Multiple Probleme mit Viren und Trojanern

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-07-2014
Ran by mochenmo1 (administrator) on MOCHENMO1-PC on 20-07-2014 01:57:44
Running from C:\Users\mochenmo1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C1ADCBSJ
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Sidebar\sidebar.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
() C:\Program Files (x86)\SmartTweak\FixMyRegistry\FixMyRegistry.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] => C:\Program Files\elantech\etdctrl.exe [2588968 2010-11-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => c:\program files\realtek\audio\hda\ravcpl64.exe [12673128 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => c:\program files\realtek\audio\hda\ravbg64.exe [2277480 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [Power Management] => c:\program files\acer\acer epower management\epowertray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "c:\program files\intel\turboboost\runtbgadgetonce.vbs" 
HKLM\...\Run: [AtherosBtStack] => c:\program files (x86)\bluetooth suite\btvstack.exe [976032 2011-09-16] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => c:\program files (x86)\bluetooth suite\athbttray.exe [799904 2011-09-16] (Atheros Commnucations)
HKLM-x32\...\Run: [BackupManagerTray] => c:\program files (x86)\nti\acer backup manager\backupmanagertray.exe [297280 2011-04-24] (NTI Corporation)
HKLM-x32\...\Run: [OOTag] => c:\program files (x86)\acer\oobeoffer\ootag.exe [13856 2010-02-23] (Microsoft)
HKLM-x32\...\Run: [StartCCC] => c:\program files (x86)\ati technologies\ati.ace\core-static\clistart.exe [336384 2011-02-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LManager] => c:\program files (x86)\launch manager\lmanager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM-x32\...\Run: [NUSB3MON] => c:\program files (x86)\renesas electronics\usb 3.0 host controller driver\application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [295512 2013-09-03] (RealNetworks, Inc.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => c:\dolby pcee4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [552960 2013-10-25] (ROCCAT GmbH)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-2435969490-785047729-4073554876-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [357696 2010-04-01] (DT Soft Ltd)
HKU\S-1-5-21-2435969490-785047729-4073554876-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent 
HKU\S-1-5-21-2435969490-785047729-4073554876-1000\...\Run: [FixMyRegistry] => C:\Program Files (x86)\SmartTweak\FixMyRegistry\FixMyRegistry.exe [1886840 2014-05-26] ()
HKU\S-1-5-21-2435969490-785047729-4073554876-1000\...\Run: [SpeedUpMyComputer] => C:\Program Files (x86)\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as 
HKU\S-1-5-21-2435969490-785047729-4073554876-1000\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-2435969490-785047729-4073554876-1000\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-2435969490-785047729-4073554876-1000\...\MountPoints2: {1232592b-8fba-11e1-95c9-e4d53d088c7c} - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-2435969490-785047729-4073554876-1000\...\MountPoints2: {4701b1ef-9c7b-11e2-8905-e4d53d088c7c} - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-2435969490-785047729-4073554876-1000\...\MountPoints2: {b6f3effd-758d-11e1-960b-e4d53d088c7c} - "F:\WD SmartWare.exe" autoplay=true
Startup: C:\Users\mochenmo1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\autostart.lnk
ShortcutTarget: autostart.lnk -> C:\PROGRA~3\399307~1\ye9ywq.cpp (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Avira Savings Advisor BHO -> {A18A516C-AA41-46A9-92DB-60208917E442} -> C:\Program Files (x86)\avira\Internet Explorer\avira32.dll ()
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.448 - C:\Program Files (x86)\Win7codecs\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files (x86)\Win7codecs\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-03]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [105120 2011-09-16] (Atheros Commnucations) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

==================== Drivers (Whitelisted) ====================

R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31968 2012-10-08] (Wondershare)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2012-04-07] () [File not signed]
U5 UnlockerDriver5; C:\Program Files (x86)\TC UP\PLUGINS\Media\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
R1 VD_FileDisk; C:\Windows\System32\Drivers\VD_FileDisk.sys [30312 2011-01-26] (CaptainFlint Software)
U3 asx2ovx9; C:\Windows\System32\Drivers\asx2ovx9.sys [0 ] (Microsoft Corporation)
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbfake; system32\DRIVERS\ewusbfake.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 USBMULCD; system32\drivers\CM10664.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-20 01:40 - 2014-07-20 01:54 - 00000000 ____D () C:\Users\mochenmo1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
2014-07-20 01:40 - 2014-07-20 01:54 - 00000000 ____D () C:\Program Files (x86)\SmartTweak
2014-07-20 01:40 - 2014-07-20 01:40 - 00000000 ____D () C:\ProgramData\RegClean
2014-07-20 01:31 - 2014-03-24 13:50 - 18974760 _____ () C:\Windows\SysWOW64\fixdll.exe
2014-07-20 01:31 - 2006-11-24 03:07 - 00043430 _____ () C:\Windows\SysWOW64\openal32.zip
2014-07-20 01:24 - 2014-06-10 12:27 - 00019392 _____ (Dll-Files.com) C:\Windows\system32\roboot64.exe
2014-07-19 13:48 - 2014-07-19 13:48 - 00000000 ____D () C:\Users\mochenmo1\Documents\My Games
2014-07-19 13:48 - 2014-07-19 13:48 - 00000000 ____D () C:\ProgramData\Steam
2014-07-19 13:46 - 2014-07-20 01:16 - 00000000 ____D () C:\Program Files (x86)\Age of Wonders III
2014-07-16 23:00 - 2014-07-16 23:01 - 00000000 ____D () C:\AdwCleaner
2014-07-16 22:47 - 2014-07-16 22:47 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-07-16 22:47 - 2014-07-16 22:47 - 00000000 _____ () C:\autoexec.bat
2014-07-16 22:46 - 2014-07-16 22:57 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-07-16 22:21 - 2014-07-16 22:21 - 00000335 _____ () C:\ProgramData\RUNDLL32.EXE-9472-F.txt
2014-07-16 22:19 - 2014-07-16 22:19 - 00000000 ____D () C:\ProgramData\AD155EE6C2DDFA7EF0557210AE99E013
2014-07-16 20:56 - 2014-07-16 22:29 - 00000000 ____D () C:\Users\mochenmo1\AppData\Local\Cyberlink SoftDMA
2014-07-16 20:54 - 2014-07-16 20:54 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2014-07-16 20:54 - 2014-07-16 20:54 - 00000000 ____D () C:\Users\mochenmo1\AppData\Local\MediaServer
2014-07-16 20:54 - 2014-07-16 20:54 - 00000000 ____D () C:\ProgramData\PDVD
2014-07-16 20:53 - 2014-07-16 22:29 - 00000000 ____D () C:\ProgramData\install_clap
2014-07-16 20:53 - 2014-07-16 20:53 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-07-16 14:01 - 2014-07-16 23:01 - 00000000 ____D () C:\Users\mochenmo1\AppData\Roaming\IObit
2014-07-16 14:01 - 2014-07-16 23:01 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-07-16 14:01 - 2014-07-16 22:36 - 00000000 ____D () C:\ProgramData\IObit
2014-07-16 14:01 - 2014-07-16 14:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-07-14 18:35 - 2014-07-14 18:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-MOCHENMO1-PC--(64-bit).dat
2014-07-14 18:11 - 2014-07-17 00:39 - 00005818 _____ () C:\Windows\PFRO.log
2014-07-14 17:56 - 2014-07-14 17:57 - 00317595 _____ () C:\ProgramData\RUNDLL32.EXE-1052-F.txt
2014-07-14 17:52 - 2014-07-14 17:53 - 00317504 _____ () C:\ProgramData\RUNDLL32.EXE-1336-F.txt
2014-07-13 02:55 - 2014-07-13 02:56 - 00000750 _____ () C:\ProgramData\RUNDLL32.EXE-5456-F.txt
2014-07-13 02:54 - 2014-07-13 02:55 - 00200898 _____ () C:\ProgramData\RUNDLL32.EXE-29108-F.txt
2014-07-13 02:51 - 2014-07-14 18:11 - 00000000 ____D () C:\ProgramData\3993070466066190C84F7CE36E4F50BF
2014-07-13 00:04 - 2014-07-13 00:04 - 00000747 _____ () C:\ProgramData\RUNDLL32.EXE-6288-F.txt
2014-07-13 00:03 - 2014-07-13 00:03 - 00084252 _____ () C:\ProgramData\RUNDLL32.EXE-11516-F.txt
2014-07-13 00:00 - 2014-07-14 18:10 - 00000000 ____D () C:\ProgramData\11FE8BC73D67763CEB38E455F32A7237
2014-07-12 23:43 - 2014-07-12 23:47 - 00076340 _____ () C:\ProgramData\RUNDLL32.EXE-5016-F.txt
2014-07-12 23:41 - 2014-07-14 18:10 - 00000000 ____D () C:\ProgramData\D2D1DB85117F11C93C86869E62616AA6
2014-06-28 18:07 - 2014-06-28 18:07 - 00001189 _____ () C:\Users\mochenmo1\Desktop\onlineTV 10.lnk
2014-06-28 18:07 - 2014-06-28 18:07 - 00000000 ____D () C:\Users\mochenmo1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\concept design
2014-06-28 18:07 - 2014-06-28 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\concept design
2014-06-27 23:53 - 2014-07-14 18:10 - 00000000 ____D () C:\ProgramData\ADF188ABA2C6F0A359D2537EFB9BC3CD

==================== One Month Modified Files and Folders =======

2014-07-20 01:57 - 2014-05-17 14:48 - 00000000 ____D () C:\FRST
2014-07-20 01:54 - 2014-07-20 01:40 - 00000000 ____D () C:\Users\mochenmo1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
2014-07-20 01:54 - 2014-07-20 01:40 - 00000000 ____D () C:\Program Files (x86)\SmartTweak
2014-07-20 01:51 - 2014-05-18 14:54 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-20 01:51 - 2012-04-07 22:00 - 00000000 ____D () C:\Users\mochenmo1\AppData\Local\CrashDumps
2014-07-20 01:40 - 2014-07-20 01:40 - 00000000 ____D () C:\ProgramData\RegClean
2014-07-20 01:39 - 2009-07-14 06:45 - 00016976 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-20 01:39 - 2009-07-14 06:45 - 00016976 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-20 01:36 - 2011-10-31 06:19 - 00654166 _____ () C:\Windows\system32\perfh007.dat
2014-07-20 01:36 - 2011-10-31 06:19 - 00130006 _____ () C:\Windows\system32\perfc007.dat
2014-07-20 01:36 - 2009-07-14 07:13 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-20 01:32 - 2014-06-03 15:19 - 00001512 _____ () C:\Windows\setupact.log
2014-07-20 01:32 - 2013-09-23 23:58 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2435969490-785047729-4073554876-1000
2014-07-20 01:32 - 2013-09-23 23:58 - 00003252 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2435969490-785047729-4073554876-1000
2014-07-20 01:32 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-20 01:31 - 2014-05-22 19:15 - 00254747 _____ () C:\Windows\WindowsUpdate.log
2014-07-20 01:16 - 2014-07-19 13:46 - 00000000 ____D () C:\Program Files (x86)\Age of Wonders III
2014-07-20 01:06 - 2012-08-28 12:34 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-19 13:51 - 2012-04-25 11:56 - 00000000 ____D () C:\Users\mochenmo1\AppData\Local\QuickPar
2014-07-19 13:48 - 2014-07-19 13:48 - 00000000 ____D () C:\Users\mochenmo1\Documents\My Games
2014-07-19 13:48 - 2014-07-19 13:48 - 00000000 ____D () C:\ProgramData\Steam
2014-07-19 13:45 - 2012-04-07 21:39 - 00000000 ____D () C:\Users\mochenmo1\AppData\Roaming\DAEMON Tools Lite
2014-07-19 00:22 - 2014-05-16 00:35 - 00000000 ____D () C:\Users\mochenmo1\AppData\Roaming\vlc
2014-07-17 00:39 - 2014-07-14 18:11 - 00005818 _____ () C:\Windows\PFRO.log
2014-07-17 00:15 - 2013-08-30 04:17 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2435969490-785047729-4073554876-1000
2014-07-17 00:15 - 2013-08-08 19:21 - 00003230 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2435969490-785047729-4073554876-1000
2014-07-16 23:01 - 2014-07-16 23:00 - 00000000 ____D () C:\AdwCleaner
2014-07-16 23:01 - 2014-07-16 14:01 - 00000000 ____D () C:\Users\mochenmo1\AppData\Roaming\IObit
2014-07-16 23:01 - 2014-07-16 14:01 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-07-16 23:01 - 2014-05-18 14:49 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-16 22:57 - 2014-07-16 22:46 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-07-16 22:47 - 2014-07-16 22:47 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-07-16 22:47 - 2014-07-16 22:47 - 00000000 _____ () C:\autoexec.bat
2014-07-16 22:36 - 2014-07-16 14:01 - 00000000 ____D () C:\ProgramData\IObit
2014-07-16 22:36 - 2013-08-09 23:23 - 00000000 ____D () C:\Program Files (x86)\TC UP
2014-07-16 22:36 - 2013-03-30 12:20 - 00000000 ____D () C:\Program Files (x86)\Guild Wars 2
2014-07-16 22:36 - 2012-03-24 10:34 - 00000000 ____D () C:\Users\mochenmo1
2014-07-16 22:36 - 2011-10-30 21:43 - 00000000 ____D () C:\ProgramData\Atheros
2014-07-16 22:36 - 2011-08-12 10:02 - 00000000 ____D () C:\ProgramData\BackupManager
2014-07-16 22:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-16 22:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security
2014-07-16 22:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-16 22:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-07-16 22:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-07-16 22:35 - 2012-06-08 23:57 - 00000000 ____D () C:\ProgramData\Real
2014-07-16 22:35 - 2012-04-25 01:03 - 00000000 ____D () C:\Users\Public\CyberLink
2014-07-16 22:35 - 2011-10-30 21:48 - 00000000 ____D () C:\ProgramData\CyberLink
2014-07-16 22:29 - 2014-07-16 20:56 - 00000000 ____D () C:\Users\mochenmo1\AppData\Local\Cyberlink SoftDMA
2014-07-16 22:29 - 2014-07-16 20:53 - 00000000 ____D () C:\ProgramData\install_clap
2014-07-16 22:21 - 2014-07-16 22:21 - 00000335 _____ () C:\ProgramData\RUNDLL32.EXE-9472-F.txt
2014-07-16 22:19 - 2014-07-16 22:19 - 00000000 ____D () C:\ProgramData\AD155EE6C2DDFA7EF0557210AE99E013
2014-07-16 20:56 - 2012-04-25 01:02 - 00000000 ____D () C:\Users\mochenmo1\Documents\CyberLink
2014-07-16 20:56 - 2012-03-24 10:34 - 00000000 ____D () C:\Users\mochenmo1\AppData\Roaming\CyberLink
2014-07-16 20:54 - 2014-07-16 20:54 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2014-07-16 20:54 - 2014-07-16 20:54 - 00000000 ____D () C:\Users\mochenmo1\AppData\Local\MediaServer
2014-07-16 20:54 - 2014-07-16 20:54 - 00000000 ____D () C:\ProgramData\PDVD
2014-07-16 20:53 - 2014-07-16 20:53 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-07-16 14:01 - 2014-07-16 14:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-07-14 19:10 - 2012-03-24 10:34 - 00060360 _____ () C:\Users\mochenmo1\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-14 19:10 - 2009-07-14 06:45 - 00283136 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-14 19:08 - 2014-05-22 19:12 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-07-14 19:04 - 2009-07-14 04:34 - 00000471 _____ () C:\Windows\win.ini
2014-07-14 18:35 - 2014-07-14 18:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-MOCHENMO1-PC--(64-bit).dat
2014-07-14 18:11 - 2014-07-13 02:51 - 00000000 ____D () C:\ProgramData\3993070466066190C84F7CE36E4F50BF
2014-07-14 18:11 - 2011-08-12 09:54 - 00000000 ____D () C:\Windows\pl
2014-07-14 18:10 - 2014-07-13 00:00 - 00000000 ____D () C:\ProgramData\11FE8BC73D67763CEB38E455F32A7237
2014-07-14 18:10 - 2014-07-12 23:41 - 00000000 ____D () C:\ProgramData\D2D1DB85117F11C93C86869E62616AA6
2014-07-14 18:10 - 2014-06-27 23:53 - 00000000 ____D () C:\ProgramData\ADF188ABA2C6F0A359D2537EFB9BC3CD
2014-07-14 18:10 - 2014-06-13 02:19 - 00000000 ____D () C:\ProgramData\98791E7C1D290C78D423B5EFE3E5100B
2014-07-14 18:10 - 2014-06-09 23:40 - 00000000 ____D () C:\ProgramData\2AF3932279D69347B515F2B917549767
2014-07-14 18:07 - 2012-08-28 12:34 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-14 18:07 - 2012-05-18 21:01 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-14 18:07 - 2011-08-12 10:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-14 17:57 - 2014-07-14 17:56 - 00317595 _____ () C:\ProgramData\RUNDLL32.EXE-1052-F.txt
2014-07-14 17:53 - 2014-07-14 17:52 - 00317504 _____ () C:\ProgramData\RUNDLL32.EXE-1336-F.txt
2014-07-13 02:57 - 2012-05-18 21:01 - 00000000 ____D () C:\Windows\system32\Macromed
2014-07-13 02:57 - 2011-08-12 10:01 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-07-13 02:57 - 2011-08-12 09:59 - 00000000 ____D () C:\ProgramData\oem
2014-07-13 02:56 - 2014-07-13 02:55 - 00000750 _____ () C:\ProgramData\RUNDLL32.EXE-5456-F.txt
2014-07-13 02:55 - 2014-07-13 02:54 - 00200898 _____ () C:\ProgramData\RUNDLL32.EXE-29108-F.txt
2014-07-13 00:04 - 2014-07-13 00:04 - 00000747 _____ () C:\ProgramData\RUNDLL32.EXE-6288-F.txt
2014-07-13 00:03 - 2014-07-13 00:03 - 00084252 _____ () C:\ProgramData\RUNDLL32.EXE-11516-F.txt
2014-07-12 23:47 - 2014-07-12 23:43 - 00076340 _____ () C:\ProgramData\RUNDLL32.EXE-5016-F.txt
2014-06-28 18:07 - 2014-06-28 18:07 - 00001189 _____ () C:\Users\mochenmo1\Desktop\onlineTV 10.lnk
2014-06-28 18:07 - 2014-06-28 18:07 - 00000000 ____D () C:\Users\mochenmo1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\concept design
2014-06-28 18:07 - 2014-06-28 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\concept design
2014-06-28 18:07 - 2012-08-07 22:09 - 00023040 _____ () C:\Users\mochenmo1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Files to move or delete:
====================
C:\Users\mochenmo1\createfileassoc.exe
C:\Users\mochenmo1\error_report.exe
C:\Users\mochenmo1\libeay32.dll
C:\Users\mochenmo1\msvcp110.dll
C:\Users\mochenmo1\msvcr110.dll
C:\Users\mochenmo1\OverwolfTeamSpeakInstaller.exe
C:\Users\mochenmo1\package_inst.exe
C:\Users\mochenmo1\Qt5Core.dll
C:\Users\mochenmo1\Qt5Gui.dll
C:\Users\mochenmo1\Qt5Network.dll
C:\Users\mochenmo1\Qt5Sql.dll
C:\Users\mochenmo1\Qt5Widgets.dll
C:\Users\mochenmo1\quazip.dll
C:\Users\mochenmo1\ssleay32.dll
C:\Users\mochenmo1\ts3client_win64.exe


Some content of TEMP:
====================
C:\Users\mochenmo1\AppData\Local\Temp\avgnt.exe
C:\Users\mochenmo1\AppData\Local\Temp\FixMyRegistry.exe
C:\Users\mochenmo1\AppData\Local\Temp\Quarantine.exe
C:\Users\mochenmo1\AppData\Local\Temp\SHSetup.exe
C:\Users\mochenmo1\AppData\Local\Temp\SpeedUpMyComputer.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-09 06:20

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-07-2014
Ran by mochenmo1 at 2014-07-20 02:03:36
Running from D:\
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.0.1904 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3008 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3500 - Acer Incorporated)
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
ATI Catalyst Install Manager (HKLM\...\{1D72BF42-E249-4EB7-CC4C-8CC09DAB180B}) (Version: 3.0.812.0 - ATI Technologies, Inc.)
AutoUpdate (HKLM-x32\...\{18D10072035C4515918F7E37EAFAACFC}) (Version: 1.0 - )
Avira Savings Advisor (HKLM-x32\...\{A18A516C-AA41-46A9-92DB-60208917E442}) (Version: 1.5.14 - Avira) <==== ATTENTION
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.96 - Atheros Communications)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0208.2202.39516 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0208.2202.39516 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help English (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help French (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help German (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0208.2201.39516 - ATI) Hidden
ccc-core-static (x32 Version: 2011.0208.2202.39516 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2011.0208.2202.39516 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
Combined Community Codec Pack 2008-09-21 16:18 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2008.09.21.0 - CCCP Project)
concept/design onlineTV 10 (HKLM-x32\...\{DCAB9AAC-1D1C-4B94-99B7-AA7D2617BD64}_is1) (Version: 10.0.0.65 - concept/design GmbH)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
Driver Genius Professional Edition (HKLM-x32\...\Driver Genius Professional Edition_is1) (Version: 11.0 - Driver-Soft Inc.)
erLT (x32 Version: 1.20.0137 - Logitech, Inc.) Hidden
ETDWare PS/2-X64 8.0.6.0_WHQL (HKLM\...\Elantech) (Version: 8.0.6.0 - ELAN Microelectronic Corp.)
FixMyRegistry (HKLM-x32\...\FixMyRegistry) (Version: 38.1 - SmartTweak Software) <==== ATTENTION
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
GrabIt 1.7.1 Beta (build 960) (HKLM-x32\...\GrabIt_is1) (Version:  - Ilan Shemes)
GSpot Codec Information Appliance (HKLM-x32\...\GSpot) (Version:  - )
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Acer Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6438 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version:  - Roccat GmbH)
Screen Recording Suite V3.0.3 (HKLM-x32\...\{EB9F3F92-4857-4121-AA6F-1C424AC6C266}_is1) (Version: 3.0.3 - Apowersoft)
Skype™ 6.3 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.3.107 - Skype Technologies S.A.)
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Total Commander Ultima Prime 5.7.0.0 (HKLM-x32\...\TC UP) (Version: 5.7.0.0 - Robert £ajka & Pawe³ Porwisz)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Win7codecs (HKLM-x32\...\{8C0CAA7A-3272-4991-A808-2C7559DE3409}) (Version: 2.0.5 - Shark007)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

15-07-2014 11:28:11 neueneuneueneue
15-07-2014 18:09:31 Uniblue DriverScanner installation
15-07-2014 18:12:48 Uniblue DriverScanner installation
16-07-2014 12:04:08 Driver Booster : Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
16-07-2014 18:53:35 Installiert PowerDVD
16-07-2014 18:57:14 Installiert PowerDVD
16-07-2014 20:28:47 Wiederherstellungsvorgang
16-07-2014 20:46:56 Installed SpyHunter
16-07-2014 20:56:55 Removed SpyHunter

==================== Hosts content: ==========================

2009-07-14 04:34 - 2014-07-14 19:04 - 00000855 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CCEA241-48DC-4AEC-BDA5-3FA337D8D6B1} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe
Task: {1F20CFF8-7D68-4EA8-95AF-DA723973979E} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2435969490-785047729-4073554876-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {26BFF2DE-D596-4713-91A1-3B2A5900205C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {393D3036-F5F6-40AC-8213-8B4F350C59BF} - \PC Health Advisor No Task File <==== ATTENTION
Task: {4F145B4A-49B7-4B42-A576-7D5BE40F8466} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2435969490-785047729-4073554876-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {66C89A4C-A0A4-4CC2-8A70-5A813E7FC927} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {6827722C-C2F5-4D4F-ADC7-1C2606BEC1CC} - \ParetoLogic Registration3 No Task File <==== ATTENTION
Task: {78EEDD94-A836-4B6F-9E79-25A982493758} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2435969490-785047729-4073554876-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {7CE75080-03F0-4644-AA65-17E832F2F0AF} - \PC Health Advisor Defrag No Task File <==== ATTENTION
Task: {95E4D4B6-08C5-4515-9FF8-6FE6DB2A9111} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: {9F88A27D-6C2B-48DC-B387-D8552F1954AE} - \ParetoLogic Update Version3 No Task File <==== ATTENTION
Task: {A6CEAE67-411A-44A8-8E73-3531902CED88} - System32\Tasks\{1A0998B0-572D-478E-9376-CC84A3C81FEC} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=4.1.0.136.217&amp;LastError=12007
Task: {AF0EFB45-E738-4231-9805-A67C5A4CCFEF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-14] (Adobe Systems Incorporated)
Task: {CDE0363C-D4FB-4AD8-8D10-4C2172670484} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2435969490-785047729-4073554876-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {D7033B0E-4591-4062-B2F1-20E346D0EF67} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-05-08] (Adobe Systems Incorporated)
Task: {E2D8B406-A7B6-4FBF-8A11-9E5045A9B080} - System32\Tasks\aviraSWU => Cscript.exe "C:\Program Files (x86)\avira\Internet Explorer\swu.vbs"
Task: {ECF63D75-D057-4A09-9CF4-FCBC6693E075} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2435969490-785047729-4073554876-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {F6B81DA9-2504-4EFA-B024-721615BA5344} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2435969490-785047729-4073554876-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {F799C527-83EF-473E-A741-CF38A57FE92E} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2435969490-785047729-4073554876-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-08-14 15:19 - 2013-08-14 15:19 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2011-02-08 23:01 - 2011-02-08 23:01 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2010-12-02 11:09 - 2010-12-02 11:09 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2014-05-26 12:50 - 2014-05-26 12:50 - 01886840 _____ () C:\Program Files (x86)\SmartTweak\FixMyRegistry\FixMyRegistry.exe
2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2014-06-03 15:27 - 2012-06-17 11:20 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll
2012-05-02 21:50 - 2012-05-02 21:50 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\717bc129b29a2f6299fe221ef19b91ba\IsdiInterop.ni.dll
2011-08-12 09:24 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-12-11 16:49 - 2013-12-11 16:49 - 00184400 _____ () C:\Program Files (x86)\avira\Internet Explorer\avira32.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/20/2014 01:51:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1204
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (07/20/2014 01:51:05 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1504
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (07/19/2014 07:59:15 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.

Error: (07/18/2014 09:12:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Gw2.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2cd4

Startzeit: 01cfa2bc152d0400

Endzeit: 17

Anwendungspfad: C:\Program Files (x86)\Guild Wars 2\Gw2.exe

Berichts-ID: 72ed4d17-0eaf-11e4-a63a-b870f4f53fb4

Error: (07/18/2014 07:13:09 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.

Error: (07/18/2014 06:16:07 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iexplore.exe, Version 9.0.8112.16421 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 14f8

Startzeit: 01cfa286b640b7e9

Endzeit: 13

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Berichts-ID: d1ed3fc5-0e96-11e4-a63a-b870f4f53fb4

Error: (07/18/2014 06:11:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iexplore.exe, Version 9.0.8112.16421 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1a4c

Startzeit: 01cfa2a1d7bdfd62

Endzeit: 48

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (07/18/2014 05:04:15 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iexplore.exe, Version 9.0.8112.16421 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2208

Startzeit: 01cfa291f0b8cc63

Endzeit: 23

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (07/18/2014 04:32:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: recordingmanager.exe, Version: 1.3.3.66, Zeitstempel: 0x520c028a
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce6c3
ID des fehlerhaften Prozesses: 0x448
Startzeit der fehlerhaften Anwendung: 0xrecordingmanager.exe0
Pfad der fehlerhaften Anwendung: recordingmanager.exe1
Pfad des fehlerhaften Moduls: recordingmanager.exe2
Berichtskennung: recordingmanager.exe3

Error: (07/17/2014 07:24:48 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.


System errors:
=============
Error: (07/20/2014 01:33:03 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%2

Error: (07/19/2014 01:43:13 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%2

Error: (07/17/2014 06:02:34 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%2

Error: (07/17/2014 00:40:41 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%2


Microsoft Office Sessions:
=========================
Error: (07/20/2014 01:51:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd120401cfa3ac5497d3daC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll9252a6fc-0f9f-11e4-ada2-b870f4f53fb4

Error: (07/20/2014 01:51:05 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd150401cfa3ac4d1ba01dC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \MSVCR100.dll8b927ff5-0f9f-11e4-ada2-b870f4f53fb4

Error: (07/19/2014 07:59:15 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (07/18/2014 09:12:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Gw2.exe1.0.0.12cd401cfa2bc152d040017C:\Program Files (x86)\Guild Wars 2\Gw2.exe72ed4d17-0eaf-11e4-a63a-b870f4f53fb4

Error: (07/18/2014 07:13:09 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (07/18/2014 06:16:07 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iexplore.exe9.0.8112.1642114f801cfa286b640b7e913C:\Program Files (x86)\Internet Explorer\iexplore.exed1ed3fc5-0e96-11e4-a63a-b870f4f53fb4

Error: (07/18/2014 06:11:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iexplore.exe9.0.8112.164211a4c01cfa2a1d7bdfd6248C:\Program Files (x86)\Internet Explorer\iexplore.exe

Error: (07/18/2014 05:04:15 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iexplore.exe9.0.8112.16421220801cfa291f0b8cc6323C:\Program Files (x86)\Internet Explorer\iexplore.exe

Error: (07/18/2014 04:32:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: recordingmanager.exe1.3.3.66520c028antdll.dll6.1.7601.177254ec49b8fc0000374000ce6c344801cfa286b652e09dC:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exeC:\Windows\SysWOW64\ntdll.dll63dcf045-0e88-11e4-a63a-b870f4f53fb4

Error: (07/17/2014 07:24:48 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.


CodeIntegrity Errors:
===================================
  Date: 2014-06-22 13:33:43.254
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\TC UP\PLUGINS\Media\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-22 13:33:43.254
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\TC UP\PLUGINS\Media\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-22 13:33:43.238
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\TC UP\PLUGINS\Media\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-22 13:33:43.238
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\TC UP\PLUGINS\Media\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-14 00:17:12.225
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\a527eb6.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-14 00:17:12.210
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\a527eb6.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-08-24 17:59:55.606
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\TC UP\PLUGINS\Media\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-08-24 17:59:55.575
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\TC UP\PLUGINS\Media\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-08-24 17:59:55.559
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\TC UP\PLUGINS\Media\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-08-24 17:59:55.543
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\TC UP\PLUGINS\Media\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 19%
Total physical RAM: 8173.86 MB
Available physical RAM: 6575.75 MB
Total Pagefile: 16345.91 MB
Available Pagefile: 14495.61 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:95.69 GB) (Free:32.39 GB) NTFS
Drive d: (DATA) (Fixed) (Total:698.63 GB) (Free:435.08 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: DC6D59A0)
Partition 1: (Not Active) - (Size=16 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=96 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: DC6D59D6)
Partition 1: (Not Active) - (Size=699 GB) - (Type=07 NTFS)

==================== End Of Log ============================