes {JMP 0xffffffffff1dd188}
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\USER32.dll!EnumDisplayDevicesW                                  000007fc174533e0 5 bytes JMP 000007fd166303e8
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\USER32.dll!EnumDisplayDevicesA                                  000007fc17457160 5 bytes JMP 000007fd166303b0
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                000007fc169d1070 8 bytes JMP 000007fd16630490
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\GDI32.dll!D3DKMTGetDisplayModeList                              000007fc169f0c10 8 bytes JMP 000007fd16630458
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\dxgi.dll!CreateDXGIFactory1                                     000007fc14556d10 5 bytes JMP 000007fd14540110
.text   C:\Windows\system32\dwm.exe[940] C:\Windows\system32\dxgi.dll!CreateDXGIFactory                                      000007fc1455d060 5 bytes JMP 000007fd145400d8
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[580] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690     000007fc12591532 4 bytes [59, 12, FC, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[580] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698     000007fc1259153a 4 bytes [59, 12, FC, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[580] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246   000007fc1259165a 4 bytes [59, 12, FC, 07]
.text   C:\Windows\system32\nvvsvc.exe[640] C:\Windows\system32\MSIMG32.dll!GradientFill + 690                               000007fc12591532 4 bytes [59, 12, FC, 07]
.text   C:\Windows\system32\nvvsvc.exe[640] C:\Windows\system32\MSIMG32.dll!GradientFill + 698                               000007fc1259153a 4 bytes [59, 12, FC, 07]
.text   C:\Windows\system32\nvvsvc.exe[640] C:\Windows\system32\MSIMG32.dll!TransparentBlt + 246                             000007fc1259165a 4 bytes [59, 12, FC, 07]
.text   C:\Windows\system32\nvvsvc.exe[640] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                     000007fc1743177a 4 bytes [43, 17, FC, 07]
.text   C:\Windows\system32\nvvsvc.exe[640] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                     000007fc17431782 4 bytes [43, 17, FC, 07]
.text   C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[1132] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690              000007fc12591532 4 bytes [59, 12, FC, 07]
.text   C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[1132] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698              000007fc1259153a 4 bytes [59, 12, FC, 07]
.text   C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[1132] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246            000007fc1259165a 4 bytes [59, 12, FC, 07]
.text   C:\Windows\System32\spoolsv.exe[1448] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                   000007fc1743177a 4 bytes [43, 17, FC, 07]
.text   C:\Windows\System32\spoolsv.exe[1448] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                   000007fc17431782 4 bytes [43, 17, FC, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[2840] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690      000007fc12591532 4 bytes [59, 12, FC, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[2840] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698      000007fc1259153a 4 bytes [59, 12, FC, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[2840] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246    000007fc1259165a 4 bytes [59, 12, FC, 07]
.text   C:\Windows\system32\svchost.exe[1892] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                   000007fc1743177a 4 bytes [43, 17, FC, 07]
.text   C:\Windows\system32\svchost.exe[1892] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                   000007fc17431782 4 bytes [43, 17, FC, 07]
.text   C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe[4060] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690            000007fc12591532 4 bytes [59, 12, FC, 07]
.text   C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe[4060] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698            000007fc1259153a 4 bytes [59, 12, FC, 07]
.text   C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe[4060] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246          000007fc1259165a 4 bytes [59, 12, FC, 07]
.text   C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1220] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306     000007fc1743177a 4 bytes [43, 17, FC, 07]
.text   C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1220] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314     000007fc17431782 4 bytes [43, 17, FC, 07]
.text   C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[3760] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306  000007fc1743177a 4 bytes [43, 17, FC, 07]
.text   C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[3760] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314  000007fc17431782 4 bytes [43, 17, FC, 07]

---- Threads - GMER 2.1 ----

Thread  C:\Windows\system32\csrss.exe [576:600]                                                                              fffff960009a75e8

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                                                                                unknown MBR code

---- EOF - GMER 2.1 ----