Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt

Ironforge · 21.05.2014, 22:05

Guten Abend,

Ich hoffe ihr könnt mir helfen. Ich bekomme seit mehr als 1. Monat jeden Tag locker 50 Mails mit dem Inhalt Mail Delivery Service und ich weiß partu nicht wie ich das Problem gelöst bekommen tue habe mein Antivir laufen lassen doch keine Infektion oder funde auch habe ich die Passwörter meiner Email Konten schon geändert wegen verdacht eines Email Hacks doch jetzt seit ihr gefragt und ich hoffe ihr könnt mir helfen habe hier ein log File von FRS Tool doch daraus werde ich nicht schlau:
FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-05-2014
Ran by Pascal (administrator) on PASCAL-PC on 21-05-2014 22:27:38
Running from C:\Users\Pascal\Downloads
Platform: Microsoft Windows 7 Enterprise  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Logitech, Inc.) C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodag.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Logitech Inc.) C:\Program Files\Logitech\SetPoint\LBTWiz.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\MagicTune Premium\GammaTray.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Ralink Technology, Corp.) C:\Program Files\RALINK\Common\RaUI.exe
(RPworld.de) C:\Users\Pascal\Downloads\FritzBox_Tray_Tool_1.2\FritzBox_Tray_Tool.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL2\KHALMNPR.exe
(SEC) C:\Program Files\MagicTune Premium\MagicTune.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Nero AG) C:\Program Files\Nero\Nero 2014\Nero Vision\NeroVision.exe
(Nero AG) C:\Program Files\Nero\Nero 2014\Nero Vision\NeroBurnServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MagicTuneLauncher] => C:\Program Files\MagicTune Premium\MagicTuneLauncher.exe [51712 2011-01-04] ()
HKLM\...\Run: [VirtualCloneDrive] => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-06-17] (Elaborate Bytes AG)
HKLM\...\Run: [FUFAXSTM] => C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [OODefragTray] => C:\Program Files\OO Software\Defrag\oodtray.exe [3257640 2014-01-24] (O&O Software GmbH)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [Bluetooth Connection Assistant] => LBTWIZ.EXE -silent
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [Nvtmru] => C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AllShareAgent] => C:\Program Files\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-03-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap.dll [982232 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKU\.DEFAULT\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [894344 2013-02-05] (Autodesk, Inc.)
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Policies\Explorer: [] 
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\MountPoints2: {166e3181-db5c-11e1-b68d-001e8c836755} - I:\pushinst.exe
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\MountPoints2: {ee36545b-dd1f-11e1-a81c-bc054307a844} - H:\setup.exe
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [] 
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {166e3181-db5c-11e1-b68d-001e8c836755} - I:\pushinst.exe
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {ee36545b-dd1f-11e1-a81c-bc054307a844} - H:\setup.exe
IFEO\allshare.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\driveragent.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\driverscanner.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\kies3.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\kiesagent.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\setup.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\teamviewer.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\uninst.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\uninstall.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GammaTray.lnk
ShortcutTarget: GammaTray.lnk -> C:\Program Files\MagicTune Premium\GammaTray.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk
ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\O&O Defrag Tray.lnk
ShortcutTarget: O&O Defrag Tray.lnk -> C:\Windows\Installer\{9A111B78-51E3-48ED-B3CF-F76E004C2CA9}\app_icon.ico ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ralink Wireless Utility.lnk
ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.)
Startup: C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fritz!Box Tray Tool.lnk
ShortcutTarget: Fritz!Box Tray Tool.lnk -> C:\Users\Pascal\Downloads\FritzBox_Tray_Tool_1.2\FritzBox_Tray_Tool.exe (RPworld.de)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/software/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {09859B9C-D4E5-403D-8076-AFEBCD42A55A} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=A6A6A550-0B0B-4371-9E53-7048D8DF73D8&apn_sauid=1FFE243C-45AC-458A-88C6-5ED81ACC53CB
SearchScopes: HKCU - {5AAB9BE1-340F-4E19-9272-664E86A59A38} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {AF4CB84D-0C01-4D23-846B-D908805D3B71} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=fcc169e9000000000000001f1f2671b7&r=186
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Hosts: 127.0.0.1 validation.sls.microsoft.com
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://schnittberichte.com/
FF NetworkProxy: "ftp", "91.121.58.235"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "91.121.58.235"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "91.121.58.235"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "91.121.58.235"
FF NetworkProxy: "ssl_port", 3128
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @Nero.com/KM - C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Amazon-Icon - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\amazon-icon@giga.de [2014-01-02]
FF Extension: Разпознаване на устройство Logitech - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\DeviceDetection@logitech.com [2012-08-01]
FF Extension: pricealarm - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM [2014-01-02]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\ich@maltegoetz.de [2013-12-12]
FF Extension: Nokia Maps 3D browser plugin - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\maps@ovi.com [2012-09-02]
FF Extension: No Name - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\staged [2014-05-21]
FF Extension: LastPass - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\support@lastpass.com [2014-03-24]
FF Extension: DivX Browser Bar DE  - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1} [2014-05-05]
FF Extension: SaveAs - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\5032a6c925cac@5032a6c925ce5.info.xpi [2012-08-20]
FF Extension: Personas Plus - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\personas@christopher.beard.xpi [2012-08-01]
FF Extension: Stealthy - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\stealthyextension@gmail.com.xpi [2012-12-19]
FF Extension: FlashGot - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-03-13]
FF Extension: {799fe388-8c3f-4d0b-b490-c748f2dcd714} - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{799fe388-8c3f-4d0b-b490-c748f2dcd714}.xpi [2014-01-08]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: PDF Print Converter Light - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{bf87ed13-b668-4984-b4d3-4d0b1cb35e33}.xpi [2014-01-09]
FF Extension: Adblock Plus - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-08-01]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.)
R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [153600 2009-09-14] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [121856 2009-09-14] (SEIKO EPSON CORPORATION)
S4 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG)
S4 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®)
S3 FlexNet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1064312 2014-02-06] (Flexera Software LLC)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [762192 2013-07-18] (Nero AG)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14658848 2013-12-10] (NVIDIA Corporation)
R2 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [1387304 2014-01-24] (O&O Software GmbH)
S4 SamsungAllShareV2.0; C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [25504 2012-03-02] (Samsung Electronics Co., Ltd.)
S4 SimpleSlideShowServer; C:\Program Files\Samsung\AllShare\AllShareSlideShowService.exe [27584 2012-03-02] (Samsung Electronics Co., Ltd.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1731896 2014-01-28] (TuneUp Software)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
S4 vToolbarUpdater18.1.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [1801240 2014-04-28] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121248 2012-08-26] (SlySoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42272 2014-04-28] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-09-30] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69240 2013-12-18] (Avira Operations GmbH & Co. KG)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
R3 cmuda3; C:\Windows\System32\drivers\cmuda3.sys [1482048 2007-04-26] (C-Media Inc)
S3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)
S3 DFUBTUSB; C:\Windows\System32\Drivers\frmupgr.sys [27536 2007-01-03] (Broadcom Corporation.)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] ()
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [586752 2010-10-22] (AVM GmbH)
R1 MagicTune; C:\Windows\system32\drivers\MTiCtwl.sys [14336 2010-04-22] (Samsung Electronics, Inc. )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [107736 2014-05-21] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51416 2014-04-03] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [6504 2009-05-13] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2013-12-05] (NVIDIA Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-30] (Avira GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-21 22:25 - 2014-05-21 22:27 - 00038330 _____ () C:\Users\Pascal\Downloads\Addition.txt
2014-05-21 22:24 - 2014-05-21 22:27 - 00022676 _____ () C:\Users\Pascal\Downloads\FRST.txt
2014-05-21 22:22 - 2014-05-21 22:27 - 00000000 ____D () C:\FRST
2014-05-21 22:20 - 2014-05-21 22:21 - 01056768 _____ (Farbar) C:\Users\Pascal\Downloads\FRST.exe
2014-05-21 22:03 - 2014-05-21 22:03 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{B3919DC4-5283-4A2C-8573-4C917059BE20}
2014-05-20 19:38 - 2014-05-20 19:38 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1526393C-662C-4559-85AF-1A252E171405}
2014-05-20 19:25 - 2014-05-21 18:48 - 00000336 _____ () C:\Windows\setupact.log
2014-05-20 19:25 - 2014-05-20 19:25 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-20 19:24 - 2014-05-21 18:48 - 00001512 _____ () C:\Windows\PFRO.log
2014-05-18 23:19 - 2014-05-18 23:55 - 110100480 _____ () C:\Users\Pascal\Downloads\h4v3fun-r0ll3rb0y5-xv1d.part01.rar
2014-05-18 23:15 - 2014-05-18 23:15 - 00002456 _____ () C:\Users\Pascal\Downloads\2db390e102eaf98cf59033618e1ae139.dlc
2014-05-18 22:21 - 2014-05-18 22:21 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{98638811-E171-4D0C-A51C-072CF5517DDE}
2014-05-18 22:08 - 2014-05-19 20:43 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\1&1
2014-05-18 22:08 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Local\1&1
2014-05-18 22:05 - 2014-05-18 22:05 - 16746208 _____ (1&1 Internet AG) C:\Users\Pascal\Downloads\1und1_multimessenger_setup.exe
2014-05-16 18:25 - 2014-05-16 18:26 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{3B5807A1-4191-495A-A879-1CD27CE3B894}
2014-05-15 18:43 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-05-15 18:41 - 2014-05-15 18:46 - 00000000 ____D () C:\AdwCleaner
2014-05-15 18:40 - 2014-05-15 18:40 - 01325827 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.208.exe
2014-05-15 17:30 - 2014-05-15 17:30 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{199A5393-E899-4070-BD5A-22B640CA4D83}
2014-05-12 21:06 - 2014-05-12 21:06 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{749199E8-2336-42EC-A2D1-F1E134FA2128}
2014-05-11 23:23 - 2014-05-11 23:23 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{DE2AFFE4-6A9D-4F5D-A086-0CFA261F9E23}
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\Program Files\CPUID
2014-05-09 13:44 - 2014-05-09 13:44 - 01496480 _____ ( ) C:\Users\Pascal\Downloads\cpu-z_1.692-setup-en.exe
2014-05-07 23:51 - 2014-05-07 23:51 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{8F78B5A7-F8DB-40D4-AC47-186A91DF03E0}
2014-05-06 20:22 - 2014-05-06 20:22 - 00402696 _____ () C:\Users\Pascal\Downloads\setup.exe
2014-05-06 19:36 - 2014-05-06 19:36 - 00000000 ____D () C:\ProgramData\Curse Client
2014-05-05 22:25 - 2014-05-19 22:08 - 00000625 _____ () C:\Users\Pascal\Documents\Uninstall STAR WARS The Old Republic.log
2014-05-05 19:30 - 2014-05-05 19:31 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{C2E3727A-DD16-46F4-AB3B-AC026AA91777}
2014-04-30 17:26 - 2014-04-30 17:26 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1C28FBBF-9B26-4E95-9BC9-F04687C738D0}
2014-04-29 22:48 - 2014-04-29 22:48 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{48019A28-725D-4D32-B79B-82E5019D413B}
2014-04-29 19:19 - 2014-04-29 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2014-04-29 18:57 - 2014-04-29 18:57 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86.exe
2014-04-29 18:56 - 2014-04-29 18:59 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86(1).exe
2014-04-28 23:17 - 2014-04-28 23:18 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-28 19:25 - 2014-05-21 21:12 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-28 19:24 - 2014-04-28 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 19:23 - 2014-04-28 19:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 19:23 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-28 19:23 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-24 18:04 - 2014-04-24 18:04 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{36F2A2E4-850E-4139-A114-871D6C4EF407}
2014-04-22 17:21 - 2014-04-22 17:22 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{90F12593-C6A2-4D83-88D1-07CA9D42830E}
2014-04-21 22:09 - 2014-04-21 22:09 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{A84371FE-1718-4165-A9C3-D4A2682E41FA}

==================== One Month Modified Files and Folders =======

2014-05-21 22:27 - 2014-05-21 22:25 - 00038330 _____ () C:\Users\Pascal\Downloads\Addition.txt
2014-05-21 22:27 - 2014-05-21 22:24 - 00022676 _____ () C:\Users\Pascal\Downloads\FRST.txt
2014-05-21 22:27 - 2014-05-21 22:22 - 00000000 ____D () C:\FRST
2014-05-21 22:25 - 2012-08-17 09:41 - 00000000 ____D () C:\Users\Pascal\AppData\Local\CrashDumps
2014-05-21 22:21 - 2014-05-21 22:20 - 01056768 _____ (Farbar) C:\Users\Pascal\Downloads\FRST.exe
2014-05-21 22:03 - 2014-05-21 22:03 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{B3919DC4-5283-4A2C-8573-4C917059BE20}
2014-05-21 21:48 - 2012-08-01 21:53 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-21 21:43 - 2012-08-02 23:34 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Azureus
2014-05-21 21:20 - 2012-07-31 23:35 - 02084416 _____ () C:\Windows\WindowsUpdate.log
2014-05-21 21:12 - 2014-04-28 19:25 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-21 19:03 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-21 19:03 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-21 18:48 - 2014-05-20 19:25 - 00000336 _____ () C:\Windows\setupact.log
2014-05-21 18:48 - 2014-05-20 19:24 - 00001512 _____ () C:\Windows\PFRO.log
2014-05-21 18:48 - 2012-08-01 00:47 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-21 18:48 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-20 22:58 - 2013-08-10 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
2014-05-20 22:58 - 2013-01-23 23:21 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movie2KDownloader.com
2014-05-20 19:38 - 2014-05-20 19:38 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1526393C-662C-4559-85AF-1A252E171405}
2014-05-20 19:25 - 2014-05-20 19:25 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-19 22:09 - 2012-08-01 00:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
2014-05-19 22:09 - 2012-08-01 00:24 - 00000000 ____D () C:\Program Files\Uniblue
2014-05-19 22:08 - 2014-05-05 22:25 - 00000625 _____ () C:\Users\Pascal\Documents\Uninstall STAR WARS The Old Republic.log
2014-05-19 22:05 - 2014-04-14 19:18 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\elsterformular
2014-05-19 22:05 - 2014-04-14 19:15 - 00000000 ____D () C:\ProgramData\elsterformular
2014-05-19 21:05 - 2012-08-01 23:55 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Nero
2014-05-19 20:43 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\1&1
2014-05-19 20:34 - 2013-06-02 21:51 - 00000000 ____D () C:\Windows\Minidump
2014-05-19 20:34 - 2010-09-14 21:40 - 00000000 ____D () C:\Windows\Panther
2014-05-19 20:18 - 2013-11-06 23:09 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Battle.net
2014-05-19 19:04 - 2012-08-07 19:25 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-19 17:51 - 2012-08-01 00:22 - 00000324 _____ () C:\Windows\Tasks\WindowsUpdate.job
2014-05-18 23:55 - 2014-05-18 23:19 - 110100480 _____ () C:\Users\Pascal\Downloads\h4v3fun-r0ll3rb0y5-xv1d.part01.rar
2014-05-18 23:34 - 2012-08-02 23:22 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-18 23:15 - 2014-05-18 23:15 - 00002456 _____ () C:\Users\Pascal\Downloads\2db390e102eaf98cf59033618e1ae139.dlc
2014-05-18 22:21 - 2014-05-18 22:21 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{98638811-E171-4D0C-A51C-072CF5517DDE}
2014-05-18 22:08 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Local\1&1
2014-05-18 22:05 - 2014-05-18 22:05 - 16746208 _____ (1&1 Internet AG) C:\Users\Pascal\Downloads\1und1_multimessenger_setup.exe
2014-05-16 18:26 - 2014-05-16 18:25 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{3B5807A1-4191-495A-A879-1CD27CE3B894}
2014-05-15 19:49 - 2012-08-01 21:53 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-15 19:49 - 2012-08-01 21:53 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-05-15 18:46 - 2014-05-15 18:41 - 00000000 ____D () C:\AdwCleaner
2014-05-15 18:42 - 2012-08-14 22:14 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\BrowserCompanion
2014-05-15 18:40 - 2014-05-15 18:40 - 01325827 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.208.exe
2014-05-15 17:30 - 2014-05-15 17:30 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{199A5393-E899-4070-BD5A-22B640CA4D83}
2014-05-14 19:39 - 2013-12-06 00:37 - 00000000 ____D () C:\Program Files\Hearthstone
2014-05-13 17:22 - 2012-08-17 10:37 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-05-12 23:10 - 2014-03-31 18:59 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-12 21:06 - 2014-05-12 21:06 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{749199E8-2336-42EC-A2D1-F1E134FA2128}
2014-05-11 23:23 - 2014-05-11 23:23 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{DE2AFFE4-6A9D-4F5D-A086-0CFA261F9E23}
2014-05-09 16:05 - 2012-09-03 23:34 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Deployment
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\Program Files\CPUID
2014-05-09 13:44 - 2014-05-09 13:44 - 01496480 _____ ( ) C:\Users\Pascal\Downloads\cpu-z_1.692-setup-en.exe
2014-05-07 23:51 - 2014-05-07 23:51 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{8F78B5A7-F8DB-40D4-AC47-186A91DF03E0}
2014-05-07 18:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-05-06 21:30 - 2013-05-07 12:33 - 00000000 ____D () C:\Users\Gast
2014-05-06 20:22 - 2014-05-06 20:22 - 00402696 _____ () C:\Users\Pascal\Downloads\setup.exe
2014-05-06 19:36 - 2014-05-06 19:36 - 00000000 ____D () C:\ProgramData\Curse Client
2014-05-06 18:59 - 2012-08-01 00:08 - 00146320 _____ () C:\Users\Pascal\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-06 18:58 - 2009-07-14 06:33 - 00492128 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-06 00:01 - 2012-08-05 22:30 - 00000000 ____D () C:\Program Files\TeamViewer
2014-05-05 23:59 - 2014-03-13 02:47 - 00000000 ____D () C:\Program Files\Easeware
2014-05-05 23:33 - 2012-08-02 23:33 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Conduit
2014-05-05 23:30 - 2013-07-10 12:47 - 00982016 ___SH () C:\Users\Pascal\Documents\Thumbs.db
2014-05-05 22:31 - 2010-09-14 20:52 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-05 22:24 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-05 22:23 - 2013-12-25 02:41 - 00000000 ____D () C:\Users\Pascal\Documents\NeroVideo
2014-05-05 19:31 - 2014-05-05 19:30 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{C2E3727A-DD16-46F4-AB3B-AC026AA91777}
2014-05-05 19:31 - 2012-08-01 22:22 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Windows Live Writer
2014-05-04 21:51 - 2013-11-06 23:09 - 00000000 ____D () C:\Program Files\Battle.net
2014-04-30 17:26 - 2014-04-30 17:26 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1C28FBBF-9B26-4E95-9BC9-F04687C738D0}
2014-04-29 22:48 - 2014-04-29 22:48 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{48019A28-725D-4D32-B79B-82E5019D413B}
2014-04-29 19:19 - 2014-04-29 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2014-04-29 19:19 - 2014-03-13 12:16 - 00000000 ____D () C:\Program Files\MyPhoneExplorer
2014-04-29 18:59 - 2014-04-29 18:56 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86(1).exe
2014-04-29 18:57 - 2014-04-29 18:57 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86.exe
2014-04-29 18:41 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-04-28 23:18 - 2014-04-28 23:17 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-28 23:18 - 2013-07-05 13:09 - 00003730 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml
2014-04-28 23:15 - 2012-11-26 22:38 - 00000000 ____D () C:\Program Files\AVG Secure Search
2014-04-28 23:14 - 2012-11-26 22:38 - 00042272 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys
2014-04-28 19:24 - 2014-04-28 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 19:24 - 2014-04-28 19:23 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 19:24 - 2012-08-01 00:22 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Malwarebytes
2014-04-28 19:23 - 2012-08-01 00:22 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-24 18:04 - 2014-04-24 18:04 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{36F2A2E4-850E-4139-A114-871D6C4EF407}
2014-04-22 18:56 - 2012-10-23 14:05 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\MediaMonkey
2014-04-22 17:22 - 2014-04-22 17:21 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{90F12593-C6A2-4D83-88D1-07CA9D42830E}
2014-04-21 22:09 - 2014-04-21 22:09 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{A84371FE-1718-4165-A9C3-D4A2682E41FA}

Files to move or delete:
====================
C:\Users\Pascal\taskmgr.exe


Some content of TEMP:
====================
C:\Users\Pascal\AppData\Local\Temp\avgnt.exe
C:\Users\Pascal\AppData\Local\Temp\i4jdel0.exe
C:\Users\Pascal\AppData\Local\Temp\SpotifyUninstall.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-19 23:17

==================== End Of Log ============================

--- --- ---

Hier die Addition nochmal falls sie gebraucht wird:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version:21-05-2014
Ran by Pascal at 2014-05-21 22:28:07
Running from C:\Users\Pascal\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{00E410EB-8542-5527-9FC9-4C44DF3B7E79}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Processor Driver (HKLM\...\{C151CE54-E7EA-4804-854B-F515368B0798}) (Version: 1.3.2.0053 - AMD)
AnyDVD (HKLM\...\AnyDVD) (Version: 7.0.9.0 - SlySoft)
Apple Application Support (HKLM\...\{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}) (Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{10E3A6DD-84D8-4D8A-BB11-5E5314BCA7FD}) (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI - Dienstprogramm zur Deinstallation der Software (HKLM\...\All ATI Software) (Version: 6.14.10.1016 - )
AutoCAD 2014 - English (Version: 19.1.18.0 - Autodesk) Hidden
AutoCAD 2014 Language Pack - English (Version: 19.1.18.0 - Autodesk) Hidden
Autodesk 360 (HKLM\...\{52B28CAD-F49D-47BA-9FFE-29C2E85F0D0B}) (Version: 4.0.27.1 - Autodesk)
Autodesk App Manager (HKLM\...\{C070121A-C8C5-4D52-9A7D-D240631BD433}) (Version: 1.1.0 - Autodesk)
Autodesk AutoCAD 2014 - English (HKLM\...\AutoCAD 2014 - English) (Version: 19.1.18.0 - Autodesk)
Autodesk Content Service (HKLM\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk)
Autodesk Content Service (Version: 3.1.3.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (Version: 3.1.3.0 - Autodesk) Hidden
Autodesk Featured Apps (HKLM\...\{F732FEDA-7713-4428-934B-EF83B8DD65D0}) (Version: 1.1.0 - Autodesk)
Autodesk Material Library 2014 (HKLM\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2014 (HKLM\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk)
Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.0.43.13 - Autodesk)
Autodesk ReCap (Version: 1.0.43.13 - Autodesk) Hidden
Autodesk ReCap Language Pack-English (Version: 1.0.43.13 - Autodesk) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Battle.net (HKLM\...\Battle.net) (Version:  - Blizzard Entertainment)
CameraHelperMsi (Version: 13.50.854.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDDRV_Installer (Version: 4.60 - Logitech) Hidden
CloneCD (HKLM\...\CloneCD) (Version:  - SlySoft)
CloneDVD2 (HKLM\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
C-Media PCI Audio (HKLM\...\C-Media PCI Sound) (Version:  - )
Content Manager 2 (HKLM\...\Content Manager 2) (Version: 3.10.0.52790 - NNG Llc.)
Corel PaintShop Pro X4 (HKLM\...\_{00580795-581C-4587-B9F2-37320D7AB37F}) (Version: 14.0.0.345 - Corel Corporation)
Corel PaintShop Pro X4 (Version: 14.0.0.345 - Corel Corporation) Hidden
Corel PaintShop Pro X5 (HKLM\...\_{1563C6F2-E9B5-42DE-9EA6-207C9A8C2DFB}) (Version: 15.0.0.183 - Corel Corporation)
Corel PaintShop Pro X5 (Version: 15.0.0.183 - Corel Corporation) Hidden
Corel PaintShop Pro X6 (HKLM\...\_{166D1CB6-DD8A-40DD-9E25-4D31D2D6DE4D}) (Version: 16.0.0.113 - Corel Corporation)
Corel PaintShop Pro X6 (Version: 16.0.0.113 - Corel Corporation) Hidden
CPUID CPU-Z 1.69.2 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.792 - Curse)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DDBAC (HKLM\...\{8E1246B9-9F66-4303-BF11-212EC2672BBE}) (Version: 5.3.13 - DataDesign)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.87 - DivX, LLC)
DriverAgent by eSupport.com (HKLM\...\DriverAgent_is1) (Version:  - Copyright © 2013 eSupport.com, Inc • All Rights Reserved)
eMule (HKLM\...\eMule) (Version:  - )
EPSON BX620FWD Series Handbuch (HKLM\...\EPSON BX620FWD Series Manual) (Version:  - )
EPSON BX620FWD Series Netzwerk-Handbuch (HKLM\...\EPSON BX620FWD Series Network Guide) (Version:  - )
EPSON BX620FWD Series Printer Uninstall (HKLM\...\EPSON BX620FWD Series) (Version:  - SEIKO EPSON Corporation)
Epson Easy Photo Print 2 (HKLM\...\{310C1558-F6B5-4889-98B0-7471966BA7F2}) (Version: 2.2.3.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}) (Version: 2.40.0001 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.10.00 - SEIKO EPSON CORPORATION)
Epson PC-FAX Driver (HKLM\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4i - SEIKO EPSON CORPORATION)
EpsonNet Setup 3.3 (HKLM\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.3a - SEIKO EPSON CORPORATION)
erLT (Version: 1.20.0137 - Logitech, Inc.) Hidden
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FARO LS 1.1.501.0 (HKLM\...\{8F196892-666A-4A40-8587-6AE38F78A5C2}) (Version: 5.1.0.30630 - FARO Scanner Production)
Firebird SQL Server - MAGIX Edition (HKLM\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Free Video to DVD Converter version 5.0.24.422 (HKLM\...\Free Video to DVD Converter_is1) (Version: 5.0.24.422 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.2.20.1230 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.20.1230 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Hearthstone (HKLM\...\Hearthstone) (Version:  - Blizzard Entertainment)
ICA (Version: 14.0.0.345 - Corel Corporation) Hidden
ICA (Version: 15.0.0.183 - Corel Corporation) Hidden
ICA (Version: 16.0.0.113 - Corel Corporation) Hidden
IPM_PSP_COM (Version: 14.0.0.345 - Corel Corporation) Hidden
IPM_PSP_COM (Version: 15.0.0.183 - Corel Corporation) Hidden
IPM_PSP_COM (Version: 16.0.0.113 - Corel Corporation) Hidden
Java 7 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.450 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden
LastPass (nur deinstallieren) (HKLM\...\LastPass) (Version:  - LastPass)
Logitech SetPoint (HKLM\...\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}) (Version: 4.80 - Logitech)
Logitech Vid HD (HKLM\...\Logitech Vid) (Version: 7.2 (7259) - Logitech Inc..)
Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.31 - Logitech Inc.)
LWS Facebook (Version: 13.50.854.0 - Logitech) Hidden
LWS Gallery (Version: 13.50.854.0 - Logitech) Hidden
LWS Help_main (Version: 13.50.862.0 - Logitech) Hidden
LWS Launcher (Version: 13.50.859.0 - Logitech) Hidden
LWS Motion Detection (Version: 13.30.1395.0 - Logitech) Hidden
LWS Pictures And Video (Version: 13.50.861.0 - Logitech) Hidden
LWS Twitter (Version: 13.30.1346.0 - Logitech) Hidden
LWS Video Mask Maker (Version: 13.30.1379.0 - Logitech) Hidden
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
LWS Webcam Software (Version: 13.31.1038.0 - Logitech) Hidden
LWS WLM Plugin (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (Version: 13.31.1038.0 - Logitech) Hidden
MagicTune Premium (HKLM\...\{69F962F7-3761-4704-9E4B-24FF10F77111}) (Version: 4.0.12 - Samsung Electronics Co. Ltd.)
MAGIX Fotos auf DVD 2014 Deluxe (HKLM\...\MX.{D7951A7D-D2B7-494B-BFA8-0EC07C00EBDC}) (Version: 13.0.2.87 - MAGIX AG)
MAGIX Fotos auf DVD 2014 Deluxe (Version: 13.0.2.87 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM\...\MX.{294792A1-CA9A-459E-8F78-3C96FD3A3EC4}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
MediaMonkey 4.0 (HKLM\...\MediaMonkey_is1) (Version: 4.0 - Ventis Media Inc.)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Primary Interoperability Assemblies 2005 (HKLM\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1 - Nokia) Hidden
Mozilla Firefox 29.0.1 (x86 de) (HKLM\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyFreeCodec (HKCU\...\MyFreeCodec) (Version:  - )
MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
Naviextras Toolbox Prerequesities (HKLM\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - Nav N Go Ltd.)
Nero 2014 (HKLM\...\{F384C1E1-3A16-4073-95C3-7271FE0ED4C2}) (Version: 15.0.02200 - Nero AG)
Nero 2014 Content Pack (HKLM\...\{204A26F0-01B8-4656-8607-5CCEDE820BC2}) (Version: 15.0.00200 - Nero AG)
Nero Abstract Themes (Version: 12.0.11500 - Nero AG) Hidden
Nero Audio Pack 1 (Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero Blu-ray Player (Version: 12.0.20031 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden
Nero Burning Core (Version: 15.0.19000 - Nero AG) Hidden
Nero Burning ROM (Version: 15.0.19000 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden
Nero Cliparts (Version: 12.0.11500 - Nero AG) Hidden
Nero ControlCenter (Version: 11.0.16700 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden
Nero Core Components (Version: 11.0.22500 - Nero AG) Hidden
Nero Disc Menus 1 (Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus 2 (Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus 3 (Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Disc to Device (Version: 15.0.12010 - Nero AG) Hidden
Nero Effects Basic (Version: 15.0.10011 - Nero AG) Hidden
Nero Express (Version: 15.0.19000 - Nero AG) Hidden
Nero Express Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden
Nero Family and Events Themes (Version: 12.0.11500 - Nero AG) Hidden
Nero Football (Soccer) Themes (Version: 12.0.11500 - Nero AG) Hidden
Nero Holiday and Sports Themes (Version: 12.0.11500 - Nero AG) Hidden
Nero Image Samples (Version: 15.0.10008 - Nero AG) Hidden
Nero Info (Version: 15.1.0023 - Nero AG) Hidden
Nero Kwik Themes Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Launcher (Version: 15.0.8000 - Nero AG) Hidden
Nero MediaHome (Version: 1.20.8200 - Nero AG) Hidden
Nero MediaHome Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden
Nero PiP Effects 1 (Version: 12.0.11500 - Nero AG) Hidden
Nero PiP Effects Basic (Version: 15.0.10008 - Nero AG) Hidden
Nero Platinum Effects 12 (Version: 15.0.10011 - Nero AG) Hidden
Nero Recode (Version: 15.0.14000 - Nero AG) Hidden
Nero Recode Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden
Nero RescueAgent (Version: 15.0.2000 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden
Nero Retro Film Themes (Version: 12.0.11700 - Nero AG) Hidden
Nero SharedVideoCodecs (Version: 1.0.15003 - Nero AG) Hidden
Nero Update (Version: 11.0.13300.42.0 - Nero AG) Hidden
Nero Video (Version: 15.0.12000 - Nero AG) Hidden
Nero Video Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden
Nero Video Samples (Version: 12.0.11500 - Nero AG) Hidden
Nero Video Transitions 1 (Version: 12.0.11500 - Nero AG) Hidden
Nokia Connectivity Cable Driver (HKLM\...\{6FE12C01-2FBC-42E2-AEB9-4CA2238C462F}) (Version: 7.1.101.0 - Nokia)
Nokia Suite (HKLM\...\Nokia Suite) (Version: 3.7.22.0 - Nokia)
Nokia Suite (Version: 3.7.22.0 - Nokia) Hidden
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)
O&O Defrag Professional (HKLM\...\{9A111B78-51E3-48ED-B3CF-F76E004C2CA9}) (Version: 17.0.504 - O&O Software GmbH)
OpenOffice.org 3.4 (HKLM\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org)
PC Connectivity Solution (HKLM\...\{6B722793-E77B-41F5-BAB3-6C9832274E75}) (Version: 12.0.76.0 - Nokia)
Prerequisite installer (Version: 15.0.0005 - Nero AG) Hidden
PSPPContent (Version: 14.0.0.345 - Corel Corporation) Hidden
PSPPContent (Version: 15.0.0.183 - Corel Corporation) Hidden
PSPPContent (Version: 16.0.0.113 - Corel Corporation) Hidden
PSPPHelp (Version: 14.0.0.345 - Corel Corporation) Hidden
PSPPHelp (Version: 15.0.0.183 - Corel Corporation) Hidden
PSPPHelp (Version: 16.0.0.113 - Corel Corporation) Hidden
Ralink Wireless LAN (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.00.0000 - RaLink)
Samsung AllShare (HKLM\...\InstallShield_{DF47ACA3-7C78-4C08-8007-AC682563C9F1}) (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.)
Samsung AllShare (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Setup (Version: 14.0.0.345 - Ihr Firmenname) Hidden
Setup (Version: 15.0.0.183 - Ihr Firmenname) Hidden
Setup (Version: 16.0.0.113 - Ihr Firmenname) Hidden
Shared Add-in Extensibility Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM\...\{09959E11-AD5D-408E-96AF-E3346954D6B8}) (Version: 1.0.0 - Microsoft)
Shared Add-in Support Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM\...\{64F3B15C-24C7-4B2B-9B72-65CCBBD7F06B}) (Version: 1.0.0 - Microsoft)
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
SketchUp Import for AutoCAD 2014 (HKLM\...\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk)
Star Wars: The Old Republic (HKLM\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
StarCraft II (HKLM\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
TuneUp Utilities 2013 (HKLM\...\TuneUp Utilities 2013) (Version: 13.0.4000.245 - TuneUp Software)
TuneUp Utilities 2013 (Version: 13.0.4000.245 - TuneUp Software) Hidden
TuneUp Utilities 2013 13.0.2013.194 (HKLM\...\TuneUp Utilities 2013 13.0.2013.194) (Version:  - )
TuneUp Utilities Language Pack (de-DE) (Version: 10.0.1000.47 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (Version: 12.0.3500.13 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.4000.245 - TuneUp Software) Hidden
Uplay (HKLM\...\Uplay) (Version: 3.0 - Ubisoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version:  - Elaborate Bytes)
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.2.0.0 - Azureus Software, Inc.)
Winamp (HKLM\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows Utils (HKLM\...\Windows Utils) (Version:  - )
Windows-Treiberpaket - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinRAR 4.00 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)
World of Warcraft (HKLM\...\World of Warcraft) (Version:  - Blizzard Entertainment)
Xilisoft Video Converter Ultimate (HKLM\...\Xilisoft Video Converter Ultimate) (Version: 7.7.3.20131014 - Xilisoft)
XP Codec Pack (HKLM\...\XP Codec Pack) (Version:  - )
YGOPro DevPro Version 1.9.2r2 (HKLM\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.2r2 - YGOPro DevPro Online)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 04:04 - 2012-09-02 22:41 - 00000864 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 validation.sls.microsoft.com

==================== Scheduled Tasks (whitelisted) =============

Task: {16D215CA-419C-4602-8AD3-A58D5AEDBC78} - System32\Tasks\{1C598B69-0DED-476D-A610-8DCF4E823F83} => E:\Setup.exe
Task: {2799E072-9B31-4692-AD33-7AD098E9AB5A} - System32\Tasks\WindowsUpdate => Rundll32.exe C:\Windows\wupd.dll, xmlcreate
Task: {5AB47F9B-9F25-4A0B-850F-A4A0F22C4E7D} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2013-02-13] ()
Task: {5CCE5702-887E-43C8-800D-3633A19E580C} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2014-01-28] (TuneUp Software)
Task: {647E4BEB-321B-4C5D-B920-2A42EB30CD7A} - System32\Tasks\{826E6F22-6BEF-4E3F-9E6E-9D6411AE80C9} => G:\Crysis 3\Bin32\Crysis3.exe
Task: {6A0C2E99-4F8A-4F46-8C1A-BB46D7F4DD4D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A5112FBA-DEA6-425C-8F95-0702FD0A160A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {AB743BE2-4380-4CDE-A962-DA9C5F72C813} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {CDCB5DC2-38B6-42DB-A248-58AD121EA492} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {D964EF81-ADD5-4668-A81B-567640DD7D6E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-15] (Adobe Systems Incorporated)
Task: {E74890E7-A596-4D04-A39D-CC7C930BF174} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\WindowsUpdate.job => C:\Windows\wupd.dll

==================== Loaded Modules (whitelisted) =============

2012-08-01 00:47 - 2014-03-04 14:34 - 00109000 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2013-10-09 11:36 - 2013-09-30 11:01 - 00394824 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-01-28 10:37 - 2014-01-28 10:37 - 00607032 _____ () C:\Program Files\TuneUp Utilities 2013\avgreplibx.dll
2012-08-01 00:02 - 2009-10-05 16:36 - 00036864 _____ () C:\Program Files\MagicTune Premium\GammaTray.exe
2012-12-25 03:38 - 2009-07-20 13:27 - 00017936 _____ () C:\Program Files\Logitech\SetPoint\khalwrapper.dll
2012-08-01 00:02 - 2011-01-04 09:30 - 00065024 _____ () C:\Program Files\MagicTune Premium\VESADll.dll
2012-08-01 00:02 - 2011-01-04 09:30 - 00064512 _____ () C:\Program Files\MagicTune Premium\IPROFILE.dll
2012-08-01 00:02 - 2011-01-04 09:31 - 00054272 _____ () C:\Program Files\MagicTune Premium\DPROFILE.dll
2012-08-01 00:02 - 2011-01-04 09:30 - 00056320 _____ () C:\Program Files\MagicTune Premium\EPROFILE.dll
2012-08-01 00:02 - 2011-01-04 09:30 - 00053248 _____ () C:\Program Files\MagicTune Premium\DEVICEINTERFACE.dll
2012-08-01 00:02 - 2011-01-04 09:31 - 00023552 _____ () C:\Program Files\MagicTune Premium\HzZone.dll
2012-08-01 00:02 - 2011-01-04 09:31 - 00023040 _____ () C:\Program Files\MagicTune Premium\Highlight.dll
2012-08-01 00:02 - 2011-01-04 09:31 - 00052224 _____ () C:\Program Files\MagicTune Premium\MTResGer.dll
2014-03-31 18:59 - 2014-05-12 23:10 - 03839088 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-03-21 11:01 - 2014-03-21 11:01 - 01020928 _____ () C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\extensions\support@lastpass.com\platform\WINNT_x86-msvc\components\lpxpcom.dll
2013-08-21 15:58 - 2013-08-21 15:58 - 00245072 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\DotNetProxy.dll
2013-06-05 12:45 - 2013-06-05 12:45 - 00071504 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\Nero3D\zlib1.dll
2013-06-05 12:45 - 2013-06-05 12:45 - 00091984 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\Nero3D\lib3ds-1.3.dll
2013-08-21 15:59 - 2013-08-21 15:59 - 00858008 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\System.Data.SQLite.dll
2012-08-01 00:17 - 2011-03-02 12:40 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll
2014-01-14 12:26 - 2013-12-10 04:15 - 00081184 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster32.dll
2014-01-14 12:26 - 2013-12-10 04:15 - 00758048 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk32.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/21/2014 10:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c
Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x52a67618
Ausnahmecode: 0xc0000005
Fehleroffset: 0x100077e2
ID des fehlerhaften Prozesses: 0x17c8
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3

Error: (05/21/2014 10:24:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c
Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x52a67618
Ausnahmecode: 0xc0000005
Fehleroffset: 0x100be510
ID des fehlerhaften Prozesses: 0x17c8
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3

Error: (05/21/2014 09:25:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00033a96
ID des fehlerhaften Prozesses: 0xd98
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3

Error: (05/21/2014 09:24:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c
Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x52a67618
Ausnahmecode: 0xc0000005
Fehleroffset: 0x100be510
ID des fehlerhaften Prozesses: 0xd98
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3

Error: (05/21/2014 08:15:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OneClick.exe, Version: 13.0.4000.245, Zeitstempel: 0x52e76b11
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00052ca9
ID des fehlerhaften Prozesses: 0x16b0
Startzeit der fehlerhaften Anwendung: 0xOneClick.exe0
Pfad der fehlerhaften Anwendung: OneClick.exe1
Pfad des fehlerhaften Moduls: OneClick.exe2
Berichtskennung: OneClick.exe3

Error: (05/21/2014 08:03:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OneClick.exe, Version: 13.0.4000.245, Zeitstempel: 0x52e76b11
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00052ca9
ID des fehlerhaften Prozesses: 0x464
Startzeit der fehlerhaften Anwendung: 0xOneClick.exe0
Pfad der fehlerhaften Anwendung: OneClick.exe1
Pfad des fehlerhaften Moduls: OneClick.exe2
Berichtskennung: OneClick.exe3

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (05/20/2014 07:25:05 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]


System errors:
=============
Error: (05/21/2014 06:48:42 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎21.‎05.‎2014 um 00:02:50 unerwartet heruntergefahren.

Error: (05/20/2014 09:14:29 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (05/15/2014 05:23:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/15/2014 05:23:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Browser-Schutz erreicht.

Error: (05/15/2014 05:21:22 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎15.‎05.‎2014 um 01:50:34 unerwartet heruntergefahren.

Error: (05/14/2014 06:29:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/14/2014 06:29:58 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Browser-Schutz erreicht.

Error: (05/13/2014 05:25:56 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.

Error: (05/13/2014 05:25:54 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.

Error: (05/13/2014 05:25:54 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.


Microsoft Office Sessions:
=========================
Error: (05/21/2014 10:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvBackend.exe10.11.15.052a6776cnvspcap.dll_unloaded0.0.0.052a67618c0000005100077e217c801cf75326f01538dC:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exenvspcap.dll016bacfc-e126-11e3-9e3f-001e8c836755

Error: (05/21/2014 10:24:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvBackend.exe10.11.15.052a6776cnvspcap.dll_unloaded0.0.0.052a67618c0000005100be51017c801cf75326f01538dC:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exenvspcap.dllf19a5f32-e125-11e3-9e3f-001e8c836755

Error: (05/21/2014 09:25:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvBackend.exe10.11.15.052a6776cole32.dll6.1.7601.175144ce7b96fc000000500033a96d9801cf7515ebe231d7C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exeC:\Windows\system32\ole32.dll99c99485-e11d-11e3-9e3f-001e8c836755

Error: (05/21/2014 09:24:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvBackend.exe10.11.15.052a6776cnvspcap.dll_unloaded0.0.0.052a67618c0000005100be510d9801cf7515ebe231d7C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exenvspcap.dll89a5b8b5-e11d-11e3-9e3f-001e8c836755

Error: (05/21/2014 08:15:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: OneClick.exe13.0.4000.24552e76b11ntdll.dll6.1.7601.18247521ea91cc000000500052ca916b001cf751fa09fa37cC:\Program Files\TuneUp Utilities 2013\OneClick.exeC:\Windows\SYSTEM32\ntdll.dlle7e1353a-e113-11e3-9e3f-001e8c836755

Error: (05/21/2014 08:03:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: OneClick.exe13.0.4000.24552e76b11ntdll.dll6.1.7601.18247521ea91cc000000500052ca946401cf751d843911f2C:\Program Files\TuneUp Utilities 2013\OneClick.exeC:\Windows\SYSTEM32\ntdll.dll3c86215e-e112-11e3-9e3f-001e8c836755

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (05/20/2014 07:25:05 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]


==================== Memory info =========================== 

Percentage of memory in use: 78%
Total physical RAM: 3070.49 MB
Available physical RAM: 664.21 MB
Total Pagefile: 6139.27 MB
Available Pagefile: 3217.13 MB
Total Virtual: 2047.88 MB
Available Virtual: 1883.67 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:149.05 GB) (Free:69.33 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Volume) (Fixed) (Total:186.31 GB) (Free:39.79 GB) NTFS
Drive g: (My Book) (Fixed) (Total:931.51 GB) (Free:196.8 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 2AE0CD32)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 186 GB) (Disk ID: 08D39400)
Partition 1: (Not Active) - (Size=186 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 932 GB) (Disk ID: E8900690)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber · 22.05.2014, 05:44

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Ironforge · 23.05.2014, 14:09

Code:

ATTFilter

ComboFix 14-05-19.01 - Pascal 23.05.2014  14:34:58.1.4 - x86
Microsoft Windows 7 Enterprise   6.1.7601.1.1252.49.1031.18.3070.1479 [GMT 2:00]
ausgeführt von:: c:\users\Pascal\Downloads\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\1381307106.bdinstall.bin
c:\programdata\1381308865.bdinstall.bin
c:\programdata\1381311014.bdinstall.bin
c:\programdata\adob
c:\programdata\adob\1.bat
c:\programdata\adob\123.bat
c:\programdata\adob\123.reg
c:\programdata\adob\1234.bat
c:\programdata\adob\copy.exe
c:\programdata\adob\stop.bat
c:\users\Pascal\AppData\Roaming\1&1
c:\users\Pascal\AppData\Roaming\SearchProtect
c:\users\Pascal\AppData\Roaming\SearchProtect\bin\CRASH_DUMP_P3724_T2756_D2013_10_09_T10_54_34.dmp
c:\users\Pascal\AppData\Roaming\SearchProtect\bin\CRASH_REPORT_P3724_T2756_D2013_10_09_T10_54_34.txt
c:\users\Pascal\AppData\Roaming\SearchProtect\bin\msvcp100.dll
c:\users\Pascal\AppData\Roaming\SearchProtect\bin\msvcr100.dll
c:\users\Pascal\AppData\Roaming\SearchProtect\bin\rep.dat
c:\windows\system32\uxt4422.tmp
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-04-23 bis 2014-05-23  ))))))))))))))))))))))))))))))
.
.
2014-05-23 12:58 . 2014-05-23 12:59	--------	d-----w-	c:\users\Pascal\AppData\Local\temp
2014-05-23 12:58 . 2014-05-23 12:58	--------	d-----w-	c:\users\Gast\AppData\Local\temp
2014-05-23 12:58 . 2014-05-23 12:58	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-05-21 21:13 . 2014-04-17 03:32	8050496	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{B05E2D71-CFBD-4CC3-8675-ECDC119E3C2F}\mpengine.dll
2014-05-21 20:22 . 2014-05-21 20:28	--------	d-----w-	C:\FRST
2014-05-18 20:08 . 2014-05-18 20:08	--------	d-----w-	c:\users\Pascal\AppData\Local\1&1
2014-05-15 16:43 . 2010-08-30 06:34	536576	----a-w-	c:\windows\system32\sqlite3.dll
2014-05-15 16:41 . 2014-05-15 16:46	--------	d-----w-	C:\AdwCleaner
2014-05-12 21:10 . 2014-05-12 21:10	10594416	----a-w-	c:\program files\Mozilla Firefox\icudt52.dll
2014-05-12 21:10 . 2014-05-12 21:10	965232	----a-w-	c:\program files\Mozilla Firefox\icuuc52.dll
2014-05-12 21:10 . 2014-05-12 21:10	1266800	----a-w-	c:\program files\Mozilla Firefox\icuin52.dll
2014-05-09 11:46 . 2014-05-09 11:46	--------	d-----w-	c:\program files\CPUID
2014-05-08 11:21 . 2014-05-08 11:21	188272	----a-w-	c:\program files\Mozilla Firefox\Plugins\nppdf32.dll
2014-05-08 11:21 . 2014-05-08 11:21	188272	----a-w-	c:\program files\Internet Explorer\Plugins\nppdf32.dll
2014-05-06 17:36 . 2014-05-06 17:36	--------	d-----w-	c:\programdata\Curse Client
2014-04-28 21:17 . 2014-04-28 21:18	--------	d-----w-	c:\programdata\AVG Secure Search
2014-04-28 17:25 . 2014-05-23 12:25	107736	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-04-28 17:23 . 2014-04-03 07:51	51416	----a-w-	c:\windows\system32\drivers\mwac.sys
2014-04-28 17:23 . 2014-04-03 07:51	73432	----a-w-	c:\windows\system32\drivers\mbamchameleon.sys
2014-04-28 17:23 . 2014-04-28 17:24	--------	d-----w-	c:\program files\ Malwarebytes Anti-Malware 
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-15 17:49 . 2012-08-01 19:53	70832	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2014-05-15 17:49 . 2012-08-01 19:53	692400	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2014-04-28 21:14 . 2012-11-26 20:38	42272	----a-w-	c:\windows\system32\drivers\avgtpx86.sys
2014-04-03 07:50 . 2012-07-31 22:22	23256	----a-w-	c:\windows\system32\drivers\mbam.sys
2014-04-02 09:18 . 2014-04-15 19:48	144664	----a-w-	c:\windows\system32\secman.dll
2014-03-31 07:35 . 2010-09-14 19:07	231584	------w-	c:\windows\system32\MpSigStub.exe
2014-03-04 14:29 . 2014-04-10 16:16	9728064	----a-w-	c:\windows\system32\nvcuda.dll
2014-03-04 14:29 . 2014-04-10 16:16	9690424	----a-w-	c:\windows\system32\nvopencl.dll
2014-03-04 14:29 . 2014-04-10 16:16	894296	----a-w-	c:\windows\system32\nvdispgenco3233523.dll
2014-03-04 14:29 . 2014-04-10 16:16	865224	----a-w-	c:\windows\system32\NvIFR.dll
2014-03-04 14:29 . 2014-04-10 16:16	847136	----a-w-	c:\windows\system32\NvFBC.dll
2014-03-04 14:29 . 2014-04-10 16:16	2956632	----a-w-	c:\windows\system32\nvcuvid.dll
2014-03-04 14:29 . 2014-04-10 16:16	2411976	----a-w-	c:\windows\system32\nvcuvenc.dll
2014-03-04 14:29 . 2014-04-10 16:16	23716640	----a-w-	c:\windows\system32\nvoglv32.dll
2014-03-04 14:29 . 2014-04-10 16:16	10523480	----a-w-	c:\windows\system32\drivers\nvlddmkm.sys
2014-03-04 14:29 . 2014-04-10 16:16	1049888	----a-w-	c:\windows\system32\nvdispco3233523.dll
2014-03-04 14:29 . 2014-04-10 16:16	17559384	----a-w-	c:\windows\system32\nvcompiler.dll
2014-03-04 14:29 . 2013-09-17 20:23	14709720	----a-w-	c:\windows\system32\nvd3dum.dll
2014-03-04 14:29 . 2012-07-31 22:46	2715264	----a-w-	c:\windows\system32\nvapi.dll
2014-03-04 14:29 . 2009-07-13 22:09	15783992	----a-w-	c:\windows\system32\nvwgf2um.dll
2014-03-04 12:34 . 2012-07-31 22:47	4348704	----a-w-	c:\windows\system32\nvcpl.dll
2014-03-04 12:34 . 2012-07-31 22:47	3044696	----a-w-	c:\windows\system32\nvsvc.dll
2014-03-04 12:34 . 2012-07-31 22:47	663896	----a-w-	c:\windows\system32\nvvsvc.exe
2014-03-04 12:34 . 2012-07-31 22:47	62752	----a-w-	c:\windows\system32\nvshext.dll
2014-03-04 12:34 . 2012-07-31 22:47	2556360	----a-w-	c:\windows\system32\nvsvcr.dll
2014-03-04 12:34 . 2012-07-31 22:47	375128	----a-w-	c:\windows\system32\nvmctray.dll
2014-03-04 11:32 . 2014-04-10 16:20	599840	----a-w-	c:\windows\system32\nvStreaming.exe
2014-03-01 04:11 . 2014-03-13 10:30	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2014-03-01 04:10 . 2014-03-13 10:30	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2014-03-01 03:52 . 2014-03-13 10:30	61952	----a-w-	c:\windows\system32\iesetup.dll
2014-03-01 03:51 . 2014-03-13 10:30	51200	----a-w-	c:\windows\system32\ieetwproxystub.dll
2014-03-01 03:38 . 2014-03-13 10:30	112128	----a-w-	c:\windows\system32\ieUnatt.exe
2014-03-01 03:38 . 2014-03-13 10:30	108032	----a-w-	c:\windows\system32\ieetwcollector.exe
2014-03-01 03:37 . 2014-03-13 10:30	553472	----a-w-	c:\windows\system32\jscript9diag.dll
2014-03-01 03:31 . 2014-03-13 10:30	646144	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2014-03-01 03:14 . 2014-03-13 10:30	4244480	----a-w-	c:\windows\system32\jscript9.dll
2014-03-01 03:00 . 2014-03-13 10:30	1964032	----a-w-	c:\windows\system32\inetcpl.cpl
2014-03-01 02:32 . 2014-03-13 10:30	1820160	----a-w-	c:\windows\system32\wininet.dll
2013-10-14 02:44 . 2013-10-14 02:44	2174976	----a-w-	c:\program files\Common Files\atimpenc.dll
2012-08-01 19:07 . 2012-08-01 19:07	10974280	----a-w-	c:\program files\Common Files\lpuninstall.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KiesAirMessage"="c:\program files\Samsung\Kies\KiesAirMessage.exe" [2013-05-22 578560]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Bluetooth Connection Assistant"="LBTWIZ.EXE -silent" [X]
"MagicTuneLauncher"="c:\program files\MagicTune Premium\MagicTuneLauncher.exe" [2011-01-04 51712]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160]
"FUFAXSTM"="c:\program files\Epson Software\FAX Utility\FUFAXSTM.exe" [2009-12-02 847872]
"EEventManager"="c:\program files\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320]
"OODefragTray"="c:\program files\OO Software\Defrag\oodtray.exe" [2014-01-24 3257640]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 55824]
"KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2013-12-11 311152]
"Nvtmru"="c:\program files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-08 1028384]
"AllShareAgent"="c:\program files\Samsung\AllShare\AllShareAgent.exe" [2012-03-01 285072]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-03-13 689744]
"ShadowPlay"="c:\windows\system32\nvspcap.dll" [2013-12-10 982232]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-01-20 43848]
"NvBackend"="c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe" [2013-12-10 2279712]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Autodesk Sync"="c:\program files\Autodesk\Autodesk Sync\AdSync.exe" [2013-02-05 894344]
.
c:\users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CurseClientStartup.ccip [2012-9-3 0]
Fritz!Box Tray Tool.lnk - c:\users\Pascal\Downloads\FritzBox_Tray_Tool_1.2\FritzBox_Tray_Tool.exe [2013-8-29 1347584]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GammaTray.lnk - c:\program files\MagicTune Premium\GammaTray.exe [2012-8-1 36864]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2012-12-25 813584]
O&O Defrag Tray.lnk - c:\windows\Installer\{9A111B78-51E3-48ED-B3CF-F76E004C2CA9}\app_icon.ico [2014-3-13 292878]
Ralink Wireless Utility.lnk - c:\program files\RALINK\Common\RaUI.exe -s [2012-8-1 970752]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk /r \??\g:\0autocheck autochk /r \??\G:\0autocheck autochk *
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"NokiaSuite.exe"=c:\program files\Nokia\Nokia Suite\NokiaSuite.exe -tray
"Autodesk Sync"=c:\program files\Autodesk\Autodesk Sync\AdSync.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"LWS"=c:\program files\Logitech\LWS\Webcam Software\LWS.exe -hide
"DivXMediaServer"=c:\program files\DivX\DivX Media Server\DivXMediaServer.exe
.
R2 AntiVirWebService;Avira Browser-Schutz;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2014-03-13 1017424]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys [2010-10-22 4352]
R3 BthAvrcp;Bluetooth-AVRCP-Profil;c:\windows\system32\DRIVERS\BthAvrcp.sys [2009-08-13 22528]
R3 CompFilter;UVCCompositeFilter;c:\windows\system32\DRIVERS\lvbusflt.sys [2012-01-18 22176]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-10-28 87064]
R3 DrvAgent32;DrvAgent32;c:\windows\system32\Drivers\DrvAgent32.sys [2013-10-01 30504]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2013-02-05 37344]
R3 fwlanusbn;FRITZ!WLAN N;c:\windows\system32\DRIVERS\fwlanusbn.sys [2010-10-22 586752]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-01 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2013-10-28 182680]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R4 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [2012-01-23 1858048]
R4 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2011-04-26 2702848]
R4 SamsungAllShareV2.0;Samsung AllShare PC;c:\program files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [2012-03-02 25504]
R4 SimpleSlideShowServer;SimpleSlideShowServer;c:\program files\Samsung\AllShare\AllShareSlideShowService.exe [2012-03-02 27584]
R4 vToolbarUpdater18.1.0;vToolbarUpdater18.1.0;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [2014-04-28 1801240]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2014-04-28 42272]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-09-30 37352]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-03-13 440400]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files\Autodesk\Content Service\Connect.Service.ContentService.exe [2012-12-13 12288]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys [2013-12-18 69240]
S2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [2009-09-14 153600]
S2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [2009-09-14 121856]
S2 MBAMScheduler;MBAMScheduler;c:\program files\ Malwarebytes Anti-Malware \mbamscheduler.exe [2014-04-03 1809720]
S2 MBAMService;MBAMService;c:\program files\ Malwarebytes Anti-Malware \mbamservice.exe [2014-04-03 857912]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2013-07-18 762192]
S2 NvNetworkService;NVIDIA Network Service;c:\program files\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 14658848]
S2 OODefragAgent;O&O Defrag;c:\program files\OO Software\Defrag\oodag.exe [2014-01-24 1387304]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-03-04 411936]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [2014-01-28 1731896]
S2 UMVPFSrv;UMVPFSrv;c:\program files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-01-18 450848]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-04-03 23256]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-05-23 107736]
S3 netr28;Ralink 802.11n-Drahtlostreiber für Windows Vista;c:\windows\system32\DRIVERS\netr28.sys [2009-07-13 530944]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2013-12-05 34080]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [2012-11-16 10088]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - MBAMSWISSARMY
*Deregistered* - MBAMWebAccessControl
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
Inhalt des "geplante Tasks" Ordners
.
2014-05-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-01 17:49]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
mStart Page = about:blank
IE: Free YouTube to MP3 Converter - c:\program files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://schnittberichte.com/
.
.
------- Dateityp-Verknüpfung -------
.
.scr=AutoCADScriptFile
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2929401604-168723178-134223584-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-2929401604-168723178-134223584-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-05-23  15:01:32
ComboFix-quarantined-files.txt  2014-05-23 13:01
.
Vor Suchlauf: 20 Verzeichnis(se), 80.530.317.312 Bytes frei
Nach Suchlauf: 26 Verzeichnis(se), 79.690.014.720 Bytes frei
.
- - End Of File - - 66C3FF04C6AADF6983342343FB3BD4CC
A36C5E4F47E84449FF07ED3517B43A31

Das kam dabei raus

schrauber · 24.05.2014, 11:11

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Ironforge · 25.05.2014, 23:00

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Enterprise x86
Ran by Pascal on 25.05.2014 at 20:59:20,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Myfree Codec
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2929401604-168723178-134223584-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Myfree Codec
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{09859B9C-D4E5-403D-8076-AFEBCD42A55A}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5AAB9BE1-340F-4E19-9272-664E86A59A38}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{AF4CB84D-0C01-4D23-846B-D908805D3B71}



~~~ Files

Successfully deleted: [File] "C:\Users\Pascal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\driverscanner.lnk"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\bitguard"
Successfully deleted: [Folder] "C:\ProgramData\conduit"
Successfully deleted: [Folder] "C:\ProgramData\dsearchlink"
Successfully deleted: [Folder] "C:\Users\Pascal\AppData\Roaming\browsercompanion"
Successfully deleted: [Folder] "C:\Users\Pascal\AppData\Roaming\dvdvideosoftiehelpers"
Successfully deleted: [Folder] "C:\Users\Pascal\appdata\locallow\boost_interprocess"
Successfully deleted: [Folder] "C:\Users\Pascal\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\Pascal\appdata\locallow\delta"
Successfully deleted: [Folder] "C:\Users\Pascal\appdata\locallow\softonic"
Successfully deleted: [Folder] "C:\Users\Pascal\appdata\locallow\vuze_remote"
Successfully deleted: [Folder] "C:\Program Files\delta"
Successfully deleted: [Folder] "C:\Program Files\myfree codec"
Successfully deleted: [Folder] "C:\Program Files\winzip registry optimizer"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{0074150F-86A2-4E84-81F2-B559560C3B8B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{008E8207-D654-4BF2-A1A4-BE7CB502E5F9}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{00CB8AD9-704B-4B4A-BC12-E49C36510E1D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{01A0CD78-0917-46E8-84CA-2092B33A730B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{01B1CA03-24A7-42D0-AE23-8A8ED200ADFD}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{026776CC-D6A7-4E1A-96BD-7180F7C2AA39}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{043FA2E7-5215-41B5-A058-B2A29B5BB422}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{05897EFE-F2FD-42C1-9C74-D46A55102912}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{059C40AE-0BE3-41F3-BCE9-82E5AB10F0F4}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{05AAB2D2-29EE-4F35-9B2C-05895A02BBF0}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{06D8B7B0-0421-48A4-98B1-E0562E13663F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{07252445-8714-43AD-B71B-5C5A225D71FE}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{07932563-7B33-4A55-A466-8C460CF9F507}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{07A508FD-5984-42DC-9301-6F190FF57348}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{0807CB47-C819-4E01-BA7B-511A38D26B40}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{08DD7A23-D39A-4724-BB66-51CC35BB54D3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{0BD93A24-2DCE-4974-866D-715A7D20BE6B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{0C8DE67D-28F1-48FB-8CAE-1DA185A1331A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{0CCE3B7B-5362-42C2-8E5F-E76277E30E86}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{0D50FF87-4304-4923-AFF9-6B7891233681}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{0D572DB2-A97C-40CE-8990-C8579B83EB23}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{0EF7FFF3-D2C1-42E2-BF48-EC665F64F8D0}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{113798F0-7984-41C5-801A-A33A75CF51D3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{113E408F-0681-44CA-A0F6-E80F9A2CA44E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{11420001-168A-4411-8BF4-83674203BF9B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{116DCEF8-B198-4AA9-83D7-2ACA0E06F865}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{11AAAE37-8E85-476E-9E8E-9423808495C5}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{11C8D0A5-56F6-4101-B866-7DD7A9DABA3B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{133D3AA8-E4C5-40CE-B178-F3CCC735F83A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{13B0B5C5-700E-4CA1-B308-40EB37980A6C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1413EE11-9166-4426-89BA-426672D824FA}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{14424F82-254E-4F9F-B1E1-0CFBA34FA296}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{14F02C0C-6A19-4812-BAF5-A7B5D5F4FE4D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1526393C-662C-4559-85AF-1A252E171405}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{15556720-347D-4D6C-89DD-0F9D90CEC6BC}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{16341FF3-DAA2-4C82-9ADB-9BA80EB1DDE8}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{16361493-821C-4390-A437-7BF660C9A915}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1773BC0E-7E8B-4B51-B36E-5C1A669ED6FA}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{17CD0BD2-1A13-402F-B35A-73E5C129D3EE}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{188E0482-6024-4711-881D-1FFF82508F6B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{18C529B0-F610-430C-AC22-92257672583A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{18DA5B61-5A2E-4214-A60A-E5938861A76F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{199A5393-E899-4070-BD5A-22B640CA4D83}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1A294452-B716-4F46-97DE-9A019A54AFAE}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1A31FA11-FD45-495A-85A1-B18A913CB595}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1A55813B-3789-4CFA-8618-A8EA7430AB09}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1B138A7A-5F09-480E-BC72-044E14C0B27A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1B29E5B2-F901-4D18-88A9-EA0D0C015D48}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1C28FBBF-9B26-4E95-9BC9-F04687C738D0}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1C6A1532-EAEF-41C1-8875-52FB6250BC06}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1E1752F5-811F-4D2C-873B-45AAB63DA80D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1E65D5A3-64B7-4F2D-9E6A-B5FBBC280D33}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1E79454E-0B66-480B-98F5-A4A2D7926EE4}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{1E818B29-4A1D-40E6-9298-3AC18D8DC260}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{200D7F8A-DF1F-4C5A-AE99-87FC396C6EE3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{2108C155-1CFC-4A0D-842A-DC2BDFC783EC}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{218573D9-6B3C-40F5-9909-292B25B585F5}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{222CCBCD-06C1-4AD0-A7FF-4221D378A717}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{222F5C55-D916-4001-80A8-1389061B7C15}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{22B7151D-C45A-4B67-A43B-2A147DF8D9C6}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{23D6C9E4-E9C9-4D5D-A220-6674FE6479C1}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{28C60D8F-0746-4B3D-A95C-9B849A62DE16}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{28E547D6-62AC-438A-BD13-CCC9F361E79B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{2A0A0370-B690-4D01-9A17-96CED4583A1C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{2B52443F-D58F-431F-93E5-28C20BF13CDF}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{2F46921D-D0B4-4332-AE21-D99FFE55B4E5}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{2FD721B8-1440-4F40-9C1F-1CB7FA2ED041}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{316497D2-CF12-4F40-B1C5-885874C4589E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{31659335-7AE3-4EC5-818A-7266DAA6118F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{318AF5CB-536E-4EC3-AC16-FEF2FA3C580C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{32602BBD-7CE4-4191-AD9A-31E0C049FB34}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{32F07522-655E-4FBD-951F-24AD22F6BDF2}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3361A551-E62C-4792-8FD0-1DC362BC6657}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3367E51E-2E5C-41CA-AC26-E4B73F588A56}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3376D075-54E2-405F-97BE-7B071A13F32F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{34B89E61-4696-4E66-8CFF-2516BBC7B3AA}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3560DF11-0100-4199-9292-FFD6E085E404}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{360E2111-48EF-42E2-9B63-87F85E865F59}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{367AB132-DB78-4B55-820A-2CCEC725DD5F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{369C6594-AD81-4A95-9AF8-09E606F33E0E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{36F2A2E4-850E-4139-A114-871D6C4EF407}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{37D34AD4-CED2-41F6-A400-B374E97BCA0B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{38359C6C-C513-43B4-89EE-3FD6D464D1C2}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{390A12A2-8F32-45DD-93AF-991B01F33C9E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3A56E7AA-1AAA-4130-956D-AA9AD1B594A4}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3ABBB1D0-2434-41E1-86FD-CDF5A3F20741}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3AEEB556-462E-4A32-9738-F5E120BE8DD1}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3B399BE2-E19B-4D4B-B8B6-DD56418AB1D4}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3B5807A1-4191-495A-A879-1CD27CE3B894}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3BC4E1FB-2575-405B-8C85-4F1214669F8C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3BF05B00-98D4-47F1-B760-6F357D19ACFD}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3D1345F0-164D-4B54-9EF9-DCF81CD2C278}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3E0D034F-D9C0-4354-9D87-E2B82CA91ACA}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3E78CB89-9EF2-417F-B609-6B3E6CDA6FBE}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3F4D2F90-69D8-4B06-88D8-E51263DE4428}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{3F783524-08CF-4104-B09C-36AB2C9E0C38}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{40370E3F-5EC3-4CC2-A69D-18DD02D82B9B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{40D41764-9EDF-44CD-8CB7-D6E62AD76268}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{41237635-A6B5-4F33-B8F2-F310C3AD744B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{4221250D-0937-463E-894A-851608255BE7}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{42D90DA1-EA89-4714-8BDF-D602C1F75E9A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{433BC4DF-0E80-4CAB-8D1D-C65172FBFA2B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{43CA1861-A778-4DFC-AAC3-472A9D9D4685}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{43CE1180-6BB9-4A65-9BE3-9BD253FC5C52}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{43F03733-C3CC-4EED-9C5B-63F66B807A78}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{45456039-585C-4D4E-AD65-03BABF217C82}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{46EC23F9-BDA6-43D1-93B4-8093B1807599}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{47AE5914-CDEF-4C4C-B90A-25FB20742DE9}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{48019A28-725D-4D32-B79B-82E5019D413B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{4861DFA4-7F22-483D-9A82-E2F713035D8F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{487D2BA4-6DBA-4110-8997-385B6AF55C81}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{49809825-DFDE-4E29-81DF-BA7605075E66}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{49BFAE67-0D3F-48A7-B189-C51C6BE06817}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{4A33D0C4-2BDC-4421-8753-0F60EE42EE3C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{4A7E0EDE-621C-4FF8-93E3-54E53DF4BA06}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{4A80C0AE-EEDD-4539-AD40-83BAB836019F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{4BD6EC6F-9BED-43B3-9ECE-D6E55EA9DC8C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{4CCE6CB0-9C8F-47D8-8A39-A61235816AB9}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{4CD0C8B0-EC12-41EF-A678-8FD4188FBD6B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{4CEFB647-F6DC-4518-A110-C6DEBCE4642A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{4CF0651A-3310-4812-8994-7C54A32E3DD3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{502A64B9-A796-4E16-A4FB-79FAE8D3C68D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{5050D31A-D5DF-4B40-BF24-77994E0829E4}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{50F911CD-F9A9-41F2-AC79-13D81ADF7718}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{51951299-2B6B-422D-8C11-F47D1FB09D76}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{51DF1C02-B993-4C19-BA61-15473075741D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{52A1182D-EE69-439A-A1B3-910919B61F3B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{53E3A657-71D7-44E3-8DB3-8C335962AAD6}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{55F7E5A5-BA8E-4971-A0A1-0DB09C119416}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{563B601C-994B-4344-A187-17E86EF3911A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{56906C61-9B53-4579-866E-70AC7268DC14}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{56E21EFF-E0A9-430B-A58C-76E028939B1F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{56FCA663-3599-439C-997A-8BD862A11131}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{5710DD1A-BE0C-4D95-8AF2-306B515E11E9}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{57305B22-0480-4049-B3F4-A7AF403C2221}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{57E27C09-421B-4E53-8A18-9F4A3F69093E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{591A63FF-068C-4FAF-B82B-4C856B8106B9}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{592AB186-A5AB-4B10-B49A-468B676931FA}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{5938552D-9D8D-41FC-9B3B-8BBE9A519615}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{595577AC-07B0-4801-AFC3-C4929D19258F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{5CBBC7ED-E545-4999-B12B-340B9C07877F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{5F73C35A-70EC-451A-8CB3-1106317B168A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{600678CF-6A9D-4D38-B12D-94AF80C25CB8}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{602457F8-C211-4BA6-981B-3B5FBA8DEAD7}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{609B401F-7B7D-4634-A4C1-CC7A3E45183E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{60D7B5CB-4580-4D51-B09C-9A0B3A587EB9}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{612C811E-94DF-4435-A9CB-B662FB4F8A6F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{616E7479-D09F-44D8-9643-E5A4C4C1908F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{6224BD33-117D-466E-A210-AA569D516307}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{62ACE1D5-637C-4B83-9C51-A3F9B53474C3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{6332FBAA-E4D3-4733-ADB2-3A8076693773}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{63695230-8734-4F16-A0C2-0E005A53FE19}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{646A5359-E974-4252-88AF-4ED83596DEF6}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{64F842C1-E307-4BD9-A43C-3C87E143E57A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{65CEE205-5A8F-4C82-9676-90B2EC74817F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{664365BC-3237-4307-A0D6-BBD0AE797810}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{66585FD6-5A71-4F00-90ED-A997F08087DD}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{684AD651-322F-4504-B551-241B303E99AA}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{68E56D61-04B9-42C3-B8E9-08FB245825F3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{6A4A54D0-A923-48E9-A87B-2E39673550B8}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{6A73083A-9F17-43A0-8CC2-EA289E6A0B0D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{6A987DCF-BD10-45E4-913B-72004F7BD6AF}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{6B521F85-FE25-4596-AAF3-A5A32FFE8385}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{6D9298E4-8F9F-47DA-BA11-EE6CA1BFF8B7}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{6EB1D2D2-19CA-41F9-AE44-765AE9AB8B91}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{6F9C23E5-AA9A-4614-B0F8-E668F64DFA1A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{701360A8-B4E6-4A20-B714-14B2890C1696}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{701FE6CE-C588-40AD-B836-C3707C6C502F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{716CDEB4-8634-47C0-A857-5D43F79BF15C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{718D69A9-CEC8-4751-82AC-31982326B4FB}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{72C3CCB9-F697-48A8-819A-4E802457BD9A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{73915129-4A5B-418E-AF36-0603A90AE28D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{73B65BCF-4B2D-4126-A7F6-7840B2FA93CB}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{7432A50C-DEFC-4ABB-98A9-6DEC2C33BB57}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{74856F9E-F1EE-47F1-8543-22B45327AA43}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{749199E8-2336-42EC-A2D1-F1E134FA2128}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{749C2431-DD99-440C-BE61-DF771507E54A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{74EB187F-8F9C-44A1-95BF-EE50D41C194E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{751A93DD-87C0-4896-AC98-A3E816D0EB16}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{753A8265-613D-42DB-ACC3-53216829A5D0}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{76B2EE85-3530-4E52-9F13-5872823CEBEA}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{7813BD09-5B7A-4587-834F-993C33FE62D4}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{78847D55-792A-45D5-8E12-C0F4EB9CC433}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{78B9D5A0-043E-4C21-B106-C78D4CF7E5C2}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{791C71EB-14D3-4998-BF00-D5CB58C9239B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{794397EA-E1E1-47D0-800C-9377349DF87F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{796C3B4A-49B8-46A4-87B9-19AC96CDEFA9}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{79BFD848-CFEA-4B86-97E7-632906567880}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{7A187F6F-64A7-4093-BF9E-13F082755FE6}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{7A5D62C3-9ABC-49F0-B0F9-2D2B9EF7C20F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{7A699BEF-967E-47BA-B771-CE8D553AEAAB}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{7B7E13C8-8D5C-4CC9-8173-FF9D4A1A1C7C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{7C45FCD6-033A-406E-8C97-14EC369C7CD9}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{7C7C304F-D575-4C36-B11C-5064BF284AE5}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{7D97F120-7845-4BF8-B5F0-5FD231A470CF}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{7F71EBD8-1725-4744-BBB0-39EA81B1D36C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{7FCD43E4-62E0-41B1-A38A-EA1F11A98995}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{80297D9C-64A8-401A-A67F-A3BCF8377716}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{8083EE04-93FA-4ADA-ABAD-22E4928DFF33}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{80FD6A18-ACF3-4E12-8AAD-05EDE3426AAC}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{816C720B-7CE5-4E30-8465-8720394FA7B6}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{825D0A95-031B-469C-9A95-D47812D2E4BB}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{83419C7A-77B0-4E4D-91BE-3D4D75608B39}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{85077D69-2222-42F4-A132-0BCF7D289C28}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{855433BF-BB4F-4949-B5C1-4C90F020056E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{86667E91-1366-4E2C-B6D4-4428D891090B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{86E1214E-2729-4122-8599-F4705F001BD2}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{88B0FF94-06E4-46E1-BC84-55A453468CB3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{88B9D162-A7E7-4ACC-A2FE-37D852A49DDF}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{8992073E-8520-4B50-A9F1-CB0D76837250}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{89985FE8-E9D4-453E-AC10-7F4A8A84DD16}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{89A90D5F-B4F9-4E26-BB1F-EDD083C79BE3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{89D48EE8-B887-4490-8FE0-3149CEA67DF8}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{89DF7A7D-D0FB-4B91-A1ED-C8D3A733473B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{8A721564-DD5F-43F5-986B-C9715EFD405A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{8DB7C2C0-B404-404D-9F63-4FC757B79A5A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{8DC1A40B-A39B-4EF7-BF86-64A1CF76E078}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{8EB891BE-FC58-4643-9AD4-A00FFBF21F6D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{8F78B5A7-F8DB-40D4-AC47-186A91DF03E0}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{8FFE431C-80D5-4F6E-A3E8-428F897535E3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{901E8B87-5663-4CD1-91CA-30923D370F94}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{90D841BC-BBCA-4754-AF99-27CC50D484EB}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{90F12593-C6A2-4D83-88D1-07CA9D42830E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9117C02E-6E5D-4AAD-98FC-538683858603}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{911A1E0C-1841-4F15-B520-E6271EA1BF35}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{917542CC-47DD-41A3-9197-24EDAD55F3DC}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{944384EA-A856-4887-8793-797B6758CD8D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9517C5AB-CFF3-48AD-AF2B-3C3A997B42F4}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{95BB4A6F-148C-4A2B-A0E7-280EE814AADF}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9682D4E3-5F6F-491E-BBFF-F3BB5849477B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{96AC6858-B376-437A-ABA5-59574E7A5A08}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{98638811-E171-4D0C-A51C-072CF5517DDE}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9864C8EC-CFD6-4578-AE70-E68109EF5A3E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{986FFFD6-6EAC-4DCB-AE36-40C7ADAD732E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{98D33F50-6070-4B77-8FA3-C75BEB1A6A9F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9923CBA6-C0A5-4919-B446-8B370EB96933}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9964C1D0-40DD-48B2-A9DB-291084ABBA9F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9A4ED799-09E1-4BA9-96B3-95F0D5A06BF5}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9A5B3620-D6A8-4E2D-97FA-A1238FB4205F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9BF5B34B-2145-45DA-8A41-86012981838E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9C85F305-43E0-4F48-B514-B6FF1BC534E1}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9D1D1123-B3F4-45EA-956B-3AAD2628C146}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9ED17196-4F97-4077-AD40-7BBC0C532047}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9F1E4335-FD0D-46CA-AD9B-FFB1984A03B5}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9F5D5F5D-48C6-4A97-86F7-21B7EB28F505}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{9FD6D5F6-C2F8-4B07-B753-B795EF0B0DFF}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A05E363A-AD1B-402B-9A1D-6729B6DE0344}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A0CF34B7-E456-406C-B13B-65444BCEC746}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A0DA6B97-C422-47AC-B86D-C0C6C4B376D2}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A108464E-5E1B-4EF1-ADB9-A79FEA80524A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A130349E-FCC4-408C-9650-3AFF97A2C617}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A164E6DF-386F-4E36-B1ED-81F756EF0B55}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A2768538-EF41-403A-8C66-851A6A538EC1}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A2CBE0EE-0349-441F-B0B4-44FB6156C02B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A3E5FD60-B797-4077-B141-8A250A18DDFA}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A46B527F-7667-48B3-BF56-84BE82EE8E16}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A533893E-1634-4D47-AD99-04D50A154CF1}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A5895F8F-06E5-4C68-878C-47688051F63A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A6381493-48EC-475E-A2E4-BD845CEDD270}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A801E003-5A0B-4F08-BECB-B3599623B322}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A84371FE-1718-4165-A9C3-D4A2682E41FA}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A8BC16C6-7023-46E8-876C-7374ABBD0FCD}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A901A9A2-7935-4AE1-B720-22F45C0F87BE}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{A97197C4-AF5F-4605-8CCB-EE05E207A9A1}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{AB5C83E5-31C0-4C63-B249-739A0E109E87}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{AB63C418-9F90-46F5-B7F4-A1B669C141A1}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{ABCFEECA-E576-42AF-B814-174A1323EF43}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{AC41173B-7CD8-4C4B-B522-3CC340840143}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{AD6B1840-9337-4090-B55B-190E1C54CE57}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{AFBBC737-95F2-4A33-A4A5-77000C020F76}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B092E2D3-C2FA-4AEB-9E61-EE312F2B0D23}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B0E16789-7F03-4AFC-ACBB-B0CC3056F658}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B11CA0A5-6057-4C19-A56B-E152D5E2C30B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B1416B6C-42B8-4A87-A95C-6012691E4350}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B1C0C99C-EBED-4B5A-984D-E416BC2C7173}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B3919DC4-5283-4A2C-8573-4C917059BE20}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B40FA5AF-E89D-429F-B6FA-38E943BAFBD9}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B4699F4B-22AF-4457-8581-10080BCFBB8F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B4B961FB-6BAA-43A7-8162-2CE5FB83EEDD}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B5565691-E3A9-4DE0-8A98-A13A8010C596}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B55E97BB-B750-49B3-A14F-8D949C307862}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B75E8C4A-E105-4B45-9EA9-80650D50204B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B767FB0A-6363-415B-A1D4-B843372DCCD8}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B7FCA272-C36F-4EE6-B455-DCFDE4EF9755}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B8785ACA-CDAD-4B7A-B3BE-40CF36C76C3E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B87F1846-FA6F-470A-BE2A-67F71AF9E78F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B899DF2D-2BD5-4077-B658-3DD4A9F5E381}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{B9C648C7-2DA4-4B6F-8012-12202D6758DF}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{BA3404FB-A1C9-432A-89C5-250598C0D5F1}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{BB6B2CC5-BD24-49BD-B6A9-19EBFE160D86}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{BD0F6EDE-1CA7-489C-8F88-9C356FBDF906}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{BD6BE72B-CDDA-4AAA-AD65-828296E2BB97}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{BDBB5766-277D-41B5-BB72-994BE48AC59C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{BDE909C7-9B71-4F12-928B-EE977658D7D3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{BE5FA4B7-77CE-4F36-A676-704D817033C2}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{BE80DC85-A8D5-4CB8-B774-AB31217052E8}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{BF5EA22E-85AF-494A-98EF-E9465788DD91}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{C180C5FA-1913-4F0B-8641-AC6E607699D0}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{C2B4BC54-33D3-44D3-A9C2-A4A60B076FDE}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{C2E3727A-DD16-46F4-AB3B-AC026AA91777}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{C2F17693-634D-46BF-9418-ABA88DAE0E1F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{C3421CA5-2074-4708-A764-FE8E45E25828}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{C3514A58-EEEC-4FC6-9912-39C67675756D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{C3ADD315-A38A-41C1-BDFB-0EDEA5DE7683}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{C4F7D2BE-0ADA-4818-84C4-AF79577C41FE}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{C7E58E0E-5A73-4DAA-B95F-D966AD3A64C6}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{C97094B3-251A-4C70-9135-5349BD3D4962}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{CA1EE268-DE9E-4702-BDF6-9EA42546499A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{CA7868EB-830B-4E8B-A440-1E5B7063FB06}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{CB1C00A4-2878-4533-9F99-1076A7F6779B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{CC87A2F3-1F9E-4055-99B6-8688588CC512}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{CC88F660-F846-4E7A-9E0A-91B9BE66EFD3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{CCDE835C-E75F-4536-9DF2-0A85BC1B0804}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{CDEB69D1-C71F-49C7-BC57-001B5E38912C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{CFBCA41D-D83E-486D-A655-3DF756E05928}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D10F4238-7780-476D-AC0A-1D189D75147E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D12734B5-4BF9-4AAB-BCDF-264C0029AC09}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D1ADFA77-3F59-456B-B2D1-E51C22EB0D51}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D2CC1E7D-5235-4A18-9028-B08CE9807B35}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D3BC23D3-5380-4FDB-8454-229F8375F01E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D3E095E7-0F50-4D8C-B06D-83C3F8CA93B3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D4508F3A-578C-463A-899C-8D4426DD4B54}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D4518F12-BBBB-4249-88B0-FDABEA1BDCDE}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D45B08A9-713D-4C14-A22A-77BD94861C91}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D49961DE-408D-4B34-B210-B4B9A95353D7}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D5211309-1987-4F6A-9A4E-9A9057DD1047}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D5B6B4D1-2AEB-40F4-8E31-EFD188BD3071}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D61DBB27-5FEF-48DE-80A1-4A01915FF098}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D670C50F-DCEC-4BA5-A400-CDE87F2CE6D7}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D6A1D0A1-D1EC-4989-89DF-EF4FF8DA8CFB}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D6DFA3DD-741E-4D9B-9E1C-F10467D7C586}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D732BE23-24E6-4E0A-89E9-B7739E1209CC}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D7FE4983-8C13-44DE-8CED-F82B3900EF14}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D887B51D-826D-4E74-A917-8FD3C03F71AF}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D8A67827-D8FC-4021-BA26-C31CA3FE3E15}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D8E6D522-9B91-4845-906A-4D08F2539DA4}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{D8F5C50A-979D-491F-8E17-585E58B73AE9}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DA0F2E1C-ED8D-49AE-B274-BA34DA0E6E7E}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DA3761BA-090C-49F7-A88E-B01D65CED77A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DA7F0EF1-BC7C-4918-91AC-A1DFF95370E8}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DA854C67-B43B-4C42-BDE1-64F534D0A8B7}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DBC9B2EC-693E-471A-9AC2-34411E2CA6B5}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DC02722F-0A01-45D3-806B-FAAA72BA6756}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DD8D25A4-0A68-49D4-8CC1-54555B0E22B8}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DE2AFFE4-6A9D-4F5D-A086-0CFA261F9E23}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DEA6D8D3-D021-4D56-B8B7-28A48E3B3C0B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DEC2ADDC-199D-4B2D-A5D8-C43DFA2AE48D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DED8E4E4-7F2C-44D1-96DE-CCF2AAD461A2}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DF5C50DA-2429-431B-895D-05782C7E22DC}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{DFB8962D-CF68-4278-B25B-12E2F5C7886B}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E1358D76-FEFE-496F-BF13-D7A3788F9648}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E15A9C25-947E-47FF-963E-E48E09B68F12}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E17376D6-5576-49E5-A9A8-C4A779FDDD06}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E1D45843-C78C-44C0-8F43-EC6A06D070C4}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E34F7F10-F6BC-4B4A-8588-ADFD94FE0266}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E4312477-C08D-404B-99A7-9B9C095224B4}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E614756E-F3CC-4B99-BD4C-3BA8ECBE8735}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E74EACA1-9223-4394-87D6-720B5463C63D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E75C8FD0-4BD4-482D-87AA-8BD37AFC4FA6}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E84FEE14-8663-4B76-A581-40D37A2A9C36}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E88247A1-A40E-4D00-947C-118D49584BFB}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E941B628-F439-49F8-86A2-CACBDFA92BEF}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E958CFC3-89B2-4214-AFE5-76AC68964CFC}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E985C26C-3FAA-40E0-ACE7-B2B18E5DD626}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{E9E6B813-9C2A-4EED-8ACC-5310EAD2B784}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{EA655222-1AE0-4B2A-9781-58E92D0170E0}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{EA937076-A094-43C4-A717-636B90B3B86F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{EB024A1C-313D-4349-ABB8-F129C98C0C1D}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{EBA58D18-5CCC-4806-ABC9-C8E6C71AFDCD}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{EBFD8EDF-A8C7-4797-9CF3-A34CED3712FD}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{EC0920F8-50C1-4350-A181-D5FA645B5693}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{EE79EE44-6A83-4643-A640-A574F3324D52}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F0A33F7B-C9B2-486A-BFB9-2F31FA5AEA4A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F10FE387-95C9-4D68-973B-F4A6F6EA695C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F13EBC82-9E75-4F60-BCDB-D8D2C482AD43}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F1920A2B-7A7D-4D0C-9297-85D0DAF9F7CC}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F29D3B5E-83ED-4112-A300-0E0677E245D9}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F3790997-C4FE-4051-A90F-5DE0C0623717}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F5BE1985-0038-4E4B-8372-DDF2F30DF9DA}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F6C2F59D-42FB-4B31-BA89-835F0189C19F}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F7003C47-727F-4884-9D48-AD34EBF4DC9A}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F7A79C73-5076-4F0A-8FC7-2D137C0CCDC3}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F876C27B-287F-4B9F-B1BC-2E1223333BAB}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{F9D90EE0-8D17-457D-A02C-CA472B5DBB7C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{FA7E5B27-D17A-41A6-A6D3-262D8AB9DF49}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{FAEECA7D-B4F6-4C68-85E0-C43BB6A7402C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{FAFB0137-A268-4570-B7E9-3B600143494C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{FB0D452E-3945-4921-8B35-6C8697AA4D8C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{FB11A890-54A1-44F1-AEF1-720553FC6978}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{FB8C9E16-4713-4DF1-B6BB-C092C850E207}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{FBC2CFC5-C71E-430E-B272-E97BB1FCF6B2}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{FC0C7095-3A5B-4351-B333-0DC3415649BE}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{FE03D48B-B715-4B36-8B52-3E0153371E0C}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{FE155A3C-938E-4518-873B-CE3B710F9D17}
Successfully deleted: [Empty Folder] C:\Users\Pascal\appdata\local\{FE2A52E0-66C1-4F1E-AAE4-4775C2ED62E2}



~~~ FireFox

Successfully deleted: [Folder] C:\Users\Pascal\AppData\Roaming\mozilla\firefox\profiles\24te1tav.default\smartbar
Successfully deleted the following from C:\Users\Pascal\AppData\Roaming\mozilla\firefox\profiles\24te1tav.default\prefs.js

user_pref("CT3297265.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3297265.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3297265.FirstTime", "true");
user_pref("CT3297265.FirstTimeFF3", "true");
user_pref("CT3297265.RestartDialogFirstTime", "false");
user_pref("CT3297265.RestartDialogShouldDisplay", "false");
user_pref("CT3297265.UserID", "UN30640303243155537");
user_pref("CT3297265.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT3297265.appOptions", "{}");
user_pref("CT3297265.countryCode", "DE");
user_pref("CT3297265.dum", "2");
user_pref("CT3297265.embeddedsData", "[{\"appId\":\"130102701223206401\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"get
user_pref("CT3297265.firstTimeDialogOpened", "true");
user_pref("CT3297265.fixPageNotFoundErrorByUser", "FALSE");
user_pref("CT3297265.fixPageNotFoundErrorInHidden", "true");
user_pref("CT3297265.fullUserID", "UN30640303243155537.IN.20130820144906");
user_pref("CT3297265.installType", "Unknown");
user_pref("CT3297265.isCheckedStartAsHidden", true);
user_pref("CT3297265.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3297265.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT3297265.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3297265.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://www.trovi.com/?gd=&ctid=CT3297265&octid=CT3297265&ISID=ISID_ID&SearchSource=15&CUI=UN306
user_pref("CT3297265.lastVersion", "10.31.0.526");
user_pref("CT3297265.mam_gk_installer_preapproved.enc", "VFJVRQ==");
user_pref("CT3297265.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fschnittberichte.com%2F\",\"EB_MAIN_FRAME_TITLE\":\"Schnittberichte.com%20\",\"EB_SEARCH_TER
user_pref("CT3297265.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3297265.performedDomainChangesMigration", "true");
user_pref("CT3297265.revertSettingsEnabled", "false");
user_pref("CT3297265.search.searchAppId", "130102701223206401");
user_pref("CT3297265.search.searchCount", "0");
user_pref("CT3297265.searchFromAddressBarEnabledByUser", "false");
user_pref("CT3297265.searchInNewTabEnabledByUser", "false");
user_pref("CT3297265.searchInNewTabEnabledInHidden", "true");
user_pref("CT3297265.searchSuggestEnabledByUser", "false");
user_pref("CT3297265.searchUninstallUserMode", "2");
user_pref("CT3297265.searchUserMode", "2");
user_pref("CT3297265.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3297265.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3297265.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT3297265.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3297265\"}");
user_pref("CT3297265.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DivXBrowserBarDE.OurToolbar.com//xpi\"}");
user_pref("CT3297265.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DivX Browser Bar DE \"}");
user_pref("CT3297265.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3297265.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT3297265.serviceLayer_services_Configuration_lastUpdate", "1401044039829");
user_pref("CT3297265.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1400192202231");
user_pref("CT3297265.serviceLayer_services_appsMetadata_lastUpdate", "1401044038518");
user_pref("CT3297265.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1400192202068");
user_pref("CT3297265.serviceLayer_services_login_10.30.1.502_lastUpdate", "1400706472147");
user_pref("CT3297265.serviceLayer_services_login_10.31.0.526_lastUpdate", "1401044038171");
user_pref("CT3297265.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1400192202200");
user_pref("CT3297265.serviceLayer_services_searchAPI_lastUpdate", "1401044039676");
user_pref("CT3297265.serviceLayer_services_serviceMap_lastUpdate", "1401044038661");
user_pref("CT3297265.serviceLayer_services_setupAPI_lastUpdate", "1400192196037");
user_pref("CT3297265.serviceLayer_services_toolbarContextMenu_lastUpdate", "1401044038625");
user_pref("CT3297265.serviceLayer_services_toolbarSettings_lastUpdate", "1401044038828");
user_pref("CT3297265.serviceLayer_services_translation_lastUpdate", "1401044038698");
user_pref("CT3297265.settingsINI", true);
user_pref("CT3297265.showToolbarPermission", "false");
user_pref("CT3297265.smartbar.CTID", "CT3297265");
user_pref("CT3297265.smartbar.Uninstall", "0");
user_pref("CT3297265.smartbar.toolbarName", "DivX Browser Bar DE ");
user_pref("CT3297265.toolbarBornServerTime", "15-5-2014");
user_pref("CT3297265.toolbarCurrentServerTime", "25-5-2014");
user_pref("CT3297265.toolbarInstallDate", "16-05-2014 00:16:35");
user_pref("CT3297265.toolbarLoginClientTime", "Fri May 16 2014 00:16:34 GMT+0200");
user_pref("CT3297265_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1401044031520,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("smartbar.machineId", "MJHQ4J1JDGQFJYQ0Q/XS5SEDH/+JKDNWIQTI2QB1T1ZWQBMU4FHL11QMBOEBKBBLGGJXLGDDYS1SCERXJPVJHA");
Emptied folder: C:\Users\Pascal\AppData\Roaming\mozilla\firefox\profiles\24te1tav.default\minidumps [239 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.05.2014 at 21:05:16,89
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Das ist schon mal das Log von JRT

Code:

ATTFilter

# AdwCleaner v3.210 - Bericht erstellt am 25/05/2014 um 21:10:24
# Aktualisiert 19/05/2014 von Xplode
# Betriebssystem : Windows 7 Enterprise Service Pack 1 (32 bits)
# Benutzername : Pascal - PASCAL-PC
# Gestartet von : C:\Users\Pascal\Downloads\adwcleaner_3.210.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\AVG Secure Search
Ordner Gelöscht : C:\ProgramData\Uniblue
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eSupport.com
Ordner Gelöscht : C:\Program Files\AVG Secure Search
Ordner Gelöscht : C:\Program Files\eSupport.com
Ordner Gelöscht : C:\Program Files\Uniblue
[x] Nicht Gelöscht : C:\Program Files\Vuze
Ordner Gelöscht : C:\Program Files\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Windows\system32\SearchProtect
Ordner Gelöscht : C:\Users\Gast\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\Vuze_Remote
Ordner Gelöscht : C:\Users\Pascal\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Pascal\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Pascal\AppData\Local\eSupport.com
Ordner Gelöscht : C:\Users\Pascal\AppData\Local\PutLockerDownloader
Ordner Gelöscht : C:\Users\Pascal\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Pascal\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Pascal\AppData\Roaming\Uniblue
Ordner Gelöscht : C:\Users\Pascal\AppData\Roaming\Windows Net Data
Ordner Gelöscht : C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movie2KDownloader.com
Ordner Gelöscht : C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Smartbar
Ordner Gelöscht : C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\ValueApps
Ordner Gelöscht : C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\CT3297265
Ordner Gelöscht : C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
Ordner Gelöscht : C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1}
Ordner Gelöscht : C:\Users\Pascal\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v29.0.1 (de)

[ Datei : C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\prefs.js ]

Zeile gelöscht : user_pref("CT3297265.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3297265.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3297265.FirstTime", "true");
Zeile gelöscht : user_pref("CT3297265.FirstTimeFF3", "true");
Zeile gelöscht : user_pref("CT3297265.RestartDialogFirstTime", "false");
Zeile gelöscht : user_pref("CT3297265.RestartDialogShouldDisplay", "false");
Zeile gelöscht : user_pref("CT3297265.UserID", "UN30640303243155537");
Zeile gelöscht : user_pref("CT3297265.addressBarTakeOverEnabledInHidden", "true");
Zeile gelöscht : user_pref("CT3297265.appOptions", "{}");
Zeile gelöscht : user_pref("CT3297265.countryCode", "DE");
Zeile gelöscht : user_pref("CT3297265.dum", "2");
Zeile gelöscht : user_pref("CT3297265.embeddedsData", "[{\"appId\":\"130102701223206401\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Zeile gelöscht : user_pref("CT3297265.firstTimeDialogOpened", "true");
Zeile gelöscht : user_pref("CT3297265.fixPageNotFoundErrorByUser", "FALSE");
Zeile gelöscht : user_pref("CT3297265.fixPageNotFoundErrorInHidden", "true");
Zeile gelöscht : user_pref("CT3297265.fullUserID", "UN30640303243155537.IN.20130820144906");
Zeile gelöscht : user_pref("CT3297265.isCheckedStartAsHidden", true);
Zeile gelöscht : user_pref("CT3297265.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3297265.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3297265.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3297265.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://www.trovi.com/?gd=&ctid=CT3297265&octid=CT3297265&ISID=ISID_ID&SearchSource=15&CUI=UN30640303243155537&Lay=1&UM=2[...]
Zeile gelöscht : user_pref("CT3297265.lastVersion", "10.31.0.526");
Zeile gelöscht : user_pref("CT3297265.mam_gk_installer_preapproved.enc", "VFJVRQ==");
Zeile gelöscht : user_pref("CT3297265.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.trojaner-board.de%2F154191-mail-delivery-service-seit-mehr-1-monat-bekomme-problem-welt.html\",\"EB_MAIN_FRAME_T[...]
Zeile gelöscht : user_pref("CT3297265.performedDomainChangesMigration", "true");
Zeile gelöscht : user_pref("CT3297265.revertSettingsEnabled", "false");
Zeile gelöscht : user_pref("CT3297265.search.searchAppId", "130102701223206401");
Zeile gelöscht : user_pref("CT3297265.search.searchCount", "0");
Zeile gelöscht : user_pref("CT3297265.searchFromAddressBarEnabledByUser", "false");
Zeile gelöscht : user_pref("CT3297265.searchInNewTabEnabledByUser", "false");
Zeile gelöscht : user_pref("CT3297265.searchInNewTabEnabledInHidden", "true");
Zeile gelöscht : user_pref("CT3297265.searchSuggestEnabledByUser", "false");
Zeile gelöscht : user_pref("CT3297265.searchUninstallUserMode", "2");
Zeile gelöscht : user_pref("CT3297265.searchUserMode", "2");
Zeile gelöscht : user_pref("CT3297265.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3297265\"}");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DivXBrowserBarDE.OurToolbar.com//xpi\"}");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DivX Browser Bar DE \"}");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_Configuration_lastUpdate", "1401044786302");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1401044785095");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_appsMetadata_lastUpdate", "1401044784932");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1401044784893");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_login_10.31.0.526_lastUpdate", "1401044784614");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1401044784995");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_searchAPI_lastUpdate", "1401044785692");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_serviceMap_lastUpdate", "1401044784839");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_setupAPI_lastUpdate", "1401044785697");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_toolbarContextMenu_lastUpdate", "1401044785028");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_toolbarSettings_lastUpdate", "1401044784962");
Zeile gelöscht : user_pref("CT3297265.serviceLayer_services_translation_lastUpdate", "1401044785064");
Zeile gelöscht : user_pref("CT3297265.settingsINI", true);
Zeile gelöscht : user_pref("CT3297265.showToolbarPermission", "false");
Zeile gelöscht : user_pref("CT3297265.smartbar.CTID", "CT3297265");
Zeile gelöscht : user_pref("CT3297265.smartbar.Uninstall", "0");
Zeile gelöscht : user_pref("CT3297265.smartbar.toolbarName", "DivX Browser Bar DE ");
Zeile gelöscht : user_pref("CT3297265.toolbarCurrentServerTime", "25-5-2014");
Zeile gelöscht : user_pref("CT3297265.toolbarInstallDate", "25-05-2014 21:06:23");
Zeile gelöscht : user_pref("CT3297265.toolbarLoginClientTime", "Sun May 25 2014 21:06:22 GMT+0200");
Zeile gelöscht : user_pref("CT3297265_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1401044777698,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Zeile gelöscht : user_pref("smartbar.machineId", "MJHQ4J1JDGQFJYQ0Q/XS5SEDH/+JKDNWIQTI2QB1T1ZWQBMU4FHL11QMBOEBKBBLGGJXLGDDYS1SCERXJPVJHA");
Zeile gelöscht : user_pref("valueApps.CT3297265.mam_gk_currentVersion", "312E31332E302E3137");
Zeile gelöscht : user_pref("valueApps.CT3297265.mam_gk_currentVersion.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3297265.mam_gk_migrated_from_ls", "31");
Zeile gelöscht : user_pref("valueApps.CT3297265.mam_gk_migrated_from_ls.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3297265.mam_gk_userBornDate", "4E2F41");
Zeile gelöscht : user_pref("valueApps.CT3297265.mam_gk_userBornDate.storedInFile", false);

-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [39643 octets] - [15/05/2014 18:41:44]
AdwCleaner[R1].txt - [10416 octets] - [25/05/2014 21:08:19]
AdwCleaner[S0].txt - [39718 octets] - [15/05/2014 18:45:59]
AdwCleaner[S1].txt - [10152 octets] - [25/05/2014 21:10:24]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [10213 octets] ##########

Das ist das Log vom Adwcleaner von Malware kommt noch das dauert eine weile noch

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 25.05.2014
Suchlauf-Zeit: 23:55:44
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.05.25.07
Rootkit Datenbank: v2014.05.21.01
Lizenz: Premium
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Pascal

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 301413
Verstrichene Zeit: 51 Min, 10 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 1
PUP.Optional.Conduit.A, C:\Users\Pascal\AppData\Local\temp\CT3288691, In Quarantäne, [4cc399bb2c4f280ead604f2817ebd030], 

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-05-2014 02
Ran by Pascal (administrator) on PASCAL-PC on 25-05-2014 23:59:42
Running from C:\Users\Pascal\Downloads
Platform: Microsoft Windows 7 Enterprise  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Logitech, Inc.) C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodag.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodtray.exe
(Logitech Inc.) C:\Program Files\Logitech\SetPoint\LBTWiz.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files\MagicTune Premium\GammaTray.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Ralink Technology, Corp.) C:\Program Files\RALINK\Common\RaUI.exe
(SEC) C:\Program Files\MagicTune Premium\MagicTune.exe
(RPworld.de) C:\Users\Pascal\Downloads\FritzBox_Tray_Tool_1.2\FritzBox_Tray_Tool.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL2\KHALMNPR.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MagicTuneLauncher] => C:\Program Files\MagicTune Premium\MagicTuneLauncher.exe [51712 2011-01-04] ()
HKLM\...\Run: [VirtualCloneDrive] => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-06-17] (Elaborate Bytes AG)
HKLM\...\Run: [FUFAXSTM] => C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [OODefragTray] => C:\Program Files\OO Software\Defrag\oodtray.exe [3257640 2014-01-24] (O&O Software GmbH)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [Bluetooth Connection Assistant] => LBTWIZ.EXE -silent
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [Nvtmru] => C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AllShareAgent] => C:\Program Files\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-03-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap.dll [982232 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKU\.DEFAULT\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [894344 2013-02-05] (Autodesk, Inc.)
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Policies\Explorer: [] 
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [] 
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Policies\Explorer: [] 
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\Policies\Explorer: [] 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GammaTray.lnk
ShortcutTarget: GammaTray.lnk -> C:\Program Files\MagicTune Premium\GammaTray.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk
ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\O&O Defrag Tray.lnk
ShortcutTarget: O&O Defrag Tray.lnk -> C:\Windows\Installer\{9A111B78-51E3-48ED-B3CF-F76E004C2CA9}\app_icon.ico ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ralink Wireless Utility.lnk
ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.)
Startup: C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fritz!Box Tray Tool.lnk
ShortcutTarget: Fritz!Box Tray Tool.lnk -> C:\Users\Pascal\Downloads\FritzBox_Tray_Tool_1.2\FritzBox_Tray_Tool.exe (RPworld.de)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://schnittberichte.com/
FF NetworkProxy: "ftp", "91.121.58.235"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "91.121.58.235"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "91.121.58.235"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "91.121.58.235"
FF NetworkProxy: "ssl_port", 3128
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @Nero.com/KM - C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Amazon-Icon - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\amazon-icon@giga.de [2014-01-02]
FF Extension: Разпознаване на устройство Logitech - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\DeviceDetection@logitech.com [2012-08-01]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\ich@maltegoetz.de [2013-12-12]
FF Extension: Nokia Maps 3D browser plugin - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\maps@ovi.com [2012-09-02]
FF Extension: LastPass - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\support@lastpass.com [2014-03-24]
FF Extension: SaveAs - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\5032a6c925cac@5032a6c925ce5.info.xpi [2012-08-20]
FF Extension: Personas Plus - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\personas@christopher.beard.xpi [2012-08-01]
FF Extension: Stealthy - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\stealthyextension@gmail.com.xpi [2012-12-19]
FF Extension: FlashGot - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-03-13]
FF Extension: {799fe388-8c3f-4d0b-b490-c748f2dcd714} - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{799fe388-8c3f-4d0b-b490-c748f2dcd714}.xpi [2014-01-08]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: PDF Print Converter Light - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{bf87ed13-b668-4984-b4d3-4d0b1cb35e33}.xpi [2014-01-09]
FF Extension: Adblock Plus - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-08-01]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.)
R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [153600 2009-09-14] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [121856 2009-09-14] (SEIKO EPSON CORPORATION)
S4 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG)
S4 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®)
S3 FlexNet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1064312 2014-02-06] (Flexera Software LLC)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [762192 2013-07-18] (Nero AG)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14658848 2013-12-10] (NVIDIA Corporation)
R2 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [1387304 2014-01-24] (O&O Software GmbH)
S4 SamsungAllShareV2.0; C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [25504 2012-03-02] (Samsung Electronics Co., Ltd.)
S4 SimpleSlideShowServer; C:\Program Files\Samsung\AllShare\AllShareSlideShowService.exe [27584 2012-03-02] (Samsung Electronics Co., Ltd.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1731896 2014-01-28] (TuneUp Software)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
S4 vToolbarUpdater18.1.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121248 2012-08-26] (SlySoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42272 2014-04-28] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-09-30] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69240 2013-12-18] (Avira Operations GmbH & Co. KG)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
R3 cmuda3; C:\Windows\System32\drivers\cmuda3.sys [1482048 2007-04-26] (C-Media Inc)
S3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)
S3 DFUBTUSB; C:\Windows\System32\Drivers\frmupgr.sys [27536 2007-01-03] (Broadcom Corporation.)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] ()
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [586752 2010-10-22] (AVM GmbH)
R1 MagicTune; C:\Windows\system32\drivers\MTiCtwl.sys [14336 2010-04-22] (Samsung Electronics, Inc. )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [107736 2014-05-25] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51416 2014-04-03] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [6504 2009-05-13] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2013-12-05] (NVIDIA Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-30] (Avira GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
S3 catchme; \??\C:\Users\Pascal\AppData\Local\Temp\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-25 23:55 - 2014-05-25 23:58 - 00001233 _____ () C:\Users\Pascal\Desktop\mbam.txt
2014-05-25 22:52 - 2014-05-25 22:52 - 00001225 _____ () C:\Malwarebytes.txt
2014-05-25 22:52 - 2014-05-25 22:52 - 00000000 ____D () C:\Users\Pascal\Downloads\FRST-OlderVersion
2014-05-25 22:20 - 2014-05-25 22:20 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{93C6C2A8-F269-4106-8A61-F3D43762EF29}
2014-05-25 21:05 - 2014-05-25 21:05 - 00051136 _____ () C:\Users\Pascal\Desktop\JRT.txt
2014-05-25 20:59 - 2014-05-25 20:59 - 01016261 _____ (Thisisu) C:\Users\Pascal\Downloads\JRT.exe
2014-05-25 20:59 - 2014-05-25 20:59 - 00000000 ____D () C:\Windows\ERUNT
2014-05-25 20:57 - 2014-05-25 20:58 - 01326389 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.210.exe
2014-05-25 20:49 - 2014-05-25 21:14 - 00000862 _____ () C:\Windows\PFRO.log
2014-05-23 15:01 - 2014-05-23 15:01 - 00019317 _____ () C:\ComboFix.txt
2014-05-23 14:31 - 2014-05-23 15:01 - 00000000 ____D () C:\Qoobox
2014-05-23 14:31 - 2014-05-23 15:01 - 00000000 ____D () C:\ComboFix
2014-05-23 14:31 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-23 14:31 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-23 14:31 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-23 14:31 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-23 14:31 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-23 14:31 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-23 14:31 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-23 14:31 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-23 14:30 - 2014-05-23 15:00 - 00000000 ____D () C:\Windows\erdnt
2014-05-23 14:29 - 2014-05-23 14:30 - 05200426 ____R (Swearware) C:\Users\Pascal\Downloads\ComboFix.exe
2014-05-22 18:44 - 2014-05-25 21:14 - 00000672 _____ () C:\Windows\setupact.log
2014-05-22 18:44 - 2014-05-22 18:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-21 23:40 - 2014-05-21 23:40 - 00000925 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-21 23:40 - 2014-05-21 23:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-21 23:37 - 2014-05-21 23:37 - 03671432 _____ (Piriform Ltd) C:\Users\Pascal\Downloads\ccsetup413_slim.exe
2014-05-21 22:25 - 2014-05-21 22:28 - 00038571 _____ () C:\Users\Pascal\Downloads\Addition.txt
2014-05-21 22:24 - 2014-05-25 23:59 - 00019984 _____ () C:\Users\Pascal\Downloads\FRST.txt
2014-05-21 22:22 - 2014-05-25 23:59 - 00000000 ____D () C:\FRST
2014-05-21 22:20 - 2014-05-25 22:52 - 01056256 _____ (Farbar) C:\Users\Pascal\Downloads\FRST.exe
2014-05-18 22:08 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Local\1&1
2014-05-15 18:43 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-05-15 18:41 - 2014-05-25 21:12 - 00000000 ____D () C:\AdwCleaner
2014-05-15 18:40 - 2014-05-15 18:40 - 01325827 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.208.exe
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\Program Files\CPUID
2014-05-06 19:36 - 2014-05-06 19:36 - 00000000 ____D () C:\ProgramData\Curse Client
2014-05-05 22:25 - 2014-05-19 22:08 - 00000625 _____ () C:\Users\Pascal\Documents\Uninstall STAR WARS The Old Republic.log
2014-04-29 19:19 - 2014-04-29 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2014-04-28 19:25 - 2014-05-25 23:04 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-28 19:24 - 2014-04-28 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 19:23 - 2014-04-28 19:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 19:23 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-28 19:23 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

==================== One Month Modified Files and Folders =======

2014-05-25 23:59 - 2014-05-21 22:24 - 00019984 _____ () C:\Users\Pascal\Downloads\FRST.txt
2014-05-25 23:59 - 2014-05-21 22:22 - 00000000 ____D () C:\FRST
2014-05-25 23:58 - 2014-05-25 23:55 - 00001233 _____ () C:\Users\Pascal\Desktop\mbam.txt
2014-05-25 23:48 - 2012-08-01 21:53 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-25 23:04 - 2014-04-28 19:25 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-25 22:59 - 2013-07-10 12:47 - 00994816 ___SH () C:\Users\Pascal\Documents\Thumbs.db
2014-05-25 22:52 - 2014-05-25 22:52 - 00001225 _____ () C:\Malwarebytes.txt
2014-05-25 22:52 - 2014-05-25 22:52 - 00000000 ____D () C:\Users\Pascal\Downloads\FRST-OlderVersion
2014-05-25 22:52 - 2014-05-21 22:20 - 01056256 _____ (Farbar) C:\Users\Pascal\Downloads\FRST.exe
2014-05-25 22:20 - 2014-05-25 22:20 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{93C6C2A8-F269-4106-8A61-F3D43762EF29}
2014-05-25 21:27 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-25 21:27 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-25 21:18 - 2012-07-31 23:35 - 01155432 _____ () C:\Windows\WindowsUpdate.log
2014-05-25 21:14 - 2014-05-25 20:49 - 00000862 _____ () C:\Windows\PFRO.log
2014-05-25 21:14 - 2014-05-22 18:44 - 00000672 _____ () C:\Windows\setupact.log
2014-05-25 21:14 - 2012-08-01 00:47 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-25 21:14 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-25 21:12 - 2014-05-15 18:41 - 00000000 ____D () C:\AdwCleaner
2014-05-25 21:05 - 2014-05-25 21:05 - 00051136 _____ () C:\Users\Pascal\Desktop\JRT.txt
2014-05-25 20:59 - 2014-05-25 20:59 - 01016261 _____ (Thisisu) C:\Users\Pascal\Downloads\JRT.exe
2014-05-25 20:59 - 2014-05-25 20:59 - 00000000 ____D () C:\Windows\ERUNT
2014-05-25 20:58 - 2014-05-25 20:57 - 01326389 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.210.exe
2014-05-25 20:52 - 2012-08-17 09:41 - 00000000 ____D () C:\Users\Pascal\AppData\Local\CrashDumps
2014-05-23 15:01 - 2014-05-23 15:01 - 00019317 _____ () C:\ComboFix.txt
2014-05-23 15:01 - 2014-05-23 14:31 - 00000000 ____D () C:\Qoobox
2014-05-23 15:01 - 2014-05-23 14:31 - 00000000 ____D () C:\ComboFix
2014-05-23 15:01 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-05-23 15:01 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-05-23 15:00 - 2014-05-23 14:30 - 00000000 ____D () C:\Windows\erdnt
2014-05-23 14:59 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-05-23 14:30 - 2014-05-23 14:29 - 05200426 ____R (Swearware) C:\Users\Pascal\Downloads\ComboFix.exe
2014-05-22 19:24 - 2012-10-23 14:05 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\MediaMonkey
2014-05-22 18:44 - 2014-05-22 18:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-22 00:05 - 2012-09-16 20:17 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\TS3Client
2014-05-22 00:05 - 2012-08-02 23:34 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Azureus
2014-05-21 23:40 - 2014-05-21 23:40 - 00000925 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-21 23:40 - 2014-05-21 23:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-21 23:40 - 2012-08-02 23:22 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-21 23:37 - 2014-05-21 23:37 - 03671432 _____ (Piriform Ltd) C:\Users\Pascal\Downloads\ccsetup413_slim.exe
2014-05-21 23:35 - 2012-09-16 20:15 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-05-21 22:28 - 2014-05-21 22:25 - 00038571 _____ () C:\Users\Pascal\Downloads\Addition.txt
2014-05-20 22:58 - 2013-08-10 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
2014-05-19 22:08 - 2014-05-05 22:25 - 00000625 _____ () C:\Users\Pascal\Documents\Uninstall STAR WARS The Old Republic.log
2014-05-19 22:05 - 2014-04-14 19:18 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\elsterformular
2014-05-19 22:05 - 2014-04-14 19:15 - 00000000 ____D () C:\ProgramData\elsterformular
2014-05-19 21:05 - 2012-08-01 23:55 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Nero
2014-05-19 20:34 - 2013-06-02 21:51 - 00000000 ____D () C:\Windows\Minidump
2014-05-19 20:34 - 2010-09-14 21:40 - 00000000 ____D () C:\Windows\Panther
2014-05-19 20:18 - 2013-11-06 23:09 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Battle.net
2014-05-19 19:04 - 2012-08-07 19:25 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-18 22:08 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Local\1&1
2014-05-15 19:49 - 2012-08-01 21:53 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-15 19:49 - 2012-08-01 21:53 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-05-15 18:40 - 2014-05-15 18:40 - 01325827 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.208.exe
2014-05-14 19:39 - 2013-12-06 00:37 - 00000000 ____D () C:\Program Files\Hearthstone
2014-05-13 17:22 - 2012-08-17 10:37 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-05-12 23:10 - 2014-03-31 18:59 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-09 16:05 - 2012-09-03 23:34 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Deployment
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\Program Files\CPUID
2014-05-07 18:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-05-06 21:30 - 2013-05-07 12:33 - 00000000 ____D () C:\Users\Gast
2014-05-06 19:36 - 2014-05-06 19:36 - 00000000 ____D () C:\ProgramData\Curse Client
2014-05-06 18:59 - 2012-08-01 00:08 - 00146320 _____ () C:\Users\Pascal\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-06 18:58 - 2009-07-14 06:33 - 00492128 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-06 00:01 - 2012-08-05 22:30 - 00000000 ____D () C:\Program Files\TeamViewer
2014-05-05 23:59 - 2014-03-13 02:47 - 00000000 ____D () C:\Program Files\Easeware
2014-05-05 22:31 - 2010-09-14 20:52 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-05 22:24 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-05 22:23 - 2013-12-25 02:41 - 00000000 ____D () C:\Users\Pascal\Documents\NeroVideo
2014-05-05 19:31 - 2012-08-01 22:22 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Windows Live Writer
2014-05-04 21:51 - 2013-11-06 23:09 - 00000000 ____D () C:\Program Files\Battle.net
2014-04-29 19:19 - 2014-04-29 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2014-04-29 19:19 - 2014-03-13 12:16 - 00000000 ____D () C:\Program Files\MyPhoneExplorer
2014-04-29 18:41 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-04-28 23:18 - 2013-07-05 13:09 - 00003730 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml
2014-04-28 23:14 - 2012-11-26 22:38 - 00042272 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys
2014-04-28 19:24 - 2014-04-28 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 19:24 - 2014-04-28 19:23 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 19:24 - 2012-08-01 00:22 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Malwarebytes
2014-04-28 19:23 - 2012-08-01 00:22 - 00000000 ____D () C:\ProgramData\Malwarebytes

Files to move or delete:
====================
C:\Users\Pascal\taskmgr.exe


Some content of TEMP:
====================
C:\Users\Pascal\AppData\Local\temp\avgnt.exe
C:\Users\Pascal\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-19 23:17

==================== End Of Log ============================

--- --- ---

--- --- ---

Das ist das frische Log von FRST

schrauber · 26.05.2014, 19:46

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Ironforge · 27.05.2014, 22:39

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=cdeeb602ca065348882dd56ba9d3ccf0
# engine=18420
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-05-27 12:08:04
# local_time=2014-05-27 02:08:04 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 95 28921 20617612 21659 0
# compatibility_mode=5893 16776573 100 94 442085 152780475 0 0
# scanned=465550
# found=23
# cleaned=0
# scan_time=15975
sh=93510E07EBD463BE51052EC8114EC16C5423103E ft=0 fh=0000000000000000 vn="Win32/Conduit.SearchProtect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Mozilla Firefox\browser\nsprotector.js.vir"
sh=A1280B1F085B8284DC157EC359BD1ADA091CFE7E ft=1 fh=d8aa3384d1249a40 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\LocalLow\Vuze_Remote\ldrtbVuze.dll.vir"
sh=92E84D2216A7763D580E42FA2493CCF67D0D0560 ft=1 fh=e8efc42494afd9f6 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\LocalLow\Vuze_Remote\tbVuze.dll.vir"
sh=B5C93DA0C608B26C9487ABC49CCB643C9A15ED33 ft=1 fh=75f1c65aa8a331ed vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\LocalLow\Vuze_Remote\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin\PriceGongIE.dll.vir"
sh=2078FB898A2BFF1B8B5E8CE50F6055C4F7C9C945 ft=1 fh=79e738e0bfd4ba80 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1}\ctypes\FirefoxCtype.dll.vir"
sh=62C3EB9E3DDF686683DBC26DF40B345DEA8A1A8F ft=1 fh=032383a0d91b642e vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1}\Plugins\npFirefoxPlugin.dll.vir"
sh=C1C547EE61E369232A71086B14C3DA1EA0F5DFEC ft=1 fh=2f7a5f77aa61c184 vn="Win64/Toolbar.Conduit.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\DivX_Browser_Bar_DE\hk64tbDivX.dll"
sh=F59FAFF6995AAE4B0EEED57F6035FE33CD92666F ft=1 fh=6dd03b204708c051 vn="Win32/Toolbar.Conduit.W evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\DivX_Browser_Bar_DE\hktbDivX.dll"
sh=0426FF7F92792C8E0202A07286A02371FD4DB89C ft=1 fh=bb71dc653bc49e1b vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\DivX_Browser_Bar_DE\ldrtbDivX.dll"
sh=E4BE1B342006EF4CFBC51EC1D5CAEB94AFD9B032 ft=1 fh=5fb9d38220bce25d vn="Win32/Toolbar.Conduit.W evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll"
sh=A54B27FD7BD7B1EC1F3101502836C620D6F11639 ft=1 fh=c01b70bae45c3c6e vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\DivX_Browser_Bar_DE\tbDivX.dll"
sh=F3B8D8E33E443BA303F62E26E520E947A401C1FA ft=0 fh=0000000000000000 vn="BAT/TrojanDownloader.Ftp.NNP Trojaner" ac=I fn="C:\ProgramData\Skype\copy.bat"
sh=252405681BB28BAF29E2B0981817BCB07D72238D ft=0 fh=0000000000000000 vn="BAT/TrojanDownloader.Ftp.NNP Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\ProgramData\adob\123.bat.vir"
sh=DDCBAD7D8139B23BFA75F04E947ADF52FC1D6EC1 ft=0 fh=0000000000000000 vn="REG/RunKeys.NAI Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\ProgramData\adob\123.reg.vir"
sh=DFC025258DD398BF07C157707347402C91F18AD4 ft=1 fh=ae550d86ea8a1b8a vn="BAT/TrojanDownloader.Ftp.NNP Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\ProgramData\adob\copy.exe.vir"
sh=F3B8D8E33E443BA303F62E26E520E947A401C1FA ft=0 fh=0000000000000000 vn="BAT/TrojanDownloader.Ftp.NNP Trojaner" ac=I fn="C:\Users\All Users\Skype\copy.bat"
sh=3E694845DC53F08AC299CA23DA974C55F4B62E20 ft=0 fh=0000000000000000 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\FM5NNBU2\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}[1].cpi"
sh=C1C547EE61E369232A71086B14C3DA1EA0F5DFEC ft=1 fh=2f7a5f77aa61c184 vn="Win64/Toolbar.Conduit.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Pascal\AppData\LocalLow\DivX_Browser_Bar_DE\hk64tbDivX.dll"
sh=F59FAFF6995AAE4B0EEED57F6035FE33CD92666F ft=1 fh=6dd03b204708c051 vn="Win32/Toolbar.Conduit.W evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Pascal\AppData\LocalLow\DivX_Browser_Bar_DE\hktbDivX.dll"
sh=0426FF7F92792C8E0202A07286A02371FD4DB89C ft=1 fh=bb71dc653bc49e1b vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Pascal\AppData\LocalLow\DivX_Browser_Bar_DE\ldrtbDivX.dll"
sh=A54B27FD7BD7B1EC1F3101502836C620D6F11639 ft=1 fh=c01b70bae45c3c6e vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Pascal\AppData\LocalLow\DivX_Browser_Bar_DE\tbDivX.dll"
sh=E75E2E587BAAFFA6DC8B6A8C20A7152E2DAE532E ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\extensions\5032a6c925cac@5032a6c925ce5.info.xpi"
sh=7B5DC8A9DDE8D7F48522978009636E88B9878D82 ft=0 fh=0000000000000000 vn="Win32/Adware.ADON evtl. unerwünschte Anwendung" ac=I fn="G:\Festplatte D\Windows 7 Pascal Datein\Pascal\Desktop\eBay.lnk"

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.83  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 TuneUp Utilities 2013   
 TuneUp Utilities 2013 13.0.2013.194  
 TuneUp Utilities Language Pack (de-DE) 
 TuneUp Utilities 2013   
 TuneUp Utilities Language Pack (de-DE) 
 CCleaner     
 JavaFX 2.1.1    
 Java 7 Update 45  
 Java version out of Date! 
 Adobe Flash Player 	13.0.0.214  
 Adobe Reader 10.1.10 Adobe Reader out of Date!  
 Mozilla Firefox (29.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 Malwarebytes Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-05-2014 02
Ran by Pascal (administrator) on PASCAL-PC on 27-05-2014 23:34:48
Running from C:\Users\Pascal\Downloads
Platform: Microsoft Windows 7 Enterprise  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Logitech, Inc.) C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
(Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodtray.exe
(Logitech Inc.) C:\Program Files\Logitech\SetPoint\LBTWiz.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE
(SEC) C:\Program Files\MagicTune Premium\MagicTune.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE
() C:\Program Files\MagicTune Premium\GammaTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Ralink Technology, Corp.) C:\Program Files\RALINK\Common\RaUI.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(RPworld.de) C:\Users\Pascal\Downloads\FritzBox_Tray_Tool_1.2\FritzBox_Tray_Tool.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL2\KHALMNPR.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodag.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
() C:\Users\Pascal\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MagicTuneLauncher] => C:\Program Files\MagicTune Premium\MagicTuneLauncher.exe [51712 2011-01-04] ()
HKLM\...\Run: [VirtualCloneDrive] => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-06-17] (Elaborate Bytes AG)
HKLM\...\Run: [FUFAXSTM] => C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [OODefragTray] => C:\Program Files\OO Software\Defrag\oodtray.exe [3257640 2014-01-24] (O&O Software GmbH)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [Bluetooth Connection Assistant] => LBTWIZ.EXE -silent
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [Nvtmru] => C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AllShareAgent] => C:\Program Files\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-03-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap.dll [982232 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKU\.DEFAULT\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [894344 2013-02-05] (Autodesk, Inc.)
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Policies\Explorer: [] 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GammaTray.lnk
ShortcutTarget: GammaTray.lnk -> C:\Program Files\MagicTune Premium\GammaTray.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk
ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\O&O Defrag Tray.lnk
ShortcutTarget: O&O Defrag Tray.lnk -> C:\Windows\Installer\{9A111B78-51E3-48ED-B3CF-F76E004C2CA9}\app_icon.ico ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ralink Wireless Utility.lnk
ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.)
Startup: C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fritz!Box Tray Tool.lnk
ShortcutTarget: Fritz!Box Tray Tool.lnk -> C:\Users\Pascal\Downloads\FritzBox_Tray_Tool_1.2\FritzBox_Tray_Tool.exe (RPworld.de)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://schnittberichte.com/
FF NetworkProxy: "ftp", "91.121.58.235"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "91.121.58.235"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "91.121.58.235"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "91.121.58.235"
FF NetworkProxy: "ssl_port", 3128
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @Nero.com/KM - C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Amazon-Icon - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\amazon-icon@giga.de [2014-01-02]
FF Extension: Разпознаване на устройство Logitech - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\DeviceDetection@logitech.com [2012-08-01]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\ich@maltegoetz.de [2013-12-12]
FF Extension: Nokia Maps 3D browser plugin - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\maps@ovi.com [2012-09-02]
FF Extension: LastPass - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\support@lastpass.com [2014-03-24]
FF Extension: SaveAs - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\5032a6c925cac@5032a6c925ce5.info.xpi [2012-08-20]
FF Extension: Personas Plus - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\personas@christopher.beard.xpi [2012-08-01]
FF Extension: Stealthy - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\stealthyextension@gmail.com.xpi [2012-12-19]
FF Extension: FlashGot - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-03-13]
FF Extension: {799fe388-8c3f-4d0b-b490-c748f2dcd714} - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{799fe388-8c3f-4d0b-b490-c748f2dcd714}.xpi [2014-01-08]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: PDF Print Converter Light - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{bf87ed13-b668-4984-b4d3-4d0b1cb35e33}.xpi [2014-01-09]
FF Extension: Adblock Plus - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-08-01]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.)
R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [153600 2009-09-14] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [121856 2009-09-14] (SEIKO EPSON CORPORATION)
S4 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG)
S4 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®)
S3 FlexNet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1064312 2014-02-06] (Flexera Software LLC)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [762192 2013-07-18] (Nero AG)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14658848 2013-12-10] (NVIDIA Corporation)
R2 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [1387304 2014-01-24] (O&O Software GmbH)
S4 SamsungAllShareV2.0; C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [25504 2012-03-02] (Samsung Electronics Co., Ltd.)
S4 SimpleSlideShowServer; C:\Program Files\Samsung\AllShare\AllShareSlideShowService.exe [27584 2012-03-02] (Samsung Electronics Co., Ltd.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1731896 2014-01-28] (TuneUp Software)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

==================== Drivers (Whitelisted) ====================

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121248 2012-08-26] (SlySoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42272 2014-04-28] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-09-30] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69240 2013-12-18] (Avira Operations GmbH & Co. KG)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
R3 cmuda3; C:\Windows\System32\drivers\cmuda3.sys [1482048 2007-04-26] (C-Media Inc)
S3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)
S3 DFUBTUSB; C:\Windows\System32\Drivers\frmupgr.sys [27536 2007-01-03] (Broadcom Corporation.)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] ()
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [586752 2010-10-22] (AVM GmbH)
R1 MagicTune; C:\Windows\system32\drivers\MTiCtwl.sys [14336 2010-04-22] (Samsung Electronics, Inc. )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [107736 2014-05-27] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51416 2014-04-03] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [6504 2009-05-13] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2013-12-05] (NVIDIA Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-30] (Avira GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
S3 catchme; \??\C:\Users\Pascal\AppData\Local\Temp\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-26 21:36 - 2014-05-26 21:36 - 02347384 _____ (ESET) C:\Users\Pascal\Downloads\esetsmartinstaller_deu.exe
2014-05-26 21:36 - 2014-05-26 21:36 - 00854367 _____ () C:\Users\Pascal\Downloads\SecurityCheck.exe
2014-05-25 23:55 - 2014-05-25 23:58 - 00001233 _____ () C:\Users\Pascal\Desktop\mbam.txt
2014-05-25 22:52 - 2014-05-25 22:52 - 00001225 _____ () C:\Malwarebytes.txt
2014-05-25 22:52 - 2014-05-25 22:52 - 00000000 ____D () C:\Users\Pascal\Downloads\FRST-OlderVersion
2014-05-25 22:20 - 2014-05-25 22:20 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{93C6C2A8-F269-4106-8A61-F3D43762EF29}
2014-05-25 21:05 - 2014-05-25 21:05 - 00051136 _____ () C:\Users\Pascal\Desktop\JRT.txt
2014-05-25 20:59 - 2014-05-25 20:59 - 01016261 _____ (Thisisu) C:\Users\Pascal\Downloads\JRT.exe
2014-05-25 20:59 - 2014-05-25 20:59 - 00000000 ____D () C:\Windows\ERUNT
2014-05-25 20:57 - 2014-05-25 20:58 - 01326389 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.210.exe
2014-05-25 20:49 - 2014-05-27 21:59 - 00001230 _____ () C:\Windows\PFRO.log
2014-05-23 15:01 - 2014-05-23 15:01 - 00019317 _____ () C:\ComboFix.txt
2014-05-23 14:31 - 2014-05-23 15:01 - 00000000 ____D () C:\Qoobox
2014-05-23 14:31 - 2014-05-23 15:01 - 00000000 ____D () C:\ComboFix
2014-05-23 14:31 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-23 14:31 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-23 14:31 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-23 14:31 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-23 14:31 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-23 14:31 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-23 14:31 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-23 14:31 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-23 14:30 - 2014-05-23 15:00 - 00000000 ____D () C:\Windows\erdnt
2014-05-23 14:29 - 2014-05-23 14:30 - 05200426 ____R (Swearware) C:\Users\Pascal\Downloads\ComboFix.exe
2014-05-22 18:44 - 2014-05-27 22:01 - 00001008 _____ () C:\Windows\setupact.log
2014-05-22 18:44 - 2014-05-22 18:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-21 23:40 - 2014-05-21 23:40 - 00000925 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-21 23:40 - 2014-05-21 23:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-21 23:37 - 2014-05-21 23:37 - 03671432 _____ (Piriform Ltd) C:\Users\Pascal\Downloads\ccsetup413_slim.exe
2014-05-21 22:25 - 2014-05-21 22:28 - 00038571 _____ () C:\Users\Pascal\Downloads\Addition.txt
2014-05-21 22:24 - 2014-05-27 23:34 - 00018977 _____ () C:\Users\Pascal\Downloads\FRST.txt
2014-05-21 22:22 - 2014-05-27 23:34 - 00000000 ____D () C:\FRST
2014-05-21 22:20 - 2014-05-25 22:52 - 01056256 _____ (Farbar) C:\Users\Pascal\Downloads\FRST.exe
2014-05-18 22:08 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Local\1&1
2014-05-15 18:43 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-05-15 18:41 - 2014-05-25 21:12 - 00000000 ____D () C:\AdwCleaner
2014-05-15 18:40 - 2014-05-15 18:40 - 01325827 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.208.exe
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\Program Files\CPUID
2014-05-06 19:36 - 2014-05-06 19:36 - 00000000 ____D () C:\ProgramData\Curse Client
2014-05-05 22:25 - 2014-05-19 22:08 - 00000625 _____ () C:\Users\Pascal\Documents\Uninstall STAR WARS The Old Republic.log
2014-04-29 19:19 - 2014-04-29 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2014-04-28 19:25 - 2014-05-27 22:25 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-28 19:24 - 2014-04-28 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 19:23 - 2014-04-28 19:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 19:23 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-28 19:23 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

==================== One Month Modified Files and Folders =======

2014-05-27 23:36 - 2014-05-21 22:24 - 00018977 _____ () C:\Users\Pascal\Downloads\FRST.txt
2014-05-27 23:34 - 2014-05-21 22:22 - 00000000 ____D () C:\FRST
2014-05-27 23:24 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-27 23:24 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-27 22:48 - 2012-08-01 21:53 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-27 22:25 - 2014-04-28 19:25 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-27 22:13 - 2012-07-31 23:35 - 01238069 _____ () C:\Windows\WindowsUpdate.log
2014-05-27 22:01 - 2014-05-22 18:44 - 00001008 _____ () C:\Windows\setupact.log
2014-05-27 22:00 - 2012-08-01 00:47 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-27 22:00 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-27 21:59 - 2014-05-25 20:49 - 00001230 _____ () C:\Windows\PFRO.log
2014-05-26 21:36 - 2014-05-26 21:36 - 02347384 _____ (ESET) C:\Users\Pascal\Downloads\esetsmartinstaller_deu.exe
2014-05-26 21:36 - 2014-05-26 21:36 - 00854367 _____ () C:\Users\Pascal\Downloads\SecurityCheck.exe
2014-05-26 19:02 - 2013-01-03 19:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec
2014-05-26 18:56 - 2012-08-01 23:55 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Nero
2014-05-25 23:58 - 2014-05-25 23:55 - 00001233 _____ () C:\Users\Pascal\Desktop\mbam.txt
2014-05-25 22:59 - 2013-07-10 12:47 - 00994816 ___SH () C:\Users\Pascal\Documents\Thumbs.db
2014-05-25 22:52 - 2014-05-25 22:52 - 00001225 _____ () C:\Malwarebytes.txt
2014-05-25 22:52 - 2014-05-25 22:52 - 00000000 ____D () C:\Users\Pascal\Downloads\FRST-OlderVersion
2014-05-25 22:52 - 2014-05-21 22:20 - 01056256 _____ (Farbar) C:\Users\Pascal\Downloads\FRST.exe
2014-05-25 22:20 - 2014-05-25 22:20 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{93C6C2A8-F269-4106-8A61-F3D43762EF29}
2014-05-25 21:12 - 2014-05-15 18:41 - 00000000 ____D () C:\AdwCleaner
2014-05-25 21:05 - 2014-05-25 21:05 - 00051136 _____ () C:\Users\Pascal\Desktop\JRT.txt
2014-05-25 20:59 - 2014-05-25 20:59 - 01016261 _____ (Thisisu) C:\Users\Pascal\Downloads\JRT.exe
2014-05-25 20:59 - 2014-05-25 20:59 - 00000000 ____D () C:\Windows\ERUNT
2014-05-25 20:58 - 2014-05-25 20:57 - 01326389 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.210.exe
2014-05-25 20:52 - 2012-08-17 09:41 - 00000000 ____D () C:\Users\Pascal\AppData\Local\CrashDumps
2014-05-23 15:01 - 2014-05-23 15:01 - 00019317 _____ () C:\ComboFix.txt
2014-05-23 15:01 - 2014-05-23 14:31 - 00000000 ____D () C:\Qoobox
2014-05-23 15:01 - 2014-05-23 14:31 - 00000000 ____D () C:\ComboFix
2014-05-23 15:01 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-05-23 15:01 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-05-23 15:00 - 2014-05-23 14:30 - 00000000 ____D () C:\Windows\erdnt
2014-05-23 14:59 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-05-23 14:30 - 2014-05-23 14:29 - 05200426 ____R (Swearware) C:\Users\Pascal\Downloads\ComboFix.exe
2014-05-22 19:24 - 2012-10-23 14:05 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\MediaMonkey
2014-05-22 18:44 - 2014-05-22 18:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-22 00:05 - 2012-09-16 20:17 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\TS3Client
2014-05-22 00:05 - 2012-08-02 23:34 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Azureus
2014-05-21 23:40 - 2014-05-21 23:40 - 00000925 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-21 23:40 - 2014-05-21 23:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-21 23:40 - 2012-08-02 23:22 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-21 23:37 - 2014-05-21 23:37 - 03671432 _____ (Piriform Ltd) C:\Users\Pascal\Downloads\ccsetup413_slim.exe
2014-05-21 23:35 - 2012-09-16 20:15 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-05-21 22:28 - 2014-05-21 22:25 - 00038571 _____ () C:\Users\Pascal\Downloads\Addition.txt
2014-05-20 22:58 - 2013-08-10 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
2014-05-19 22:13 - 2012-08-01 00:02 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-05-19 22:08 - 2014-05-05 22:25 - 00000625 _____ () C:\Users\Pascal\Documents\Uninstall STAR WARS The Old Republic.log
2014-05-19 22:05 - 2014-04-14 19:18 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\elsterformular
2014-05-19 22:05 - 2014-04-14 19:15 - 00000000 ____D () C:\ProgramData\elsterformular
2014-05-19 20:34 - 2013-06-02 21:51 - 00000000 ____D () C:\Windows\Minidump
2014-05-19 20:34 - 2010-09-14 21:40 - 00000000 ____D () C:\Windows\Panther
2014-05-19 20:18 - 2013-11-06 23:09 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Battle.net
2014-05-19 19:04 - 2012-08-07 19:25 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-18 22:08 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Local\1&1
2014-05-15 19:49 - 2012-08-01 21:53 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-15 19:49 - 2012-08-01 21:53 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-05-15 18:40 - 2014-05-15 18:40 - 01325827 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.208.exe
2014-05-14 19:39 - 2013-12-06 00:37 - 00000000 ____D () C:\Program Files\Hearthstone
2014-05-13 17:22 - 2012-08-17 10:37 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-05-12 23:10 - 2014-03-31 18:59 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-09 16:05 - 2012-09-03 23:34 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Deployment
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\Program Files\CPUID
2014-05-07 18:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-05-06 21:30 - 2013-05-07 12:33 - 00000000 ____D () C:\Users\Gast
2014-05-06 19:36 - 2014-05-06 19:36 - 00000000 ____D () C:\ProgramData\Curse Client
2014-05-06 18:59 - 2012-08-01 00:08 - 00146320 _____ () C:\Users\Pascal\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-06 18:58 - 2009-07-14 06:33 - 00492128 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-06 00:01 - 2012-08-05 22:30 - 00000000 ____D () C:\Program Files\TeamViewer
2014-05-05 23:59 - 2014-03-13 02:47 - 00000000 ____D () C:\Program Files\Easeware
2014-05-05 22:31 - 2010-09-14 20:52 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-05 22:24 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-05 22:23 - 2013-12-25 02:41 - 00000000 ____D () C:\Users\Pascal\Documents\NeroVideo
2014-05-05 19:31 - 2012-08-01 22:22 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Windows Live Writer
2014-05-04 21:51 - 2013-11-06 23:09 - 00000000 ____D () C:\Program Files\Battle.net
2014-04-29 19:19 - 2014-04-29 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2014-04-29 19:19 - 2014-03-13 12:16 - 00000000 ____D () C:\Program Files\MyPhoneExplorer
2014-04-29 18:41 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-04-28 23:18 - 2013-07-05 13:09 - 00003730 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml
2014-04-28 23:14 - 2012-11-26 22:38 - 00042272 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys
2014-04-28 19:24 - 2014-04-28 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 19:24 - 2014-04-28 19:23 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 19:24 - 2012-08-01 00:22 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Malwarebytes
2014-04-28 19:23 - 2012-08-01 00:22 - 00000000 ____D () C:\ProgramData\Malwarebytes

Files to move or delete:
====================
C:\Users\Pascal\taskmgr.exe


Some content of TEMP:
====================
C:\Users\Pascal\AppData\Local\temp\avgnt.exe
C:\Users\Pascal\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-19 23:17

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Das sind die 3 Log files

Also bisher sieht das schon mal nicht schlecht aus vielen dank dafür schon mal an dieser Stelle für deine Mühe echt super.
Jetzt möchte ich nur wissen woher das kommt mit diesem Mail delivery Service damit das nicht nochmal passieren kann??

schrauber · 28.05.2014, 19:26

Java udn Adobe updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\ProgramData\Skype\copy.bat
C:\Users\Pascal\taskmgr.exe

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Fertig

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Ironforge · 01.06.2014, 22:15

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:01-06-2014 01
Ran by Pascal at 2014-06-01 23:02:02 Run:1
Running from C:\Users\Pascal\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
C:\ProgramData\Skype\copy.bat
C:\Users\Pascal\taskmgr.exe
*****************

C:\ProgramData\Skype\copy.bat => Moved successfully.
C:\Users\Pascal\taskmgr.exe => Moved successfully.

==== End of Fixlog ====

Ich kann mich gar nicht oft genug bedanken bei dir. Es hat wirklich alles geholfen so wie du das beschrieben hast vielen dank.

schrauber · 02.06.2014, 19:00

Gern Geschehen

02.06.2014, 19:00	#10
schrauber /// the machine /// TB-Ausbilder	Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt Gern Geschehen __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt

Log-Analyse und Auswertung: Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt