Windows7: Internet Probleme - 1500+ Pings

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 16:25:12, on 04.07.2014
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)

FIREFOX: 28.0 (de)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\AVG\AVG2013\avgui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Glary Utilities 3\Integrator.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\taskeng.exe
C:\Users\David\Downloads\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: virscan.org
O1 - Hosts: virustotal.com
O1 - Hosts: google.de
O1 - Hosts: google.com
O1 - Hosts: facebook.com
O1 - Hosts: elitepvpers.com
O1 - Hosts: chip.de
O1 - Hosts: paypal.de
O1 - Hosts: youtube.com
O1 - Hosts: gronkh.de
O1 - Hosts: gutefrage.net
O1 - Hosts: ask.com
O1 - Hosts: twitter.com
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.5.512\AVG SafeGuard toolbar_toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.5.512\AVG SafeGuard toolbar_toolbar.dll
O4 - HKLM\..\Run: [Nvtmru] "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-21-2482450661-2526490011-521941241-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2482450661-2526490011-521941241-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{54A567A6-E0FC-4424-9A53-4D860740CA00}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.5\ViProtocol.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O22 - SharedTaskScheduler: Theme Resource Changer - {F791A188-699D-4FD4-955A-EB59E89B1907} - \Program Files\Theme Resource Changer\ThemeResourceChanger.dll (file missing)
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 7345 bytes
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:03-07-2014
Ran by David (administrator) on IP-STAR on 04-07-2014 19:01:29
Running from C:\Users\David\Downloads
Platform: Microsoft Windows 7 Ultimate  (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgidsagent.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgwdsvc.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Glarysoft Ltd) C:\Program Files\Glary Utilities 3\Integrator.exe
() C:\Program Files\RocketDock\RocketDock.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgemcx.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgrsx.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcsrvx.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Trend Micro Inc.) C:\Users\David\Downloads\HijackThis.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\mmc.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Nvtmru] => C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-27] (NVIDIA Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2013\avgui.exe [4411952 2014-01-21] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2482450661-2526490011-521941241-1000\...\Run: [RocketDock] => C:\Program Files\RocketDock\RocketDock.exe [495616 2007-09-02] ()
ShellIconOverlayIdentifiers:  AccExtIco1 -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers:  AccExtIco2 -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers:  AccExtIco3 -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
BootExecute: autocheck autochk *  
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6865452D8673CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={4D2B802F-99F6-410C-B005-0C79D269FE26}&mid=e6753ea9d18647d3ab00d16b2eb9658e-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=de&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-04-21 11:22:40&v=18.0.5.292&pid=safeguard&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={4D2B802F-99F6-410C-B005-0C79D269FE26}&mid=e6753ea9d18647d3ab00d16b2eb9658e-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=de&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-04-21 11:22:40&v=18.0.5.292&pid=safeguard&sg=&sap=dsp&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.5.512\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.5.512\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.5\ViProtocol.dll (AVG Secure Search)
Tcpip\..\Interfaces\{54A567A6-E0FC-4424-9A53-4D860740CA00}: [NameServer]8.8.8.8,8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\c9c08qh6.default-1393795875130
FF DefaultSearchEngine: AVG Secure Search
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxp://mysearch.avg.com?cid={4D2B802F-99F6-410C-B005-0C79D269FE26}&mid=e6753ea9d18647d3ab00d16b2eb9658e-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=de&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-04-21 11:22:40&v=18.0.5.292&pid=safeguard&sg=&sap=hp
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.5\\npsitesafety.dll No File
FF Plugin: @java.com/DTPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @raidcall.en/RCplugin - C:\Users\David\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=1.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\David\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Yahoo Community Smartbar - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\c9c08qh6.default-1393795875130\Extensions\{3f766248-b560-4cd1-bcd0-c86066b33f12} [2014-04-02]
FF Extension: Adblock Plus - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\c9c08qh6.default-1393795875130\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-02]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.5.512
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.5.512 [2014-05-05]

Chrome: 
=======
CHR HomePage: hxxp://google.de/
CHR StartupUrls: "hxxp://www.google.de/"
CHR Extension: (ProxFlow) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-06-26]
CHR Extension: (GMX MailCheck) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\camnampocfohlcgbajligmemmabnljcm [2014-06-26]
CHR Extension: (Adblock Plus) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-06-26]
CHR Extension: (AVG Secure Search) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2014-06-26]
CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-22]
CHR HKLM\...\Chrome\Extension: [oaohcbckphiilkaoadddmgppmibgbjeh] - C:\Program Files\MediaViewV1\MediaViewV1alpha2368\ch\MediaViewV1alpha2368.crx [2013-12-22]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-03-28] (Advanced Micro Devices, Inc.) [File not signed]
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14592288 2013-07-27] (NVIDIA Corporation)
S4 OverwolfUpdaterService; C:\Program Files\Overwolf\OverwolfUpdater.exe [99616 2014-03-05] (Overwolf LTD)
S4 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-05-31] ()
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) [File not signed]
S4 vncserver; C:\Program Files\RealVNC\VNC Server\vncservice.exe [465216 2014-06-03] (RealVNC Ltd)
S4 vToolbarUpdater18.1.5; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.5\ToolbarUpdater.exe [1801752 2014-05-05] (AVG Secure Search)
S4 Hamachi2Svc; "C:\Program Files\LogMeIn Hamachi\hamachi-2.exe" -s [X]
S4 LMIGuardianSvc; "C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe" [X]
S4 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]

==================== Drivers (Whitelisted) ====================

S3 apf003; C:\Windows\system32\apf003.sys [13232 2013-09-16] () [File not signed]
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [208184 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [60216 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22328 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [171320 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [96568 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [39224 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [182072 2014-04-15] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42784 2014-05-05] (AVG Technologies)
S3 EagleXNt; C:\Windows\system32\drivers\EagleXNt.sys [516672 2013-09-29] (AhnLab, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2009-12-18] (Elaborate Bytes AG)
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [30976 2014-07-01] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-07-04] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34592 2013-05-14] (NVIDIA Corporation)
S3 ProcObsrv; C:\Program Files\Glary Utilities 3\ProcObsrv.sys [11552 2013-09-02] (Glarysoft Ltd)
S3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [33016 2013-05-17] (Windows (R) Win 7 DDK provider)
S3 SaiK0728; C:\Windows\System32\DRIVERS\SaiK0728.sys [104960 2008-02-18] (Saitek)
S3 SaiK0CC3; C:\Windows\System32\DRIVERS\SaiK0CC3.sys [145256 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [23200 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [46624 2013-04-30] (Saitek)
S3 SaiU0CC3; C:\Windows\System32\DRIVERS\SaiU0CC3.sys [41320 2012-09-20] (Saitek)
S3 SCREAMINGBDRIVER; C:\Windows\System32\drivers\ScreamingBAudio.sys [34896 2012-07-31] (Screaming Bee LLC)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2013-07-11] () [File not signed]
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
R3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [4608 2014-06-03] (RealVNC Ltd.)
U3 a9zsx30c; C:\Windows\system32\Drivers\a9zsx30c.sys [0 ] (Microsoft Corporation)
S0 BootDefragDriver; System32\drivers\BootDefragDriver.sys [X]
S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-04 19:01 - 2014-07-04 19:01 - 00017840 _____ () C:\Users\David\Downloads\FRST.txt
2014-07-04 19:01 - 2014-07-04 19:01 - 00000000 ____D () C:\FRST
2014-07-04 19:00 - 2014-07-04 19:00 - 01073664 _____ (Farbar) C:\Users\David\Downloads\FRST.exe
2014-07-04 16:38 - 2014-07-04 16:56 - 43469717 _____ () C:\Users\David\Downloads\a.s06e10.480p.u287685.Rapidmoviez.com.rar
2014-07-04 16:29 - 2014-07-04 16:29 - 00000000 ____D () C:\Users\David\Downloads\backups
2014-07-02 21:24 - 2014-07-02 21:24 - 31719808 _____ () C:\Users\David\Desktop\test.txt
2014-07-02 20:07 - 2014-07-02 20:07 - 00000036 _____ () C:\Users\David\Downloads\Download (1)
2014-07-02 20:07 - 2014-07-02 20:07 - 00000036 _____ () C:\Users\David\Downloads\Download
2014-07-02 20:01 - 2014-07-02 20:01 - 00094627 _____ () C:\Users\David\Downloads\smsniff.zip
2014-07-02 20:01 - 2014-07-02 20:01 - 00002997 _____ () C:\Users\David\Downloads\smsniff_german.zip
2014-07-02 19:51 - 2014-07-02 19:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\David\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-01 19:23 - 2014-07-04 16:25 - 00007346 _____ () C:\Users\David\Downloads\hijackthis.log
2014-07-01 19:22 - 2014-07-01 19:22 - 00388608 _____ (Trend Micro Inc.) C:\Users\David\Downloads\HijackThis.exe
2014-07-01 19:15 - 2014-07-01 19:15 - 00007604 _____ () C:\Users\David\AppData\Local\Resmon.ResmonCfg
2014-07-01 07:43 - 2014-07-04 16:09 - 00000448 _____ () C:\Windows\setupact.log
2014-07-01 07:43 - 2014-07-01 19:59 - 00002440 _____ () C:\Windows\PFRO.log
2014-07-01 07:43 - 2014-07-01 07:43 - 00030976 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-07-01 07:43 - 2014-07-01 07:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-30 20:13 - 2014-07-04 18:25 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-30 20:13 - 2014-06-30 20:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-30 20:13 - 2014-06-30 20:13 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-06-30 20:13 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-30 20:13 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-29 18:20 - 2014-06-29 18:20 - 00793366 _____ () C:\Users\David\Downloads\ExtrabiomesXL-universal-1.6.4-3.15.8.jar
2014-06-29 18:18 - 2014-06-29 18:18 - 05331810 _____ () C:\Users\David\Downloads\BiomesOPlenty-universal-1.6.4-1.2.1.434.jar
2014-06-29 18:08 - 2014-06-29 18:08 - 05331807 _____ () C:\Users\David\Downloads\BiomesOPlenty-universal-1.6.4-1.2.1.418.jar
2014-06-29 18:08 - 2014-06-29 18:08 - 05331807 _____ () C:\Users\David\Desktop\BiomesOPlenty-universal-1.6.4-1.2.1.418.jar
2014-06-29 18:07 - 2014-06-29 18:07 - 04553825 _____ () C:\Users\David\Downloads\Biomes-O-Plenty-0.5.5.zip
2014-06-29 18:06 - 2014-06-29 18:07 - 05390946 _____ () C:\Users\David\Downloads\BiomesOPlenty-universal-1.7.2-2.0.0.579.jar
2014-06-29 18:04 - 2014-06-29 18:05 - 03686699 _____ () C:\Users\David\Downloads\witchery-1.6.4-0.19.2.zip
2014-06-29 18:01 - 2014-06-29 18:01 - 00814413 _____ () C:\Users\David\Downloads\FoodPlus-1.6.4-2.9.5rS.jar
2014-06-29 18:00 - 2014-06-29 18:01 - 05390946 _____ () C:\Users\David\Desktop\BiomesOPlenty-universal-1.7.2-2.0.0.579.jar
2014-06-29 17:58 - 2014-06-29 17:58 - 00993526 _____ () C:\Users\David\Downloads\files^Morph-Beta-0.4.0.zip
2014-06-29 17:58 - 2014-06-29 17:57 - 00101985 _____ () C:\Users\David\Desktop\OptiFine_1.6.4_L_C7.jar
2014-06-29 17:57 - 2014-06-29 17:57 - 00101985 _____ () C:\Users\David\Downloads\OptiFine_1.6.4_L_C7.jar
2014-06-29 17:50 - 2014-06-29 17:50 - 00395572 _____ () C:\Users\David\Downloads\ZansMinimap1.6.4.zip
2014-06-29 17:49 - 2014-06-29 17:49 - 00191853 _____ () C:\Users\David\Downloads\InventoryTweaks Mod 1.6.4.jar
2014-06-29 17:46 - 2014-06-29 17:46 - 00099539 _____ () C:\Users\David\Downloads\OptiFine_1.6.2_L_C4.jar
2014-06-29 17:37 - 2014-06-29 17:37 - 02206698 _____ () C:\Users\David\Downloads\minecraftforge-installer-1.6.4-9.11.0.883.jar
2014-06-29 17:34 - 2014-06-29 17:34 - 00005506 _____ () C:\Users\David\Downloads\advancedGenetics_v1.1_api.zip
2014-06-29 10:41 - 2014-06-29 10:41 - 00000000 ____D () C:\Users\David\Desktop\re_degetized_windows_7_theme_by_designfjotten-d57fe1u
2014-06-29 10:37 - 2014-07-01 19:16 - 00000000 ____D () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Theme Resource Changer X86 v1.0
2014-06-29 10:13 - 2014-06-29 10:13 - 04586070 _____ () C:\Users\David\Downloads\theme resource changer.rar
2014-06-29 10:13 - 2014-06-29 10:13 - 00000450 _____ () C:\Users\David\Downloads\Theme resource Changer Drive Fix.reg
2014-06-29 09:59 - 2009-12-31 10:20 - 00000000 ____D () C:\Users\David\Desktop\Dark Agility
2014-06-29 09:58 - 2014-06-29 09:58 - 06167634 _____ () C:\Users\David\Downloads\uxpatcher11.zip
2014-06-29 09:57 - 2014-06-29 09:57 - 15834309 _____ () C:\Users\David\Downloads\Dark_Agility___Visual_Style____by_DjabyTown.rar
2014-06-29 09:57 - 2014-06-29 09:57 - 00961360 _____ (Chip Digital GmbH) C:\Users\David\Downloads\UxTheme Multi Patcher - CHIP-Installer.exe
2014-06-28 12:35 - 2014-06-28 12:48 - 39956844 _____ () C:\Users\David\Downloads\a.S06E09.480p.u284816.Rapidmoviez.com.rar
2014-06-24 13:39 - 2014-06-24 14:00 - 00000001 ____R () C:\Users\David\serverport
2014-06-24 13:39 - 2014-06-24 13:39 - 00000000 ____D () C:\Users\David\.jivex
2014-06-24 13:38 - 2014-06-24 13:39 - 00000000 ____D () C:\Users\David\Desktop\MRT
2014-06-24 12:28 - 2014-06-24 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-06-23 15:34 - 2014-06-23 15:34 - 06966681 _____ () C:\Users\David\Downloads\GT-Logo20.rar
2014-06-23 15:34 - 2014-06-23 15:34 - 00125017 _____ () C:\Users\David\Downloads\GT-Logo21.rar
2014-06-23 15:27 - 2014-06-23 15:32 - 123948069 _____ () C:\Users\David\Downloads\TeeqeyHD's Logo PSD Pack!.zip
2014-06-22 23:36 - 2014-06-22 23:36 - 00148818 _____ () C:\Users\David\Downloads\GT-Playersheet08.rar
2014-06-22 23:26 - 2014-06-22 23:26 - 00612421 _____ () C:\Users\David\Downloads\GT-Logo09.rar
2014-06-22 23:15 - 2014-06-22 23:15 - 00094186 _____ () C:\Users\David\Downloads\Logo_#05 (1).rar
2014-06-22 23:11 - 2014-06-22 23:11 - 00094186 _____ () C:\Users\David\Downloads\Logo_#05.rar
2014-06-22 23:09 - 2014-06-22 23:09 - 00000000 ____D () C:\Users\David\AppData\Roaming\PDAppFlex
2014-06-22 23:08 - 2014-06-22 23:10 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-06-22 23:05 - 2014-06-22 23:05 - 00001256 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2014 (32 Bit).lnk
2014-06-22 22:50 - 2014-06-22 22:51 - 00000000 ___RD () C:\Users\David\Creative Cloud Files
2014-06-22 22:48 - 2014-06-22 22:48 - 00001279 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2014-06-22 22:48 - 2014-06-22 22:48 - 00001267 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2014-06-22 22:47 - 2014-06-22 22:47 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-22 22:43 - 2014-06-22 22:43 - 03103624 _____ (Adobe Systems Incorporated) C:\Users\David\Downloads\CreativeCloudSet-Up.exe
2014-06-22 20:02 - 2014-06-22 20:02 - 00012763 _____ () C:\Users\David\AppData\Local\recently-used.xbel
2014-06-22 18:05 - 2014-06-22 18:06 - 00210627 _____ () C:\Users\David\Downloads\teamspeak.gadget
2014-06-22 18:02 - 2014-06-22 18:02 - 00524216 _____ () C:\Users\David\Downloads\setup.exe
2014-06-22 17:41 - 2014-06-22 17:41 - 00428420 _____ () C:\Users\David\Downloads\MW3_Design_by_Blade_TP_.zip
2014-06-22 17:41 - 2014-06-22 17:41 - 00000000 ____D () C:\Users\David\Downloads\MW3_Design_by_Blade_TP_
2014-06-22 17:33 - 2014-06-22 17:33 - 00000000 ____D () C:\Users\David\Downloads\BF3_Design_by_Blade_TP_
2014-06-22 17:32 - 2014-06-25 15:34 - 00477112 _____ () C:\Users\David\Downloads\BF3_Design_by_Blade_TP_.zip
2014-06-22 17:30 - 2014-06-22 17:30 - 00245430 _____ () C:\Users\David\Downloads\3b_dooki___WI_3.2___BETA_01.zip
2014-06-22 11:28 - 2014-06-22 11:28 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-06-22 11:28 - 2014-06-22 11:28 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-06-22 11:28 - 2014-06-22 11:28 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-06-22 11:28 - 2014-06-22 11:28 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-06-22 11:28 - 2014-06-22 11:28 - 00001322 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Knuddels.de.lnk
2014-06-22 11:28 - 2014-06-22 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-22 11:28 - 2014-06-22 11:28 - 00000000 ____D () C:\Program Files\Java
2014-06-22 11:28 - 2014-06-22 11:28 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-06-22 01:41 - 2014-06-22 01:41 - 00106920 _____ () C:\Users\David\Downloads\sh
2014-06-21 22:04 - 2014-06-21 22:04 - 00000000 ____D () C:\Users\David\Downloads\wordpress-3.9.1-de_DE
2014-06-21 20:58 - 2014-06-21 20:58 - 00000513 _____ () C:\Users\David\Downloads\download.html
2014-06-21 20:43 - 2014-06-21 20:43 - 00000000 ____D () C:\Users\David\Downloads\ts3wi_3.4.2
2014-06-21 20:42 - 2014-06-21 20:42 - 00761726 _____ () C:\Users\David\Downloads\ts3wi_3.4.2 (1).rar
2014-06-20 22:24 - 2014-06-20 23:16 - 00000000 ____D () C:\Users\David\Downloads\iRedMail-0.8.7
2014-06-20 22:23 - 2014-06-20 22:23 - 00113103 _____ () C:\Users\David\Downloads\iRedMail-0.8.7.tar.bz2
2014-06-20 22:20 - 2014-06-20 22:20 - 00000000 ____D () C:\Users\David\Desktop\iRedMail-0.8.6
2014-06-20 22:17 - 2014-06-20 22:17 - 10533558 _____ () C:\initrd.img
2014-06-20 21:54 - 2014-06-20 21:54 - 00000000 ____H () C:\Users\David\Documents\Default.rdp
2014-06-20 21:43 - 2014-06-03 10:51 - 00033096 _____ (RealVNC Ltd) C:\Windows\system32\VNCpm.dll
2014-06-20 21:42 - 2014-07-01 19:32 - 00000000 ____D () C:\Program Files\RealVNC
2014-06-20 21:42 - 2014-06-21 02:20 - 00000000 ____D () C:\Users\David\AppData\Local\RealVNC
2014-06-20 21:42 - 2014-06-20 21:42 - 00000000 ____D () C:\ProgramData\RealVNC-Service
2014-06-20 21:42 - 2014-06-20 21:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealVNC
2014-06-20 21:41 - 2014-06-20 21:42 - 12757920 _____ (RealVNC Ltd ) C:\Users\David\Downloads\VNC-5.2.0-Windows.exe
2014-06-19 00:19 - 2014-06-19 00:19 - 00000000 ____D () C:\Users\David\Downloads\Musik
2014-06-17 23:22 - 2014-06-17 23:22 - 21577728 _____ () C:\Users\David\Downloads\Texture Hack V1.6 by War3zdude92s Texture Hacking Team (1).rar
2014-06-17 17:08 - 2014-06-17 17:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-06-14 15:53 - 2014-06-14 15:53 - 00000000 ____D () C:\Users\David\Desktop\Texture Hack V1.6 by War3zdude92's Texture Hacking Team
2014-06-14 15:37 - 2014-06-14 15:44 - 171368593 _____ () C:\Users\David\Downloads\Texture Hack V1.6 by War3zdude92s Texture Hacking Team.rar
2014-06-13 13:58 - 2014-06-13 14:29 - 96745599 _____ () C:\Users\David\Downloads\a.S06E07.u278995.Rapidmoviez.com.rar
2014-06-12 20:29 - 2014-06-12 20:29 - 00028332 _____ () C:\Users\David\Downloads\MW3_FoV_Changer_v1-9-446-0.zip
2014-06-11 16:33 - 2014-06-11 16:33 - 00000389 _____ () C:\Users\David\Downloads\Teamspeak3-Linux-Server.rar
2014-06-10 23:15 - 2014-06-10 20:54 - 00000924 _____ () C:\Users\David\Desktop\licensekey.dat
2014-06-10 20:54 - 2014-06-10 20:54 - 00000924 _____ () C:\Users\David\Downloads\licensekey.dat
2014-06-10 09:44 - 2014-06-10 09:44 - 00046634 _____ () C:\Users\David\Downloads\default_custom-2.12.ts3_style
2014-06-10 09:29 - 2014-06-10 09:29 - 00000000 ____D () C:\Users\David\Downloads\JTS3ServerMod_5.2
2014-06-10 09:28 - 2014-06-10 09:28 - 00280410 _____ () C:\Users\David\Downloads\JTS3ServerMod_5.2.zip
2014-06-09 14:24 - 2014-06-09 14:24 - 00000000 ____D () C:\Users\David\AppData\Roaming\Screaming Bee
2014-06-08 17:43 - 2014-06-08 17:43 - 00794960 _____ () C:\Users\David\Downloads\ts3_recording_14_06_08_17_43_24.wav
2014-06-08 12:27 - 2014-06-08 14:29 - 00178172 _____ () C:\Users\David\Downloads\ArizonaClan TS3.txt
2014-06-07 00:52 - 2014-07-01 19:17 - 00004495 _____ () C:\Users\David\Desktop\ts3daten.txt
2014-06-07 00:43 - 2014-06-07 00:43 - 00761726 _____ () C:\Users\David\Downloads\ts3wi_3.4.2.rar
2014-06-07 00:38 - 2014-06-07 00:38 - 04361521 _____ () C:\Users\David\Downloads\teamspeak3-server_linux-amd64-3.0.10.3.tar.gz
2014-06-06 18:32 - 2014-06-06 18:33 - 36386893 _____ () C:\Users\David\Downloads\a.S06E06.480p.u275837.Rapidmoviez.com.rar
2014-06-06 16:47 - 2014-06-06 16:47 - 00798770 _____ () C:\Users\David\Downloads\tesla.1.06.zip
2014-06-05 21:44 - 2014-06-05 21:44 - 00000000 ____D () C:\Users\David\AppData\Local\SniperV2
2014-06-05 18:47 - 2014-06-05 18:47 - 00001709 _____ () C:\Users\David\Downloads\bilderhoster_net-rfdwx5x2.png.txt
2014-06-05 17:39 - 2014-06-05 17:39 - 00166649 _____ () C:\Users\David\Downloads\nulshock.zip
2014-06-05 16:01 - 2014-06-05 16:01 - 00000000 ____D () C:\Users\David\Downloads\wisebusiness_wp
2014-06-05 16:00 - 2014-06-05 16:00 - 00000181 _____ () C:\Users\David\Downloads\listdomain.php4
2014-06-05 15:50 - 2014-06-05 15:50 - 01241825 _____ () C:\Users\David\Downloads\wisebusiness_wp.zip
2014-06-04 19:02 - 2014-06-04 19:06 - 06774009 _____ () C:\Users\David\Downloads\wordpress-3.9.1-de_DE.zip
2014-06-04 17:18 - 2014-06-04 17:18 - 00495616 _____ (Simon Tatham) C:\Users\David\Downloads\putty.exe
2014-06-04 09:37 - 2014-06-19 00:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realmware BF3 Tools
2014-06-04 09:37 - 2014-06-04 09:37 - 00000000 ____D () C:\Users\David\AppData\Local\Realmware

==================== One Month Modified Files and Folders =======

2014-07-04 19:01 - 2014-07-04 19:01 - 00017840 _____ () C:\Users\David\Downloads\FRST.txt
2014-07-04 19:01 - 2014-07-04 19:01 - 00000000 ____D () C:\FRST
2014-07-04 19:00 - 2014-07-04 19:00 - 01073664 _____ (Farbar) C:\Users\David\Downloads\FRST.exe
2014-07-04 18:28 - 2013-06-28 00:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-04 18:25 - 2014-06-30 20:13 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-04 18:21 - 2013-06-28 00:32 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-04 17:44 - 2013-06-28 00:48 - 00000000 ____D () C:\ProgramData\MFAData
2014-07-04 17:03 - 2013-07-06 02:10 - 00000000 ____D () C:\Users\David\AppData\Roaming\TS3Client
2014-07-04 17:03 - 2013-06-28 23:22 - 00000000 ____D () C:\Users\David\AppData\Roaming\vlc
2014-07-04 16:56 - 2014-07-04 16:38 - 43469717 _____ () C:\Users\David\Downloads\a.s06e10.480p.u287685.Rapidmoviez.com.rar
2014-07-04 16:29 - 2014-07-04 16:29 - 00000000 ____D () C:\Users\David\Downloads\backups
2014-07-04 16:25 - 2014-07-01 19:23 - 00007346 _____ () C:\Users\David\Downloads\hijackthis.log
2014-07-04 16:19 - 2013-06-28 00:35 - 00000000 ____D () C:\Users\David\AppData\Local\Adobe
2014-07-04 16:15 - 2009-07-14 06:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-04 16:15 - 2009-07-14 06:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-04 16:13 - 2013-06-28 00:29 - 01105466 _____ () C:\Windows\WindowsUpdate.log
2014-07-04 16:10 - 2013-09-08 01:58 - 00000322 _____ () C:\Windows\Tasks\GlaryInitialize 3.job
2014-07-04 16:10 - 2013-09-08 01:57 - 00000314 _____ () C:\Windows\Tasks\GlaryInitialize.job
2014-07-04 16:09 - 2014-07-01 07:43 - 00000448 _____ () C:\Windows\setupact.log
2014-07-04 16:09 - 2013-11-06 12:19 - 00000456 ____H () C:\Windows\Tasks\SK.Enhancer-S-747939423.job
2014-07-04 16:09 - 2013-09-08 01:58 - 00000000 ____D () C:\Program Files\Glary Utilities 3
2014-07-04 16:09 - 2013-06-28 00:36 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-04 16:09 - 2013-06-28 00:32 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-04 16:09 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-03 18:36 - 2013-06-28 00:54 - 00000000 ____D () C:\Program Files\Steam
2014-07-02 21:24 - 2014-07-02 21:24 - 31719808 _____ () C:\Users\David\Desktop\test.txt
2014-07-02 20:07 - 2014-07-02 20:07 - 00000036 _____ () C:\Users\David\Downloads\Download (1)
2014-07-02 20:07 - 2014-07-02 20:07 - 00000036 _____ () C:\Users\David\Downloads\Download
2014-07-02 20:01 - 2014-07-02 20:01 - 00094627 _____ () C:\Users\David\Downloads\smsniff.zip
2014-07-02 20:01 - 2014-07-02 20:01 - 00002997 _____ () C:\Users\David\Downloads\smsniff_german.zip
2014-07-02 19:51 - 2014-07-02 19:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\David\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-01 20:36 - 2013-06-28 00:32 - 00062280 _____ () C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-01 19:59 - 2014-07-01 07:43 - 00002440 _____ () C:\Windows\PFRO.log
2014-07-01 19:59 - 2009-07-14 06:33 - 00279696 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-01 19:32 - 2014-06-20 21:42 - 00000000 ____D () C:\Program Files\RealVNC
2014-07-01 19:32 - 2013-06-28 00:32 - 00000000 ____D () C:\Users\David\AppData\Local\Deployment
2014-07-01 19:30 - 2014-04-29 11:02 - 00000000 ____D () C:\Users\David\AppData\Local\Thunderbird
2014-07-01 19:28 - 2013-07-06 01:46 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-07-01 19:23 - 2010-02-09 21:56 - 01612240 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-01 19:22 - 2014-07-01 19:22 - 00388608 _____ (Trend Micro Inc.) C:\Users\David\Downloads\HijackThis.exe
2014-07-01 19:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-01 19:17 - 2014-06-07 00:52 - 00004495 _____ () C:\Users\David\Desktop\ts3daten.txt
2014-07-01 19:16 - 2014-06-29 10:37 - 00000000 ____D () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Theme Resource Changer X86 v1.0
2014-07-01 19:15 - 2014-07-01 19:15 - 00007604 _____ () C:\Users\David\AppData\Local\Resmon.ResmonCfg
2014-07-01 19:14 - 2013-06-28 01:08 - 00000000 ____D () C:\Users\David\AppData\Local\LogMeIn Hamachi
2014-07-01 07:43 - 2014-07-01 07:43 - 00030976 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-07-01 07:43 - 2014-07-01 07:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-01 07:42 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2014-06-30 20:34 - 2013-09-08 01:55 - 00001278 _____ () C:\Windows\system32\.crusader
2014-06-30 20:13 - 2014-06-30 20:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-30 20:13 - 2014-06-30 20:13 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-06-30 20:13 - 2014-03-15 18:58 - 00001060 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-30 20:13 - 2014-03-15 18:58 - 00000000 ____D () C:\Users\David\AppData\Roaming\Malwarebytes
2014-06-30 20:13 - 2014-03-15 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-30 20:13 - 2014-03-15 18:58 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-06-30 16:14 - 2014-01-21 20:06 - 00000000 ____D () C:\Users\David\AppData\Roaming\.minecraft
2014-06-29 18:20 - 2014-06-29 18:20 - 00793366 _____ () C:\Users\David\Downloads\ExtrabiomesXL-universal-1.6.4-3.15.8.jar
2014-06-29 18:18 - 2014-06-29 18:18 - 05331810 _____ () C:\Users\David\Downloads\BiomesOPlenty-universal-1.6.4-1.2.1.434.jar
2014-06-29 18:08 - 2014-06-29 18:08 - 05331807 _____ () C:\Users\David\Downloads\BiomesOPlenty-universal-1.6.4-1.2.1.418.jar
2014-06-29 18:08 - 2014-06-29 18:08 - 05331807 _____ () C:\Users\David\Desktop\BiomesOPlenty-universal-1.6.4-1.2.1.418.jar
2014-06-29 18:07 - 2014-06-29 18:07 - 04553825 _____ () C:\Users\David\Downloads\Biomes-O-Plenty-0.5.5.zip
2014-06-29 18:07 - 2014-06-29 18:06 - 05390946 _____ () C:\Users\David\Downloads\BiomesOPlenty-universal-1.7.2-2.0.0.579.jar
2014-06-29 18:05 - 2014-06-29 18:04 - 03686699 _____ () C:\Users\David\Downloads\witchery-1.6.4-0.19.2.zip
2014-06-29 18:01 - 2014-06-29 18:01 - 00814413 _____ () C:\Users\David\Downloads\FoodPlus-1.6.4-2.9.5rS.jar
2014-06-29 18:01 - 2014-06-29 18:00 - 05390946 _____ () C:\Users\David\Desktop\BiomesOPlenty-universal-1.7.2-2.0.0.579.jar
2014-06-29 17:58 - 2014-06-29 17:58 - 00993526 _____ () C:\Users\David\Downloads\files^Morph-Beta-0.4.0.zip
2014-06-29 17:57 - 2014-06-29 17:58 - 00101985 _____ () C:\Users\David\Desktop\OptiFine_1.6.4_L_C7.jar
2014-06-29 17:57 - 2014-06-29 17:57 - 00101985 _____ () C:\Users\David\Downloads\OptiFine_1.6.4_L_C7.jar
2014-06-29 17:50 - 2014-06-29 17:50 - 00395572 _____ () C:\Users\David\Downloads\ZansMinimap1.6.4.zip
2014-06-29 17:49 - 2014-06-29 17:49 - 00191853 _____ () C:\Users\David\Downloads\InventoryTweaks Mod 1.6.4.jar
2014-06-29 17:46 - 2014-06-29 17:46 - 00099539 _____ () C:\Users\David\Downloads\OptiFine_1.6.2_L_C4.jar
2014-06-29 17:37 - 2014-06-29 17:37 - 02206698 _____ () C:\Users\David\Downloads\minecraftforge-installer-1.6.4-9.11.0.883.jar
2014-06-29 17:34 - 2014-06-29 17:34 - 00005506 _____ () C:\Users\David\Downloads\advancedGenetics_v1.1_api.zip
2014-06-29 10:46 - 2013-10-22 23:11 - 00000000 ____D () C:\Windows\Minidump
2014-06-29 10:46 - 2013-08-15 23:12 - 00000000 ____D () C:\Users\David\AppData\Roaming\FileZilla
2014-06-29 10:41 - 2014-06-29 10:41 - 00000000 ____D () C:\Users\David\Desktop\re_degetized_windows_7_theme_by_designfjotten-d57fe1u
2014-06-29 10:13 - 2014-06-29 10:13 - 04586070 _____ () C:\Users\David\Downloads\theme resource changer.rar
2014-06-29 10:13 - 2014-06-29 10:13 - 00000450 _____ () C:\Users\David\Downloads\Theme resource Changer Drive Fix.reg
2014-06-29 09:58 - 2014-06-29 09:58 - 06167634 _____ () C:\Users\David\Downloads\uxpatcher11.zip
2014-06-29 09:57 - 2014-06-29 09:57 - 15834309 _____ () C:\Users\David\Downloads\Dark_Agility___Visual_Style____by_DjabyTown.rar
2014-06-29 09:57 - 2014-06-29 09:57 - 00961360 _____ (Chip Digital GmbH) C:\Users\David\Downloads\UxTheme Multi Patcher - CHIP-Installer.exe
2014-06-28 23:05 - 2014-01-06 10:12 - 00000600 _____ () C:\Users\David\AppData\Local\PUTTY.RND
2014-06-28 12:48 - 2014-06-28 12:35 - 39956844 _____ () C:\Users\David\Downloads\a.S06E09.480p.u284816.Rapidmoviez.com.rar
2014-06-25 15:34 - 2014-06-22 17:32 - 00477112 _____ () C:\Users\David\Downloads\BF3_Design_by_Blade_TP_.zip
2014-06-24 14:00 - 2014-06-24 13:39 - 00000001 ____R () C:\Users\David\serverport
2014-06-24 13:45 - 2013-06-28 00:30 - 00000000 ____D () C:\Users\David
2014-06-24 13:39 - 2014-06-24 13:39 - 00000000 ____D () C:\Users\David\.jivex
2014-06-24 13:39 - 2014-06-24 13:38 - 00000000 ____D () C:\Users\David\Desktop\MRT
2014-06-24 12:28 - 2014-06-24 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-06-23 15:34 - 2014-06-23 15:34 - 06966681 _____ () C:\Users\David\Downloads\GT-Logo20.rar
2014-06-23 15:34 - 2014-06-23 15:34 - 00125017 _____ () C:\Users\David\Downloads\GT-Logo21.rar
2014-06-23 15:32 - 2014-06-23 15:27 - 123948069 _____ () C:\Users\David\Downloads\TeeqeyHD's Logo PSD Pack!.zip
2014-06-22 23:36 - 2014-06-22 23:36 - 00148818 _____ () C:\Users\David\Downloads\GT-Playersheet08.rar
2014-06-22 23:26 - 2014-06-22 23:26 - 00612421 _____ () C:\Users\David\Downloads\GT-Logo09.rar
2014-06-22 23:15 - 2014-06-22 23:15 - 00094186 _____ () C:\Users\David\Downloads\Logo_#05 (1).rar
2014-06-22 23:11 - 2014-06-22 23:11 - 00094186 _____ () C:\Users\David\Downloads\Logo_#05.rar
2014-06-22 23:10 - 2014-06-22 23:08 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-06-22 23:10 - 2013-06-28 09:22 - 00000000 ____D () C:\Users\David\AppData\Roaming\Adobe
2014-06-22 23:09 - 2014-06-22 23:09 - 00000000 ____D () C:\Users\David\AppData\Roaming\PDAppFlex
2014-06-22 23:08 - 2013-07-02 20:18 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-06-22 23:06 - 2013-07-02 20:18 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-22 23:05 - 2014-06-22 23:05 - 00001256 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2014 (32 Bit).lnk
2014-06-22 23:04 - 2013-07-02 20:18 - 00000000 ____D () C:\Program Files\Adobe
2014-06-22 22:59 - 2013-08-28 18:56 - 00000000 ____D () C:\Users\David\.gimp-2.8
2014-06-22 22:51 - 2014-06-22 22:50 - 00000000 ___RD () C:\Users\David\Creative Cloud Files
2014-06-22 22:48 - 2014-06-22 22:48 - 00001279 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2014-06-22 22:48 - 2014-06-22 22:48 - 00001267 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2014-06-22 22:47 - 2014-06-22 22:47 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-22 22:43 - 2014-06-22 22:43 - 03103624 _____ (Adobe Systems Incorporated) C:\Users\David\Downloads\CreativeCloudSet-Up.exe
2014-06-22 20:02 - 2014-06-22 20:02 - 00012763 _____ () C:\Users\David\AppData\Local\recently-used.xbel
2014-06-22 20:01 - 2013-08-28 19:04 - 00000000 ____D () C:\Users\David\AppData\Local\gtk-2.0
2014-06-22 18:06 - 2014-06-22 18:05 - 00210627 _____ () C:\Users\David\Downloads\teamspeak.gadget
2014-06-22 18:02 - 2014-06-22 18:02 - 00524216 _____ () C:\Users\David\Downloads\setup.exe
2014-06-22 17:41 - 2014-06-22 17:41 - 00428420 _____ () C:\Users\David\Downloads\MW3_Design_by_Blade_TP_.zip
2014-06-22 17:41 - 2014-06-22 17:41 - 00000000 ____D () C:\Users\David\Downloads\MW3_Design_by_Blade_TP_
2014-06-22 17:33 - 2014-06-22 17:33 - 00000000 ____D () C:\Users\David\Downloads\BF3_Design_by_Blade_TP_
2014-06-22 17:30 - 2014-06-22 17:30 - 00245430 _____ () C:\Users\David\Downloads\3b_dooki___WI_3.2___BETA_01.zip
2014-06-22 11:28 - 2014-06-22 11:28 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-06-22 11:28 - 2014-06-22 11:28 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-06-22 11:28 - 2014-06-22 11:28 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-06-22 11:28 - 2014-06-22 11:28 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-06-22 11:28 - 2014-06-22 11:28 - 00001322 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Knuddels.de.lnk
2014-06-22 11:28 - 2014-06-22 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-22 11:28 - 2014-06-22 11:28 - 00000000 ____D () C:\Program Files\Java
2014-06-22 11:28 - 2014-06-22 11:28 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-06-22 11:28 - 2013-10-18 15:49 - 00001318 _____ () C:\Users\UpdatusUser\Desktop\Knuddels.de.lnk
2014-06-22 11:26 - 2014-06-22 11:26 - 30818808 _____ () C:\Users\David\Downloads\KnuddelsJavaUpdater.exe
2014-06-22 01:41 - 2014-06-22 01:41 - 00106920 _____ () C:\Users\David\Downloads\sh
2014-06-21 22:04 - 2014-06-21 22:04 - 00000000 ____D () C:\Users\David\Downloads\wordpress-3.9.1-de_DE
2014-06-21 20:58 - 2014-06-21 20:58 - 00000513 _____ () C:\Users\David\Downloads\download.html
2014-06-21 20:43 - 2014-06-21 20:43 - 00000000 ____D () C:\Users\David\Downloads\ts3wi_3.4.2
2014-06-21 20:42 - 2014-06-21 20:42 - 00761726 _____ () C:\Users\David\Downloads\ts3wi_3.4.2 (1).rar
2014-06-21 02:20 - 2014-06-20 21:42 - 00000000 ____D () C:\Users\David\AppData\Local\RealVNC
2014-06-20 23:16 - 2014-06-20 22:24 - 00000000 ____D () C:\Users\David\Downloads\iRedMail-0.8.7
2014-06-20 22:23 - 2014-06-20 22:23 - 00113103 _____ () C:\Users\David\Downloads\iRedMail-0.8.7.tar.bz2
2014-06-20 22:20 - 2014-06-20 22:20 - 00000000 ____D () C:\Users\David\Desktop\iRedMail-0.8.6
2014-06-20 22:17 - 2014-06-20 22:17 - 10533558 _____ () C:\initrd.img
2014-06-20 21:54 - 2014-06-20 21:54 - 00000000 ____H () C:\Users\David\Documents\Default.rdp
2014-06-20 21:42 - 2014-06-20 21:42 - 00000000 ____D () C:\ProgramData\RealVNC-Service
2014-06-20 21:42 - 2014-06-20 21:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealVNC
2014-06-20 21:42 - 2014-06-20 21:41 - 12757920 _____ (RealVNC Ltd ) C:\Users\David\Downloads\VNC-5.2.0-Windows.exe
2014-06-19 11:52 - 2014-03-26 12:16 - 00000000 ____D () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-19 00:21 - 2014-03-03 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2014-06-19 00:20 - 2014-06-04 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realmware BF3 Tools
2014-06-19 00:20 - 2014-03-27 18:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BigMacroTool
2014-06-19 00:19 - 2014-06-19 00:19 - 00000000 ____D () C:\Users\David\Downloads\Musik
2014-06-19 00:14 - 2013-07-07 00:16 - 00000000 ____D () C:\Users\David\Documents\My Games
2014-06-19 00:08 - 2009-07-14 10:56 - 00000000 ____D () C:\Windows\ShellNew
2014-06-17 23:22 - 2014-06-17 23:22 - 21577728 _____ () C:\Users\David\Downloads\Texture Hack V1.6 by War3zdude92s Texture Hacking Team (1).rar
2014-06-17 17:08 - 2014-06-17 17:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-06-15 23:38 - 2013-06-28 01:14 - 00000000 ____D () C:\Users\David\AppData\Roaming\Skype
2014-06-14 15:53 - 2014-06-14 15:53 - 00000000 ____D () C:\Users\David\Desktop\Texture Hack V1.6 by War3zdude92's Texture Hacking Team
2014-06-14 15:44 - 2014-06-14 15:37 - 171368593 _____ () C:\Users\David\Downloads\Texture Hack V1.6 by War3zdude92s Texture Hacking Team.rar
2014-06-13 14:29 - 2014-06-13 13:58 - 96745599 _____ () C:\Users\David\Downloads\a.S06E07.u278995.Rapidmoviez.com.rar
2014-06-12 20:29 - 2014-06-12 20:29 - 00028332 _____ () C:\Users\David\Downloads\MW3_FoV_Changer_v1-9-446-0.zip
2014-06-11 16:33 - 2014-06-11 16:33 - 00000389 _____ () C:\Users\David\Downloads\Teamspeak3-Linux-Server.rar
2014-06-11 16:18 - 2009-07-14 06:53 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-10 23:24 - 2013-12-19 22:40 - 00000000 ____D () C:\Users\David\AppData\Local\ESL Wire Game Client
2014-06-10 20:54 - 2014-06-10 23:15 - 00000924 _____ () C:\Users\David\Desktop\licensekey.dat
2014-06-10 20:54 - 2014-06-10 20:54 - 00000924 _____ () C:\Users\David\Downloads\licensekey.dat
2014-06-10 18:33 - 2014-04-02 16:39 - 00002056 _____ () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-06-10 18:23 - 2013-09-08 01:50 - 00000000 ____D () C:\Program Files\HitmanPro
2014-06-10 09:44 - 2014-06-10 09:44 - 00046634 _____ () C:\Users\David\Downloads\default_custom-2.12.ts3_style
2014-06-10 09:29 - 2014-06-10 09:29 - 00000000 ____D () C:\Users\David\Downloads\JTS3ServerMod_5.2
2014-06-10 09:28 - 2014-06-10 09:28 - 00280410 _____ () C:\Users\David\Downloads\JTS3ServerMod_5.2.zip
2014-06-09 14:24 - 2014-06-09 14:24 - 00000000 ____D () C:\Users\David\AppData\Roaming\Screaming Bee
2014-06-08 17:43 - 2014-06-08 17:43 - 00794960 _____ () C:\Users\David\Downloads\ts3_recording_14_06_08_17_43_24.wav
2014-06-08 17:30 - 2014-05-29 18:14 - 00000000 ____D () C:\ProgramData\Origin
2014-06-08 15:06 - 2014-05-29 18:14 - 00000000 ____D () C:\Program Files\Origin
2014-06-08 14:29 - 2014-06-08 12:27 - 00178172 _____ () C:\Users\David\Downloads\ArizonaClan TS3.txt
2014-06-07 00:43 - 2014-06-07 00:43 - 00761726 _____ () C:\Users\David\Downloads\ts3wi_3.4.2.rar
2014-06-07 00:38 - 2014-06-07 00:38 - 04361521 _____ () C:\Users\David\Downloads\teamspeak3-server_linux-amd64-3.0.10.3.tar.gz
2014-06-06 18:33 - 2014-06-06 18:32 - 36386893 _____ () C:\Users\David\Downloads\a.S06E06.480p.u275837.Rapidmoviez.com.rar
2014-06-06 17:10 - 2013-12-05 12:19 - 00000000 ____D () C:\Users\David\AppData\Local\Overwolf
2014-06-06 16:47 - 2014-06-06 16:47 - 00798770 _____ () C:\Users\David\Downloads\tesla.1.06.zip
2014-06-05 21:44 - 2014-06-05 21:44 - 00000000 ____D () C:\Users\David\AppData\Local\SniperV2
2014-06-05 18:47 - 2014-06-05 18:47 - 00001709 _____ () C:\Users\David\Downloads\bilderhoster_net-rfdwx5x2.png.txt
2014-06-05 17:39 - 2014-06-05 17:39 - 00166649 _____ () C:\Users\David\Downloads\nulshock.zip
2014-06-05 16:01 - 2014-06-05 16:01 - 00000000 ____D () C:\Users\David\Downloads\wisebusiness_wp
2014-06-05 16:00 - 2014-06-05 16:00 - 00000181 _____ () C:\Users\David\Downloads\listdomain.php4
2014-06-05 15:50 - 2014-06-05 15:50 - 01241825 _____ () C:\Users\David\Downloads\wisebusiness_wp.zip
2014-06-05 15:09 - 2013-09-08 02:13 - 00290184 _____ () C:\Windows\system32\PnkBstrB.xtr
2014-06-05 15:09 - 2013-09-08 01:53 - 00290184 _____ () C:\Windows\system32\PnkBstrB.exe
2014-06-05 15:08 - 2013-09-08 01:53 - 00280904 _____ () C:\Windows\system32\PnkBstrB.ex0
2014-06-04 19:06 - 2014-06-04 19:02 - 06774009 _____ () C:\Users\David\Downloads\wordpress-3.9.1-de_DE.zip
2014-06-04 17:18 - 2014-06-04 17:18 - 00495616 _____ (Simon Tatham) C:\Users\David\Downloads\putty.exe
2014-06-04 09:37 - 2014-06-04 09:37 - 00000000 ____D () C:\Users\David\AppData\Local\Realmware

Some content of TEMP:
====================
C:\Users\David\AppData\Local\Temp\gusetup0.exe
C:\Users\David\AppData\Local\Temp\gusetup7.exe
C:\Users\David\AppData\Local\Temp\gusetup9.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-29 13:50

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version:03-07-2014
Ran by David at 2014-07-04 19:02:18
Running from C:\Users\David\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

Adobe Creative Cloud (HKLM\...\Adobe Creative Cloud) (Version: 2.6.0.393 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (32 Bit) (HKLM\...\{7C25E7A0-A0A1-4B87-BB30-BF0FBDC37878}) (Version: 15.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)
AMD Accelerated Video Transcoding (Version: 12.10.100.30328 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{FF6A8312-0A62-3AC0-A49F-9CB7390AE5EC}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.0328.2218.38225 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.80328.2203 - Advanced Micro Devices, Inc.) Hidden
AMD VISION Engine Control Center (Version: 2013.0328.2218.38225 - Ihr Firmenname) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.10 - Advanced Micro Devices, Inc.) Hidden
AVG 2013 (HKLM\...\AVG) (Version: 2013.0.3485 - AVG Technologies)
AVG 2013 (Version: 13.0.3485 - AVG Technologies) Hidden
AVG 2013 (Version: 13.0.3955 - AVG Technologies) Hidden
AVG SafeGuard toolbar (HKLM\...\AVG SafeGuard toolbar) (Version: 18.1.5.512 - AVG Technologies)
Battlefield 3 (HKLM\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
BF3 Settings Editor (HKLM\...\{5866DD36-8055-475B-A5C3-82C04091D14E}) (Version: 2.3 - Realmware)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM\...\Steam App 42690) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (HKLM\...\Steam App 42680) (Version:  - Infinity Ward)
Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
ccc-utility (Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.04 - Piriform)
Counter-Strike: Source (HKLM\...\Steam App 240) (Version:  - Valve)
Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.792 - Curse)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Day of Defeat: Source (HKLM\...\Steam App 300) (Version:  - Valve)
DC Universe Online Live (HKCU\...\SOE-DC Universe Online Live PSG) (Version:  - Sony Online Entertainment)
Don't Starve (HKLM\...\Steam App 219740) (Version:  - Klei Entertainment)
FileZilla Client 3.7.3 (HKLM\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
Fotogalerie (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Garry's Mod (HKLM\...\Steam App 4000) (Version:  - Garry)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Glary Utilities 2.56.0.1822 (HKLM\...\Glary Utilities_is1) (Version: 2.56.0.1822 - Glarysoft Ltd)
Glary Utilities PRO 3.9.1 (HKLM\...\Glary Utilities 3) (Version: 3.9.1.138 - Glarysoft Ltd)
Google Chrome (HKLM\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Grand Theft Auto: San Andreas (HKLM\...\Steam App 12120) (Version:  - Rockstar Games)
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.9.220 - SurfRight B.V.)
Java 7 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (Version: 2.1.60.19 - Oracle, Inc.) Hidden
Junk Mail filter update (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
LogMeIn Hamachi (HKLM\...\LogMeIn Hamachi) (Version: 2.2.0.214 - LogMeIn, Inc.)
LogMeIn Hamachi (Version: 2.2.0.214 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual Basic PowerPacks 10.0 (HKLM\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{AC4C38FD-A54C-4CA5-92EE-D983CD81293E}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 4.0 (HKLM\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Movie Maker (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
Notepad++ (HKLM\...\Notepad++) (Version: 6.3.3 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 320.49 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 320.49 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.6 - NVIDIA Corporation)
NVIDIA Grafiktreiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 320.49 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.24.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.24.2 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.131.854 - NVIDIA Corporation) Hidden
NVIDIA PhysX (HKLM\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.2049 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 320.49 (Version: 320.49 - NVIDIA Corporation) Hidden
NVIDIA Update 7.2.17 (Version: 7.2.17 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 7.2.17 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.1 - NVIDIA Corporation)
Origin (HKLM\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Overwolf (HKLM\...\{FB83467F-D8EB-43E6-8B3D-860B045C1C52}) (Version: 0.51.325 - Overwolf)
Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.7.0.0 - Pando Networks Inc.)
Pflanzen gegen Zombies™ (HKLM\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
RaidCall (HKLM\...\RaidCall) (Version: 7.2.4-1.0.7299.14 - raidcall.com)
RocketDock 1.3.5 (HKLM\...\RocketDock_is1) (Version:  - Punk Software)
Saitek Cyborg Keyboard Volume 6.2.1.3 (HKLM\...\{AA1AF34D-9056-4B72-A588-D9A7B8CB305B}) (Version: 6.2.1.3 - Saitek)
San Andreas Mod Installer (HKLM\...\San Andreas Mod Installer1.0) (Version:  - )
Sandboxie 4.04 (32-bit) (HKLM\...\Sandboxie) (Version: 4.04 - Sandboxie Holdings, LLC)
SHIELD Streaming (Version: 1.05.19 - NVIDIA Corporation) Hidden
Skype™ 6.16 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Smart Technology Programming Software 7.0.27.13 (HKLM\...\{6193D1C9-FEAC-4158-8EB5-1B1D7B0C8DA7}) (Version: 7.0.27.13 - Mad Catz)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab CYRI (HKLM\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Tiny and Big: Grandpa's Leftovers (HKLM\...\Steam App 205910) (Version:  - Black Pants Game Studio)
TP-LINK TL-WN881ND Driver (HKLM\...\{B512F025-E992-44D0-B1F4-D6E1D3339C80}) (Version: 1.0.0 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.0.0 - TP-LINK)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Vegas Pro 11.0 (HKLM\...\{B644D34F-0296-11E2-938E-F04DA23A5C58}) (Version: 11.0.700 - Sony)
VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version:  - Elaborate Bytes)
VLC media player 1.1.4 (HKLM\...\VLC media player) (Version: 1.1.4 - VideoLAN)
VNC Server 5.2.0 (HKLM\...\{E1031FEA-0E44-424F-9076-93CA3D6AB975}) (Version: 5.2.0 - RealVNC Ltd)
VNC Viewer 5.2.0 (HKLM\...\{DE116248-0A3F-494B-8761-3A7172797C72}) (Version: 5.2.0 - RealVNC Ltd)
Windows Live Communications Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
WinPcap 4.1.3 (HKLM\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Yahoo Community Smartbar Engine (HKCU\...\{67060069-0c56-4eb5-9cff-7dbc0ebcbc3f}) (Version: 11.38.66.16134 - Linkury Inc.) <==== ATTENTION

==================== Restore Points  =========================

22-06-2014 20:47:00 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
22-06-2014 21:01:06 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
29-06-2014 08:14:41 Theme Resource Changer X86 v1.0 Install                         
29-06-2014 08:23:01 Theme Resource Changer X86 v1.0 Install                         
29-06-2014 08:28:40 Theme Resource Changer X86 v1.0 Install                         
29-06-2014 08:37:18 Theme Resource Changer X86 v1.0 Install                         
29-06-2014 08:46:59 Theme Resource Changer X86 v1.0 Install                         
30-06-2014 18:33:37 Prüfpunkt von HitmanPro
01-07-2014 17:27:16 Removed VNC Server 5.2.0
01-07-2014 17:30:28 Removed UxStyle Core Beta

==================== Hosts content: ==========================

2009-07-14 04:04 - 2013-10-09 08:32 - 00000164 ____A C:\Windows\system32\Drivers\etc\hosts
virscan.org
virustotal.com
google.de
google.com
facebook.com
elitepvpers.com
chip.de
paypal.de
youtube.com
gronkh.de
gutefrage.net
ask.com
twitter.com

==================== Scheduled Tasks (whitelisted) =============

Task: {1657AD04-22C9-49DD-B1B1-7029225559E5} - System32\Tasks\AdobeAAMUpdater-1.0-IP-Star-David => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)
Task: {1C74F611-12C7-4C40-BB99-3FFC14632930} - System32\Tasks\GlaryInitialize 3 => C:\Program Files\Glary Utilities 3\Initialize.exe [2013-09-02] (Glarysoft Ltd)
Task: {4066BE0F-7091-440F-8340-7375930504C7} - System32\Tasks\XboxStatTask => C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [2009-10-01] (Microsoft Corporation)
Task: {45C37CCA-6543-442E-BE62-BF8B0143057C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-07-22] (Piriform Ltd)
Task: {56FA3ED9-75FB-4E14-A818-BAFB4B6BEF10} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-06-28] (Google Inc.)
Task: {628CB1C8-45AF-45BA-8150-0AA104D7FB3B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-06-28] (Google Inc.)
Task: {76E180CD-0386-4949-8DD5-CDABA33575F3} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files\Razer\Razer Game Booster\AutoUpdate.exe <==== ATTENTION
Task: {9351FFC3-5EC5-4D53-9D32-DF500EBB634A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-23] (Adobe Systems Incorporated)
Task: {965880B5-E0FD-48BC-A66C-19B8395CE0E4} - System32\Tasks\GlaryInitialize => C:\Program Files\Glary Utilities\initialize.exe [2013-05-27] (Glarysoft Ltd)
Task: {E294C779-14B5-49AC-8A27-6BD709EC3CA2} - System32\Tasks\SK.Enhancer-S-747939423 => c:\programdata\wintersoft\sk.enhancer\SK.Enhancer.exe <==== ATTENTION
Task: {E7B65BB9-A354-4CA7-B227-BF150F6FA8C2} - \YourFile DownloaderUpdate No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 3.job => C:\Program Files\Glary Utilities 3\Initialize.exe
Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files\Glary Utilities\initialize.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SK.Enhancer-S-747939423.job => c:\programdata\wintersoft\sk.enhancer\SK.Enhancer.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-06-28 01:04 - 2013-06-21 11:52 - 00079648 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2013-08-17 17:48 - 2007-09-02 13:57 - 00069632 _____ () C:\Program Files\RocketDock\RocketDock.dll
2013-03-28 22:29 - 2013-03-28 22:29 - 00065024 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-05-23 02:10 - 2014-05-23 02:10 - 00693920 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll
2013-08-07 21:25 - 2013-08-07 21:25 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2013-09-02 11:08 - 2013-09-02 11:08 - 00080160 _____ () C:\Program Files\Glary Utilities 3\zlib1.dll
2013-08-17 17:48 - 2007-09-02 13:58 - 00495616 _____ () C:\Program Files\RocketDock\RocketDock.exe
2013-07-30 19:59 - 2013-07-27 10:50 - 00197408 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libzmq.dll
2013-03-28 22:29 - 2013-03-28 22:29 - 00095232 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-06-14 10:22 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-14 10:22 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-14 10:22 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-14 10:22 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-14 10:22 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
2014-04-07 16:57 - 2014-04-07 16:57 - 00148480 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-04-07 16:57 - 2014-04-07 16:57 - 00864768 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll
2014-04-07 16:57 - 2014-04-07 16:57 - 00677376 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2013-04-04 10:38 - 2014-04-07 16:57 - 00092104 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
2013-04-04 10:38 - 2014-04-07 16:57 - 00105416 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
2014-04-07 16:57 - 2014-04-07 16:57 - 00025600 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll
2014-04-07 16:57 - 2014-04-07 16:57 - 00242688 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll
2014-04-20 16:43 - 2014-01-18 20:44 - 00020992 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\TS3MassMover.dll
2013-04-04 10:38 - 2014-04-07 16:57 - 00117704 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\appscanner_plugin.dll
2013-04-04 10:38 - 2014-04-07 16:57 - 00477128 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-12-05 12:34 - 2014-04-07 16:57 - 00483784 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2013-04-04 10:38 - 2014-04-07 16:57 - 00035272 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\ts3g15.dll
2014-04-07 16:57 - 2014-04-07 16:57 - 00123904 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2014-06-14 10:22 - 2014-06-05 15:58 - 14612296 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UnsignedThemes => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UnsignedThemes => ""="Service"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: CGVPNCliService => 2
MSCONFIG\Services: EslWireHelper => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: hshld => 2
MSCONFIG\Services: HssTrayService => 3
MSCONFIG\Services: HssWd => 2
MSCONFIG\Services: LMIGuardianSvc => 2
MSCONFIG\Services: LPTSystemUpdater => 2
MSCONFIG\Services: MgAssistService => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: OverwolfUpdaterService => 3
MSCONFIG\Services: PnkBstrA => 2
MSCONFIG\Services: rpcapd => 3
MSCONFIG\Services: SbieSvc => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: TeamViewer9 => 2
MSCONFIG\Services: vncserver => 2
MSCONFIG\Services: vToolbarUpdater17.3.0 => 2
MSCONFIG\Services: vToolbarUpdater18.1.5 => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^smartbar_3312014.exe.lnk => C:\Windows\pss\smartbar_3312014.exe.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK Wireless Configuration Utility.lnk => C:\Windows\pss\TP-LINK Wireless Configuration Utility.lnk.CommonStartup
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\David\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: AlcoholAutomount => "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
MSCONFIG\startupreg: AVG_UI => "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.EXE" /autostart /min
MSCONFIG\startupreg: ESL Wire => "C:\Program Files\EslWire\wire.exe" --tray
MSCONFIG\startupreg: icq => C:\Users\David\AppData\Roaming\ICQM\icq.exe -CU
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: NextLive => C:\Windows\system32\rundll32.exe "C:\Users\David\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
MSCONFIG\startupreg: Optimizer Pro => C:\Program Files\Optimizer Pro\OptProLauncher.exe
MSCONFIG\startupreg: Overwolf => C:\Program Files\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Pando Media Booster => C:\Program Files\Pando Networks\Media Booster\PMB.exe
MSCONFIG\startupreg: ProfilerU => C:\Program Files\SmartTechnology\Software\ProfilerU.exe
MSCONFIG\startupreg: RadioRage EPM Support => "C:\PROGRA~1\RADIOR~1\bar\1.bin\4jmedint.exe" T8EPMSUP.DLL,S
MSCONFIG\startupreg: RaidCall => C:\Program Files\RaidCall\raidcall.exe
MSCONFIG\startupreg: Razer Synapse => "C:\Program Files\Razer\Synapse\RzSynapse.exe"
MSCONFIG\startupreg: SaiMfd => C:\Program Files\SmartTechnology\Software\SaiMfd.exe
MSCONFIG\startupreg: SaiVolume => C:\Program Files\Saitek\CyborgKeyboard\SaiVolume.exe
MSCONFIG\startupreg: SandboxieControl => "C:\Program Files\Sandboxie\SbieCtrl.exe"
MSCONFIG\startupreg: se => "C:\Users\David\AppData\Roaming\SkypEmoticons\SE.exe"  /minimized 
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Steam => "C:\Program Files\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: VirtualCloneDrive => "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
MSCONFIG\startupreg: vProt => "C:\Program Files\AVG SafeGuard toolbar\vprot.exe"
MSCONFIG\startupreg: XboxStat => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun

==================== Faulty Device Manager Devices =============

Name: NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
Description: NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: NVIDIA
Service: nvvad_WaveExtensible
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/04/2014 05:36:47 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (07/04/2014 05:35:07 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (07/04/2014 04:09:40 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]

Error: (07/04/2014 04:09:40 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to open Audio Capture session [6]

Error: (07/03/2014 06:35:33 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]

Error: (07/03/2014 06:35:33 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to open Audio Capture session [6]

Error: (07/03/2014 06:16:16 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]

Error: (07/03/2014 06:16:16 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to open Audio Capture session [6]

Error: (07/02/2014 09:29:08 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm NOTEPAD.EXE, Version 6.1.7600.16385 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fec

Startzeit: 01cf962bd2252173

Endzeit: 0

Anwendungspfad: C:\Windows\system32\NOTEPAD.EXE

Berichts-ID: 20bdf4c3-021f-11e4-99ae-0022685d8c7d

Error: (07/02/2014 09:28:33 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm NOTEPAD.EXE, Version 6.1.7600.16385 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1d20

Startzeit: 01cf962b7a1a67a6

Endzeit: 15

Anwendungspfad: C:\Windows\system32\NOTEPAD.EXE

Berichts-ID: 0bd47dff-021f-11e4-99ae-0022685d8c7d


System errors:
=============
Error: (07/04/2014 04:10:03 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/03/2014 08:51:17 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/03/2014 06:35:59 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/03/2014 06:31:24 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/03/2014 06:16:34 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/02/2014 09:29:34 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/02/2014 05:54:35 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/01/2014 09:33:58 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/01/2014 08:37:05 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/01/2014 08:35:03 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================
Error: (07/04/2014 05:36:47 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\ati technologies\ATI.ACE\core-static\SLSTaskbar64.exe

Error: (07/04/2014 05:35:07 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\glary utilities 3\DPInst64.exe

Error: (07/04/2014 04:09:40 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]

Error: (07/04/2014 04:09:40 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to open Audio Capture session [6]

Error: (07/03/2014 06:35:33 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]

Error: (07/03/2014 06:35:33 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to open Audio Capture session [6]

Error: (07/03/2014 06:16:16 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]

Error: (07/03/2014 06:16:16 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to open Audio Capture session [6]

Error: (07/02/2014 09:29:08 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: NOTEPAD.EXE6.1.7600.16385fec01cf962bd22521730C:\Windows\system32\NOTEPAD.EXE20bdf4c3-021f-11e4-99ae-0022685d8c7d

Error: (07/02/2014 09:28:33 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: NOTEPAD.EXE6.1.7600.163851d2001cf962b7a1a67a615C:\Windows\system32\NOTEPAD.EXE0bd47dff-021f-11e4-99ae-0022685d8c7d


==================== Memory info =========================== 

Percentage of memory in use: 68%
Total physical RAM: 3071.18 MB
Available physical RAM: 970.56 MB
Total Pagefile: 6140.64 MB
Available Pagefile: 3171.54 MB
Total Virtual: 2047.88 MB
Available Virtual: 1891.62 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:298.09 GB) (Free:94.23 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 00000001)
Partition 1: (Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================