Windows 7: System langsam, Firefox Startseite wechselt stets, WindowsExplorer zeigt Pfade oft nicht mehr an

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:01-06-2014
Ran by Andre (administrator) on ANDRE-PC on 01-06-2014 17:43:42
Running from C:\REINIGUNG
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Just Develop It) C:\Program Files\MyPC Backup\BackupStack.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe
(Western Digital) C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital ) C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe
(Nico Mak Computing) C:\Program Files\WinZip Malware Protector\WinZipMalwareProtector.exe
(Western Digital ) C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files\CyberLink\Shared files\brs.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
(Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATICAE.EXE
(TomTom) C:\Program Files\MyTomTom 3\MyTomTomSA.exe
(PC Drivers Headquarters) C:\Program Files\Driver Mender\Driver Mender\DriverMender.exe
(Logitech Inc.) C:\Program Files\SetPoint\SetPoint.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(MyPCBackup.com) C:\Program Files\MyPC Backup\MyPC Backup.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.exe
(Valve Corporation) C:\Program Files\Steam\Steam.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
() C:\REINIGUNG\Defogger.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8555040 2010-04-06] (Realtek Semiconductor)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-09-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [UpdateLBPShortCut] => C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [MDS_Menu] => C:\Program Files\CyberLink\MediaShow4\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-12-15] (CyberLink)
HKLM\...\Run: [UpdateP2GoShortCut] => C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [RemoteControl9] => C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2009-07-06] (CyberLink Corp.)
HKLM\...\Run: [BDRegion] => C:\Program Files\Cyberlink\Shared files\brs.exe [75048 2010-05-14] (cyberlink)
HKLM\...\Run: [UpdatePPShortCut] => C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [218408 2009-02-17] (CyberLink Corp.)
HKLM\...\Run: [LGODDFU] => C:\Program Files\lg_fwupdate\fwupdate.exe [548864 2008-09-19] (BL)
HKLM\...\Run: [UpdatePSTShortCut] => C:\Program Files\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe [222504 2010-06-02] (CyberLink Corp.)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [101136 2007-01-23] (Logitech Inc.)
HKLM\...\Run: [LogitechCommunicationsManager] => C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [488984 2007-01-12] (Logitech Inc.)
HKLM\...\Run: [LVCOMSX] => C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe [244512 2007-01-12] (Logitech Inc.)
HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\winampa.exe [74752 2010-12-09] (Nullsoft, Inc.)
HKLM\...\Run: [NBAgent] => C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1406248 2011-04-08] (Nero AG)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2516296 2010-03-24] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenuEx] => C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [1246544 2010-11-03] (Logitech, Inc.)
HKLM\...\Run: [VDownloader] => C:\Program Files\VDownloader\VDownloader.exe [879104 2012-12-20] (Vitzo)
HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [162856 2013-02-19] (Geek Software GmbH)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [WD Quick View] => C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe [5236664 2012-09-19] (Western Digital Technologies, Inc.)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [295512 2014-04-02] (RealNetworks, Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-03-30] (Microsoft Corporation)
HKU\S-1-5-21-2975604841-1979800548-227392946-1000\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
HKU\S-1-5-21-2975604841-1979800548-227392946-1000\...\Run: [EPSON Stylus DX4400 Series] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [180736 2007-03-01] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2975604841-1979800548-227392946-1000\...\Run: [MyTomTomSA.exe] => C:\Program Files\MyTomTom 3\MyTomTomSA.exe [399320 2011-06-30] (TomTom)
HKU\S-1-5-21-2975604841-1979800548-227392946-1000\...\Run: [WROReminder] => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe [1419088 2011-05-16] (WinZip Computing, S.L. (WinZip Computing))
HKU\S-1-5-21-2975604841-1979800548-227392946-1000\...\Run: [ISUSPM Startup] => C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
HKU\S-1-5-21-2975604841-1979800548-227392946-1000\...\Run: [Steam] => C:\Program Files\Steam\steam.exe [1754816 2014-05-29] (Valve Corporation)
HKU\S-1-5-21-2975604841-1979800548-227392946-1000\...\Run: [Driver Mender] => C:\Program Files\Driver Mender\Driver Mender\DriverMender.exe [4044656 2013-09-19] (PC Drivers Headquarters)
HKU\S-1-5-21-2975604841-1979800548-227392946-1000\...\MountPoints2: D - D:\Setup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk
ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\SetPoint\SetPoint.exe (Logitech Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Andre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1DB14B4A4DA4CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1398601187&from=tugs&uid=WDCXWD10EARS-00MVWB0_WD-WCAZA157170271702&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=36efcde0-479e-52c3-d3d8-2dfadcb8c73e&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=05/03/2014&type=hp1000
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=36efcde0-479e-52c3-d3d8-2dfadcb8c73e&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=05/03/2014&type=hp1000
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=36efcde0-479e-52c3-d3d8-2dfadcb8c73e&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=05/03/2014&type=hp1000
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll No File
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM - Yahoo Community Smartbar (by Linkury) - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\an1fi64g.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Yahoo
FF SelectedSearchEngine: Yahoo
FF Homepage: www.google.de
FF Keyword.URL: hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=36efcde0-479e-52c3-d3d8-2dfadcb8c73e&searchtype=ds&fr=linkury-tb&installDate=05/03/2014&type=hp1000&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\an1fi64g.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-19]
FF Extension: Games Center - C:\Program Files\GamesCenter\GamesCenter.xpi [2013-02-03]
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2013-03-17]
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff [2014-03-05]
FF HKLM\...\Firefox\Extensions: [gamescenter@gamescenter.com] - C:\Program Files\GamesCenter\GamesCenter.xpi
FF Extension: Games Center - C:\Program Files\GamesCenter\GamesCenter.xpi [2013-02-03]
FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ []
FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2013-03-17]
FF HKLM\...\Firefox\Extensions: [OKitSpace@Vittalia.es] - C:\Users\Andre\AppData\Roaming\okitspace\Firefox
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-04-02]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ []
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

========================== Services (Whitelisted) =================

R2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [38440 2013-09-20] (Just Develop It)
S2 CLKMSVC10_E92D8507; C:\Program Files\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [246256 2010-05-14] (CyberLink)
S3 DAUpdaterSvc; C:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [25832 2009-12-15] (BioWare)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [598312 2011-03-29] (Nero AG)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [244904 2009-07-02] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [1740600 2013-08-30] (TuneUp Software)
R2 WDBackup; C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe [1157056 2012-09-19] (Western Digital )
R2 WDDriveService; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [248248 2012-09-19] (Western Digital)

==================== Drivers (Whitelisted) ====================

R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW73.sys [101904 2010-08-16] (ATI Technologies, Inc.)
S3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28176 2007-01-23] (Logitech, Inc.)
S3 MotioninJoyXFilter; C:\Windows\System32\DRIVERS\MijXfilt.sys [99400 2012-05-12] (MotioninJoy)
R2 npf; C:\Windows\System32\drivers\npf.sys [35088 2011-02-11] (CACE Technologies, Inc.)
S3 SIUSBXP; C:\Windows\System32\drivers\SiUSBXp.sys [21992 2012-04-02] (Silicon Laboratories)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [12320 2013-08-21] (TuneUp Software)
S3 cpuz130; \??\C:\Users\Andre\AppData\Local\Temp\cpuz130\cpuz_x32.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-01 17:43 - 2014-06-01 17:43 - 00000000 ____D () C:\FRST
2014-06-01 17:42 - 2014-06-01 17:42 - 00000000 _____ () C:\Users\Andre\defogger_reenable
2014-06-01 16:09 - 2014-06-01 16:09 - 01057792 _____ (Farbar) C:\Users\Andre\Downloads\FRST.exe
2014-06-01 16:09 - 2014-06-01 16:09 - 01057792 _____ (Farbar) C:\FRST.exe
2014-06-01 16:06 - 2014-06-01 16:06 - 00380416 _____ () C:\Users\Andre\Downloads\Gmer-19357.exe
2014-06-01 16:06 - 2014-06-01 16:06 - 00380416 _____ () C:\Gmer-19357.exe
2014-06-01 16:00 - 2014-06-01 17:43 - 00000000 ____D () C:\REINIGUNG
2014-06-01 16:00 - 2014-06-01 16:00 - 00050477 _____ () C:\Defogger.exe
2014-06-01 15:55 - 2014-06-01 15:55 - 00000063 _____ () C:\Windows\wininit.ini
2014-06-01 12:15 - 2014-06-01 12:16 - 09131533 _____ () C:\Users\Andre\Desktop\X-MEN_ DAYS OF FUTURE PAST - Official Trailer (2014)-1.mp4
2014-06-01 12:12 - 2014-06-01 12:13 - 30527876 _____ () C:\Users\Andre\Desktop\X-Men_ First Class Movie Trailer 2 Official (HD).mp4
2014-06-01 12:11 - 2014-06-01 12:11 - 26687520 _____ () C:\Users\Andre\Desktop\Guardians of the Galaxy Official Trailer #2 (2014) Marvel HD.mp4
2014-06-01 12:08 - 2014-06-01 12:09 - 09131533 _____ () C:\Users\Andre\Desktop\X-MEN_ DAYS OF FUTURE PAST - Official Trailer (2014).mp4
2014-05-31 19:59 - 2014-05-31 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-05-31 19:59 - 2014-05-31 19:59 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-05-31 12:02 - 2014-05-31 12:09 - 460687457 _____ () C:\Users\Andre\Desktop\Review_ Godzilla.mp4
2014-05-30 17:23 - 2014-05-30 17:24 - 55443313 _____ () C:\Users\Andre\Desktop\Hercules_ The Legend Begins Trailer 2014 Movie - Official [H.mp4
2014-05-30 17:22 - 2014-05-30 17:24 - 102521799 _____ () C:\Users\Andre\Desktop\The Elder Scrolls Online Full Movie Game - Cinematic Trailer.mp4
2014-05-30 16:32 - 2014-05-30 16:37 - 20958682 _____ () C:\Users\Andre\Downloads\7171.flv
2014-05-30 16:23 - 2014-05-30 16:23 - 32094449 _____ () C:\Users\Andre\Downloads\480P_563K_2901281.mp4
2014-05-30 16:02 - 2014-05-30 16:02 - 00000000 ____D () C:\Program Files\FLV Player
2014-05-30 16:01 - 2014-05-30 16:01 - 04998707 _____ () C:\Users\Andre\Downloads\flvplayer_setup20_25.exe
2014-05-29 19:28 - 2014-05-29 19:28 - 00000000 ____D () C:\Users\Andre\Downloads\abfd0032
2014-05-25 12:52 - 2014-05-29 18:41 - 00000000 ____D () C:\Users\Andre\Downloads\video
2014-05-19 03:03 - 2014-05-19 03:03 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-05-19 03:00 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-19 03:00 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-19 03:00 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-18 16:29 - 2014-05-09 09:06 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-18 16:29 - 2014-05-09 09:04 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-18 16:29 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-18 16:29 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-18 16:29 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-18 16:29 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-18 16:29 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-18 16:29 - 2014-04-12 04:11 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-18 16:29 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-18 16:29 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-05-18 16:29 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-18 16:29 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-18 16:29 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-18 16:29 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-18 16:28 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-09 21:10 - 2014-05-09 21:11 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-07 17:38 - 2014-05-07 18:54 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-05-05 22:02 - 2014-05-05 22:03 - 76533806 _____ () C:\Users\Andre\Desktop\Ghostbusters_04.zip
2014-05-05 21:56 - 2014-05-06 23:04 - 00000000 ____D () C:\Users\Andre\Downloads\582
2014-05-05 21:56 - 2014-05-06 23:04 - 00000000 ____D () C:\Users\Andre\Downloads\544
2014-05-04 16:45 - 2014-05-04 16:46 - 00000000 ____D () C:\Users\Andre\Downloads\529
2014-05-03 17:35 - 2014-05-03 17:35 - 00038815 _____ () C:\Users\Andre\Downloads\Alone-in-the-Dark-3.jpeg

==================== One Month Modified Files and Folders =======

2014-06-01 17:44 - 2010-11-13 23:18 - 00000000 ____D () C:\Users\Andre\AppData\Local\Temp
2014-06-01 17:43 - 2014-06-01 17:43 - 00000000 ____D () C:\FRST
2014-06-01 17:43 - 2014-06-01 16:00 - 00000000 ____D () C:\REINIGUNG
2014-06-01 17:42 - 2014-06-01 17:42 - 00000000 _____ () C:\Users\Andre\defogger_reenable
2014-06-01 17:42 - 2010-11-13 23:18 - 00000000 ____D () C:\Users\Andre
2014-06-01 17:23 - 2014-04-27 14:21 - 00000266 _____ () C:\Windows\Tasks\SpeedUpMyPC Maintenance.job
2014-06-01 16:51 - 2013-07-07 15:09 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-01 16:25 - 2011-02-18 17:02 - 00000000 ____D () C:\Users\Andre\AppData\Roaming\Winamp
2014-06-01 16:09 - 2014-06-01 16:09 - 01057792 _____ (Farbar) C:\Users\Andre\Downloads\FRST.exe
2014-06-01 16:09 - 2014-06-01 16:09 - 01057792 _____ (Farbar) C:\FRST.exe
2014-06-01 16:06 - 2014-06-01 16:06 - 00380416 _____ () C:\Users\Andre\Downloads\Gmer-19357.exe
2014-06-01 16:06 - 2014-06-01 16:06 - 00380416 _____ () C:\Gmer-19357.exe
2014-06-01 16:01 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-01 16:00 - 2014-06-01 16:00 - 00050477 _____ () C:\Defogger.exe
2014-06-01 15:59 - 2010-11-13 16:23 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-06-01 15:55 - 2014-06-01 15:55 - 00000063 _____ () C:\Windows\wininit.ini
2014-06-01 15:55 - 2011-01-19 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra
2014-06-01 15:54 - 2010-12-16 03:27 - 00000525 _____ () C:\Windows\QIII.INI
2014-06-01 15:44 - 2009-07-14 06:34 - 00014800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-01 15:44 - 2009-07-14 06:34 - 00014800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-01 15:40 - 2010-11-13 23:21 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-01 15:40 - 2010-11-13 23:14 - 01679178 _____ () C:\Windows\WindowsUpdate.log
2014-06-01 15:38 - 2014-01-06 20:16 - 00000000 ____D () C:\Program Files\Steam
2014-06-01 15:38 - 2014-01-06 20:16 - 00000000 ____D () C:\Program Files\Common Files\Steam
2014-06-01 15:36 - 2014-04-27 14:21 - 00000260 _____ () C:\Windows\Tasks\SpeedUpMyPC Startup.job
2014-06-01 15:35 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-01 15:35 - 2009-07-14 06:39 - 00090436 _____ () C:\Windows\setupact.log
2014-06-01 12:16 - 2014-06-01 12:15 - 09131533 _____ () C:\Users\Andre\Desktop\X-MEN_ DAYS OF FUTURE PAST - Official Trailer (2014)-1.mp4
2014-06-01 12:13 - 2014-06-01 12:12 - 30527876 _____ () C:\Users\Andre\Desktop\X-Men_ First Class Movie Trailer 2 Official (HD).mp4
2014-06-01 12:11 - 2014-06-01 12:11 - 26687520 _____ () C:\Users\Andre\Desktop\Guardians of the Galaxy Official Trailer #2 (2014) Marvel HD.mp4
2014-06-01 12:09 - 2014-06-01 12:08 - 09131533 _____ () C:\Users\Andre\Desktop\X-MEN_ DAYS OF FUTURE PAST - Official Trailer (2014).mp4
2014-05-31 19:59 - 2014-05-31 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-05-31 19:59 - 2014-05-31 19:59 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-05-31 19:59 - 2013-10-19 19:37 - 00002012 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-05-31 19:59 - 2013-07-07 15:09 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-05-31 12:09 - 2014-05-31 12:02 - 460687457 _____ () C:\Users\Andre\Desktop\Review_ Godzilla.mp4
2014-05-30 23:40 - 2011-07-29 23:39 - 00000272 _____ () C:\Windows\Tasks\Registry Optimizer_MONTHLY.job
2014-05-30 17:24 - 2014-05-30 17:23 - 55443313 _____ () C:\Users\Andre\Desktop\Hercules_ The Legend Begins Trailer 2014 Movie - Official [H.mp4
2014-05-30 17:24 - 2014-05-30 17:22 - 102521799 _____ () C:\Users\Andre\Desktop\The Elder Scrolls Online Full Movie Game - Cinematic Trailer.mp4
2014-05-30 16:09 - 2013-08-05 11:36 - 00000000 ____D () C:\Users\Andre\Desktop\promo
2014-05-30 16:02 - 2014-05-30 16:02 - 00000000 ____D () C:\Program Files\FLV Player
2014-05-30 16:01 - 2014-05-30 16:01 - 04998707 _____ () C:\Users\Andre\Downloads\flvplayer_setup20_25.exe
2014-05-29 13:22 - 2014-05-29 13:11 - 157061601 _____ () C:\Users\Andre\Downloads\2324096.mp4
2014-05-29 13:10 - 2014-05-29 12:58 - 108065452 _____ () C:\Users\Andre\Downloads\2989992.flv
2014-05-29 13:05 - 2014-05-29 13:00 - 26026621 _____ () C:\Users\Andre\Downloads\13012_hq.mp4
2014-05-29 12:04 - 2014-05-29 11:58 - 26856265 _____ () C:\Users\Andre\Downloads\348569.mp4
2014-05-29 11:54 - 2014-05-29 11:54 - 01172584 _____ () C:\Windows\Minidump\052914-31106-01.dmp
2014-05-29 11:54 - 2010-12-16 21:11 - 328451173 _____ () C:\Windows\MEMORY.DMP
2014-05-29 11:54 - 2010-12-16 21:11 - 00000000 ____D () C:\Windows\Minidump
2014-05-25 18:23 - 2013-09-27 13:53 - 00000000 ____D () C:\Users\Andre\Desktop\Horror ect
2014-05-24 23:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-19 04:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-05-19 03:31 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-19 03:22 - 2013-05-25 20:14 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-05-19 03:21 - 2014-04-30 03:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-19 03:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-05-19 03:05 - 2011-02-18 16:52 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-19 03:03 - 2014-05-19 03:03 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-05-18 17:51 - 2013-07-07 15:09 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-18 17:51 - 2013-07-07 15:09 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-05-18 16:18 - 2013-07-07 15:11 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-09 21:11 - 2014-05-09 21:10 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-09 09:06 - 2014-05-18 16:29 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 09:04 - 2014-05-18 16:29 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-07 18:54 - 2014-05-07 17:38 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-05-06 23:04 - 2014-05-05 21:56 - 00000000 ____D () C:\Users\Andre\Downloads\582
2014-05-06 23:04 - 2014-05-05 21:56 - 00000000 ____D () C:\Users\Andre\Downloads\544
2014-05-06 05:25 - 2014-05-19 03:00 - 17382912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 05:07 - 2014-05-19 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 04:10 - 2014-05-19 03:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-05 22:03 - 2014-05-05 22:02 - 76533806 _____ () C:\Users\Andre\Desktop\Ghostbusters_04.zip
2014-05-04 16:46 - 2014-05-04 16:45 - 00000000 ____D () C:\Users\Andre\Downloads\529
2014-05-03 17:35 - 2014-05-03 17:35 - 00038815 _____ () C:\Users\Andre\Downloads\Alone-in-the-Dark-3.jpeg


Some content of TEMP:
====================
C:\Users\Andre\AppData\Local\Temp\227180-672568-microsoft-picture-it.exe
C:\Users\Andre\AppData\Local\Temp\7za.dll
C:\Users\Andre\AppData\Local\Temp\AskSLib.dll
C:\Users\Andre\AppData\Local\Temp\avguidx.dll
C:\Users\Andre\AppData\Local\Temp\BackupSetup.exe
C:\Users\Andre\AppData\Local\Temp\CH.dll
C:\Users\Andre\AppData\Local\Temp\CommonInstaller.exe
C:\Users\Andre\AppData\Local\Temp\drm_dyndata_7290008.dll
C:\Users\Andre\AppData\Local\Temp\drm_dyndata_7330017.dll
C:\Users\Andre\AppData\Local\Temp\drm_dyndata_7360010.dll
C:\Users\Andre\AppData\Local\Temp\drm_dyndata_7380007.dll
C:\Users\Andre\AppData\Local\Temp\drm_dyndata_7380009.dll
C:\Users\Andre\AppData\Local\Temp\drm_dyndata_7380012.dll
C:\Users\Andre\AppData\Local\Temp\drm_dyndata_7400005.dll
C:\Users\Andre\AppData\Local\Temp\FreemakeVideoDownloader_3.6.4.3.exe
C:\Users\Andre\AppData\Local\Temp\freevideojoinersetup.exe
C:\Users\Andre\AppData\Local\Temp\gcapi_dll.dll
C:\Users\Andre\AppData\Local\Temp\gtapi_signed.dll
C:\Users\Andre\AppData\Local\Temp\GTGCAPI.exe
C:\Users\Andre\AppData\Local\Temp\MachineIdCreator.exe
C:\Users\Andre\AppData\Local\Temp\Mooii_Photoscape_Chrome_New.exe
C:\Users\Andre\AppData\Local\Temp\Mooii_Toolbar_Omaha.exe
C:\Users\Andre\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Andre\AppData\Local\Temp\MyClaroTB.exe
C:\Users\Andre\AppData\Local\Temp\NEW69E8.tmp.exe
C:\Users\Andre\AppData\Local\Temp\oi_{6DC0984C-DE9E-4B6C-B975-BB3086116793}.exe
C:\Users\Andre\AppData\Local\Temp\ose00000.exe
C:\Users\Andre\AppData\Local\Temp\patchw32.dll
C:\Users\Andre\AppData\Local\Temp\setup.exe
C:\Users\Andre\AppData\Local\Temp\ToolbarInstaller.exe
C:\Users\Andre\AppData\Local\Temp\uninst1.exe
C:\Users\Andre\AppData\Local\Temp\UNINSTALL.exe
C:\Users\Andre\AppData\Local\Temp\utildel.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe
[2014-05-18 16:29] - [2014-03-04 11:17] - 0304128 ____A (Microsoft Corporation) 998507B046BA314CE8245364C686FA67

C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-29 20:33

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-06-03 19:20:33
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 WDC_WD10EARS-00MVWB0 rev.51.0AB51 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\Andre\AppData\Local\Temp\uglorpob.sys


---- Kernel code sections - GMER 2.1 ----

.text   ntkrnlpa.exe!ZwRollbackEnlistment + 142D                                                                                                 8304EA15 1 Byte  [06]
.text   ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                                                                   83088212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text   C:\Windows\system32\DRIVERS\atikmdag.sys                                                                                                 section is writeable [0x9842B000, 0x349D76, 0xE8000020]
?       C:\Windows\system32\Drivers\rikvm_E92D8507.sys                                                                                           Das System kann die angegebene Datei nicht finden. !

---- User code sections - GMER 2.1 ----

.text   C:\Program Files\Real\RealPlayer\Update\realsched.exe[3592] kernel32.dll!SetUnhandledExceptionFilter                                     75AFF5AB 5 Bytes  [33, C0, C2, 04, 00] {XOR EAX, EAX; RET 0x4}

---- Devices - GMER 2.1 ----

Device  \Driver\CLKMDRV10_E92D8507 \Device\CLRKM#E92D8507                                                                                        rikvm_E92D8507.sys

---- Threads - GMER 2.1 ----

Thread  System [4:4804]                                                                                                                          B123FF2E

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\services\rdyboost\Parameters@LastBootPlanUserTime                                                          ?Di?, ?Jun ?03 ?14, 06:31:04???????????????????????????????????
Reg     HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000000000000F01FEC\Usage@ProductFiles  1153632872

---- EOF - GMER 2.1 ----
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version:01-06-2014
Ran by Andre at 2014-06-01 17:44:23
Running from C:\REINIGUNG
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
ALTools Update (HKLM\...\ALUpdate_is1) (Version:  - ESTsoft Corp.)
ALZip (HKLM\...\ALZip_is1) (Version: v8.0 beta1 - ESTsoft Corp.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - ATI Technologies Inc.) Hidden
ATI AVIVO Codecs (Version: 11.6.0.50930 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{47A5EFF0-3A7F-934F-C778-C7E6C8EBE497}) (Version: 3.0.795.0 - ATI Technologies, Inc.)
Canon Easy-PhotoPrint EX (HKLM\...\Easy-PhotoPrint EX) (Version:  - )
Canon Easy-WebPrint EX (HKLM\...\Easy-WebPrint EX) (Version:  - )
Canon MG5200 series Benutzerregistrierung (HKLM\...\Canon MG5200 series Benutzerregistrierung) (Version:  - )
Canon MG5200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series) (Version:  - )
Canon MP Navigator EX 4.0 (HKLM\...\MP Navigator EX 4.0) (Version:  - )
Canon My Printer (HKLM\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM\...\CanonSolutionMenuEX) (Version:  - )
Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2010.0930.2237.38732 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (Version: 2010.0930.2237.38732 - ATI) Hidden
Catalyst Control Center InstallProxy (Version: 2010.0930.2237.38732 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2010.0930.2237.38732 - ATI) Hidden
CCC Help Chinese Standard (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Chinese Traditional (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Czech (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Danish (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Dutch (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help English (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Finnish (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help French (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help German (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Greek (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Hungarian (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Italian (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Japanese (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Korean (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Norwegian (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Polish (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Portuguese (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Russian (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Spanish (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Swedish (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Thai (Version: 2010.0930.2236.38732 - ATI) Hidden
CCC Help Turkish (Version: 2010.0930.2236.38732 - ATI) Hidden
ccc-core-static (Version: 2010.0930.2237.38732 - Ihr Firmenname) Hidden
ccc-utility (Version: 2010.0930.2237.38732 - ATI) Hidden
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4643 - CDBurnerXP)
CDDRV_Installer (Version: 1.00.0000 - Logitech Inc.) Hidden
CD-LabelPrint (HKLM\...\MediaNavigation.CDLabelPrint) (Version:  - )
Citavi (HKLM\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.3.0.0 - Swiss Academic Software)
CyberLink BD Advisor 2.0 (HKLM\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version:  - )
CyberLink Blu-ray Disc Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.3226 - CyberLink Corp.)
CyberLink Blu-ray Disc Suite (Version: 6.0.3226 - CyberLink Corp.) Hidden
CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.)
CyberLink LabelPrint (Version: 2.5.1916 - CyberLink Corp.) Hidden
CyberLink LG Burning Tool (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.2.3714 - CyberLink Corp.)
CyberLink LG Burning Tool (Version: 6.2.3714 - CyberLink Corp.) Hidden
CyberLink MediaShow (HKLM\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 4.1.3402 - CyberLink Corp.)
CyberLink MediaShow (Version: 4.1.3402 - CyberLink Corp.) Hidden
CyberLink PowerDVD 9 (HKLM\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.2919.52 - CyberLink Corp.)
CyberLink PowerDVD 9 (Version: 9.0.2919.52 - CyberLink Corp.) Hidden
CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.1.1520 - CyberLink Corp.)
CyberLink PowerProducer (Version: 5.0.1.1520 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.2609 - CyberLink Corp.)
CyberLink YouCam (Version: 1.0.2609 - CyberLink Corp.) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version:  - Microsoft)
Diablo III (HKLM\...\Diablo III) (Version:  - Blizzard Entertainment)
Doom Shareware for Windows 95 (HKLM\...\Doom Shareware for Windows 95) (Version:  - )
Dragon Age II (HKLM\...\{F2E23139-3404-4E3C-9855-7724415D62A5}) (Version: 1.00 - Electronic Arts, Inc.)
Dragon Age: Origins (HKLM\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.03 - Electronic Arts, Inc.)
Driver Mender (HKLM\...\{36415915-0B92-4F82-A240-42D3C14304F0}) (Version: 8.1 - Driver Mender)
DVD Shrink 3.2 deutsch (DeCSS-frei) (HKLM\...\DVD Shrink DE_is1) (Version:  - DVD Shrink)
Easy Video Joiner 5.21 (HKLM\...\Easy Video Joiner_is1) (Version:  - DoEasier Tech Inc.)
EPSON Attach To Email (HKLM\...\InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}) (Version: 1.01.0000 - SEIKO EPSON)
EPSON Attach To Email (Version: 1.01.0000 - SEIKO EPSON) Hidden
EPSON File Manager (HKLM\...\{D02F30FB-0BC4-419A-9B9C-ADC610029B50}) (Version: 1.3.2.0 - )
EPSON Scan Assistant (HKLM\...\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}) (Version: 1.10.00 - )
EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version:  - SEIKO EPSON Corporation)
FastStone Image Viewer 4.6 (HKLM\...\FastStone Image Viewer) (Version: 4.6 - FastStone Soft)
FLV Player 2.0 (build 25) (HKLM\...\FLV Player) (Version: 2.0 (build 25) - Martijn de Visser)
Free RAR Extract Frog (HKLM\...\Free RAR Extract Frog) (Version: 5.20 - Philipp Winterberg)
Free Video Joiner (HKLM\...\{14FA6DD9-92ED-493D-A937-81A78870E08A}_is1) (Version:  - FreeVideoJoiner.com)
Free YouTube Download version 3.2.29.303 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.29.303 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.0.128 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.)
GamesCenter (HKLM\...\GamesCenter) (Version:  - GamesCenter)
Ghostbusters (TM): The Video Game (HKLM\...\InstallShield_{3A1B1652-D70A-4D19-981E-BB15D0DBF253}) (Version: 1.00.0000 - Atari)
Ghostbusters (TM): The Video Game (Version: 1.00.0000 - Atari) Hidden
GIMP 2.8.2 (HKLM\...\GIMP-2_is1) (Version: 2.8.2 - The GIMP Team)
High-Definition Video Playback (Version: 7.3.10800.5.0 - Nero AG) Hidden
HydraVision (Version: 4.2.180.0 - ATI Technologies Inc.) Hidden
IBM SPSS Statistics 20 (HKLM\...\{2AF8017B-E503-408F-AACE-8A335452CAD2}) (Version: 20.0.0.0 - IBM Corp)
ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!)
J2SE Runtime Environment 5.0 Update 9 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0150090}) (Version: 1.5.0.90 - Sun Microsystems, Inc.)
Java 7 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java Auto Updater (Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
KhalSetup (Version: 3.30.165 - Logitech) Hidden
LexiROM 2.0 (HKLM\...\Bookshelf96G) (Version:  - )
LG Tool Kit (HKLM\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 8.01.0919.01 - )
Logitech Communications Manager (Version: 10.45.1121 - Logitech, Inc.) Hidden
Logitech SetPoint (HKLM\...\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}) (Version: 3.3 - Logitech)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Monkey Island® 2 Special Edition: LeChuck’s Revenge® (HKLM\...\Monkey Island 2 Special Edition LeChuck’s Revenge) (Version: 1.00 - LucasArts)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Mozilla Firefox 29.0.1 (x86 de) (HKLM\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.5.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - MyPC Backup) <==== ATTENTION
MyTomTom 3.0.2.377 (HKLM\...\MyTomTom) (Version: 3.0.2.377 - TomTom)
Nero 10 Menu TemplatePack Basic (Version: 10.6.10000.0.0 - Nero AG) Hidden
Nero 10 Movie ThemePack Basic (Version: 10.6.10000.1.0 - Nero AG) Hidden
Nero BackItUp 10 (HKLM\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.8.10400.4.100 - Nero AG)
Nero BackItUp 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero Burning ROM 10 (HKLM\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.6.10600.4.100 - Nero AG)
Nero BurningROM 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero BurnLite 10 (HKLM\...\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}) (Version: 10.0.10600 - Nero AG)
Nero BurnLite 10 (HKLM\...\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}) (Version: 10.0.10500.5.100 - Nero AG)
Nero BurnRights 10 (HKLM\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.4.10300.1.100 - Nero AG)
Nero BurnRights 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero Control Center 10 (Version: 10.6.12600.0.5 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (Version: 10.6.10700 - Nero AG) Hidden
Nero Core Components 10 (Version: 2.0.19800.9.10 - Nero AG) Hidden
Nero CoverDesigner 10 (HKLM\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.6.10500.3.100 - Nero AG)
Nero CoverDesigner 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero DiscCopy Gadget 10 (HKLM\...\{92EC1A84-7FFC-42DF-A8F6-79C21C4765A5}) (Version: 3.6.10200.1.100 - Nero AG)
Nero DiscCopyGadget 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero DiscSpeed 10 (HKLM\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10400.0.100 - Nero AG)
Nero DiscSpeed 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero Dolby Files 10 (Version: 2.0.13000.0.10 - Nero AG) Hidden
Nero Express 10 (HKLM\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10600.4.100 - Nero AG)
Nero Express 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero InfoTool 10 (HKLM\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.4.10200.0.100 - Nero AG)
Nero InfoTool 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero Kwik Media (HKLM\...\{1F7D9F37-C39C-486C-BDF8-8F440FFB3352}) (Version: 1.6.14000.46.100 - Nero AG)
Nero Multimedia Suite 10 (HKLM\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.6.11300 - Nero AG)
Nero Recode 10 (HKLM\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.10.10600.4.100 - Nero AG)
Nero Recode 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero RescueAgent 10 (HKLM\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.6.10500.3.100 - Nero AG)
Nero RescueAgent 10 Help (CHM) (Version: 10.6.10700 - Nero AG) Hidden
Nero SoundTrax 10 (HKLM\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.10.10300.2.100 - Nero AG)
Nero SoundTrax 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero StartSmart 10 (HKLM\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10400.2.100 - Nero AG)
Nero StartSmart 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero Update (HKLM\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.10900.31.0 - Nero AG)
Nero Vision 10 (HKLM\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.4.10800.7.100 - Nero AG)
Nero Vision 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
Nero WaveEditor 10 (HKLM\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.10.10400.3.100 - Nero AG)
Nero WaveEditor 10 Help (CHM) (Version: 10.6.10600 - Nero AG) Hidden
NeroKwikMedia Help (CHM) (Version: 10.6.10700 - Nero AG) Hidden
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.46.0 - Black Tree Gaming)
NVIDIA GAME System Software 2.8.1 (HKLM\...\{4F0C7CCF-5666-474B-B02E-AC514A95EC93}) (Version: 2.8.1 - NVIDIA Corporation)
NVIDIA PhysX (HKLM\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation)
OpenAL (HKLM\...\OpenAL) (Version:  - )
Opera 12.15 (HKLM\...\Opera 12.15.1748) (Version: 12.15.1748 - Opera Software ASA)
PDF24 Creator 5.3.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
RealDownloader (Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
Realtek Ethernet Controller Driver For Windows 7 (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.18.322.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6083 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
roomeon 3D-Planer (HKLM\...\{40BF3500-3324-4648-ADED-234FF4F82C0F}) (Version: 1.5.0 - roomeon GmbH)
ScummVM 1.2.1 (HKLM\...\ScummVM_is1) (Version:  - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
Skyrim NPC Editor (HKLM\...\{5BA9357B-E876-4FB2-8F1B-C7E63AC90E6F}) (Version: 0.75.1 - foretrenty)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
SUPER © v2012.build.54 (Nov 18, 2012) Version v2012.build.54 (HKLM\...\{8F311E92-C29F-4DF9-8259-B739A1831669}_is1) (Version: v2012.build.54 - eRightSoft)
Sweet Home 3D version 4.3 (HKLM\...\Sweet Home 3D_is1) (Version:  - eTeks)
The Elder Scrolls V: Skyrim (HKLM\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Testament of Sherlock Holmes (HKLM\...\{34DFE866-287C-4621-9041-8F635942A3E3}) (Version: 1.00.0777 - Frogwares)
The Witcher 2 (HKLM\...\{F0A209B7-7F85-4BDD-8F1F-B98EEAD9E04B}) (Version: 1.00.0000 - CD Projekt Red)
The Witcher Enhanced Edition (HKLM\...\{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}) (Version: 1.4.5.1280 - CD Projekt Red)
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.89 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM\...\TuneUp Utilities 2014) (Version: 14.0.1000.89 - TuneUp Software)
TuneUp Utilities 2014 (Version: 14.0.1000.89 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.2020.4 - TuneUp Software) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
VDownloader 3.9.1360 (HKLM\...\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1) (Version:  - Vitzo Limited)
Visual Studio C++ 10.0 Runtime (HKLM\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player 1.1.11 (HKLM\...\VLC media player) (Version: 1.1.11 - VideoLAN)
WD SES Driver Setup (Version: 1.0.1.6 - Western Digital) Hidden
WD SmartWare (HKLM\...\{71980982-AEA1-480C-B748-0CB376DACDFE}) (Version: 1.6.4.7 - Western Digital Technologies, Inc.)
Winamp (HKLM\...\Winamp) (Version: 5.601  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 4.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
WinZip 16.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D2}) (Version: 16.5.10095 - WinZip Computing, S.L. )
WinZip Malware Protector (HKLM\...\WinZip Malware Protector_is1) (Version: 2.1.1000.10798 - WinZip International LLC)
WinZip Registry Optimizer (HKLM\...\WinZip Registry Optimizer_is1) (Version: 1.0 - WinZip International LLC)
Yahoo Community Smartbar (HKLM\...\{657187F0-8B08-41D3-8468-813BB85AE09E}) (Version: 10.201.66.14591 - Linkury Inc.) <==== ATTENTION
Yahoo Community Smartbar Engine (HKCU\...\{f109709b-82a7-4aaa-a0fa-5d5cfe363609}) (Version: 10.201.66.14591 - Linkury Inc.) <==== ATTENTION
Yontoo 1.10.03 (HKLM\...\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}) (Version: 1.10.03 - Yontoo LLC) <==== ATTENTION
YTD Video Downloader 3.9.3 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version:  - GreenTree Applications SRL)



==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0089A1B9-1EB8-47EE-9DCB-522DB1F4741F} - System32\Tasks\WinZip Malware Protector_startup => C:\Program Files\WinZip Malware Protector\WinZipMalwareProtector.exe [2013-07-15] (Nico Mak Computing)
Task: {165C7887-B0C8-47C9-B8F0-D2CBAF5CB757} - System32\Tasks\SpeedUpMyPC Startup => C:\Program Files\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
Task: {242C221A-3580-4775-8D85-B08248FE0944} - System32\Tasks\Registry Optimizer_MONTHLY => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe [2011-05-16] (WinZip Computing, S.L. (WinZip Computing))
Task: {3E1732D2-0BAC-46C1-BCEB-B6E6AB5BED4E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2975604841-1979800548-227392946-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {4750E878-0BED-4E28-A74A-5038FA7951F3} - System32\Tasks\DealPlyUpdate => C:\Program <==== ATTENTION
Task: {64FF2B5C-7540-4CDE-9CA7-007510D9CE00} - System32\Tasks\DealPly => C:\Users\Andre\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {6E9A6F6E-82D9-421D-8E57-99C234346171} - System32\Tasks\ESTsoft RunAsStdUser 4234849Task => C:\Program Files\ESTsoft\ALZip\ALZip.exe [2010-04-21] (ESTsoft Corp.)
Task: {70DF5482-CAEB-41A2-B649-15705DDC2F9C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-18] (Adobe Systems Incorporated)
Task: {83192A43-0FCB-42A9-AA8C-AC8366C5B294} - System32\Tasks\Driver Mender-RTMScan => C:\Program Files\Driver Mender\Driver Mender\DriverMender.exe [2013-09-19] (PC Drivers Headquarters)
Task: {8F3C0D51-1838-440E-AB5E-F5C78E9A91C4} - System32\Tasks\Driver Mender-RTMRules => C:\Program Files\Driver Mender\Driver Mender\DriverMender.exe [2013-09-19] (PC Drivers Headquarters)
Task: {B7C3664E-8A89-4700-BA51-AFC3189D1012} - System32\Tasks\Registry Optimizer_UPDATES => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe [2011-05-16] (WinZip Computing, S.L. (WinZip Computing))
Task: {BF390A92-75B5-4F9E-8FE9-52602E04F6C0} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2014\OneClick.exe [2013-08-30] (TuneUp Software)
Task: {C0B69186-136F-4CC0-A4E4-D9CE96CE788A} - System32\Tasks\Driver Mender-RTMScanRunOnce => C:\Program Files\Driver Mender\Driver Mender\DriverMender.exe [2013-09-19] (PC Drivers Headquarters)
Task: {D8D3CC1B-9216-4622-B179-14AD6FA6E6B7} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2975604841-1979800548-227392946-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {E1F5107B-36A7-414B-90A5-B171BA95C669} - System32\Tasks\SpeedUpMyPC Maintenance => C:\Program Files\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
Task: {F1C25684-84A3-4772-8C2E-EE3285A9643B} - System32\Tasks\Driver Mender-RTMUpdater => C:\Program Files\Driver Mender\Driver Mender\DriverMender.exe [2013-09-19] (PC Drivers Headquarters)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Registry Optimizer_MONTHLY.job => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe
Task: C:\Windows\Tasks\Registry Optimizer_UPDATES.job => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe
Task: C:\Windows\Tasks\SpeedUpMyPC Maintenance.job => C:\Program Files\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
Task: C:\Windows\Tasks\SpeedUpMyPC Startup.job => C:\Program Files\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-03-05 23:58 - 2014-03-05 23:58 - 00911904 _____ () C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
2013-08-14 15:19 - 2013-08-14 15:19 - 00039056 _____ () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
2010-11-13 16:36 - 2009-07-02 16:02 - 00244904 ____N () C:\Program Files\CyberLink\Shared files\RichVideo.exe
2013-08-30 10:51 - 2013-08-30 10:51 - 00501560 _____ () C:\Program Files\TuneUp Utilities 2014\avgreplibx.dll
2014-04-27 15:20 - 2013-02-28 16:53 - 00886272 _____ () C:\Program Files\WinZip Malware Protector\System.Data.SQLite.dll
2014-04-27 15:20 - 2013-07-15 16:53 - 01717936 _____ () C:\Program Files\WinZip Malware Protector\aspsys.dll
2011-11-26 13:15 - 2011-05-28 23:04 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll
2009-12-15 14:46 - 2009-12-15 14:46 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll
2009-12-15 14:49 - 2009-12-15 14:49 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll
2010-08-04 16:58 - 2010-08-04 16:58 - 00016384 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-09-30 23:36 - 2010-09-30 23:36 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-06-30 14:04 - 2011-06-30 14:04 - 00060888 _____ () C:\Program Files\MyTomTom 3\TomTomSupporterBase.dll
2011-06-30 14:04 - 2011-06-30 14:04 - 07964160 _____ () C:\Program Files\MyTomTom 3\QtGui4.dll
2011-06-30 14:04 - 2011-06-30 14:04 - 02302464 _____ () C:\Program Files\MyTomTom 3\QtCore4.dll
2011-06-30 14:04 - 2011-06-30 14:04 - 00183256 _____ () C:\Program Files\MyTomTom 3\TomTomSupporterProxy.dll
2011-06-30 14:04 - 2011-06-30 14:04 - 00039424 _____ () C:\Program Files\MyTomTom 3\TomTomPackage.dll
2011-06-30 14:04 - 2011-06-30 14:04 - 00980480 _____ () C:\Program Files\MyTomTom 3\QtNetwork4.dll
2011-06-30 14:04 - 2011-06-30 14:04 - 00357888 _____ () C:\Program Files\MyTomTom 3\QtXml4.dll
2014-03-10 23:16 - 2014-03-10 23:16 - 00119296 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\XPBurnComponent\7c073b54ec853dd6cbd0c3e4c6ba56ea\XPBurnComponent.ni.dll
2013-09-19 11:04 - 2013-09-19 11:04 - 00829832 _____ () C:\Program Files\Driver Mender\Driver Mender\ThemePack.DriverMender.dll
2013-09-19 10:31 - 2013-09-19 10:31 - 00412064 _____ () C:\Program Files\Driver Mender\Driver Mender\Agent.Communication.XmlSerializers.dll
2013-09-20 00:37 - 2013-09-20 00:37 - 00012288 _____ () C:\Program Files\MyPC Backup\GetText.dll
2014-05-28 19:14 - 2014-04-30 02:08 - 01135104 _____ () C:\Program Files\Steam\libavcodec-55.dll
2014-04-23 18:40 - 2014-04-30 02:08 - 00471552 _____ () C:\Program Files\Steam\libavutil-53.dll
2014-05-28 19:14 - 2014-04-30 02:08 - 00404992 _____ () C:\Program Files\Steam\libavformat-55.dll
2014-01-08 08:34 - 2014-04-30 02:08 - 00340992 _____ () C:\Program Files\Steam\libavresample-1.dll
2013-11-06 14:48 - 2014-05-17 03:36 - 00756224 _____ () C:\Program Files\Steam\SDL2.dll
2014-05-28 19:14 - 2014-05-29 19:37 - 02139840 _____ () C:\Program Files\Steam\video.dll
2014-05-28 19:14 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files\Steam\libswscale-2.dll
2013-12-11 12:40 - 2014-05-29 19:36 - 01116864 _____ () C:\Program Files\Steam\bin\chromehtml.DLL
2013-11-06 14:48 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files\Steam\bin\libcef.dll
2013-06-14 16:49 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files\Steam\bin\avcodec-53.dll
2013-06-14 16:49 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files\Steam\bin\avutil-51.dll
2013-06-14 16:49 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files\Steam\bin\avformat-53.dll
2014-05-09 21:10 - 2014-05-09 21:11 - 03839088 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-03-17 15:02 - 2013-03-17 15:02 - 00122880 _____ () C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox\components\CitaviPickerCommunication.dll
2014-05-18 17:51 - 2014-05-18 17:51 - 16361136 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll
2014-06-01 16:00 - 2014-06-01 16:00 - 00050477 _____ () C:\REINIGUNG\Defogger.exe

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:9FB286BF

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Marvell 91xx Config ATA Device
Description: Marvell 91xx Config ATA Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/01/2014 03:56:09 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {1c2da946-5a15-489d-9ea5-6256d8f37077}

Error: (06/01/2014 03:37:03 PM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (06/01/2014 03:12:34 PM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (06/01/2014 10:42:55 AM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (05/30/2014 07:16:15 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 29.0.1.5239 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 161c

Startzeit: 01cf7b245e4ad807

Endzeit: 294

Anwendungspfad: C:\Program Files\Mozilla Firefox\firefox.exe

Berichts-ID: 184d96e3-e81e-11e3-b194-6c626d4ae432

Error: (05/29/2014 11:56:11 AM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (05/28/2014 07:14:12 PM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (05/27/2014 05:41:59 PM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (05/27/2014 05:41:42 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Winzipro.exe, Version 1.0.72.1448 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 978

Startzeit: 01cf79c20ede42dd

Endzeit: 11

Anwendungspfad: C:\Program Files\WinZip Registry Optimizer\Winzipro.exe

Berichts-ID: 5fb74120-e5b5-11e3-a5df-6c626d4ae432

Error: (05/25/2014 03:29:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 1.1.11.0, Zeitstempel: 0x4e1edf37
Name des fehlerhaften Moduls: vlc.exe, Version: 1.1.11.0, Zeitstempel: 0x4e1edf37
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000174c
ID des fehlerhaften Prozesses: 0x3a70
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3


System errors:
=============
Error: (06/01/2014 03:38:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (06/01/2014 03:38:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (06/01/2014 03:32:14 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (06/01/2014 03:12:36 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (06/01/2014 00:51:44 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (06/01/2014 10:43:50 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (06/01/2014 10:43:50 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (05/29/2014 11:55:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/29/2014 11:55:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (05/29/2014 11:54:58 AM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000116 (0x87113008, 0x910258bc, 0x00000000, 0x00000002)C:\Windows\MEMORY.DMP052914-31106-01


Microsoft Office Sessions:
=========================
Error: (06/01/2014 03:56:09 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {1c2da946-5a15-489d-9ea5-6256d8f37077}

Error: (06/01/2014 03:37:03 PM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (06/01/2014 03:12:34 PM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (06/01/2014 10:42:55 AM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (05/30/2014 07:16:15 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: firefox.exe29.0.1.5239161c01cf7b245e4ad807294C:\Program Files\Mozilla Firefox\firefox.exe184d96e3-e81e-11e3-b194-6c626d4ae432

Error: (05/29/2014 11:56:11 AM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (05/28/2014 07:14:12 PM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (05/27/2014 05:41:59 PM) (Source: BackItUp5) (EventID: 5225) (User: )
Description: IDS_LINUX_INST_ERROR

Error: (05/27/2014 05:41:42 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Winzipro.exe1.0.72.144897801cf79c20ede42dd11C:\Program Files\WinZip Registry Optimizer\Winzipro.exe5fb74120-e5b5-11e3-a5df-6c626d4ae432

Error: (05/25/2014 03:29:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe1.1.11.04e1edf37vlc.exe1.1.11.04e1edf37c00000050000174c3a7001cf781d4e94dbecC:\Program Files\VLC\vlc.exeC:\Program Files\VLC\vlc.exe93168672-e410-11e3-ad99-6c626d4ae432


==================== Memory info =========================== 

Percentage of memory in use: 50%
Total physical RAM: 3319.11 MB
Available physical RAM: 1646.08 MB
Total Pagefile: 6636.52 MB
Available Pagefile: 4082.5 MB
Total Virtual: 2047.88 MB
Available Virtual: 1888.14 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:480.6 GB) NTFS
Drive d: (Monk Season 4) (CDROM) (Total:4.09 GB) (Free:0 GB) CDFS
Drive f: (EXTERN 1000) (Fixed) (Total:931.51 GB) (Free:383.86 GB) NTFS
Drive g: (EXTERN 3000) (Fixed) (Total:2794.49 GB) (Free:1776.53 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: B194745B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 1.

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 4E29C894)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================