Hallo!
Habe mir den Youfile Downloder eingefangen. Könnt Ihr mir bitte beim Entfernen helfen? Habe mir bereits die Logfiles auslesen lassen und mal durchgelesen. Chinesisch rückwärts ist dagegen einfach für mich.

Hier schonmal die Logs - ich hoffe, ich habe es richtig gemacht

FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01
Ran by Simon (administrator) on SIMON-PC on 11-08-2014 21:58:26
Running from C:\Users\Simon\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
() C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\QuickTime\qttask.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-10] (Egis Technology Inc.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-10-13] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352 2009-10-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-13] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [629280 2009-08-18] ()
HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [128296 2009-11-16] (CyberLink Corp.)
HKLM-x32\...\Run: [PlayMovie] => C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-11-12] (Acer Corp.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\qttask.exe [282624 2006-09-01] (Apple Computer, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [BlockAndSurf] => C:\Program Files (x86)\ver1BlockAndSurf\BlockAndSurf.exe
HKU\S-1-5-21-2701147688-1485282812-3783366192-1000\...\Run: [] => [X]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: No Name -> {120A8821-2BEE-4C29-BCDA-62C577781992} ->  No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Amazon.de
FF SelectedSearchEngine: Amazon.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Computer, Inc.)
FF SearchPlugin: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\searchplugins\google-maps.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: cosstminn - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\7x_yu3@ohadgkp.net [2014-08-03]
FF Extension: DoNotTrackMe: Online Privacy Protection - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\donottrackplus@abine.com [2014-07-12]
FF Extension: CouponsHelper - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\{239cc760-75a9-4276-b1fc-c0ceb963f373}.xpi [2013-12-14]
FF Extension: Adblock Plus - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-14]
FF Extension: Recorder Toolbar - C:\Program Files (x86)\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2} [2014-08-03]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-29]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-07-29]
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (YouTube) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-09]
CHR Extension: (Google-Suche) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-09]
CHR Extension: (cosstminn) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm [2014-08-02]
CHR Extension: (Google Mail) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-09]
CHR Extension: (cosstminn) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm\2.0 [2014-08-02]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-17] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-17] (pdfforge GmbH)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [247152 2009-02-16] ()
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
S3 OlyUsbCam; C:\Windows\System32\DRIVERS\OlyUsbCam.sys [24512 2007-01-12] (OLYMPUS IMAGING CORP.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-11-12] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-11 21:58 - 2014-08-11 22:00 - 00017265 _____ () C:\Users\Simon\Downloads\FRST.txt
2014-08-11 21:58 - 2014-08-11 21:58 - 00000000 ____D () C:\FRST
2014-08-11 21:57 - 2014-08-11 21:58 - 02099712 _____ (Farbar) C:\Users\Simon\Downloads\FRST64.exe
2014-08-11 21:45 - 2014-08-11 21:45 - 01101648 _____ () C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer(1).exe
2014-08-11 21:36 - 2014-08-11 21:36 - 00054156 ____H () C:\Windows\QTFont.qfn
2014-08-11 21:36 - 2014-08-11 21:36 - 00001409 _____ () C:\Windows\QTFont.for
2014-08-11 20:22 - 2014-08-11 20:22 - 00027909 _____ () C:\Users\Simon\.recently-used.xbel
2014-08-06 21:34 - 2014-08-06 21:34 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\WavePad - CHIP-Installer.exe
2014-08-06 21:34 - 2014-08-06 21:34 - 00001276 _____ () C:\Users\Public\Desktop\NCH Suite.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001126 _____ () C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2014-08-06 21:30 - 2014-08-06 21:30 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\mp3DirectCut
2014-08-06 21:28 - 2014-08-06 21:28 - 00001063 _____ () C:\Users\Simon\Desktop\mp3DirectCut.lnk
2014-08-06 21:27 - 2014-08-06 21:28 - 00308709 _____ () C:\Users\Simon\Downloads\mpdc_16957.exe
2014-08-03 18:25 - 2014-08-03 23:59 - 00018371 _____ () C:\Users\Simon\Desktop\Brief an Bob.odt
2014-08-03 13:00 - 2014-08-03 13:14 - 00000000 ____D () C:\Users\Simon\Desktop\100EOS7D
2014-08-03 11:51 - 2014-08-03 11:51 - 00000000 ____D () C:\Users\Simon\Tracing
2014-08-03 11:50 - 2014-08-03 11:50 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-03 11:50 - 2014-08-03 11:50 - 00000000 ____D () C:\Windows\de
2014-08-03 00:18 - 2014-08-03 00:18 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2014-08-03 00:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-03 00:17 - 2014-08-11 21:47 - 00000000 ____D () C:\AdwCleaner
2014-08-03 00:17 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-08-03 00:17 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-08-03 00:16 - 2014-08-03 00:16 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer.exe
2014-08-03 00:13 - 2014-08-03 00:13 - 00000000 ____D () C:\Users\Simon\AppData\Local\MedienTeam66
2014-08-03 00:11 - 2014-08-03 00:11 - 00000000 ____D () C:\Users\Simon\Documents\YouTube Recordings
2014-08-03 00:10 - 2014-08-08 00:10 - 00000314 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-08-03 00:10 - 2014-08-03 00:10 - 10061576 _____ (MedienTeam66 Verlags GmbH ) C:\Users\Simon\Downloads\MP3_Recorder_for_YouTube.exe
2014-08-03 00:10 - 2014-08-03 00:10 - 00002908 _____ () C:\Windows\System32\Tasks\MT66 Software Update
2014-08-03 00:10 - 2014-08-03 00:10 - 00000000 ____D () C:\Program Files (x86)\MedienTeam66
2014-08-03 00:03 - 2014-08-03 00:03 - 00003150 _____ () C:\Windows\System32\Tasks\{F14520F0-57E8-473B-B7CA-55041ED72F79}
2014-08-03 00:01 - 2014-08-03 00:01 - 00000114 _____ () C:\Windows\wininit.ini
2014-08-02 23:57 - 2014-08-03 00:02 - 00000000 ____D () C:\ProgramData\8aa681781fbef9a8
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Packages
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator
2014-08-02 23:56 - 2014-08-03 00:01 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-08-02 23:56 - 2014-08-02 23:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-08-02 23:55 - 2014-08-02 23:55 - 00003178 _____ () C:\Windows\System32\Tasks\YourFile DownloaderInstaller Starter
2014-08-02 23:54 - 2014-08-02 23:54 - 06985024 _____ (hxxp://yourfiledownloader.net) C:\Users\Simon\Downloads\StarWars_-_Star_Wars_Main_Theme_downloader.exe
2014-08-02 18:20 - 2014-08-02 21:16 - 00000000 ____D () C:\Users\Simon\Desktop\2014-08-02 RC Auto
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ___HD () C:\Users\Simon\Documents\ShadowEditFiles
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ____D () C:\Users\Simon\Documents\CyberLink
2014-08-01 20:25 - 2014-08-01 20:25 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\CyberLink
2014-08-01 19:48 - 2014-08-06 21:55 - 00000000 ____D () C:\Users\Simon\Desktop\Videomaterial C u A
2014-07-29 21:51 - 2014-07-29 21:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-26 21:57 - 2014-08-05 20:11 - 00000000 ____D () C:\Users\Simon\Desktop\LaLala Bob
2014-07-26 02:38 - 2014-07-27 01:00 - 00000000 ____D () C:\Users\Simon\Desktop\FCKW
2014-07-24 18:40 - 2014-07-24 19:15 - 00000000 ____D () C:\Users\Simon\Desktop\Bob
2014-07-15 18:49 - 2014-07-15 20:06 - 00000000 ____D () C:\Users\Simon\Desktop\2014-07-14 Rhein
2014-07-12 03:19 - 2014-07-12 03:19 - 00291704 _____ () C:\Windows\Minidump\071214-23228-01.dmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-11 22:00 - 2014-08-11 21:58 - 00017265 _____ () C:\Users\Simon\Downloads\FRST.txt
2014-08-11 22:00 - 2012-05-18 18:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-11 21:58 - 2014-08-11 21:58 - 00000000 ____D () C:\FRST
2014-08-11 21:58 - 2014-08-11 21:57 - 02099712 _____ (Farbar) C:\Users\Simon\Downloads\FRST64.exe
2014-08-11 21:57 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-11 21:57 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-11 21:53 - 2010-08-27 08:28 - 01122823 _____ () C:\Windows\WindowsUpdate.log
2014-08-11 21:48 - 2010-09-19 19:27 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-11 21:48 - 2010-08-27 08:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-11 21:48 - 2009-11-19 00:09 - 01025620 _____ () C:\Windows\PFRO.log
2014-08-11 21:48 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-11 21:48 - 2009-07-14 06:51 - 00213466 _____ () C:\Windows\setupact.log
2014-08-11 21:47 - 2014-08-03 00:17 - 00000000 ____D () C:\AdwCleaner
2014-08-11 21:45 - 2014-08-11 21:45 - 01101648 _____ () C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer(1).exe
2014-08-11 21:36 - 2014-08-11 21:36 - 00054156 ____H () C:\Windows\QTFont.qfn
2014-08-11 21:36 - 2014-08-11 21:36 - 00001409 _____ () C:\Windows\QTFont.for
2014-08-11 20:53 - 2010-09-12 14:19 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{6D5A817C-B063-4DF2-95A2-90BC099FE999}
2014-08-11 20:48 - 2010-09-19 19:27 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-11 20:22 - 2014-08-11 20:22 - 00027909 _____ () C:\Users\Simon\.recently-used.xbel
2014-08-11 20:22 - 2010-09-12 19:10 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\gtk-2.0
2014-08-11 20:22 - 2010-09-09 20:59 - 00000000 ____D () C:\Users\Simon
2014-08-11 20:21 - 2010-09-12 14:30 - 00000000 ____D () C:\Users\Simon\.gimp-2.6
2014-08-11 19:51 - 2010-09-11 19:20 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\ICQ
2014-08-08 00:10 - 2014-08-03 00:10 - 00000314 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-08-06 21:55 - 2014-08-01 19:48 - 00000000 ____D () C:\Users\Simon\Desktop\Videomaterial C u A
2014-08-06 21:34 - 2014-08-06 21:34 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\WavePad - CHIP-Installer.exe
2014-08-06 21:34 - 2014-08-06 21:34 - 00001276 _____ () C:\Users\Public\Desktop\NCH Suite.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001126 _____ () C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2014-08-06 21:30 - 2014-08-06 21:30 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\mp3DirectCut
2014-08-06 21:28 - 2014-08-06 21:28 - 00001063 _____ () C:\Users\Simon\Desktop\mp3DirectCut.lnk
2014-08-06 21:28 - 2014-08-06 21:27 - 00308709 _____ () C:\Users\Simon\Downloads\mpdc_16957.exe
2014-08-05 20:11 - 2014-07-26 21:57 - 00000000 ____D () C:\Users\Simon\Desktop\LaLala Bob
2014-08-03 23:59 - 2014-08-03 18:25 - 00018371 _____ () C:\Users\Simon\Desktop\Brief an Bob.odt
2014-08-03 23:25 - 2010-11-24 21:08 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\Skype
2014-08-03 13:14 - 2014-08-03 13:00 - 00000000 ____D () C:\Users\Simon\Desktop\100EOS7D
2014-08-03 12:08 - 2010-08-27 18:19 - 00699432 _____ () C:\Windows\system32\perfh007.dat
2014-08-03 12:08 - 2010-08-27 18:19 - 00149572 _____ () C:\Windows\system32\perfc007.dat
2014-08-03 12:08 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-03 11:55 - 2013-07-04 23:25 - 00000000 ____D () C:\Users\Simon\AppData\Local\Windows Live
2014-08-03 11:51 - 2014-08-03 11:51 - 00000000 ____D () C:\Users\Simon\Tracing
2014-08-03 11:50 - 2014-08-03 11:50 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-03 11:50 - 2014-08-03 11:50 - 00000000 ____D () C:\Windows\de
2014-08-03 11:50 - 2013-07-04 23:32 - 00001494 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-08-03 11:50 - 2013-07-04 23:32 - 00001378 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-08-03 11:50 - 2010-08-27 08:51 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-03 11:49 - 2013-07-04 23:32 - 00002538 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-08-03 11:49 - 2013-07-04 23:31 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-03 11:49 - 2010-08-27 08:51 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-08-03 11:47 - 2010-08-27 08:52 - 00133212 _____ () C:\Windows\DirectX.log
2014-08-03 00:18 - 2014-08-03 00:18 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2014-08-03 00:18 - 2011-04-30 13:49 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-03 00:18 - 2011-04-30 13:49 - 00001057 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-03 00:18 - 2010-09-11 19:20 - 00000000 ____D () C:\ProgramData\ICQ
2014-08-03 00:18 - 2010-09-09 21:00 - 00001041 _____ () C:\Users\Simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-03 00:16 - 2014-08-03 00:16 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer.exe
2014-08-03 00:13 - 2014-08-03 00:13 - 00000000 ____D () C:\Users\Simon\AppData\Local\MedienTeam66
2014-08-03 00:11 - 2014-08-03 00:11 - 00000000 ____D () C:\Users\Simon\Documents\YouTube Recordings
2014-08-03 00:10 - 2014-08-03 00:10 - 10061576 _____ (MedienTeam66 Verlags GmbH ) C:\Users\Simon\Downloads\MP3_Recorder_for_YouTube.exe
2014-08-03 00:10 - 2014-08-03 00:10 - 00002908 _____ () C:\Windows\System32\Tasks\MT66 Software Update
2014-08-03 00:10 - 2014-08-03 00:10 - 00000000 ____D () C:\Program Files (x86)\MedienTeam66
2014-08-03 00:03 - 2014-08-03 00:03 - 00003150 _____ () C:\Windows\System32\Tasks\{F14520F0-57E8-473B-B7CA-55041ED72F79}
2014-08-03 00:02 - 2014-08-02 23:57 - 00000000 ____D () C:\ProgramData\8aa681781fbef9a8
2014-08-03 00:01 - 2014-08-03 00:01 - 00000114 _____ () C:\Windows\wininit.ini
2014-08-03 00:01 - 2014-08-02 23:56 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Packages
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator
2014-08-02 23:57 - 2010-09-19 19:26 - 00000000 ____D () C:\Users\Simon\AppData\Local\Google
2014-08-02 23:57 - 2009-11-18 23:56 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-02 23:56 - 2014-08-02 23:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-08-02 23:56 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-08-02 23:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-08-02 23:55 - 2014-08-02 23:55 - 00003178 _____ () C:\Windows\System32\Tasks\YourFile DownloaderInstaller Starter
2014-08-02 23:54 - 2014-08-02 23:54 - 06985024 _____ (hxxp://yourfiledownloader.net) C:\Users\Simon\Downloads\StarWars_-_Star_Wars_Main_Theme_downloader.exe
2014-08-02 21:20 - 2010-11-27 00:10 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\XnView
2014-08-02 21:16 - 2014-08-02 18:20 - 00000000 ____D () C:\Users\Simon\Desktop\2014-08-02 RC Auto
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ___HD () C:\Users\Simon\Documents\ShadowEditFiles
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ____D () C:\Users\Simon\Documents\CyberLink
2014-08-01 20:26 - 2010-08-27 08:45 - 00000000 ____D () C:\ProgramData\CyberLink
2014-08-01 20:25 - 2014-08-01 20:25 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\CyberLink
2014-07-31 17:31 - 2012-04-27 19:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-29 21:51 - 2014-07-29 21:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-27 01:00 - 2014-07-26 02:38 - 00000000 ____D () C:\Users\Simon\Desktop\FCKW
2014-07-26 11:54 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-24 23:22 - 2013-03-14 00:32 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 23:22 - 2013-03-14 00:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 20:20 - 2013-03-14 00:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 19:15 - 2014-07-24 18:40 - 00000000 ____D () C:\Users\Simon\Desktop\Bob
2014-07-22 17:52 - 2014-05-06 23:20 - 00000000 ____D () C:\Users\Simon\Documents\Bewerbungen
2014-07-20 13:09 - 2013-12-10 22:15 - 00245740 _____ () C:\Users\Simon\Desktop\FB Titel.xcf
2014-07-18 18:23 - 2010-09-09 20:59 - 00000000 ___RD () C:\Users\Simon\Eigene Bilder
2014-07-15 20:06 - 2014-07-15 18:49 - 00000000 ____D () C:\Users\Simon\Desktop\2014-07-14 Rhein
2014-07-12 03:19 - 2014-07-12 03:19 - 00291704 _____ () C:\Windows\Minidump\071214-23228-01.dmp
2014-07-12 03:19 - 2011-02-16 23:36 - 555674807 _____ () C:\Windows\MEMORY.DMP
2014-07-12 03:19 - 2011-02-16 23:36 - 00000000 ____D () C:\Windows\Minidump

Some content of TEMP:
====================
C:\Users\Simon\AppData\Local\Temp\02b673270b0b50a8d44ad649a71454c1.exe
C:\Users\Simon\AppData\Local\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Users\Simon\AppData\Local\Temp\2dcd1d63cb45e6613582211c3d5f4b23.exe
C:\Users\Simon\AppData\Local\Temp\AskSLib.dll
C:\Users\Simon\AppData\Local\Temp\avgnt.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-1.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-2.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-3.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe.exe
C:\Users\Simon\AppData\Local\Temp\htmlayout.dll
C:\Users\Simon\AppData\Local\Temp\install20177888.exe
C:\Users\Simon\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\NEventMessages.dll
C:\Users\Simon\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Simon\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Simon\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Simon\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Simon\AppData\Local\Temp\nvStInst.exe
C:\Users\Simon\AppData\Local\Temp\Quarantine.exe
C:\Users\Simon\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Simon\AppData\Local\Temp\toolbar20178180.exe
C:\Users\Simon\AppData\Local\Temp\toolbar20178184.exe
C:\Users\Simon\AppData\Local\Temp\toolbar20178192.exe
C:\Users\Simon\AppData\Local\Temp\toolbar20178196.exe
C:\Users\Simon\AppData\Local\Temp\v-beo6u-.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-07 23:33

==================== End Of Log ============================
         

Additional

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-08-2014 01
Ran by Simon at 2014-08-11 22:00:33
Running from C:\Users\Simon\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Arcade Deluxe (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 3.2.7116 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 3.2.7116 - CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{30075A70-B5D2-440B-AFA3-FB2021740121}) (Version: 2.0.2.19 - NewTech Infosystems)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3005 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.02.3006 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0812 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Backup Manager Advance (x32 Version: 2.0.2.19 - NewTech Infosystems) Hidden
Belkin Connect Wireless USB Adapter (HKLM-x32\...\InstallShield_{08B73C99-D071-488F-8861-5DDA897C510D}) (Version: 1.0.0.3 - Belkin)
Belkin Connect Wireless USB Adapter (x32 Version: 1.0.0.3 - Belkin) Hidden
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.3.1.5 - )
Canon Internet Library for ZoomBrowser EX (HKLM-x32\...\Canon Internet Library for ZoomBrowser EX) (Version: 1.5.1.4 - )
Canon RAW Image Task for ZoomBrowser EX (HKLM-x32\...\RAW Image Task) (Version: 2.7.0.3 - )
Canon Utilities Digital Photo Professional 3.11 (HKLM-x32\...\Digital Photo Professional) (Version: 3.11.31.0 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.1.0.1 - )
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.19.43 - )
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.0.1.0 - )
Canon Utilities WFT-E1/E2/E3 Utility (HKLM-x32\...\WFTK) (Version: 3.1.0.7 - )
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 5.8.0.74 - )
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3003 - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 7.0.3003 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dairy Dash (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}) (Version:  - Oberon Media)
DiRT 3 (x32 Version: 1.0.0003.130 - Codemasters) Hidden
Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}) (Version:  - Oberon Media)
EasyBits GO (HKCU\...\Game Organizer) (Version:  - EasyBits Media)
ElsterFormular (HKLM-x32\...\ElsterFormular 13.1.0.8394p) (Version: 15.0.13587 - Landesfinanzdirektion Thüringen)
eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GIMP 2.6.10 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.10 - The GIMP Team)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 1.00.3004 - Acer Incorporated)
ICQ7.6 (HKLM-x32\...\{7644E42D-B096-457F-8B5B-901238FC81AE}) (Version: 7.6 - ICQ)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3002 - Acer Incorporated)
Image Resizer Powertoy Clone for Windows (64 bit) (HKLM\...\{80A620C1-B22C-4781-A351-B14B8A37BFE3}) (Version: 2.1 - Brice Lambson)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Java 7 Update 10 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417010FF}) (Version: 7.0.100 - Oracle)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0000 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Logitech Gaming Software 64 (HKLM-x32\...\InstallShield_{58BF5D14-CBCF-473C-B0E0-A7955A23224E}) (Version:  - )
Logitech Gaming Software 64 (Version: 4.60 - Ihr Firmenname) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Merriam Websters Spell Jam (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477}) (Version:  - Oberon Media)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
Mp3tag v2.47b (HKLM-x32\...\Mp3tag) (Version: v2.47b - Florian Heidenreich)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MyWinLocker (HKLM-x32\...\{68301905-2DEA-41CE-A4D4-E8B443B099BA}) (Version: 3.1.76.0 - Egis Technology Inc.)
Neat Image v6 Demo (with plug-in) (HKLM-x32\...\Neat Image_is1) (Version:  - Neat Image team, ABSoft)
Nero 9 Essentials (HKLM-x32\...\{965ef942-36c2-4f92-b60f-c75cd1dcde2f}) (Version:  - Nero AG)
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero DiscSpeed (x32 Version: 5.4.7.201 - Nero AG) Hidden
Nero DiscSpeed Help (x32 Version: 5.4.4.100 - Nero AG) Hidden
Nero DriveSpeed (x32 Version: 4.4.7.201 - Nero AG) Hidden
Nero DriveSpeed Help (x32 Version: 4.4.4.100 - Nero AG) Hidden
Nero Express Help (x32 Version: 9.4.9.100 - Nero AG) Hidden
Nero InfoTool (x32 Version: 6.4.7.201 - Nero AG) Hidden
Nero InfoTool Help (x32 Version: 6.4.4.100 - Nero AG) Hidden
Nero Installer (x32 Version: 4.4.8.1 - Nero AG) Hidden
Nero Online Upgrade (x32 Version: 1.3.0.0 - Nero AG) Hidden
Nero StartSmart (x32 Version: 9.4.11.209 - Nero AG) Hidden
Nero StartSmart Help (x32 Version: 9.4.11.208 - Nero AG) Hidden
Nero StartSmart OEM (x32 Version: 9.16.0.100 - Nero AG) Hidden
NeroExpress (x32 Version: 9.4.10.505 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.48.0 - Nokia)
Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Hidden
NVIDIA 3D Vision Controller-Treiber 310.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 310.90 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5896 - NVIDIA Corporation)
NVIDIA Grafiktreiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
OLYMPUS Master 2 (HKLM-x32\...\{45FCADDB-0B29-457E-83A1-D245C62A716C}) (Version: 1.0.6 - OLYMPUS IMAGING CORP.)
OLYMPUS Studio 2 (HKLM-x32\...\{B48FE939-274D-401E-A7AB-E07FE22D268E}) (Version: 1.0.1 - OLYMPUS IMAGING CORP.)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice.org 3.4 (HKLM-x32\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org)
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{3DA20A12-AD9F-4A75-8A6F-5204EEB94359}) (Version: 2.0.5.16319 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Perfect Effects 8 (HKLM-x32\...\{C982ACFF-5997-4B7D-B3E1-CF7273A06FB2}) (Version: 8.1.0 - onOne Software)
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
QuickTime (HKLM-x32\...\{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}) (Version: 7.1.3.100 - Apple Computer, Inc.)
Rapture3D 2.4.8 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version:  - Blue Ripple Sound)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5969 - Realtek Semiconductor Corp.)
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Snapfish Fotobuch (HKLM-x32\...\Snapfish Fotobuch) (Version: 4.8.7 - CEWE COLOR AG u Co. OHG)
SNS-HDR Home v1.4.7 (HKLM\...\SNS-HDR Home_is1) (Version:  - Sebastian Nibisz)
SPEEDLINK Strike 2 Gamepad (HKLM-x32\...\{4999B2F1-3E74-409A-B8B5-E94448AA9EA6}) (Version: 2007.08.17 - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technologie (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.115.11 - Intel)
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 5.96 - NCH Software)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.00.3008 - Acer Incorporated)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. (OlyFirCam) OlyFirCam  (06/21/2007 2.2.0.0) (HKLM\...\1F83630F1D96893C47BCF19B627F1BBA13E0DAF7) (Version: 06/21/2007 2.2.0.0 - OLYMPUS IMAGING CORP.)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. (OlyUsbCam) OlyUsbCam  (12/28/2006 1.0.0.0) (HKLM\...\D4D93CD19C3E3B78F95D0606CD187BDE3317187F) (Version: 12/28/2006 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )
XnView 1.97.8 (HKLM-x32\...\XnView_is1) (Version: 1.97.8 - Gougelet Pierre-e)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

18-07-2014 12:21:29 Windows Update
22-07-2014 09:17:15 Windows Update
24-07-2014 18:18:34 Windows Update
29-07-2014 18:40:41 Windows Update
03-08-2014 09:45:52 Windows Live Essentials
03-08-2014 09:47:14 DirectX wurde installiert
03-08-2014 09:47:29 DirectX wurde installiert
03-08-2014 09:48:01 DirectX wurde installiert
03-08-2014 09:48:42 WLSetup
05-08-2014 18:05:01 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2010-09-12 13:57 - 00000998 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 im.adtech.de
127.0.0.1 adserver.adtech.de
127.0.0.1 adtech.de
127.0.0.1 atwola.com
127.0.0.1 adserver.71i.de
127.0.0.1 adicqserver.71i.de
127.0.0.1 71i.de


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1D3EC243-4516-41F8-9788-68060E5BBCE0} - System32\Tasks\MT66 Software Update => C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe
Task: {26772D0A-C45B-4E63-8FC0-3B543364CBA1} - System32\Tasks\YourFile DownloaderInstaller Starter => C:\Users\Simon\AppData\Local\Temp\install20177888.exe [2014-08-02] (hxxp://yourfiledownloader.net) <==== ATTENTION
Task: {5FC4D864-192E-440E-8D59-C5DCECEF212E} - System32\Tasks\McQcModifier-5c47-a7b0 => C:\ProgramData\McQcModifier-5c47-a7b0\McQcModifier-5c47-a7b0.cmd [2009-08-29] ()
Task: {80445868-281E-4E3C-9A7D-BA73A5CDDEF3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {8C978D4C-8390-45E6-A9F1-708B94A6297E} - System32\Tasks\{322260B1-F392-499E-B772-A33C68BA8981} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-05-08] (Skype Technologies S.A.)
Task: {A69099EA-A391-4809-A1CC-938D9D66D48E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {E55EAEFA-D851-4ED6-861C-4249E53A93E6} - System32\Tasks\NCH Software\WavePadSevenDays => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe
Task: {ED0DB406-8DF0-4C93-94EC-9C2E0A7F6D17} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MT66 Software Update.job => C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe

==================== Loaded Modules (whitelisted) =============

2012-11-18 14:54 - 2013-01-18 17:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-08-27 08:49 - 2009-02-16 05:51 - 00247152 _____ () C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
2009-08-18 09:27 - 2009-08-18 09:27 - 00629280 _____ () C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
2009-02-03 03:33 - 2009-02-03 03:33 - 00460199 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2008-09-29 03:55 - 2008-09-29 03:55 - 01076224 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2009-08-18 09:31 - 2009-08-18 09:31 - 00163840 _____ () C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyHook.dll
2014-07-29 21:51 - 2014-07-29 21:51 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: MP3 Player
Description: WALKMAN NWZ-A818
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Sony Corporation
Service: WUDFRd
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/10/2014 08:39:05 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (08/10/2014 08:38:12 PM) (Source: SideBySide) (EventID: 75) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (08/07/2014 11:34:46 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (08/07/2014 11:33:32 PM) (Source: SideBySide) (EventID: 75) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (08/05/2014 11:42:05 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (08/05/2014 11:41:12 PM) (Source: SideBySide) (EventID: 75) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (08/03/2014 02:02:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmprph.exe, Version: 12.0.7600.16385, Zeitstempel: 0x4a5bd018
Name des fehlerhaften Moduls: JScript.dll, Version: 5.8.9600.16428, Zeitstempel: 0x525b8c45
Ausnahmecode: 0xc000041d
Fehleroffset: 0x0000000000010e04
ID des fehlerhaften Prozesses: 0x124c
Startzeit der fehlerhaften Anwendung: 0xwmprph.exe0
Pfad der fehlerhaften Anwendung: wmprph.exe1
Pfad des fehlerhaften Moduls: wmprph.exe2
Berichtskennung: wmprph.exe3

Error: (08/03/2014 02:02:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmprph.exe, Version: 12.0.7600.16385, Zeitstempel: 0x4a5bd018
Name des fehlerhaften Moduls: JScript.dll, Version: 5.8.9600.16428, Zeitstempel: 0x525b8c45
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000010e04
ID des fehlerhaften Prozesses: 0x124c
Startzeit der fehlerhaften Anwendung: 0xwmprph.exe0
Pfad der fehlerhaften Anwendung: wmprph.exe1
Pfad des fehlerhaften Moduls: wmprph.exe2
Berichtskennung: wmprph.exe3

Error: (08/03/2014 01:50:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmprph.exe, Version: 12.0.7600.16385, Zeitstempel: 0x4a5bd018
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004e4e4
ID des fehlerhaften Prozesses: 0x124c
Startzeit der fehlerhaften Anwendung: 0xwmprph.exe0
Pfad der fehlerhaften Anwendung: wmprph.exe1
Pfad des fehlerhaften Moduls: wmprph.exe2
Berichtskennung: wmprph.exe3

Error: (08/03/2014 00:36:37 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.


System errors:
=============
Error: (08/11/2014 09:51:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (08/11/2014 09:51:46 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (08/11/2014 09:51:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/11/2014 09:49:42 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem Fehler beendet: %%303.

Error: (08/11/2014 09:48:42 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Avira Planer" wurde mit folgendem dienstspezifischem Fehler beendet: %%305.

Error: (08/11/2014 06:41:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (08/11/2014 06:41:45 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (08/11/2014 06:41:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/11/2014 06:39:43 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem Fehler beendet: %%303.

Error: (08/11/2014 06:39:14 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Avira Planer" wurde mit folgendem dienstspezifischem Fehler beendet: %%305.


Microsoft Office Sessions:
=========================
Error: (08/10/2014 08:39:05 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (08/10/2014 08:38:12 PM) (Source: SideBySide) (EventID: 75) (User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (08/07/2014 11:34:46 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (08/07/2014 11:33:32 PM) (Source: SideBySide) (EventID: 75) (User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (08/05/2014 11:42:05 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (08/05/2014 11:41:12 PM) (Source: SideBySide) (EventID: 75) (User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (08/03/2014 02:02:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: wmprph.exe12.0.7600.163854a5bd018JScript.dll5.8.9600.16428525b8c45c000041d0000000000010e04124c01cfaf111710303aC:\Program Files\Windows Media Player\wmprph.exeC:\Windows\system32\JScript.dll0c61086b-1b06-11e4-8588-00016c6eb9a2

Error: (08/03/2014 02:02:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: wmprph.exe12.0.7600.163854a5bd018JScript.dll5.8.9600.16428525b8c45c00000050000000000010e04124c01cfaf111710303aC:\Program Files\Windows Media Player\wmprph.exeC:\Windows\system32\JScript.dll038eba9c-1b06-11e4-8588-00016c6eb9a2

Error: (08/03/2014 01:50:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: wmprph.exe12.0.7600.163854a5bd018ntdll.dll6.1.7601.18247521eaf24c0000005000000000004e4e4124c01cfaf111710303aC:\Program Files\Windows Media Player\wmprph.exeC:\Windows\SYSTEM32\ntdll.dll56735572-1b04-11e4-8588-00016c6eb9a2

Error: (08/03/2014 00:36:37 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3


==================== Memory info =========================== 

Percentage of memory in use: 43%
Total physical RAM: 4087.08 MB
Available physical RAM: 2303.02 MB
Total Pagefile: 8172.34 MB
Available Pagefile: 6101.2 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:725.73 GB) (Free:463.2 GB) NTFS
Drive d: (DATA) (Fixed) (Total:657.76 GB) (Free:657.64 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: E3DC1B4F)
Partition 1: (Not Active) - (Size=14 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=726 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=658 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Hallo Sleepyhead88



Mein Name ist Timo und ich werde Dir bei deinem Problem behilflich sein.

• Bitte arbeite alle Schritte der Reihe nach ab.
• Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
• Nur Scans durchführen zu denen Du von einem Helfer aufgefordert wirst.
• Bitte kein Crossposting ( posten in mehreren Foren).
• Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
• Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
• Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist immer der sicherste Weg.

Wir "arbeiten" hier alle freiwillig und in unserer Freizeit *hust*. Daher kann es bei Antworten zu Verzögerungen kommen.
Solltest du innerhalb 48 Std keine Antwort von mir erhalten, dann schreib mit eine PM
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis ich oder jemand vom Team sagt, dass Du clean bist.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Starte noch einmal FRST.

• Ändere keine der Voreinstellungen und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Danke für die schnelle Reaktion, Timo!

Hier erstmal die Fixlog

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-08-2014 01
Ran by Simon at 2014-08-11 23:27:57 Run:1
Running from C:\Users\Simon\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
         
*****************

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.


The system needed a reboot. 

==== End of Fixlog ====
         

Log Datei AW Cleaner

# AdwCleaner v3.304 - Bericht erstellt am 11/08/2014 um 23:39:55
# Aktualisiert 08/08/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Simon - SIMON-PC
# Gestartet von : C:\Users\Simon\Downloads\adwcleaner_3.304.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17207


-\\ Mozilla Firefox v31.0 (x86 de)

[ Datei : C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [11360 octets] - [03/08/2014 00:17:35]
AdwCleaner[R1].txt - [1566 octets] - [11/08/2014 21:46:25]
AdwCleaner[R2].txt - [1211 octets] - [11/08/2014 23:37:08]
AdwCleaner[S0].txt - [8633 octets] - [03/08/2014 00:18:35]
AdwCleaner[S1].txt - [1581 octets] - [11/08/2014 21:47:39]
AdwCleaner[S2].txt - [1133 octets] - [11/08/2014 23:39:55]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1193 octets] ##########
         

JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Simon on 11.08.2014 at 23:44:23,67
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11.08.2014 at 23:48:38,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Mbam

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 12.08.2014 00:06:01, SYSTEM, SIMON-PC, Protection, Malware Protection, Starting, 
Protection, 12.08.2014 00:06:01, SYSTEM, SIMON-PC, Protection, Malware Protection, Started, 
Protection, 12.08.2014 00:06:01, SYSTEM, SIMON-PC, Protection, Malicious Website Protection, Starting, 
Protection, 12.08.2014 00:07:11, SYSTEM, SIMON-PC, Protection, Malicious Website Protection, Started, 

(end)
         

Und dann nochmal FRST


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01
Ran by Simon (administrator) on SIMON-PC on 12-08-2014 00:11:33
Running from C:\Users\Simon\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
() C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\QuickTime\qttask.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-10] (Egis Technology Inc.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-10-13] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352 2009-10-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-13] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [629280 2009-08-18] ()
HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [128296 2009-11-16] (CyberLink Corp.)
HKLM-x32\...\Run: [PlayMovie] => C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-11-12] (Acer Corp.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\qttask.exe [282624 2006-09-01] (Apple Computer, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [BlockAndSurf] => C:\Program Files (x86)\ver1BlockAndSurf\BlockAndSurf.exe
HKU\S-1-5-21-2701147688-1485282812-3783366192-1000\...\Run: [] => [X]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: No Name -> {120A8821-2BEE-4C29-BCDA-62C577781992} ->  No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Amazon.de
FF SelectedSearchEngine: Amazon.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Computer, Inc.)
FF SearchPlugin: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\searchplugins\google-maps.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: cosstminn - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\7x_yu3@ohadgkp.net [2014-08-03]
FF Extension: DoNotTrackMe: Online Privacy Protection - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\donottrackplus@abine.com [2014-07-12]
FF Extension: CouponsHelper - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\{239cc760-75a9-4276-b1fc-c0ceb963f373}.xpi [2013-12-14]
FF Extension: Adblock Plus - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-14]
FF Extension: Recorder Toolbar - C:\Program Files (x86)\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2} [2014-08-03]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-29]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-07-29]
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (YouTube) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-09]
CHR Extension: (Google-Suche) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-09]
CHR Extension: (cosstminn) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm [2014-08-02]
CHR Extension: (Google Mail) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-09]
CHR Extension: (cosstminn) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm\2.0 [2014-08-02]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-17] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-17] (pdfforge GmbH)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [247152 2009-02-16] ()
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-12] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 OlyUsbCam; C:\Windows\System32\DRIVERS\OlyUsbCam.sys [24512 2007-01-12] (OLYMPUS IMAGING CORP.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-11-12] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-12 00:10 - 2014-08-12 00:10 - 00000458 _____ () C:\Users\Simon\Desktop\mbam2.txt
2014-08-12 00:09 - 2014-08-12 00:09 - 00000458 _____ () C:\Users\Simon\Desktop\mbam.txt
2014-08-11 23:52 - 2014-08-12 00:07 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-11 23:52 - 2014-08-11 23:52 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-11 23:52 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-11 23:52 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-11 23:52 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-11 23:50 - 2014-08-11 23:50 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Simon\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-11 23:48 - 2014-08-11 23:48 - 00000625 _____ () C:\Users\Simon\Desktop\JRT.txt
2014-08-11 23:43 - 2014-08-11 23:43 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT(1).exe
2014-08-11 23:36 - 2014-08-11 23:36 - 01366203 _____ () C:\Users\Simon\Downloads\adwcleaner_3.304.exe
2014-08-11 22:34 - 2014-08-11 22:34 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT.exe
2014-08-11 22:34 - 2014-08-11 22:34 - 00000000 ____D () C:\Windows\ERUNT
2014-08-11 22:27 - 2014-08-11 22:27 - 00016383 _____ () C:\Users\Simon\Desktop\Vdez5405.htm
2014-08-11 22:00 - 2014-08-11 22:00 - 00036423 _____ () C:\Users\Simon\Downloads\Addition.txt
2014-08-11 21:58 - 2014-08-12 00:11 - 00018118 _____ () C:\Users\Simon\Downloads\FRST.txt
2014-08-11 21:58 - 2014-08-12 00:11 - 00000000 ____D () C:\FRST
2014-08-11 21:57 - 2014-08-11 21:58 - 02099712 _____ (Farbar) C:\Users\Simon\Downloads\FRST64.exe
2014-08-11 21:45 - 2014-08-11 21:45 - 01101648 _____ () C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer(1).exe
2014-08-11 21:36 - 2014-08-11 21:36 - 00054156 ____H () C:\Windows\QTFont.qfn
2014-08-11 21:36 - 2014-08-11 21:36 - 00001409 _____ () C:\Windows\QTFont.for
2014-08-11 20:22 - 2014-08-11 20:22 - 00027909 _____ () C:\Users\Simon\.recently-used.xbel
2014-08-06 21:34 - 2014-08-06 21:34 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\WavePad - CHIP-Installer.exe
2014-08-06 21:34 - 2014-08-06 21:34 - 00001276 _____ () C:\Users\Public\Desktop\NCH Suite.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001126 _____ () C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2014-08-06 21:30 - 2014-08-06 21:30 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\mp3DirectCut
2014-08-06 21:28 - 2014-08-06 21:28 - 00001063 _____ () C:\Users\Simon\Desktop\mp3DirectCut.lnk
2014-08-06 21:27 - 2014-08-06 21:28 - 00308709 _____ () C:\Users\Simon\Downloads\mpdc_16957.exe
2014-08-03 18:25 - 2014-08-03 23:59 - 00018371 _____ () C:\Users\Simon\Desktop\Brief an Bob.odt
2014-08-03 13:00 - 2014-08-03 13:14 - 00000000 ____D () C:\Users\Simon\Desktop\100EOS7D
2014-08-03 11:51 - 2014-08-03 11:51 - 00000000 ____D () C:\Users\Simon\Tracing
2014-08-03 11:50 - 2014-08-03 11:50 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-03 11:50 - 2014-08-03 11:50 - 00000000 ____D () C:\Windows\de
2014-08-03 00:18 - 2014-08-03 00:18 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2014-08-03 00:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-03 00:17 - 2014-08-11 23:39 - 00000000 ____D () C:\AdwCleaner
2014-08-03 00:17 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-08-03 00:17 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-08-03 00:16 - 2014-08-03 00:16 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer.exe
2014-08-03 00:13 - 2014-08-03 00:13 - 00000000 ____D () C:\Users\Simon\AppData\Local\MedienTeam66
2014-08-03 00:11 - 2014-08-03 00:11 - 00000000 ____D () C:\Users\Simon\Documents\YouTube Recordings
2014-08-03 00:10 - 2014-08-12 00:10 - 00000314 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-08-03 00:10 - 2014-08-03 00:10 - 10061576 _____ (MedienTeam66 Verlags GmbH ) C:\Users\Simon\Downloads\MP3_Recorder_for_YouTube.exe
2014-08-03 00:10 - 2014-08-03 00:10 - 00002908 _____ () C:\Windows\System32\Tasks\MT66 Software Update
2014-08-03 00:10 - 2014-08-03 00:10 - 00000000 ____D () C:\Program Files (x86)\MedienTeam66
2014-08-03 00:03 - 2014-08-03 00:03 - 00003150 _____ () C:\Windows\System32\Tasks\{F14520F0-57E8-473B-B7CA-55041ED72F79}
2014-08-03 00:01 - 2014-08-03 00:01 - 00000114 _____ () C:\Windows\wininit.ini
2014-08-02 23:57 - 2014-08-03 00:02 - 00000000 ____D () C:\ProgramData\8aa681781fbef9a8
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Packages
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator
2014-08-02 23:56 - 2014-08-11 23:30 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-08-02 23:56 - 2014-08-02 23:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-08-02 23:55 - 2014-08-02 23:55 - 00003178 _____ () C:\Windows\System32\Tasks\YourFile DownloaderInstaller Starter
2014-08-02 18:20 - 2014-08-02 21:16 - 00000000 ____D () C:\Users\Simon\Desktop\2014-08-02 RC Auto
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ___HD () C:\Users\Simon\Documents\ShadowEditFiles
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ____D () C:\Users\Simon\Documents\CyberLink
2014-08-01 20:25 - 2014-08-01 20:25 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\CyberLink
2014-08-01 19:48 - 2014-08-06 21:55 - 00000000 ____D () C:\Users\Simon\Desktop\Videomaterial C u A
2014-07-29 21:51 - 2014-07-29 21:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-26 21:57 - 2014-08-05 20:11 - 00000000 ____D () C:\Users\Simon\Desktop\LaLala Bob
2014-07-26 02:38 - 2014-07-27 01:00 - 00000000 ____D () C:\Users\Simon\Desktop\FCKW
2014-07-24 18:40 - 2014-07-24 19:15 - 00000000 ____D () C:\Users\Simon\Desktop\Bob
2014-07-15 18:49 - 2014-07-15 20:06 - 00000000 ____D () C:\Users\Simon\Desktop\2014-07-14 Rhein

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-12 00:11 - 2014-08-11 21:58 - 00018118 _____ () C:\Users\Simon\Downloads\FRST.txt
2014-08-12 00:11 - 2014-08-11 21:58 - 00000000 ____D () C:\FRST
2014-08-12 00:10 - 2014-08-12 00:10 - 00000458 _____ () C:\Users\Simon\Desktop\mbam2.txt
2014-08-12 00:10 - 2014-08-03 00:10 - 00000314 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-08-12 00:09 - 2014-08-12 00:09 - 00000458 _____ () C:\Users\Simon\Desktop\mbam.txt
2014-08-12 00:07 - 2014-08-11 23:52 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-12 00:05 - 2010-09-19 19:27 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-12 00:05 - 2010-08-27 08:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-12 00:05 - 2009-11-19 00:09 - 01028502 _____ () C:\Windows\PFRO.log
2014-08-12 00:05 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-12 00:05 - 2009-07-14 06:51 - 00213634 _____ () C:\Windows\setupact.log
2014-08-12 00:04 - 2010-08-27 08:28 - 01141378 _____ () C:\Windows\WindowsUpdate.log
2014-08-12 00:00 - 2012-05-18 18:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-11 23:52 - 2014-08-11 23:52 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-11 23:50 - 2014-08-11 23:50 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Simon\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-11 23:48 - 2014-08-11 23:48 - 00000625 _____ () C:\Users\Simon\Desktop\JRT.txt
2014-08-11 23:48 - 2010-09-19 19:27 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-11 23:48 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-11 23:48 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-11 23:43 - 2014-08-11 23:43 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT(1).exe
2014-08-11 23:39 - 2014-08-03 00:17 - 00000000 ____D () C:\AdwCleaner
2014-08-11 23:36 - 2014-08-11 23:36 - 01366203 _____ () C:\Users\Simon\Downloads\adwcleaner_3.304.exe
2014-08-11 23:30 - 2014-08-02 23:56 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-08-11 23:27 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-08-11 22:34 - 2014-08-11 22:34 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT.exe
2014-08-11 22:34 - 2014-08-11 22:34 - 00000000 ____D () C:\Windows\ERUNT
2014-08-11 22:27 - 2014-08-11 22:27 - 00016383 _____ () C:\Users\Simon\Desktop\Vdez5405.htm
2014-08-11 22:00 - 2014-08-11 22:00 - 00036423 _____ () C:\Users\Simon\Downloads\Addition.txt
2014-08-11 21:58 - 2014-08-11 21:57 - 02099712 _____ (Farbar) C:\Users\Simon\Downloads\FRST64.exe
2014-08-11 21:45 - 2014-08-11 21:45 - 01101648 _____ () C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer(1).exe
2014-08-11 21:36 - 2014-08-11 21:36 - 00054156 ____H () C:\Windows\QTFont.qfn
2014-08-11 21:36 - 2014-08-11 21:36 - 00001409 _____ () C:\Windows\QTFont.for
2014-08-11 20:53 - 2010-09-12 14:19 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{6D5A817C-B063-4DF2-95A2-90BC099FE999}
2014-08-11 20:22 - 2014-08-11 20:22 - 00027909 _____ () C:\Users\Simon\.recently-used.xbel
2014-08-11 20:22 - 2010-09-12 19:10 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\gtk-2.0
2014-08-11 20:22 - 2010-09-09 20:59 - 00000000 ____D () C:\Users\Simon
2014-08-11 20:21 - 2010-09-12 14:30 - 00000000 ____D () C:\Users\Simon\.gimp-2.6
2014-08-11 19:51 - 2010-09-11 19:20 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\ICQ
2014-08-06 21:55 - 2014-08-01 19:48 - 00000000 ____D () C:\Users\Simon\Desktop\Videomaterial C u A
2014-08-06 21:34 - 2014-08-06 21:34 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\WavePad - CHIP-Installer.exe
2014-08-06 21:34 - 2014-08-06 21:34 - 00001276 _____ () C:\Users\Public\Desktop\NCH Suite.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001126 _____ () C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2014-08-06 21:30 - 2014-08-06 21:30 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\mp3DirectCut
2014-08-06 21:28 - 2014-08-06 21:28 - 00001063 _____ () C:\Users\Simon\Desktop\mp3DirectCut.lnk
2014-08-06 21:28 - 2014-08-06 21:27 - 00308709 _____ () C:\Users\Simon\Downloads\mpdc_16957.exe
2014-08-05 20:11 - 2014-07-26 21:57 - 00000000 ____D () C:\Users\Simon\Desktop\LaLala Bob
2014-08-03 23:59 - 2014-08-03 18:25 - 00018371 _____ () C:\Users\Simon\Desktop\Brief an Bob.odt
2014-08-03 23:25 - 2010-11-24 21:08 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\Skype
2014-08-03 13:14 - 2014-08-03 13:00 - 00000000 ____D () C:\Users\Simon\Desktop\100EOS7D
2014-08-03 12:08 - 2010-08-27 18:19 - 00699432 _____ () C:\Windows\system32\perfh007.dat
2014-08-03 12:08 - 2010-08-27 18:19 - 00149572 _____ () C:\Windows\system32\perfc007.dat
2014-08-03 12:08 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-03 11:55 - 2013-07-04 23:25 - 00000000 ____D () C:\Users\Simon\AppData\Local\Windows Live
2014-08-03 11:51 - 2014-08-03 11:51 - 00000000 ____D () C:\Users\Simon\Tracing
2014-08-03 11:50 - 2014-08-03 11:50 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-03 11:50 - 2014-08-03 11:50 - 00000000 ____D () C:\Windows\de
2014-08-03 11:50 - 2013-07-04 23:32 - 00001494 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-08-03 11:50 - 2013-07-04 23:32 - 00001378 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-08-03 11:50 - 2010-08-27 08:51 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-03 11:49 - 2013-07-04 23:32 - 00002538 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-08-03 11:49 - 2013-07-04 23:31 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-03 11:49 - 2010-08-27 08:51 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-08-03 11:47 - 2010-08-27 08:52 - 00133212 _____ () C:\Windows\DirectX.log
2014-08-03 00:18 - 2014-08-03 00:18 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2014-08-03 00:18 - 2011-04-30 13:49 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-03 00:18 - 2011-04-30 13:49 - 00001057 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-03 00:18 - 2010-09-11 19:20 - 00000000 ____D () C:\ProgramData\ICQ
2014-08-03 00:18 - 2010-09-09 21:00 - 00001041 _____ () C:\Users\Simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-03 00:16 - 2014-08-03 00:16 - 00826192 _____ (Chip Digital GmbH) C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer.exe
2014-08-03 00:13 - 2014-08-03 00:13 - 00000000 ____D () C:\Users\Simon\AppData\Local\MedienTeam66
2014-08-03 00:11 - 2014-08-03 00:11 - 00000000 ____D () C:\Users\Simon\Documents\YouTube Recordings
2014-08-03 00:10 - 2014-08-03 00:10 - 10061576 _____ (MedienTeam66 Verlags GmbH ) C:\Users\Simon\Downloads\MP3_Recorder_for_YouTube.exe
2014-08-03 00:10 - 2014-08-03 00:10 - 00002908 _____ () C:\Windows\System32\Tasks\MT66 Software Update
2014-08-03 00:10 - 2014-08-03 00:10 - 00000000 ____D () C:\Program Files (x86)\MedienTeam66
2014-08-03 00:03 - 2014-08-03 00:03 - 00003150 _____ () C:\Windows\System32\Tasks\{F14520F0-57E8-473B-B7CA-55041ED72F79}
2014-08-03 00:02 - 2014-08-02 23:57 - 00000000 ____D () C:\ProgramData\8aa681781fbef9a8
2014-08-03 00:01 - 2014-08-03 00:01 - 00000114 _____ () C:\Windows\wininit.ini
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Packages
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator
2014-08-02 23:57 - 2010-09-19 19:26 - 00000000 ____D () C:\Users\Simon\AppData\Local\Google
2014-08-02 23:57 - 2009-11-18 23:56 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-02 23:56 - 2014-08-02 23:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-08-02 23:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-08-02 23:55 - 2014-08-02 23:55 - 00003178 _____ () C:\Windows\System32\Tasks\YourFile DownloaderInstaller Starter
2014-08-02 21:20 - 2010-11-27 00:10 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\XnView
2014-08-02 21:16 - 2014-08-02 18:20 - 00000000 ____D () C:\Users\Simon\Desktop\2014-08-02 RC Auto
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ___HD () C:\Users\Simon\Documents\ShadowEditFiles
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ____D () C:\Users\Simon\Documents\CyberLink
2014-08-01 20:26 - 2010-08-27 08:45 - 00000000 ____D () C:\ProgramData\CyberLink
2014-08-01 20:25 - 2014-08-01 20:25 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\CyberLink
2014-07-31 17:31 - 2012-04-27 19:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-29 21:51 - 2014-07-29 21:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-27 01:00 - 2014-07-26 02:38 - 00000000 ____D () C:\Users\Simon\Desktop\FCKW
2014-07-26 11:54 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-24 23:22 - 2013-03-14 00:32 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 23:22 - 2013-03-14 00:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 20:20 - 2013-03-14 00:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 19:15 - 2014-07-24 18:40 - 00000000 ____D () C:\Users\Simon\Desktop\Bob
2014-07-22 17:52 - 2014-05-06 23:20 - 00000000 ____D () C:\Users\Simon\Documents\Bewerbungen
2014-07-20 13:09 - 2013-12-10 22:15 - 00245740 _____ () C:\Users\Simon\Desktop\FB Titel.xcf
2014-07-18 18:23 - 2010-09-09 20:59 - 00000000 ___RD () C:\Users\Simon\Eigene Bilder
2014-07-15 20:06 - 2014-07-15 18:49 - 00000000 ____D () C:\Users\Simon\Desktop\2014-07-14 Rhein

Some content of TEMP:
====================
C:\Users\Simon\AppData\Local\Temp\02b673270b0b50a8d44ad649a71454c1.exe
C:\Users\Simon\AppData\Local\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Users\Simon\AppData\Local\Temp\AskSLib.dll
C:\Users\Simon\AppData\Local\Temp\avgnt.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-1.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-2.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-3.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe.exe
C:\Users\Simon\AppData\Local\Temp\htmlayout.dll
C:\Users\Simon\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\NEventMessages.dll
C:\Users\Simon\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Simon\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Simon\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Simon\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Simon\AppData\Local\Temp\nvStInst.exe
C:\Users\Simon\AppData\Local\Temp\Quarantine.exe
C:\Users\Simon\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Simon\AppData\Local\Temp\toolbar20178192.exe
C:\Users\Simon\AppData\Local\Temp\v-beo6u-.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-07 23:33

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Bei Malwarebytes benötige ich das Suchlaufprotokoll:

• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Suchlauf-Protokoll aus und klicke auf Ansicht. Wähle Exportieren auf Textdatei (.txt) und speichere die Datei als mbam.txt auf dem Desktop ab.

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 11.08.2014
Suchlauf-Zeit: 23:53:44
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.08.11.08
Rootkit Datenbank: v2014.08.04.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Simon

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 378601
Verstrichene Zeit: 10 Min, 40 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 1
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CE681A67-9477-CBE6-EB9D-FE534875F98D}, In Quarantäne, [90c4b70e4f2c270f2d03e186b34f23dd], 

Registrierungswerte: 1
PUP.Optional.FastStart.A, HKU\S-1-5-21-2701147688-1485282812-3783366192-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, faststartff@gmail.com, In Quarantäne, [470d03c2dc9f3006eee96d746b978a76]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 1
PUP.Optional.Adanak.A, C:\Users\Simon\AppData\Local\Temp\Adanak, In Quarantäne, [361eb114f08b9e98c1efbe0f8a78a957], 

Dateien: 10
PUP.Optional.SearchHijacker.A, C:\Users\Simon\AppData\Local\Temp\toolbar20178180.exe, In Quarantäne, [361ec8fdf58652e4db19b8f0fb06f20e], 
PUP.Optional.Browsefox, C:\Users\Simon\AppData\Local\Temp\toolbar20178184.exe, In Quarantäne, [3f153f86d1aa9e98249201be9d678080], 
PUP.Optional.MultiPlug, C:\Users\Simon\AppData\Local\Temp\toolbar20178196.exe, In Quarantäne, [65ef7055d5a665d1b18562410ff23fc1], 
PUP.Optional.OpenCandy, C:\Users\Simon\AppData\Local\Temp\2dcd1d63cb45e6613582211c3d5f4b23.exe, In Quarantäne, [cd87d3f267141a1cec5c13dd1be9c937], 
PUP.Optional.Domalq, C:\Users\Simon\AppData\Local\Temp\2skUCtCD.exe.part, In Quarantäne, [f2629530d0ab53e3c842c2c44db77f81], 
PUP.BundleInstaller.DW, C:\Users\Simon\AppData\Local\Temp\34Gm5MUp.exe.part, In Quarantäne, [a7ade2e3700b3afc2b2d68a739c8748c], 
PUP.Optional.YFDownloader, C:\Users\Simon\AppData\Local\Temp\install20177888.exe, In Quarantäne, [8dc76164730869cd3ab77531ba478f71], 
PUP.Optional.YFDownloader, C:\Users\Simon\Downloads\StarWars_-_Star_Wars_Main_Theme_downloader.exe, In Quarantäne, [70e475504338f93de809584efc054db3], 
PUP.Optional.Adanak.A, C:\Users\Simon\AppData\Local\Temp\Adanak\7za.exe, In Quarantäne, [361eb114f08b9e98c1efbe0f8a78a957], 
PUP.Optional.QuickStart.A, C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");), Ersetzt,[85cfffc669124de96d11ec0ebe464ab6]

Physische Sektoren: 0
(No malicious items detected)


(end)
         

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Starte noch einmal FRST.

• Ändere keine der Voreinstellungen und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

ESET Log

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=bb795e8ec92fd448a26af18fbf307665
# engine=19638
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-08-13 07:50:25
# local_time=2014-08-13 09:50:25 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777214 100 100 12737691 273379115 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 6668 159589275 0 0
# scanned=405346
# found=20
# cleaned=20
# scan_time=6204
sh=15ED5B6C5946E85E7A5C77F4A7689E4E76CCBAFB ft=1 fh=c71c0011fe889422 vn="Win32/Thinknice.E evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir"
sh=8FF07C7F0E7320A1EB53CADD4D30D3154FF33BBA ft=1 fh=f622fe8cae001c0b vn="Win64/Thinknice.F evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface64.dll.vir"
sh=532A232C336AB1E5D65E829DFA191A71B96E2CC6 ft=1 fh=c71c001152b88659 vn="Win32/Thinknice.E evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\HpUI.exe.vir"
sh=12EBF6FC8AD543662053CA101C2D5DA175137EB2 ft=1 fh=c71c00119e5c1a87 vn="Win32/Thinknice.E evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\Loader32.exe.vir"
sh=8F0ABE23DDA3F9DC04497B1A4F455AF8CE9D45B8 ft=1 fh=787e176d56997de7 vn="Win64/Thinknice.E evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\Loader64.exe.vir"
sh=9E99BBE4E9F6026A66DB442D589FF049D44E43E9 ft=1 fh=c71c001149569c6f vn="Win32/ELEX.AV evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\RSHP.exe.vir"
sh=55B49E6175EC153F5F6D595F7E36CF04D61C70AC ft=1 fh=c71c0011122aac36 vn="Win32/Thinknice.E evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect32.dll.vir"
sh=B1740CE6528491D6914E0015C836A3A8E31A28E9 ft=1 fh=667e6cf17acea18e vn="Win64/Thinknice.F evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect64.dll.vir"
sh=6148DAB05D76E4FCEF4B394B0F60D9ADB2E2AB1E ft=1 fh=c71c0011346812ac vn="Win32/ELEX.AV evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupIePluginServiceUpdate.exe.vir"
sh=03DBFA1572019E6B0A7745CA443E74CCA8FEEFFD ft=1 fh=c71c0011e74d8dee vn="Win32/Thinknice.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir"
sh=E9BEAFD5EF09360852ECDCC4312188064742E51A ft=1 fh=c71c0011421e8e27 vn="Win32/Thinknice.E evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\uninstall.exe.vir"
sh=E3C659B9CAA4B5CFF2906CA02EB3F178906A2416 ft=1 fh=c71c00117f5fd915 vn="Win32/Thinknice.E evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\WindowsSupportDll32.dll.vir"
sh=8B488C388E304F78CA88312A651D07494469D292 ft=1 fh=8013085d4e45f122 vn="Win64/Thinknice.D evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\WindowsSupportDll64.dll.vir"
sh=915B33C2D279ECCC69F286C3E9088BB7AFFE58C7 ft=1 fh=c71c001175f130b5 vn="Variante von Win32/AdWare.MultiPlug.AY Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\cosstminn\PG2BjJ_.exe.vir"
sh=6148DAB05D76E4FCEF4B394B0F60D9ADB2E2AB1E ft=1 fh=c71c0011346812ac vn="Win32/ELEX.AV evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\IePluginServices\PluginService.exe.vir"
sh=FED7CAA2E24771B66065C8D30131FC8037B6BD2A ft=1 fh=b41296876ed186e5 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Simon\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"
sh=6BBBC7BF49BCA473C83E8C816B63DC04ECE146E9 ft=1 fh=00c07704ae2df0ab vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer.exe"
sh=2F54CCA896FD17D917B7D076749C5180BDAEEE88 ft=1 fh=e9c0455c3878dbe3 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Simon\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe"
sh=E2C028A886AA7352539DEE32CBB38770C529A76E ft=1 fh=d2aeb2930bcba9f7 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Simon\Downloads\PDFCreator-1_7_3_setup.exe"
sh=6A903A6705D9B4BB9D17C219D638FC225F343A9D ft=1 fh=eea1af13a78f60f2 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Simon\Downloads\WavePad - CHIP-Installer.exe"
         

und die anschließende FRST Log


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-08-2014
Ran by Simon (administrator) on SIMON-PC on 13-08-2014 22:19:19
Running from C:\Users\Simon\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
() C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\QuickTime\qttask.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-10] (Egis Technology Inc.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-10-13] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352 2009-10-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-13] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [629280 2009-08-18] ()
HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [128296 2009-11-16] (CyberLink Corp.)
HKLM-x32\...\Run: [PlayMovie] => C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-11-12] (Acer Corp.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\qttask.exe [282624 2006-09-01] (Apple Computer, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [BlockAndSurf] => C:\Program Files (x86)\ver1BlockAndSurf\BlockAndSurf.exe
HKU\S-1-5-21-2701147688-1485282812-3783366192-1000\...\Run: [] => [X]
HKU\S-1-5-21-2701147688-1485282812-3783366192-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_Plugin.exe [851632 2014-07-09] (Adobe Systems Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: No Name -> {120A8821-2BEE-4C29-BCDA-62C577781992} ->  No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Amazon.de
FF SelectedSearchEngine: Amazon.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Computer, Inc.)
FF SearchPlugin: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\searchplugins\google-maps.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: cosstminn - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\7x_yu3@ohadgkp.net [2014-08-03]
FF Extension: DoNotTrackMe: Online Privacy Protection - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\donottrackplus@abine.com [2014-07-12]
FF Extension: CouponsHelper - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\{239cc760-75a9-4276-b1fc-c0ceb963f373}.xpi [2013-12-14]
FF Extension: Adblock Plus - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-14]
FF Extension: Recorder Toolbar - C:\Program Files (x86)\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2} [2014-08-03]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-29]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-07-29]
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (YouTube) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-09]
CHR Extension: (Google-Suche) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-09]
CHR Extension: (cosstminn) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm [2014-08-02]
CHR Extension: (Google Mail) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-09]
CHR Extension: (cosstminn) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm\2.0 [2014-08-02]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-17] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-17] (pdfforge GmbH)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [247152 2009-02-16] ()
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 OlyUsbCam; C:\Windows\System32\DRIVERS\OlyUsbCam.sys [24512 2007-01-12] (OLYMPUS IMAGING CORP.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-11-12] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-13 22:19 - 2014-08-13 22:19 - 00000000 ____D () C:\Users\Simon\Downloads\FRST-OlderVersion
2014-08-13 20:03 - 2014-08-13 20:03 - 02347384 _____ (ESET) C:\Users\Simon\Downloads\esetsmartinstaller_deu.exe
2014-08-13 20:03 - 2014-08-13 20:03 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-08-12 22:38 - 2014-08-12 22:38 - 00003051 _____ () C:\Users\Simon\Downloads\mbam.txt
2014-08-11 23:52 - 2014-08-13 21:59 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-11 23:52 - 2014-08-11 23:52 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-11 23:52 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-11 23:52 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-11 23:52 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-11 23:50 - 2014-08-11 23:50 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Simon\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-11 23:48 - 2014-08-11 23:48 - 00000625 _____ () C:\Users\Simon\Desktop\JRT.txt
2014-08-11 23:43 - 2014-08-11 23:43 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT(1).exe
2014-08-11 23:36 - 2014-08-11 23:36 - 01366203 _____ () C:\Users\Simon\Downloads\adwcleaner_3.304.exe
2014-08-11 22:34 - 2014-08-11 22:34 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT.exe
2014-08-11 22:34 - 2014-08-11 22:34 - 00000000 ____D () C:\Windows\ERUNT
2014-08-11 22:27 - 2014-08-11 22:27 - 00016383 _____ () C:\Users\Simon\Desktop\Vdez5405.htm
2014-08-11 22:00 - 2014-08-11 22:00 - 00036423 _____ () C:\Users\Simon\Downloads\Addition.txt
2014-08-11 21:58 - 2014-08-13 22:19 - 00018365 _____ () C:\Users\Simon\Downloads\FRST.txt
2014-08-11 21:58 - 2014-08-13 22:19 - 00000000 ____D () C:\FRST
2014-08-11 21:57 - 2014-08-13 22:19 - 02100224 _____ (Farbar) C:\Users\Simon\Downloads\FRST64.exe
2014-08-11 21:45 - 2014-08-11 21:45 - 01101648 _____ () C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer(1).exe
2014-08-11 21:36 - 2014-08-11 21:36 - 00054156 ____H () C:\Windows\QTFont.qfn
2014-08-11 21:36 - 2014-08-11 21:36 - 00001409 _____ () C:\Windows\QTFont.for
2014-08-11 20:22 - 2014-08-11 20:22 - 00027909 _____ () C:\Users\Simon\.recently-used.xbel
2014-08-06 21:34 - 2014-08-06 21:34 - 00001276 _____ () C:\Users\Public\Desktop\NCH Suite.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001126 _____ () C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2014-08-06 21:30 - 2014-08-06 21:30 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\mp3DirectCut
2014-08-06 21:28 - 2014-08-06 21:28 - 00001063 _____ () C:\Users\Simon\Desktop\mp3DirectCut.lnk
2014-08-06 21:27 - 2014-08-06 21:28 - 00308709 _____ () C:\Users\Simon\Downloads\mpdc_16957.exe
2014-08-03 18:25 - 2014-08-03 23:59 - 00018371 _____ () C:\Users\Simon\Desktop\Brief an Bob.odt
2014-08-03 13:00 - 2014-08-03 13:14 - 00000000 ____D () C:\Users\Simon\Desktop\100EOS7D
2014-08-03 11:51 - 2014-08-03 11:51 - 00000000 ____D () C:\Users\Simon\Tracing
2014-08-03 11:50 - 2014-08-03 11:50 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-03 11:50 - 2014-08-03 11:50 - 00000000 ____D () C:\Windows\de
2014-08-03 00:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-03 00:17 - 2014-08-11 23:39 - 00000000 ____D () C:\AdwCleaner
2014-08-03 00:17 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-08-03 00:17 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-08-03 00:13 - 2014-08-03 00:13 - 00000000 ____D () C:\Users\Simon\AppData\Local\MedienTeam66
2014-08-03 00:11 - 2014-08-03 00:11 - 00000000 ____D () C:\Users\Simon\Documents\YouTube Recordings
2014-08-03 00:10 - 2014-08-12 00:10 - 00000314 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-08-03 00:10 - 2014-08-03 00:10 - 10061576 _____ (MedienTeam66 Verlags GmbH ) C:\Users\Simon\Downloads\MP3_Recorder_for_YouTube.exe
2014-08-03 00:10 - 2014-08-03 00:10 - 00002908 _____ () C:\Windows\System32\Tasks\MT66 Software Update
2014-08-03 00:10 - 2014-08-03 00:10 - 00000000 ____D () C:\Program Files (x86)\MedienTeam66
2014-08-03 00:03 - 2014-08-03 00:03 - 00003150 _____ () C:\Windows\System32\Tasks\{F14520F0-57E8-473B-B7CA-55041ED72F79}
2014-08-03 00:01 - 2014-08-03 00:01 - 00000114 _____ () C:\Windows\wininit.ini
2014-08-02 23:57 - 2014-08-03 00:02 - 00000000 ____D () C:\ProgramData\8aa681781fbef9a8
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Packages
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator
2014-08-02 23:56 - 2014-08-11 23:30 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-08-02 23:56 - 2014-08-02 23:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-08-02 23:55 - 2014-08-02 23:55 - 00003178 _____ () C:\Windows\System32\Tasks\YourFile DownloaderInstaller Starter
2014-08-02 18:20 - 2014-08-02 21:16 - 00000000 ____D () C:\Users\Simon\Desktop\2014-08-02 RC Auto
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ___HD () C:\Users\Simon\Documents\ShadowEditFiles
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ____D () C:\Users\Simon\Documents\CyberLink
2014-08-01 20:25 - 2014-08-01 20:25 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\CyberLink
2014-08-01 19:48 - 2014-08-06 21:55 - 00000000 ____D () C:\Users\Simon\Desktop\Videomaterial C u A
2014-07-29 21:51 - 2014-07-29 21:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-26 21:57 - 2014-08-05 20:11 - 00000000 ____D () C:\Users\Simon\Desktop\LaLala Bob
2014-07-26 02:38 - 2014-07-27 01:00 - 00000000 ____D () C:\Users\Simon\Desktop\FCKW
2014-07-24 18:40 - 2014-07-24 19:15 - 00000000 ____D () C:\Users\Simon\Desktop\Bob
2014-07-15 18:49 - 2014-07-15 20:06 - 00000000 ____D () C:\Users\Simon\Desktop\2014-07-14 Rhein

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-13 22:19 - 2014-08-13 22:19 - 00000000 ____D () C:\Users\Simon\Downloads\FRST-OlderVersion
2014-08-13 22:19 - 2014-08-11 21:58 - 00018365 _____ () C:\Users\Simon\Downloads\FRST.txt
2014-08-13 22:19 - 2014-08-11 21:58 - 00000000 ____D () C:\FRST
2014-08-13 22:19 - 2014-08-11 21:57 - 02100224 _____ (Farbar) C:\Users\Simon\Downloads\FRST64.exe
2014-08-13 22:00 - 2012-05-18 18:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-13 21:59 - 2014-08-11 23:52 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-13 21:49 - 2010-08-27 08:28 - 01303564 _____ () C:\Windows\WindowsUpdate.log
2014-08-13 21:48 - 2010-09-19 19:27 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-13 20:03 - 2014-08-13 20:03 - 02347384 _____ (ESET) C:\Users\Simon\Downloads\esetsmartinstaller_deu.exe
2014-08-13 20:03 - 2014-08-13 20:03 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-08-13 19:09 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-13 19:09 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-13 19:01 - 2010-09-19 19:27 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-13 19:01 - 2010-08-27 08:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-13 19:01 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-13 19:01 - 2009-07-14 06:51 - 00213802 _____ () C:\Windows\setupact.log
2014-08-12 23:36 - 2010-09-11 19:20 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\ICQ
2014-08-12 22:38 - 2014-08-12 22:38 - 00003051 _____ () C:\Users\Simon\Downloads\mbam.txt
2014-08-12 21:49 - 2010-09-12 14:19 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{6D5A817C-B063-4DF2-95A2-90BC099FE999}
2014-08-12 18:11 - 2009-11-19 00:09 - 01028856 _____ () C:\Windows\PFRO.log
2014-08-12 00:10 - 2014-08-03 00:10 - 00000314 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-08-11 23:52 - 2014-08-11 23:52 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-11 23:50 - 2014-08-11 23:50 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Simon\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-11 23:48 - 2014-08-11 23:48 - 00000625 _____ () C:\Users\Simon\Desktop\JRT.txt
2014-08-11 23:43 - 2014-08-11 23:43 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT(1).exe
2014-08-11 23:39 - 2014-08-03 00:17 - 00000000 ____D () C:\AdwCleaner
2014-08-11 23:36 - 2014-08-11 23:36 - 01366203 _____ () C:\Users\Simon\Downloads\adwcleaner_3.304.exe
2014-08-11 23:30 - 2014-08-02 23:56 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-08-11 23:27 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-08-11 22:34 - 2014-08-11 22:34 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT.exe
2014-08-11 22:34 - 2014-08-11 22:34 - 00000000 ____D () C:\Windows\ERUNT
2014-08-11 22:27 - 2014-08-11 22:27 - 00016383 _____ () C:\Users\Simon\Desktop\Vdez5405.htm
2014-08-11 22:00 - 2014-08-11 22:00 - 00036423 _____ () C:\Users\Simon\Downloads\Addition.txt
2014-08-11 21:45 - 2014-08-11 21:45 - 01101648 _____ () C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer(1).exe
2014-08-11 21:36 - 2014-08-11 21:36 - 00054156 ____H () C:\Windows\QTFont.qfn
2014-08-11 21:36 - 2014-08-11 21:36 - 00001409 _____ () C:\Windows\QTFont.for
2014-08-11 20:22 - 2014-08-11 20:22 - 00027909 _____ () C:\Users\Simon\.recently-used.xbel
2014-08-11 20:22 - 2010-09-12 19:10 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\gtk-2.0
2014-08-11 20:22 - 2010-09-09 20:59 - 00000000 ____D () C:\Users\Simon
2014-08-11 20:21 - 2010-09-12 14:30 - 00000000 ____D () C:\Users\Simon\.gimp-2.6
2014-08-06 21:55 - 2014-08-01 19:48 - 00000000 ____D () C:\Users\Simon\Desktop\Videomaterial C u A
2014-08-06 21:34 - 2014-08-06 21:34 - 00001276 _____ () C:\Users\Public\Desktop\NCH Suite.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001126 _____ () C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2014-08-06 21:30 - 2014-08-06 21:30 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\mp3DirectCut
2014-08-06 21:28 - 2014-08-06 21:28 - 00001063 _____ () C:\Users\Simon\Desktop\mp3DirectCut.lnk
2014-08-06 21:28 - 2014-08-06 21:27 - 00308709 _____ () C:\Users\Simon\Downloads\mpdc_16957.exe
2014-08-05 20:11 - 2014-07-26 21:57 - 00000000 ____D () C:\Users\Simon\Desktop\LaLala Bob
2014-08-03 23:59 - 2014-08-03 18:25 - 00018371 _____ () C:\Users\Simon\Desktop\Brief an Bob.odt
2014-08-03 23:25 - 2010-11-24 21:08 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\Skype
2014-08-03 13:14 - 2014-08-03 13:00 - 00000000 ____D () C:\Users\Simon\Desktop\100EOS7D
2014-08-03 12:08 - 2010-08-27 18:19 - 00699432 _____ () C:\Windows\system32\perfh007.dat
2014-08-03 12:08 - 2010-08-27 18:19 - 00149572 _____ () C:\Windows\system32\perfc007.dat
2014-08-03 12:08 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-03 11:55 - 2013-07-04 23:25 - 00000000 ____D () C:\Users\Simon\AppData\Local\Windows Live
2014-08-03 11:51 - 2014-08-03 11:51 - 00000000 ____D () C:\Users\Simon\Tracing
2014-08-03 11:50 - 2014-08-03 11:50 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-03 11:50 - 2014-08-03 11:50 - 00000000 ____D () C:\Windows\de
2014-08-03 11:50 - 2013-07-04 23:32 - 00001494 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-08-03 11:50 - 2013-07-04 23:32 - 00001378 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-08-03 11:50 - 2010-08-27 08:51 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-03 11:49 - 2013-07-04 23:32 - 00002538 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-08-03 11:49 - 2013-07-04 23:31 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-03 11:49 - 2010-08-27 08:51 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-08-03 11:47 - 2010-08-27 08:52 - 00133212 _____ () C:\Windows\DirectX.log
2014-08-03 00:18 - 2011-04-30 13:49 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-03 00:18 - 2011-04-30 13:49 - 00001057 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-03 00:18 - 2010-09-11 19:20 - 00000000 ____D () C:\ProgramData\ICQ
2014-08-03 00:18 - 2010-09-09 21:00 - 00001041 _____ () C:\Users\Simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-03 00:13 - 2014-08-03 00:13 - 00000000 ____D () C:\Users\Simon\AppData\Local\MedienTeam66
2014-08-03 00:11 - 2014-08-03 00:11 - 00000000 ____D () C:\Users\Simon\Documents\YouTube Recordings
2014-08-03 00:10 - 2014-08-03 00:10 - 10061576 _____ (MedienTeam66 Verlags GmbH ) C:\Users\Simon\Downloads\MP3_Recorder_for_YouTube.exe
2014-08-03 00:10 - 2014-08-03 00:10 - 00002908 _____ () C:\Windows\System32\Tasks\MT66 Software Update
2014-08-03 00:10 - 2014-08-03 00:10 - 00000000 ____D () C:\Program Files (x86)\MedienTeam66
2014-08-03 00:03 - 2014-08-03 00:03 - 00003150 _____ () C:\Windows\System32\Tasks\{F14520F0-57E8-473B-B7CA-55041ED72F79}
2014-08-03 00:02 - 2014-08-02 23:57 - 00000000 ____D () C:\ProgramData\8aa681781fbef9a8
2014-08-03 00:01 - 2014-08-03 00:01 - 00000114 _____ () C:\Windows\wininit.ini
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Packages
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator
2014-08-02 23:57 - 2010-09-19 19:26 - 00000000 ____D () C:\Users\Simon\AppData\Local\Google
2014-08-02 23:57 - 2009-11-18 23:56 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-02 23:56 - 2014-08-02 23:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-08-02 23:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-08-02 23:55 - 2014-08-02 23:55 - 00003178 _____ () C:\Windows\System32\Tasks\YourFile DownloaderInstaller Starter
2014-08-02 21:20 - 2010-11-27 00:10 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\XnView
2014-08-02 21:16 - 2014-08-02 18:20 - 00000000 ____D () C:\Users\Simon\Desktop\2014-08-02 RC Auto
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ___HD () C:\Users\Simon\Documents\ShadowEditFiles
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ____D () C:\Users\Simon\Documents\CyberLink
2014-08-01 20:26 - 2010-08-27 08:45 - 00000000 ____D () C:\ProgramData\CyberLink
2014-08-01 20:25 - 2014-08-01 20:25 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\CyberLink
2014-07-31 17:31 - 2012-04-27 19:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-29 21:51 - 2014-07-29 21:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-27 01:00 - 2014-07-26 02:38 - 00000000 ____D () C:\Users\Simon\Desktop\FCKW
2014-07-26 11:54 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-24 23:22 - 2013-03-14 00:32 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 23:22 - 2013-03-14 00:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 20:20 - 2013-03-14 00:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 19:15 - 2014-07-24 18:40 - 00000000 ____D () C:\Users\Simon\Desktop\Bob
2014-07-22 17:52 - 2014-05-06 23:20 - 00000000 ____D () C:\Users\Simon\Documents\Bewerbungen
2014-07-20 13:09 - 2013-12-10 22:15 - 00245740 _____ () C:\Users\Simon\Desktop\FB Titel.xcf
2014-07-18 18:23 - 2010-09-09 20:59 - 00000000 ___RD () C:\Users\Simon\Eigene Bilder
2014-07-15 20:06 - 2014-07-15 18:49 - 00000000 ____D () C:\Users\Simon\Desktop\2014-07-14 Rhein

Some content of TEMP:
====================
C:\Users\Simon\AppData\Local\Temp\02b673270b0b50a8d44ad649a71454c1.exe
C:\Users\Simon\AppData\Local\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Users\Simon\AppData\Local\Temp\AskSLib.dll
C:\Users\Simon\AppData\Local\Temp\avgnt.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-1.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-2.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-3.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe.exe
C:\Users\Simon\AppData\Local\Temp\htmlayout.dll
C:\Users\Simon\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\NEventMessages.dll
C:\Users\Simon\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Simon\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Simon\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Simon\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Simon\AppData\Local\Temp\nvStInst.exe
C:\Users\Simon\AppData\Local\Temp\Quarantine.exe
C:\Users\Simon\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Simon\AppData\Local\Temp\toolbar20178192.exe
C:\Users\Simon\AppData\Local\Temp\v-beo6u-.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-07 23:33

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

CHR Extension: (cosstminn) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm\2.0 [2014-08-02]
CHR Extension: (cosstminn) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm [2014-08-02]
FF Extension: cosstminn - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\7x_yu3@ohadgkp.net [2014-08-03]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Und bitte neue FRST Logs. Haken setzen bei addition.txt dann auf Scan klicken

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-08-2014
Ran by Simon at 2014-08-14 20:52:05 Run:2
Running from C:\Users\Simon\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CHR Extension: (cosstminn) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm\2.0 [2014-08-02]
CHR Extension: (cosstminn) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm [2014-08-02]
FF Extension: cosstminn - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\7x_yu3@ohadgkp.net [2014-08-03]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
*****************

C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm\2.0 => Moved successfully.
C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmclmnlfcilmdoiemnbcgffodbiemcm => Moved successfully.
C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\7x_yu3@ohadgkp.net => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.

==== End of Fixlog ====
         

Bitte noch ein neues FRST Log inkl. Addition.txt

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-08-2014
Ran by Simon (administrator) on SIMON-PC on 15-08-2014 20:25:14
Running from C:\Users\Simon\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
() C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\QuickTime\qttask.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-10] (Egis Technology Inc.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-10-13] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352 2009-10-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-13] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [629280 2009-08-18] ()
HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [128296 2009-11-16] (CyberLink Corp.)
HKLM-x32\...\Run: [PlayMovie] => C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-11-12] (Acer Corp.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\qttask.exe [282624 2006-09-01] (Apple Computer, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [BlockAndSurf] => C:\Program Files (x86)\ver1BlockAndSurf\BlockAndSurf.exe
HKU\S-1-5-21-2701147688-1485282812-3783366192-1000\...\Run: [] => [X]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: No Name -> {120A8821-2BEE-4C29-BCDA-62C577781992} ->  No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Wikipedia (de)
FF SelectedSearchEngine: Wikipedia (de)
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Computer, Inc.)
FF SearchPlugin: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\searchplugins\google-maps.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DoNotTrackMe: Online Privacy Protection - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\donottrackplus@abine.com [2014-07-12]
FF Extension: CouponsHelper - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\{239cc760-75a9-4276-b1fc-c0ceb963f373}.xpi [2013-12-14]
FF Extension: Adblock Plus - C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\sv53x1ay.default-1350505399289\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-14]
FF Extension: Recorder Toolbar - C:\Program Files (x86)\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2} [2014-08-03]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-29]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-07-29]
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (YouTube) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-09]
CHR Extension: (Google-Suche) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-09]
CHR Extension: (Google Mail) - C:\Users\Simon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-09]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-17] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-17] (pdfforge GmbH)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [247152 2009-02-16] ()
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-15] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 OlyUsbCam; C:\Windows\System32\DRIVERS\OlyUsbCam.sys [24512 2007-01-12] (OLYMPUS IMAGING CORP.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-11-12] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-15 00:35 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-15 00:35 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-15 00:35 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-15 00:35 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-15 00:35 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-15 00:35 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-15 00:35 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-15 00:35 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-14 23:57 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-14 23:57 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-14 23:57 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-14 23:57 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-14 23:57 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-14 23:57 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-14 23:57 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-14 23:57 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-14 23:57 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-14 23:57 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-14 23:57 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-14 23:57 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-14 23:57 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-14 23:57 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-14 23:57 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-14 23:57 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-14 23:57 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-14 23:57 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-14 23:57 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-14 23:57 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-14 23:57 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-14 23:57 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-14 23:57 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-14 23:57 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-14 23:57 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-14 23:57 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-14 23:57 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-14 23:57 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-14 23:57 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-14 23:57 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-14 23:57 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-14 23:57 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-14 23:57 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-14 23:57 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-14 23:57 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-14 23:57 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-14 23:57 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-14 23:57 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-14 23:57 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-14 23:57 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-14 23:57 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-14 23:57 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-14 23:57 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-14 23:57 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-14 23:57 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-14 23:57 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-14 23:57 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-14 23:57 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-14 23:57 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-14 23:57 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-14 23:57 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-14 23:57 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-14 23:57 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-14 23:57 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-14 23:57 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-14 23:57 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-14 23:30 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-14 23:30 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-14 23:30 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-14 23:30 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-14 23:30 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-14 23:30 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-14 23:30 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-14 23:30 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-14 23:30 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-14 23:30 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-14 23:30 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-14 23:30 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-14 23:25 - 2014-07-16 05:25 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-14 23:25 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-14 23:25 - 2014-07-16 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-14 23:25 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-14 23:25 - 2014-07-16 04:12 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-14 23:25 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-14 23:25 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-14 23:25 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-14 23:25 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-14 23:25 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-14 23:25 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-14 23:25 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-14 23:25 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-14 23:24 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-14 23:24 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-14 23:18 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-14 23:18 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-14 23:18 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-14 23:18 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-13 22:19 - 2014-08-13 22:19 - 00000000 ____D () C:\Users\Simon\Downloads\FRST-OlderVersion
2014-08-13 20:03 - 2014-08-13 20:03 - 02347384 _____ (ESET) C:\Users\Simon\Downloads\esetsmartinstaller_deu.exe
2014-08-13 20:03 - 2014-08-13 20:03 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-08-12 22:38 - 2014-08-12 22:38 - 00003051 _____ () C:\Users\Simon\Downloads\mbam.txt
2014-08-11 23:52 - 2014-08-15 20:08 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-11 23:52 - 2014-08-11 23:52 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-11 23:52 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-11 23:52 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-11 23:52 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-11 23:50 - 2014-08-11 23:50 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Simon\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-11 23:43 - 2014-08-11 23:43 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT(1).exe
2014-08-11 23:36 - 2014-08-11 23:36 - 01366203 _____ () C:\Users\Simon\Downloads\adwcleaner_3.304.exe
2014-08-11 22:34 - 2014-08-11 22:34 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT.exe
2014-08-11 22:34 - 2014-08-11 22:34 - 00000000 ____D () C:\Windows\ERUNT
2014-08-11 22:27 - 2014-08-11 22:27 - 00016383 _____ () C:\Users\Simon\Desktop\Vdez5405.htm
2014-08-11 22:00 - 2014-08-14 20:48 - 00040839 _____ () C:\Users\Simon\Downloads\Addition.txt
2014-08-11 21:58 - 2014-08-15 20:25 - 00018151 _____ () C:\Users\Simon\Downloads\FRST.txt
2014-08-11 21:58 - 2014-08-15 20:25 - 00000000 ____D () C:\FRST
2014-08-11 21:57 - 2014-08-13 22:19 - 02100224 _____ (Farbar) C:\Users\Simon\Downloads\FRST64.exe
2014-08-11 21:45 - 2014-08-11 21:45 - 01101648 _____ () C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer(1).exe
2014-08-11 21:36 - 2014-08-11 21:36 - 00054156 ____H () C:\Windows\QTFont.qfn
2014-08-11 21:36 - 2014-08-11 21:36 - 00001409 _____ () C:\Windows\QTFont.for
2014-08-11 20:22 - 2014-08-11 20:22 - 00027909 _____ () C:\Users\Simon\.recently-used.xbel
2014-08-06 21:34 - 2014-08-06 21:34 - 00001276 _____ () C:\Users\Public\Desktop\NCH Suite.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001126 _____ () C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2014-08-06 21:30 - 2014-08-06 21:30 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\mp3DirectCut
2014-08-06 21:28 - 2014-08-06 21:28 - 00001063 _____ () C:\Users\Simon\Desktop\mp3DirectCut.lnk
2014-08-06 21:27 - 2014-08-06 21:28 - 00308709 _____ () C:\Users\Simon\Downloads\mpdc_16957.exe
2014-08-03 11:51 - 2014-08-03 11:51 - 00000000 ____D () C:\Users\Simon\Tracing
2014-08-03 11:50 - 2014-08-03 11:50 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-03 11:50 - 2014-08-03 11:50 - 00000000 ____D () C:\Windows\de
2014-08-03 00:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-03 00:17 - 2014-08-11 23:39 - 00000000 ____D () C:\AdwCleaner
2014-08-03 00:17 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-08-03 00:17 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-08-03 00:13 - 2014-08-03 00:13 - 00000000 ____D () C:\Users\Simon\AppData\Local\MedienTeam66
2014-08-03 00:11 - 2014-08-03 00:11 - 00000000 ____D () C:\Users\Simon\Documents\YouTube Recordings
2014-08-03 00:10 - 2014-08-15 00:10 - 00000314 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-08-03 00:10 - 2014-08-03 00:10 - 10061576 _____ (MedienTeam66 Verlags GmbH ) C:\Users\Simon\Downloads\MP3_Recorder_for_YouTube.exe
2014-08-03 00:10 - 2014-08-03 00:10 - 00002908 _____ () C:\Windows\System32\Tasks\MT66 Software Update
2014-08-03 00:10 - 2014-08-03 00:10 - 00000000 ____D () C:\Program Files (x86)\MedienTeam66
2014-08-03 00:03 - 2014-08-03 00:03 - 00003150 _____ () C:\Windows\System32\Tasks\{F14520F0-57E8-473B-B7CA-55041ED72F79}
2014-08-03 00:01 - 2014-08-03 00:01 - 00000114 _____ () C:\Windows\wininit.ini
2014-08-02 23:57 - 2014-08-03 00:02 - 00000000 ____D () C:\ProgramData\8aa681781fbef9a8
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Packages
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator
2014-08-02 23:56 - 2014-08-11 23:30 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-08-02 23:56 - 2014-08-02 23:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-08-02 23:55 - 2014-08-02 23:55 - 00003178 _____ () C:\Windows\System32\Tasks\YourFile DownloaderInstaller Starter
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ___HD () C:\Users\Simon\Documents\ShadowEditFiles
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ____D () C:\Users\Simon\Documents\CyberLink
2014-08-01 20:25 - 2014-08-01 20:25 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\CyberLink
2014-08-01 19:48 - 2014-08-06 21:55 - 00000000 ____D () C:\Users\Simon\Desktop\Videomaterial C u A
2014-07-29 21:51 - 2014-07-29 21:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-26 21:57 - 2014-08-05 20:11 - 00000000 ____D () C:\Users\Simon\Desktop\LaLala Bob
2014-07-26 02:38 - 2014-07-27 01:00 - 00000000 ____D () C:\Users\Simon\Desktop\FCKW
2014-07-24 18:40 - 2014-07-24 19:15 - 00000000 ____D () C:\Users\Simon\Desktop\Bob

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-15 20:25 - 2014-08-11 21:58 - 00018151 _____ () C:\Users\Simon\Downloads\FRST.txt
2014-08-15 20:25 - 2014-08-11 21:58 - 00000000 ____D () C:\FRST
2014-08-15 20:25 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-15 20:25 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-15 20:15 - 2010-08-27 08:28 - 01198137 _____ () C:\Windows\WindowsUpdate.log
2014-08-15 20:08 - 2014-08-11 23:52 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-15 20:08 - 2010-09-19 19:27 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-15 20:08 - 2010-09-09 20:59 - 00000000 ___RD () C:\Users\Simon\Eigene Bilder
2014-08-15 20:07 - 2010-08-27 08:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-15 20:07 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-15 20:07 - 2009-07-14 06:51 - 00213914 _____ () C:\Windows\setupact.log
2014-08-15 20:07 - 2009-07-14 06:45 - 00438200 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-15 20:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-15 00:48 - 2010-09-19 19:27 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-15 00:44 - 2013-07-30 00:40 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-15 00:39 - 2010-09-18 21:01 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-15 00:34 - 2014-05-07 00:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-15 00:10 - 2014-08-03 00:10 - 00000314 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-08-15 00:00 - 2012-05-18 18:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-14 23:13 - 2010-09-12 14:19 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{6D5A817C-B063-4DF2-95A2-90BC099FE999}
2014-08-14 22:03 - 2010-11-24 21:08 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\Skype
2014-08-14 21:43 - 2010-09-12 14:30 - 00000000 ____D () C:\Users\Simon\.gimp-2.6
2014-08-14 20:48 - 2014-08-11 22:00 - 00040839 _____ () C:\Users\Simon\Downloads\Addition.txt
2014-08-13 22:19 - 2014-08-13 22:19 - 00000000 ____D () C:\Users\Simon\Downloads\FRST-OlderVersion
2014-08-13 22:19 - 2014-08-11 21:57 - 02100224 _____ (Farbar) C:\Users\Simon\Downloads\FRST64.exe
2014-08-13 20:03 - 2014-08-13 20:03 - 02347384 _____ (ESET) C:\Users\Simon\Downloads\esetsmartinstaller_deu.exe
2014-08-13 20:03 - 2014-08-13 20:03 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-08-12 23:36 - 2010-09-11 19:20 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\ICQ
2014-08-12 22:38 - 2014-08-12 22:38 - 00003051 _____ () C:\Users\Simon\Downloads\mbam.txt
2014-08-12 18:11 - 2009-11-19 00:09 - 01028856 _____ () C:\Windows\PFRO.log
2014-08-11 23:52 - 2014-08-11 23:52 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-11 23:52 - 2014-08-11 23:52 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-11 23:50 - 2014-08-11 23:50 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Simon\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-11 23:43 - 2014-08-11 23:43 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT(1).exe
2014-08-11 23:39 - 2014-08-03 00:17 - 00000000 ____D () C:\AdwCleaner
2014-08-11 23:36 - 2014-08-11 23:36 - 01366203 _____ () C:\Users\Simon\Downloads\adwcleaner_3.304.exe
2014-08-11 23:30 - 2014-08-02 23:56 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-08-11 23:27 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-08-11 22:34 - 2014-08-11 22:34 - 01016261 _____ (Thisisu) C:\Users\Simon\Downloads\JRT.exe
2014-08-11 22:34 - 2014-08-11 22:34 - 00000000 ____D () C:\Windows\ERUNT
2014-08-11 22:27 - 2014-08-11 22:27 - 00016383 _____ () C:\Users\Simon\Desktop\Vdez5405.htm
2014-08-11 21:45 - 2014-08-11 21:45 - 01101648 _____ () C:\Users\Simon\Downloads\AdwCleaner - CHIP-Installer(1).exe
2014-08-11 21:36 - 2014-08-11 21:36 - 00054156 ____H () C:\Windows\QTFont.qfn
2014-08-11 21:36 - 2014-08-11 21:36 - 00001409 _____ () C:\Windows\QTFont.for
2014-08-11 20:22 - 2014-08-11 20:22 - 00027909 _____ () C:\Users\Simon\.recently-used.xbel
2014-08-11 20:22 - 2010-09-12 19:10 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\gtk-2.0
2014-08-11 20:22 - 2010-09-09 20:59 - 00000000 ____D () C:\Users\Simon
2014-08-07 04:06 - 2014-08-14 23:18 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-14 23:18 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-06 21:55 - 2014-08-01 19:48 - 00000000 ____D () C:\Users\Simon\Desktop\Videomaterial C u A
2014-08-06 21:34 - 2014-08-06 21:34 - 00001276 _____ () C:\Users\Public\Desktop\NCH Suite.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00001126 _____ () C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-08-06 21:34 - 2014-08-06 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2014-08-06 21:30 - 2014-08-06 21:30 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\mp3DirectCut
2014-08-06 21:28 - 2014-08-06 21:28 - 00001063 _____ () C:\Users\Simon\Desktop\mp3DirectCut.lnk
2014-08-06 21:28 - 2014-08-06 21:27 - 00308709 _____ () C:\Users\Simon\Downloads\mpdc_16957.exe
2014-08-05 20:11 - 2014-07-26 21:57 - 00000000 ____D () C:\Users\Simon\Desktop\LaLala Bob
2014-08-03 12:08 - 2010-08-27 18:19 - 00699432 _____ () C:\Windows\system32\perfh007.dat
2014-08-03 12:08 - 2010-08-27 18:19 - 00149572 _____ () C:\Windows\system32\perfc007.dat
2014-08-03 12:08 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-03 11:55 - 2013-07-04 23:25 - 00000000 ____D () C:\Users\Simon\AppData\Local\Windows Live
2014-08-03 11:51 - 2014-08-03 11:51 - 00000000 ____D () C:\Users\Simon\Tracing
2014-08-03 11:50 - 2014-08-03 11:50 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-03 11:50 - 2014-08-03 11:50 - 00000000 ____D () C:\Windows\de
2014-08-03 11:50 - 2013-07-04 23:32 - 00001494 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-08-03 11:50 - 2013-07-04 23:32 - 00001378 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-08-03 11:50 - 2010-08-27 08:51 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-03 11:49 - 2013-07-04 23:32 - 00002538 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-08-03 11:49 - 2013-07-04 23:31 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-03 11:49 - 2010-08-27 08:51 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-08-03 11:47 - 2010-08-27 08:52 - 00133212 _____ () C:\Windows\DirectX.log
2014-08-03 00:18 - 2011-04-30 13:49 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-03 00:18 - 2011-04-30 13:49 - 00001057 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-03 00:18 - 2010-09-11 19:20 - 00000000 ____D () C:\ProgramData\ICQ
2014-08-03 00:18 - 2010-09-09 21:00 - 00001041 _____ () C:\Users\Simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-03 00:13 - 2014-08-03 00:13 - 00000000 ____D () C:\Users\Simon\AppData\Local\MedienTeam66
2014-08-03 00:11 - 2014-08-03 00:11 - 00000000 ____D () C:\Users\Simon\Documents\YouTube Recordings
2014-08-03 00:10 - 2014-08-03 00:10 - 10061576 _____ (MedienTeam66 Verlags GmbH ) C:\Users\Simon\Downloads\MP3_Recorder_for_YouTube.exe
2014-08-03 00:10 - 2014-08-03 00:10 - 00002908 _____ () C:\Windows\System32\Tasks\MT66 Software Update
2014-08-03 00:10 - 2014-08-03 00:10 - 00000000 ____D () C:\Program Files (x86)\MedienTeam66
2014-08-03 00:03 - 2014-08-03 00:03 - 00003150 _____ () C:\Windows\System32\Tasks\{F14520F0-57E8-473B-B7CA-55041ED72F79}
2014-08-03 00:02 - 2014-08-02 23:57 - 00000000 ____D () C:\ProgramData\8aa681781fbef9a8
2014-08-03 00:01 - 2014-08-03 00:01 - 00000114 _____ () C:\Windows\wininit.ini
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Packages
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Simon\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Gast
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-08-02 23:57 - 2014-08-02 23:57 - 00000000 ____D () C:\Users\Administrator
2014-08-02 23:57 - 2010-09-19 19:26 - 00000000 ____D () C:\Users\Simon\AppData\Local\Google
2014-08-02 23:57 - 2009-11-18 23:56 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-02 23:56 - 2014-08-02 23:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-08-02 23:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-08-02 23:55 - 2014-08-02 23:55 - 00003178 _____ () C:\Windows\System32\Tasks\YourFile DownloaderInstaller Starter
2014-08-02 21:20 - 2010-11-27 00:10 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\XnView
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ___HD () C:\Users\Simon\Documents\ShadowEditFiles
2014-08-01 20:26 - 2014-08-01 20:26 - 00000000 ____D () C:\Users\Simon\Documents\CyberLink
2014-08-01 20:26 - 2010-08-27 08:45 - 00000000 ____D () C:\ProgramData\CyberLink
2014-08-01 20:25 - 2014-08-01 20:25 - 00000000 ____D () C:\Users\Simon\AppData\Roaming\CyberLink
2014-08-01 01:41 - 2014-08-14 23:57 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 01:16 - 2014-08-14 23:57 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-31 17:31 - 2012-04-27 19:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-29 21:51 - 2014-07-29 21:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-27 01:00 - 2014-07-26 02:38 - 00000000 ____D () C:\Users\Simon\Desktop\FCKW
2014-07-26 11:54 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-25 16:52 - 2014-08-14 23:57 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 16:02 - 2014-08-14 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 16:01 - 2014-08-14 23:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 15:51 - 2014-08-14 23:57 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-25 15:30 - 2014-08-14 23:57 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 15:28 - 2014-08-14 23:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 15:28 - 2014-08-14 23:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 15:25 - 2014-08-14 23:57 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 15:25 - 2014-08-14 23:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 15:11 - 2014-08-14 23:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 15:10 - 2014-08-14 23:57 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 15:04 - 2014-08-14 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-25 15:03 - 2014-08-14 23:57 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 15:00 - 2014-08-14 23:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 15:00 - 2014-08-14 23:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:59 - 2014-08-14 23:57 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:47 - 2014-08-14 23:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 14:40 - 2014-08-14 23:57 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 14:34 - 2014-08-14 23:57 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-25 14:34 - 2014-08-14 23:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-25 14:33 - 2014-08-14 23:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-14 23:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-25 14:28 - 2014-08-14 23:57 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 14:28 - 2014-08-14 23:57 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 14:21 - 2014-08-14 23:57 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-25 14:19 - 2014-08-14 23:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 14:18 - 2014-08-14 23:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-25 14:17 - 2014-08-14 23:57 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 14:17 - 2014-08-14 23:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-25 14:12 - 2014-08-14 23:57 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-25 14:10 - 2014-08-14 23:57 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 14:10 - 2014-08-14 23:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-25 14:08 - 2014-08-14 23:57 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-25 14:06 - 2014-08-14 23:57 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-25 13:52 - 2014-08-14 23:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-25 13:47 - 2014-08-14 23:57 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:43 - 2014-08-14 23:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-25 13:42 - 2014-08-14 23:57 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:39 - 2014-08-14 23:57 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:39 - 2014-08-14 23:57 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:36 - 2014-08-14 23:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-25 13:34 - 2014-08-14 23:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-25 13:29 - 2014-08-14 23:57 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-25 13:23 - 2014-08-14 23:57 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 13:13 - 2014-08-14 23:57 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-25 13:07 - 2014-08-14 23:57 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-25 13:07 - 2014-08-14 23:57 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-14 23:57 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-25 12:52 - 2014-08-14 23:57 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:26 - 2014-08-14 23:57 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-25 12:17 - 2014-08-14 23:57 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:09 - 2014-08-14 23:57 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-25 12:05 - 2014-08-14 23:57 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-25 12:00 - 2014-08-14 23:57 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-24 23:22 - 2013-03-14 00:32 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 23:22 - 2013-03-14 00:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 20:20 - 2013-03-14 00:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 19:15 - 2014-07-24 18:40 - 00000000 ____D () C:\Users\Simon\Desktop\Bob
2014-07-22 17:52 - 2014-05-06 23:20 - 00000000 ____D () C:\Users\Simon\Documents\Bewerbungen
2014-07-20 13:09 - 2013-12-10 22:15 - 00245740 _____ () C:\Users\Simon\Desktop\FB Titel.xcf
2014-07-16 05:25 - 2014-08-14 23:25 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-07-16 05:23 - 2014-08-14 23:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-07-16 04:46 - 2014-08-14 23:25 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-07-16 04:46 - 2014-08-14 23:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-07-16 04:12 - 2014-08-14 23:25 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

Some content of TEMP:
====================
C:\Users\Simon\AppData\Local\Temp\02b673270b0b50a8d44ad649a71454c1.exe
C:\Users\Simon\AppData\Local\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Users\Simon\AppData\Local\Temp\AskSLib.dll
C:\Users\Simon\AppData\Local\Temp\avgnt.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-1.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-2.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe-3.exe
C:\Users\Simon\AppData\Local\Temp\firefoxjre_exe.exe
C:\Users\Simon\AppData\Local\Temp\htmlayout.dll
C:\Users\Simon\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Simon\AppData\Local\Temp\NEventMessages.dll
C:\Users\Simon\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Simon\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Simon\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Simon\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Simon\AppData\Local\Temp\nvStInst.exe
C:\Users\Simon\AppData\Local\Temp\Quarantine.exe
C:\Users\Simon\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Simon\AppData\Local\Temp\toolbar20178192.exe
C:\Users\Simon\AppData\Local\Temp\v-beo6u-.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-07 23:33

==================== End Of Log ============================
         

--- --- ---

Bitte auch das aktuelle additions.txt posten !

Falls nicht vorhanden, neuer Scan, Haken setzen bei addition.txt dann auf Scan klicken

Kurzer Zwischenstand: Der DL Manager startet nicht mehr. Will ich aber im Firefox ein neuen Tab öffnen, dann kommt da der Link "chrome://quick_start/content/index.html"

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-08-2014
Ran by Simon at 2014-08-15 20:26:18
Running from C:\Users\Simon\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Arcade Deluxe (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 3.2.7116 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 3.2.7116 - CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{30075A70-B5D2-440B-AFA3-FB2021740121}) (Version: 2.0.2.19 - NewTech Infosystems)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3005 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.02.3006 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0812 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Backup Manager Advance (x32 Version: 2.0.2.19 - NewTech Infosystems) Hidden
Belkin Connect Wireless USB Adapter (HKLM-x32\...\InstallShield_{08B73C99-D071-488F-8861-5DDA897C510D}) (Version: 1.0.0.3 - Belkin)
Belkin Connect Wireless USB Adapter (x32 Version: 1.0.0.3 - Belkin) Hidden
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.3.1.5 - )
Canon Internet Library for ZoomBrowser EX (HKLM-x32\...\Canon Internet Library for ZoomBrowser EX) (Version: 1.5.1.4 - )
Canon RAW Image Task for ZoomBrowser EX (HKLM-x32\...\RAW Image Task) (Version: 2.7.0.3 - )
Canon Utilities Digital Photo Professional 3.11 (HKLM-x32\...\Digital Photo Professional) (Version: 3.11.31.0 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.1.0.1 - )
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.19.43 - )
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.0.1.0 - )
Canon Utilities WFT-E1/E2/E3 Utility (HKLM-x32\...\WFTK) (Version: 3.1.0.7 - )
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 5.8.0.74 - )
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3003 - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 7.0.3003 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dairy Dash (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}) (Version:  - Oberon Media)
DiRT 3 (x32 Version: 1.0.0003.130 - Codemasters) Hidden
Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}) (Version:  - Oberon Media)
EasyBits GO (HKCU\...\Game Organizer) (Version:  - EasyBits Media)
ElsterFormular (HKLM-x32\...\ElsterFormular 13.1.0.8394p) (Version: 15.0.13587 - Landesfinanzdirektion Thüringen)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GIMP 2.6.10 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.10 - The GIMP Team)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 1.00.3004 - Acer Incorporated)
ICQ7.6 (HKLM-x32\...\{7644E42D-B096-457F-8B5B-901238FC81AE}) (Version: 7.6 - ICQ)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3002 - Acer Incorporated)
Image Resizer Powertoy Clone for Windows (64 bit) (HKLM\...\{80A620C1-B22C-4781-A351-B14B8A37BFE3}) (Version: 2.1 - Brice Lambson)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Java 7 Update 10 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417010FF}) (Version: 7.0.100 - Oracle)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0000 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Logitech Gaming Software 64 (HKLM-x32\...\InstallShield_{58BF5D14-CBCF-473C-B0E0-A7955A23224E}) (Version:  - )
Logitech Gaming Software 64 (Version: 4.60 - Ihr Firmenname) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Merriam Websters Spell Jam (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477}) (Version:  - Oberon Media)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
Mp3tag v2.47b (HKLM-x32\...\Mp3tag) (Version: v2.47b - Florian Heidenreich)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MyWinLocker (HKLM-x32\...\{68301905-2DEA-41CE-A4D4-E8B443B099BA}) (Version: 3.1.76.0 - Egis Technology Inc.)
Neat Image v6 Demo (with plug-in) (HKLM-x32\...\Neat Image_is1) (Version:  - Neat Image team, ABSoft)
Nero 9 Essentials (HKLM-x32\...\{965ef942-36c2-4f92-b60f-c75cd1dcde2f}) (Version:  - Nero AG)
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero DiscSpeed (x32 Version: 5.4.7.201 - Nero AG) Hidden
Nero DiscSpeed Help (x32 Version: 5.4.4.100 - Nero AG) Hidden
Nero DriveSpeed (x32 Version: 4.4.7.201 - Nero AG) Hidden
Nero DriveSpeed Help (x32 Version: 4.4.4.100 - Nero AG) Hidden
Nero Express Help (x32 Version: 9.4.9.100 - Nero AG) Hidden
Nero InfoTool (x32 Version: 6.4.7.201 - Nero AG) Hidden
Nero InfoTool Help (x32 Version: 6.4.4.100 - Nero AG) Hidden
Nero Installer (x32 Version: 4.4.8.1 - Nero AG) Hidden
Nero Online Upgrade (x32 Version: 1.3.0.0 - Nero AG) Hidden
Nero StartSmart (x32 Version: 9.4.11.209 - Nero AG) Hidden
Nero StartSmart Help (x32 Version: 9.4.11.208 - Nero AG) Hidden
Nero StartSmart OEM (x32 Version: 9.16.0.100 - Nero AG) Hidden
NeroExpress (x32 Version: 9.4.10.505 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.48.0 - Nokia)
Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Hidden
NVIDIA 3D Vision Controller-Treiber 310.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 310.90 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5896 - NVIDIA Corporation)
NVIDIA Grafiktreiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
OLYMPUS Master 2 (HKLM-x32\...\{45FCADDB-0B29-457E-83A1-D245C62A716C}) (Version: 1.0.6 - OLYMPUS IMAGING CORP.)
OLYMPUS Studio 2 (HKLM-x32\...\{B48FE939-274D-401E-A7AB-E07FE22D268E}) (Version: 1.0.1 - OLYMPUS IMAGING CORP.)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice.org 3.4 (HKLM-x32\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org)
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{3DA20A12-AD9F-4A75-8A6F-5204EEB94359}) (Version: 2.0.5.16319 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Perfect Effects 8 (HKLM-x32\...\{C982ACFF-5997-4B7D-B3E1-CF7273A06FB2}) (Version: 8.1.0 - onOne Software)
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
QuickTime (HKLM-x32\...\{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}) (Version: 7.1.3.100 - Apple Computer, Inc.)
Rapture3D 2.4.8 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version:  - Blue Ripple Sound)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5969 - Realtek Semiconductor Corp.)
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Snapfish Fotobuch (HKLM-x32\...\Snapfish Fotobuch) (Version: 4.8.7 - CEWE COLOR AG u Co. OHG)
SNS-HDR Home v1.4.7 (HKLM\...\SNS-HDR Home_is1) (Version:  - Sebastian Nibisz)
SPEEDLINK Strike 2 Gamepad (HKLM-x32\...\{4999B2F1-3E74-409A-B8B5-E94448AA9EA6}) (Version: 2007.08.17 - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technologie (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.115.11 - Intel)
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 5.96 - NCH Software)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.00.3008 - Acer Incorporated)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. (OlyFirCam) OlyFirCam  (06/21/2007 2.2.0.0) (HKLM\...\1F83630F1D96893C47BCF19B627F1BBA13E0DAF7) (Version: 06/21/2007 2.2.0.0 - OLYMPUS IMAGING CORP.)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. (OlyUsbCam) OlyUsbCam  (12/28/2006 1.0.0.0) (HKLM\...\D4D93CD19C3E3B78F95D0606CD187BDE3317187F) (Version: 12/28/2006 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )
XnView 1.97.8 (HKLM-x32\...\XnView_is1) (Version: 1.97.8 - Gougelet Pierre-e)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

29-07-2014 18:40:41 Windows Update
03-08-2014 09:45:52 Windows Live Essentials
03-08-2014 09:47:14 DirectX wurde installiert
03-08-2014 09:47:29 DirectX wurde installiert
03-08-2014 09:48:01 DirectX wurde installiert
03-08-2014 09:48:42 WLSetup
05-08-2014 18:05:01 Windows Update
12-08-2014 19:49:54 Windows Update
14-08-2014 22:34:28 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2010-09-12 13:57 - 00000998 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 im.adtech.de
127.0.0.1 adserver.adtech.de
127.0.0.1 adtech.de
127.0.0.1 atwola.com
127.0.0.1 adserver.71i.de
127.0.0.1 adicqserver.71i.de
127.0.0.1 71i.de


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1D3EC243-4516-41F8-9788-68060E5BBCE0} - System32\Tasks\MT66 Software Update => C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe
Task: {26772D0A-C45B-4E63-8FC0-3B543364CBA1} - System32\Tasks\YourFile DownloaderInstaller Starter => C:\Users\Simon\AppData\Local\Temp\install20177888.exe <==== ATTENTION
Task: {5FC4D864-192E-440E-8D59-C5DCECEF212E} - System32\Tasks\McQcModifier-5c47-a7b0 => C:\ProgramData\McQcModifier-5c47-a7b0\McQcModifier-5c47-a7b0.cmd [2009-08-29] ()
Task: {80445868-281E-4E3C-9A7D-BA73A5CDDEF3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {8C978D4C-8390-45E6-A9F1-708B94A6297E} - System32\Tasks\{322260B1-F392-499E-B772-A33C68BA8981} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-05-08] (Skype Technologies S.A.)
Task: {A69099EA-A391-4809-A1CC-938D9D66D48E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {E55EAEFA-D851-4ED6-861C-4249E53A93E6} - System32\Tasks\NCH Software\WavePadSevenDays => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe
Task: {ED0DB406-8DF0-4C93-94EC-9C2E0A7F6D17} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MT66 Software Update.job => C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe

==================== Loaded Modules (whitelisted) =============

2010-08-27 08:49 - 2009-02-16 05:51 - 00247152 _____ () C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
2012-11-18 14:54 - 2013-01-18 17:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2009-08-18 09:27 - 2009-08-18 09:27 - 00629280 _____ () C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
2014-08-14 23:18 - 2014-08-07 04:06 - 00076800 _____ () C:\Windows\system32\CompatTel\CosQuery.dll
2009-02-03 03:33 - 2009-02-03 03:33 - 00460199 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2008-09-29 03:55 - 2008-09-29 03:55 - 01076224 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2009-08-18 09:31 - 2009-08-18 09:31 - 00163840 _____ () C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyHook.dll
2014-07-29 21:51 - 2014-07-29 21:51 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-07-09 13:00 - 2014-07-09 13:00 - 17029808 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll
2014-06-13 20:29 - 2014-06-13 20:29 - 03022960 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-06-13 20:29 - 2014-06-13 20:29 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-06-13 20:29 - 2014-06-13 20:29 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/15/2014 08:08:48 PM) (Source: MsiInstaller) (EventID: 1024) (User: Simon-PC)
Description: Produkt: Adobe Reader XI (11.0.07) - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011008}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (08/14/2014 09:20:40 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/14/2014 09:20:13 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (08/14/2014 09:17:47 PM) (Source: SideBySide) (EventID: 75) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (08/14/2014 08:52:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 31.0.0.5310, Zeitstempel: 0x53c75e91
Name des fehlerhaften Moduls: mozalloc.dll, Version: 31.0.0.5310, Zeitstempel: 0x53c72e91
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000141b
ID des fehlerhaften Prozesses: 0xdd8
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (08/14/2014 08:24:13 PM) (Source: MsiInstaller) (EventID: 1024) (User: Simon-PC)
Description: Produkt: Adobe Reader XI (11.0.07) - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011008}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (08/13/2014 10:18:48 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/13/2014 10:17:30 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/13/2014 10:07:24 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/13/2014 10:05:20 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (08/15/2014 08:09:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (08/15/2014 08:09:44 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (08/15/2014 08:09:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/15/2014 08:07:44 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem Fehler beendet: %%303.

Error: (08/15/2014 08:07:12 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Avira Planer" wurde mit folgendem dienstspezifischem Fehler beendet: %%305.

Error: (08/14/2014 08:24:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (08/14/2014 08:24:19 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (08/14/2014 08:24:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/14/2014 08:22:09 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem Fehler beendet: %%303.

Error: (08/14/2014 08:21:40 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Avira Planer" wurde mit folgendem dienstspezifischem Fehler beendet: %%305.


Microsoft Office Sessions:
=========================
Error: (08/15/2014 08:08:48 PM) (Source: MsiInstaller) (EventID: 1024) (User: Simon-PC)
Description: Adobe Reader XI (11.0.07) - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011008}1625(NULL)(NULL)(NULL)

Error: (08/14/2014 09:20:40 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (08/14/2014 09:20:13 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (08/14/2014 09:17:47 PM) (Source: SideBySide) (EventID: 75) (User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (08/14/2014 08:52:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe31.0.0.531053c75e91mozalloc.dll31.0.0.531053c72e91800000030000141bdd801cfb7ecc623d544C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll15c28883-23e4-11e4-82ee-00016c6eb9a2

Error: (08/14/2014 08:24:13 PM) (Source: MsiInstaller) (EventID: 1024) (User: Simon-PC)
Description: Adobe Reader XI (11.0.07) - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011008}1625(NULL)(NULL)(NULL)

Error: (08/13/2014 10:18:48 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Simon\Downloads\esetsmartinstaller_deu.exe

Error: (08/13/2014 10:17:30 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (08/13/2014 10:07:24 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\Users\Simon\downloads\esetsmartinstaller_deu.exe

Error: (08/13/2014 10:05:20 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz
Percentage of memory in use: 58%
Total physical RAM: 4087.08 MB
Available physical RAM: 1702.8 MB
Total Pagefile: 8172.34 MB
Available Pagefile: 5431.33 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:725.73 GB) (Free:466.15 GB) NTFS
Drive d: (DATA) (Fixed) (Total:657.76 GB) (Free:657.64 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: E3DC1B4F)
Partition 1: (Not Active) - (Size=14 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=726 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=658 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Task: {26772D0A-C45B-4E63-8FC0-3B543364CBA1} - System32\Tasks\YourFile DownloaderInstaller Starter => C:\Users\Simon\AppData\Local\Temp\install20177888.exe <==== ATTENTION
C:\Users\Simon\AppData\Local\Temp\install20177888.exe
cmd: type "C:\ProgramData\McQcModifier-5c47-a7b0\McQcModifier-5c47-a7b0.cmd"
AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-08-2014 01
Ran by Simon at 2014-08-18 20:10:10 Run:3
Running from C:\Users\Simon\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Task: {26772D0A-C45B-4E63-8FC0-3B543364CBA1} - System32\Tasks\YourFile DownloaderInstaller Starter => C:\Users\Simon\AppData\Local\Temp\install20177888.exe <==== ATTENTION
C:\Users\Simon\AppData\Local\Temp\install20177888.exe
cmd: type "C:\ProgramData\McQcModifier-5c47-a7b0\McQcModifier-5c47-a7b0.cmd"
AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE
         


*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{26772D0A-C45B-4E63-8FC0-3B543364CBA1}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{26772D0A-C45B-4E63-8FC0-3B543364CBA1}" => Key deleted successfully.
C:\Windows\System32\Tasks\YourFile DownloaderInstaller Starter => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YourFile DownloaderInstaller Starter" => Key deleted successfully.
"C:\Users\Simon\AppData\Local\Temp\install20177888.exe" => File/Directory not found.

=========  type "C:\ProgramData\McQcModifier-5c47-a7b0\McQcModifier-5c47-a7b0.cmd" =========

@echo off
tasklist > %temp%\mcqc_task.txt
for /f "skip=3 tokens=1" %%A in (%temp%\mcqc_task.txt) do (
    if /I "%%A"=="mcoemmgr.exe" ( goto BYPASS )
)
schtasks.exe /delete /TN "McQcTask" /F
:BYPASS
del /q %temp%\mcqc_task.txt
schtasks.exe /delete /TN "McQcModifier-5c47-a7b0" /F

========= End of CMD: =========

C:\Windows => ":nlsPreferences" ADS removed successfully.
C:\ProgramData\Temp => ":ABE89FFE" ADS removed successfully.

==== End of Fixlog ====