Avira - Dieses Programm wurde durch eine Gruppenrichtlinie blockiert

Bombdropper9 · 05.07.2014, 12:28

Hallo miteinander,

Gestern habe ich bemerkt, dass mein avira nicht gestartet war, also wollte ich es "manuell" starten, doch dann kam diese fehlermeldung:

"dieses programm wurde durch eine gruppenrichtlinie blockiert"

Hatte vor kurzer Zeit so einen GVU Trojaner auf dem Rechner den ich per Systemwiederherstellung wieder entfernen konnte. Hat das vielleicht damit etwas zu tun? Habe auch schon versucht Malwarebytes zu installieren aber da kommen beim installieren mehrere runtime errors.

vielleicht kann mir einer helfen...

deeprybka · 05.07.2014, 12:58

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
Führe bitte nur Scans durch, zu denen Du von mir aufgefordert wurdest.
Bitte kein Crossposting (posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
Speichere alle unsere Tools auf dem Desktop ab.
Poste die Logfiles direkt in Deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 24 Stunden nichts von mir liest, dann schreibe mir bitte eine PM.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean bekommst.

Los geht's:

Schritt 1

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff
Posten in CODE-Tags: So gehts...
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert uns massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Bombdropper9 · 05.07.2014, 14:13

Danke für die Hilfe

Anbei FRST.txt logs.

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-07-2014
Ran by Agando (administrator) on PHILIPP-PC on 05-07-2014 15:09:12
Running from C:\Users\Agando\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft) C:\Program Files (x86)\Common Files\Game Updater\gameupdater.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
() C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Image-Line) C:\Program Files (x86)\Image-Line\FL Studio 10\FL.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Image-Line) C:\Program Files (x86)\Image-Line\FL Studio 10\System\Tools\Bridge\ilbridge64.exe
(Image-Line) C:\Program Files (x86)\Image-Line\FL Studio 10\System\Tools\Bridge\ilbridge64.exe
(Image-Line) C:\Program Files (x86)\Image-Line\FL Studio 10\System\Tools\Bridge\ilbridge64.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1225920 2014-04-02] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2201032 2014-04-02] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5028464 2012-01-12] (VIA)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2688920 2014-05-26] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files (x86)\Avira <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files (x86)\Common Files\Symantec Shared <====== ATTENTION
HKU\S-1-5-21-514167032-1524923688-923618764-1000\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-514167032-1524923688-923618764-1000\...\Run: [AtiTrayTools] => C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe [929792 2011-10-29] (Ray Adams)
HKU\S-1-5-21-514167032-1524923688-923618764-1000\...\Run: [IhuriKbeyh] => regsvr32.exe "
HKU\S-1-5-21-514167032-1524923688-923618764-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-514167032-1524923688-923618764-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-08-03] (Google Inc.)
HKU\S-1-5-21-514167032-1524923688-923618764-1000\...\Run: [uTorrent] => C:\Users\Agando\AppData\Roaming\uTorrent\uTorrent.exe [1322832 2014-07-05] (BitTorrent Inc.)
HKU\S-1-5-21-514167032-1524923688-923618764-1000\...\Policies\system: [EnableLUA] 0
HKU\S-1-5-21-514167032-1524923688-923618764-1000\...\MountPoints2: {0de557b7-dee0-11e1-ac5a-902b343157d2} - L:\Fairlight\Installer.exe
HKU\S-1-5-21-514167032-1524923688-923618764-1000\...\MountPoints2: {16453691-db43-11e1-a25f-806e6f6e6963} - D:\Run.exe
HKU\S-1-5-21-514167032-1524923688-923618764-1000\...\MountPoints2: {ef6a17aa-8e49-11e2-8e62-902b343157d2} - I:\setup.exe
Startup: C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
SSODL-x32: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files (x86)\Stardock\Object Desktop\IconPackager\iprepair.dll (Stardock.net, Inc)
ShellIconOverlayIdentifiers:  AccExtIco1 -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers:  AccExtIco2 -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers:  AccExtIco3 -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKLM - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7GGHP_deDE495
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7GGHP_deDE495
SearchScopes: HKCU - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = 
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: No Name - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} -  No File
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} -  No File
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095} 
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\dltlk7xy.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @qq.com/QQDownloadPlugin - C:\Users\Agando\Desktop\Browser\757\npXFPlugin.dll No File
FF Plugin-x32: @qq.com/TXSSO - C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.1.94\Bin\npSSOAxCtrlForPTLogin.dll (Tencent)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files (x86)\Mozilla Firefox\extensions\afurladvisor@anchorfree.com [2014-07-01]
FF Extension: Hotspot Shield Extension - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2014-07-01]
FF HKLM-x32\...\Firefox\Extensions: [tqlgs@tt-.com] - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\dltlk7xy.default\extensions\tqlgs@tt-.com

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-07-01]
CHR Extension: (Google Drive) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-01]
CHR Extension: (YouTube) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-01]
CHR Extension: (Google-Suche) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-01]
CHR Extension: (Google Wallet) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-11]
CHR Extension: (Google Mail) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-01]
CHR HKLM-x32\...\Chrome\Extension: [nobfdmmammchijbkljbjkalkjjbhcgdp] - C:\Users\Agando\Desktop\Browser\Chrome\QQDownload_Chrome_Extension.crx [2013-07-01]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 gameupdater; C:\Program Files (x86)\Common Files\Game Updater\gameupdater.exe [769536 2012-11-26] (Microsoft) [File not signed]
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [919040 2014-05-17] (AnchorFree Inc.) [File not signed]
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [78512 2014-05-17] ()
R2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [430344 2014-05-17] ()
S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 nlsX86cc; C:\Windows\SysWOW64\nlssrv32.exe [66560 2011-09-22] (Nalpeiron Ltd.) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1615192 2014-04-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [20541216 2014-04-02] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-07-01] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2012-10-20] (Microsoft Corporation) [File not signed]
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [746392 2013-03-20] (Tunngle.net GmbH) [File not signed]
S2 UnsignedThemes; C:\Windows\UnsignedThemesSvc.exe [21096 2009-07-13] (The Within Network, LLC)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2012-01-10] (VIA Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-13] (DT Soft Ltd)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-12-28] ()
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44744 2014-05-17] (AnchorFree Inc.)
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com) [File not signed]
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-21] (NVIDIA Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-03-19] (Anchorfree Inc.)
S2 uxpatch; C:\Windows\SysWOW64\drivers\uxpatch.sys [25448 2009-07-13] ()
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 LgBttPort; system32\DRIVERS\lgbtpt64.sys [X]
S3 lgbusenum; system32\DRIVERS\lgbtbs64.sys [X]
S3 LGVMODEM; system32\DRIVERS\lgvmdm64.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X]
S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [X]
S3 X6va013; \??\C:\Windows\SysWOW64\Drivers\X6va013 [X]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [X]
S3 X6va016; \??\C:\Windows\SysWOW64\Drivers\X6va016 [X]
S3 X6va017; \??\C:\Windows\SysWOW64\Drivers\X6va017 [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-05 15:09 - 2014-07-05 15:09 - 00021523 _____ () C:\Users\Agando\Desktop\FRST.txt
2014-07-05 15:08 - 2014-07-05 15:09 - 00000000 ____D () C:\FRST
2014-07-05 15:08 - 2014-07-05 15:08 - 02084352 _____ (Farbar) C:\Users\Agando\Desktop\FRST64.exe
2014-07-05 13:08 - 2014-07-05 13:09 - 00000000 ____D () C:\Users\Agando\AppData\Local\Adobe
2014-07-05 13:03 - 2014-07-05 13:03 - 00003134 _____ () C:\Windows\System32\Tasks\{5AEA01C1-DDCC-46AB-B1BE-59A0FAAB1327}
2014-07-05 12:46 - 2014-07-05 12:54 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-04 22:20 - 2014-07-04 22:20 - 00000000 ____D () C:\Users\Agando\Desktop\Handout Sozialkunde
2014-07-04 17:37 - 2014-07-04 17:37 - 00000000 ____D () C:\Users\Agando\AppData\Local\CrashRpt
2014-07-04 17:31 - 2014-07-05 12:12 - 00000000 ____D () C:\Users\Agando\AppData\Local\wf-launcher
2014-07-04 17:31 - 2014-07-05 12:12 - 00000000 ____D () C:\ProgramData\GFACE
2014-07-02 12:33 - 2014-07-02 12:33 - 02247960 _____ () C:\Users\Agando\Downloads\battlelog-web-plugins_2.4.0_141(1).exe
2014-07-01 16:06 - 2014-07-01 16:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-26 16:28 - 2014-06-27 11:42 - 00000000 ____D () C:\Program Files (x86)\Diablo III Public Test
2014-06-26 16:28 - 2014-06-26 16:28 - 00001292 _____ () C:\Users\Public\Desktop\Diablo III Public Test.lnk
2014-06-26 16:28 - 2014-06-26 16:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III Public Test
2014-06-21 19:19 - 2014-06-21 19:19 - 00000000 ____D () C:\Users\Agando\Documents\Meine Wallpapers
2014-06-21 19:15 - 2014-06-21 19:15 - 00000000 ____D () C:\SwSetup
2014-06-21 17:44 - 2014-06-21 19:10 - 51775619 _____ () C:\Users\Agando\Documents\PKoneStone.psd
2014-06-17 00:55 - 2014-06-17 01:14 - 00000000 ____D () C:\Users\Agando\Documents\RoS-BoT
2014-06-13 21:57 - 2014-06-13 21:57 - 00000000 ____D () C:\Users\Agando\Downloads\CS6 amtlib.dll
2014-06-13 21:25 - 2014-06-13 21:25 - 00005518 _____ () C:\Windows\PFRO.log
2014-06-13 16:59 - 2014-06-13 21:03 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2014-06-13 16:58 - 2014-06-13 21:02 - 00000988 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2014-06-13 16:57 - 2014-06-13 21:02 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2014-06-13 16:56 - 2014-06-13 21:01 - 00000962 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2014-06-13 16:55 - 2014-06-13 21:00 - 00001082 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2014-06-13 16:54 - 2014-06-13 21:00 - 00001485 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2014-06-13 15:27 - 2014-06-13 15:27 - 00003508 _____ () C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-PHILIPP-PC-Agando
2014-06-13 15:26 - 2014-06-13 15:26 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\PDAppFlex
2014-06-13 14:34 - 2014-06-13 14:34 - 00001275 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2014-06-12 23:30 - 2014-06-12 23:34 - 00000000 ____D () C:\Users\Agando\Documents\BFH.Beta
2014-06-12 17:25 - 2014-06-26 23:44 - 00037022 _____ () C:\Windows\DirectX.log
2014-06-12 13:07 - 2014-07-05 13:07 - 00002744 _____ () C:\Windows\setupact.log
2014-06-12 13:07 - 2014-06-12 13:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-10 10:57 - 2014-06-10 10:57 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-06-10 10:36 - 2014-06-10 10:36 - 00000000 ____D () C:\Program Files\Ubisoft
2014-06-09 10:36 - 2014-05-17 04:35 - 00044744 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys
2014-06-06 23:34 - 2014-06-06 23:34 - 00000000 ____D () C:\Users\Agando\AppData\Local\YetAnotherRelogger
2014-06-05 19:47 - 2014-06-05 19:46 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-05 19:46 - 2014-06-05 19:46 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\Avira
2014-06-05 19:45 - 2014-06-05 19:45 - 00000000 ____D () C:\ProgramData\Avira
2014-06-05 19:45 - 2014-06-05 19:45 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-05 19:45 - 2014-05-09 11:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-05 19:45 - 2014-05-09 11:16 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-05 19:45 - 2014-05-09 11:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-05 19:23 - 2014-06-05 19:27 - 00000618 _____ () C:\ProgramData\RUNDLL32.EXE-3680-F.txt
2014-06-05 17:45 - 2014-06-05 17:46 - 00000118 _____ () C:\ProgramData\RUNDLL32.EXE-3500-F.txt
2014-06-05 17:42 - 2014-06-05 17:43 - 00000222 _____ () C:\ProgramData\RUNDLL32.EXE-4204-F.txt
2014-06-05 17:37 - 2014-06-05 17:41 - 00000671 _____ () C:\ProgramData\RUNDLL32.EXE-3444-F.txt
2014-06-05 17:30 - 2014-06-05 17:32 - 00001480 _____ () C:\ProgramData\RUNDLL32.EXE-3464-F.txt
2014-06-05 17:25 - 2014-06-05 17:26 - 00001000 _____ () C:\ProgramData\RUNDLL32.EXE-3148-F.txt
2014-06-05 17:04 - 2014-06-05 17:24 - 00011146 _____ () C:\ProgramData\RUNDLL32.EXE-2928-F.txt
2014-06-05 16:55 - 2014-06-07 10:38 - 00000000 ____D () C:\ProgramData\BCCAAA281000A56D4B3C1E40329D9825

==================== One Month Modified Files and Folders =======

2014-07-05 15:09 - 2014-07-05 15:09 - 00021523 _____ () C:\Users\Agando\Desktop\FRST.txt
2014-07-05 15:09 - 2014-07-05 15:08 - 00000000 ____D () C:\FRST
2014-07-05 15:08 - 2014-07-05 15:08 - 02084352 _____ (Farbar) C:\Users\Agando\Desktop\FRST64.exe
2014-07-05 15:04 - 2012-08-03 16:03 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-05 15:03 - 2012-11-17 11:51 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-05 15:03 - 2012-07-31 21:14 - 01150235 _____ () C:\Windows\WindowsUpdate.log
2014-07-05 13:15 - 2009-07-14 06:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-05 13:15 - 2009-07-14 06:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-05 13:09 - 2014-07-05 13:08 - 00000000 ____D () C:\Users\Agando\AppData\Local\Adobe
2014-07-05 13:09 - 2012-08-05 20:49 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\uTorrent
2014-07-05 13:08 - 2012-08-03 16:03 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-05 13:07 - 2014-06-12 13:07 - 00002744 _____ () C:\Windows\setupact.log
2014-07-05 13:07 - 2012-07-31 22:49 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-05 13:07 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-05 13:03 - 2014-07-05 13:03 - 00003134 _____ () C:\Windows\System32\Tasks\{5AEA01C1-DDCC-46AB-B1BE-59A0FAAB1327}
2014-07-05 13:02 - 2012-11-17 11:51 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-05 13:02 - 2012-08-03 15:59 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-05 13:02 - 2012-08-03 15:59 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-05 13:00 - 2012-07-31 21:12 - 00000000 ____D () C:\Users\Agando
2014-07-05 12:56 - 2009-07-14 06:45 - 05010240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-05 12:54 - 2014-07-05 12:46 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-05 12:54 - 2013-12-23 11:56 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\Battle.net
2014-07-05 12:54 - 2012-08-03 16:01 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-05 12:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-07-05 12:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-07-05 12:47 - 2012-10-16 22:57 - 00000000 ____D () C:\Users\Agando\AppData\Local\CrashDumps
2014-07-05 12:38 - 2013-12-23 11:56 - 00000000 ____D () C:\Users\Agando\AppData\Local\Battle.net
2014-07-05 12:12 - 2014-07-04 17:31 - 00000000 ____D () C:\Users\Agando\AppData\Local\wf-launcher
2014-07-05 12:12 - 2014-07-04 17:31 - 00000000 ____D () C:\ProgramData\GFACE
2014-07-04 22:20 - 2014-07-04 22:20 - 00000000 ____D () C:\Users\Agando\Desktop\Handout Sozialkunde
2014-07-04 17:37 - 2014-07-04 17:37 - 00000000 ____D () C:\Users\Agando\AppData\Local\CrashRpt
2014-07-02 22:47 - 2013-02-22 15:44 - 00000000 ____D () C:\ProgramData\Origin
2014-07-02 22:46 - 2012-08-20 23:31 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\Skype
2014-07-02 22:06 - 2012-08-15 19:28 - 00297088 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-07-02 22:06 - 2012-08-05 14:03 - 00297088 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-07-02 22:05 - 2012-08-05 14:03 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-07-02 21:01 - 2013-10-10 22:22 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\Audacity
2014-07-02 12:33 - 2014-07-02 12:33 - 02247960 _____ () C:\Users\Agando\Downloads\battlelog-web-plugins_2.4.0_141(1).exe
2014-07-02 12:33 - 2013-09-20 13:40 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-07-02 12:32 - 2013-08-23 17:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-02 12:29 - 2012-10-22 08:17 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\SongManager
2014-07-01 16:06 - 2014-07-01 16:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-01 15:11 - 2012-08-05 14:03 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-07-01 14:47 - 2014-05-11 00:00 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-07-01 14:47 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-30 20:20 - 2014-02-16 02:55 - 00000000 ____D () C:\Users\Agando\Desktop\ausraster
2014-06-28 16:46 - 2012-10-20 23:59 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\Winamp
2014-06-27 11:42 - 2014-06-26 16:28 - 00000000 ____D () C:\Program Files (x86)\Diablo III Public Test
2014-06-26 23:44 - 2014-06-12 17:25 - 00037022 _____ () C:\Windows\DirectX.log
2014-06-26 19:58 - 2013-12-23 14:11 - 00000000 ____D () C:\Users\Agando\Documents\Diablo III
2014-06-26 16:28 - 2014-06-26 16:28 - 00001292 _____ () C:\Users\Public\Desktop\Diablo III Public Test.lnk
2014-06-26 16:28 - 2014-06-26 16:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III Public Test
2014-06-25 23:37 - 2013-12-23 11:56 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-06-23 21:32 - 2014-01-19 19:42 - 00000000 ____D () C:\Users\Agando\AppData\Local\DayZ
2014-06-23 18:38 - 2014-01-19 19:42 - 00000000 ____D () C:\Users\Agando\Documents\DayZ
2014-06-21 19:19 - 2014-06-21 19:19 - 00000000 ____D () C:\Users\Agando\Documents\Meine Wallpapers
2014-06-21 19:15 - 2014-06-21 19:15 - 00000000 ____D () C:\SwSetup
2014-06-21 19:10 - 2014-06-21 17:44 - 51775619 _____ () C:\Users\Agando\Documents\PKoneStone.psd
2014-06-21 16:30 - 2012-08-06 18:36 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-20 19:57 - 2012-07-31 21:13 - 00071968 _____ () C:\Users\Agando\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-20 06:51 - 2012-08-03 16:03 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-20 06:51 - 2012-08-03 16:03 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-18 11:01 - 2013-09-12 00:47 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-17 01:14 - 2014-06-17 00:55 - 00000000 ____D () C:\Users\Agando\Documents\RoS-BoT
2014-06-13 21:57 - 2014-06-13 21:57 - 00000000 ____D () C:\Users\Agando\Downloads\CS6 amtlib.dll
2014-06-13 21:41 - 2012-08-17 19:41 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-06-13 21:25 - 2014-06-13 21:25 - 00005518 _____ () C:\Windows\PFRO.log
2014-06-13 21:03 - 2014-06-13 16:59 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2014-06-13 21:02 - 2014-06-13 16:58 - 00000988 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2014-06-13 21:02 - 2014-06-13 16:57 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2014-06-13 21:01 - 2014-06-13 16:56 - 00000962 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2014-06-13 21:00 - 2014-06-13 16:55 - 00001082 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2014-06-13 21:00 - 2014-06-13 16:54 - 00001485 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2014-06-13 16:59 - 2012-08-17 19:40 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-06-13 16:58 - 2012-08-03 15:59 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\Adobe
2014-06-13 16:54 - 2012-08-06 18:39 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-13 16:02 - 2012-09-29 11:02 - 00000000 ____D () C:\Program Files\Adobe
2014-06-13 15:27 - 2014-06-13 15:27 - 00003508 _____ () C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-PHILIPP-PC-Agando
2014-06-13 15:26 - 2014-06-13 15:26 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\PDAppFlex
2014-06-13 14:34 - 2014-06-13 14:34 - 00001275 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2014-06-12 23:34 - 2014-06-12 23:30 - 00000000 ____D () C:\Users\Agando\Documents\BFH.Beta
2014-06-12 13:07 - 2014-06-12 13:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-11 22:35 - 2014-05-27 22:30 - 00000000 ____D () C:\Users\Agando\AppData\Local\BANANA
2014-06-10 15:37 - 2012-08-07 16:09 - 00007601 _____ () C:\Users\Agando\AppData\Local\Resmon.ResmonCfg
2014-06-10 14:58 - 2012-10-13 23:15 - 00000000 ____D () C:\Windows\Minidump
2014-06-10 14:58 - 2012-08-03 23:16 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\DAEMON Tools Lite
2014-06-10 14:12 - 2013-04-01 17:07 - 00000000 ____D () C:\Users\Agando\AppData\Local\Facebook
2014-06-10 11:49 - 2013-02-18 00:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unreal Development Kit
2014-06-10 11:45 - 2012-08-03 16:24 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-10 11:43 - 2012-07-31 22:07 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-10 11:04 - 2012-08-05 21:10 - 00000000 ____D () C:\Users\Agando\Documents\my games
2014-06-10 11:03 - 2012-11-26 17:33 - 00000000 ____D () C:\ProgramData\Orbit
2014-06-10 10:57 - 2014-06-10 10:57 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-06-10 10:36 - 2014-06-10 10:36 - 00000000 ____D () C:\Program Files\Ubisoft
2014-06-09 23:31 - 2012-10-04 22:49 - 00000000 ____D () C:\Program Files\PeerBlock
2014-06-09 10:36 - 2013-02-12 21:07 - 00000000 ____D () C:\Program Files (x86)\Hotspot Shield
2014-06-07 10:38 - 2014-06-05 16:55 - 00000000 ____D () C:\ProgramData\BCCAAA281000A56D4B3C1E40329D9825
2014-06-06 23:34 - 2014-06-06 23:34 - 00000000 ____D () C:\Users\Agando\AppData\Local\YetAnotherRelogger
2014-06-05 19:46 - 2014-06-05 19:47 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-05 19:46 - 2014-06-05 19:46 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\Avira
2014-06-05 19:45 - 2014-06-05 19:45 - 00000000 ____D () C:\ProgramData\Avira
2014-06-05 19:45 - 2014-06-05 19:45 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-05 19:30 - 2012-08-03 23:15 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-06-05 19:27 - 2014-06-05 19:23 - 00000618 _____ () C:\ProgramData\RUNDLL32.EXE-3680-F.txt
2014-06-05 17:46 - 2014-06-05 17:45 - 00000118 _____ () C:\ProgramData\RUNDLL32.EXE-3500-F.txt
2014-06-05 17:43 - 2014-06-05 17:42 - 00000222 _____ () C:\ProgramData\RUNDLL32.EXE-4204-F.txt
2014-06-05 17:41 - 2014-06-05 17:37 - 00000671 _____ () C:\ProgramData\RUNDLL32.EXE-3444-F.txt
2014-06-05 17:32 - 2014-06-05 17:30 - 00001480 _____ () C:\ProgramData\RUNDLL32.EXE-3464-F.txt
2014-06-05 17:26 - 2014-06-05 17:25 - 00001000 _____ () C:\ProgramData\RUNDLL32.EXE-3148-F.txt
2014-06-05 17:24 - 2014-06-05 17:04 - 00011146 _____ () C:\ProgramData\RUNDLL32.EXE-2928-F.txt

Files to move or delete:
====================
C:\Users\Agando\Fraps v3.5.7 Activated.exe


Some content of TEMP:
====================
C:\Users\Agando\AppData\Local\Temp\avgnt.exe
C:\Users\Agando\AppData\Local\Temp\tmp2FD4.dll
C:\Users\Agando\AppData\Local\Temp\tmp48AD.dll
C:\Users\Agando\AppData\Local\Temp\tmp60C5.dll
C:\Users\Agando\AppData\Local\Temp\tmp6F17.dll
C:\Users\Agando\AppData\Local\Temp\ubi7179.tmp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-20 04:22

==================== End Of Log ============================

--- --- ---

--- --- ---

Und Addition.txt logs:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-07-2014
Ran by Agando at 2014-07-05 15:09:38
Running from C:\Users\Agando\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

"Assassin's Creed IV - Black Flag" (HKLM-x32\...\{959CF39B-F3FA-4A80-AECF-8AF6BA639276}_is1) (Version: 1.01.0.0 - )
@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.23 - GIGABYTE)
µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.32126 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe After Effects CS5.5 (HKLM-x32\...\{CB04D8E1-7B9C-4F35-B2E2-E87CBE520805}) (Version: 10.5.1 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.5.0.1060 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.5.0.1060 - Adobe Systems Incorporated) Hidden
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.4.980 - Adobe Systems Incorporated.)
Adobe Community Help (x32 Version: 3.4.980 - Adobe Systems Incorporated.) Hidden
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.6.0.393 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.5) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.5 - Adobe Systems Incorporated)
Adobe Story (HKLM-x32\...\com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.0.571 - Adobe Systems Incorporated)
Adobe Story (x32 Version: 1.0.571 - Adobe Systems Incorporated) Hidden
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.11 Beta1 - Michael Tippach)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.4.4 - Atheros Communications Inc.)
Audacity 2.0.4 (HKLM-x32\...\Audacity_is1) (Version: 2.0.4 - Audacity Team)
AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.672 - Avira)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.1.0.1 - Electronic Arts)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.0.0 - Electronic Arts)
Battlefield™ Hardline Beta (HKLM-x32\...\{599276A7-F45D-40B1-A0B6-CF132A1CAD49}) (Version: 1.0.0.4 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
BenVista PhotoZoom Pro 5.0.2 (HKCU\...\PhotoZoom Pro 5) (Version: 5.0.2 - BenVista Ltd.)
BioShock 2 (HKLM-x32\...\{4A8B461A-9336-4CF9-98F4-14DD38E673F0}) (Version: 1.00.0000 - 2K Games)
BioShock Infinite Deutsch-Patch 1.0 (HKLM-x32\...\BioShock Infinite Deutsch-Patch 1.0) (Version: 1.0 - .x.X.RIDDICK.X.x.)
BrowseToSave 1.74 (HKLM-x32\...\SP_f2a323db) (Version:  - ) <==== ATTENTION
Bulletstorm (HKLM-x32\...\Steam App 99810) (Version:  - People Can Fly)
Call of Duty - World at War (HKLM-x32\...\{2775C25A-DF39-44AA-8E59-E0447DC164C2}) (Version: 1.00.0000 - Modern)
Call of Duty Black Ops AUT-UNCUTPATCH Version 4.0.2 (HKLM-x32\...\{41BEA35B-CFE0-44D8-9EFE-F77CC555F701}_is1) (Version: 4.0.2 - mortus by PYSGU-Team)
Call of Duty Black Ops ROW-LOBBYPATCH Version 4.2.1 (HKLM-x32\...\{BFBAB8FF-2AFB-4925-95A3-635EC4FB7FAD}_is1) (Version: 4.2.1 - mortus by PYSGU-Team)
Call of Duty(R) - World at War(TM) 1.1 Patch (x32 Version:  - ) Hidden
Call of Duty(R) - World at War(TM) 1.1 Patch (x32 Version: 1.1 - Activision) Hidden
Call of Duty(R) - World at War(TM) 1.3 Patch (x32 Version:  - ) Hidden
Call of Duty(R) - World at War(TM) 1.3 Patch (x32 Version: 1.3 - Activision) Hidden
Call of Duty(R) - World at War(TM) 1.7 Patch (x32 Version: 1.7 - Activision) Hidden
Call of Duty: Black Ops (HKLM-x32\...\Steam App 42700) (Version:  - Treyarch)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)
CCleaner (HKLM\...\CCleaner) (Version: 3.23 - Piriform)
Cheat Engine 6.2 (HKLM-x32\...\Cheat Engine 6.2_is1) (Version:  - Dark Byte)
CINEMA 4D 14.042 (HKLM\...\MAXON39D153BC) (Version: 14.042 - MAXON Computer GmbH)
Color Efex Pro 4 (HKLM-x32\...\Color Efex Pro 4) (Version: 4.0.0.0 - Nik Software, Inc.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Crossfire Europe (HKLM-x32\...\Crossfire Europe) (Version: 1197 - SG INTERACTIVE)
Crysis 2 Maximum Edition (HKLM-x32\...\Steam App 108800) (Version:  - Electronic Arts)
Crysis Modification - Mster Config v3.01 (HKLM-x32\...\Mster) (Version:  - )
Crysis Wars (HKLM-x32\...\Steam App 17340) (Version:  - Crytek)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Dead Island DELUXE EDITION (HKLM-x32\...\{0D1611C7-0381-4748-8218-9EE6616F1DD4}_is1) (Version: 1.2.0 - QfG)
Dead Island Riptide (c) Deep Silver version 1 (HKLM-x32\...\RGVhZCBJc2xhbmQgUmlwdGlkZSAoYykgRGVlcCBTaWx2ZXI=_is1) (Version: 1 - )
Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Deckadance (HKLM-x32\...\Deckadance) (Version: 2.0 - Image-Line)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Diablo III Public Test (HKLM-x32\...\Diablo III Public Test) (Version:  - Blizzard Entertainment)
DiskAid 5.46 (HKLM-x32\...\DiskAid_is1) (Version: 5.46 - DigiDNA)
Easy Tune 6 B12.0309.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B12.0309.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
EVGA Precision X 4.2.1 (HKLM-x32\...\PrecisionX) (Version: 4.2.1 - EVGA Corporation)
Extreme Immersive Mod version 3.0.87 (HKLM-x32\...\{F135C9E0-3F24-42DD-B12B-8282B72A4D6F}_is1) (Version: 3.0.87 - CyberAlien)
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.03 - Ubisoft)
Far Cry 3 Blood Dragon (HKLM-x32\...\{A071F478-73E0-4143-AE55-4DD6BABD74F5}) (Version: 1.00 - Ubisoft)
Far Cry 3 Blood Dragon (HKLM-x32\...\Far Cry 3 Blood Dragon_is1) (Version: 1.00 - R.G. Reverants)
FL Studio 10 (HKLM-x32\...\FL Studio 10) (Version:  - Image-Line)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free M4a to MP3 Converter 7.0 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Free YouTube Download version 3.1.42.1212 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.1.42.1212 - DVDVideoSoft Ltd.)
FXAA Post Process Injector (HKLM-x32\...\FXAA Post Process Injector) (Version:  - )
GameRanger (HKCU\...\GameRanger) (Version:  - GameRanger Technologies)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Hotspot Shield 3.42 (HKLM-x32\...\HotspotShield) (Version: 3.42 - AnchorFree Inc.)
ICMC SP Mappack (HKLM-x32\...\{D82276C5-AC9E-4F88-976E-E51140DC14D3}) (Version: 1.00.0000 - crymod)
IconPackager (HKLM-x32\...\IconPackager) (Version:  - Stardock Corporation)
IconPackager (x32 Version: 5.00 - Stardock Corporation) Hidden
iFunbox (v2.7.2386.747), iFunbox DevTeam (HKLM-x32\...\iFunbox_is1) (Version: v2.7.2386.747 - )
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version:  - Image-Line)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
ipswDownloader 1.6 (HKLM-x32\...\ipswDownloader) (Version: 1.6 - Sergey 'iOrange' Kudlay)
iTunes (HKLM\...\{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}) (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 15 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417015FF}) (Version: 7.0.150 - Oracle)
Java 7 Update 21 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
keFIR VST plugin (HKLM-x32\...\{E4DCFD0F-7B68-4C44-B208-99027AD1AC69}) (Version: 1.0.0 - Piotr "Habib" Pyrzanowski)
K-Lite Codec Pack 8.7.0 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 8.7.0 - )
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
Metro Last Light (HKLM-x32\...\Metro Last Light_is1) (Version:  - )
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{F97E3841-CA9D-4964-9D64-26066241D26F}) (Version: 3.3.24.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)
Microsoft VC9 runtime libraries (x32 Version: 2.0.0 - AOL Inc.) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Motherboard Monitor 5 (HKLM-x32\...\Motherboard Monitor 5_is1) (Version: 5 - Alexander van Kaam)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version:  - Native Instruments)
Native Instruments FM8 (Version: 1.2.0.1016 - Native Instruments) Hidden
Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version:  - Native Instruments)
Native Instruments Massive (Version: 1.3.0.2050 - Native Instruments) Hidden
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version:  - Native Instruments)
Native Instruments Service Center (Version: 2.2.6.676 - Native Instruments) Hidden
Natural Mod (HKLM-x32\...\Natural Mod) (Version: 2.0.2 - pydon)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.44.3 - Black Tree Gaming)
Nur Entfernen der CopyTrans Suite möglich (HKCU\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.151.1095 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA ShadowPlay 12.4.55 (Version: 12.4.55 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 12.4.55 (Version: 12.4.55 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 12.4.55 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.22 (Version: 1.2.22 - NVIDIA Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 9.3.6.4643 - Electronic Arts, Inc.)
Path of Exile (HKLM-x32\...\{90A4562F-D4A1-4B65-906D-41F236CF6902}) (Version: 1.0.2.30151 - Grinding Gear Games)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5350) (Version:  - )
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC)
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
Platinum Hide IP (HKLM-x32\...\PlatinumHideIP) (Version: 3.2.2.2 - )
Preset Manager 2.0 (HKLM-x32\...\{FCFE3F81-C977-4D31-877B-2778BB2A02DE}) (Version: 2.0.114 - Sony)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 2.4 beta r1674 - )
Rappelz (HKLM-x32\...\{90877318-0BD0-4BDE-BFC0-C4BB12DAC86A}_is1) (Version: Rappelz - gPotato.eu)
Ray Adams ATI Tray Tools (HKLM-x32\...\rayatitray) (Version:  - )
reFX Nexus VSTi RTAS v2.2.0 (HKLM-x32\...\reFX Nexus_is1) (Version:  - )
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version:  - Punk Software)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games)
Saints Row IV, âåðñèÿ 1.0.0.0 (HKLM-x32\...\Saints Row IV_is1) (Version: 1.0.0.0 - )
Serious Samurize (HKLM-x32\...\Serious Samurize) (Version:  - )
SHIELD Streaming (Version: 1.8.323 - NVIDIA Corporation) Hidden
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SP45575 - Wallpaper Picture Position Enabler for Windows 7 (HKLM-x32\...\{86391634-A94B-4355-8397-3D85C2F942DA}) (Version: 1.0.0 - Hewlett-Packard International Pte. Ltd.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
The Elder Scrolls V Skyrim Dragonborn (c) Bethesda Softworks version 1 (HKLM-x32\...\The Elder Scrolls V Skyrim Dragonborn (c) Bethes~300CD4A2_is1) (Version: 1 - )
The Witcher 2: Assassins of Kings Enhanced Edition (HKLM-x32\...\Steam App 20920) (Version:  - CD Projekt RED)
Theme Resource Changer X64 v1.0 (HKLM\...\Theme Resource Changer X64 v1.0) (Version:  - Bad Ass Apps)
Total War ROME II (HKLM-x32\...\VG90YWxXYXJST01FSUk=_is1) (Version: 1 - )
Trapcode Suite 64-bit (HKLM-x32\...\InstallShield_{5210717F-CAFD-4F21-8DF7-6ED3862725C4}) (Version: 12.1.0 - Red Giant Software)
Trapcode Suite 64-bit (Version: 12.1.0 - Red Giant Software) Hidden
Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version:  - Tunngle.net GmbH)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
UxStyle Core Beta (HKLM-x32\...\{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}) (Version: 0.2.1.1 - The Within Network, LLC)
Vegas Pro 12.0 (64-bit) (HKLM\...\{A7C8BBDE-FE98-11E1-87C9-F04DA23A5C58}) (Version: 12.0.367 - Sony)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
Virtual DJ Pro Full - Atomix Productions (HKLM-x32\...\Virtual DJ Pro Full - Atomix Productions) (Version:  - )
VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)
Warface (HKLM-x32\...\Steam App 291480) (Version:  - Crytek GmbH)
WATCH_DOGS (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
WATCH_DOGS Hotfix (HKLM-x32\...\V0FUQ0hfRE9HUw==_is1) (Version: 1 - )
WiMP 2.1.3 (HKLM-x32\...\com.aspiro.wimp.de.25F5C0086CDE1F22CA0B92A487729991CA6CD013.1) (Version: 2.1.3 - Aspiro AS)
WiMP 2.1.3 (x32 Version: 2.1.3 - Aspiro AS) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wolfenstein: The New Order (HKLM-x32\...\V29sZmVuc3RlaW5UaGVOZXdPcmRlcg==_is1) (Version: 1 - )
XSplit Broadcaster (HKLM-x32\...\{F8A47958-47CC-4B57-AE7D-7DDC0A86BEF5}) (Version: 1.3.1311.1201 - SplitMediaLabs)

==================== Restore Points  =========================

03-07-2014 11:34:00 Geplanter Prüfpunkt
05-07-2014 10:49:58 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2014-06-13 21:12 - 2014-06-13 21:12 - 00001825 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 na2m-pr.licenses.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 ereg.wip4.adobe.com
127.0.0.1 wip.adobe.com
127.0.0.1 wip1.adobe.com
127.0.0.1 wip2.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 wip4.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 hl2rcv.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 3dns.adobe.com
127.0.0.1 3dns-1.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-4.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-1.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com

There are 1 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {08595BBF-4120-4663-AFFC-402E85B5FA8B} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/uninstall.html?aaa=KICMKJNJLMJJHMHMPMJMCNNJOJMMPMCNLMGMLMKMCNHMJJMJGMCNJJGMMJLJKJMJJJMMLMNJMMJJJNJICMIMCNHMCNJMFMGMCNOMOMCNGMJMPMPMFMJMCNOMCNIMJMPMOMCNNMJNPICMPMFMFMLMNMJMJNHICMEKMICNJJCKJNBJCMOLIJOJBJLJAJJNKJCMJNNICMJNDJCMLJKJ"
Task: {4D5E94FC-8BA0-4A78-95F9-EB80EFAEEB65} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-03] (Google Inc.)
Task: {6DD6220E-BDF1-486B-8CDE-9B2110B8A789} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
Task: {CB01A871-F879-429A-8195-07034CCF1B72} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-05] (Adobe Systems Incorporated)
Task: {F08C36A3-72F4-4D15-A926-7A6C9F3D10A5} - System32\Tasks\AdobeAAMUpdater-1.0-PHILIPP-PC-Agando => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)
Task: {FB45062D-A64C-4BFF-B23C-DFA97AC4CBB7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-03] (Google Inc.)
Task: {FD6056E4-B9C8-440E-9BDD-4475680EFF79} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-09-24] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-07-31 22:49 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-17 00:34 - 2014-05-17 00:34 - 00430344 _____ () C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
2012-08-05 14:03 - 2014-07-01 15:11 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-23 02:10 - 2014-05-23 02:10 - 00671904 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2012-10-20 16:55 - 2007-09-02 13:58 - 00495616 _____ () C:\Program Files (x86)\RocketDock\RocketDock.exe
2012-07-31 22:10 - 2012-01-12 15:21 - 00078448 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2012-07-31 22:10 - 2012-01-12 15:21 - 00386160 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2012-10-07 21:48 - 2012-10-07 21:48 - 00041160 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2012-10-07 21:48 - 2012-10-07 21:48 - 00739016 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2012-10-07 21:46 - 2012-10-07 21:46 - 00056832 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2012-10-07 21:46 - 2012-10-07 21:46 - 00011776 _____ () C:\Program Files\Rainmeter\Plugins\PowerPlugin.dll
2012-10-07 21:46 - 2012-10-07 21:46 - 00010240 _____ () C:\Program Files\Rainmeter\Plugins\WindowMessagePlugin.dll
2012-10-07 21:46 - 2012-10-07 21:46 - 00026624 _____ () C:\Program Files\Rainmeter\Plugins\iTunesPlugin.dll
2012-10-07 21:46 - 2012-10-07 21:46 - 00012800 _____ () C:\Program Files\Rainmeter\Plugins\PerfMon.dll
2014-05-29 16:05 - 2014-05-29 16:07 - 08318464 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Plugins\VST\Glitch2.dll
2013-11-26 11:41 - 2012-12-27 03:53 - 01964544 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Plugins\VST\TSE_X50_v1.0x64.dll
2012-02-20 21:29 - 2012-02-20 21:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 21:28 - 2012-02-20 21:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-05-17 02:11 - 2014-05-17 02:11 - 00908584 _____ () C:\Program Files (x86)\Hotspot Shield\bin\af_proxy.dll
2014-03-19 23:46 - 2014-03-19 23:46 - 00381224 _____ () C:\Program Files (x86)\Hotspot Shield\bin\cmwarchplugin.dll
2014-05-17 02:37 - 2014-05-17 02:37 - 00506664 _____ () C:\Program Files (x86)\Hotspot Shield\bin\HssRep.dll
2012-10-20 16:55 - 2007-09-02 13:57 - 00069632 _____ () C:\Program Files (x86)\RocketDock\RocketDock.dll
2014-05-26 05:52 - 2014-05-26 05:52 - 32733088 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libcef.dll
2013-11-11 23:34 - 2013-11-11 23:34 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\fb006f4b3141077a7bebd291cc94b5ea\IsdiInterop.ni.dll
2012-07-31 22:11 - 2011-11-29 20:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-07-31 22:08 - 2011-12-16 10:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2001-04-13 15:23 - 2001-04-13 15:23 - 00053248 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\OpenAsio.dll
2011-04-22 09:17 - 2011-04-22 09:17 - 12963840 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\DSP_IPP.dll
2009-03-18 09:12 - 2009-03-18 09:12 - 00073728 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Reverb.dll
2010-02-11 16:12 - 2010-02-11 16:12 - 00626688 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Elastique.dll
2011-02-15 16:52 - 2011-02-15 16:52 - 01021952 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Plugins\Fruity\Effects\Fruity Limiter\Fruity Limiter.dll
2011-02-15 16:54 - 2011-02-15 16:54 - 00968704 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Plugins\Fruity\Effects\Fruity Parametric EQ 2\Fruity Parametric EQ 2.dll
2011-02-15 16:54 - 2011-02-15 16:54 - 01081856 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Plugins\Fruity\Effects\Fruity Reeverb 2\Fruity Reeverb 2.dll
2011-02-15 16:50 - 2011-02-15 16:50 - 00841728 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Plugins\Fruity\Effects\Fruity Fast Dist\Fruity Fast Dist.dll
2000-03-28 07:28 - 2000-03-28 07:28 - 00046080 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Plugins\VST\Fruity filter.dll
2011-02-15 18:38 - 2011-02-15 18:38 - 02480128 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Plugins\Fruity\Effects\Soundgoodizer\Soundgoodizer.dll
2011-02-15 16:50 - 2011-02-15 16:50 - 00842752 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Plugins\Fruity\Effects\Fruity Delay 2\Fruity Delay 2.dll
2011-09-02 09:28 - 2011-09-02 09:28 - 02021888 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Plugins\Fruity\Effects\Gross Beat\Gross Beat.dll
2001-11-15 17:12 - 2001-11-15 17:12 - 00126976 _____ () C:\Program Files (x86)\Image-Line\FL Studio 10\Plugins\VST\Fruity chorus.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\ProgramData\TEMP:A8ADE5D8
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
AlternateDataStreams: C:\ProgramData\TEMP:FB1B13D8

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\startupfolder: C:^Users^Agando^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Facebook Messenger.lnk => C:\Windows\pss\Facebook Messenger.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Agando^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^NVI_GPU_Clock_Startup_0.lnk => C:\Windows\pss\NVI_GPU_Clock_Startup_0.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Agando^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Server Default.lnk => C:\Windows\pss\Server Default.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5.5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EasyTuneVI => C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe
MSCONFIG\startupreg: Exetender_148 => "C:\Program Files (x86)\FreeRide Games\GPlayer.exe" /schedule 300000
MSCONFIG\startupreg: Facebook Update => "C:\Users\Agando\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: HKCU => C:\Users\Agando\AppData\Roaming\install\Svchost.exe
MSCONFIG\startupreg: HKLM => C:\Users\Agando\AppData\Roaming\install\Svchost.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Pando Media Booster => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
MSCONFIG\startupreg: QQDownload => "C:\Users\Agando\Desktop\QQDownload.exe"	autostart
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RoboForm => "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: swg => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: uTorrent => "C:\Users\Agando\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
MSCONFIG\startupreg: Vagex => D:\Program Files (x86)\Vagex\Vagex\Vagex.exe

==================== Faulty Device Manager Devices =============

Name: TAP-Win32 Adapter V9 (Tunngle)
Description: TAP-Win32 Adapter V9 (Tunngle)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Win32 Provider V9 (Tunngle)
Service: tap0901t
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: mbmiodrvr
Description: mbmiodrvr
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: mbmiodrvr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/05/2014 01:07:54 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!

Error: (07/05/2014 00:56:35 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!

Error: (07/05/2014 00:47:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x15d0
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (07/05/2014 00:46:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x5864
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (07/01/2014 05:03:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b66f7
Name des fehlerhaften Moduls: Flash64_13_0_0_214.ocx, Version: 13.0.0.214, Zeitstempel: 0x5359ce87
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000029ca55
ID des fehlerhaften Prozesses: 0x707c
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (06/28/2014 00:33:10 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: csgo.exe, Version: 0.0.0.0, Zeitstempel: 0x5387b8a0
Name des fehlerhaften Moduls: nvd3dum.dll, Version: 9.18.13.3523, Zeitstempel: 0x5315b426
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0069ba12
ID des fehlerhaften Prozesses: 0x374c
Startzeit der fehlerhaften Anwendung: 0xcsgo.exe0
Pfad der fehlerhaften Anwendung: csgo.exe1
Pfad des fehlerhaften Moduls: csgo.exe2
Berichtskennung: csgo.exe3

Error: (06/23/2014 08:15:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: RoS-BoT Beta 37c.exe, Version: 1.0.0.0, Zeitstempel: 0x53a5992d
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x16c8
Startzeit der fehlerhaften Anwendung: 0xRoS-BoT Beta 37c.exe0
Pfad der fehlerhaften Anwendung: RoS-BoT Beta 37c.exe1
Pfad des fehlerhaften Moduls: RoS-BoT Beta 37c.exe2
Berichtskennung: RoS-BoT Beta 37c.exe3

Error: (06/23/2014 08:15:16 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: RoS-BoT Beta 37c.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.InvalidOperationException
Stack:
   at AieBot.BTools.KeyboardHook.RegisterHotKey(AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at DynamicClass.(System.Object, AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at A.c22da9552700ab6c6434e92e3e723e42c.c128458d2e4a6dde75bee0e2b5848a9e4(System.Object, AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at AieBot.NewMain..ctor()
   at DynamicClass.()
   at A.cfd9121de0d78ccabe1522c1d45e5a9e3.cff2d8cece0c4d333aa4bc3492e6c20ec()
   at A.cc9d24df5b0d126b6d38ff7f1dc03cedb.c73abd2bb2a4d849165d3947483fd715c()

Error: (06/20/2014 01:11:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: RoS-BoT Beta 36c.exe, Version: 1.0.0.0, Zeitstempel: 0x539c211f
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x1cd4
Startzeit der fehlerhaften Anwendung: 0xRoS-BoT Beta 36c.exe0
Pfad der fehlerhaften Anwendung: RoS-BoT Beta 36c.exe1
Pfad des fehlerhaften Moduls: RoS-BoT Beta 36c.exe2
Berichtskennung: RoS-BoT Beta 36c.exe3

Error: (06/20/2014 01:11:15 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: RoS-BoT Beta 36c.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.InvalidOperationException
Stack:
   at AieBot.BTools.KeyboardHook.RegisterHotKey(AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at DynamicClass.(System.Object, AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at A.ce1686ab59bde94be447f2e558a486e10.c128458d2e4a6dde75bee0e2b5848a9e4(System.Object, AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at AieBot.NewMain..ctor()
   at DynamicClass.()
   at A.cd0f123866fcd10aa5bea6824fb28a75e.cff2d8cece0c4d333aa4bc3492e6c20ec()
   at A.cc9d24df5b0d126b6d38ff7f1dc03cedb.c73abd2bb2a4d849165d3947483fd715c()


System errors:
=============
Error: (07/05/2014 03:03:24 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (07/05/2014 03:03:22 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (07/05/2014 01:53:38 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (07/05/2014 01:45:32 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (07/05/2014 01:45:26 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (07/05/2014 01:45:26 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (07/05/2014 01:38:45 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (07/05/2014 01:38:45 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (07/05/2014 01:08:02 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
mbmiodrvr

Error: (07/05/2014 01:07:57 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.


Microsoft Office Sessions:
=========================
Error: (07/05/2014 01:07:54 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0

Error: (07/05/2014 00:56:35 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0

Error: (07/05/2014 00:47:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd15d001cf983e7b71bf2fC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dllb9315511-0431-11e4-9b92-902b343157d2

Error: (07/05/2014 00:46:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd586401cf983e5d41c452C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll9bf687f1-0431-11e4-9b92-902b343157d2

Error: (07/01/2014 05:03:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b66f7Flash64_13_0_0_214.ocx13.0.0.2145359ce87c0000005000000000029ca55707c01cf953ab2f6f0dbC:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\Macromed\Flash\Flash64_13_0_0_214.ocxe0ccd324-0130-11e4-9b92-902b343157d2

Error: (06/28/2014 00:33:10 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: csgo.exe0.0.0.05387b8a0nvd3dum.dll9.18.13.35235315b426c00000050069ba12374c01cf9251ddeb1e1aC:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exeC:\Windows\system32\nvd3dum.dll03d61896-fe4b-11e3-9b92-902b343157d2

Error: (06/23/2014 08:15:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: RoS-BoT Beta 37c.exe1.0.0.053a5992dKERNELBASE.dll6.1.7601.1822951fb1116e04343520000c41f16c801cf8f0f1541b97aD:\Program Files (x86)\YouknowBot\ros-bot_beta_36c\ros-bot_beta_37c\RoS-BoT Beta 37c.exeC:\Windows\syswow64\KERNELBASE.dll542fd968-fb02-11e3-9b92-902b343157d2

Error: (06/23/2014 08:15:16 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: RoS-BoT Beta 37c.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.InvalidOperationException
Stack:
   at AieBot.BTools.KeyboardHook.RegisterHotKey(AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at DynamicClass.(System.Object, AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at A.c22da9552700ab6c6434e92e3e723e42c.c128458d2e4a6dde75bee0e2b5848a9e4(System.Object, AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at AieBot.NewMain..ctor()
   at DynamicClass.()
   at A.cfd9121de0d78ccabe1522c1d45e5a9e3.cff2d8cece0c4d333aa4bc3492e6c20ec()
   at A.cc9d24df5b0d126b6d38ff7f1dc03cedb.c73abd2bb2a4d849165d3947483fd715c()

Error: (06/20/2014 01:11:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: RoS-BoT Beta 36c.exe1.0.0.0539c211fKERNELBASE.dll6.1.7601.1822951fb1116e04343520000c41f1cd401cf8c13c4ce6d3dD:\Program Files (x86)\YouknowBot\ros-bot_beta_36c\RoS-BoT Beta 36c.exeC:\Windows\syswow64\KERNELBASE.dll03cd0829-f807-11e3-9b92-902b343157d2

Error: (06/20/2014 01:11:15 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: RoS-BoT Beta 36c.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.InvalidOperationException
Stack:
   at AieBot.BTools.KeyboardHook.RegisterHotKey(AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at DynamicClass.(System.Object, AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at A.ce1686ab59bde94be447f2e558a486e10.c128458d2e4a6dde75bee0e2b5848a9e4(System.Object, AieBot.BTools.ModifierKeys, System.Windows.Forms.Keys)
   at AieBot.NewMain..ctor()
   at DynamicClass.()
   at A.cd0f123866fcd10aa5bea6824fb28a75e.cff2d8cece0c4d333aa4bc3492e6c20ec()
   at A.cc9d24df5b0d126b6d38ff7f1dc03cedb.c73abd2bb2a4d849165d3947483fd715c()


CodeIntegrity Errors:
===================================
  Date: 2014-07-05 13:07:16.675
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-07-05 13:07:16.644
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-07-05 12:55:35.519
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-07-05 12:55:35.457
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-19 14:58:56.630
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-19 14:58:56.599
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-13 21:25:47.796
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-13 21:25:47.764
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-06 16:19:53.218
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-06 16:19:53.187
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 28%
Total physical RAM: 8154.29 MB
Available physical RAM: 5815.84 MB
Total Pagefile: 16306.77 MB
Available Pagefile: 12336.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:936.7 GB) (Free:187.11 GB) NTFS
Drive d: (Daten) (Fixed) (Total:926.22 GB) (Free:284.41 GB) NTFS
Drive k: (Elements) (Fixed) (Total:931.51 GB) (Free:288.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: FE559025)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=937 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=926 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 002D6057)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================

deeprybka · 05.07.2014, 14:16

Für was ist denn das?

Code:

ATTFilter

2014-06-13 21:12 - 2014-06-13 21:12 - 00001825 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 na2m-pr.licenses.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 ereg.wip4.adobe.com
127.0.0.1 wip.adobe.com
127.0.0.1 wip1.adobe.com
127.0.0.1 wip2.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 wip4.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 hl2rcv.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 3dns.adobe.com
127.0.0.1 3dns-1.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-4.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-1.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com

Bombdropper9 · 05.07.2014, 14:17

Hmm, glaube zur Aktivierung von Adobe Photoshop..

deeprybka · 05.07.2014, 14:20

Echt? Wird der so aktiviert?

Wenn Du hier kostenlose Hilfe in Anspruch nehmen willst, dann prüfe, ob auf Deinem PC sich vielleicht nicht ein Crack, Keygen etc. befindet, da ich Dir sonst nicht helfen kann.
Alles nachzulesen hier:
http://www.trojaner-board.de/95394-c...-software.html

Avira - Dieses Programm wurde durch eine Gruppenrichtlinie blockiert

Log-Analyse und Auswertung: Avira - Dieses Programm wurde durch eine Gruppenrichtlinie blockiert