Browser sind trotz neuem aufsetzen immernoch sehr langsam

Williwu · 17.10.2014, 22:01

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-10-2014 02
Ran by Grisu (administrator) on GRISU-PC on 17-10-2014 22:58:10
Running from C:\Users\Grisu\Desktop\Trojaner software
Loaded Profile: Grisu (Available profiles: Grisu)
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(My Digital Life Forums) C:\Windows\KMSServerService\KMS Server Service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Deutsche Telekom AG) D:\Programme\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Dropbox, Inc.) C:\Users\Grisu\AppData\Roaming\Dropbox\bin\Dropbox.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Canon INC.) C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe
(Deutsche Telekom AG) D:\Programme\Netzmanager\netzmanager.exe
(CANON INC.) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Frontend.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5581888 2014-02-24] (ESET)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [839384 2014-09-16] (BlueStack Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EOS Utility.lnk
ShortcutTarget: EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.)
Startup: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> D:\Programme\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x56C38410017FCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: OpitOn -> {6b836c64-f364-437e-bab5-11f39990cfe9} ->  No File
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: OpteOn -> {ab957d78-2cdb-4568-8020-2eaabcd137c2} ->  No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: GoSaive -> {cfd100a1-0615-4d32-9827-7ac2d4b0faa4} ->  No File
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( )
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll ( )
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Lightshot (screenshot tool) - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B} [2014-10-02]
FF Extension: NoScript - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-10-16]
FF Extension: {7d02e03c-f690-4f38-bf10-5e8cc02a4740} - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{7d02e03c-f690-4f38-bf10-5e8cc02a4740}.xpi [2014-09-09]
FF Extension: Adblock Plus - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-17]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-07-28]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-03]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-03]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-03]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-06-03]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-06-03]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome: 
=======
CHR HomePage: Default -> 
CHR Profile: C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-26]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-09-26]
CHR Extension: (ZenMate) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2014-08-05]
CHR Extension: (AdBlock) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-17]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-09-26]
CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-09-26]
CHR Extension: (Virtual Keyboard) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-09-26]
CHR Extension: (Disconnect) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2014-09-17]
CHR Extension: (Google Wallet) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-29]
CHR Extension: (Anti-Banner) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-09-26]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-09-16] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384728 2014-09-16] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [777944 2014-09-16] (BlueStack Systems, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1343408 2014-02-24] (ESET)
S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2014-07-06] () [File not signed]
R2 KMSServerService; C:\Windows\KMSServerService\KMS Server Service.exe [211968 2014-07-06] (My Digital Life Forums) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 Netzmanager Service; D:\Programme\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [File not signed]
S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)
S4 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S4 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
S4 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) [File not signed]
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 TDslMgrService; C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exe [294912 2007-11-26] (T-Systems Enterprise Services GmbH) [File not signed]
S2 Orbiter; C:/Program Files (x86)/ORBTR/orbiter.dll [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-09-16] (BlueStack Systems)
R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [19008 2007-08-01] (T-Systems Enterprise Services GmbH)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-06-03] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-06-03] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-06-03] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-06-03] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-06-03] (Kaspersky Lab ZAO)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-10-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2014-06-03] (Duplex Secure Ltd.)
R3 TelekomNM6; D:\Programme\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 gwfilt64; system32\drivers\gwfilt64.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]

========================== Drivers MD5 =======================

C:\Windows\system32\DRIVERS\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\isapnp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\msiscsi.sys 96BB922A0981BC7432C8CF52B5410FE6
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kl1.sys 795EC29BA21F1D948FD6FD740C00B599
C:\Windows\System32\DRIVERS\klflt.sys D0C3AEF67932D2A80736FBCB956C017D
C:\Windows\System32\DRIVERS\klif.sys 41DF293A7F0418F5DDED9F0297DC68F3
C:\Windows\System32\DRIVERS\klim6.sys 31B69BFF28348503E4BD10C2A4F66D05
C:\Windows\System32\DRIVERS\klkbdflt.sys 8DA5BC75C3E8A995335642F26CAEA54B
C:\Windows\System32\DRIVERS\klmouflt.sys 72CF64FBF38CD681FA7F37176047E967
C:\Windows\System32\DRIVERS\klpd.sys 8C0EC95AD65A0DE3D6C040591D02BF02
C:\Windows\System32\DRIVERS\kltdi.sys 4828B3D2BC89B05E07101C6E60CE0A6A
C:\Windows\System32\DRIVERS\kneps.sys 91BC1C5B00275A4D7FD669EFF0DDEB2A
C:\Windows\System32\Drivers\ksecdd.sys 353009DEDF918B2A51414F330CF72DEC
C:\Windows\System32\Drivers\ksecpkg.sys 1C2D8E18AA8FD50CD04C15CC27F7F5AB
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\lvuvc64.sys FF3A488924B0032B1A9CA6948C1FA9E8
C:\Windows\system32\drivers\mbamchameleon.sys 9D9ED48F841EA37AA5310D54B9E5D3C7
C:\Windows\system32\drivers\mbam.sys F92B0E478C0FAA6D6661E6E977247E60
C:\Windows\system32\drivers\MBAMSwissArmy.sys 8A50D5304E6AE48664CF5838EC32F647
C:\Windows\system32\drivers\mwac.sys 15E8ABC06843672955CE26A009533BAD
C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys 1A4F75E63C9FB84B85DFFC6B63FD5404
C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC
C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163
C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C
C:\Windows\System32\DRIVERS\msahci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys 1A29A59A4C5BA6F8C85062A613B7E2B2
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\System32\drivers\nvhda64v.sys E366A5681C50785D4ED04FCFD65C3415
C:\Windows\System32\DRIVERS\nvlddmkm.sys 0AC797F70F2F3E5B69A34FF2F63496F3
C:\Windows\system32\DRIVERS\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\system32\DRIVERS\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Windows\System32\drivers\nvvad64v.sys 75034A4D7C02327D150B617571D4196A
C:\Windows\system32\DRIVERS\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\DRIVERS\pci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pciide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\psi_mf_amd64.sys DD3FD48D69F5FBBB21D46D1514C1C2DB
C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\revoflt.sys 9C3AC71A9934B884FAC567A8807E9C4D
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\Drivers\SCDEmu.sys 158F1C92B48150F603FB558D84A5B48E
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\Drivers\sptd.sys 4C33F139236FD9BD14A920F60C1CB072
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\tbhsd.sys 048CFE7569D6ADCAB9349BB1A566A79E
C:\Windows\System32\drivers\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E
C:\Windows\System32\DRIVERS\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E
C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
D:\Programme\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys 4283D7125BA4BD0CB50BB0F78B54257A
C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tssecsrv.sys 4CE278FC9671BA81A138D70823FCAA09
C:\Windows\System32\drivers\tsusbflt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\uliagpkx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit
C:\Windows\System32\drivers\usbaudio.sys B0435098C81D04CAFFF80DDB746CD3A2
C:\Windows\System32\DRIVERS\usbccgp.sys DCA68B0943D6FA415F0C56C92158A83A
C:\Windows\system32\DRIVERS\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31
C:\Windows\System32\DRIVERS\usbehci.sys 18A85013A3E0F7E1755365D287443965
C:\Windows\System32\DRIVERS\usbhub.sys 8D1196CFBB223621F2C67D45710F25BA
C:\Windows\system32\DRIVERS\usbohci.sys 765A92D428A8DB88B960DA5A8D6089DC
C:\Windows\system32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbscan.sys 9661DA76B4531B2DA272ECCE25A8AF24
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\System32\DRIVERS\usbuhci.sys DD253AFC3BC6CBA412342DE60C3647F3
C:\Windows\System32\Drivers\usbvideo.sys 1F775DA4CF1A3A1834207E975A72E9D7
C:\Windows\System32\DRIVERS\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\viaide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\volsnap.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D
C:\Windows\System32\DRIVERS\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-17 22:53 - 2014-10-17 22:58 - 00000000 ____D () C:\FRST
2014-10-17 09:35 - 2014-10-17 09:51 - 00056368 _____ () C:\Users\Grisu\Desktop\Arbeitszeitnachweis-2014 - Kopie.ods
2014-10-17 01:06 - 2014-10-17 08:59 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\0B2A46DE.sys
2014-10-17 00:50 - 2014-10-17 00:50 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cfe993939fd0f4
2014-10-17 00:50 - 2014-10-17 00:50 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfe993939fd0f4.job
2014-10-17 00:49 - 2014-10-17 00:49 - 00880272 _____ (Google Inc.) C:\Users\Grisu\Downloads\ChromeSetup.exe
2014-10-17 00:47 - 2014-10-16 10:26 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-10-17 00:45 - 2014-10-17 00:50 - 00000861 _____ () C:\Windows\SecuniaPackage.log
2014-10-16 10:34 - 2014-10-16 10:36 - 00001772 _____ () C:\DelFix.txt
2014-10-16 10:34 - 2014-10-16 10:34 - 00001080 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-10-16 10:34 - 2014-10-16 10:34 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Secunia PSI
2014-10-16 10:34 - 2014-10-16 10:34 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-10-16 10:30 - 2014-10-16 10:31 - 00541865 _____ () C:\Users\Grisu\Downloads\noscript_security_suite-2.6.9.1-fn_fx_sm.zip
2014-10-16 10:27 - 2014-10-16 10:27 - 05329480 _____ (Secunia) C:\Users\Grisu\Downloads\PSISetup_3.0.0.9016.exe
2014-10-15 13:04 - 2014-10-15 13:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-14 02:41 - 2014-10-14 02:41 - 00000314 _____ () C:\Windows\PFRO.log
2014-10-14 02:10 - 2014-10-14 02:10 - 00000000 ____D () C:\Users\Grisu\4.0
2014-10-14 02:10 - 2014-10-14 02:10 - 00000000 ____D () C:\Users\Grisu\.tfo4
2014-10-12 21:27 - 2014-10-12 21:36 - 28076375 _____ () C:\Users\Grisu\Downloads\va-german50odc06102014.part3.rar
2014-10-12 10:07 - 2014-10-12 10:07 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\04E23FBD.sys
2014-10-12 10:04 - 2014-10-12 10:04 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\1BA03D9F.sys
2014-10-11 12:33 - 2014-10-11 13:42 - 209715200 _____ () C:\Users\Grisu\Downloads\va-german50odc06102014.part2.rar
2014-10-11 10:26 - 2014-10-11 10:26 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\0781265D.sys
2014-10-10 09:43 - 2014-10-10 09:43 - 00001818 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-10-10 09:40 - 2014-10-10 09:40 - 00001830 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-10-10 09:34 - 2014-10-10 09:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-10-10 09:34 - 2014-10-10 09:34 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-10-10 09:22 - 2014-10-17 21:23 - 00003325 _____ () C:\Windows\setupact.log
2014-10-10 09:22 - 2014-10-10 09:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-10 08:53 - 2014-10-10 08:53 - 13309928 _____ (BlueStack Systems Inc.) C:\Users\Grisu\Downloads\BlueStacks-SplitInstaller_native.exe
2014-10-10 06:50 - 2014-10-10 06:54 - 163978588 _____ () C:\Users\Grisu\Downloads\U2-Songs_Of_Innocence-%28Deluxe_Edition%29-2CD-2014-BriBerY.rar
2014-10-10 06:11 - 2014-10-10 06:11 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-10-10 06:00 - 2014-10-10 06:00 - 00001088 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-10-10 06:00 - 2014-10-10 06:00 - 00000000 ____D () C:\Users\Grisu\AppData\Local\VS Revo Group
2014-10-10 06:00 - 2014-10-10 06:00 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-10-10 06:00 - 2014-10-10 06:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-10-10 06:00 - 2014-10-10 06:00 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-10-10 06:00 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2014-10-10 05:56 - 2014-10-10 07:04 - 209715200 _____ () C:\Users\Grisu\Downloads\va-german50odc06102014.part1.rar
2014-10-10 05:55 - 2014-10-10 05:58 - 50068373 _____ () C:\Users\Grisu\Downloads\Neueinsteiger_der_German_ODC_TOP50_vom_06.10.2014-CannaPower.rar
2014-10-10 00:58 - 2014-10-10 09:15 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2E653FC9.sys
2014-10-08 15:19 - 2014-10-08 15:19 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\VSRevoGroup
2014-10-08 15:13 - 2014-10-08 15:13 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Sinvise Systems
2014-10-08 15:13 - 2014-10-08 15:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sinvise Systems
2014-10-08 15:13 - 2014-10-08 15:13 - 00000000 ____D () C:\Program Files (x86)\Sinvise Systems
2014-10-08 15:10 - 2014-10-08 15:10 - 01125200 _____ () C:\Users\Grisu\Downloads\Shutdown Timer 32 Bit - CHIP-Installer.exe
2014-10-08 14:55 - 2014-10-08 14:55 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\64911C52.sys
2014-10-08 04:15 - 2014-10-08 04:15 - 04246449 _____ () C:\Users\Grisu\Downloads\motochopper.zip
2014-10-08 03:52 - 2014-10-08 03:52 - 00000000 ____D () C:\EGLTD
2014-10-07 14:47 - 2014-10-07 14:47 - 02941840 _____ (Microsoft Corporation) C:\Users\Grisu\Downloads\Windows7-USB-DVD-Download-Tool-Installer-de-DE.exe
2014-10-05 14:38 - 2014-10-16 10:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-10-04 02:20 - 2014-10-04 02:27 - 291852366 _____ () C:\Users\Grisu\Downloads\Windows6.1-KB968211-x86-RefreshPkg.msu
2014-10-03 14:18 - 2014-10-03 14:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\1343656D.sys
2014-10-02 09:35 - 2014-10-02 09:55 - 176129509 _____ () C:\Users\Grisu\Downloads\Mashup-Germany - Vol.6 - Back to the future.zip
2014-10-02 08:56 - 2014-10-14 02:39 - 00270078 _____ () C:\Users\Grisu\Documents\WhatsApp Chat mit Franzi.odt
2014-10-02 01:43 - 2014-10-02 01:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-10-02 01:27 - 2014-10-02 01:27 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Grisu\Downloads\revosetup95.exe
2014-10-01 12:25 - 2014-10-01 12:25 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\449A0149.sys
2014-10-01 00:19 - 2014-10-01 00:19 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\7D894C22.sys
2014-09-29 14:13 - 2014-10-01 12:05 - 00381736 _____ () C:\Users\Grisu\Documents\WhatsApp Chat mit Franzi.txt
2014-09-28 12:49 - 2014-09-28 12:49 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\319F42D4.sys
2014-09-28 12:09 - 2014-09-28 12:09 - 00335504 _____ (Bytro Labs) C:\Users\Grisu\Downloads\S1914JavaInstaller.exe
2014-09-26 16:12 - 2014-09-26 16:12 - 00000310 _____ () C:\CCALib8WS.log
2014-09-26 16:11 - 2014-09-26 17:36 - 00000000 ____D () C:\sh4ldr
2014-09-26 13:38 - 2014-09-26 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery
2014-09-26 13:38 - 2014-09-26 13:38 - 00000000 ____D () C:\ProgramData\Elcomsoft Password Recovery
2014-09-26 13:38 - 2014-09-26 13:38 - 00000000 ____D () C:\Program Files (x86)\Elcomsoft
2014-09-26 13:36 - 2014-09-26 13:36 - 00000000 ____D () C:\Users\Grisu\Desktop\Advanced Archive Password Recovery Professional 4.54.48
2014-09-26 13:35 - 2014-09-26 13:35 - 07328167 _____ () C:\Users\Grisu\Downloads\Advanced Archive Password Recovery.zip
2014-09-26 13:13 - 2014-09-26 13:13 - 00000000 _____ () C:\Users\Grisu\Downloads\Spy_Hunter_4_Crack_Full.exe
2014-09-26 05:05 - 2014-09-26 05:05 - 00000000 ____D () C:\Users\Grisu\Desktop\Canon
2014-09-26 05:05 - 2014-09-26 05:05 - 00000000 _____ () C:\autoexec.bat
2014-09-26 03:02 - 2014-09-26 03:02 - 00000000 ____D () C:\Windows\SysWOW64\X86
2014-09-26 03:02 - 2014-09-26 03:02 - 00000000 ____D () C:\Windows\SysWOW64\AMD64
2014-09-26 03:01 - 2014-09-26 04:12 - 00000000 ____D () C:\Program Files (x86)\OpteOn
2014-09-26 03:01 - 2014-09-26 04:12 - 00000000 ____D () C:\Program Files (x86)\OpitOn
2014-09-26 03:01 - 2014-09-26 03:44 - 00000000 ____D () C:\ProgramData\OpteOn
2014-09-26 03:01 - 2014-09-26 03:44 - 00000000 ____D () C:\ProgramData\OpitOn
2014-09-26 03:00 - 2014-09-26 04:52 - 00000000 ____D () C:\Program Files (x86)\ORBTR
2014-09-26 01:47 - 2014-10-02 01:36 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-09-26 01:47 - 2014-09-26 03:01 - 00000000 ____D () C:\ProgramData\dad537a8ea1f6947
2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Comodo
2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Gast
2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Administrator
2014-09-26 01:30 - 2014-09-26 01:30 - 00122467 _____ () C:\Users\Grisu\Downloads\PL5-6-Kgn(1).rar
2014-09-26 01:29 - 2014-09-26 01:29 - 00122467 _____ () C:\Users\Grisu\Downloads\PL5-6-Kgn.rar
2014-09-25 21:38 - 2014-10-08 11:44 - 00000000 ____D () C:\Users\Grisu\AppData\Local\CANON_INC
2014-09-25 21:32 - 2014-09-26 03:24 - 00000000 ___RD () C:\Users\Grisu\Desktop\104CANON
2014-09-25 21:31 - 2014-09-25 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-09-25 21:30 - 2014-09-25 21:31 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-09-25 21:29 - 2014-09-25 21:46 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\canon
2014-09-25 21:28 - 2014-09-25 21:28 - 00000000 ____D () C:\ProgramData\Canon_Inc_IC
2014-09-24 23:32 - 2014-09-24 23:33 - 00001703 _____ () C:\Users\Grisu\Downloads\Adobe Photoshop Lightroom 5.2 [64 bit] (Serials ONLY).zip
2014-09-24 23:19 - 2014-09-24 23:24 - 00000000 ____D () C:\Users\Grisu\Downloads\odbg110
2014-09-24 23:19 - 2014-09-24 23:19 - 01333471 _____ () C:\Users\Grisu\Downloads\odbg110.zip
2014-09-24 22:06 - 2014-09-24 22:06 - 00521216 _____ (PainteR) C:\Users\Grisu\Downloads\Adobe Universal Patcher.exe
2014-09-24 11:32 - 2014-09-24 11:32 - 00000917 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC.lnk
2014-09-24 10:45 - 2014-09-24 10:45 - 00001711 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Lightroom 5.6 64-bit.lnk
2014-09-24 01:24 - 2014-09-24 01:29 - 00000000 ____D () C:\Users\Grisu\Downloads\Adobe_Photoshop_Lightroom_5_6_keygen
2014-09-24 01:21 - 2014-09-24 01:21 - 00000000 ____D () C:\Users\Grisu\Documents\Adobe
2014-09-24 00:51 - 2014-09-24 00:53 - 00007510 _____ () C:\Users\Grisu\Adobe Creative Suite Cleaner Tool.log
2014-09-24 00:50 - 2014-09-24 00:53 - 00000000 ____D () C:\Users\Grisu\Downloads\adobe_creative_suite_6cleaner_tool
2014-09-24 00:49 - 2014-09-24 00:50 - 08098376 _____ () C:\Users\Grisu\Downloads\adobe_creative_suite_6cleaner_tool.zip
2014-09-23 01:50 - 2014-09-23 03:16 - 1047527424 _____ () C:\Users\Grisu\Downloads\9846541212-ts4sg.part02.rar
2014-09-22 12:05 - 2014-09-22 13:36 - 1047527424 _____ () C:\Users\Grisu\Downloads\9846541212-ts4sg.part01.rar
2014-09-22 03:31 - 2014-09-22 03:31 - 00000000 ____D () C:\ProgramData\Codemasters
2014-09-22 03:15 - 2014-09-22 03:15 - 00001349 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
2014-09-22 03:15 - 2014-09-22 03:15 - 00000000 ____D () C:\Windows\SysWOW64\xlive
2014-09-22 03:15 - 2014-09-22 03:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2014-09-22 03:15 - 2014-09-22 03:15 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-09-22 03:03 - 2014-09-22 03:03 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-09-22 02:48 - 2014-09-22 02:48 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\095B6173.sys
2014-09-20 16:31 - 2014-10-17 10:48 - 00070197 _____ () C:\Users\Grisu\Desktop\Arbeitszeitnachweis-2014.ods
2014-09-20 16:22 - 2014-10-12 11:03 - 00020028 _____ () C:\Users\Grisu\Desktop\Lärmbelästigung Nachbar 2014.ods
2014-09-19 12:55 - 2014-09-19 12:55 - 13629321 _____ () C:\Users\Grisu\Downloads\The-Next-Generation.rar
2014-09-19 12:55 - 2014-09-19 12:55 - 05895249 _____ () C:\Users\Grisu\Downloads\Was-kommt-danach.rar
2014-09-19 12:54 - 2014-09-19 12:56 - 54808864 _____ () C:\Users\Grisu\Downloads\Liebe---Schmerz.rar
2014-09-19 12:54 - 2014-09-19 12:55 - 07495120 _____ () C:\Users\Grisu\Downloads\Meine-eigene-Lieder.rar
2014-09-19 02:02 - 2014-10-17 21:26 - 00000000 ___RD () C:\Users\Grisu\Dropbox
2014-09-19 02:01 - 2014-09-18 14:59 - 00001021 _____ () C:\Users\Grisu\Desktop\Dropbox.lnk
2014-09-18 14:59 - 2014-09-18 14:59 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-09-18 14:56 - 2014-10-17 21:26 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Dropbox
2014-09-18 14:55 - 2014-09-24 09:59 - 00000000 ____D () C:\Users\Grisu\Desktop\Adobe CS6 All Products Activator (x32 & x64)
2014-09-18 14:53 - 2014-09-18 14:54 - 41377280 _____ (Dropbox, Inc.) C:\Users\Grisu\Downloads\Dropbox_2.10.30.exe
2014-09-18 14:07 - 2014-09-18 14:07 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\PDAppFlex
2014-09-18 12:04 - 2014-09-18 12:04 - 00030392 _____ () C:\Users\Grisu\Downloads\excel-vorlagen-haushaltsbuch.zip
2014-09-18 11:49 - 2014-09-18 11:49 - 00034304 _____ () C:\Users\Grisu\Downloads\wochenplan.xls
2014-09-18 11:44 - 2014-09-18 11:45 - 07441742 _____ () C:\Users\Grisu\Downloads\Unternehmensbereich-Aktuelles-SoundOfWork-3029_41456-0.zip
2014-09-18 11:34 - 2014-09-18 12:59 - 1047527424 _____ () C:\Users\Grisu\Downloads\984561244-ultstrfighiv.part02.rar
2014-09-18 09:52 - 2014-09-18 11:17 - 1047527424 _____ () C:\Users\Grisu\Downloads\984561244-ultstrfighiv.part01.rar
2014-09-17 23:28 - 2014-09-17 23:28 - 00918440 _____ (Oracle Corporation) C:\Users\Grisu\Downloads\chromeinstall-7u67 (1).exe
2014-09-17 22:30 - 2014-09-17 22:30 - 00000000 ___RD () C:\Users\Grisu\Creative Cloud Files
2014-09-17 11:40 - 2014-09-17 11:40 - 00031408 _____ () C:\Users\Grisu\Downloads\Arbeitszeit_2004.zip
2014-09-17 11:35 - 2014-09-17 11:35 - 01101648 _____ () C:\Users\Grisu\Downloads\Arbeitszeit_2004 - CHIP-Installer.exe
2014-09-17 11:06 - 2014-09-17 11:36 - 00002269 _____ () C:\Users\Grisu\Desktop\Datenbank Open Office.odb
2014-09-17 10:15 - 2014-09-17 10:15 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\OpenOffice
2014-09-17 08:21 - 2014-09-17 08:21 - 00000855 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2014-09-17 08:21 - 2014-09-17 08:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2014-09-17 06:35 - 2014-09-17 06:36 - 01101648 _____ () C:\Users\Grisu\Downloads\OpenOffice - CHIP-Installer.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-17 22:58 - 2014-06-16 02:43 - 00000000 ____D () C:\Users\Grisu\Desktop\Trojaner software
2014-10-17 22:54 - 2014-06-13 03:59 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-17 22:32 - 2014-07-29 10:57 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-17 22:01 - 2014-06-05 15:00 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-17 21:39 - 2014-06-03 10:14 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-10-17 21:31 - 2009-07-14 06:45 - 00059584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-17 21:31 - 2009-07-14 06:45 - 00059584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-17 21:26 - 2014-06-03 09:07 - 01943981 _____ () C:\Windows\WindowsUpdate.log
2014-10-17 21:25 - 2014-07-29 10:57 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-17 21:23 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-17 09:07 - 2014-08-04 02:00 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Adobe
2014-10-17 00:50 - 2014-07-29 10:57 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-10-17 00:50 - 2014-06-13 03:59 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-17 00:50 - 2014-06-03 11:47 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-17 00:50 - 2014-06-03 11:47 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-17 00:47 - 2014-09-15 21:47 - 00000000 ____D () C:\Program Files (x86)\Java
2014-10-16 10:35 - 2014-06-18 23:30 - 00000000 ____D () C:\Windows\ERUNT
2014-10-16 10:28 - 2014-07-28 23:36 - 00000000 ____D () C:\Program Files\Java
2014-10-16 10:27 - 2014-09-15 21:39 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-10-16 10:26 - 2014-09-15 21:47 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-10-16 10:26 - 2014-09-15 21:47 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-10-16 10:26 - 2014-09-15 21:47 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-10-16 10:14 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-10-16 09:51 - 2014-07-19 12:21 - 00003852 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1405765260
2014-10-16 09:51 - 2014-07-19 12:21 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-10-15 13:18 - 2014-06-06 02:32 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\GanymedeNet
2014-10-14 02:10 - 2014-06-03 09:14 - 00000000 ____D () C:\Users\Grisu
2014-10-13 02:08 - 2014-06-23 12:56 - 00000000 ____D () C:\ProgramData\Origin
2014-10-13 01:28 - 2014-06-24 12:18 - 00000000 ____D () C:\Users\Grisu\Documents\FIFA 14
2014-10-12 22:50 - 2014-06-23 12:55 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-10-11 11:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-10-10 09:58 - 2014-09-09 14:35 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-10-10 09:40 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-10-10 09:34 - 2014-09-15 12:01 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-10-10 09:32 - 2013-01-22 21:02 - 00000000 ____D () C:\Users\Grisu\Desktop\Paddy musik
2014-10-10 06:35 - 2009-07-14 19:58 - 00732176 _____ () C:\Windows\system32\perfh007.dat
2014-10-10 06:35 - 2009-07-14 19:58 - 00159712 _____ () C:\Windows\system32\perfc007.dat
2014-10-10 06:35 - 2009-07-14 07:13 - 01685660 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-10 06:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-10-10 04:03 - 2014-06-03 12:48 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Adobe
2014-10-10 03:57 - 2014-07-18 09:50 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-10-10 03:52 - 2014-06-23 13:02 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-10-10 00:16 - 2014-06-17 15:55 - 00000000 ____D () C:\Users\Grisu\Documents\Benutzerdefinierte Office-Vorlagen
2014-10-09 12:31 - 2014-09-11 09:04 - 00000000 ____D () C:\ProgramData\Netzmanager
2014-10-08 15:02 - 2014-06-06 02:30 - 00000000 ____D () C:\Program Files (x86)\Ganymede
2014-10-08 11:44 - 2014-06-03 17:32 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-10-08 11:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-10-06 15:17 - 2014-06-03 14:50 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\uTorrent
2014-10-05 16:22 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-10-04 02:28 - 2009-07-14 20:18 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-10-04 02:02 - 2014-06-11 00:00 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-10-03 23:34 - 2014-08-05 03:07 - 00000000 ____D () C:\Users\Grisu\Desktop\SciLor's Grooveshark.com Downloader
2014-10-02 05:51 - 2014-06-03 10:14 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-09-30 12:26 - 2014-07-25 00:31 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Unity
2014-09-29 01:11 - 2014-09-11 09:05 - 00000769 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Netzmanager.lnk
2014-09-29 01:11 - 2014-09-11 09:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netzmanager
2014-09-27 13:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-09-26 17:11 - 2014-07-18 18:14 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\ICQM
2014-09-26 06:27 - 2014-07-29 10:57 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-09-26 06:27 - 2014-06-03 16:14 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-26 05:56 - 2014-06-18 12:34 - 00000774 _____ () C:\Users\Grisu\Desktop\TeamSpeak 3 Client.lnk
2014-09-26 05:55 - 2014-06-11 14:27 - 00000725 _____ () C:\Users\Grisu\Desktop\Cheat Engine.lnk
2014-09-26 05:42 - 2014-07-18 09:56 - 00000907 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5 (64 Bit).lnk
2014-09-26 05:42 - 2014-07-18 09:56 - 00000862 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.lnk
2014-09-26 05:42 - 2014-07-18 09:53 - 00000899 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.lnk
2014-09-26 05:42 - 2014-07-18 09:51 - 00000956 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.lnk
2014-09-26 05:08 - 2014-06-03 09:14 - 00000000 ____D () C:\Users\Grisu\AppData\Local\VirtualStore
2014-09-26 04:11 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-09-26 03:44 - 2014-07-22 06:08 - 00000000 ____D () C:\Windows\Sun
2014-09-26 01:46 - 2014-06-03 16:14 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Google
2014-09-26 01:30 - 2014-06-03 17:28 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-25 23:51 - 2014-06-25 11:25 - 00000000 ____D () C:\Windows\pss
2014-09-25 19:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PLA
2014-09-24 23:08 - 2009-07-14 06:45 - 05157960 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-24 14:59 - 2014-06-03 10:55 - 00118680 _____ () C:\Users\Grisu\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-24 11:33 - 2014-07-18 09:53 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-09-24 09:59 - 2014-07-29 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-09-24 09:59 - 2014-07-07 16:41 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Ubisoft
2014-09-24 09:58 - 2014-07-18 09:49 - 00000000 ____D () C:\ProgramData\Adobe
2014-09-22 03:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-09-22 03:03 - 2014-07-18 10:09 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-09-20 19:55 - 2014-06-14 04:00 - 00000000 ____D () C:\Windows\Minidump
2014-09-17 22:41 - 2014-06-19 12:37 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Apps\2.0
2014-09-17 22:25 - 2014-06-06 01:52 - 00000000 ____D () C:\ProgramData\Package Cache

Some content of TEMP:
====================
C:\Users\Grisu\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmphwubvb.dll
C:\Users\Grisu\AppData\Local\Temp\FileSystemView.dll
C:\Users\Grisu\AppData\Local\Temp\InstallPlugin_15_0_0_189.exe
C:\Users\Grisu\AppData\Local\Temp\jre-8u25-windows-au.exe
C:\Users\Grisu\AppData\Local\Temp\Quarantine.exe
C:\Users\Grisu\AppData\Local\Temp\sqlite3.dll
C:\Users\Grisu\AppData\Local\Temp\VSUSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

==================== BCD ================================

Windows-Start-Manager
---------------------
Bezeichner              {bootmgr}
device                  partition=C:
description             Windows Boot Manager
locale                  de-DE
inherit                 {globalsettings}
default                 {current}
resumeobject            {83b231c0-eaf5-11e3-9627-acd98b81b942}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 15

Windows-Startladeprogramm
-------------------------
Bezeichner              {2cce4ab4-37dd-11e4-94c2-00226863bf18}
device                  ramdisk=[C:]\Recovery\2cce4ab4-37dd-11e4-94c2-00226863bf18\Winre.wim,{2cce4ab5-37dd-11e4-94c2-00226863bf18}
path                    \windows\system32\winload.exe
description             Windows Recovery Environment
inherit                 {bootloadersettings}
osdevice                ramdisk=[C:]\Recovery\2cce4ab4-37dd-11e4-94c2-00226863bf18\Winre.wim,{2cce4ab5-37dd-11e4-94c2-00226863bf18}
systemroot              \windows
nx                      OptIn
winpe                   Yes

Windows-Startladeprogramm
-------------------------
Bezeichner              {current}
device                  partition=C:
path                    \Windows\system32\winload.exe
description             Windows 7
locale                  de-DE
inherit                 {bootloadersettings}
recoverysequence        {2cce4ab4-37dd-11e4-94c2-00226863bf18}
recoveryenabled         Yes
osdevice                partition=C:
systemroot              \Windows
resumeobject            {83b231c0-eaf5-11e3-9627-acd98b81b942}
nx                      OptIn
usefirmwarepcisettings  No
sos                     Yes

Wiederaufnahme aus dem Ruhezustand
----------------------------------
Bezeichner              {83b231c0-eaf5-11e3-9627-acd98b81b942}
device                  partition=C:
path                    \Windows\system32\winresume.exe
description             Windows Resume Application
locale                  de-DE
inherit                 {resumeloadersettings}
filedevice              partition=C:
filepath                \hiberfil.sys
debugoptionenabled      No

Windows-Speichertestprogramm
----------------------------
Bezeichner              {memdiag}
device                  partition=C:
path                    \boot\memtest.exe
description             Windows-Speicherdiagnose
locale                  de-DE
inherit                 {globalsettings}
badmemoryaccess         Yes

EMS-Einstellungen
-----------------
Bezeichner              {emssettings}
bootems                 Yes

Debuggereinstellungen
---------------------
Bezeichner              {dbgsettings}
debugtype               Serial
debugport               1
baudrate                115200

RAM-Defekte
-----------
Bezeichner              {badmemory}

Globale Einstellungen
---------------------
Bezeichner              {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

Startladeprogramm-Einstellungen
-------------------------------
Bezeichner              {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

Hypervisoreinstellungen
-------------------
Bezeichner              {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

Einstellungen zur Ladeprogrammfortsetzung
-----------------------------------------
Bezeichner              {resumeloadersettings}
inherit                 {globalsettings}

Geräteoptionen
--------------
Bezeichner              {2cce4ab5-37dd-11e4-94c2-00226863bf18}
description             Ramdisk Options
ramdisksdidevice        partition=C:
ramdisksdipath          \Recovery\2cce4ab4-37dd-11e4-94c2-00226863bf18\boot.sdi



LastRegBack: 2014-09-26 08:47

==================== End Of Log ============================

--- --- ---

Browser sind trotz neuem aufsetzen immernoch sehr langsam

Log-Analyse und Auswertung: Browser sind trotz neuem aufsetzen immernoch sehr langsam

Browser sind trotz neuem aufsetzen immernoch sehr langsam

Ähnliche Themen: Browser sind trotz neuem aufsetzen immernoch sehr langsam